Ethernet
WAN
1 x WAN port 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX
LAN
4 x LAN ports, 10/100 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover

Network
Routing
Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy based routing
Network protocols
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL), VXLAN
VoIP passthrough support
H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection monitoring
Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection
Firewall
Port forward, traffic rules, custom rules, TTL target customisation
Firewall status page
View all your Firewall statistics, rules, and rule counters
Port management
View device ports, enable and disable each of them, turn auto-configuration on or off, change their transmission speed
Network topology
Visual representation of your network, showing which devices are connected
DHCP
Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards
QoS / Smart Queue Management (SQM)
Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
DDNS
Supported >77 service providers, others can be configured manually
DNS over HTTPS
DNS over HTTPS proxy enables secure DNS resolution by routing DNS queries over HTTPS
Network backup
VRRP, Wired options, automatic Failover
Load balancing
Balance Internet traffic over multiple WAN connections
Hotspot
Captive portal, internal/external Radius server, Radius MAC authentication, SMS authorisation, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, group limitations, user management, 9 default themes, custom hotspot themes supported
SSHFS
Mount remote file system via SSH protocol
Traffic Management
Real-time monitoring, wireless signal charts, traffic usage history

Security
Authentication
Pre-shared key, digital certificates, X.509 certificates, TACACS+, Internal & External RADIUS users authentication, IP & login attempts block, time-based login blocking, built-in random password generator
Firewall
Preconfigured firewall rules via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64
Attack prevention
DDOS prevention (SYN flood, SSH, HTTP/HTTPS), port scan prevention (SYN-FIN, SYN-RST, Xmas, NULL, FIN)
VLAN
Port and tag-based VLAN separation
Web filter
Blacklist for blocking sites, Whitelist for specifying allowed sites
Access control
Flexible access control of SSH, Web interface, CLI and Telnet
Certificate Manager
Create CA, server, client, Let’s Encrypt, SCEP certificates
802.1x
Port-based network access control server

VPN
OpenVPN
Multiple clients and a server simultaneously, 27 encryption methods
OpenVPN Encryption
DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
IPsec
XFRM, IKEv1, IKEv2, 14 encryption methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)
GRE
GRE tunnel, GRE over IPsec
PPTP, L2TP
Client/Server instances simultaneously, L2TPv3, L2TP over IPsec
Stunnel
TLS encryption wrapper for existing clients/servers
DMVPN
Scalable IPsec VPNs, Phase 2, Phase 3, Dual Hub support
SSTP
SSTP client instance support
ZeroTier
ZeroTier VPN client
WireGuard
WireGuard VPN client and server
Tinc
Encryption, authentication, compression; client/server support

Industrial protocols
OPC UA
Client, Server; TCP
Modbus
Client, Server; TCP, USB; custom register block requests; supported data formats: 8-bit INT, UINT; 16-bit INT, UINT; 32-bit float, INT, UINT (ABCD, DCBA, CDAB, BADC), HEX, ASCII
Data to Server
Protocols HTTP(S), MQTT, Azure MQTT; LUA scripting supported
MQTT Gateway
Modbus MQTT Gateway; send commands and receive data from Modbus Server via MQTT broker
DNP3
Station, Outstation; TCP, USB
DLMS/COSEM
DLMS Client; TCP, USB
API
Teltonika Networks Web API (beta) support

Monitoring & Management
Web UI
HTTP/HTTPS, status, configuration, FW update, CLI, troubleshooting, multi-log servers
FOTA
Firmware update from server, auto notification
SSH
SSH v1/v2
TR-069
Supported platforms: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly Tech, AVSystem
MQTT
Broker, Publisher
SNMP
v1, v2, v3; Trap; brute force protection
JSON-RPC
API over HTTP/HTTPS
RMS
Teltonika Remote Management System
IoT Platforms
Cumulocity, Azure IoT Hub (Direct methods, Plug and Play, DPS provisioning)

System Characteristics
CPU
Mediatek, 580 MHz, MIPS 24KEc
RAM
128 MB DDR2
Flash
16 MB serial NOR flash

Firmware / Configuration
Web UI
Update FW from file, server check, profiles, backup
FOTA
FW updates
RMS
Mass FW/config updates
Keep settings
FW updates without config loss
Factory reset
Restores default config
Customization
RutOS (OpenWrt), Busybox shell, Lua, C, C++; SDK, GPL customization, Package Manager

USB
USB 2.0; Samba share; USB-to-serial; external HDD, flash, modem, printer; FAT, FAT32, exFAT, NTFS (RO), ext2/3/4

Input / Output
2 x Configurable digital Inputs; 0–6 V = low, 8–30 V = high
2 x Configurable digital Outputs; Open collector, max 30 V, 300 mA
Events: Email, RMS; I/O juggler for automation

Power
Connector 4-pin DC socket
Input voltage 9–30 VDC; reverse polarity, surge protection
PoE Passive (optional hardware)
Consumption Idle <0.8 W, Max <3.8 W

Physical Interfaces
Ethernet 5 x RJ45 10/100 Mbps
I/O 2 x Configurable digital I/O
LEDs 1 x WAN, 4 x LAN, 1 x Power
Power 1 x 4-pin connector
USB 1 x USB-A
Reset Reboot/User default/Factory reset

Physical Specification
Casing Aluminium housing
Dimensions 100 x 30 x 85 mm
Weight 233 g
Mounting DIN rail, wall mount, flat surface (kit required)

Operating Environment
Temperature –40 °C to +75 °C
Humidity 10–90% non-condensing
Ingress protection IP30