MOBILE MODULE
The device supports 4G LTE Cat 4 with downlink speeds up to 150 Mbps and uplink speeds up to 50 Mbps. 3G connectivity offers up to 21 Mbps downlink and 5.76 Mbps uplink, while 2G supports up to 236.8 kbps for both downlink and uplink.

3GPP RELEASE
Release 9.

STATUS AND MONITORING
Status reporting includes IMSI, ICCID, operator, operator state, data connection state, network type, bandwidth, connected band, and signal strength parameters including RSSI, SINR, RSRP, RSRQ, EC/IO, and RSCP. Additional monitoring covers data sent and received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, and MNC.

SMS
Supports SMS status, SMS configuration, email-to-SMS, SMS-to-email, SMS-to-HTTP, SMS-to-SMS, scheduled SMS, SMS auto-reply, and SMPP.

USSD
Supports sending and reading Unstructured Supplementary Service Data messages.

BLOCK AND ALLOW LIST
Operator block or allow list configurable by country or individual operators.

MULTIPLE PDN
Supports different PDNs for multiple network access and services.

BAND MANAGEMENT
Includes band lock and used band status display.

SIM IDLE PROTECTION SERVICE
Configurable to periodically switch to the unused SIM card to establish a data connection and prevent SIM blocking.

SIM PIN CODE MANAGEMENT
Enables setting, changing, or disabling the SIM card’s PIN.

APN
Supports automatic APN detection and configuration.

BRIDGE AND PASSTHROUGH
Provides direct connection between the mobile ISP and LAN devices. Passthrough mode assigns the router’s mobile WAN IP address to LAN devices.

WIRELESS

Wireless Mode
Supports 802.11b/g/n (Wi-Fi 4) in Access Point (AP) and Station (STA) modes.

Wi-Fi Security
Supports WPA2-Enterprise (PEAP), WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, and OWE with AES-CCMP, TKIP, auto-cipher modes, client separation, EAP-TLS with PKCS#12 certificates, disable auto-reconnect, and 802.11w Protected Management Frames (PMF).

SSID/ESSID
Supports SSID stealth mode and MAC-based access control.

Wi-Fi Users
Supports up to 100 simultaneous connections.

Wireless Connectivity Features
Includes wireless mesh (802.11s), fast roaming (802.11r), Relayd, BSS transition management (802.11v), and radio resource measurement (802.11k).

Wireless MAC Filter
Supports allowlist and blocklist options.

Wireless QR Code Generator
Generates QR codes for automatic network access without login credentials.

TravelMate
Forwards Wi-Fi hotspot landing pages to connected devices.

ETHERNET

WAN
One WAN port, 10/100 Mbps, compliant with IEEE 802.3, 802.3u, and 802.3az standards, supporting auto MDI/MDIX.

LAN
Three LAN ports, 10/100 Mbps, compliant with IEEE 802.3 and 802.3u standards, supporting auto MDI/MDIX.

NETWORK

Routing
Supports static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), and policy-based routing.

Network Protocols
Supports TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake on LAN, and VXLAN.

VoIP Passthrough Support
Supports H.323 and SIP-ALG NAT helpers for proper routing of VoIP packets.

Connection Monitoring
Supports ping reboot, wget reboot, periodic reboot, LCP, and ICMP link inspection.

Firewall
Supports port forwarding, traffic rules, custom rules, and TTL target customization.

Firewall Status Page
Provides statistics, rules, and rule counters.

Port Management
Allows enabling/disabling ports, auto-configuration, and transmission speed adjustments.

Network Topology
Provides visual representation of connected devices.

Hotspot
Supports captive portal with internal/external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, customizable landing pages, walled garden, user scripts, URL parameters, user groups, individual user/group limitations, user management, nine default themes, and custom theme upload/download support.

DHCP
Supports static and dynamic IP allocation, DHCP relay, server configuration, status monitoring, and static leases with MAC wildcards.

QoS / Smart Queue Management (SQM)
Provides traffic prioritization by source/destination, service, protocol, or port. Supports WMM and 802.11e.

Dynamic DNS
Supports over 77 service providers with manual configuration for others.

DNS over HTTPS
Supports secure DNS resolution via HTTPS proxy.

Network Backup and Failover
Supports Wi-Fi WAN, Mobile, VRRP, and wired options with automatic failover.

Load Balancing
Balances Internet traffic across multiple WAN connections.

SSHFS
Supports mounting remote file systems via SSH protocol.

Traffic Management
Includes real-time monitoring, wireless signal charts, and traffic usage history.

Port Mirroring
Mirrors network traffic on Ethernet ports for monitoring and analysis.

SECURITY

Authentication
Supports pre-shared key, digital certificates, X.509, TACACS+, internal/external RADIUS authentication, IP/login attempt blocking, time-based login restrictions, and built-in random password generator.

Firewall (Advanced)
Supports preconfigured rules via WebUI and unlimited configuration via CLI, including DMZ, NAT, NAT-T, and NAT64.

Attack Prevention
Provides DDoS protection against SYN flood, SSH, HTTP/HTTPS attacks, and prevents port scans including SYN-FIN, SYN-RST, Xmas, NULL flags, and FIN scans.

VLAN
Supports port and tag-based VLAN separation.

Mobile Quota Control
Supports customizable data limits with period, start time, warning thresholds, and phone number association.

Web Filter
Supports blacklist and whitelist for website access control.

Access Control
Provides flexible control for SSH, web interface, CLI, and Telnet access.

Certificate Manager
Supports creation of CA, server, client, Let’s Encrypt, and SCEP certificates.

VPN

OpenVPN
Supports multiple clients and server simultaneously with 27 encryption methods.

OpenVPN Encryption
DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256.

IPsec
Supports XFRM, IKEv1, IKEv2 with 14 encryption methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16).

GRE
Supports GRE tunnels including GRE over IPsec.

PPTP, L2TP
Client and server instances supported; includes L2TPv3 and L2TP over IPsec.

Stunnel
Proxy to add TLS encryption functionality without modifying client/server code.

DMVPN
Supports Phase 2 and Phase 3 scalable IPsec VPNs with dual hub support.

SSTP
Client instance support.

ZeroTier
Client support.

WireGuard
Supports client and server.

Tinc
Provides encryption, authentication, and compression for tunnels with client and server support.

INDUSTRIAL PROTOCOLS

MODBUS
Supports client and server modes over TCP, with custom register blocks, supporting 8-bit, 16-bit, and 32-bit data formats (INT, UINT, float, HEX, ASCII).

DATA TO SERVER
Supports HTTP(S), MQTT, Azure MQTT; allows parameter extraction from multiple sources and protocols, with custom LUA scripting support.

MQTT Gateway
Supports Modbus MQTT Gateway for communication with MODBUS Server via MQTT broker.

DNP3
Supports station and outstation modes over TCP.

DLMS/COSEM
Supports client mode over TCP for utility meter data exchange.

API
Supports Teltonika Networks Web API (beta) with configurable endpoints. Documentation: https://developers.teltonika-networks.com

MONITORING AND MANAGEMENT

Web UI
HTTP/HTTPS interface with status, configuration, FW update, CLI access, troubleshooting, multiple log servers, event, system, kernel logs, and Internet status.

FOTA
Firmware updates from server with automatic notifications.

SSH
Supports SSH v1 and v2.

SMS
SMS status and configuration.

Call
Supports reboot, mobile data on/off, output on/off, answer/hang-up with timer, Wi-Fi on/off.

TR-069
Supports OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, and AVSystem.

MQTT
Supports MQTT broker and publisher.

SNMP
Supports SNMP v1/v2/v3, SNMP Trap, and brute-force protection.

JSON-RPC
Management API over HTTP/HTTPS.

RMS
Supports Teltonika Remote Management System (RMS).

IoT Platforms

ThingWorx
Monitoring of WAN type, WAN IP, mobile operator, mobile signal strength, and network type.

Cumulocity
Monitors device model, revision, serial number, WAN type and IP, mobile cell ID, ICCID, IMEI, operator, and signal strength, with reboot and firmware upgrade actions.

Azure IoT Hub
Supports Data to Server integration, direct method support, and Device Provisioning Service for zero-touch provisioning.

AWS IoT Core
Allows API interaction via AWS Jobs functionality.

SYSTEM CHARACTERISTICS

CPU
MediaTek 580 MHz, MIPS 24KEc.

RAM
128 MB DDR2.

FLASH Storage
16 MB SPI Flash.

Firmware / Configuration

Web UI
Supports firmware updates, configuration profiles, and backup.

FOTA
Supports firmware update.

RMS
Update firmware/configuration for multiple devices simultaneously.

Keep Settings
Supports firmware update without losing current configuration.

Factory Settings Reset
Full factory reset restores all system settings, including IP address, PIN, and user data to default configuration.

FIRMWARE CUSTOMIZATION

Operating System
RutOS (OpenWrt-based Linux OS).

Supported Languages
Busybox shell, Lua, C, C++.

Development Tools
SDK package with build environment.

GPL Customization
Supports branded firmware and Web UI customization.

Package Manager
Allows installation of additional software.

INPUT / OUTPUT

Input
1 digital input, 0–6 V logic low, 8–30 V logic high.

Output
1 digital output, open collector, max 30 V, 300 mA.

Events
Supports email, RMS, and SMS alerts.

I/O Juggler
Configurable conditions to trigger events.

POWER

Connector
4-pin industrial DC power socket.

Input Voltage Range
9–30 VDC with reverse polarity protection; surge protection up to 31 VDC for 10 µs.

PoE (Passive)
Supports passive PoE via LAN1, 9–30 VDC; not compatible with IEEE 802.3af/at/bt.

Power Consumption
<2 W idle, <7 W maximum.

PHYSICAL INTERFACES

Ethernet
4 RJ45 ports, 10/100 Mbps.

I/O
1 digital input, 1 digital output via 4-pin connector.

Status LEDs
1 bi-color connection status, 5 mobile strength, 4 Ethernet, 1 power.

SIM
2 Mini SIM (2FF) slots, 1.8/3 V, external SIM holders; eSIM optional.

Power
1 4-pin connector.

Antennas
2 SMA LTE, 2 RP-SMA Wi-Fi.

Reset
Reboot/user default/factory reset button.

PHYSICAL SPECIFICATION

Casing Material
Aluminium housing with plastic panels.

Dimensions (W × H × D)
110 × 50 × 100 mm.

Weight
297 g.

Mounting Options
DIN rail, wall mount, or flat surface (requires kit).

Operating Environment

Operating Temperature
-40 °C to 75 °C.

Operating Humidity
10%–90% non-condensing.

Ingress Protection Rating
IP30.

REGULATORY & TYPE APPROVALS

Regulatory
CE, UKCA, IMDA, Anatel, RCM, E-mark, ECE R118, CB, RoHS, REACH, NCC.

EMC Emissions & Immunity Standards
EN 55032:2015 + A11:2020 + A1:2020, EN 55035:2017 + A11:2020, EN IEC 61000-3-2:2019 + A1:2021, EN 61000-3-3:2013 + A1:2019 + A2:2021, EN 301 489-1 V2.2.3, EN 301 489-17 V3.2.4, EN 301 489-52 V1.2.1.

ESD
EN 61000-4-2:2009.

Radiated Immunity
EN IEC 61000-4-3:2020.

EFT
EN 61000-4-4:2012.

Surge Immunity (AC Mains Port)
EN 61000-4-5:2014 + A1:2017.

CS
EN 61000-4-6:2014.

DIP
EN 61000-4-11:2020.

RF Standards
EN 300 328 V2.2.2, EN 301 511 V12.5.1, EN 301 908-1 V15.1.1, EN 301 908-2 V13.1.1, EN 301 908-13 V13.1.1.

Performance Specifications
CE: EN IEC 62368-1:2020 + A11:2020, EN IEC 62311:2020, EN 50665:2017.
CB: IEC 62368-1:2018.
RCM: AS/NZS 62368.1:2022.