MOBILE MODULE
The device supports 4G LTE Cat 6 up to 300 DL / 50 UL Mbps; 3G up to 42 DL / 5.76 UL Mbps.

3GPP RELEASE
Release 12.

ESIM
Consumer type eSIM, profile download and removal operations, supporting up to seven eSIM profiles. Data plans are not included.

SIM SWITCH
Supports dual SIM and eSIM with automatic switching. Switch triggers include weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, and SIM idle protection.

STATUS
Status reporting includes IMSI, ICCID, operator, operator state, data connection state, network type, CA indicator, bandwidth, connected band, signal strength (RSSI, SINR, RSRP, RSRQ, EC/IO, RSCP), data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, and MNC.

SMS
SMS status, SMS configuration, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP.

USSD
Supports sending and reading Unstructured Supplementary Service Data messages.

BLOCK / ALLOW LIST
Operator block or allow list by country or individual operators.

MULTIPLE PDN
Supports different PDNs for multiple network access and services.

BAND MANAGEMENT
Band lock and used band status display.

SIM IDLE PROTECTION SERVICE
Allows periodic switching to the unused SIM card to prevent SIM blocking.

SIM PIN CODE MANAGEMENT
Enables setting, changing, or disabling the SIM card’s PIN.

APN
Auto APN configuration.

BRIDGE
Direct connection (bridge) between mobile ISP and device on LAN.

PASSTHROUGH
Router assigns its mobile WAN IP address to another device on LAN.

ETHERNET
WAN: 1 x WAN port 10/100/1000 Mbps, compliant with IEEE 802.3, 802.3u, 802.3az standards, supports auto MDI/MDIX crossover.
LAN: 3 x LAN ports, 10/100/1000 Mbps, compliant with IEEE 802.3, 802.3u, 802.3az standards, supports auto MDI/MDIX crossover.

NETWORK
Routing: Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy-based routing.
Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL), VXLAN.
VoIP passthrough support: H.323 and SIP-alg protocol NAT helpers for proper VoIP packet routing.
Connection monitoring: Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection.
Firewall: Port forward, traffic rules, custom rules, TTL target customization.
Firewall status page: View all Firewall statistics, rules, and counters.
Port management: Enable/disable device ports, auto-configuration, change transmission speed, etc.
Network topology: Visual representation of network connectivity.
Hotspot: Captive portal, internal/external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, landing page, walled garden, user scripts, URL parameters, user groups, individual/group limits, 9 customizable themes, optional upload/download of custom themes.
DHCP: Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases (MAC with wildcards).
QoS / Smart Queue Management (SQM): Traffic priority by source/destination, service, protocol, port, WMM, 802.11e.
DDNS: Supported >77 service providers; others configurable manually.
DNS over HTTPS: Secure DNS resolution over HTTPS.
Network backup: Wi-Fi WAN, Mobile, VRRP, Wired options for automatic failover.
Load balancing: Balance Internet traffic over multiple WAN connections.
SSHFS: Mount remote file system via SSH.
VRF support: Initial VRF support.
Traffic Management: Real-time monitoring, wireless signal charts, traffic usage history.

SECURITY
802.1x: Port-based network access control client.
Authentication: Pre-shared key, digital certificates, X.509, TACACS+, Internal & External RADIUS, IP & login attempts block, time-based login block, built-in random password generator.
Firewall: Preconfigured firewall rules via WebUI, unlimited configuration via CLI, DMZ, NAT, NAT-T, NAT64.
Attack prevention: DDOS protection, port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks).
VLAN: Port and tag-based VLAN separation.
Mobile quota control: Mobile data limit, configurable period, start time, warning limit, phone number.
WEB filter: Blacklist and whitelist control.
Access control: Flexible SSH, Web interface, CLI, and Telnet access.
TPM: Identification and authentication module, TPM 2.0 standard.
Certificate Manager: Create CA, server, client, Let’s Encrypt, SCEP certificates.

VPN
OpenVPN: Multiple clients/server simultaneously, 27 encryption methods.
OpenVPN Encryption: DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256.
IPsec: XFRM, IKEv1, IKEv2, 14 encryption methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16).
GRE: GRE tunnel and GRE over IPsec support.
PPTP, L2TP: Client/Server instances simultaneously, L2TPv3, L2TP over IPsec support.
Stunnel: TLS encryption for existing clients/servers without code changes.
DMVPN: Scalable IPsec VPN, Phase 2 & 3, dual hub support.
SSTP: SSTP client instance support.
ZeroTier: VPN client support.
WireGuard: VPN client and server support.
Tinc: Encryption, authentication, and compression in tunnels, client/server support.
Tailscale: Encrypted point-to-point connections over WireGuard protocol.

OPC UA
Supported modes: Client, Server.
Supported connection types: TCP.

MODBUS
Supported modes: Server, Client.
Supported connection types: TCP, USB.
Custom registers: MODBUS TCP custom register block requests.
Supported data formats: 8-bit INT/UINT, 16-bit INT/UINT, 32-bit float/INT/UINT (ABCD, DCBA, CDAB, BADC), HEX, ASCII.

DATA TO SERVER
Protocol: HTTP(S), MQTT, Azure MQTT.
Data to server: Extract parameters from multiple sources/protocols to a single server; custom LUA scripting supported.
MQTT Gateway: Modbus MQTT Gateway for sending/receiving commands from MODBUS Server via MQTT broker.
DNP3: Station, Outstation; TCP, USB.
DLMS/COSEM: Client; TCP, USB.
API: Teltonika Networks Web API (beta) support.

MONITORING & MANAGEMENT
WEB UI: HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, multiple event log servers, event/system/kernel logs, Internet status.
FOTA: Firmware update from server with automatic notification.
SSH: v1, v2.
SMS: Status, configuration.
Call: Reboot, Status, Mobile data on/off, Output on/off, answer/hang-up with timer, Wi-Fi on/off.
TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem.
MQTT: Broker and publisher.
SNMP: v1/v2/v3, Trap, brute force protection.
JSON-RPC: Management API over HTTP/HTTPS.
RMS: Teltonika Remote Management System.
IoT Platforms: ThingWorx, Cumulocity, Azure IoT Hub, AWS IoT Core.

SYSTEM CHARACTERISTICS
CPU: Quad-core ARM Cortex A7, 717 MHz.
RAM: 256 MB DDR3.
FLASH storage: 256 MB SPI Flash.

FIRMWARE / CONFIGURATION
WEB UI: Update FW from file, check FW on server, configuration profiles, backup.
FOTA: Update FW.
RMS: Update FW/configuration for multiple devices.
Keep settings: Update FW without losing configuration.
Factory settings reset: Full factory reset restores all system settings.

FIRMWARE CUSTOMISATION
Operating system: RutOS (OpenWrt based Linux OS).
Supported languages: Busybox shell, Lua, C, C++.
Development tools: SDK package with build environment.
GPL customization: Custom branded firmware and web page application.
Package Manager: Install additional software on the device.

LOCATION TRACKING
GNSS: GPS, GLONASS, BeiDou, Galileo, QZSS.
Coordinates: WebUI, SMS, TAVL, RMS.
NMEA: 0183.
NTRIP: Supported.
Server software: TAVL, RMS.
Geofencing: Configurable multiple zones.

USB
Data rate: USB 2.0.
Applications: Samba share, USB-to-serial.
External devices: HDD, flash drive, additional modem, printer, USB-serial adapter.
Storage formats: FAT, FAT32, exFAT, NTFS (read-only), ext2, ext3, ext4.

INPUT / OUTPUT
Input: 1 x Digital Input, 0–6 V logic low, 8–30 V logic high.
Output: 1 x Digital Output, Open collector, max 30 V, 300 mA.
Events: Email, RMS, SMS.
I/O juggler: Initiates events based on conditions.

POWER
Connector: 4-pin industrial DC socket.
Input voltage range: 9–50 VDC, reverse polarity protection, surge/transient protection.
PoE (passive): LAN1 port, 9–50 VDC, Mode B, not compatible with IEEE802.3af/at/bt.
Power consumption: 9 W Max.

PHYSICAL INTERFACES
Ethernet: 4 x RJ45, 10/100/1000 Mbps.
I/O: 1 x Digital Input, 1 x Digital Output on 4-pin connector.
Status LEDs: 3 x WAN type, 2 x Mobile connection type, 5 x Mobile connection strength, 8 x LAN status, 3 x WAN status, 1 x Power.
SIM: 2 x SIM slots (Mini SIM 2FF), 1.8 V/3 V, external holders.
Power: 1 x 4-pin connector.
Antennas: 2 x SMA LTE, 1 x SMA GNSS.
USB: 1 x USB A port.
Reset: Reboot/User default/Factory reset button.
Other: 1 x Grounding screw.

PHYSICAL SPECIFICATION
Casing material: Aluminium.
Dimensions (W x H x D): 115 x 44.2 x 95.1 mm.
Weight: 455 g.
Mounting options: DIN rail, wall mount, flat surface (kit required).

OPERATING ENVIRONMENT
Operating temperature: -40 °C to 75 °C.
Operating humidity: 10%–90% non-condensing.
Ingress Protection Rating: IP30.

REGULATORY & TYPE APPROVALS
Regulatory: CE, UKCA, FCC, EAC, UCRF, CITC, ANRT, ICASA, NOM, RCM, IMDA, NTC, E-mark, UL/CSA Safety, CB, RoHS, REACH, IC (ISED), RCM.
Operator: Deutsche Telekom AG.

EMC EMISSIONS & IMMUNITY
Standards:
CE/UKCA: EN 55032:2015 + A11:2020 + A1:2020, EN 55035:2017 + A11:2020, EN IEC 61000-3-2:2019 + A1:2021 + A2:2024, EN 61000-3-3:2013 + A1:2019 + A2:2021, EN 301 489-1 V2.2.3, EN 301 489-19 V2.2.1, EN 301 489-52 V1.2.1
FCC/ISED(IC): 47 CFR Part 15 Subpart B, ICES-003 Issue 7 (October 2020)
RCM: AS/NZS CISPR 32:2015 + A1
ESD: EN 61000-4-2:2009
Radiated Immunity: EN 61000-4-3:2006 + A1:2008 + A2:2010, EN IEC 61000-4-3:2020
EFT: EN 61000-4-4:2012
Surge Immunity (AC Mains): EN 61000-4-5:2014 + A1:2017
CS: EN 61000-4-6:2014
DIP: EN 61000-4-11:2004, EN 61000-4-11:2020

RF STANDARDS
CE/UKCA: EN 303 413 V1.2.1, EN 301 908-1 V15.2.1, EN 301 908-2 V13.1.1, EN 301 908-13 V13.2.1
RCM: AS/CA S042.1:2022, AS/CA S042.4:2022

SAFETY
Standards: CE: EN IEC 62368-1:2020 + A11:2020, EN IEC 62311:2020; CB: IEC 62368-1:2018; RCM: AS/NZS 62368.1:2022