MOBILE MODULE
The device supports 4G LTE Cat 12 with downlink up to 600 Mbps and uplink up to 150 Mbps. 3G connectivity offers up to 42 Mbps downlink and 11.2 Mbps uplink.

3GPP RELEASE
Release 12.

SIM SWITCH
Supports 2 SIM cards with automatic switching. Switch triggers include weak signal, data limit, SMS limit, roaming, no network, network denied, data connection failure, and SIM idle protection.

STATUS
Status monitoring includes IMSI, ICCID, operator, operator state, data connection state, network type, CA indicator, bandwidth, connected band, signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, and MNC.

SMS
Features include SMS status, SMS configuration, email to SMS, SMS to email, SMS to HTTP, SMS to SMS, scheduled SMS, SMS auto-reply, and SMPP.

USSD
Supports sending and reading Unstructured Supplementary Service Data messages.

BLOCK/ALLOW LIST
Operator block or allow list by country or individual operators.

MULTIPLE PDN
Supports different PDNs for multiple network access and services.

BAND MANAGEMENT
Includes band lock and used band status display.

SIM IDLE PROTECTION SERVICE
Allows the router to periodically switch to the unused SIM card and establish a data connection to prevent the SIM card from being blocked.

SIM PIN CODE MANAGEMENT
Enables setting, changing, or disabling the SIM card’s PIN.

APN
Supports auto APN configuration.

BRIDGE
Direct connection (bridge) between mobile ISP and device on LAN.

PASSTHROUGH
Router assigns its mobile WAN IP address to another device on LAN.

WIRELESS

Wireless Mode
802.11b/g/n/ac Wave 2 (Wi-Fi 5) with data rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition, Access Point (AP), Station (STA).

Wi-Fi Security
WPA2-Enterprise (PEAP), WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, Auto-cipher modes, client separation, EAP-TLS with PKCS#12 certificates, disable auto-reconnect, 802.11w Protected Management Frames (PMF).

SSID/ESSID
SSID stealth mode and access control based on MAC address.

Wi-Fi Users
Supports up to 150 simultaneous connections.

Wireless Connectivity Features
Wireless mesh (802.11s), fast roaming (802.11r), Relayd, BSS transition management (802.11v), radio resource measurement (802.11k).

Wireless MAC Filter
Allowlist, blocklist.

Wireless QR Code Generator
Users can scan QR code to automatically join the network without entering login credentials.

TravelMate
Forward Wi-Fi hotspot landing page to a subsequent connected device.

BLUETOOTH
Bluetooth 4.0 with low energy (LE) for short-range communication.

ETHERNET

WAN
1 x WAN port, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover.

LAN
4 x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover.

NETWORK

Routing
Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), policy-based routing.

Network Protocols
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On LAN (WOL), VXLAN.

VoIP Passthrough Support
H.323 and SIP-ALG protocol NAT helpers, allowing proper routing of VoIP packets.

Connection Monitoring
Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection.

FIREWALL
Port forward, traffic rules, custom rules, TTL target customization.

Firewall Status Page
View all firewall statistics, rules, and counters.

Port Management
View device ports, enable/disable them, configure auto-settings, and change transmission speed.

Network Topology
Visual representation of connected devices.

HOTSPOT
Captive portal, internal/external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, landing page options, walled garden, user scripts, URL parameters, user groups, individual or group limitations, 9 customizable themes, option to upload/download custom themes.

DHCP
Static and dynamic IP allocation, DHCP relay, server configuration, status, static leases with MAC wildcards.

QoS / Smart Queue Management (SQM)
Traffic priority queuing by source/destination, service, protocol, or port, WMM, 802.11e.

DDNS
Supported by 77+ service providers; others configurable manually.

DNS over HTTPS
Enables secure DNS resolution by routing queries over HTTPS.

Network Backup
Wi-Fi WAN, Mobile, VRRP, and Wired options with automatic failover.

Load Balancing
Balances Internet traffic over multiple WAN connections.

SSHFS
Mount remote filesystem via SSH protocol.

VRF Support
Initial virtual routing and forwarding support.

Traffic Management
Real-time monitoring, wireless signal charts, traffic usage history.

SECURITY

802.1X
Port-based network access control client.

Authentication
Pre-shared key, digital certificates, X.509 certificates, TACACS+, internal/external RADIUS authentication, IP & login block, time-based login blocking, built-in random password generator.

Firewall
Preconfigured rules via WebUI, unlimited rules via CLI, DMZ, NAT, NAT-T, NAT64.

Attack Prevention
DDOS prevention (SYN flood, SSH, HTTP/HTTPS), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL, FIN scan).

VLAN
Port and tag-based VLAN separation.

Mobile Quota Control
Mobile data limit, customizable period, start time, warning limit, phone number.

WEB Filter
Blacklist to block unwanted websites, whitelist to allow specific sites.

Access Control
Flexible control of SSH, Web interface, CLI, and Telnet access.

Certificate Manager
Create CA, server, client, Let’s Encrypt, and SCEP certificates.

VPN

OpenVPN
Multiple clients and server simultaneously, 27 encryption methods.

OpenVPN Encryption
DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256.

IPSec
XFRM, IKEv1, IKEv2, 14 encryption methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16).

GRE
GRE tunnel, GRE tunnel over IPsec support.

PPTP, L2TP
Client/server instances simultaneously, L2TPv3, L2TP over IPsec support.

Stunnel
Adds TLS encryption to existing clients and servers without code changes.

DMVPN
Scalable IPsec VPNs, Phase 2 & 3, dual hub support.

SSTP
SSTP client instance support.

ZeroTier
VPN client support.

WireGuard
VPN client and server support.

Tinc
Encryption, authentication, and compression in tunnels; client/server support.

Tailscale
Encrypted point-to-point connections using WireGuard protocol.

OPC UA
Supported modes: Client, Server. Connection types: TCP.

MODBUS
Supported modes: Server, Client. Connection types: TCP, USB. Custom registers supported. Data formats: 8-bit INT/UINT, 16-bit INT/UINT, 32-bit float/INT/UINT, HEX, ASCII.

DATA TO SERVER
Protocols: HTTP(S), MQTT, Azure MQTT. Extract parameters from multiple sources and send to single server. Supports custom LUA scripts.

MQTT Gateway
MODBUS MQTT Gateway to send/receive data from MODBUS server via MQTT broker.

DNP3
Supported modes: Station, Outstation. Connection: TCP, USB.

DLMS/COSEM
DLMS client support via TCP or USB.

API
Teltonika Networks Web API (beta) for device management: https://developers.teltonika-networks.com.

MONITORING & MANAGEMENT

WEB UI
HTTP/HTTPS interface for status, configuration, firmware update, CLI, troubleshooting, event logs.

FOTA
Firmware update from server with automatic notification.

SSH
Supports SSH v1 and v2.

SMS
SMS status and configuration.

CALL
Reboot, status, mobile data on/off, output on/off, answer/hang-up with timer, Wi-Fi on/off.

TR-069
Supports OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem.

MQTT
MQTT broker and publisher.

SNMP
SNMP v1/v2/v3, SNMP trap, brute force protection.

JSON-RPC
Management API over HTTP/HTTPS.

RMS
Teltonika Remote Management System support.

IoT PLATFORMS
ThingWorx, Cumulocity, Azure IoT Hub, AWS IoT Core support with monitoring, API calls, and device management.

SYSTEM CHARACTERISTICS
CPU: Quad-core ARM Cortex A7, 717 MHz. RAM: 256 MB DDR3. FLASH: 256 MB SPI.

FIRMWARE / CONFIGURATION
WEB UI: Firmware update, configuration profiles, backup. FOTA: Firmware update. RMS: Multi-device update. Keep settings: Update firmware without losing configuration. Factory reset: Full reset to default settings.

FIRMWARE CUSTOMISATION
Operating system: RutOS (OpenWrt based). Languages: Busybox shell, Lua, C, C++, Python, Java. Development tools: SDK package. GPL customization: Create branded firmware/web page. Package manager: Install additional software.

LOCATION TRACKING
GNSS: GPS, GLONASS, BeiDou, Galileo, QZSS. Coordinates via WebUI, SMS, TAVL, RMS. NMEA 0183. NTRIP support. Server software: TAVL, RMS. Geofencing: Configurable multiple zones.

USB
USB 2.0, supports Samba share, USB-to-serial, external HDD, flash, modem, printer, USB-serial adapter. Storage formats: FAT, FAT32, exFAT, NTFS (read-only), ext2/3/4.

INPUT / OUTPUT
1 x Digital Input (0–6 V low, 8–30 V high). 1 x Digital Output (Open collector, max 30 V, 300 mA). Event triggers via email, RMS, SMS. I/O juggler for conditional events.

POWER
4-pin industrial DC socket, 9–50 VDC, reverse polarity and surge protection. PoE (passive) via LAN1 port (9–50 VDC). Power consumption: Idle <4 W, Max <22 W.

PHYSICAL INTERFACES
Ethernet: 5 x RJ45. I/O: 1 x Digital Input, 1 x Digital Output. LEDs: connection, signal strength, Ethernet, WAN, power, Wi-Fi. SIM: 2 x Mini SIM slots. Antennas: 4 x SMA LTE, 2 x RP-SMA Wi-Fi, 1 x RP-SMA Bluetooth, 1 x SMA GNSS. USB: 1 x USB A. Reset: Reboot/User default/Factory reset. Grounding screw: 1 x.

PHYSICAL SPECIFICATION
Casing: Full aluminium. Dimensions: 132 x 44 x 95 mm. Weight: 515 g. Mounting: DIN rail, wall, flat surface (kit required).

OPERATING ENVIRONMENT
Temperature: -40 °C to 75 °C. Humidity: 10–90% non-condensing. IP rating: IP30.

REGULATORY & TYPE APPROVALS
CE, UKCA, RCM, UCRF, CITC, Kenya, ICASA, ANRT, NTC, SIRIM, GCF, CB, RoHS, REACH.

EMC EMISSIONS & IMMUNITY
Standards: EN 55032:2015 + A1:2020, EN 55035:2017 + A11:2020, EN IEC 61000-3-2:2019, EN 61000-3-3:2013 + A1:2019, EN 301 489-1 V2.2.3, EN 301 489-17 V3.2.4, Draft EN 301 489-19 V2.2.0, Draft EN 301 489-52 V1.1.2.
ESD: EN 61000-4-2:2009. Radiated Immunity: EN IEC 61000-4-3:2020. EFT: EN 61000-4-4:2012. Surge (AC Mains): EN 61000-4-5:2014 + A1:2017. CS: EN 61000-4-6:2014. DIP: EN IEC 61000-4-11:2020.

RF STANDARDS
EN 300 328 V2.2.2, EN 301 893 V2.1.1, EN 300 440 V2.2.1, EN 301 908-1 V13.1.1, EN 301 908-2 V13.1.1, EN 301 908-13 V13.1.1, EN 303 413 V1.1.1.

SAFETY STANDARDS
CE: EN 62368-1:2014 + A11:2017, EN 62232:2017, EN 50385:2017. UL/CSA Safety: UL 62368-1 (3rd Ed., Rev. Dec 13, 2019), CAN/CSA C22.2 No. 62368-1:19 (3rd Ed., Rev. Dec 13, 2019). CB: IEC 62368-1:2018.