MOBILE MODULE
The device supports 5G Sub-6 GHz SA/NSA with download speeds of 2.4/3.4 Gbps DL (4×4 MIMO) and upload speeds of 900/550 Mbps UL (2×2 MIMO). 4G LTE provides Cat 19 downlink up to 1.6 Gbps and Cat 18 uplink up to 200 Mbps. 3G connectivity offers 42 Mbps downlink and 5.76 Mbps uplink.

3GPP RELEASE
Release 16.

STATUS
Status reporting includes IMSI, ICCID, operator, operator state, data connection state, network type, carrier aggregation indicator, bandwidth, connected band, signal strength (RSSI, SINR, RSRP, RSRQ, EC/IO, RSCP), data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, and MNC.

SMS
Supports SMS status, SMS configuration, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, and SMPP.

USSD
Supports sending and reading Unstructured Supplementary Service Data messages.

BLOCK / ALLOW LIST
Operator block or allow list by country or individual operators.

BAND MANAGEMENT
Includes band lock and used band status display.

SIM PIN CODE MANAGEMENT
Enables setting, changing, or disabling the SIM card’s PIN.

APN
Automatic APN detection and configuration.

BRIDGE
Provides a direct connection (bridge) between the mobile ISP and a LAN device.

PASSTHROUGH
Router assigns its mobile WAN IP address to another device on the LAN.

FRAMED ROUTING
Supports IP networks behind the 5G UE.

ETHERNET
One ETH port 10/100/1000/2500 Mbps, compliant with IEEE 802.3, 802.3u, and 802.3az standards. Supports auto MDI/MDIX crossover.

NETWORK ROUTING
Supports static routing and dynamic routing including BGP, OSPF v2, RIP v1/v2, EIGRP, and NHRP. Policy-based routing is supported.

NETWORK PROTOCOLS
Supports TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP(S), FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On LAN (WOL), and VXLAN.

VOIP PASSTHROUGH SUPPORT
H.323 and SIP-ALG NAT helpers allow proper routing of VoIP packets.

CONNECTION MONITORING
Includes ping reboot, wget reboot, periodic reboot, LCP, and ICMP link inspection.

FIREWALL
Supports port forwarding, traffic rules, custom rules, and TTL target customization.

FIREWALL STATUS PAGE
Provides a view of all firewall statistics, rules, and rule counters.

PORT MANAGEMENT
Enables viewing, enabling, disabling, auto-configuration, and changing transmission speed of device ports.

NETWORK TOPOLOGY
Provides a visual representation of the network showing connected devices.

DHCP
Supports static and dynamic IP allocation, DHCP relay, DHCP server configuration, status monitoring, and static leases with MAC wildcards.

QOS / SMART QUEUE MANAGEMENT (SQM)
Traffic priority queuing by source, destination, service, protocol, or port. Supports WMM and 802.11e.

DDNS
Supported with over 77 service providers; others can be configured manually.

DNS OVER HTTPS
Enables secure DNS resolution by routing DNS queries over HTTPS.

NETWORK BACKUP
Supports Mobile, VRRP, and wired options with automatic failover.

LOAD BALANCING
Balances Internet traffic across multiple WAN connections.

HOTSPOT
Captive portal with internal or external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, customizable landing pages, walled garden, user scripts, URL parameters, user groups, limitations per user or group, 9 default themes, and optional custom hotspot themes.

SSHFS
Supports mounting remote file systems via SSH protocol.

VRF SUPPORT
Provides initial Virtual Routing and Forwarding support.

TRAFFIC MANAGEMENT
Includes real-time monitoring and traffic usage history.

IGMP PROXY
Relays multicast membership messages between hosts and routers, enabling multicast traffic across different network segments.

SECURITY – AUTHENTICATION
Supports pre-shared key, digital certificates, X.509, TACACS+, internal and external RADIUS authentication, IP/login attempt blocking, time-based login restrictions, and built-in random password generator.

SECURITY – FIREWALL
Preconfigured firewall rules can be enabled via WebUI. Unlimited firewall customization via CLI. Supports DMZ, NAT, NAT-T, and NAT64.

ATTACK PREVENTION
Provides DDoS protection (SYN flood, SSH, HTTP/HTTPS attacks) and port scan prevention (SYN-FIN, SYN-RST, Xmas, NULL, FIN scans).

VLAN
Supports port and tag-based VLAN separation.

MOBILE QUOTA CONTROL
Allows customizable data limits with configurable period, start time, warning limit, and phone number association.

WEB FILTER
Supports blacklist for blocking websites and whitelist for allowed sites only.

ACCESS CONTROL
Provides flexible control for SSH, web interface, CLI, and Telnet access.

CERTIFICATE MANAGER
Enables creating CA, server, client, Let’s Encrypt, and SCEP certificates.

VPN
Supports OpenVPN with multiple clients and server instances, offering 27 encryption methods. Supports IPsec (IKEv1/v2), GRE, PPTP, L2TP, Stunnel, DMVPN, SSTP, ZeroTier, WireGuard, Tinc, and Tailscale.

OPENVPN ENCRYPTION
Supports DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256.

IPSEC
Supports XFRM, IKEv1, IKEv2 with 14 encryption methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16).

GRE
Supports GRE tunnel and GRE tunnel over IPsec.

PPTP / L2TP
Client and server instances supported simultaneously. L2TPv3 and L2TP over IPsec supported.

STUNNEL
Adds TLS encryption functionality to existing clients and servers without code changes.

DMVPN
Supports scalable IPsec VPNs with Phase 2, Phase 3, and dual hub support.

SSTP
Supports SSTP client instance.

ZEROTIER
ZeroTier VPN client support.

WIREGUARD
WireGuard VPN client and server support.

TINC
Supports encryption, authentication, and compression with client and server instances.

TAILSCALE
Provides encrypted point-to-point connections using WireGuard protocol with speed, stability, and simplicity.

OPC UA
Supports Client and Server modes over TCP.

MODBUS
Supports Client and Server modes over TCP with custom register block requests. Supports data formats: 8-bit INT/UINT, 16-bit INT/UINT (MSB/LSB first), 32-bit float/INT/UINT (ABCD, DCBA, CDAB, BADC), HEX, ASCII.

DATA TO SERVER
Supports HTTP(S), MQTT, and Azure MQTT. Extracts parameters from multiple sources and sends to a single server. Supports custom LUA scripting.

MQTT GATEWAY
Modbus MQTT Gateway allows sending commands and receiving data from MODBUS server via MQTT broker.

DNP3
Supports DNP3 Station and Outstation over TCP.

DLMS / COSEM
Supports DLMS client mode over TCP for utility meter data exchange.

API
Supports Teltonika Networks Web API with configurable endpoints for data retrieval and control.

MONITORING & MANAGEMENT – WEB UI
Provides HTTP/HTTPS access, status, configuration, firmware updates, CLI, troubleshooting, event logs, and internet status.

FOTA
Firmware update from server with automatic notifications.

SSH
Supports SSH v1 and v2.

SMS
Supports SMS status and configuration.

CALL
Supports reboot, status check, mobile data on/off, output on/off, and answer/hang-up with timer.

EMAIL
Receives email alerts for various services.

TR-069
Supports multiple ACS implementations including OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, and AVSystem.

MQTT
Supports MQTT broker and publisher functionality.

SNMP
Supports SNMP v1, v2, v3, SNMP Trap, and brute force protection.

JSON-RPC
Management API over HTTP/HTTPS.

RMS
Supports Teltonika Remote Management System (RMS).

IOT PLATFORMS – THINGWORX
Allows monitoring of WAN type, WAN IP, mobile operator, mobile signal strength, and mobile network type.

CUMULOCITY – CLOUD OF THINGS
Monitors device model, revision, serial number, WAN type/IP, mobile cell ID, ICCID, IMEI, connection type, operator, and signal strength. Supports reboot and firmware upgrades.

AZURE IOT HUB
Integrates with Data to Server to send parameters to cloud. Supports direct methods and Plug and Play integration with Device Provisioning Service.

AWS IOT CORE
Supports interaction with AWS cloud, including jobs for calling device API via AWS Jobs functionality.

SYSTEM CHARACTERISTICS – CPU
Qualcomm Single-Core 1.5 GHz ARM Cortex-A7.

RAM
512 MB.

FLASH STORAGE
512 MB.

FIRMWARE / CONFIGURATION – WEB UI
Supports firmware update from file, server check, configuration profiles, and backup.

FOTA
Firmware update support.

RMS
Supports firmware/configuration updates for multiple devices.

KEEP SETTINGS
Firmware update without losing current configuration.

FACTORY SETTINGS RESET
Restores all system settings to default, including IP, PIN, and user data.

FIRMWARE CUSTOMISATION – OPERATING SYSTEM
RutOS (OpenWrt-based Linux OS).

SUPPORTED LANGUAGES
Busybox shell, Lua, C, C++.

DEVELOPMENT TOOLS
SDK package with build environment.

GPL CUSTOMIZATION
Custom firmware and web page branding by changing colors, logos, and other elements.

PACKAGE MANAGER
Installs additional software on the device.

INPUT / OUTPUT – CONFIGURABLE I/O
Two digital inputs/outputs on 4-pin power connector. Digital Input: 0–6 V logic low, 8–50 V logic high. Digital Output: open collector, max 30 V, 300 mA.

EVENTS
Email, RMS, SMS alerts.

I/O JUGGLER
Sets conditions to initiate events.

POWER – CONNECTOR
4-pin industrial DC power socket.

INPUT VOLTAGE RANGE
9–30 VDC with overvoltage, reverse polarity, and surge protection (>51 VDC, 10 µs max).

POE (PASSIVE)
Supports powering via ETH port (Mode B, 9–30 VDC), not compatible with IEEE 802.3af/at/bt standards.

POWER CONSUMPTION
Idle: <1.5 W, Max: <5 W.

PHYSICAL INTERFACES – ETHERNET
1 x RJ45 port, 10/100/1000/2500 Mbps.

I/O
2 x digital I/O on 4-pin power connector.

STATUS LEDS
3 connection type LEDs, 3 signal strength LEDs, 2 ETH status LEDs, 1 power LED.

SIM
1 x Mini SIM (2FF), 1.8 V/3 V, external holder.

POWER
1 x 4-pin connector.

ANTENNAS
4 x SMA for mobile.

USB
1 x virtual network interface via micro USB.

RESET
Reboot, user default reset, factory reset button.

OTHER
1 x grounding screw.

PHYSICAL SPECIFICATION – CASING MATERIAL
Anodized aluminum housing and panels.

DIMENSIONS
100 × 30 × 93.4 mm.

WEIGHT
241 g.

MOUNTING OPTIONS
DIN rail, wall mount, flat surface (requires additional kit).

OPERATING ENVIRONMENT – TEMPERATURE
-40 °C to 75 °C.

HUMIDITY
10% to 90% non-condensing.

INGRESS PROTECTION RATING
IP30.

REGULATORY & TYPE APPROVALS – REGULATORY
CE, UKCA, RCM, CB, EAC, UCRF, WEEE.

VEHICLE
E-mark certified.

EMC EMISSIONS & IMMUNITY – STANDARDS
EN 55032:2015 + A11:2020 + A1:2020, EN 55035:2017 + A11:2020, EN 61000-3-3:2013 + A1:2019 + A2:2021, EN IEC 61000-3-2:2019 + A1:2021 + A2:2024, EN 301 489-1 V2.2.3, EN 301 489-52 V1.2.1, AS/NZS CISPR 32:2015 + A1:2020.

ESD
EN 61000-4-2:2009.

RADIATED IMMUNITY
EN IEC 61000-4-3:2020.

EFT
EN 61000-4-4:2012.

SURGE IMMUNITY (AC MAINS POWER PORT)
EN 61000-4-5:2014 + A1:2017.

CS
EN 61000-4-6:2014.

DIP
EN 61000-4-11:2020.

RF STANDARDS
EN 301 908-1 V15.2.1, EN 301 908-2 V13.1.1, EN 301 908-13 V13.2.1, Draft EN 301 908-25 V15.1.1_0.0.21, AS/CA S042.1:2022, AS/CA S042.4:2022, AS/CA S042.5:2022 + A1:2022, 47 CFR Part 22.

SAFETY STANDARDS
EN IEC 62311:2020, EN IEC 62368-1:2020 + A11:2020, AS/NZS 2772.2:2016 + A1:2018.