ETHERNET
| WAN |
1 x WAN port, 10/100 Mbps, compliance with IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX crossover |
| LAN |
4 x LAN ports (can be configured as secondary WAN ports), 10/100 Mbps, compliance with IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX crossover |
NETWORK
| Routing |
Static routes, Dynamic routes |
| Network protocols |
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, PPPoE, UPNP, SSH, DHCP, Telnet client, SNMP, MQTT, Wake on LAN (WOL) |
| VoIP passthrough support |
H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets |
| Connection monitoring |
Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection |
| Firewall |
Port forwards, traffic rules, NAT rules, custom rules |
| DHCP |
Static and dynamic IP allocation, DHCP Relay |
| QoS / Smart Queue Management (SQM) |
Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e |
| DDNS |
Supported >25 service providers, others can be configured manually |
| Network backup |
Wired WAN options, each of which can be used as an automatic Failover |
| Load balancing |
Balance Internet traffic over multiple WAN connections |
| SSHFS |
Possibility to mount remote file system via SSH protocol |
SECURITY
| Authentication |
Pre-shared key, digital certificates, X.509 certificates |
| Firewall |
Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T |
| Attack prevention |
DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) |
| VLAN |
Port and tag based VLAN separation |
| WEB filter |
Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only |
| Access control |
Flexible access control of TCP, UDP, ICMP packets, MAC address filter |
VPN
| OpenVPN |
Multiple clients and server can be running simultaneously, 12 encryption methods |
| OpenVPN Encryption |
DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC |
| IPsec |
IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256) |
| GRE |
GRE tunnel |
| PPTP, L2TP |
Client/Server instances can run simultaneously, L2TPv3 support |
| Stunnel |
Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs code |
| DMVPN |
Method of building scalable IPsec VPNs |
| SSTP |
SSTP client instance support |
| ZeroTier |
ZeroTier VPN |
MODBUS
MODBUS TCP SLAVE
| ID filtering |
Respond to one ID in range [1;255] or any |
| Allow Remote Access |
Allow access through WAN |
| Custom registers |
MODBUS TCP custom register block, which allows to read/write to a file inside the router, and can be used to extend MODBUS TCP slave functionality |
MODBUS TCP MASTER
| Supported functions |
01, 02, 03, 04, 05, 06, 15, 16 |
| Supported data formats |
8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII |
MQTT GATEWAY
| gateway |
Allows sending commands and receiving data from MODBUS Master through the MQTT broker |
DNP3
| Supported modes |
TCP Master, DNP3 Outstation |
DATA TO SERVER
| Protocols |
HTTP(S), MQTT, Azure MQTT, Kinesis |
MONITORING & MANAGEMENT
| WEB UI |
HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log |
| FOTA |
Firmware update from server, automatic notification |
| SSH |
SSH (v1, v2) |
| TR-069 |
OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem |
| MQTT |
MQTT Broker, MQTT publisher |
| SNMP |
SNMP (v1, v2, v3), SNMP trap |
| JSON-RPC |
Management API over HTTP/HTTPS |
| MODBUS |
MODBUS TCP status/control |
| RMS |
Teltonika Remote Management System (RMS) |
SYSTEM CHARACTERISTICS
| CPU |
QCA9531, MIPS 24kc, 650 MHz |
| RAM |
64 MB, DDR2 |
| FLASH storage |
16 MB, SPI Flash |
FIRMWARE / CONFIGURATION
| WEB UI |
Update FW from file, check FW on server, configuration profiles, configuration backup |
| FOTA |
Update FW/configuration from server |
| RMS |
Update FW/configuration for multiple devices at once |
| Keep settings |
Update FW without losing current configuration |
USB
| Data rate |
USB 2.0 |
| Applications |
Samba share, USB-to-serial |
| External devices |
Possibility to connect external HDD, flash drive, printer |
| Storage formats |
FAT, FAT32, NTFS |
INPUT/OUTPUT
| Configurable I/O |
2 x Configurable digital Inputs/Outputs. Digital input 0 - 5 V detected as logic low, 8 - 30 V detected as logic high. Open collector output, max output 30 V, 300 mA |
| Events |
Email, RMS |
| I/O juggler |
Allows to set certain I/O conditions to initiate event |
POWER
| Connector |
4 pin industrial DC power socket |
| Input voltage range |
7 - 30 VDC, reverse polarity protection, voltage surge/transient protection |
| PoE (passive) |
Passive PoE. Possibility to power up through LAN port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards |
| Power consumption |
Idle: 1.3 W, Max: 3 W |
PHYSICAL INTERFACES (PORTS, LEDS, ANTENNAS, BUTTONS, SIM)
| Ethernet |
5 x RJ45 ports, 10/100 Mbps |
| I/O❜s |
2 x Configurable digital Inputs/Outputs on 4 pin power connector |
| Status LEDs |
5 x ETH status, 1 x Power |
| Power |
1 x 4 pin DC connector |
| USB |
1 x USB A port for external devices |
| Reset |
Reboot/User default reset/Factory reset button |
PHYSICAL SPECIFICATIONS
| Casing material |
Aluminium housing with DIN rail mounting option |
| Dimensions (W x H x D) |
100 x 30 x 85 mm |
| Weight |
229 g |
| Mounting options |
DIN rail, flat surface placement |
OPERATING ENVIRONMENT
| Operating temperature |
-40°C to 75°C |
| Operating humidity |
10 % to 90 % non-condensing |
