Teltonika RUT951PoE+ INDUSTRIAL PoE+ CELLULAR ROUTER
Features
| MOBILE | |
|---|---|
| MOBILE MODULE | 4G LTE CAT 4 UP TO 150 DL / 50 UL MBPS; 3G UP TO 21 DL / 5.76 UL MBPS; 2G UP TO 236.8 DL / 236.8 UL KBPS |
| 3GPP RELEASE | RELEASE 10 / 11 DEPENDING ON THE HARDWARE VERSION |
| SIM SWITCH | 2 SIM CARDS, AUTO-SWITCH CASES: WEAK SIGNAL, DATA LIMIT, SMS LIMIT, ROAMING, NO NETWORK, NETWORK DENIED, DATA CONNECTION FAIL, SIM IDLE PROTECTION |
| ESIM | CONSUMER TYPE ESIM, PROFILE DOWNLOAD AND REMOVAL OPERATIONS, UP TO 7 ESIM PROFILES; DOES NOT INCLUDE DATA PLANS |
| STATUS | IMSI, ICCID, OPERATOR, OPERATOR STATE, DATA CONNECTION STATE, NETWORK TYPE, BANDWIDTH, CONNECTED BAND, SIGNAL STRENGTH (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, DATA SENT/RECEIVED, LAC, TAC, CELL ID, ARFCN, UARFCN, EARFCN, MCC, MNC |
| SMS | SMS STATUS, SMS CONFIGURATION, EMAIL TO SMS, SMS TO EMAIL, SMS TO HTTP, SMS TO SMS, SCHEDULED SMS, SMS AUTOREPLY, SMPP |
| USSD | SUPPORTS SENDING AND READING UNSTRUCTURED SUPPLEMENTARY SERVICE DATA (USSD) MESSAGES |
| BLOCK / ALLOW LIST | OPERATOR BLOCK / ALLOW LIST (BY COUNTRY OR SEPARATE OPERATORS) |
| MULTIPLE PDN | POSSIBILITY TO USE DIFFERENT PDNs FOR MULTIPLE NETWORK ACCESS AND SERVICES |
| BAND MANAGEMENT | BAND LOCK, USED BAND STATUS DISPLAY |
| SIM PIN CODE MANAGEMENT | ENABLES SETTING, CHANGING, OR DISABLING THE SIM CARD’S PIN |
| APN | AUTO APN |
| BRIDGE | DIRECT CONNECTION (BRIDGE) BETWEEN MOBILE ISP AND DEVICE ON LAN |
| PASSTHROUGH | ROUTER ASSIGNS ITS MOBILE WAN IP ADDRESS TO ANOTHER DEVICE ON LAN |
| WIRELESS | |
|---|---|
| WIRELESS MODE | 802.11b/g/n (Wi-Fi 4), Access Point (AP), Station (STA) |
| WI-FI SECURITY | WPA2-Enterprise: PEAP, WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, Auto-cipher modes, client separation, EAP-TLS with PKCS#12 certificates, disable auto-reconnect, 802.11w Protected Management Frames (PMF) |
| SSID/ESSID | SSID stealth mode and access control based on MAC address |
| WI-FI USERS | Up to 100 simultaneous connections |
| WIRELESS CONNECTIVITY FEATURES | Wireless mesh (802.11s), fast roaming (802.11r), Relayd, BSS transition management (802.11v), radio resource measurement (802.11k) |
| WIRELESS MAC FILTER | Allowlist, blocklist |
| WIRELESS QR CODE GENERATOR | Once scanned, a user will automatically enter your network without needing to input login information |
| TRAVELMATE | Forward Wi-Fi hotspot landing page to a subsequent connected device |
| ETHERNET | |
|---|---|
| WAN | 1 x WAN port 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX |
| LAN | 3 x LAN ports, 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX |
| NETWORK | |
|---|---|
| ROUTING | Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy based routing |
| NETWORK PROTOCOLS | TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL), VXLAN |
| VOIP PASSTHROUGH SUPPORT | H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets |
| CONNECTION MONITORING | Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection |
| FIREWALL | Port forward, traffic rules, custom rules, TTL target customisation |
| FIREWALL STATUS PAGE | View all your Firewall statistics, rules, and rule counters |
| PORTS MANAGEMENT | View device ports, enable and disable each of them, turn auto-configuration on or off, change their transmission speed, and so on |
| NETWORK TOPOLOGY | Visual representation of your network, showing which devices are connected to which other devices |
| HOTSPOT | Captive portal (hotspot), internal/external Radius server, Radius MAC authentication, SMS authorisation, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual user or group limitations, user management, 9 default customisable themes and optionality to upload and download customised hotspot themes |
| DHCP | Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards |
| QOS / SMART QUEUE MANAGEMENT (SQM) | Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e |
| DDNS | Supported >25 service providers, others can be configured manually |
| DNS OVER HTTPS | DNS over HTTPS proxy enables secure DNS resolution by routing DNS queries over HTTPS |
| NETWORK BACKUP | Wi-Fi WAN, Mobile, VRRP, Wired options, each of which can be used as an automatic Failover |
| LOAD BALANCING | Balance Internet traffic over multiple WAN connections |
| SSHFS | Possibility to mount remote file system via SSH protocol |
| TRAFFIC MANAGEMENT | Real-time monitoring, wireless signal charts, traffic usage history |
| PORT MIRRORING | Mirroring network traffic on Ethernet ports for monitoring and analysis |
| SECURITY | |
|---|---|
| AUTHENTICATION | Pre-shared key, digital certificates, X.509 certificates, TACACS+, Internal & External RADIUS user authentication, IP & login attempt blocking, time-based login blocking, built-in random password generator |
| FIREWALL | Preconfigured firewall rules (WebUI), unlimited custom rules (CLI), DMZ, NAT, NAT-T, NAT64 |
| ATTACK PREVENTION | DDoS protection (SYN flood, SSH, HTTP/HTTPS attacks), Port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scans) |
| VLAN | Port-based and tag-based VLAN separation |
| MOBILE QUOTA CONTROL | Mobile data limit with customisable period, start time, warning limit, and phone number |
| WEB FILTER | Blacklist (block unwanted websites), Whitelist (allow only specified websites) |
| ACCESS CONTROL | Control access to SSH, WebUI, CLI, and Telnet |
| SSL CERTIFICATE GENERATION | Supports Let’s Encrypt and SCEP methods |
| VPN | |
|---|---|
| OPENVPN | Multiple clients and a server can run simultaneously, 27 encryption methods |
| OPENVPN ENCRYPTION | DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256 |
| IPSEC | XFRM, IKEv1, IKEv2 with 14 encryption methods: 3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16 |
| GRE | GRE tunnel and GRE tunnel over IPsec support |
| PPTP, L2TP | Client/server instances can run simultaneously, L2TPv3, L2TP over IPsec support |
| STUNNEL | Proxy designed to add TLS encryption functionality to existing clients and servers without changing the program’s code |
| DMVPN | Scalable IPsec VPNs with Phase 2, Phase 3 and Dual Hub support |
| SSTP | SSTP client instance support |
| ZEROTIER | ZeroTier VPN client support |
| WIREGUARD | WireGuard VPN client and server support |
| TINC | Tinc offers encryption, authentication, and compression; client and server support |
| OPC UA | |
|---|---|
| SUPPORTED MODES | Client, Server |
| SUPPORTED CONNECTION TYPES | TCP |
| MODBUS | |
|---|---|
| SUPPORTED MODES | Server, Client |
| SUPPORTED CONNECTION TYPES | TCP |
| CUSTOM REGISTERS | MODBUS TCP custom register block requests |
| SUPPORTED DATA FORMATS | 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD, DCBA, CDAB, BADC), HEX, ASCII |
| MQTT GATEWAY | |
|---|---|
| MODBUS MQTT GATEWAY | Allows sending commands and receiving data from MODBUS Server through MQTT broker |
