TELTONIKA Industrial VPN WiFi Router

Next-Generation Teltonika Enterprise router, equipped with the Dual Band WiFi 5 802.11ac and a Bluetooth LE module. Perfect for Small office or Public sector applications. High speed WiFi connectivity allows companies to transition into all-wireless office settings.

Learn more on the wiki page

Ethernet:• WAN: 1 x WAN port (can be configured to LAN) 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover; • LAN: 3 x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover;

Wireless:• Wireless mode: 802.11ac (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition, Access Point (AP), Station (STA); • WiFi security: WPA2-Enterprise-PEAP, WPA2-PSK, WPA-PSK, WEP; AES-CCMP, TKIP, Auto Cipher modes, client separation; • ESSID: ESSID in stealth mode.

Bluetooth:• Bluetooth LE: Bluetooth low energy (LE) for short range communication.

Network:• Routing: Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP); • Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP (planned), SSL v3, TLS, ARP, VRRP (planned), PPP, PPPoE, UPNP, SSH, SNMP, DHCP, Telnet (optional), MQTT; • VoIP passthrough support: H.232 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets; • Connection monitoring: Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection; • Firewall: Port forwards, traffic rules, custom rules; • DHCP: Static and dynamic IP allocation, DHCP Relay, Relayd; • QoS: Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e; • DDNS: Supported > 25 service providers, others can be configured manually; • Network backup: VRRP (planned); • SSHFS (optional): Possibility to mount remote file system via SSH protocol (not available in standard FW).

Security:• Authentication: Pre-shared key, digital certificates, X.509 certificates; • Firewall: Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T; • Attack prevention: DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks); • VLAN: Port-based and tag-based VLAN separation; • WEB filter: Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only; • Access control: Flexible access control of TCP, UDP, ICMP packets, MAC address filter.

VPNs:• OpenVPN: Multiple clients and a server can run simultaneously, 12 encryption methods; • OpenVPN Encryption: DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC; • IPsec: IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256); • GRE: GRE tunnel; • PPTP, L2TP: Client/Server services can run simultaneously; • Stunnel (planned): Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program's code; • DMVPN: Method of building scalable IPsec VPNs.

Monitoring Management:• WEB UI: HTTP, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log; • FOTA: Firmware update from server, automatic notification; • SSH: SSH (v1, v2); • TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem; • MQTT: MQTT Broker, MQTT publisher; • JSON-RPC: Management API over HTTP/HTTPS; • Modbus (planned): Modbus TCP status/control, master and slave modes; • RMS: Teltonika Remote Management System (RMS).

System Characteristics:• CPU: Quad-core ARM Cortex A7, 717 MHz; • RAM: 256 MB, DDR3; • FLASH memory: 256 MB SPI Flash.

Firmware/Configuration:• WEB UI: Update FW from file, check FW on server, configuration profiles, configuration backup; • FOTA: Update FW/configuration from server; • RMS: Update FW/configuration for multiple devices; • Keep settings: Update FW without losing current configuration.

Firmware Customization:• Operating system: RutOS (OpenWrt based Linux OS); • Supported languages: Busybox shell, Lua, C, C++; • Development tools: SDK package with build environment provided (planned).

USB:• Data rate: USB 2.0; • Applications: Samba share (planned), custom scripts (planned); • External devices: Possibility to connect external HDD, flash drive, additional modem, printer; • Storage formats: FAT, FAT32, NTFS.

Input/Output:• Input: 1 x Digital Input; • Output: 1 x Digital Output; • Events: SMS, Email, RMS.

Power:• Connector: 4 pin industrial DC power socket; • Input voltage range: 9 - 50 VDC, reverse polarity protection, voltage surge/transient protection; • PoE (passive): Passive PoE. Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at standards; • Power consumption: 11 W Max.

Physical Interfaces (ports, leds, buttons):• Ethernet: 4 x RJ45 ports, 10/100/1000 Mbps; • I/Os: 1 Digital Input, 1 Digital Output on 4 pin power connector; • Status LEDs: 8 x LAN status LEDs, 1 x Power LED; • Power: 4 pin DC connector; • Antennas: 2 x RP-SMA for WiFi, 1 x RP-SMA for Bluetooth; • USB: USB A port for external devices; • Reset: Factory reset button.

Physical Specifications:• Casing material: Full aluminum housing; • Dimensions: 115 mm x 95 mm x 32 mm (H x W x D); • Weight: 357 g; • Mounting options: DIN rail (can be mounted on two sides), flat surface placement.

Operating Environment:• Operating temperature: -40 C to 75 C; • Operating humidity: 10% to 90% non-condensing; • Ingress Protection Rating: IP30.