TELTONIKA RUT950 LTE 4G, router-modem

RUT950 is a professional-industrial 4G/LTE WiFi router for IoT applications.

• Supports 2 SIM cards simultaneously.
• Wi-Fi support.
• VPN support.
• Without SIM card lock.

RUT950 is a highly reliable and secure LTE router for professional applications. Router delivers high performance, mission-critical cellular communication. RUT950 is equipped with connectivity redundancy through dual SIM failover. External antenna connectors make it possible to attach desired antennas and to easily find the best signal location.

RMS support

Manage your router fleet remotely. With full support of centralized Teltonika Remote Management System you will be able to access, control and monitor all of your routers within a single platform. This will help you make better decisions for future installments and best-use practices.

SPECIFICATIONS

MOBILE

• Mobile module: 4G (LTE) – Cat 4 up to 150 Mbps, 3G – Up to 42 Mbps, 2G – Up to 236.8 kbps.
• SIM switch: 2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, SIM idle protection
• Status: Signal strength, SINR, RSRPO, RSRQ, Bytes sent/received
• Bridge: Direct connection (bridge) between mobile ISP and device on LAN
• SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP
• Black/White list: Operator black/white list
• Multiple PDN (optional): Possibility to use different PDNs for multiple network access and services

WIRELESS

• Wireless mode: IEEE 802.11b/g/n, Access Point (AP), Station (STA)
• WiFi: WPA2-Enterprise (with external/internal Radius server), WPA2-PSK, WPA-PSK, WEP, MAC Filter
• WiFi security: WPA2-Enterprise - PEAP, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation
• SSID: SSID stealth mode and access control based on MAC address
• WiFi users: Up to 100 simultaneous connections
• Hotspot" Captive portal (Hotspot), internal/external Radius server, built in customizable landing page

ETHERNET

• WAN: 1 x WAN (can be configured to LAN) 10/100 Mbps, complies with IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
• LAN: 3 x LAN ports, 10/100 Mbps, complies with IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX

NETWORK

• Routing: Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2)
• Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, MQTT
• Connection monitoring: Ping Reboot, Periodic Reboot, LCP and ICMP for link inspection
• Firewall: Port forward, traffic rules, custom rules
• DHCP: Static and dynamic IP allocation
• QoS: Traffic priority quening by source/destination, service, protocol or port
• DDNS: Supported >25 service providers, others can be configured manually
• Network backup: VRRP, Mobile, Wired and Wi-Fi WAN options, each of which can be used as backup
• Load balancing: Balance your internet traffic over multiple WAN connections
• NetSnapper (optional): Mobile connection management, data compression VPN client (not available in standard FW)
• SSHFS (optional): Possibility to mount remote file system via SSH protocol (not available in standard FW)

SECURITY

• Authentication: Pre-shared key, digital certificates, X.509 certificates
• Firewall: Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
• Attack prevention: DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
• WiFi security: WPA2-Enterprise - PEAP, EAP-TLS, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation
• VLAN: Port based and tag based VLAN separation
• Mobile quota control: Set up custom data limits for both SIM cards
• WEB filter: Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only
• Access control: Flexible access control of TCP, UDP, ICMP packets, MAC address filter

VPN

• OpenVPN: Multiple clients and servers can be running simultaneously, 12 encryption methods
• OpenVPN Encryption: DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128 -CBC, AES-192-CBC, AES-256-CBC
• Ipsec: IKEv1, IKEv2, supports up to 4x VPN IPsec tunnels, with 5 encryption methods (DES, 3DES, AES128, AES192, AES256)
• GRE: GRE tunnel
• PPTP, L2TP: Client/Server services can run simultaneously

MONITORING & MANAGEMENT

• WEB UI: HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log
• FOTA: Firmware update from server, automatic notification
• SSH: SSH (v1, v2)
• SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET
• TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVsystems
• MQTT: MQTT Broker, MQTT publisher
• SNMP: SNMP (v1, v2, v3), SNMP trap
• JSON-RPC: Management API over HTTP/HTTPS
• MODBUS: MODBUS TCP status/control
• RMS: Teltonika Remote Management System (RMS)

SYSTEM CHARACTERISTICS

• CPU: Atheros Wasp, MIPS 74Kc, 550MHz
• RAM: 128MB, DDR2
• FLASH memory: 16MB SPI Flash

FIRMWARE / CONFIGURATION

• WEB UI: Update FW from file, check FW on server, configuration profiles, configuration backup, restore point
• FOTA: Update FW/configuration from server
• RMS: Update FW/configuration for multiple devices
• Keep settings: Update FW without losing current configuration

FIRMWARE CUSTOMIZATION

• Operating system: RutOS powered by Linux based on OpenWRT
• Supported languages: Busybox shell, Lua, C, C++
• Development tools: GPL package with build environment provided

POWER

• Connector: 4 pin industrial DC power socket
• Input voltage range: 9 – 30 VDC (4 pin industrial socket), reverse polarity protection; surge protection >31VDC 10us max.
• PoE (passive): Passive PoE over spare pairs. Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at standards
• Power consumption: < 2W idle, < 7W Max.

PHYSICAL INTERFACES (PORTS, LEDS, ANTENNAS, BUTTONS, SIM)

• Ethernet: 4 x RJ45 ports, 10/100 Mbps
• Status LEDs: 1 x bi-color connection status LED, 5x connection strength LEDs, 4x LAN status LEDs, 1x Power LED
• SIM: 2 x SIM slots (Mini SIM – 2FF, 2nd form factor), 1.8V/3V
• Power: 4 pin industrial DC power socket
• Antenna: 2 x SMA for LTE, 2 x RP-SMA for WiFi antenna connectors
• Reset: Reset/restore to default button

PHYSICAL SPECIFICATION

• Casing material: Aluminum housing, plastic panels
• Dimensions: 80 mm x 106 mm x 46 mm (H x W x D)
• Weight: 235 g
• Mounting options: DIN rail (can be mounted on both sides), flat surface placement

OPERATING ENVIRONMENT

• Operating temperature: -40 °C to 75 °C
• Operating humidity: 10% to 90% non-condensing
• Ingress Protection Rating: IP30
• MTBF: 270000 hrs

REGULATORY & TYPE APPROVALS

• Regulatory: CE/RED, FCC, R&TTE, EAC, PTCRB, RoHS, WEEE
• Operator: AT&T, Verizon (planned)

EMI IMMUNITY

• ESD: EN 301 489 V2.1.1 (EN61000-4-2:2009)
• RF: EN 301 489 V2.1.1 ( EN 61000-4-3:2006, A1:2008 and A2:2010)
• EFT: EN 301 489 V2.1.1 (EN 61000-4-4:2013)
• Surge protection: EN 301 489 V2.1.1 (EN 61000-4-5:2014)
• RC: EN 301 489 V2.1.1 (EN 61000-4-6:2014)

ENVIRONMENTAL TESTING

• Anti-shock/Drop/Vibration: IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013, EN 60950-1:2006 + A1:2010 + A2:2013 + A11:2009 +A12: 2011
• Impact strength: IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013, EN 60950-1:2006 + A1:2010 + A2:2013 + A11:2009 +A12:2011

User manual / User manual.