RUT240 is a compact, cost-effective and secure industrial 4G/LTE WiFi router for professional applications. The mobile router delivers high performance for mission-critical cellular communication in harsh and hazardous environments where a wide operating temperature is required. Equipped with an external SIM holder, digital input/output and signal strength status LEDs, it ensures easy network deployment and management. External SMA connectors make it possible to attach desired antennas and easily find the best signal location. RUT240 Industrial LTE router supports industry leading security features and is widely used for 4G backup, Remote Connection, Out-of-Band Management, Advanced VPN and tunneling services in IoT networking solutions.
- LTE Cat 4 with speeds up to 150 Mbps
- Automatic switching to available Backup connection
- Wireless Access Point with Hotspot functionality
- Compact size, easy integration
- Digital Input/Output for remote monitoring and control
- Compatible with Teltonika Remote Management System
MOBILE
Mobile module: 4G (LTE) – Cat 4 up to 150 Mbps, 3G – Up to 42 Mbps, 2G – Up to 236.8 kbps
Status: Signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP Bytes sent/received
Bridge: Direct connection (bridge) between mobile ISP and device on LAN
SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP
Black/White list (optional): Operator black/white list
Multiple PDN (optional): Possibility to use different PDNs for multiple network access and services
Band management: Band lock, Used band status display
WIRELESS
Wireless mode: IEEE 802.11b/g/n, Access Point (AP), Station (STA)
WiFi: WPA2-Enterprise (with external/internal Radius server), WPA2-PSK, WPA-PSK, WEP, MAC Filter
WiFi security: WPA2-Enterprise - PEAP, TLS, TTLS, AES-CCMP, TKIP, Auto Cipher modes, Client separation
SSID: SSID stealth mode and access control based on MAC address
WiFi users: Up to 50 simultaneous connections
Wireless Hotspot: Captive portal (Hotspot), internal/external Radius server, built in customizable landing page
ETHERNET
WAN: 1 x WAN port (can be configured to LAN) 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
LAN: 1 x LAN port, 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
NETWORK
Routing: Static routing, Dynamic routing (Optional - BGP, OSPF v2, RIP v1/v2)
Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SMNP, MQTT, Wake On Lan (WOL)
VoIP passthrough support: H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection monitoring: Ping Reboot, Periodic Reboot, LCP and ICMP for link inspection
Firewall: Port forward, traffic rules, custom rules
DHCP: Static and dynamic IP allocation, DHCP Relayd
QoS: Traffic priority queuing by source/destination, service, protocol or port, traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
DDNS: Supported >25 service providers, others can be configured manually
Network backup: VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as backup, using automatic Failover
Load balancing: Balance your internet traffic over multiple WAN connections
NetSnapper (optional): Mobile connection management, data compression VPN client (not available in standard FW)
SSHFS (optional): Possibility to mount remote file system via SSH protocol (not available in standard FW)
SECURITY
Authentication: Pre-shared key, digital certificates, X.509 certificates
Firewall: Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
Attack prevention: DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention ( SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
WiFi security: WPA2-Enterprise – PEAP, EAP-TLS, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes, Client separation
VLAN: Tag based VLAN separation
Mobile quota control: Set up custom data limits for the SIM card
WEB filter: Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only
Access control: Flexible access control of TCP, UDP, ICMP packets, MAC address filter
VPN
OpenVPN: Multiple clients and server can be running simultaneously, 12 encryption methods
OpenVPN Encryption: DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC
IPsec: IKEv1, IKEv2, supports up to 4 x VPN IPsec tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256)
GRE: GRE tunnel
PPTP, L2TP: Client/Server services can run simultaneously
Stunnel: Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs' code
SSTP: SSTP client instance support
MONITORING & MANAGEMENT
WEB UI: HTTP/HTTPS, status, configuration, FW update, CLI ,troubleshoot, event log, system log, kernel log
FOTA: Firmware update from sever, automatic notification
SSH: SSH (v1, v2)
SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET
TR-069 (optional): OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
MQTT: MQTT Broker, MQTT publisher
SNMP: SNMP (v1, v2, v3), SNMP trap
JSON-RPC: Management API over HTTP/HTTPS
MODBUS: MODBUS TCP status/control
RMS: Teltonika Remote Management System (RMS)
SYSTEM CHARACTERISTICS
CPU: Atheros Hornet, MIPS 24Kc, 400 MHz
RAM: 64 MB, DDR2
FLASH memory: 16 MB SPI Flash
FIRMWARE / CONFIGURATION
WEB UI: Update FW from file, check FW on server, configuration profiles, configuration backup, restore point
FOTA: Update FW/configuration from server
RMS: Update FW/configuration for multiple devices
Keep settings: Update FW without losing current configuration
FIRMWARE CUSTOMIZATION
Operating system: RutOS (OpenWrt based Linux OS)
Supported languages: Busybox shell, Lua, C, C++
Development tools: SDK package with built environment provided
INPUT/OUTPUT
Input: 1 x Digital non-isolated input (on 4 pin power connector)
Output: 1 x Digital open collector output (30 V, 300 mA, on 4 pin power connector)
Events: SMS, EMAIL, RMS
POWER
Connector: 4 pin industrial DC power socket
Input voltage range: 9 – 30 VDC (4 pin industrial socket), reverse polarity protection, surge protection >33 VDC 10us max
PoE (passive): Passive PoE over spare pairs (available from HW revision 0007 and batch number 0010). Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at
Power consumption: < 5 W
PHYSICAL INTERFACES (PORTS, LEDS, ANTENNAS, BUTTONS, SIM)
Ethernet: 2 x RJ45 ports, 10/100 Mbps
I/O’s: 1 Digital Input, 1 Digital Output on 4 pin power connector
Status LEDs: 3 x connection type status LEDs, 5 x connection strength LEDs, 2 x LAN status LEDs, 1 x Power LED
SIM: 1 x SIM slot (Mini SIM – 2FF), 1.8 V/3 V, external SIM holder
Power: 4 pin DC connector
Antennas: 2 x SMA for LTE, 1 x RP-SMA for WiFi antenna connectors
Reset: Reset/restore to default button
PHYSICAL SPECIFICATION
Casing material: Aluminum housing, plastic panels
Dimensions: 83 mm x 74 mm x 25 mm (H x W x D)
Weight: 125 g
Mounting options: Bottom and sideways DIN rail mounting slots
OPERATING ENVIRONMENT
Operating temperature: -40 °C to 75 °C
Operating humidity: 10% to 90% non-condensing
Ingress Protection Rating: IP30
MTBF: 310000 h
REGULATORY & TYPE APPROVALS
Regulatory: CE/RED, FCC, IC/ISED, EAC, RCM, PTCRB, RoHS, WEEE, Wi-Fi Alliance
Operator: Verizon, AT&T
EMI IMMUNITY
Standards: Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-52 V1.1.0
FCC 47 CFR Part 15B (2017), ANSI C63.4 (2014)
ESD: EN61000-4-2:2009
RS: EN 61000-4-3:2006 + A1:2008 + A2:2010
EFT: EN 61000-4-4:2012
Surge immunity (AC Power Line): EN 61000-4-5:2006
Surge immunity (Ethernet ports): EN 61000-4-5:2014, clause 7.1 of ITU-T K21
CS: EN 61000-4-6:2009
DIP: EN 61000-4-11:2004
RF
Standards: EN 300 328 V2.1.1, EN 301 511 V12.5.1, EN 301 908-1 V11.1.1, EN 301 908-2 V11.1.1, EN 301 908-13 V11.1.1
FCC 47 CFR Part 15C (2017), FCC 47 CFR Part 2 (2017), FCC 47 CFR Part 22H (2017), FCC 47 CFR Part 24E (2017), FCC 47 CFR Part 27C (2017)
RSS-Gen Issue 4 (2014), RSS-247 Issue 2 (2017), RSS-132 Issue 3 (2013), RSS-133 Issue 6 (2013), RSS-139 Issue 3, RSS-130 Issue 1
AS/CA S042.1:2018, AS/ACIF S042.3:2005, AS/CA S042.4:2018, AS/NZS 4268:2017
SAFETY
Standards: IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013
AS/NZS 60950.1:2015
EN 50665:2017, EN 62311:2008
FCC 47 CFR Part 1 1.1310
RSS-102 Issue 5 (2015)