Teltonika RUTX11
RUTX11 is the most feature rich among all the RUTX series devices. Wide range of internal hardware interfaces allows this device to be used in power hungry Industrial applications where speed and robustness is at the heart of solution. 4G (LTE) – Cat 6 DL up to 300 Mbps in sync with 4 x 1 Gbit Ethernet ports allows seamless data transfer experience.
Quad Core ARM Cortex A7 717 MHz CPU and 256 MBytes DDR3 RAM assures smooth VPN data acquisition. Would that be Enterprise office of power hungry Digital signage with 8k HDTV solution, RUTX11 can handle it all. In addition Bluetooth LE allows sensors to be connected directly to router, thus minimizing overall solution ecosystem.
WIRELESS
Wireless mode: 802.11ac (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition, Access Point (AP), Station (STA)
WiFi security: WPA2-Enterprise-PEAP, WPA2-PSK, WPA-PSK, WEP; AES-CCMP, TKIP, Auto Cipher modes, client separation
ESSID: ESSID stealth mode
Wireless Hotspot: Captive portal (Hotspot), internal/external Radius server, built in customizable landing page
BLUETOOTH
Bluetooth LE: Bluetooth low energy (LE) for short range communication
MOBILE
Mobile module: 4G (LTE) – Cat 6 up to 300 Mbps, 3G – Up to 42 Mbps
SIM switch: 2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, SIM idle protection (planned)
APN: Auto APN
Bidge: Direct connection (bridge) between mobile ISP and device on LAN
Status: Signal strength, SINR, RSRP, RSRQ, Bytes sent/received
SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET (planed), EMAIL to SMS (planed), SMS to Email (planed), SMS to HTTP (planed), SMS to SMS (planed), scheduled SMS (planed), SMS autoreply (planed), SMPP (planed)
Black/White list: Operator black/white list
Multiple PDN (planed): Possibility to use different PDNs for multiple network access and services
Band management: Band lock, Used band status display
ETHERNET
WAN: 1 x WAN port (can be configured to LAN) 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, auto MDI/MDIX
LAN: 3 x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, auto MDI/MDIX
NETWORK
Routing: Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP)
NetSnapper (optional): Mobile connection management, data compression VPN client (not available in standard FW)
Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMNP, MQTT, Wake On Lan (WOL)
VoIP passthrough support: H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection monitoring: Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection
Firewall: Port forwards, traffic rules, custom rules
DHCP: Static and dynamic IP allocation, DHCP Relay, Relayd
QoS: Traffic priority queuing by source/destination (planned), service (planned), protocol or port (planned), WMM, 802.11e
DDNS: Supported >25 service providers, others can be configured manually
Network backup: VRRP, Mobile and Wired WAN options, each of which can be used as backup, using automatic Failover
Load balancing: Balance your Internet traffic over multiple WAN connections
Hotspot: Internal/external Radius server, captive portal, built in customizable landing page
SSHFS (optional): Possibility to mount remote file system via SSH protocol (not available in standard FW)
SECURITY
Authetication: Pre-shared key, digital certificates, X.509 certificates
Firewall: Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
Attack prevention: DDOS prevention port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
VLAN: Port based and tag based VLAN separation
Mobile quota control: Set up custom data limits for both SIM cards
WEB filter: Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only
Access control: Flexible access control of TCP, UDP, ICMP packets, MAC address filter
VPN
OpenVPN: Multiple clients and a server can run simultaneously, 12 encryption methods
OpenVPN Encryption: DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC
IPsec: IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256)
GRE and Stunnel: GRE tunnel, Stunnel (planed)
PPTP, L2TP: Client/Server services can run simultaneously
DMVPN: Method of building scalable IPsec VPNs
SSTP: SSTP client instance support
MODBUS
Modbus TCP slave: ID range 1-255
Modbus TCP master: Supported functions 01, 02, 03, 04, 05, 06, 15, 16 Supported data formats 8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit float (Big endian, Big endian with byte-swapped, Little endian, Little endian with byte-swapped)
MONITORING & MANAGEMENT
WEB UI: HTTP, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log
FOTA: Firmware update from server, automatic notification
SSH: SSH (v1, v2)
SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET
TR-069 (planed): OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
SNMP: SNMP (v1, v2, v3), SNMP trap
JSON-RPC: Management API over HTTP/HTTPS
MQTT: MQTT Broker, MQTT publisher
RMS: Teltonika Remote Management System (RMS)
SYSTEM CHARACTERISTICS
CPU: Quad-core ARM Cortex A7, 717 MHz
RAM: 256 MB, DDR3
FLASH memory: 256 MB SPI Flash
FIRMWARE / CONFIGURATION
WEB UI: Update FW from file, check FW on server, configuration profiles and backup
FOTA: Update FW/configuration from server
RMS: Update FW/configuration for multiple devices
Keep settings: Update FW without losing current configuration
LOCATION TRACKING
GNSS: GPS, GLONASS, BeiDou, Galileo and QZSS
Coordinates: GNSS coordinates via WebUI, SMS, TAVL, RMS
NMEA: NMEA 0183
Server software: Supported server software: TAVL, RMS
Mobile Network Geolocation: Get approximate device location on RMS based on mobile cell tower position (without using GPS)
Geofencing: Configurable multiple geofence zones
POWER
Connector: 4 pin industrial DC power socket
Input voltage range: 9 - 50 VDC, reverse polarity protection, voltage surge/transient protection
PoE (passive): Passive PoE. Possibility to power up through LAN port, not compatible with IEEE 802.3af/at
Power consumption: 11 W Max
PHYSICAL INTERFACES
Ethernet: 4 x GbE RJ45 port
I/Os: 1 Digital Input, 1 Digital Output on 4 pin power connector
Antennas: 2 x SMA for LTE, 2 x RP-SMA for WiFi, 1 x RP-SMA for Bluetooth, 1 x SMA for GNNS
Power: 4 pin DC connector
USB: USB 2.0 type A (external devices)
