MOBILE

• Mobile module: 5G Sub-6Ghz SA/NSA: 2.4/3.4Gbps DL (4x4 MIMO), 900/550 Mbps UL (2x2); 4G LTE: Cat 19 1.6Gbps DL, Cat 18 200Mbps UL; 3G: 42 Mbps DL, 5.76Mbps UL
• 3GPP Release: Release 16
• eSIM: Consumer type eSIM, profile download and removal operations, up to 7 eSIM profiles; does not include data plans
• SIM switch: 2 x 2FF SIM and 1 x eSIM, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail
• Status: IMSI, ICCID, operator, operator state, data connection state, network type, CA indicator, bandwidth, connected band, signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, and MNC
• SMS: SMS status, SMS configuration, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP
• USSD: Supports sending and reading Unstructured Supplementary Service Data messages
• Block/Allow list: Operator block/allow list (by country or separate operators)
• Multiple PDN: Possibility to use different PDNs for multiple network access and services
• Band management: Band lock, Used band status display
• SIM idle protection service: Provides the possibility to configure the router to periodically switch to the unused SIM card and establish a data connection in order to prevent the SIM card from being blocked
• SIM PIN code management: SIM PIN code management enables setting, changing, or disabling the SIM card's PIN
• APN: Auto APN
• Bridge: Direct connection (bridge) between mobile ISP and device on LAN
• Passthrough: Router assigns its mobile WAN IP address to another device on LAN
• Framed routing: Framed routing: support an IP network behind 5G UE

WIRELESS

• Wireless mode: 802.11b/g/n/ac Wave 2 (Wi-Fi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition, Access Point (AP), Station (STA)
• Wi-Fi security: WPA2-Enterprise - PEAP, WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, Auto-cipher modes, client separation, EAP-TLS with PKCS#12 certificates, disable auto-reconnect, 802.11w Protected Management Frames (PMF)
• SSID/ESSID: ESSID stealth mode
• Wi-Fi users: Up to 150 simultaneous connections
• Wireless Connectivity Features: Wireless mesh (802.11s), fast roaming (802.11r), Relayd, BSS transition management (802.11v), radio resource measurement (802.11k)
• Wireless MAC filter: Allowlist, blocklist
• Wireless QR code generator: Once scanned, a user will automatically enter your network without needing to input login information
• TravelMate: Forward Wi-Fi hotspot landing page to a subsequent connected device

Ethernet

• WAN: 1 x WAN port 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover
• LAN: 1 x LAN port, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover 

NETWORK

• Routing: Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy based routing
• Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL)
• VoIP passthrough support: H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
• Connection monitoring: Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection
• Firewall: Port forward, traffic rules, custom rules, TTL target customisation
• Firewall status page: View all your Firewall statistics, rules, and rule counters
• Ports management: View device ports, enable and disable each of them, turn auto-configuration on or off, change their transmission speed, and so on
• Network topology: Visual representation of your network, showing which devices are connected to which other devices
• Hotspot: Captive portal (hotspot), internal/external Radius server, Radius MAC authentication, SMS authorisation, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual user or group limitations, user management, 9 default customisable themes and optionality to upload and download customised hotspot themes
• Hotspot 2.0: Hotspot 2.0 is a Wi-Fi standard that enables seamless, secure, and automatic connection to trusted wireless networks
• DHCP: Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards
• QoS / Smart Queue Management (SQM): Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
• DDNS: Supported >25 service providers, others can be configured manually
• DNS over HTTPS: DNS over HTTPS proxy enables secure DNS resolution by routing DNS queries over HTTPS
• Network backup: Wi-Fi WAN, Mobile, VRRP, Wired options, each of which can be used as an automatic Failover
• Load balancing: Balance Internet traffic over multiple WAN connections
• SSHFS: Possibility to mount remote file system via SSH protocol
• VRF support: Initial virtual routing and forwarding (VRF) support
• Traffic Management:  Real-time monitoring, wireless signal charts, traffic usage history

SECURITY

• Firewall: Preconfigured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64
• Attack prevention: DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
• VLAN: Port and tag-based VLAN separation
• Mobile quota control: Custom data limits for SIM card
• WEB filter: Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only
• Access control: Flexible access control of SSH, Web interface, CLI and Telnet
• TPM: Identification and authentication module, TPM 2.0 standard
• SSL certificate generation: Let's Encrypt and SCEP certificate generation methods
• 802.1x: Port-based network access control client

VPN

• OpenVPN: Multiple clients and a server can run simultaneously, 27 encryption methods
• OpenVPN Encryption: DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192- OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
• IPsec: XFRM, IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)
• GRE: GRE tunnel, GRE tunnel over IPsec support
• PPTP, L2TP: Client/Server instances can run simultaneously, L2TPv3, L2TP over IPsec support
• Stunnel: Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code
• DMVPN: Method of building scalable IPsec VPNs, Phase 2 and Phase 3 and Dual Hub support
• SSTP: SSTP client instance support
• ZeroTier: ZeroTier VPN client support
• WireGuard: WireGuard VPN client and server support
• Tinc: Tinc offers encryption, authentication and compression in it's tunnels. Client and server support.
• Tailscale: Tailscale offers speed, stability, and simplicity over traditional VPNs. Encrypted point-to-point connections using the open source WireGuard protocol

OPC UA

• Supported modes: Client, Server
• Supported connection types: TCP

MODBUS

• Supported modes: Server, Client 
• Supported connection types: TCP
• Custom registers: MODBUS TCP custom register block requests, which read/write to a file inside the router, and can be used to extend MODBUS TCP Client functionality 
• Supported data formats: 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII 

DATA TO SERVER

• Protocol: HTTP(S), MQTT, Azure MQTT 
• Data to server: Extract parameters from multiple sources and different protocols, and send them all to a single server; Custom LUA scripting, allowing scripts to utilize the router's Data to server feature 

MQTT Gateway

• Modbus MQTT Gateway: Allows sending commands and receiving data from MODBUS Server through MQTT broker

DNP3

• Supported modes: Station, Outstation
• Supported connection: TCP

DLMS/COSEM

• DLMS Support: DLMS - standard protocol for utility meter data exchange
• Supported modes: Client
• Supported connection types: TCP

API

• Teltonika Networks Web API (beta) support: Expand your device's possibilities by using a set of configurable API endpoints to retrieve or change data. For more information, please refer to this documentation: https://developers.teltonika-networks.com