RUT901

Industrial dual SIM 4G LTE/Wi-Fi cellular router supporting MQTT, Modbus TCP, DNP3 protocols

The RUT901 cellular router delivers the top-rated features of its predecessors, the RUT950 and RUT951, to the market. The device ensures high-performance, providing automatic WAN failover to an available backup connection, guaranteeing network continuity and eliminating downtime.

This industrial router features 4G LTE (Cat 4), 3G, 2G connectivity, dual SIM with auto failover, backup WAN and other switching scenarios, Wi-Fi hotspot and supports multiple protocols including MQTT, Modbus TCP, DNP3.

Specification:

Mobile:

• Mobile module: 4G (LTE) - Cat 4 up to 150 Mb/s, 3G - up to 42 Mb/s, 2G - up to 236.8 kb/s
• 3GPP Release: Release 9
• SIM switch: 2 SIM cards, auto shell switching: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection failure, SIM idle protection
• Status: Signal Strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, Bytes Sent/Received, Bandwidth Combined, IMSI, ICCID
• SMS: SMS Status, SMS Setup, Send/Read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, Scheduled SMS, SMS Auto Reply, SMPP
• USSD: Supports sending and reading unstructured ancillary service data
• Blacklist/Whitelist: Blacklist/whitelist operators
• PDN Multiple: Ability to use different PDNs for multiple network accesses and services
• Team management: Lock wristband, view status of wristband in use
• APN: automatic APN
• Bridge: A direct connection (bridge) between a mobile ISP and a device on the LAN
• Forwarding: The router assigns its Mobile WAN IP address to another device on the LAN

Wireless

• Wireless Mode: IEEE 802.11b/g/n, Access Point (AP), Station (STA)
• Wi-Fi Security: WPA-PSK/WPA2-PSK Mixed Mode, WPA2-PSK, WPA2-EAP, WPA2-EAP/WPA3-EAP Mixed Mode, WPA3-EAP, WPA2-PSK/WPA3-SAE Mixed Mode, WPA3-SAE, OWE; AES-CCMP, TKIP, Auto Cipher modes, client separation
• SSID/ESSID: SSID hiding mode and access control based on MAC address
• Wi-Fi users: Up to 100 simultaneous connections
• Wireless Hotspot: Captive Portal (Hotspot), Internal/External Radius Server, SMS Authentication, Internal/External Landing Page, Walled Garden, User Scripts, URL Parameters, User Groups, Per User or Group Restrictions, User Management, 9 default customizable themes
• Wireless features: Fast roaming (802.11r), forwarding

Ethernet

• WAN: 1 x 10/100Mbps WAN port, complies with IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
• LAN: 3 x LAN ports, 10/100 Mbps, IEEE 802.3, IEEE 802.3u compliant, supports auto MDI/MDIX

Web

• Routing: Static Routing, Dynamic Routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy Based Routing
• Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SMNP, MQTT, Wake on Lan (WOL)
• VoIP pass-through support: H.323 and SIP-alg NAT helpers to properly route VoIP packets
• Connection monitoring: Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link control
• Firewall: Port forwarding, traffic rules, custom rules
• DHCP: Static and dynamic IP address allocation, DHCP Relay
• QoS / Smart Queue Management (SQM): Traffic prioritization by source/destination, service, protocol or port, WMM, 802.11e
• DDNS: >25 service providers supported, the rest can be configured manually
• Network backup: Wi-Fi WAN, Mobile, VRRP, Wired options, all of which can be used as automatic failover
• Load balancing: Balanced Internet traffic across multiple WAN connections
• SSHFS: Ability to mount a remote filesystem via SSH (not available in standard FW)

Security

• Authentication: Shared Key, Digital Certificates, X.509 Certificates, TACACS+, Radius, IP and Login Attempt Blocking
• Firewall: Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; demilitarized zone; NATs; NAT-T
• Attack Prevention: DDOS Prevention (SYN Flood Protection, SSH Attack Prevention, HTTP/HTTPS Attack Prevention), Port Scan Prevention (SYN-FIN, SYN-RST, X-mas, NULL Flags, FIN Scan Attacks)
• VLAN: Port and tag based VLAN separation
• Mobile limit control: Mobile data limit, configurable period, start time, warning limit, phone number
• WEB Filter: Blacklist to block unwanted websites, Whitelist to only allow websites
• Access Control: Flexible TCP, UDP, ICMP packet access control, MAC address filter

VPN

• OpenVPN: Multiple clients and server can run simultaneously, 27 encryption methods
• OpenVPN encryption: DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128 , AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192 , AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
• IPsec: IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES1 92GCM16 , AES256GCM16)
• GRE: GRE tunnel, GRE tunnel with IPsec support
• PPTP, L2TP: Client/server instances can run simultaneously, support L2TPv3, L2TP over IPsec
• Stunnel: Proxy server designed to add TLS encryption functionality to existing clients and servers without any code changes
• DMVPN: A method for building scalable IPsec VPNs
• SSTP: Support for SSTP client instances
• ZeroTier: ZeroTier VPN Customer Support
• WireGuard: Support for WireGuard VPN client and server
• Tinc: Tinc offers encryption, authentication and compression in its tunnels. Client and server support

Modbus TCP Slave

• ID range: Reply to one ID in the range [1;255] or any
• Allow Permission: Permit access over WAN
• Custom registers: MODBUS TCP custom register lock requests that read/write a file inside the router and can be used to extend MODBUS TCP Slave functionality

Modbus TCP Master

• Supported functions: 01, 02, 03, 04, 05, 06, 15, 16
• Supported data formats: 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC)

Server details:

• Protocol: HTTP(S), MQTT, Azure MQTT, Kinesis

MQTT gateway

• MQTT Gateway: Allows sending commands and receiving data from MODBUS Master via MQTT Broker

DNP3

• Supported modes: TCP master station, DNP3 outdoor station

Monitoring and Management

• WEB Interface: HTTP/HTTPS, Status, Configuration, Firmware Upgrade, CLI, Troubleshooting, Event Log, System Log, Kernel Log
• FOTA: Firmware update from server, automatic notification
• SSH: SSH (v1, v2)
• SMS: SMS status, SMS configuration, sending/reading SMS via HTTP POST/GET
• CALL: Reboot, status, mobile data on/off, call out/out, timer answer/hang up, Wi-Fi on/off
• TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
• MQTT: MQTT Broker, MQTT Issuer
• SNMP: SNMP (v1, v2, v3), SNMP trap
• JSON-RPC: HTTP/HTTPS Management API
• MODBUS: MODBUS TCP state/control
• RMS: Teltonika Remote Management System (RMS)

IOT Platforms

• Cloud of Things: Allows you to monitor: device data, mobile data, network information, accessibility
• ThingWorx: Allows you to monitor: WAN type, WAN IP address, mobile carrier name, mobile signal strength, mobile network type
• Cumulocity: Allows you to monitor: device model, version and serial number, WAN type and IP address, mobile cell ID, ICCID, IMEI, connection type, operator, signal strength
• Azure IoT Hub: Can send device IP address, bytes sent/received, temperature and PIN number to Azure IoT Hub server

System characteristics

• Processor: Mediatek, 580MHz, MIPS 24KEc
• RAM: 128MB, DDR2
• FLASH memory: 16MB, SPI memory

Firmware/Config

• WEB interface: FW update from file, check FW on server, configuration profiles, configuration backup
• FOTA: Firmware update
• RMS: Firmware update/configuration for multiple devices at once
• Save settings: FW update without losing current configuration

Firmware customization

• Operating system: RutOS (OpenWrt-based Linux operating system)
• Supported languages: Busybox Shell, Lua, C, C++ and Python, Java in Package Manager
• Development tools: SDK with build environment

Firmware customization

• Operating system: RutOS (OpenWrt-based Linux operating system)
• Supported languages: Busybox Shell, Lua, C, C++ and Python, Java in Package Manager
• Development tools: SDK with build environment provided

Input/Output

• Input: 1 x digital input, 0-6V sensed logic low, 8-30V sensed logic high
• Output: 1 x digital output, open collector output, max. output 30V, 300mA
• Events: Email, RMS, SMS
• I/O juggler: Allows you to set specific input/output conditions to trigger an event

Power

• Connector: 4-pin industrial DC power socket
• Input voltage range: 9 - 30 VDC, reverse polarity protection; overvoltage protection >31 VDC 10us max
• PoE (passive): Passive PoE on spare pairs. LAN port power capable, non-IEEE802.3af, 802.3at and 802.3bt compliant, Mode B, LAN1 port, 9 - 30 VDC
• Power Consumption: <2W idle, <7W Max

Physical interfaces

• Ethernet: 4 RJ45 ports, 10/100Mbps
• I/O: 1 x digital input, 1 x digital output on 4-pin power connector
• Status LEDs: 1 x bi-color status, 5 x mobile strength, 4 x ETH status, 1 x power
• SIM: 2 x SIM slots (Mini SIM - 2FF), 1.8V/3V, external SIM card holders, eSIM (optional)
• Power: 1 x 4-pin power connector
• Antennas: 2 x SMA for LTE, 2 x RP-SMA for Wi-Fi antenna connectors
• Reset: Reboot/Reset User Defaults/Factory Reset Button

Physical Specification

• Enclosure type: Aluminum housing, plastic panels
• Dimensions (W x H x D): 110 x 50 x 100mm
• Weight: 297 gr
• Mounting options: DIN rail (can be mounted on both sides), placing on a flat surface

Operating environment

• RUT901 operating temperature: -40°C to 75°C
• Operating humidity: 10% to 90% non-condensing
• Ingress protection: IP30

Regulatory norms and types

• Regulatory: CE/RED, UKCA, EAC, UCRF, CB

EMI Immunity

• Regulatory: CE/RED, UKCA, EAC, UCRF, CB
• Standards: EN 301 489-1 V2.2.3, Draft EN 301 489-17 V3.2.4, EN 301 489-52 V1.2.1, EN 55032:2015+A11:2020+A1:2020, EN 55035:2017 +A11:2020; EN IEC 61000-3-2:2019+A1:2021; EN 61000-3-3:2013 + A1:2019+A2:2021
• ESD: EN 61000-4-2:2009
• RS: EN 61000-4-2:2009
• EFT: EN 61000-4-4:2012
• Surge protection: EN 61000-4-5:2014+A1:2017
• CS: EN 61000-4-6:2014
• Immersion: EN IEC 61000-4-11:2020

RF

• Standards: EN 300 328 V2.2.2, EN 301 511 V12.5.1, EN 301 908-1 V15.1.1, EN 301 908-2 V13.1.1, EN 301 908-13 V13.1.1

Security

• Standards: EN IEC 62311:2020; IEC 62368-1:2018 EN IEC 62368-1:2020+A11:2020; EN 50665:2017

Warranty: 2 years

---