RUTM50

Description

MOBILE MODULE
The device supports 5G Sub-6 GHz SA, NSA with download speeds of 2.4 / 3.4 Gbps (4×4 MIMO) and upload speeds of 900 / 550 Mbps (2×2 MIMO). 4G LTE provides downlink Cat 19 up to 1.6 Gbps (4×4 MIMO) and uplink Cat 18 up to 200 Mbps.

3GPP RELEASE
Release 16.

SIM SWITCH
Supports 2 SIM cards with automatic switching. Switch triggers include weak signal, data limit, SMS limit, roaming, no network, network denied, data connection failure, and SIM idle protection.

STATUS AND MONITORING
Status reporting includes IMSI, ICCID, operator, operator state, data connection state, network type, CA indicator, bandwidth, connected band, signal strength (RSSI, SINR, RSRP, RSRQ, EC/IO, RSCP), data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, and MNC.

SMS
SMS status, SMS configuration, email to SMS, SMS to email, SMS to HTTP, SMS to SMS, scheduled SMS, SMS auto-reply, SMPP.

USSD
Supports sending and reading Unstructured Supplementary Service Data messages.

BLOCK / ALLOW LIST
Operator block or allow list by country or individual operators.

MULTIPLE PDN
Supports using different PDNs for multiple network access and services.

BAND MANAGEMENT
Includes band lock and used band status display.

SIM IDLE PROTECTION SERVICE
Allows configuration for periodic switching to the unused SIM card to prevent SIM blocking.

SIM PIN CODE MANAGEMENT
Enables setting, changing, or disabling the SIM card’s PIN.

APN
Auto APN.

BRIDGE
Direct connection (bridge) between mobile ISP and device on LAN.

PASSTHROUGH
Router assigns its mobile WAN IP address to another device on LAN.

FRAMED ROUTING
Support for an IP network behind 5G UE.

WIRELESS

WIRELESS MODE
802.11b/g/n/ac Wave 2 (Wi-Fi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO).

WI-FI SECURITY
WPA2-Enterprise: PEAP, WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, Auto-cipher modes, client separation, EAP-TLS with PKCS#12 certificates, disable auto-reconnect, 802.11w Protected Management Frames (PMF).

SSID / ESSID
SSID stealth mode and access control based on MAC address.

WI-FI USERS
Up to 150 simultaneous connections.

WIRELESS CONNECTIVITY FEATURES
Wireless mesh (802.11s), fast roaming (802.11r), Relayd, BSS transition management (802.11v), radio resource measurement (802.11k).

WIRELESS MAC FILTER
Allowlist, blocklist.

WIRELESS QR CODE GENERATOR
Automatically connects users to the network after scanning.

TRAVELMATE
Forwards Wi-Fi hotspot landing page to a subsequent connected device.

ETHERNET

WAN
1 x WAN port 10/100/1000 Mbps, compliance with IEEE 802.3, 802.3u, 802.3az standards, supports auto MDI/MDIX crossover.

LAN
4 x LAN ports 10/100/1000 Mbps, compliance with IEEE 802.3, 802.3u, 802.3az standards, supports auto MDI/MDIX crossover.

NETWORK

ROUTING
Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy based routing.

NETWORK PROTOCOLS
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On LAN (WOL), VXLAN.

VOIP PASSTHROUGH SUPPORT
H.323 and SIP-alg protocol NAT helpers for proper VoIP packet routing.

CONNECTION MONITORING
Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection.

FIREWALL
Port forward, traffic rules, custom rules, TTL target customization.

FIREWALL STATUS PAGE
View all firewall statistics, rules, and rule counters.

PORT MANAGEMENT
View device ports, enable/disable, change transmission speed, and auto-configuration options.

NETWORK TOPOLOGY
Visual representation of network connectivity between devices.

HOTSPOT
Captive portal, internal/external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual/group limitations, user management, 9 default customizable themes, optional custom theme upload/download.

DHCP
Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases (MAC with wildcards).

QOS / SMART QUEUE MANAGEMENT (SQM)
Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e.

DDNS
Supported >77 service providers; others configurable manually.

DNS OVER HTTPS
Proxy enables secure DNS resolution over HTTPS.

NETWORK BACKUP
Wi-Fi WAN, Mobile, VRRP, Wired options with automatic failover.

LOAD BALANCING
Balance Internet traffic across multiple WAN connections.

SSHFS
Mount remote file systems via SSH protocol.

VRF SUPPORT
Initial virtual routing and forwarding support.

TRAFFIC MANAGEMENT
Real-time monitoring, wireless signal charts, traffic usage history.

SECURITY

802.1X
Port-based network access control client.

AUTHENTICATION
Pre-shared key, digital certificates, X.509 certificates, TACACS+, internal & external RADIUS authentication, IP/login attempt blocking, time-based login blocking, built-in random password generator.

FIREWALL
Preconfigured rules via WebUI, unlimited configuration via CLI, DMZ, NAT, NAT-T, NAT64.

ATTACK PREVENTION
DDOS prevention (SYN flood, SSH attack, HTTP/HTTPS attack), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL, FIN scan attacks).

VLAN
Port and tag-based VLAN separation.

MOBILE QUOTA CONTROL
Mobile data limit with customizable period, start time, warning limit, phone number.

WEB FILTER
Blacklist for blocking unwanted websites, whitelist for allowed sites.

ACCESS CONTROL
Flexible access control for SSH, Web UI, CLI, and Telnet.

CERTIFICATE MANAGER
Creates CA, server, client, Let’s Encrypt, SCEP certificates.

VPN

OPENVPN
Multiple clients and server simultaneously, 27 encryption methods.

OPENVPN ENCRYPTION
DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256.

IPSEC
XFRM, IKEv1, IKEv2, 14 encryption methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16).

GRE
GRE tunnel, GRE over IPsec support.

PPTP, L2TP
Client/Server instances, L2TPv3, L2TP over IPsec.

STUNNEL
TLS encryption for existing clients and servers without code changes.

DMVPN
Scalable IPsec VPNs, Phase 2 & 3, dual hub support.

SSTP
Client instance support.

ZEROTIER
VPN client support.

WIREGUARD
VPN client and server support.

TINС
Offers encryption, authentication, compression; client & server support.

TAILSCALE
Encrypted point-to-point connections using WireGuard, offers speed, stability, simplicity.

OPC UA
Modes: Client, Server. Connection: TCP.

MODBUS
Modes: Server, Client. Connection: TCP, USB. Custom registers: MODBUS TCP custom register block requests. Data formats: 8-bit (INT, UINT), 16-bit (INT, UINT), 32-bit (float, INT, UINT, ABCD/DCBA/CDAB/BADC), HEX, ASCII.

DATA TO SERVER
Protocol: HTTP(S), MQTT, Azure MQTT. Custom LUA scripting for parameter extraction and sending.

MQTT GATEWAY
Modbus MQTT Gateway sends/receives data from MODBUS server via MQTT broker.

DNP3
Modes: Station, Outstation. Connection: TCP, USB.

DLMS/COSEM
Standard protocol for utility meter data exchange. Modes: Client. Connection: TCP.

MONITORING & MANAGEMENT

WEB UI
HTTP/HTTPS, status, configuration, firmware update, CLI, troubleshoot, multiple event log servers, firmware update notifications, event/system/kernel log, Internet status.

FOTA
Firmware update from server with automatic notification.

SSH
SSH v1 and v2 support.

SMS
SMS status and configuration.

CALL
Reboot, status, mobile data on/off, output on/off, answer/hang-up with timer, Wi-Fi on/off.

TR-069
OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem support.

MQTT
Broker and publisher.

SNMP
v1/v2/v3, SNMP Trap, brute force protection.

JSON-RPC
Management API over HTTP/HTTPS.

RMS
Teltonika Remote Management System.

IOT PLATFORMS
ThingWorx: monitors WAN type, IP, operator, signal strength, network type.
Cumulocity: monitors device model, serial, WAN type/IP, cell ID, ICCID, IMEI, connection type, operator, signal strength; reboot and firmware upgrade actions.
Azure IoT Hub: supports Data to Server, Direct method, Plug & Play integration, Device Provisioning Service.
AWS IoT Core: device API jobs support.

SYSTEM CHARACTERISTICS
CPU: MediaTek Dual-Core 880 MHz, MIPS1004Kc.
RAM: 256 MB DDR3.
FLASH: 16 MB serial NOR flash, 256 MB serial NAND flash.

FIRMWARE / CONFIGURATION
WEB UI: firmware update from file/server, configuration profiles, backup.
FOTA: update FW.
RMS: update FW/configuration for multiple devices.
Keep settings: update without losing configuration.
Factory reset: restores all settings, IP, PIN, user data to default.

FIRMWARE CUSTOMISATION
OS: RutOS (OpenWrt based).
Languages: Busybox shell, Lua, C, C++, Python, Java (Package manager).
Development: SDK package with build environment.
GPL customization: create branded firmware/web pages.
Package manager: install additional software.

LOCATION TRACKING
GNSS: GPS, GLONASS, BeiDou, Galileo, QZSS.
Coordinates via WebUI, SMS, TAVL, RMS.
NMEA 0183, NTRIP protocol support.
Server software: TAVL, RMS.
Geofencing: configurable multiple zones.

USB
USB 2.0, applications: Samba share, USB-to-serial.
External devices: HDD, flash drive, modem, printer, USB-serial adapter.
Storage formats: FAT, FAT32, exFAT, NTFS (read-only), ext2/3/4.

INPUT / OUTPUT
Input: 1 x Digital Input, 0–6 V low, 8–50 V high.
Output: 1 x Digital Output, Open collector, max 50 V, 300 mA.
Events: Email, RMS, SMS.
I/O juggler: set I/O conditions to initiate event.

POWER
Connector: 4-pin industrial DC. Input: 9–50 VDC, reverse polarity and surge protection.
PoE: passive via LAN1 port, 9–50 VDC, Mode B.
Consumption: Idle <5 W, Max <18 W.

PHYSICAL INTERFACES
Ethernet: 5 x RJ45 10/100/1000 Mbps.
I/O: 1 Digital Input, 1 Digital Output.
Status LEDs: 4 WAN type, 3 mobile type, 3 mobile strength, 10 Ethernet, 1 Power, 2 Wi-Fi.
SIM: 2 x Mini SIM 1.8/3 V.
Power: 1 x 4-pin connector.
Antennas: 4 SMA Mobile, 2 RP-SMA Wi-Fi, 1 SMA GNSS.
USB: 1 x USB A port.
Reset: Reboot/User default/Factory reset button.
Other: 1 x grounding screw.

PHYSICAL SPECIFICATION
Casing: anodized aluminum.
Dimensions: 132 x 44.2 x 95.1 mm.
Weight: 519 g.
Mounting: DIN rail, wall, flat surface (additional kit required).

OPERATING ENVIRONMENT
Temperature: -40 °C to 75 °C.
Humidity: 10% to 90% non-condensing.
Ingress protection: IP30.

REGULATORY & TYPE APPROVALS
Regulatory: FCC, IC, PTCRB, UL/CSA Safety, NOM, Giteki.
Operator: T-Mobile, AT&T (FirstNet), Verizon.

EMC EMISSIONS & IMMUNITY
Standards: 47 CFR Part 15 Subpart B, ICES-003 Issue 7 (October 2020).

RF
Wi-Fi 2.4 / 5 GHz: 47 CFR Part 15 Subpart C § 15.247, Subpart E § 15.407; RSS-247 Issue 2, RSS-Gen Issue 5 Amendment 2; KDB 905462 D02/D04.
4G/5G: 47 CFR Part 2, Part 22/24/27/90/96; RSS-130/132/133/139/140/192/195/197/199, RSS-Gen Issue 5 Amendment 2; SRSP-503/510/513/516/517/518/520.

RF EXPOSURE
Standards: 47 CFR § 2.1091; KDB 447498 D04 Interim General RF Exposure Guidance v01; RSS-102 Issue 5 Amendment 1.

SAFETY
Standards: UL/CSA Safety: UL 62368-1 (3rd Ed., Rev. Dec 13, 2019), C22.2 No. 62368-1:19 (3rd Ed., Rev. Dec 13, 2019).