RUT301

Description

ETHERNET
WAN
1 × WAN port 10/100 Mbps, compliance with IEEE 802.3, IEEE 802.3u, IEEE 802.3az standards, supports auto MDI/MDIX

LAN
4 × LAN ports 10/100 Mbps, compliance with IEEE 802.3, IEEE 802.3u, IEEE 802.3az standards, supports auto MDI/MDIX crossover

NETWORK
Routing
Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), policy-based routing

Network protocols
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake on LAN (WOL), VXLAN

VoIP passthrough support
H.323 and SIP-ALG protocol NAT helpers allowing proper routing of VoIP packets

Connection monitoring
Ping reboot, Wget reboot, periodic reboot, LCP and ICMP for link inspection

Firewall
Port forwarding, traffic rules, custom rules, TTL target customisation

Firewall status page
Firewall statistics, rules, and rule counters

Port management
Port status view, enable/disable ports, auto-configuration control, transmission speed configuration

Network topology
Visual representation of network and connected devices

DHCP
Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases with MAC wildcards

QoS / Smart Queue Management (SQM)
Traffic prioritisation by source, destination, service, protocol or port, WMM, 802.11e

DDNS
Support for over 77 service providers, manual configuration available

DNS over HTTPS
Secure DNS resolution via DNS over HTTPS proxy

Network backup
VRRP and wired options for automatic failover

Load balancing
Traffic balancing across multiple WAN connections

Hotspot
Captive portal, internal/external RADIUS, MAC authentication, SMS authorisation, SSO, internal/external landing pages, walled garden, scripts, URL parameters, user groups, per-user or group limits, user management, 9 customisable themes

SSHFS
Remote filesystem mounting via SSH

Traffic management
Real-time monitoring, wireless signal charts, traffic usage history

SECURITY
Authentication
Pre-shared key, digital certificates, X.509 certificates, TACACS+, internal and external RADIUS authentication, IP and login attempt blocking, time-based login blocking, random password generator

Firewall (advanced)
WebUI firewall rules, unlimited CLI firewall configuration, DMZ, NAT, NAT-T, NAT64

Attack prevention
DDoS protection (SYN flood, SSH, HTTP/HTTPS), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL, FIN scans)

VLAN
Port-based and tag-based VLAN separation

Web filter
Website blocklist and allowlist

Access control
SSH, WebUI, CLI, and Telnet access management

Certificate manager
CA, server, client, Let’s Encrypt, SCEP certificate support

802.1X
Port-based network access control server

VPN
OpenVPN, IPsec, GRE, PPTP, L2TP, Stunnel, DMVPN, SSTP, ZeroTier, WireGuard, Tinc

OpenVPN
Multiple simultaneous clients and server support, 27 encryption methods

OpenVPN encryption
DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC/CFB/CFB1/CFB8/OFB/GCM, AES-192-CBC/CFB/CFB1/CFB8/OFB/GCM, AES-256-CBC/CFB/CFB1/CFB8/OFB/GCM

IPsec
XFRM, IKEv1, IKEv2, encryption support: 3DES, DES, AES128/192/256, AES-GCM (8/12/16)

GRE
GRE tunnel and GRE over IPsec support

PPTP / L2TP
Client and server support, L2TPv3, L2TP over IPsec

Stunnel
TLS encryption proxy for existing clients and servers

DMVPN
Scalable IPsec VPNs, Phase 2 and Phase 3, dual hub support

SSTP
SSTP client support

ZeroTier
ZeroTier VPN client support

WireGuard
WireGuard VPN client and server support

Tinc
Encrypted tunnels with authentication and compression

INDUSTRIAL & IOT PROTOCOLS
OPC UA
Client and server modes, TCP connection

MQTT Gateway
MODBUS MQTT Gateway for command and data exchange

MODBUS
Server and client modes, TCP and USB connections

Custom registers
MODBUS TCP custom register blocks with file-based read/write

Supported data formats
8-bit INT/UINT, 16-bit INT/UINT (MSB/LSB), 32-bit float/INT/UINT (ABCD, DCBA, CDAB, BADC), HEX, ASCII

Data to server
HTTP(S), MQTT, Azure MQTT; multi-source data extraction and LUA scripting

DNP3
Station and outstation modes, TCP and USB

DLMS/COSEM
Client mode, TCP and USB

API
Teltonika Networks Web API (beta)

MONITORING & MANAGEMENT
WebUI, FOTA, SSH, TR-069, MQTT, SNMP, JSON-RPC, RMS

SYSTEM CHARACTERISTICS
Mediatek CPU 580 MHz MIPS 24KEc, 128 MB DDR2 RAM, 16 MB NOR flash

FIRMWARE CUSTOMISATION
RutOS (OpenWrt-based Linux), SDK, GPL customisation, package manager

USB
USB 2.0, Samba share, USB-to-serial, FAT/FAT32/exFAT/NTFS (RO)/ext2/3/4

INPUT / OUTPUT
Configurable digital inputs and outputs, event reporting via Email and RMS

POWER
9–30 VDC input, optional passive PoE, <0.8 W idle, <3.8 W max

PHYSICAL INTERFACES
5 × RJ45 Ethernet ports, USB-A, digital I/O, LEDs, reset button

PHYSICAL SPECIFICATION
Aluminium housing, 100 × 30 × 85 mm, 233 g

OPERATING ENVIRONMENT
-40 °C to 75 °C, 10–90% RH non-condensing, IP30

REGULATORY
Giteki, RoHS, REACH, CE, FCC, IC, RCM, CB