RUTM20

Description

MOBILE
Mobile module
5G Sub-6 GHz SA/NSA, up to 2.5/3.4 Gbps DL (4×4 MIMO), up to 900/550 Mbps UL (2×2);
4G LTE Cat 19 up to 1.6 Gbps DL, LTE Cat 18 up to 211 Mbps UL;
3G up to 42 Mbps DL, 5.7 Mbps UL

3GPP release
Release 16

eSIM
Consumer-type eSIM, profile download and removal, up to 7 eSIM profiles, data plans not included

SIM switch
2 × Mini SIM (2FF) and 1 × eSIM, auto-switch on weak signal, data limit, SMS limit, roaming, no network, network denied, data connection failure

Status
IMSI, ICCID, operator, operator state, data connection state, network type, CA indicator, bandwidth, connected band, RSSI, SINR, RSRP, RSRQ, EC/IO, RSCP, data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, MNC

SMS
SMS status and configuration, Email to SMS, SMS to Email, SMS to HTTP, SMS to SMS, scheduled SMS, SMS auto-reply, SMPP

USSD
Send and read USSD messages

Block/allow list
Operator blocklist/allowlist by country or operator

Multiple PDN
Support for multiple PDNs for different network access and services

Band management
Band lock, used band status display

SIM idle protection service
Periodic SIM switching to prevent SIM blocking

SIM PIN code management
Set, change or disable SIM PIN

APN
Automatic APN configuration

Bridge
Direct bridge between mobile ISP and LAN device

Passthrough
Assigns mobile WAN IP address to a LAN device

Framed routing
Support for IP networks behind 5G UE

WIRELESS
Wireless mode
802.11b/g/n/ac Wave 2 (Wi-Fi 5), up to 867 Mbps, dual-band, MU-MIMO, Access Point (AP), Station (STA), 802.11r fast transition

Wi-Fi security
WPA2-Enterprise (PEAP), WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, auto-cipher modes, client separation, EAP-TLS with PKCS#12 certificates, disable auto-reconnect, 802.11w PMF

SSID/ESSID
SSID stealth mode, MAC-based access control

Wi-Fi users
Up to 150 simultaneous connections

Wireless connectivity features
Wireless mesh (802.11s), fast roaming (802.11r), Relayd, BSS transition management (802.11v), radio resource measurement (802.11k)

Wireless MAC filter
Allowlist, blocklist

Wireless QR code generator
Instant Wi-Fi access via QR code without manual credential entry

TravelMate
Forward hotspot landing page to subsequent connected device

ETHERNET
WAN
1 × WAN port, 10/100/1000 Mbps, IEEE 802.3, 802.3u, 802.3az compliant, auto MDI/MDIX

LAN
1 × LAN port, 10/100/1000 Mbps, IEEE 802.3, 802.3u, 802.3az compliant, auto MDI/MDIX

NETWORK
Routing
Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), policy-based routing

Network protocols
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake-on-LAN

VoIP passthrough support
H.323 and SIP-ALG NAT helpers

Connection monitoring
Ping reboot, Wget reboot, periodic reboot, LCP and ICMP link inspection

Firewall
Port forwarding, traffic rules, custom rules, TTL target

Firewall status page
Firewall statistics, rules, rule counters

Port management
Port enable/disable, auto-configuration, transmission speed control

Network topology
Graphical network topology view

Hotspot
Captive portal, internal/external RADIUS, MAC authentication, SMS authorisation, SSO, internal/external landing pages, walled garden, user scripts, URL parameters, user groups, per-user/group limits, user management, 9 customisable themes

Hotspot 2.0
Seamless, secure automatic Wi-Fi authentication

DHCP
Static and dynamic IP allocation, DHCP relay, DHCP server, static leases with MAC wildcards

QoS / SQM
Traffic prioritisation by source, destination, service, protocol or port, WMM, 802.11e

DDNS
Support for over 77 providers, manual configuration

DNS over HTTPS
Secure DNS resolution via HTTPS proxy

Network backup
Wi-Fi WAN, mobile, VRRP and wired failover

Load balancing
Traffic balancing across multiple WAN links

VRF support
Initial virtual routing and forwarding support

Traffic management
Real-time monitoring, wireless signal charts, usage history

SECURITY
Authentication
Pre-shared keys, digital certificates, X.509, TACACS+, internal/external RADIUS, IP and login attempt blocking, time-based access control, random password generator

Firewall
Preconfigured WebUI rules, unlimited CLI rules, DMZ, NAT, NAT-T, NAT64

Attack prevention
DDoS protection, SSH and HTTP/HTTPS protection, port scan prevention

VLAN
Port-based and tag-based VLANs

Mobile quota control
Custom data limits per SIM

Web filter
Allowlist and blocklist

Access control
SSH, WebUI, CLI and Telnet access control

TPM
TPM 2.0 identification and authentication module

Certificate manager
CA, server, client, Let’s Encrypt and SCEP certificate creation

802.1X
Port-based network access control