Teltonika RUT950 4G Router
Teltonika RUT950 Industrial Grade M2M 4G Router
Supplied with UK PSU, The RUT950 router provides a reliable 4G mobile broadband INternet connection for your remote management and monitoring application.
- Dual SIM (Failover)
- 4 x Ethernet Ports
- 802.11 B/G/N WiFi
- Description
- Reviews (0)
Description
The RUT950 4G router from Teltonika is a great value, industrial grade, M2M LTE router providing a reliable and robust 4G mobile broadband Internet connection. So, if you need a 4G Internet connection for your remote monitoring and management application, the Teltonika RUT950 router may just be the ideal solution for you.
This router is classed as a Dual SIM 4G router, meaning that it has two SIM card slots. You can insert two 4G SIM Cards, but the router only has a single 4G modem installed inside so it can only use one of these SIM cards at a time for the 4G mobile broadband connection. The reason the second SIM card slot is there is because it can provide an extra resilience option in case the primary network SIM card becomes disconnected by the mobile network. This disconnection may be because of a network failure or simply because the sim card bill was not paid – it can happen! Ideally the backup SIM card would be on a separate network to the primary SIM card, so in the event that the primary network, let’s say for example this is O2, has a network fault, then the RUT950 router can switch to the backup SIM card, in this case it might be Vodafone. This means the dual SIM router can provide a backup network solution to enable the router to provide the 4G connection.
Most SIM cards used in the Teltonika RUT950 router will be Fixed IP SIM Cards, meaning that they are from a Fixed IP SIM provider who enable the router to connect to their APN (Access Point Name) and through this APN provide the 4G connection with a Fixed IP address so that the router can be remotely accessed and this means that port forwarding can be used to connect to the devices on the LAN side of the Teltonika router. Fixed IP SIM Cards are available with either a public IP address or private IP address.
RUT950 with Public Fixed IP SIM Card
In the case of using the RUT950 with a public IP fixed IP SIM card you would be able to communicate directly with the router using the fixed, public IP address directly from anywhere on the Internet. This means that you will need to correctly configure all the security features of the RUT950 router to prevent unauthorised access to the router and also ensure that any devices being connected to using the RUT950 port forwarding are also secured against unauthorised access using the seciurity features of your devices. For example, if port forwarding to a CCTV NVR then ensure that the NVR security features are enabled and configured and this includes changing the default admin user names and passwords.
RUT950 with Private Fixed IP SIM Card
In the case of using the Teltonika router with a private IP fixed IP SIM card, the router will connect to the 4G network, again using the APN provided by your Fixed IP SIM network provider, but the IP address that is allocated to the router 4G connection will be private on the fixed IP SIM network providers network. This means the router is not directly contactable from the Internet and in order to communicate with your Teltonika router you will first of all need to create a VPN from your PC / Laptop to the fixed IP sim provider VPN server and this way you will be able to communicate with your RUT950 and use port forwarding to communicate with your attached devices on the LAN. Using the Teltonika RUT950 with a Private Fixed IP SIM card is the more secure way to use this service.
RUT950 with standard 4G SIM (Non Fixed IP)
If you just need a 4G mobile broadband Internet connection and so not need to remotely access the Teltonika router, or remotely connect to any of the attached devices on the LAN, then you can use a standard 4G SIM card, directly obtained from the UK mobile phone networks, Vodafone, O2, 3Mobile and EE. This may be if you just need those attached devices to communicate outwards. For example, using a Teltonika RUT950 router with a standard 4G SIM card can be used to create a VPN to a VPN server, because the Teltonika router, acting as a VPN client can connect to the VPN server because the VPN server has a fixed IP address. In this scenario the Teltonika router cannot act as the VPN server, because using a normal 4G data SIM card the RUT950 is not contactable. Many users want to use an unlimited data SIM card obtained directly from the mobile networks, because it appears like a cheap option and then realise that they cannot remotely connect to the router, nor use DDNS and their next search is for an unlimited data fixed IP SIM card, but all they find are fixed IP SIM plans with monthly allowances at a much higher cost than an unlimited SIM but that is because it is a service that enables remote access so of course that service has a value and an associated cost.
Reliability
The Teltonika RUT950 has several features such as ping reboot / Cell ICMP check that need to be configured to help the router maintain it’s 4G connection because 3G and 4G and even 5G mobile broadband services are an always available service rather than an always on service. Using a feature such as Ping Reboot, the RUT950 router can ping an IP address over the Internet at regular intervals to confirm it has a valid Internet connection, rather than just being able to see the local mobile network base station. In the event the router has been disconnected by the mobile network it can reboot the modem or router to try and reconnect. This will mean that whilst the router will not be contactable at this time, the ping reboot feature will provide a solution the same as powering off and on, which we all know is one of the best ways to get something to work! It is worth knowing that the RUT950 router, or in fact any Teltonika router, or any other brand of 4G router cannot guarantee a 100% uptime using a single SIM / single modem as the router itself relies upon the 4G network to ensure availability and connection and the mobile networks do not provide this guarantee. The ping reboot, timed reboot and other mechanisms used by the Teltonika router are designed to get the router back online as quickly as possible in the event the mobile network disconnects it. You can also get the router to connect to the Teltonika RMS platform so it can update the Teltonika RMS platform with information about the router, so you will be able to see periods of disconnection and get notifications of when the router has been disconnected and notifications of when it has been able to reconnect. Using a Fixed IP SIM Card provider will also not be able to provide a guaranteed 100% uptime for your 4G router.
SPECIFICATION
MOBILE | |
Mobile module | 4G (LTE) – Cat 4 up to 150 Mbps, 3G – Up to 42 Mbps, 2G – Up to 236.8 kbps |
SIM switch | 2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, SIM idle protection |
Status | Signal strength, SINR, RSRP, RSRQ, Bytes sent/received |
Bridge | Direct connection (bridge) between mobile ISP and device on LAN |
Passthrough | Router assigns its mobile WAN IP address to another device on LAN |
APN | Auto APN |
SMS | SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP |
Black/White list | Operator black/white list |
Multiple PDN (optional) | Possibility to use different PDNs for multiple network access and services |
Band management | Band lock, Used band status display |
WIRELESS | |
Wireless mode | IEEE 802.11b/g/n, Access Point (AP), Station (STA) |
WiFi | WPA2-Enterprise (with external/internal Radius server), WPA2-PSK, WPA-PSK, WEP, MAC Filter |
WiFi security | WPA2-Enterprise – PEAP, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation |
SSID | SSID stealth mode and access control based on MAC address |
WiFi users | Up to 100 simultaneous connections |
Wireless Hotspot | Captive portal (Hotspot), internal/external Radius server, built in customizable landing page |
ETHERNET | |
WAN | 1 x WAN port (can be configured to LAN) 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX |
LAN | 3 x LAN ports, 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX |
NETWORK | |
Routing | Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, NHRP) |
Network protocols | TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SMNP, MQTT, Wake On Lan (WOL) |
VoIP passthrough support | H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets |
Connection monitoring | Ping Reboot, Periodic Reboot, LCP and ICMP for link inspection |
Firewall | Port forward, traffic rules, custom rules |
DHCP | Static and dynamic IP allocation, DHCP Relay |
QoS / Smart Queue Management (SQM) | Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e |
DDNS | Supported >25 service providers, others can be configured manually |
Network backup | VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as backup, using automatic Failover |
Load balancing | Balance your internet traffic over multiple WAN connections |
NetSnapper (optional) | Mobile connection management, data compression VPN client (not available in standard FW) |
SSHFS (optional) | Possibility to mount remote file system via SSH protocol (not available in standard FW) |
SECURITY | |
Authentication | Pre-shared key, digital certificates, X.509 certificates |
Firewall | Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T |
Attack prevention | DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention ( SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) |
WiFi security | WPA2-Enterprise – PEAP, EAP-TLS, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation |
VLAN | Port based and tag based VLAN separation |
Mobile quota control | Set up custom data limits for both SIM cards |
WEB filter | Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only |
Access control | Flexible access control of TCP, UDP, ICMP packets, MAC address filter |
VPN | |
OpenVPN | Multiple clients and server can be running simultaneously, 12 encryption methods |
OpenVPN Encryption | DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC |
IPsec | IKEv1, IKEv2, supports up to 4 x VPN IPsec tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256) |
GRE | GRE tunnel |
PPTP, L2TP | Client/Server services can run simultaneously |
Stunnel | Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs’ code |
SSTP | SSTP client instance support |
ZeroTier | ZeroTier VPN |
MODBUS | |
MODBUS TCP SLAVE | |
ID range | 1-255 |
Allow Remote Access | Allow access through WAN |
Custom registers | Modbus TCP custom register block requests, which read/write to a file inside the router, and can be used to extend Modbus TCP Slave functionality |
MODBUS TCP MASTER | |
Supported functions | 01, 02, 03, 04, 05, 06, 15, 16 |
Supported data formats | 8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit float (Big endian, Big endian with byte-swapped, Little endian, Little endian with byte-swapped) |
MODBUS DATA TO SERVER | |
Protocol | HTTP(S), MQTT, Azure MQTT |
MQTT GATEWAY | |
MQTT gateway | Allows sending commands and receiving data from Modbus Master through MQTT broker |
MONITORING & MANAGEMENT | |
WEB UI | HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log |
FOTA | Firmware update from server, automatic notification |
SSH | SSH (v1, v2) |
SMS | SMS status, SMS configuration, send/read SMS via HTTP POST/GET |
Call | Reboot, Status, WiFi on/off, Mobile data on/off, Output on/off |
TR-069 | OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem |
MQTT | MQTT Broker, MQTT publisher |
SNMP | SNMP (v1, v2, v3), SNMP trap |
JSON-RPC | Management API over HTTP/HTTPS |
MODBUS | MODBUS TCP status/control |
RMS | Teltonika Remote Management System (RMS) |
IoT PLATFORMS | |
Cloud of Things | Allows monitoring of: Device data, Mobile data, Network info, Availability |
ThingWorx | Allows monitoring of: WAN Type, WAN IP Mobile Operator Name, Mobile Signal Strength, Mobile Network Type |
Cumulocity | Allows monitoring of: Device Model, Revision and Serial Number, Mobile Cell ID, ICCID, IMEI, Connection Type, Operator, Signal Strength, WAN Type and IP |
Azure IoT Hub | Can send device IP, Number of bytes send/received/ 3G connection state, Network link state, IMEI, ICCID, Model, Manufacturer, Serial, Revision, IMSI, Sim State, PIN state, GSM signal, WCDMA RSCP WCDMA EC/IO, LTE RSRP, LTE SINR, LTE RSRQ, CELL ID, Operator, Operator number, Connection type, Temperature, PIN count to Azure IoT Hub server |
SYSTEM CHARACTERISTICS | |
CPU | Atheros Wasp, MIPS 74Kc, 550 MHz |
RAM | 128 MB, DDR2 |
FLASH memory | 16 MB SPI Flash |
FIRMWARE / CONFIGURATION | |
WEB UI | Update FW from file, check FW on server, configuration profiles, configuration backup, restore point |
FOTA | Update FW/configuration from server |
RMS | Update FW/configuration for multiple devices |
Keep settings | Update FW without losing current configuration |
FIRMWARE CUSTOMIZATION | |
Operating system | RutOS (OpenWrt based Linux OS) |
Supported languages | Busybox shell, Lua, C, C++ |
Development tools | SDK package with build environment provided |
INPUT/OUTPUT | |
Input | 1 x Digital non-isolated input (on 4 pin power connector) |
Output | 1 x Digital open collector output (30 V, 300 mA, on 4 pin power connector) |
Events | SMS, EMAIL, RMS |
POWER | |
Connector | 4 pin industrial DC power socket |
Input voltage range | 9 – 30 VDC (4 pin industrial socket), reverse polarity protection; surge protection >31 VDC 10us max |
PoE (passive) | Passive PoE over spare pairs. Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at standards |
Power consumption | < 2 W idle, < 7 W Max |
PHYSICAL INTERFACES (PORTS, LEDS, ANTENNAS, BUTTONS, SIM) | |
Ethernet | 4 x RJ45 ports, 10/100 Mbps |
I/O’s | 2 Inputs/Outputs pin on 4 pin power connector (available from HW revision 1600) |
Status LEDs | 1 x bi-color connection status LED, 5 x connection strength LEDs, 4 x LAN status LEDs, 1 x Power LED |
SIM | 2 x SIM slots (Mini SIM – 2FF), 1.8 V/3 V, external SIM holders, eSIM (Optional) |
Power | 4 pin power connector with 2 pins for Input/Output |
Input/Output | 2 programmable Inputs/Outputs |
Antennas | 2 x SMA for LTE, 2 x RP-SMA for WiFi antenna connectors |
Reset | Reset/restore to default button |
PHYSICAL SPECIFICATION | |
Casing material | Aluminium housing, plastic panels |
Dimensions | 100 x 110 x 50 mm (L x W x H) |
Weight | 280 g |
Mounting options | DIN rail (can be mounted on two sides), flat surface placement |
OPERATING ENVIRONMENT | |
Operating temperature | -40 °C to 75 °C |
Operating humidity | 10% to 90% non-condensing |
Ingress Protection Rating | IP30 |
MTBF | 270000 h |
REGULATORY & TYPE APPROVALS | |
Regulatory | CE/RED, FCC, IC, PTCRB, RCM, EAC, CCC, RoHS, WEEE, IP rating, Anatel, GCF, TRA approval, REACH, DNV GL, Declaration of Software Security, Thailand NBTC, Ukraine UCRF, WiFi Certified, SDPPI (POSTEL) |
Operator | AT&T, Verizon |
EMI IMMUNITY | |
Standards | Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-19 V2.1.0, Draft EN 301 489-52 V1.1.0 FCC 47 CFR Part 15B (2018), ANSI C63.4 (2014) |
ESD | EN61000-4-2:2009 |
RS | EN 61000-4-3:2006 + A1:2008 + A2:2010 |
EFT | EN 61000-4-4:2012 |
Surge immunity (AC Power Line) | EN 61000-4-5:2006 |
Surge immunity (Ethernet ports) | EN 61000-4-5:2014, clause 7.1 of ITU-T K21 |
Transient and surges | ISO 7632-2:2004 |
CS | EN 61000-4-6:2009 |
DIP | EN 61000-4-11:2004 |
RF | |
Standards | EN 300 328 V2.1.1, EN 301 511 V12.5.1, EN 301 908-1 V11.1.1, EN 301 908-2 V11.1.1, EN 301 908-13 V11.1.1 AS/CA S042.1:2018, AS/ACIF S042.3:2005, AS/CA S042.4:2018, AS/NZS 4268:2017 FCC 47 CFR Part 15C, FCC 47 CFR Part 22H, FCC 47 CFR Part 24E, FCC 47 CFR Part 27 |
SAFETY | |
Standards | IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013 AS/NZS 60950.1:2015 EN 50665:2017, EN 62311:2008 FCC 47 CFR Part 1 1.1310 |
ENVIRONMENTAL | |
Ingress Protect | LST EN 60529:1999+A1+AC:2002 |
Vibration | Class guideline-DNVGL-CG-0339:2016 EN 60068-2-6:2008 |
Reviews
There are no reviews yet.