Teltonika RUT950 4G Router

Teltonika RUT950 Industrial Grade M2M 4G Router

Supplied with UK PSU, The RUT950 router provides a reliable 4G mobile broadband INternet connection for your remote management and monitoring application.

  • Dual SIM (Failover)
  • 4 x Ethernet Ports
  • 802.11 B/G/N WiFi

The RUT950 4G router from Teltonika is a great value, industrial grade, M2M LTE router providing a reliable and robust 4G mobile broadband Internet connection. So, if you need a 4G Internet connection for your remote monitoring and management application, the Teltonika RUT950 router may just be the ideal solution for you.

This router is classed as a Dual SIM 4G router, meaning that it has two SIM card slots.  You can insert two 4G SIM Cards, but the router only has a single 4G modem installed inside so it can only use one of these SIM cards at a time for the 4G mobile broadband connection.  The reason the second SIM card slot is there is because it can provide an extra resilience option in case the primary network SIM card becomes disconnected by the mobile network.  This disconnection may be because of a network failure or simply because the sim card bill was not paid – it can happen!  Ideally the backup SIM card would be on a separate network to the primary SIM card, so in the event that the primary network, let’s say for example this is O2, has a network fault, then the RUT950 router can switch to the backup SIM card, in this case it might be Vodafone.  This means the dual SIM router can provide a backup network solution to enable the router to provide the 4G connection.

Most SIM cards used in the Teltonika RUT950 router will be Fixed IP SIM Cards, meaning that they are from a Fixed IP SIM provider who enable the router to connect to their APN (Access Point Name) and through this APN provide the 4G connection with a Fixed IP address so that the router can be remotely accessed and this means that port forwarding can be used to connect to the devices on the LAN side of the Teltonika router.  Fixed IP SIM Cards are available with either a public IP address or private IP address.

RUT950 with Public Fixed IP SIM Card

In the case of using the RUT950 with a public IP fixed IP SIM card you would be able to communicate directly with the router using the fixed, public IP address directly from anywhere on the Internet.  This means that you will need to correctly configure all the security features of the RUT950 router to prevent unauthorised access to the router and also ensure that any devices being connected to using the RUT950 port forwarding are also secured against unauthorised access using the seciurity features of your devices.  For example, if port forwarding to a CCTV NVR then ensure that the NVR security features are enabled and configured and this includes changing the default admin user names and passwords.

RUT950 with Private Fixed IP SIM Card

In the case of using the Teltonika router with a private IP fixed IP SIM card, the router will connect to the 4G network, again using the APN provided by your Fixed IP SIM network provider, but the IP address that is allocated to the router 4G connection will be private on the fixed IP SIM network providers network.  This means the router is not directly contactable from the Internet and in order to communicate with your Teltonika router you will first of all need to create a VPN from your PC / Laptop to the fixed IP sim provider VPN server and this way you will be able to communicate with your RUT950 and use port forwarding to communicate with your attached devices on the LAN.  Using the Teltonika RUT950 with a Private Fixed IP SIM card is the more secure way to use this service.

RUT950 with standard 4G SIM (Non Fixed IP)

If you just need a 4G mobile broadband Internet connection and so not need to remotely access the Teltonika router, or remotely connect to any of the attached devices on the LAN, then you can use a standard 4G SIM card, directly obtained from the UK mobile phone networks, Vodafone, O2, 3Mobile and EE.  This may be if you just need those attached devices to communicate outwards.  For example, using a Teltonika RUT950 router with a standard 4G SIM card can be used to create a VPN to a VPN server, because the Teltonika router, acting as a VPN client can connect to the VPN server because the VPN server has a fixed IP address.  In this scenario the Teltonika router cannot act as the VPN server, because using a normal 4G data SIM card the RUT950 is not contactable.  Many users want to use an unlimited data SIM card obtained directly from the mobile networks, because it appears like a cheap option and then realise that they cannot remotely connect to the router, nor use DDNS and their next search is for an unlimited data fixed IP SIM card, but all they find are fixed IP SIM plans with monthly allowances at a much higher cost than an unlimited SIM but that is because it is a service that enables remote access so of course that service has a value and an associated cost.


The Teltonika RUT950 has several features such as ping reboot / Cell ICMP check that need to be configured to help the router maintain it’s 4G connection because 3G and 4G and even 5G mobile broadband services are an always available service rather than an always on service.  Using a feature such as Ping Reboot, the RUT950 router can ping an IP address over the Internet at regular intervals to confirm it has a valid Internet connection, rather than just being able to see the local mobile network base station.  In the event the router has been disconnected by the mobile network it can reboot the modem or router to try and reconnect.  This will mean that whilst the router will not be contactable at this time, the ping reboot feature will provide a solution the same as powering off and on, which we all know is one of the best ways to get something to work!  It is worth knowing that the RUT950 router, or in fact any Teltonika router, or any other brand of 4G router cannot guarantee a 100% uptime using a single SIM / single modem as the router itself relies upon the 4G network to ensure availability and connection and the mobile networks do not provide this guarantee.  The ping reboot, timed reboot and other mechanisms used by the Teltonika router are designed to get the router back online as quickly as possible in the event the mobile network disconnects it.  You can also get the router to connect to the Teltonika RMS platform so it can update the Teltonika RMS platform with information about the router, so you will be able to see periods of disconnection and get notifications of when the router has been disconnected and notifications of when it has been able to reconnect.  Using a Fixed IP SIM Card provider will also not be able to provide a guaranteed 100% uptime for your 4G router.


Mobile module 4G (LTE) – Cat 4 up to 150 Mbps, 3G – Up to 42 Mbps, 2G – Up to 236.8 kbps
SIM switch 2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, SIM idle protection
Status Signal strength, SINR, RSRP, RSRQ, Bytes sent/received
Bridge Direct connection (bridge) between mobile ISP and device on LAN
Passthrough Router assigns its mobile WAN IP address to another device on LAN
SMS SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP
Black/White list Operator black/white list
Multiple PDN (optional) Possibility to use different PDNs for multiple network access and services
Band management Band lock, Used band status display
Wireless mode IEEE 802.11b/g/n, Access Point (AP), Station (STA)
WiFi WPA2-Enterprise (with external/internal Radius server), WPA2-PSK, WPA-PSK, WEP, MAC Filter
WiFi security WPA2-Enterprise – PEAP, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation
SSID SSID stealth mode and access control based on MAC address
WiFi users Up to 100 simultaneous connections
Wireless Hotspot Captive portal (Hotspot), internal/external Radius server, built in customizable landing page
WAN 1 x WAN port (can be configured to LAN) 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
LAN 3 x LAN ports, 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
Routing Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, NHRP)
Network protocols TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SMNP, MQTT, Wake On Lan (WOL)
VoIP passthrough support H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection monitoring Ping Reboot, Periodic Reboot, LCP and ICMP for link inspection
Firewall Port forward, traffic rules, custom rules
DHCP Static and dynamic IP allocation, DHCP Relay
QoS / Smart Queue Management (SQM) Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
DDNS Supported >25 service providers, others can be configured manually
Network backup VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as backup, using automatic Failover
Load balancing Balance your internet traffic over multiple WAN connections
NetSnapper (optional) Mobile connection management, data compression VPN client (not available in standard FW)
SSHFS (optional) Possibility to mount remote file system via SSH protocol (not available in standard FW)
Authentication Pre-shared key, digital certificates, X.509 certificates
Firewall Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
Attack prevention DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention ( SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
WiFi security WPA2-Enterprise – PEAP, EAP-TLS, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation
VLAN Port based and tag based VLAN separation
Mobile quota control Set up custom data limits for both SIM cards
WEB filter Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only
Access control Flexible access control of TCP, UDP, ICMP packets, MAC address filter
OpenVPN Multiple clients and server can be running simultaneously, 12 encryption methods
IPsec IKEv1, IKEv2, supports up to 4 x VPN IPsec tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256)
GRE GRE tunnel
PPTP, L2TP Client/Server services can run simultaneously
Stunnel Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs’ code
SSTP SSTP client instance support
ZeroTier ZeroTier VPN
ID range 1-255
Allow Remote Access Allow access through WAN
Custom registers Modbus TCP custom register block requests, which read/write to a file inside the router, and can be used to extend Modbus TCP Slave functionality
Supported functions 01, 02, 03, 04, 05, 06, 15, 16
Supported data formats 8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit float (Big endian, Big endian with byte-swapped, Little endian, Little endian with byte-swapped)
Protocol HTTP(S), MQTT, Azure MQTT
MQTT gateway Allows sending commands and receiving data from Modbus Master through MQTT broker
WEB UI HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log
FOTA Firmware update from server, automatic notification
SSH SSH (v1, v2)
SMS SMS status, SMS configuration, send/read SMS via HTTP POST/GET
Call Reboot, Status, WiFi on/off, Mobile data on/off, Output on/off
TR-069 OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
MQTT MQTT Broker, MQTT publisher
SNMP SNMP (v1, v2, v3), SNMP trap
MODBUS MODBUS TCP status/control
RMS Teltonika Remote Management System (RMS)
Cloud of Things Allows monitoring of: Device data, Mobile data, Network info, Availability
ThingWorx Allows monitoring of: WAN Type, WAN IP Mobile Operator Name, Mobile Signal Strength, Mobile Network Type
Cumulocity Allows monitoring of: Device Model, Revision and Serial Number, Mobile Cell ID, ICCID, IMEI, Connection Type, Operator, Signal Strength, WAN Type and IP
Azure IoT Hub Can send device IP, Number of bytes send/received/ 3G connection state, Network link state, IMEI, ICCID, Model, Manufacturer, Serial, Revision, IMSI, Sim State, PIN state, GSM signal, WCDMA RSCP WCDMA EC/IO, LTE RSRP, LTE SINR, LTE RSRQ, CELL ID, Operator, Operator number, Connection type, Temperature, PIN count to Azure IoT Hub server
CPU Atheros Wasp, MIPS 74Kc, 550 MHz
RAM 128 MB, DDR2
FLASH memory 16 MB SPI Flash
WEB UI Update FW from file, check FW on server, configuration profiles, configuration backup, restore point
FOTA Update FW/configuration from server
RMS Update FW/configuration for multiple devices
Keep settings Update FW without losing current configuration
Operating system RutOS (OpenWrt based Linux OS)
Supported languages Busybox shell, Lua, C, C++
Development tools SDK package with build environment provided
Input 1 x Digital non-isolated input (on 4 pin power connector)
Output 1 x Digital open collector output (30 V, 300 mA, on 4 pin power connector)
Connector 4 pin industrial DC power socket
Input voltage range 9 – 30 VDC (4 pin industrial socket), reverse polarity protection; surge protection >31 VDC 10us max
PoE (passive) Passive PoE over spare pairs. Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at standards
Power consumption < 2 W idle, < 7 W Max
Ethernet 4 x RJ45 ports, 10/100 Mbps
I/O’s 2 Inputs/Outputs pin on 4 pin power connector (available from HW revision 1600)
Status LEDs 1 x bi-color connection status LED, 5 x connection strength LEDs, 4 x LAN status LEDs, 1 x Power LED
SIM 2 x SIM slots (Mini SIM – 2FF), 1.8 V/3 V, external SIM holders, eSIM (Optional)
Power 4 pin power connector with 2 pins for Input/Output
Input/Output 2 programmable Inputs/Outputs
Antennas 2 x SMA for LTE, 2 x RP-SMA for WiFi antenna connectors
Reset Reset/restore to default button
Casing material Aluminium housing, plastic panels
Dimensions 100 x 110 x 50 mm (L x W x H)
Weight 280 g
Mounting options DIN rail (can be mounted on two sides), flat surface placement
Operating temperature -40 °C to 75 °C
Operating humidity 10% to 90% non-condensing
Ingress Protection Rating IP30
MTBF 270000 h
Regulatory CE/RED, FCC, IC, PTCRB, RCM, EAC, CCC, RoHS, WEEE, IP rating, Anatel, GCF, TRA approval, REACH, DNV GL, Declaration of Software Security, Thailand NBTC, Ukraine UCRF, WiFi Certified, SDPPI (POSTEL)
Operator AT&T, Verizon
Standards Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-19 V2.1.0, Draft EN 301 489-52 V1.1.0 FCC 47 CFR Part 15B (2018), ANSI C63.4 (2014)
ESD EN61000-4-2:2009
RS EN 61000-4-3:2006 + A1:2008 + A2:2010
EFT EN 61000-4-4:2012
Surge immunity (AC Power Line) EN 61000-4-5:2006
Surge immunity (Ethernet ports) EN 61000-4-5:2014, clause 7.1 of ITU-T K21
Transient and surges ISO 7632-2:2004
CS EN 61000-4-6:2009
DIP EN 61000-4-11:2004
Standards EN 300 328 V2.1.1, EN 301 511 V12.5.1, EN 301 908-1 V11.1.1, EN 301 908-2 V11.1.1, EN 301 908-13 V11.1.1 AS/CA S042.1:2018, AS/ACIF S042.3:2005, AS/CA S042.4:2018, AS/NZS 4268:2017 FCC 47 CFR Part 15C, FCC 47 CFR Part 22H, FCC 47 CFR Part 24E, FCC 47 CFR Part 27
Standards IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013 AS/NZS 60950.1:2015 EN 50665:2017, EN 62311:2008 FCC 47 CFR Part 1 1.1310
Ingress Protect LST EN 60529:1999+A1+AC:2002
Vibration Class guideline-DNVGL-CG-0339:2016
EN 60068-2-6:2008


There are no reviews yet.

Be the first to review “Teltonika RUT950 4G Router”

Your email address will not be published.