Teltonika RUT950 4G LTE WLAN Router
The Teltonika RUT950 is a high-performance, industrial 4G LTE WiFi router designed as a main or backup internet source for professional applications. The RUT950 guarantees a reliable internet connection with high data throughput and data redundancy, making it ideal for mission-critical cellular communication.
PRODUCT DESCRIPTION //RUT950 is a high-performance industrial 4G LTE Wi-Fi router designed as a Main/Backup internet source and guarantees a reliable internet connection with high data throughput and data redundancy. // Compatible with the Teltonika Networks Remote Management System (RMS) for easy and secure monitoring. //It has four Ethernet ports, two external SIM holders, digital I/O, and signal strength status LED indicators. //Powered by RutOS - a unified operating system for all Teltonika Networks routers, this device is highly secure and customizable.
SPECIFICATION
| Features / filters | |
| Communication type | 4G/LTE, Wi-Fi, |
| LTE category | Cat.4 (150Mb/s Download, 50Mb/s Upload) |
| Maximum wireless transmission speed | 300 Mb/s |
| Number of LAN ports | 4x 10/100BaseTX (RJ45) |
| Operating frequency | 2.4 GHz, LTE, |
| Wireless network standards | IEEE 802.11n |
| Antenna gain | Under 10dbi |
| Dual SIM | Yes |
| IP Rating | IP30 |
| LTE bands | B1 (2100MHz), B3 (1800MHz), B7 (2600MHz), B8 (900MHz), B20 (800MHz), B28A (700 MHz), |
| RAM memory | 128MB |
| Type of device power supply | Power supply, Passive PoE, |
Technical SpecificationMobile connection Mobile module 4G (LTE) - Cat 4 to 150 Mbps, 3G to 42 Mbps, 2G to 236.8 kbps SIM cards 2 SIM cards, automatic switching cases: weak signal, data limit, SMS limit, roaming, no network, network blocking, data connection error, SIM protection at rest
Status Signal strength, SINR, RSRP, RSRQ, sent/received bytes Bridge mode Direct connection (bridge) between mobile ISP and LAN device SMS SMS status, SMS configuration, sending/reading SMS via HTTP POST/ GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP Black/white list Black/white list of operators Multiple PDN (optional) Ability to use different PDNs to access multiple networks and services Band management Band lock, displaying the status of the band being used Wireless networks Wireless mode IEEE 802.11b/g/n, Access Point (AP), Station (STA) Wi-Fi WPA2-Enterprise (with external/internal Radius server), WPA2-PSK, WPA-PSK, WEP, MAC filter Wi-Fi security WPA2 - Enterprise - PEAP, TLS, TTLS, AES-CCMP, TKIP, Auto Cipher modes, customer separation SSID SSID stealth mode and access control based on MAC address Wi-Fi users Up to 100 simultaneous connections Hotspot Captive portal (Hotspot), internal/external Radius server, built into a configurable landing page Ethernet WAN 1 x WAN (can be configured for LAN operation) 10/ 100 Mbps, compliant with IEEE 802.3, IEEE 802.3u standards, supports auto MDI/ MDIX LAN 3 x LAN ports, 10/ 100 Mbps, compliant with IEEE 802.3, IEEE 802.3u, MDI/MDIX standards - automatic support Network Routing Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2) Network protocols TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, MQTT VoIP support passthrough H.323 and SIP-alg NAT helpers protocol, enabling correct forwarding of VoIP packets Monitoring of connections Ping Reboot, periodic Reboot, LCP and ICMP for call control
Firewall Port forwarding, network traffic rules, own rules DHCP Static and dynamic IP allocation, DHCP Relayd QoS Queuing of traffic priorities by source/destination, service, protocol or port, WMM, 802.11e DDNS Supported >25 service providers, others can be configured manually Load balancing Balancing Internet traffic over multiple WAN connections NetSnapper (optional) Mobile call management, VPN client data compression (not available in standard software)
SSHFS (optional) Possibility to mount a remote filesystem via SSH protocol (not available in standard software)
Security Authentication Shared key, digital certificates, X.509 certificates Network backup VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as a backup, using automatic failover switching Firewall Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT; NAT-T Prevention of attacks DDOS prevention (SYN protection, SSH attack prevention, HTTP/ HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
Wi-Fi security WPA2 - Enterprise - PEAP, EAP-TLS, TLS, TTLS, AES-CCMP, TKIP, Auto Cipher modes, customer separation VLAN VLAN separation based on ports and tags Limitation Custom data limits for both SIM cards WEB filter Black list for blocking unwanted websites, white list for determining permitted websites Access control Flexible access control for TCP, UDP, ICMP, MAC address filters VPN OpenVPN Possibility of simultaneous operation of multiple clients and server, 12 encryption methods OpenVPN encryption DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC IPsec IKEv1, IKEv2, supports up to 4 IPsec VPN tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256) GRE GRE tunnel PPTP, L2TP Client/server services can be run simultaneously Stunnel Proxy designed to add TLS encryption functions to existing clients and servers without changing program code.
SSTP Customer instance support SSTP Monitoring and management WEB UI HTTP/ HTTTPS, status, configuration, FW, CLI update, troubleshooting, event log, system log, kernel log FOTA Remote firmware update from the server, automatic notifications. SSH SSH (v1, v2) SMS SMS status, SMS configuration, sending/reading SMS via HTTP POST/ GET TR-069 OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AV systems MQTT MQTT Broker, MQTT publisher SNMP SNMP (v1, v2, v3), SNMP trap JSON-RPC API management by HTTP/HTTPS MODBUS MODBUS TCP status/control RMS Teltonika Remote Management System (RMS) - Teltonika Remote Management System System parameters CPU Atheros Wasp, MIPS 74Kc, 550MHz RAM 128MB, DDR2 FLASH memory 16MB SPI Flash Software/configuration WEB UI Software update from a file, checking the software on the server, configuration profiles, configuration backup, restore point FOTA Software upgrade/configuration from server RMS Software/configuration update for multiple devices Keep the settings Software upgrade without losing the current configuration Operating system RutOS (OpenWrt operating system based on Linux) Languages supported Busybox shell, Lua, C, C++ Programming tools GPL package with attached graphics environment Power supply The link 4-pin industrial DC power outlet Input voltage range 9 - 30 VDC (4-pole industrial socket), reverse polarity protection; surge protection >31VDC 10us max. PoE (passive) Can be powered via LAN port with 24V (passive PoE), not compatible with IEEE802.3af and 802.3at standards Power consumption < 2 In standby mode, < 7 W max. Physical interfaces (ports, LEDs, antennas, buttons, SIM) Ethernet 4 x RJ45, 10/ 100 Mbps LEDs 1 x two-color connection status LED, 5 x connection force LEDs, 4 x LAN status LEDs, 1 x power LED SIM 2 x SIM sockets (Mini SIM - 2FF), 1.8V/ 3V Power supply 4-pin industrial DC power outlet Antennas 2 x SMA for LTE, 2 x RP-SMA for Wi-Fi antenna connectors Reset Buttons for resetting to factory settings Physical characteristics Housing material Aluminium housing, plastic panels Dimensions 80 mm x 106 mm x 46 mm (H x W x D) Weight 235 g Mounting options using a DIN rail (can be mounted on both sides), flat on the surface Working environment Ambient temperature during operation -40° C to 75° C Ambient humidity during operation 10% to 90% non-condensing IP degree of protection IP30 MTBF 270000 h Certificates Standards CE/ RED, FCC , IC/ ISED , EAC, RCM, PTCRB, RoHS, WEEE, Wi-Fi Alliance EMI IMMUNITY
Standards Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-19 V2.1.0, Draft EN 301 489-52 V1.1.0 ESD EN61000-4-2:2009 RS EN 61000-4-3:2006 + A1:2008 + A2:2010 EFT EN 61000-4-4:2012 Surge protection EN 61000-4-5:2006 Transition and voltage peaks ISO 7632-2:2004 CS EN 61000-4-6:2009 DIP EN 61000-4-11:2004 RF Standards EN 300 328 V2.1.1, EN 301 511 V12.5.1, EN 301 908-1 V11.1.1, EN 301 908-2 V11.1.1, EN 301 908-13 V11.1.1
AS/ CA S042.1:2018, AS/ ACIF S042.3:2005, AS/ CA S042.4:2018, AS/ NZS 4268:2017 Security Standards IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013, AS/NZS 60950.1:2015, EN 50665:2017, EN 62311:2008 Environment Ingress Protect LST EN 60529:1999+A1+AC:2002 Vibrations Class guideline-DNVGL-CG-0339:2016, EN 60068-2-6:2008
| Mobile connection | |
| Mobile module | 4G (LTE) - Cat 4 to 150 Mbps, 3G to 42 Mbps, 2G to 236.8 kbps |
| SIM cards | 2 SIM cards, automatic switching cases: weak signal, data limit, SMS limit, roaming, no network, network blocking, data connection error, SIM protection at rest |
| Status | Signal strength, SINR, RSRP, RSRQ, sent/received bytes |
| Bridge mode | Direct connection (bridge) between mobile ISP and LAN device |
| SMS | SMS status, SMS configuration, sending/reading SMS via HTTP POST/ GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP |
| Black/white list | Black/white list of operators |
| Multiple PDN (optional) | Ability to use different PDNs to access multiple networks and services |
| Band management | Band lock, displaying the status of the band being used |
| Wireless networks | |
| Wireless mode | IEEE 802.11b/g/n, Access Point (AP), Station (STA) |
| Wi-Fi | WPA2-Enterprise (with external/internal Radius server), WPA2-PSK, WPA-PSK, WEP, MAC filter |
| Wi-Fi security | WPA2 - Enterprise - PEAP, TLS, TTLS, AES-CCMP, TKIP, Auto Cipher modes, customer separation |
| SSID | SSID stealth mode and access control based on MAC address |
| Wi-Fi users | Up to 100 simultaneous connections |
| Hotspot | Captive portal (Hotspot), internal/external Radius server, built into a configurable landing page |
| Ethernet | |
| WAN | 1 x WAN (can be configured for LAN operation) 10/ 100 Mbps, compliant with IEEE 802.3, IEEE 802.3u standards, supports auto MDI/ MDIX |
| LAN | 3 x LAN ports, 10/ 100 Mbps, compliant with IEEE 802.3, IEEE 802.3u, MDI/MDIX standards - automatic support |
| Network | |
| Routing | Static routing, dynamic routing (BGP, OSPF v2, RIP v1/v2) |
| Network protocols | TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, MQTT |
| VoIP support passthrough | H.323 and SIP-alg NAT helpers protocol, enabling correct forwarding of VoIP packets |
| Monitoring of connections | Ping Reboot, periodic Reboot, LCP and ICMP for call control |
| Firewall | Port forwarding, network traffic rules, own rules |
| DHCP | Static and dynamic IP allocation, DHCP Relayd |
| QoS | Queuing of traffic priorities by source/destination, service, protocol or port, WMM, 802.11e |
| DDNS | Supported >25 service providers, others can be configured manually |
| Load balancing | Balancing Internet traffic over multiple WAN connections |
| NetSnapper (optional) | Mobile call management, VPN client data compression (not available in standard software) |
| SSHFS (optional) | Possibility to mount a remote filesystem via SSH protocol (not available in standard software) |
| Security | |
| Authentication | Shared key, digital certificates, X.509 certificates |
| Network backup | VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as a backup, using automatic failover switching |
| Firewall | Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT; NAT-T |
| Prevention of attacks | DDOS prevention (SYN protection, SSH attack prevention, HTTP/ HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) |
| Wi-Fi security | WPA2 - Enterprise - PEAP, EAP-TLS, TLS, TTLS, AES-CCMP, TKIP, Auto Cipher modes, customer separation |
| VLAN | VLAN separation based on ports and tags |
| Limitation | Custom data limits for both SIM cards |
| WEB filter | Black list for blocking unwanted websites, white list for determining permitted websites |
| Access control | Flexible access control for TCP, UDP, ICMP, MAC address filters |
| VPN | |
| OpenVPN | Possibility of simultaneous operation of multiple clients and server, 12 encryption methods |
| OpenVPN encryption | DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC |
| IPsec | IKEv1, IKEv2, supports up to 4 IPsec VPN tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256) |
| GRE | GRE tunnel |
| PPTP, L2TP | Client/server services can be run simultaneously |
| Stunnel | Proxy designed to add TLS encryption functions to existing clients and servers without changing program code. |
| SSTP | Customer instance support SSTP |
| Monitoring and management | |
| WEB UI | HTTP/ HTTTPS, status, configuration, FW, CLI update, troubleshooting, event log, system log, kernel log |
| FOTA | Remote firmware update from the server, automatic notifications. |
| SSH | SSH (v1, v2) |
| SMS | SMS status, SMS configuration, sending/reading SMS via HTTP POST/ GET |
| TR-069 | OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AV systems |
| MQTT | MQTT Broker, MQTT publisher |
| SNMP | SNMP (v1, v2, v3), SNMP trap |
| JSON-RPC | API management by HTTP/HTTPS |
| MODBUS | MODBUS TCP status/control |
| RMS | Teltonika Remote Management System (RMS) - Teltonika Remote Management System |
| System parameters | |
| CPU | Atheros Wasp, MIPS 74Kc, 550MHz |
| RAM | 128MB, DDR2 |
| FLASH memory | 16MB SPI Flash |
| Software/configuration | |
| WEB UI | Software update from a file, checking the software on the server, configuration profiles, configuration backup, restore point |
| FOTA | Software upgrade/configuration from server |
| RMS | Software/configuration update for multiple devices |
| Keep the settings | Software upgrade without losing the current configuration |
| Operating system | RutOS (OpenWrt operating system based on Linux) |
| Languages supported | Busybox shell, Lua, C, C++ |
| Programming tools | GPL package with attached graphics environment |
| Power supply | |
| The link | 4-pin industrial DC power outlet |
| Input voltage range | 9 - 30 VDC (4-pole industrial socket), reverse polarity protection; surge protection >31VDC 10us max. |
| PoE (passive) | Can be powered via LAN port with 24V (passive PoE), not compatible with IEEE802.3af and 802.3at standards |
| Power consumption | < 2 In standby mode, < 7 W max. |
| Physical interfaces (ports, LEDs, antennas, buttons, SIM) | |
| Ethernet | 4 x RJ45, 10/ 100 Mbps |
| LEDs | 1 x two-color connection status LED, 5 x connection force LEDs, 4 x LAN status LEDs, 1 x power LED |
| SIM | 2 x SIM sockets (Mini SIM - 2FF), 1.8V/ 3V |
| Power supply | 4-pin industrial DC power outlet |
| Antennas | 2 x SMA for LTE, 2 x RP-SMA for Wi-Fi antenna connectors |
| Reset | Buttons for resetting to factory settings |
| Physical characteristics | |
| Housing material | Aluminium housing, plastic panels |
| Dimensions | 80 mm x 106 mm x 46 mm (H x W x D) |
| Weight | 235 g |
| Mounting options | using a DIN rail (can be mounted on both sides), flat on the surface |
| Working environment | |
| Ambient temperature during operation | -40° C to 75° C |
| Ambient humidity during operation | 10% to 90% non-condensing |
| IP degree of protection | IP30 |
| MTBF | 270000 h |
| Certificates | |
| Standards | CE/ RED, FCC , IC/ ISED , EAC, RCM, PTCRB, RoHS, WEEE, Wi-Fi Alliance |
| EMI IMMUNITY | |
| Standards | Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-19 V2.1.0, Draft EN 301 489-52 V1.1.0 |
| ESD | EN61000-4-2:2009 |
| RS | EN 61000-4-3:2006 + A1:2008 + A2:2010 |
| EFT | EN 61000-4-4:2012 |
| Surge protection | EN 61000-4-5:2006 |
| Transition and voltage peaks | ISO 7632-2:2004 |
| CS | EN 61000-4-6:2009 |
| DIP | EN 61000-4-11:2004 |
| RF | |
| Standards | EN 300 328 V2.1.1, EN 301 511 V12.5.1, EN 301 908-1 V11.1.1, EN 301 908-2 V11.1.1, EN 301 908-13 V11.1.1 AS/ CA S042.1:2018, AS/ ACIF S042.3:2005, AS/ CA S042.4:2018, AS/ NZS 4268:2017 |
| Security | |
| Standards | IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013, AS/NZS 60950.1:2015, EN 50665:2017, EN 62311:2008 |
| Environment | |
| Ingress Protect | LST EN 60529:1999+A1+AC:2002 |
| Vibrations | Class guideline-DNVGL-CG-0339:2016, EN 60068-2-6:2008 |