Teltonika RUT951 LTE 3G/4G router with dual SIM

Article no.: RUT951
Availability: 3pcs - Hurry up

Datasheet
Flyer

3 190 kr

RUT-951 from Teltonika, reliable 4G router
The router has 3 LAN ports for connection to a computer/printer or other. 1st WAN port for connecting e.g. Fiber modem or similar increases reliability. For example, if the Fiber connection goes down, 3G/4G automatically takes over. The WAN port can also be configured as a LAN port. This router has 2 slots for SIM cards, the router can alternate between SIM cards based on availability.

Can be bridged to provide public IP from mobile broadband to an underlying device, eg computer or router.

The RUT951 has built-in wireless networking and supports the 802.11n standard and is fully backward compatible with older devices. Recommended to be used in environments where stable operation is a must. Along with its professional features and scalability, it does an equally good job in industrial environments, moving vehicles, commercial environments or for building automation and more.

OpenVPN server and Site-To-Site VPN over GRE or IPSEC
Built-in vpn servers to avoid an extra vpn box in your network. You can either use OpenVPN server to connect clients directly to the router, or configure Site-To-Site VPN over GRE / IPSEC tunnels, or combine these. Of course, the router also supports VPN passthrough for any existing VPN server.

Really stable in operation
The product is built to be as stable and reliable as possible. A built-in watchdog checks both hardware and software and can restart the router if, for example, network access would be lost. You can also restart it via SMS. It is also possible to connect an extra internet source in addition to 3G/4G. You choose which is primary, and if one goes down, the other automatically takes over.

The SIM card is inserted behind a cover that is screwed on, to prevent the SIM card from being accidentally removed.

Support for DDNS
Dynamically update a domain name to always have the same address to the router. All services that follow the DDNS standard are supported.

Ping reboot
Configure the device to automatically restart upon loss of internet connection.

Miscellaneous
Supports WLAN standards b/g/n
SMA connectors (2 main+aux) for 3G/4G antenna
4 antennas included (2 pcs 3G/4G / 2 pcs WLAN)

This model replaces the Teltonika RUT950.

MOBILE
Mobile module	4G (LTE) – Cat 4 up to 150 Mbps, 3G – Up to 42 Mbps, 2G – Up to 236.8 kbps
SIM switch	2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, SIM idle protection
Status	Signal strength, SINR, RSRP, RSRQ, Bytes sent/received
Bridge	Direct connection (bridge) between mobile ISP and device on LAN
SMS	SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP
Black/White list	Operator black/white list
Multiple PDN (optional)	Possibility to use different PDNs for multiple network access and services
Band management	Band lock, Used band status display
WIRELESS
Wireless mode	IEEE 802.11b/g/n, Access Point (AP), Station (STA)
WiFi	WPA2-Enterprise (with external/internal Radius server), WPA2-PSK, WPA-PSK, WEP, MAC Filter
WiFi security	WPA2-Enterprise - PEAP, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation
SSID	SSID stealth mode and access control based on MAC address
WiFi users	Up to 100 simultaneous connections
Hotspot	Captive portal (Hotspot), internal/external Radius server, built in customizable landing page
ETHERNET
WAN	1 x WAN port (can be configured to LAN) 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
LAN	3 x LAN ports, 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
NETWORK
Routing	Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2)
Network protocols	TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMNP, MQTT
VoIP passthrough support	H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection monitoring	Ping Reboot, Periodic Reboot, LCP and ICMP for link inspection
Firewall	Port forward, traffic rules, custom rules
DHCP	Static and dynamic IP alocation, DHCP Relayd
QoS	Traffic priority quening by source/destination, service, protocol or port, traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
DDNS	Supported >25 service providers, others can be configured manually
Network backup	VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as backup, using automatic Failover
Load balancing	Balance your internet traffic over multiple WAN connections
NetSnapper (optional)	Mobile connection management, data compression VPN client (not available in standard FW)
SSHFS (optional)	Possibility to mount remote file system via SSH protocol (not available in standard FW)
SECURITY
Authentication	Pre-shared key, digital certificates, X.509 certificates
Firewall	Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
Attack prevention	DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention ( SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
WiFi security	WPA2-Enterprise – PEAP, EAP-TLS, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation
VLAN	Port based and tag based VLAN separation
Mobile quota control	Set up custom data limits for both SIM cards
WEB filter	Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only
Access control	Flexible access control of TCP, UDP, ICMP packets, MAC address filter
VPN
OpenVPN	Multiple clients and server can be running simultaneously, 12 encryption methods
OpenVPN Encryption	DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC
IPsec	IKEv1, IKEv2, supports up to 4 x VPN IPsec tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256)
GRE	GRE tunnel
PPTP, L2TP	Client/Server services can run simultaneously
Stunnel	Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs' code
SSTP	SSTP client instance support
MONITORING & MANAGEMENT
WEB UI	HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log
FOTA	Firmware update from sever, automatic notification
SSH	SSH (v1, v2)
SMS	SMS status, SMS configuration, send/read SMS via HTTP POST/GET
TR-069	OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVsystems
MQTT	MQTT Broker, MQTT publisher
SNMP	SNMP (v1, v2, v3), SNMP trap
JSON-RPC	Management API over HTTP/HTTPS
MODBUS	MODBUS TCP status/control
RMS	Teltonika Remote Management System (RMS)
SYSTEM CHARACTERISTICS
CPU	Atheros Wasp, MIPS 74Kc, 550 MHz
RAM	128 MB, DDR2
FLASH memory	16 MB SPI Flash
FIRMWARE / CONFIGURATION
WEB UI	Update FW from file, check FW on server, configuration profiles, configuration backup, restore point
FOTA	Update FW/configuration from server
RMS	Update FW/configuration for multiple devices
Keep settings	Update FW without loosing current configuration
FIRMWARE CUSTOMIZATION
Operating system	RutOS (OpenWrt based Linux OS)
Supported languages	Busybox shell, Lua, C, C++
Development tools	GPL package with build environment provided
POWER
Connector	4 pin industrial DC power socket
Input voltage range	9 – 30 VDC (4 pin industrial socket), reverse polarity protection; surge protection >31 VDC 10us max
PoE (passive)	Passive PoE over spare pairs. Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at standards
Power consumption	< 2 W idle, < 7 W Max
PHYSICAL INTERFACES (PORTS, LEDS, ANTENNAS, BUTTONS, SIM)
Ethernet	4 x RJ45 ports, 10/100 Mbps
Status LEDs	1 x bi-color connection status LED, 5 x connection strength LEDs, 4 x LAN status LEDs, 1 x Power LED
SIM	2 x SIM slots (Mini SIM – 2FF, 2st form factor), 1.8 V/3 V, external SIM holders
Power	4 pin industrial DC power socket
Anntenas	2 x SMA for LTE, 2 x RP-SMA for WiFi antenna connectors
Reset	Reset/restore to default button
PHYSICAL SPECIFICATION
Casing material	Aluminium housing, plastic panels
Dimensions	80 mm x 106 mm x 46 mm (H x W x D)
Weight	235 g
Mounting options	DIN rail (can be mounted on two sides), flat surface placement
OPERATING ENVIRONMENT
Operating temperature	-40 °C to 75 °C
Operating humidity	10% to 90% non-condensing
Ingress Protection Rating	IP30
MTBF	270000 h
REGULATORY & TYPE APPROVALS
Regulatory	CE/RED, FCC, IC/ISED, EAC, RCM, PTCRB, RoHS, WEEE, Wi-Fi Alliance (planned)
Operator	AT&T, Verizon
EMI IMMUNITY
Standards	Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-19 V2.1.0, Draft EN 301 489-52 V1.1.0
ESD	EN61000-4-2:2009
RS	EN 61000-4-3:2006 + A1:2008 + A2:2010
EFT	EN 61000-4-4:2012
Surge protection	EN 61000-4-5:2006
Transient and surges	ISO 7632-2:2004
CS	EN 61000-4-6:2009
DIP	EN 61000-4-11:2004
RF
Standards	EN 300 328 V2.1.1, EN 301 511 V12.5.1, EN 301 908-1 V11.1.1, EN 301 908-2 V11.1.1, EN 301 908-13 V11.1.1 AS/CA S042.1:2018, AS/ACIF S042.3:2005, AS/CA S042.4:2018, AS/NZS 4268:2017
SAFETY
Standards	IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013 AS/NZS 60950.1:2015 EN 50665:2017, EN 62311:2008
ENVIRONMENTAL
Ingress Protect	LST EN 60529:1999+A1+AC:2002
Vibration	Class guideline-DNVGL-CG-0339:2016 EN 60068-2-6:2008

MOBILE
Mobile module	4G (LTE) – Cat 4 up to 150 Mbps, 3G – Up to 42 Mbps, 2G – Up to 236.8 kbps
SIM switch	2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, SIM idle protection
Status	Signal strength, SINR, RSRP, RSRQ, Bytes sent/received
Bridge	Direct connection (bridge) between mobile ISP and device on LAN
SMS	SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP
Black/White list	Operator black/white list
Multiple PDN (optional)	Possibility to use different PDNs for multiple network access and services
Band management	Band lock, Used band status display
WIRELESS
Wireless mode	IEEE 802.11b/g/n, Access Point (AP), Station (STA)
WiFi	WPA2-Enterprise (with external/internal Radius server), WPA2-PSK, WPA-PSK, WEP, MAC Filter
WiFi security	WPA2-Enterprise - PEAP, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation
SSID	SSID stealth mode and access control based on MAC address
WiFi users	Up to 100 simultaneous connections
Hotspot	Captive portal (Hotspot), internal/external Radius server, built in customizable landing page
ETHERNET
WAN	1 x WAN port (can be configured to LAN) 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
LAN	3 x LAN ports, 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
NETWORK
Routing	Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2)
Network protocols	TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMNP, MQTT
VoIP passthrough support	H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection monitoring	Ping Reboot, Periodic Reboot, LCP and ICMP for link inspection
Firewall	Port forward, traffic rules, custom rules
DHCP	Static and dynamic IP alocation, DHCP Relayd
QoS	Traffic priority quening by source/destination, service, protocol or port, traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
DDNS	Supported >25 service providers, others can be configured manually
Network backup	VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as backup, using automatic Failover
Load balancing	Balance your internet traffic over multiple WAN connections
NetSnapper (optional)	Mobile connection management, data compression VPN client (not available in standard FW)
SSHFS (optional)	Possibility to mount remote file system via SSH protocol (not available in standard FW)
SECURITY
Authentication	Pre-shared key, digital certificates, X.509 certificates
Firewall	Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
Attack prevention	DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention ( SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
WiFi security	WPA2-Enterprise – PEAP, EAP-TLS, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes. Client separation
VLAN	Port based and tag based VLAN separation
Mobile quota control	Set up custom data limits for both SIM cards
WEB filter	Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only
Access control	Flexible access control of TCP, UDP, ICMP packets, MAC address filter
VPN
OpenVPN	Multiple clients and server can be running simultaneously, 12 encryption methods
OpenVPN Encryption	DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC
IPsec	IKEv1, IKEv2, supports up to 4 x VPN IPsec tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256)
GRE	GRE tunnel
PPTP, L2TP	Client/Server services can run simultaneously
Stunnel	Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs' code
SSTP	SSTP client instance support
MONITORING & MANAGEMENT
WEB UI	HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log
FOTA	Firmware update from sever, automatic notification
SSH	SSH (v1, v2)
SMS	SMS status, SMS configuration, send/read SMS via HTTP POST/GET
TR-069	OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVsystems
MQTT	MQTT Broker, MQTT publisher
SNMP	SNMP (v1, v2, v3), SNMP trap
JSON-RPC	Management API over HTTP/HTTPS
MODBUS	MODBUS TCP status/control
RMS	Teltonika Remote Management System (RMS)
SYSTEM CHARACTERISTICS
CPU	Atheros Wasp, MIPS 74Kc, 550 MHz
RAM	128 MB, DDR2
FLASH memory	16 MB SPI Flash
FIRMWARE / CONFIGURATION
WEB UI	Update FW from file, check FW on server, configuration profiles, configuration backup, restore point
FOTA	Update FW/configuration from server
RMS	Update FW/configuration for multiple devices
Keep settings	Update FW without loosing current configuration
FIRMWARE CUSTOMIZATION
Operating system	RutOS (OpenWrt based Linux OS)
Supported languages	Busybox shell, Lua, C, C++
Development tools	GPL package with build environment provided
POWER
Connector	4 pin industrial DC power socket
Input voltage range	9 – 30 VDC (4 pin industrial socket), reverse polarity protection; surge protection >31 VDC 10us max
PoE (passive)	Passive PoE over spare pairs. Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at standards
Power consumption	< 2 W idle, < 7 W Max
PHYSICAL INTERFACES (PORTS, LEDS, ANTENNAS, BUTTONS, SIM)
Ethernet	4 x RJ45 ports, 10/100 Mbps
Status LEDs	1 x bi-color connection status LED, 5 x connection strength LEDs, 4 x LAN status LEDs, 1 x Power LED
SIM	2 x SIM slots (Mini SIM – 2FF, 2st form factor), 1.8 V/3 V, external SIM holders
Power	4 pin industrial DC power socket
Anntenas	2 x SMA for LTE, 2 x RP-SMA for WiFi antenna connectors
Reset	Reset/restore to default button
PHYSICAL SPECIFICATION
Casing material	Aluminium housing, plastic panels
Dimensions	80 mm x 106 mm x 46 mm (H x W x D)
Weight	235 g
Mounting options	DIN rail (can be mounted on two sides), flat surface placement
OPERATING ENVIRONMENT
Operating temperature	-40 °C to 75 °C
Operating humidity	10% to 90% non-condensing
Ingress Protection Rating	IP30
MTBF	270000 h
REGULATORY & TYPE APPROVALS
Regulatory	CE/RED, FCC, IC/ISED, EAC, RCM, PTCRB, RoHS, WEEE, Wi-Fi Alliance (planned)
Operator	AT&T, Verizon
EMI IMMUNITY
Standards	Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-19 V2.1.0, Draft EN 301 489-52 V1.1.0
ESD	EN61000-4-2:2009
RS	EN 61000-4-3:2006 + A1:2008 + A2:2010
EFT	EN 61000-4-4:2012
Surge protection	EN 61000-4-5:2006
Transient and surges	ISO 7632-2:2004
CS	EN 61000-4-6:2009
DIP	EN 61000-4-11:2004
RF
Standards	EN 300 328 V2.1.1, EN 301 511 V12.5.1, EN 301 908-1 V11.1.1, EN 301 908-2 V11.1.1, EN 301 908-13 V11.1.1 AS/CA S042.1:2018, AS/ACIF S042.3:2005, AS/CA S042.4:2018, AS/NZS 4268:2017
SAFETY
Standards	IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013 AS/NZS 60950.1:2015 EN 50665:2017, EN 62311:2008
ENVIRONMENTAL
Ingress Protect	LST EN 60529:1999+A1+AC:2002
Vibration	Class guideline-DNVGL-CG-0339:2016 EN 60068-2-6:2008

Explanation of frequency bands

When choosing an antenna, pay attention to which frequency bands the antenna supports. Depending on which operator and where the antenna will be used, the frequency bands vary. Larger cities use 2600MHz while smaller towns use 800/900MHz with some support bands in between such as 1800/2100MHz.

A higher frequency band gives a higher speed but also has a shorter range. The same applies to the antenna, if you have a base station that transmits on 2600MHz, your antenna, antenna cable and the location of the antenna become more important than on a lower frequency band. Explanation of signal loss we will go through soon. Higher frequency bands also mean shorter range from the base station.

450MHz (coverage band) also known as the Net1 band is the frequency band that covers the most area in Sweden. Therefore, Net1 is known to be able to have reception where other operators don´t have a chance, but with low download and upload speeds. The reason why this band is called Net1 is because that the company Net1 has exclusive rights to this frequency band.

800MHz (coverage band) is used by all common operators, excluding Net1. The low frequency band means that 800MHz covers a lot of space. Therefore, the band is used outside big cities or smaller towns. 800MHz is the most used frequency band around Europe.

900MHz (coverage band) is the band that Tele2 and Telenor initially used as coverage band. 900MHz is a more unusual LTE band and in the beginning the band caused some problems when the clients (mobile phones etc.) could not connect to 900MHz. Today, the mobile phone manufacturers have adapted the mobile phones to be able to communicate on 900MHz.

1800MHz (capacity band) is the latest frequency band launched. All operators today use this band in metropolitan centers (apart from Net1).

2600MHz (capacity band) is a very well-used frequency band all over Europe. 2600MHz is the highest frequency band used for LTE, this means that the band also has the shortest range compared to 800/900MHz. Due to the high capacity, the band is used in metropolitan environments where many base stations are required to cover as much surface as possible and have as high a capacity as possible.

Frekvensplan 4G