RUTX11

Overview

RUTX11 is a very powerful device equipped with Dual-SIM with auto Failover, Backup WAN, and other SW features. A wide range of internal hardware interfaces allows this product to be used in power-hungry industrial applications where speed and robustness are at the heart of the solution. 4G LTE – Cat 6 DL up to 300 Mbps in sync with 4 x 1 Gbit Ethernet ports allows for a seamless data transfer experience with auto-failover and a backup WAN. Bluetooth LE allows sensors to be connected directly to the router, thus minimizing the overall solution ecosystem.

Features

Mobile
Mobile module
4G (LTE) – Cat 6 up to 300 Mbps, 3G – Up to 42 Mbps
SIM switch
2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail
Status
Signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, Bytes sent/received, connected band, IMSI, ICCID
SMS
SMS status, SMS configuration, send/read SMS via HTTP POST/GET, Email to SMS, SMS to Email, SMS to HTTP, SMS to SMS, SMS auto reply
USSD
Supports sending and reading Unstructured Supplementary Service Data messages
Black/White list
Operator black/white list
Band management
Band lock, Used band status display
APN
Auto APN
Bridge mode
Direct connection (bridge) between mobile ISP and device on LAN
Multiple PDN
Possibility to use different PDNs for multiple network access and services
Wireless

Wireless mode
802.11b/g/n/ac Wave 2 (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition, Access Point (AP), Station (STA)
WiFi security
WPA3-EAP, WPA3-SAE, WPA2-Enterprise-PEAP, WPA2-PSK, WEP; AES-CCMP, TKIP, Auto Cipher modes, client separation and connects up to 150 simultaneous connections
ESSID ESSID stealth mode
Wireless Hotspot Captive portal (Hotspot), internal/external Radius server, built in customizable landing page
Ethernet
WAN
1 x WAN port (can be configured as LAN) 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover
LAN
3 x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover
Bluetooth

Bluetooth 4.0
Bluetooth low energy (LE) for short range communication
Network

Routing
Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, NHRP)
Network protocols
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SMNP, MQTT, Wake On Lan (WOL)
VoIP passthrough support
H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection monitoring
Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection
Firewall
Port forward, traffic rules, custom rules
DHCP
Static and dynamic IP allocation, DHCP Relay, Relayd
QoS / Smart Queue Management (SQM)
Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
DDNS
Supported >25 service providers, others can be configured manually
Network backup
VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as backup, using automatic Failover
Load balancing
Balance your internet traffic over multiple WAN connections
SSHFS (optional)
Possibility to mount remote file system via SSH protocol (not available in standard FW)
Security

Authentication
Pre-shared key, digital certificates, X.509 certificates
Firewall
Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
Attack prevention
DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention ( SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
VLAN
Port and tag based VLAN separation
Mobile quota control
Set up custom data limits for both SIM cards
WEB filter
Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only
Access control
Flexible access control of TCP, UDP, ICMP packets, MAC address filter
VPN

OpenVPN
Multiple clients and server can be running simultaneously, 12 encryption methods
OpenVPN Encryption
DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC
IPsec
IKEv1, IKEv2, supports up to 4 x VPN IPsec tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256)
GRE
GRE tunnel
PPTP, L2TP
Client/Server instances can run simultaneously, L2TPv3 support
Stunnel
Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs' code
DMVPN
Method of building scalable IPsec VPNs
SSTP
SSTP client instance support
ZeroTier
ZeroTier VPN client support
WireGuard
WireGuard VPN client and server support
Modbus

Modbus TCP Slave

ID range
Respond to one ID in range [1;255] or any
Allow Remote Access
Allow access through WAN
Custom registers
MODBUS TCP custom register block requests, which read/write to a file inside the router, and can be used to extend MODBUS TCP Slave functionality
Modbus TCP Master

Supported functions
01, 02, 03, 04, 05, 06, 15, 16
Supported data formats
8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII
Modbus Data to Server

Protocols
HTTP(S), MQTT, Azure MQTT, Kinesis
MQTT Gateway

MQTT gateway
Allows sending commands and receiving data from MODBUS Master through MQTT broker
Monitoring & Management

WEB UI
HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log
FOTA
Firmware update from server, automatic notification
SSH
SSH (v1, v2)
SMS
SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to Email, SMS to HTTP, SMS to SMS, SMS autoreply
Call
Reboot, Status, WiFi on/off, Mobile data on/off, Output on/off
TR-069
OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
MQTT
MQTT Broker, MQTT publisher
SNMP
SNMP (v1, v2, v3), SNMP trap
JSON-RPC
Management API over HTTP/HTTPS
MODBUS
MODBUS TCP status/control
RMS
Teltonika Remote Management System (RMS)
IoT Platforms

Clouds of things
Allows monitoring of: Device data, Mobile data, Network info, Availability
ThingWorx
Allows monitoring of: WAN Type, WAN IP, Mobile Operator Name, Mobile Signal Strength, Mobile Network Type
Cumulocity
Allows monitoring of: Device Model, Revision and Serial Number, Mobile Cell ID, ICCID, IMEI, Connection Type, Operator, Signal Strength, WAN Type and IP
Azure IoT Hub Can send device IP, Number of bytes send/received, Mobile connection state, Network link state, IMEI, ICCID, Model, Manufacturer, Serial, Revision, IMSI, SIM State, PIN state, GSM signal, WCDMA RSCP, WCDMA EC/IO, LTE RSRP, LTE SINR, LTE RSRQ, CELL ID, Operator, Operator number, Connection type, Temperature, PIN count to Azure IoT Hub server
System Characteristics

CPU
Quad-core ARM Cortex A7, 717 MHz
RAM
256 MB, DDR3
FLASH storage
256 MB, SPI Flash
Firmware / Configuration

WEB UI
Update FW from file, check FW on server, configuration profiles, configuration backup
FOTA
Update FW/configuration from server
RMS
Update FW/configuration for multiple devices at once
Keep settings
Update FW without losing current configuration
Firmware Customization

Operating system
RutOS (OpenWrt based Linux OS)
Supported languages
Busybox shell, Lua, C, C++
Development tools
SDK package with build environment provided
Location Tracking

GNSS
GPS, GLONASS, BeiDou, Galileo and QZSS
Coordinates
GNSS coordinates via WebUI, SMS, TAVL, RMS
NMEA
NMEA 0183
Server software
Supported server software: TAVL, RMS
Geofencing
Configurable multiple geofence zones
USB

Data rate
USB 2.0
Applications
Samba share, USB-to-serial
External devices
Possibility to connect external HDD, flash drive, additional modem, printer
Storage formats
FAT, FAT32, NTFS
Input/Output
Input
1 x Digital input, 0 - 6 V detected as logic low, 8 - 30 V detected as logic high
Output
1 x Digital open collector output, max output 30 V, 300 mA
Events
SMS, EMAIL, RMS
Power

Connector
4 pin industrial DC power socket
Input voltage range
9 – 50 VDC, reverse polarity protection, voltage surge/transient protection
PoE (passive)
Passive PoE over spare pairs. Possibility to power up through LAN port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards
Power consumption
16 W Max
Physical Interfaces (Ports, Led's, Anntenas, Buttons, Sim)

Ethernet
4 x RJ45 ports, 10/100/1000 Mbps
I/O’s
1 x Digital Input, 1 x Digital Output on 4 pin power connector
Status LEDs
4 x WAN type LEDs, 2 x Mobile connection type, 5 x Mobile connection strength, 8 x LAN status, 1 x Power, 2 x 2.4G and 5G WiFi
SIM
2 x SIM slots (Mini SIM - 2FF), 1.8 V/3 V, external SIM holders
Power
1 x 4 pin power connector
Antennas
2 x SMA for LTE, 2 x RP-SMA for WiFi, 1 x RP-SMA for Bluetooth, 1 x SMA for GNSS
USB
1 x USB A port for external devices
Reset
Reboot/User default reset/Factory reset button
Other
1 x Grounding screw
Physical Specifications

Casing material
Aluminium housing with DIN rail mounting option
Dimensions (W x H x D)
115 x 44.2 x 95.1 mm
Weight
456 g
Mounting options
DIN rail, flat surface placement
Operating Environment

Operating temperature
-40 °C to 75 °C
Operating humidity
10% to 90% non-condensing
Ingress Protection Rating
IP30
Regulatory & Type Approvals

Regulatory
CE/RED, RoHS, REACH
Vehicle
ECE R10 (E-mark)
EMI Immunity

Standards
EN 55032:2015, EN 55035:2017, Draft ETSI EN 301 489-1 V2.2.1, ETSI EN 301 489-3 V2.1.1, Draft ETSI EN 301 489-17 V3.2.0
ESD
EN61000-4-2:2009
RS
EN 61000-4-3:2006 + A1:2008 + A2:2010
EFT
EN 61000-4-4:2012
Surge protection
EN 61000-4-5:2014
CS
EN 61000-4-6:2014
DIP
EN 61000-4-11:2004
RF

Standards
ETSI EN 300 328 V2.1.1, ETSI EN 301 893 V2.1.1, ETSI EN 300 440 V2.1.1
Safety

Standards
IEC 62368-1:2014 (Second Edition) EN 62368-1:2014+A11:2017 EN 50385:2017 EN 62232:2017

Resources