RUTX11 is a very powerful device equipped with Dual-SIM with auto Failover, Backup WAN, and other SW features.
A wide range of internal hardware interfaces allows this product to be used in power-hungry industrial applications where speed and robustness are at the heart of the solution.
4G LTE – Cat 6 DL up to 300 Mbps in sync with 4 x 1 Gbit Ethernet ports allows for a seamless data transfer experience with auto-failover and a backup WAN.
Bluetooth LE allows sensors to be connected directly to the router, thus minimizing the overall solution ecosystem.

Standard Package Contains

Router RUTX11
Euro PSU
2 x LTE antennas (swivel, SMA male)
2 x WiFi antennas (swivel, RP-SMA male)
1 x GNSS antenna (adhesive, SMA Male)
1 x Bluetooth antenna (magnetic, RP-SMA male)
Ethernet cable (1.5 m)
QSG (Quick Start Guide)
Packaging box

Specifications

MOBILE

Mobile module: 4G (LTE) – Cat 6 up to 300 Mbps, 3G – Up to 42 Mbps
SIM switch: 2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail
Status: Signal strength, SINR, RSRP, RSRQ, Bytes sent/received, connected band, carrier aggregation, IMSI, ICCID
SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET, Email to SMS, SMS to Email, SMS to HTTP, SMS to SMS, SMS auto reply
USSD: Supports sending and reading Unstructured Supplementary Service Data messages
Black/White list: Operator black/white list
Multiple PDN: Possibility to use different PDNs for multiple network access and services
Band management: Band lock, Used band status display
APN: Auto APN
Bridge mode: Direct connection (bridge) between mobile ISP and device on LAN

WIRELESS

Wireless mode: 802.11ac (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition, Access Point (AP), Station (STA)
WiFi security: WPA3-EAP, WPA3-SAE, WPA2-Enterprise-PEAP, WPA2-PSK, WEP; AES-CCMP, TKIP, Auto Cipher modes, client separation
ESSID: ESSID stealth mode
Wireless Hotspot: Captive portal (Hotspot), internal/external Radius server, built in customizable landing page

ETHERNET

WAN: 1 x WAN port (can be configured as LAN) 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover
LAN: 3 x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover

BLUETOOTH

Bluetooth 4.0: Bluetooth low energy (LE) for short range communication

NETWORK

Routing: Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP)
Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet client, SNMP, MQTT, Wake on LAN (WOL), DLNA
VoIP passthrough support: H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection monitoring: Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection
Firewall: Port forwards, traffic rules, custom rules
DHCP: Static and dynamic IP allocation, DHCP Relay, Relayd
QoS / Smart Queue Management (SQM): Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
DDNS: Supported >25 service providers, others can be configured manually
Network backup: VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as an automatic Failover
Load balancing: Balance Internet traffic over multiple WAN connections
SSHFS (optional): Possibility to mount remote file system via SSH protocol (not available in standard FW)

SECURITY

Authetication: Pre-shared key, digital certificates, X.509 certificates
Firewall: Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
Attack prevention: DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
VLAN: Port and tag based VLAN separation
Mobile quota control: Custom data limits for both SIM cards
WEB filter: Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only
Access control: Flexible access control of TCP, UDP, ICMP packets, MAC address filter

VPN

OpenVPN: Multiple clients and a server can run simultaneously, 12 encryption methods
OpenVPN Encryption: DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC
IPsec: IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256)
GRE: GRE tunnel
PPTP, L2TP: Client/Server instances can run simultaneously, L2TPv3 support
Stunnel: Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code
DMVPN: Method of building scalable IPsec VPNs
SSTP: SSTP client instance support
ZeroTier: ZeroTier VPN client support
WireGuard: WireGuard VPN client and server support

MODBUS
MODBUS TCP SLAVE

ID filtering: Respond to one ID in range [1;255] or any
Allow remote access: Allow access through WAN
Custom registers: Modbus TCP custom register block, which allows to read/write to a file inside the router, and can be used to extend Modbus TCP slave functionality

MODBUS TCP MASTER

Supported functions: 01, 02, 03, 04, 05, 06, 15, 16
Supported data formats: 8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII

MQTT GATEWAY

Gateway: Allows sending commands and receiving data from Modbus Master trough MQTT broker

DATA TO SERVER

Protocols: HTTP(S), MQTT, Azure MQTT, Kinesis

MONITORING & MANAGEMENT

WEB UI: HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log
FOTA: Firmware update from server, automatic notification
SSH: SSH (v1, v2)
SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET
Call: Reboot, Status, Mobile data on/off, Output on/off
TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
MQTT: MQTT Broker, MQTT publisher
SNMP: SNMP (v1, v2, v3), SNMP trap
JSON-RPC: Management API over HTTP/HTTPS
Modbus: Modbus TCP status/control
RMS: Teltonika Remote Management System (RMS)

IoT PLATFORMS

Clouds of things: Allows monitoring of: Device data, Mobile data, Network info, Availability
ThingWorx: Allows monitoring of: WAN Type, WAN IP, Mobile Operator Name, Mobile Signal Strength, Mobile Network Type
Cumulocity: Allows monitoring of: Device Model, Revision and Serial Number, Mobile Cell ID, ICCID, IMEI, Connection Type, Operator, Signal Strength, WAN Type and IP
Azure IoT Hub: Can send device IP, Number of bytes send/received, Mobile connection state, Network link state, IMEI, ICCID, Model, Manufacturer, Serial, Revision, IMSI, SIM State, PIN state, GSM signal, WCDMA RSCP, WCDMA EC/IO, LTE RSRP, LTE SINR, LTE RSRQ, CELL ID, Operator, Operator number, Connection type, Temperature, PIN count to Azure IoT Hub server

SYSTEM CHARACTERISTICS

CPU: Quad-core ARM Cortex A7, 717 MHz
RAM: 256 MB, DDR3
FLASH storage: 256 MB, SPI Flash

FIRMWARE / CONFIGURATION

WEB UI: Update FW from file, check FW on server, configuration profiles, configuration backup
FOTA: Update FW/configuration from server
RMS: Update FW/configuration for multiple devices at once
Keep settings: Update FW without losing current configuration

FIRMWARE CUSTOMIZATION

Operating system: RutOS (OpenWrt based Linux OS)
Supported languages: Busybox shell, Lua, C, C++
Development tools: SDK package with build environment provided

LOCATION TRACKING

GNSS: GPS, GLONASS, BeiDou, Galileo and QZSS
Coordinates: GNSS coordinates via WebUI, SMS, TAVL, RMS
NMEA: NMEA 0183
Server software: Supported server software: TAVL, RMS
Mobile Network Geolocation: Get approximate device location on RMS based on mobile cell tower position (without using GPS)
Geofencing: Configurable multiple geofence zones

USB

Data rate: USB 2.0
Applications: Samba share, USB-to-serial
External devices: Possibility to connect external HDD, flash drive, additional modem, printer
Storage formats: FAT, FAT32, NTFS

INPUT/OUTPUT

Input: 1 x Digital Input, 0 - 6 V detected as logic low, 8 - 30 V detected as logic high
Output: 1 x Digital Output, Open collector output, max output 30 V, 300 mA
Events: SMS, Email, RMS

POWER

Connector: 4 pin industrial DC power socket
Input voltage range: 9 – 50 VDC, reverse polarity protection, voltage surge/transient protection
PoE (passive): Passive PoE. Possibility to power up through LAN port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards
Power consumption: 16 W Max

PHYSICAL INTERFACES (PORTS, LEDS, ANTENNAS, BUTTONS, SIM)

Ethernet: 4 x RJ45 ports, 10/100/1000 Mbps
I/Os: 1 x Digital Input, 1 x Digital Output on 4 pin power connector
Status LEDs: 4 x WAN type LEDs, 2 x Mobile connection type, 5 x Mobile connection strength, 8 x LAN status, 1 x Power, 2 x 2.4G and 5G WiFi
SIM: 2 x SIM slots (Mini SIM - 2FF), 1.8 V/3 V, external SIM holders
Power: 1 x 4 pin DC connector
Antennas: 2 x SMA for LTE, 2 x RP-SMA for WiFi, 1 x RP-SMA for Bluetooth, 1 x SMA for GNSS
USB: 1 x USB A port for external devices
Reset: Reboot/User default reset/Factory reset button
Other: 1 x Grounding screw

PHYSICAL SPECIFICATION

Casing material: Aluminium housing with DIN rail mounting option
Dimensions (W x H x D): 115 x 44.2 x 95.1 mm
Weight: 456 g
Mounting options: DIN rail, flat surface placement

OPERATING ENVIRONMENT

Operating temperature: -40 C to 75 C
Operating humidity: 10 % to 90 % non-condensing
Ingress Protection Rating: IP30

REGULATORY & TYPE APPROVALS

Regulatory & Type Approvals: CE/RED, RoHS, REACH
Vehicle: ECE R10 (E-mark)

EMI IMMUNITY

Standards: EN 55032:2015, EN 55035:2017, Draft ETSI EN 301 489-1 V2.2.1, ETSI EN 301 489-3 V2.1.1, Draft ETSI EN 301 489-17 V3.2.0
ESD: EN 61000-4-2:2009
RS: EN 61000-4-3:2006+A1:2008+A2:2010
EFT: EN 61000-4-4:2012
Surge protection: EN 61000-4-5:2014
CS: EN 61000-4-6:2014
DIP: EN 61000-4-11:2004