RUT240 is a compact, cost-effective and secure industrial 4G/LTE WiFi router for professional applications. The mobile router delivers high performance for mission-critical cellular communication in harsh and hazardous environments where a wide operating temperature is required. Equipped with an external SIM holder, digital input/output and signal strength status LEDs, it ensures easy network deployment and management. External SMA connectors make it possible to attach desired antennas and easily find the best signal location. RUT240 Industrial LTE router supports industry leading security features and is widely used for 4G backup, Remote Connection, Out-of-Band Management, Advanced VPN and tunneling services in IoT networking solutions.

• LTE Cat 4 with speeds up to 150 Mbps 
• Automatic switching to available Backup connection 
• Wireless Access Point with Hotspot functionality 
• Compact size, easy integration 
• Digital Input/Output for remote monitoring and control 
• Compatible with Teltonika Remote Management System

MOBILE 

• Mobile module: 4G (LTE) – Cat 4 up to 150 Mbps, 3G – Up to 42 Mbps, 2G – Up to 236.8 kbps 
• Status: Signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP Bytes sent/received 
• Bridge: Direct connection (bridge) between mobile ISP and device on LAN 
• SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP 
• Black/White list (optional): Operator black/white list 
• Multiple PDN (optional): Possibility to use different PDNs for multiple network access and services 
• Band management: Band lock, Used band status display 

WIRELESS 

• Wireless mode: IEEE 802.11b/g/n, Access Point (AP), Station (STA) 
• WiFi: WPA2-Enterprise (with external/internal Radius server), WPA2-PSK, WPA-PSK, WEP, MAC Filter 
• WiFi security: WPA2-Enterprise - PEAP, TLS, TTLS, AES-CCMP, TKIP, Auto Cipher modes, Client separation 
• SSID: SSID stealth mode and access control based on MAC address 
• WiFi users: Up to 50 simultaneous connections 
• Wireless Hotspot: Captive portal (Hotspot), internal/external Radius server, built in customizable landing page 

ETHERNET 

• WAN: 1 x WAN port (can be configured to LAN) 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX 
• LAN: 1 x LAN port, 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX 

NETWORK 

• Routing: Static routing, Dynamic routing (Optional - BGP, OSPF v2, RIP v1/v2) 
• Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SMNP, MQTT, Wake On Lan (WOL) 
• VoIP passthrough support: H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets 
• Connection monitoring: Ping Reboot, Periodic Reboot, LCP and ICMP for link inspection 
• Firewall: Port forward, traffic rules, custom rules 
• DHCP: Static and dynamic IP allocation, DHCP Relayd 
• QoS: Traffic priority queuing by source/destination, service, protocol or port, traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e 
• DDNS: Supported >25 service providers, others can be configured manually 
• Network backup: VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as backup, using automatic Failover 
• Load balancing: Balance your internet traffic over multiple WAN connections 
• NetSnapper (optional): Mobile connection management, data compression VPN client (not available in standard FW) 
• SSHFS (optional): Possibility to mount remote file system via SSH protocol (not available in standard FW) 

SECURITY 

• Authentication: Pre-shared key, digital certificates, X.509 certificates 
• Firewall: Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T 
• Attack prevention: DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention ( SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) 
• WiFi security: WPA2-Enterprise – PEAP, EAP-TLS, TLS, TTLS. AES-CCMP, TKIP, Auto Cipher modes, Client separation 
• VLAN: Tag based VLAN separation 
• Mobile quota control: Set up custom data limits for the SIM card 
• WEB filter: Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only 
• Access control: Flexible access control of TCP, UDP, ICMP packets, MAC address filter 

VPN 

• OpenVPN: Multiple clients and server can be running simultaneously, 12 encryption methods 
• OpenVPN Encryption: DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC 
• IPsec: IKEv1, IKEv2, supports up to 4 x VPN IPsec tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256) 
• GRE: GRE tunnel 
• PPTP, L2TP: Client/Server services can run simultaneously 
• Stunnel: Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs' code 
• SSTP: SSTP client instance support 

MONITORING & MANAGEMENT 

• WEB UI: HTTP/HTTPS, status, configuration, FW update, CLI ,troubleshoot, event log, system log, kernel log 
• FOTA: Firmware update from sever, automatic notification 
• SSH: SSH (v1, v2) 
• SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET 
• TR-069 (optional): OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem 
• MQTT: MQTT Broker, MQTT publisher 
• SNMP: SNMP (v1, v2, v3), SNMP trap 
• JSON-RPC: Management API over HTTP/HTTPS 
• MODBUS: MODBUS TCP status/control 
• RMS: Teltonika Remote Management System (RMS) 

SYSTEM CHARACTERISTICS 

• CPU: Atheros Hornet, MIPS 24Kc, 400 MHz 
• RAM: 64 MB, DDR2 
• FLASH memory: 16 MB SPI Flash 

FIRMWARE / CONFIGURATION 

• WEB UI: Update FW from file, check FW on server, configuration profiles, configuration backup, restore point 
• FOTA: Update FW/configuration from server 
• RMS: Update FW/configuration for multiple devices 
• Keep settings: Update FW without losing current configuration  

FIRMWARE CUSTOMIZATION 

• Operating system: RutOS (OpenWrt based Linux OS) 
• Supported languages: Busybox shell, Lua, C, C++ 
• Development tools: SDK package with built environment provided 

INPUT/OUTPUT 

• Input: 1 x Digital non-isolated input (on 4 pin power connector) 
• Output: 1 x Digital open collector output (30 V, 300 mA, on 4 pin power connector) 
• Events: SMS, EMAIL, RMS 

POWER 

• Connector: 4 pin industrial DC power socket 
• Input voltage range: 9 – 30 VDC (4 pin industrial socket), reverse polarity protection, surge protection >33 VDC 10us max 
• PoE (passive): Passive PoE over spare pairs (available from HW revision 0007 and batch number 0010). Possibility to power up through LAN port, not compatible with IEEE802.3af and 802.3at 
• Power consumption: < 5 W 

PHYSICAL INTERFACES (PORTS, LEDS, ANTENNAS, BUTTONS, SIM) 

• Ethernet: 2 x RJ45 ports, 10/100 Mbps 
• I/O’s: 1 Digital Input, 1 Digital Output on 4 pin power connector 
• Status LEDs: 3 x connection type status LEDs, 5 x connection strength LEDs, 2 x LAN status LEDs, 1 x Power LED 
• SIM: 1 x SIM slot (Mini SIM – 2FF), 1.8 V/3 V, external SIM holder 
• Power: 4 pin DC connector 
• Antennas: 2 x SMA for LTE, 1 x RP-SMA for WiFi antenna connectors 
• Reset: Reset/restore to default button 

PHYSICAL SPECIFICATION 

• Casing material: Aluminum housing, plastic panels 
• Dimensions: 83 mm x 74 mm x 25 mm (H x W x D) 
• Weight: 125 g 
• Mounting options: Bottom and sideways DIN rail mounting slots 

OPERATING ENVIRONMENT 

• Operating temperature: -40 °C to 75 °C 
• Operating humidity: 10% to 90% non-condensing 
• Ingress Protection Rating: IP30 
• MTBF: 310000 h 

REGULATORY & TYPE APPROVALS 

• Regulatory: CE/RED, FCC, IC/ISED, EAC, RCM, PTCRB, RoHS, WEEE, Wi-Fi Alliance 
• Operator: Verizon, AT&T 

EMI IMMUNITY 

• Standards: Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-52 V1.1.0 
• FCC 47 CFR Part 15B (2017), ANSI C63.4 (2014) 
• ESD: EN61000-4-2:2009 
• RS: EN 61000-4-3:2006 + A1:2008 + A2:2010 
• EFT: EN 61000-4-4:2012 
• Surge immunity (AC Power Line): EN 61000-4-5:2006 
• Surge immunity (Ethernet ports): EN 61000-4-5:2014, clause 7.1 of ITU-T K21 
• CS: EN 61000-4-6:2009 
• DIP: EN 61000-4-11:2004 

RF 
Standards: EN 300 328 V2.1.1, EN 301 511 V12.5.1, EN 301 908-1 V11.1.1, EN 301 908-2 V11.1.1, EN 301 908-13 V11.1.1 
FCC 47 CFR Part 15C (2017), FCC 47 CFR Part 2 (2017), FCC 47 CFR Part 22H (2017), FCC 47 CFR Part 24E (2017), FCC 47 CFR Part 27C (2017) 
RSS-Gen Issue 4 (2014), RSS-247 Issue 2 (2017), RSS-132 Issue 3 (2013), RSS-133 Issue 6 (2013), RSS-139 Issue 3, RSS-130 Issue 1 
AS/CA S042.1:2018, AS/ACIF S042.3:2005, AS/CA S042.4:2018, AS/NZS 4268:2017 
 
SAFETY 
Standards: IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013 
AS/NZS 60950.1:2015 
EN 50665:2017, EN 62311:2008 
FCC 47 CFR Part 1 1.1310 
RSS-102 Issue 5 (2015)