


Teltonika · Router · RUTM09 · LTE Router CAT6
The RUTM09 is a wireless 4G LTE Category 6 router with speeds of up to 300 Mbit/s, dual SIM with automatic failover, four Gigabit RJ45 ports, and GNSS positioning for mobile and industrial applications.
- Cellular module
- 4G (LTE) Cat 6 up to 300 Mbit/s, 3G up to 42 Mbit/s
- SIM slots
- 2 x Mini SIM (2FF), 1.8 V/3 V, external holders
- SIM switching scenarios
- Weak signal, data limit, SMS limit, roaming, no network, network denied, connection failure, SIM idle protection
- 4G LTE FDD bands
- B1, B3, B5, B7, B8, B20, B28, B32
Description
Key Benefits at a Glance
- Cellular: 4G LTE Cat 6 with speeds up to 300 Mbit/s and 3G with speeds up to 42 Mbit/s
- Dual SIM: Two Mini-SIM slots with eight automatic switching scenarios
- Gigabit Ethernet: Four RJ45 ports at 10/100/1000 Mbit/s (3 LAN, 1 WAN)
- GNSS: GPS, GLONASS, BeiDou, Galileo, and QZSS via SMA antenna connector
- VPN: OpenVPN, IPsec, WireGuard, ZeroTier, DMVPN, and other protocols
- Industrial-grade: Anodized aluminum housing, operating temperature from -40 °C to 75 °C
Connectivity and Performance
The RUTM09 delivers 4G LTE Category 6 connections with download speeds of up to 300 Mbit/s and falls back to 3G speeds of up to 42 Mbit/s. Two external Mini-SIM holders (2FF) support eight switching scenarios, including weak signal, data limit, SMS limit, roaming, no network, network denied, connection failure, and SIM idle protection. In the event of a primary connection failure, the router can automatically switch to mobile, VRRP, or wired connections as failover and load-balance traffic across multiple WAN connections.
The four Gigabit RJ45 ports operate at 10/100/1000 Mbit/s and support auto MDI/MDIX crossover as well as IEEE 802.3 standards. Port- and tag-based VLAN separation enables up to 128 VLANs. The router supports static routing, dynamic routing with BGP, OSPF v2, RIP v1/v2, EIGRP, and NHRP, as well as policy-based routing. QoS and Smart Queue Management allow traffic prioritization by source, destination, service, protocol, or port.
Security and VPN
The RUTM09 firewall offers preconfigured rules via the WebUI and unlimited configuration via the CLI. Security measures include DDoS prevention with SYN-flood protection, SSH and HTTP/HTTPS attack prevention, and port-scan prevention against SYN-FIN, SYN-RST, X-mas, NULL, and FIN scan attacks. DMZ, NAT, and NAT-T are also available.
For VPN connections, the router supports OpenVPN, IPsec, GRE, PPTP, L2TP, Stunnel, DMVPN, SSTP, ZeroTier, WireGuard, and Tinc. IPsec uses IKEv1 and IKEv2 with 14 encryption methods, including AES128, AES256, and corresponding GCM variants. OpenVPN offers numerous encryption algorithms from DES-CBC 64 to AES-256-GCM 256. Authentication is available via pre-shared keys, digital X.509 certificates, TACACS+, and Radius, as well as IP and login attempt locks with time-based blocking.
Management and Features
The RUTM09 runs on RutOS, a Linux-based operating system built on OpenWrt. Firmware updates can be performed from files, from a server, or for multiple devices simultaneously without losing the current configuration. FOTA is also supported. Configuration profiles and backups enable easy management of device settings.
The router features a hotspot with a captive portal, internal or external Radius server, SMS authorization, walled garden, and nine customizable default themes. SMS functions include status queries, configuration via SMS, HTTP POST/GET transmission, email-to-SMS, scheduled SMS, and automatic replies. USSD messages are supported. Mobile data limits can be configured with customizable periods, start times, and warning thresholds. Mobile passthrough and bridge mode allow direct assignment of the mobile WAN IP address to a device on the LAN.
Design and Power Supply
The RUTM09 housing is made of anodized aluminum and measures 115 x 44.2 x 95.1 mm with a weight of 457 g. The IP30 protection rating makes it suitable for indoor use. The router operates at temperatures from -40 °C to 75 °C and humidity levels from 10 % to 90 % without condensation. Mounting options include DIN rail, wall mounting, and flat surfaces, each requiring an additional kit.
Power is supplied via a 4-pin industrial DC connector with 9 to 50 VDC, including reverse polarity protection and overvoltage protection above 51 VDC for a maximum of 10 µs. Alternatively, the router can be powered passively via the LAN1 port with PoE, though it is not compatible with IEEE 802.3af, 802.3at, or 802.3bt. Power consumption is less than 2.65 W in idle mode and less than 9.82 W at maximum load. A USB-A port with USB 2.0 supports external devices and storage media in FAT, FAT32, exFAT, NTFS (read-only), ext2, ext3, and ext4 formats.
Specifications
| Cellular module | 4G (LTE) Cat 6 up to 300 Mbit/s, 3G up to 42 Mbit/s |
| SIM slots | 2 x Mini SIM (2FF), 1.8 V/3 V, external holders |
| SIM switching scenarios | Weak signal, data limit, SMS limit, roaming, no network, network denied, connection failure, SIM idle protection |
| 4G LTE FDD bands | B1, B3, B5, B7, B8, B20, B28, B32 |
| 4G LTE TDD bands | B38, B40, B41 |
| 3G bands | B1, B3, B5, B8 |
| Cellular antenna connectors | 2 x SMA |
| GNSS antenna connector | 1 x SMA |
| GNSS systems | GPS, GLONASS, BeiDou, Galileo, QZSS |
| CPU | MediaTek Dual-Core, 880 MHz, MIPS1004Kc |
| RAM | 256 MB DDR3 |
| Flash memory | 16 MB serial NOR, 256 MB serial NAND |
| Total Ethernet ports | 4 x RJ45, 10/100/1000 Mbit/s |
| LAN ports | 3 x 10/100/1000 Mbit/s, IEEE 802.3, 802.3u, 802.3az, auto MDI/MDIX |
| WAN port | 1 x 10/100/1000 Mbit/s, IEEE 802.3, 802.3u, 802.3az, auto MDI/MDIX |
| USB port | 1 x USB A, USB 2.0 |
| USB storage formats | FAT, FAT32, exFAT, NTFS (read-only), ext2, ext3, ext4 |
| Digital input | 1 x, 0-6 V as low, 8-50 V as high |
| Digital output | 1 x, open collector, max. 50 V, 300 mA |
| I/O connector | 4-pin industrial DC plug |
| Input voltage | 9-50 VDC, reverse polarity protection, overvoltage protection >51 VDC 10 µs max |
| PoE (passive) | Via LAN1, Mode B, 9-50 VDC, not compatible with IEEE 802.3af/at/bt |
| Power consumption | Idle < 2.65 W, Max < 9.82 W |
| Operating temperature | -40 °C to 75 °C |
| Operating humidity | 10 % to 90 %, non-condensing |
| Protection class | IP30 |
| Housing material | Anodized aluminum |
| Dimensions (W x H x D) | 115 x 44.2 x 95.1 mm |
| Weight | 457 g |
| Mounting options | DIN rail, wall mounting, flat surface (additional kit required for each) |
| Operating system | RutOS (OpenWrt-based Linux) |
| Firmware update | From file, from server, for multiple devices simultaneously, without configuration loss, FOTA |
| Network protocols | TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan |
| Routing | Static, dynamic (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), policy-based |
| VLAN | Port- and tag-based, up to 128 VLANs |
| QoS / SQM | Traffic prioritization by source/destination, service, protocol, or port, WMM, 802.11e |
| DHCP | Static and dynamic IP assignment, DHCP relay, static leases with MAC wildcards |
| Firewall | Preconfigured rules via WebUI, unlimited configuration via CLI, DMZ, NAT, NAT-T |
| Attack prevention | DDoS (SYN-flood, SSH, HTTP/HTTPS), port scan (SYN-FIN, SYN-RST, X-mas, NULL, FIN) |
| VPN protocols | OpenVPN, IPsec, GRE, PPTP, L2TP, Stunnel, DMVPN, SSTP, ZeroTier, WireGuard, Tinc |
| IPsec encryption | IKEv1, IKEv2, 14 methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16) |
| Authentication | Pre-shared key, digital certificates, X.509, TACACS+, Radius, IP and login locks, time-based blocking, random password generator |
| Hotspot | Captive portal, internal/external Radius, Radius MAC authentication, SMS authorization, walled garden, 9 customizable themes |
| Mobile passthrough/bridge | Direct connection between mobile ISP and LAN device, assignment of mobile WAN IP to LAN device |
| SMS | Status, configuration, HTTP POST/GET, email-to-SMS, SMS-to-email, SMS-to-HTTP, scheduled SMS, autoreply, SMPP |
| USSD | Sending and reading USSD messages |
| Mobile data control | Data limit, customizable period, start time, warning threshold, phone number |
| Failover | Mobile, VRRP, wired |
| Load balancing | Across multiple WAN connections |
| Warranty | 24 months |
| Certifications | CE (EN IEC 62368-1:2020 + A11:2020, EN IEC 62311:2020), RCM (AS/NZS 62368.1:2022), CB (IEC 62368-1:2018), EN 55032:2015+A11:2020, EN 55035:2017+A11:2020, EN 61000-3-3:2013+A1:2019+A2:2021, EN IEC 61000-3-2:2019+A1:2021, EN 301 489-1 V2.2.3, EN 301 489-19 V2.2.0, EN 301 489-52 V1.2.1, EN 301 908-1 V13.1.1, EN 301 908-2 V13.1.1, EN 301 908-13 V13.1.1, EN 303 413 V1.2.1 |
AI Fact Sheet
Downloads
Frequently Asked Questions (FAQ)
What certifications does the product carry?
Related products
- TRB236 - Industrial IoT LTE 450 IoT Gateway, LTE CAT.1 / 2G, Dual-SIM€178.88excl. VAT

- TRB236 - Industrial IoT LTE 450 IoT Gateway, LTE CAT.1 / 2G, Dual-SIM TRB236 - I€186.34excl. VAT

- TELTONIKA NETWORKS RUTX09 4G/LTE Router€254.59excl. VAT

- TELTONIKA NETWORKS RUT951 Dual SIM 4G/LTE/3G/2G Global WiFi Router€232.15excl. VAT

- Teltonika · Router · RUTX09 · Industrial LTE Modem Router Cat6 "ONLY LAN" 300Mbps Down/42Mbps UP€297.66excl. VATRRP €303.60−2%






