Teltonika · Router · RUT951 · LTE Modem Router/WLAN · DUAL SIM

Key Benefits at a Glance

• Dual-SIM with auto-switch: automatic switchover in case of weak signal, data limit, roaming, or network denial
• Wi-Fi access point for up to 100 simultaneous connections compliant with IEEE 802.11b/g/n
• Four Ethernet ports at 10/100 Mbps, one of which can be configured as WAN or additional LAN
• Multiple VPN tunnels: OpenVPN, IPsec, WireGuard, ZeroTier, GRE, PPTP, L2TP, SSTP, and DMVPN
• Digital I/O for remote monitoring and control of industrial equipment
• Wide temperature range from -40 °C to 75 °C for demanding environments

Connectivity and Mobile Network

The RUT951 supports 4G/LTE Cat 4 with download speeds up to 150 Mbps, as well as 3G up to 42 Mbps and 2G up to 236.8 kbps. Two Mini-SIM slots (2FF) for 1.8 V or 3 V cards enable redundant mobile connections, and an optional eSIM slot adds flexibility. The automatic SIM switch responds to weak signals, data limits, SMS limits, roaming, no network, network denial, and connection drops, ensuring the router maintains connectivity without manual intervention.

For antenna connections, two SMA connectors are available for LTE and two RP-SMA connectors for Wi-Fi. User-configurable features include blacklists and whitelists, band locking, display of the active band, and automatic APN configuration for over 25 predefined providers. Mobile data allowances can be individually limited for both SIM cards.

Network Functions and Routing

The router offers static and dynamic routing with BGP, OSPF v2, RIP v1/v2, and NHRP. Supported network protocols include TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPnP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, and Wake On LAN. VLAN segmentation is available via port- and tag-based configuration, and QoS/SQM prioritizes traffic by source, destination, service, protocol, or port.

Network backup is achieved through VRRP, as well as mobile, wired, and Wi-Fi WAN options with automatic failover. Load balancing distributes traffic across multiple WAN connections. The web filter provides blacklist and whitelist functions for access control, and DHCP supports static and dynamic IP assignment, DHCP relay, and relayd. A passthrough mode enables direct bridging between the mobile ISP and a device on the LAN.

Security and VPN

The firewall includes port forwarding, traffic rules, custom rules, preconfigured rules, DMZ, NAT, and NAT-T. DDoS protection mechanisms cover SYN flood protection, SSH attack prevention, and HTTP/HTTPS attack prevention. Port scan prevention detects SYN-FIN, SYN-RST, X-mas, NULL, and FIN scan attacks.

IPsec supports IKEv1 and IKEv2 with up to four VPN tunnels and five encryption methods (DES, 3DES, AES128, AES192, AES256). OpenVPN is available with numerous encryption ciphers. Additionally, GRE tunnels, PPTP, L2TP, SSTP, ZeroTier VPN, WireGuard VPN (client and server), DMVPN, and Stunnel as a TLS proxy are supported. Secure Boot performs a cryptographic integrity check during system startup.

Wi-Fi and SMS Features

The Wi-Fi module operates under IEEE 802.11b/g/n in access point or station mode and supports up to 100 simultaneous connections. Wi-Fi security includes WPA2-Enterprise (PEAP), WPA2-PSK, WEP, WPA-EAP, and WPA-PSK with AES-CCMP, TKIP, and auto-cipher modes, as well as client isolation. SSID stealth mode and access control based on MAC address, SSID, blacklists/whitelists, and band management are available.

SMS features include SMS status, SMS configuration, sending and reading via HTTP POST/GET, email-to-SMS, SMS-to-email, SMS-to-HTTP, SMS-to-SMS, scheduled SMS, SMS autoreply, and SMPP. Monitored mobile parameters include signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, transmitted and received bytes, connected band, IMSI, and ICCID.

Management and IoT Integration

The router is compatible with the Teltonika Remote Management System (RMS) for secure remote administration. MODBUS TCP is supported in both master and slave modes. Integration with IoT platforms includes Azure IoT Hub, Cumulocity, Clouds of Things, and ThingWorx. Connection monitoring uses Ping Reboot, Wget Reboot, Periodic Reboot, as well as LCP and ICMP for link verification.

On the housing, status LEDs indicate connection status (bicolor), signal strength (five LEDs), LAN status (four LEDs), and power. A reset button enables reboot, user-default reset, and factory reset.

Hardware and Mounting

The aluminum housing with plastic panels measures 110 x 50 x 100 mm and weighs 287 g. The protection rating is IP30. Mounting options include DIN rail (dual-sided) and flat surface. The router operates in temperatures from -40 °C to 75 °C and at humidity levels of 10 % to 90 % non-condensing.

Power is supplied via a four-pin industrial DC connector with an input voltage range of 9 to 30 VDC. Power consumption is less than 2 W at idle and less than 7 W at maximum load. Protection features include reverse polarity protection and overvoltage protection above 31 VDC for 10 µs. Passive PoE via spare pairs enables power over a LAN port but is not compatible with IEEE 802.3af, 802.3at, or 802.3bt. The digital input detects 0 to 6 V as low and 8 to 30 V as high; the digital open-collector output supports a maximum of 30 V and 300 mA.