Network
Routing- Static routes, Dynamic routes
Protocols- TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, PPPoE, UPNP, SSH, DHCP, Telnet client, SNMP, MQTT, Wake on LAN (WOL)
VoIP Passthrough Support- H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection Monitoring- Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection
Firewall- Port forwards, traffic rules, NAT rules, custom rules
DHCP- Static and dynamic IP allocation, DHCP Relay
QoS / Smart Queue Management (SQM)- Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e
DDNS- Supported >25 service providers, others can be configured manually
Network Backup- Wired WAN options, each of which can be used as an automatic Failover
Load Balancing- Balance Internet traffic over multiple WAN connections
SSHFS- Possibility to mount remote file system via SSH protocol

Security
Authentication- Pre-shared key, digital certificates, X.509 certificates
Firewall- Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
Attack Prevention- DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
VLAN- Port and tag based VLAN separation
WEB Filter- Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only
Access Control- Flexible access control of TCP, UDP, ICMP packets, MAC address filter

VPN
Open VPN- Multiple clients and a server can run simultaneously, 12 encryption methods
Open VPN Encryption- DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC
IPsec- IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256)
GRE- GRE Tunnel
PPTP, L2TP- Client/Server instances can run simultaneously, L2TPv3 support
Stunnel- Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code
DMVPN- Method of building scalable IPsec VPNs
SSTP- SSTP client instance support
ZeroTier- ZeroTier VPN client support
WireGuard- WireGuard VPN client and server support

Modbus
TCP Slave-
ID Filtering- Respond to one ID in range [1;255] or any
Allow Remote Access- Allow access through WAN
Custom Registers- MODBUS TCP custom register block, which allows to read/write to a file inside the router, and can be used to extend MODBUS TCP slave functionality

TCP Master-
Supported Functions- 01, 02, 03, 04, 05, 06, 15, 16
Supported Data Formats- 8 bit: INT, UINT; 16 bit: INT, UINT (MSB or LSB first); 32 bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII

MQTT Gateway- Allows sending commands and receiving data from MODBUS Master through MQTT broker

DNP3 Supported Modes- TCP Master, DNP3 Outstation

Data to Server Protocols- HTTP(S), MQTT, Azure MQTT, Kinesis

Monitoring & Management
WEB UI- HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log
FOTA- Firmware update from server, automatic notification
SSH- SSH (v1, v2)
TR-069- OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
MQTT- MQTT Broker, MQTT publisher
SNMP- SNMP (v1, v2, v3), SNMP trap
JSON-RPC- Management API over HTTP/HTTPS
MODBUS- MODBUS TCP status/control
RMS- Teltonika Remote Management System (RMS)

System Characteristics
CPU- QCA9531, MIPS 24kc, 650 MHz
RAM- 64 MB, DDR2
Flash Storage- 16 MB, SPI Flash

Firmware
Configuration-
WEB UI- Update FW from file, check FW on server, configuration profiles, configuration backup
FOTA- Update FW/configuration from server
RMS- Update FW/configuration for multiple devices at once
Keep Settings- Update FW without losing current configuration

USB
Data Rate- USB 2.0
Applications- Samba share, USB-to-serial
External Devices- Possibility to connect external HDD, flash drive, printer
Storage Formats- FAT, FAT32, exFAT, NTFS (read-only), ext2, ext3, ext4

Input / Output
Configurable I/O- (2) Configurable digital Inputs/Outputs. Digital input 0 - 5 V detected as logic low, 8 - 30 V detected as logic high. Open collector output, max output 30 V, 300 mA
Events- EMAIL, RMS
I/O Juggler- Allows to set certain I/O conditions to initiate event

Power
Connector- 4 pin industrial DC power socket
Input Voltage Range- 7 - 30 VDC, reverse polarity protection, voltage surge/transient protection
PoE (passive)- Passive PoE. Possibility to power up through LAN port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards
Power Consumption- Idle: 1.3 W, Max: 3 W

Environmental
Housing- Aluminum housing with DIN rail mounting option
Dimensions- 100 Width x 30 Height x 85 mm Depth (3.93" x 1.18" x 3.34")
Mounting Options- DIN rail, flat surface placement
Operating Temperature- -40 C to 75 C (-40 F to 167 F)
Operating Humidity- 10-90% non-condensing