Teltonika RUTM10
Teltonika RUTM10
The RUTM10 is a wired router with four Gigabit RJ45 ports and Wi-Fi 5 connectivity options, making it ideal for applications that require both wired connections and a wireless access option for internet access. The RUTM10 can create a Wi-Fi mesh network within your network solutions, enabling a smoother and more stable wireless networking experience while being highly secure thanks to the router's support for VPNs such as OpenVPN, IPsec, Wireguard and Tailscale.
Regular price
1 266 SEK
Regular price
Sale price
1 266 SEK
Unit price
per
Excl. VAT
Produktnummer: RUTM10000000
Couldn't load pickup availability
What's in the box?
What's in the box?
Row that can be hiddensaxasa
Row that can be hiddensaxasa
Tekniska specifikationer
Wireless
Wireless Mode: 802.11b/g/n/ac Wave 2 (Wi-Fi 5) with data transfer rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast handover, Access Point (AP), Station (STA)
Wi-Fi Security: WPA2-Enterprise: PEAP, WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, automatic encryption modes, client separation, EAP-TLS with PKCS#12 certificate, ability to disable automatic reconnection, 802.11w Protected Management Frames (PMF)
SSID/ESSID: ESSID hidden mode
Wi-Fi users: Up to 150 simultaneous connections
Wireless connectivity features: Wireless mesh (802.11s), fast roaming (802.11r), BSS transition management (802.11v), radio measurement function (802.11k)
Wireless MAC Filter: Allow and Block List
Wireless QR code generator: When scanned, the user is automatically connected to the network without having to enter login credentials
TravelMate: Forwards the Wi-Fi hotspot landing page to the next connected device
Wi-Fi Security: WPA2-Enterprise: PEAP, WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, automatic encryption modes, client separation, EAP-TLS with PKCS#12 certificate, ability to disable automatic reconnection, 802.11w Protected Management Frames (PMF)
SSID/ESSID: ESSID hidden mode
Wi-Fi users: Up to 150 simultaneous connections
Wireless connectivity features: Wireless mesh (802.11s), fast roaming (802.11r), BSS transition management (802.11v), radio measurement function (802.11k)
Wireless MAC Filter: Allow and Block List
Wireless QR code generator: When scanned, the user is automatically connected to the network without having to enter login credentials
TravelMate: Forwards the Wi-Fi hotspot landing page to the next connected device
Ethernet
WAN: 1 x WAN port 10/100/1000 Mbps, complies with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover
LAN: 3 x LAN ports, 10/100/1000 Mbps, complies with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover
LAN: 3 x LAN ports, 10/100/1000 Mbps, complies with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover
Network
Routing: Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy-based routing
Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL), VXLAN
VoIP passthrough support: H.323 and SIP-alg protocol NAT helper that enables correct routing of VoIP packets
Connection Monitoring: Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for Link Inspection
Firewall: Port forwarding, traffic rules, custom rules, TTL target customization
Firewall Status Page: View all firewall statistics, rules, and rule counters
Port Management: View device ports, enable and disable them, turn auto-configuration on or off, change transmission speed, and more
Network topology: Visual representation of your network showing which devices are connected to each other
DHCP: Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards
QoS / Smart Queue Management (SQM): Prioritization of traffic based on source/destination, service, protocol or port, WMM, 802.11e
DDNS: Support for >25 service providers, others can be configured manually
DNS over HTTPS: DNS over HTTPS proxy enables secure DNS resolution by sending DNS requests over HTTPS
Network backup: Wi-Fi WAN, VRRP, wired options that can be used as automatic failover
Load balancing: Balance of internet traffic across multiple WAN connections
Hotspot: Captive portal (hotspot), internal/external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual restrictions for users or groups, user management, 9 standard customizable themes and the ability to upload/download your own hotspot themes
SSHFS: Ability to mount remote file systems via SSH protocol
VRF support: Initial support for virtual routing and forwarding (VRF)
Traffic Management: Real-time monitoring, wireless signal graphs, traffic history
Network protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL), VXLAN
VoIP passthrough support: H.323 and SIP-alg protocol NAT helper that enables correct routing of VoIP packets
Connection Monitoring: Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for Link Inspection
Firewall: Port forwarding, traffic rules, custom rules, TTL target customization
Firewall Status Page: View all firewall statistics, rules, and rule counters
Port Management: View device ports, enable and disable them, turn auto-configuration on or off, change transmission speed, and more
Network topology: Visual representation of your network showing which devices are connected to each other
DHCP: Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards
QoS / Smart Queue Management (SQM): Prioritization of traffic based on source/destination, service, protocol or port, WMM, 802.11e
DDNS: Support for >25 service providers, others can be configured manually
DNS over HTTPS: DNS over HTTPS proxy enables secure DNS resolution by sending DNS requests over HTTPS
Network backup: Wi-Fi WAN, VRRP, wired options that can be used as automatic failover
Load balancing: Balance of internet traffic across multiple WAN connections
Hotspot: Captive portal (hotspot), internal/external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual restrictions for users or groups, user management, 9 standard customizable themes and the ability to upload/download your own hotspot themes
SSHFS: Ability to mount remote file systems via SSH protocol
VRF support: Initial support for virtual routing and forwarding (VRF)
Traffic Management: Real-time monitoring, wireless signal graphs, traffic history
Security
802.1x: Port-based network access control client
Authentication: Distributed key, digital certificates, X.509 certificates, TACACS+, internal and external RADIUS user authentication, IP and login attempt blocking, time-based login blocking, built-in random password generator
Firewall: Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64
Attack protection: DDOS protection (SYN flood protection, SSH attack protection, HTTP/HTTPS attack protection), port scan protection (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
VLAN: Port and tag-based VLAN separation
WEB filter: Blacklist to block unwanted websites, whitelist to specify allowed websites only
Access Control: Flexible access control for SSH, web interface, CLI and Telnet
SSL certificate generation: Let's Encrypt and SCEP certificate generation methods
Authentication: Distributed key, digital certificates, X.509 certificates, TACACS+, internal and external RADIUS user authentication, IP and login attempt blocking, time-based login blocking, built-in random password generator
Firewall: Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64
Attack protection: DDOS protection (SYN flood protection, SSH attack protection, HTTP/HTTPS attack protection), port scan protection (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
VLAN: Port and tag-based VLAN separation
WEB filter: Blacklist to block unwanted websites, whitelist to specify allowed websites only
Access Control: Flexible access control for SSH, web interface, CLI and Telnet
SSL certificate generation: Let's Encrypt and SCEP certificate generation methods
VPN
OpenVPN: Multiple clients and one server can run simultaneously, 27 encryption methods
OpenVPN encryption: DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192,BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
IPsec: XFRM, IKEv1, IKEv2, with 14 IPsec encryption methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)
GRE: GRE tunnel, GRE tunnel over IPsec support
PPTP, L2TP: Client/server instances can run simultaneously, L2TPv3, L2TP over IPsec support
Stunne: Proxy designed to add TLS encryption functionality to existing clients and servers without changes to the application's code
DMVPN: Method for building scalable IPsec VPNs, Phase 2 and Phase 3 and Dual Hub support
SSTP: SSTP client instance support
ZeroTier: ZeroTier VPN client support
WireGuard: WireGuard VPN client and server support
Tinc: Tinc offers encryption, authentication, and compression in its tunnels. Client and server support.
Tailscale: Tailscale offers speed, stability, and simplicity over traditional VPNs. Encrypted point-to-point connections using the open source WireGuard protocol
OpenVPN encryption: DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192,BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
IPsec: XFRM, IKEv1, IKEv2, with 14 IPsec encryption methods (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)
GRE: GRE tunnel, GRE tunnel over IPsec support
PPTP, L2TP: Client/server instances can run simultaneously, L2TPv3, L2TP over IPsec support
Stunne: Proxy designed to add TLS encryption functionality to existing clients and servers without changes to the application's code
DMVPN: Method for building scalable IPsec VPNs, Phase 2 and Phase 3 and Dual Hub support
SSTP: SSTP client instance support
ZeroTier: ZeroTier VPN client support
WireGuard: WireGuard VPN client and server support
Tinc: Tinc offers encryption, authentication, and compression in its tunnels. Client and server support.
Tailscale: Tailscale offers speed, stability, and simplicity over traditional VPNs. Encrypted point-to-point connections using the open source WireGuard protocol
OPC UA
Supported modes: Client, Server
Supported connection types: TCP
Supported connection types: TCP
MODBUS
Supported modes: Server, Client
Supported connection types: TCP, USB
Custom registers: MODBUS TCP custom register block requests, which read/write to a file inside the router, and can be used to extend MODBUS TCP Client functionality
Supported data formats: 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII
Supported connection types: TCP, USB
Custom registers: MODBUS TCP custom register block requests, which read/write to a file inside the router, and can be used to extend MODBUS TCP Client functionality
Supported data formats: 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII
DATA TO SERVER
Protocol: HTTP(S), MQTT, Azure MQTT
Data to Server: Extract parameters from multiple sources and different protocols, and send them all to a single server; Custom LUA scripting, allowing scripts to use the router's Data to Server feature.
Data to Server: Extract parameters from multiple sources and different protocols, and send them all to a single server; Custom LUA scripting, allowing scripts to use the router's Data to Server feature.
MQTT Gateway
Modbus MQTT Gateway: Allows sending commands and receiving data from MODBUS server via MQTT broker
DNP3
Supported modes: Station, Outstation
Supported connections: TCP, USB
Supported connections: TCP, USB
DLMS/COSEM
DLMS support: DLMS – standard protocol for exchanging data from electricity meters
Supported modes: Client
Supported connection types: TCP, USB
COSEM: Ability to scan COSEM objects in meters for automatic discovery and configuration
Supported modes: Client
Supported connection types: TCP, USB
COSEM: Ability to scan COSEM objects in meters for automatic discovery and configuration
API
Teltonika Networks Web API support (beta): Extend your device's capabilities by using a set of configurable API endpoints to retrieve or modify data. For more information, please see this documentation: https://developers.teltonika-networks.com
Monitoring & Management
WEB UI: HTTP/HTTPS, status, configuration, firmware update, CLI, troubleshooting, multiple event log servers, firmware update notifications, event log, system log, kernel log, Internet status
FOTA: Firmware update from server, automatic notification
SSH: SSH (v1, v2)
Email: Receive status alerts via email from various services
TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
MQTT: MQTT Broker, MQTT Publisher
SNMP: SNMP (v1, v2, v3), SNMP Trap, protection against brute force attacks
JSON-RPC: Management API over HTTP/HTTPS
RMS: Teltonika Remote Management System (RMS)
FOTA: Firmware update from server, automatic notification
SSH: SSH (v1, v2)
Email: Receive status alerts via email from various services
TR-069: OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem
MQTT: MQTT Broker, MQTT Publisher
SNMP: SNMP (v1, v2, v3), SNMP Trap, protection against brute force attacks
JSON-RPC: Management API over HTTP/HTTPS
RMS: Teltonika Remote Management System (RMS)
IoT Platforms
Cumulocity - Cloud of Things: Allows monitoring of: Device model, revision and serial number, WAN type and IP. Has actions for reboot and firmware upgrade.
Azure IoT Hub: Can be configured with Data to Server to send all available parameters to the cloud. Has Direct method support that enables running RutOS API calls on IoT Hub. Also has Plug and Play integration with Device Provisioning Service that enables zero-touch device provisioning to IoT Hubs.
Azure IoT Hub: Can be configured with Data to Server to send all available parameters to the cloud. Has Direct method support that enables running RutOS API calls on IoT Hub. Also has Plug and Play integration with Device Provisioning Service that enables zero-touch device provisioning to IoT Hubs.
System properties
CPU: MediaTek, Dual-Core, 880 MHz, MIPS1004Kc
RAM: 256MB, DDR3
FLASH storage: 16 MB serial NOR flash, 256 MB serial NAND flash
RAM: 256MB, DDR3
FLASH storage: 16 MB serial NOR flash, 256 MB serial NAND flash
Firmware / Configuration
WEB UI: Update firmware from file, check firmware on server, configuration profiles, configuration backup
FOTA: Firmware update
RMS: Firmware and configuration update for multiple devices at the same time
Keep settings: Firmware update without losing current configuration
Factory Reset: Full factory reset that restores all system settings, including IP address, PIN, and user data to the manufacturer's default configuration
FOTA: Firmware update
RMS: Firmware and configuration update for multiple devices at the same time
Keep settings: Firmware update without losing current configuration
Factory Reset: Full factory reset that restores all system settings, including IP address, PIN, and user data to the manufacturer's default configuration
Firmware Customization
Operating system: RutOS (OpenWrt-based Linux OS)
Supported languages: Busybox shell, Lua, C, C++
Development tools: SDK package with build environment provided
GPL Customization: You can create your own customized, branded firmware and web application by changing colors, logos, and other elements of our firmware to suit your or your customers' needs
Package Manager: The package manager is a service used to install additional software on the device
Supported languages: Busybox shell, Lua, C, C++
Development tools: SDK package with build environment provided
GPL Customization: You can create your own customized, branded firmware and web application by changing colors, logos, and other elements of our firmware to suit your or your customers' needs
Package Manager: The package manager is a service used to install additional software on the device
USB
Data speed: USB 2.0
Applications: Samba share, USB-to-serial
External devices: Ability to connect external HDD, flash drive, additional modem, printer, USB-serial adapter
Storage formats: FAT, FAT32, exFAT, NTFS (read only), ext2, ext3, ext4
Applications: Samba share, USB-to-serial
External devices: Ability to connect external HDD, flash drive, additional modem, printer, USB-serial adapter
Storage formats: FAT, FAT32, exFAT, NTFS (read only), ext2, ext3, ext4
Input / Output
Input: 1 x Digital input, 0 - 6 V is registered as logic low, 8 - 50 V is registered as logic high
Output: 1 x Digital output, Open collector output, max output 50 V, 300 mA
Events: Email, RMS
I/O juggler: Ability to set certain I/O conditions to initiate events
Output: 1 x Digital output, Open collector output, max output 50 V, 300 mA
Events: Email, RMS
I/O juggler: Ability to set certain I/O conditions to initiate events
Power supply
Connector: 4-pin industrial DC power connector
Input voltage range: 9 – 50 VDC, reverse polarity protection, surge protection >51 VDC for max. 10 microseconds
Passive PoE: Ability to supply power via the LAN1 port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards, Mode B, 9 - 50 VDC
Power Consumption: Sleep: < 3.51 W, Max: < 8.65 W
Input voltage range: 9 – 50 VDC, reverse polarity protection, surge protection >51 VDC for max. 10 microseconds
Passive PoE: Ability to supply power via the LAN1 port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards, Mode B, 9 - 50 VDC
Power Consumption: Sleep: < 3.51 W, Max: < 8.65 W
Physical interfaces
Ethernet: 4 x RJ45 ports, 10/100/1000 Mbps
I/O: 1 x Digital input, 1 x Digital output on 4-pin power connector
Status LEDs: 8 x LAN status, 1 x Power LED, 2 x 2.4G and 5G Wi-Fi LEDs
Power: 1 x 4-pin power connector
Antenna: 2 x RP-SMA for Wi-Fi
USB: 1 x USB A port for external devices
Reset: Restart button/Reset user settings/Factory reset
Other: 1 x Grounding screw
I/O: 1 x Digital input, 1 x Digital output on 4-pin power connector
Status LEDs: 8 x LAN status, 1 x Power LED, 2 x 2.4G and 5G Wi-Fi LEDs
Power: 1 x 4-pin power connector
Antenna: 2 x RP-SMA for Wi-Fi
USB: 1 x USB A port for external devices
Reset: Restart button/Reset user settings/Factory reset
Other: 1 x Grounding screw
Physical specifications
Housing material: Anodized aluminum housing and panels
Dimensions (W x H x D): 115 x 32.2 x 95.2 mm
Weight: 359g
Mounting options: DIN rail, wall mount, flat surface (all require additional kit)
Dimensions (W x H x D): 115 x 32.2 x 95.2 mm
Weight: 359g
Mounting options: DIN rail, wall mount, flat surface (all require additional kit)
Operating environment
Operating temperature: -40°C to 75°C
Operating humidity: 10% to 90% non-condensing
Ingress Protection Rating: IP30
Operating humidity: 10% to 90% non-condensing
Ingress Protection Rating: IP30
Regulatory & Type Approvals
Regulatory: CE, UKCA, RCM, CB
EMC Emissions & Immunity
Standards: EN 55032:2015 + A11:2021
EN 55035:2017 + A11:2020
EN IEC 61000-3-2:2019 + A1:2021
EN 61000-3-3:2013 + A1:2019 + A2:2021
EN 301 489-1 V2.2.3
EN 301 489-3 V2.1.1
EN 301 489-17 V3.2.4
EN 301 489-52 V1.2.1
ESD: EN 61000-4-2:2009
Radiated Immunity: EN IEC 61000-4-3:2020
EFT: EN 61000-4-4:2012
Surge immunity (AC mains power port): EN 61000-4-5:2014 + A1:2017
CS: EN 61000-4-6:2014
DIP: EN IEC 61000-4-11:2020
EN 55035:2017 + A11:2020
EN IEC 61000-3-2:2019 + A1:2021
EN 61000-3-3:2013 + A1:2019 + A2:2021
EN 301 489-1 V2.2.3
EN 301 489-3 V2.1.1
EN 301 489-17 V3.2.4
EN 301 489-52 V1.2.1
ESD: EN 61000-4-2:2009
Radiated Immunity: EN IEC 61000-4-3:2020
EFT: EN 61000-4-4:2012
Surge immunity (AC mains power port): EN 61000-4-5:2014 + A1:2017
CS: EN 61000-4-6:2014
DIP: EN IEC 61000-4-11:2020
RF
Standards: EN 301 908-1 V15.2.1
EN 301 908-2 V13.1.1
EN 301 908-13 V13.2.1
EN 300 328 V2.2.2
EN 301 893 V2.1.1
EN 300 440 V2.2.
EN 301 908-2 V13.1.1
EN 301 908-13 V13.2.1
EN 300 328 V2.2.2
EN 301 893 V2.1.1
EN 300 440 V2.2.
Security
Standards: CE: EN IEC 62368-1:2020 + A11:2020, EN IEC 62311:2020
RCM: AS/NZS 62368.1:2022
CB: IEC62368-1:2018
RCM: AS/NZS 62368.1:2022
CB: IEC62368-1:2018
Security (Common Places)
Standards: CE: EN IEC 62368-1:2020 + A11:2020, EN IEC 62311:2020
RCM: AS/NZS 62368.1:2022
CB: IEC62368-1:2018
RCM: AS/NZS 62368.1:2022
CB: IEC62368-1:2018
Garanti
2 års fabriksgaranti
Interface
Wi-Fi 5
VPN
M2M PROTOCOL
Do you want to know more about the product?
Contact us for a demo or if you have any questions.