USER MANUAL RUT900 3G Router 1
Legal notice Copyright © 2015 TELTONIKA Ltd. All rights reserved. Reproduction, transfer, distribution or storage of part or all of the contents in this document in any form without the prior written permission of TELTONIKA Ltd is prohibited. The manufacturer reserves the right to modify the product and manual for the purpose of technical improvement without prior notice. Other product and company names mentioned herein may be trademarks or trade names of their respective owners.
Table of Contents Legal notice.............................................................................................................................................................. 2 Attention.................................................................................................................................................................. 2 SAFETY INFORMATION ................................................................................................................................
6.7.3 Realtime Traffic ................................................................................................................................ 35 6.7.4 Realtime Wireless ............................................................................................................................ 36 6.7.5 Realtime Connections ...................................................................................................................... 37 6.8 Mobile Traffic ..............................
7.6.7 7.7 Port Scan Prevention ....................................................................................................................... 80 Routing ..................................................................................................................................................... 80 7.7.1 Static Routes .................................................................................................................................... 80 7.7.2 Dynamic Routes ..............
8.9.2 Email to SMS .................................................................................................................................. 119 8.9.3 Scheduled Messages ...................................................................................................................... 119 8.9.4 Auto Reply Configuration............................................................................................................... 120 8.9.5 SMS Forwarding ....................................
9.4 User scripts ............................................................................................................................................ 149 9.5 Restore point ......................................................................................................................................... 150 9.5.1 Restore point create ...................................................................................................................... 150 9.5.2 Restore point load.........
SAFETY INFORMATION In this document you will be introduced on how to use a RUT900 router safely. We suggest you to adhere to the following recommendations in order to avoid personal injuries and or property damage. You have to be familiar with the safety requirements before using the device! To avoid burning and voltage caused traumas, of the personnel working with the device, please follow these safety requirements.
Device connection 9
1 Introduction Thank you for purchasing a RUT900 3G router! RUT900 is part of the RUT9xx series of compact mobile routers with high speed wireless and Ethernet connections. This router is ideal for people who‘d like to share their internet on the go, as it is not restricted by a cumbersome cable connection. Unrestricted, but not forgotten: the router still supports internet distribution via a broadband cable, simply plug it in to the wan port, set the router to a correct mode and you are ready to browse.
2.
3 Setting up your router 3.1 Installation After you unpack the box, follow the steps, documented below, in order to properly connect the device. For better WiFi performance, put the device in clearly visible spot, as obstacles such as walls and door hinder the signal. 1. First assemble your router by attaching the necessary antennas and inserting the SIM card. 2. To power up your router, please use the power adapter included in the box.
3.1.3 Hardware installation 1. Remove back panel and insert SIM card which was given by your ISP (Internet Service Provider). Correct SIM card orientation is shown in the picture. SIM 1 (primary) SIM 2 (secondary) 2. Attach 3G main and WiFi antennas. 3. Connect the power adapter to the socket on the front panel of the device. Then plug the other end of the power adapter into a wall outlet or power strip. 4.
4. Then right click on your wireless device that you use to 3. Click “View network connections” connect to other access points (It is the one with the name “Wireless Network Connection” and has signal bars on its icon). 5. Select Internet Protocol Version 4 (TCP/IPv4) and then click 6.
Right click on the Wireless network icon and select Connect / Disconnect. A list should pop up with all available wireless networks. Select “Teltonika” and click connect. Then we launch our favorite browser and enter the routers IP into the address field: Press enter. If there are no problems you should be greeted with a login screen such as this: Enter the default password, which is “admin01” into the “Password” field and then either click Login with your mouse or press the Enter key.
4 Operation Modes The RUT9xx series router supports various operation modes. It can be connected to the internet (WAN) via mobile, standard Ethernet cable or via a wireless network. When connecting to the internet, you may also backup your main WAN connection with one or two backup connections. Any interface can act like backup if configured so.
Though the device can be powered over Ethernet port it is not compliant with IEEE 802.3af-2003 standard. Powering RUT9xx from IEEE 802.3af-2003 power supply will damage the device as it is not rated for input voltages of PoE standard. 5.1 Powering the device from higher voltage If you decide not to use our standard 9 VDC wall adapters and want to power the device from higher voltage (15 – 30 VDC) please make sure that you choose power supply of high quality.
6 Status The status section contains various information, like current IP addresses of various network interfaces; the state of the routers memory; firmware version; DHCP leases; associated wireless stations; graphs indicating load, traffic, etc.; and much more. 6.1 Overview Overview section contains various information summaries.
6.2 System Information The System Information tab contains data that pertains to the routers operating system. System explanation: Field Name Sample value 1. Router Name RUT900 2. Host name Teltonika-RUT900.com 3. 4. Router Model Firmware Version Teltonika RUT900 3G RUT9XX_R_00.02.341 5. 3.10.36 6. Kernel Version Local Time 7. Uptime 0d 1h 26m 48s (since 2016-05-06, 07:45:54) 8. Load Average 1 min: 13%; 5 mins: 4%; 15 mins: 5% 2016-05-06, 09:12:42 9.
1. Free 88280 kB / 126556 kB (69%) 2. Cached 3. Buffered 11936 kB / 126556 kB (9%) 4744 kB / 126556 kB (3%) The amount of memory that is completely free. Should this rapidly decrease or get close to 0, it would indicate that the router is running out of memory, which could cause crashes and unexpected reboots. The size of the area of memory that is dedicated to storing frequently accessed data. The size of the area in which data is temporarily stored before moving it to another location. 6.
11. 12. Connection type Bytes received 13. Bytes sent 3G (HSDPA) 5.2 MB (5500683 bytes) 876.9 KB (897895 bytes) Indicates the GSM network's access technology How many bytes were received via mobile data connection How many bytes were sent via mobile data connection 6.3.1.2 WAN Display information about WAN connection. WAN information: Field Name 1. Interface Sample Value Wired 2. 3. 4. Type IP address WAN MAC Static 192.168.99.69 00:1E:42:00:00:01 5. 6. Netmask Gateway 255.255.255.0 192.168.
LAN information: Field Name 1. Name 2. IP address 3. Netmask 4. Ethernet MAC address 5. Connected for Sample Value Lan 192.168.99.218 255.255.255.0 00:1E:42:00:00:00 1h 53m 56s Explanation LAN instance name Address that the router uses on the LAN network. A mask used to define how large the LAN network is MAC (Media Access Control) address used for communication in a Ethernet LAN (Local Area Network) How long LAN has been successfully maintained.
6.3.1.4 Wireless Wireless can work in two modes, Access Point (AP) or Station (STA). AP is when the wireless radio is used to create an Access Point that other devices can connect to. STA is when the radio is used to connect to an Access Point via WAN. 6.3.1.4.1 Station Display information about wireless connection (Station mode). Client mode information Field Name Sample Value 1. Channel 1 (2.41 GHz) 2. Country code 3. SSID 4. Mode 00 (World) Teltonika_Router Station (STA) 5.
6.3.1.4.2 Access Point Display information about wireless connection (Access Point mode). Wireless AP information Field Name Sample Value 1. Channel 11 (2.46 GHz) 2. 3. Country code SSID 00(World) Teltonika_Router_Test 4. Mode Access Point (AP) 5. Encryption No Encryption 6. 7. Wireless MAC Signal Quality 00:1E:42:00:00:03 80% 8. Bit rate 54.0 MBit/s Explanation The channel which is used to broadcast the SSID and to establish new connections to devices. Country code.
This can either be the information of the Access Point that the router is connecting to in STA mode or a list of all devices that are connecting to the router in AP mode: 1. 2. Field Name MAC Address Device Name 3. Signal 4. RX Rate 5. TX Rate Sample Value FC:C2:DE:91:36:A6 Android9aed2b2077a54c74 -54dBm 24.0Mbit/s, MCS 0, 20MHz 54.0Mbit/s, MCS 0, 20MHz Explanation Associated station's MAC (Media Access Control) address DHCP client's hostname Received Signal Strength Indicator (RSSI).
6.3.1.7 OpenVPN Server Display OpenVPN connection information on server side. 1. 2. 2. 3. 4. 5. Field Name Enabled Status Type IP Mask Time Sample Value Yes/No Connected Server 10.0.0.1 255.255.255.255 0h 3m 24s Explanation OpenVPN status Connection status A type of OpenVPN instance that has been created Remote virtual network's IP address Remote virtual network's subnet mask For how long the connection has been established 6.3.1.
6.3.1.9 VRRP VRRP (Virtual Router Redundancy Protocol) for LAN 1. 2. Field Name Status Virtual IP Sample Value Enabled 192.168.1.253 3. Priority 100 4. Router** Master **-Exclusive to other Modes with Slave. Explanation VRRP status Virtual IP address(- es) for LAN’s VRRP (Virtual Router Redundancy Protocol ) cluster Router with highest priority value on the same VRRP (Virtual Router Redundancy Protocol) cluster will act as a master, range [1 - 255] Connection mode – Master 6.3.1.
6.3.1.11 Access Display information about local and remote active connections status. 1. 2. 3. 4. Field Name Type Status Port Active Connections Sample Value SSH; HTTP; HTTPS Disabled/Enabled 22; 80; 443 0(0.00B);0(0.00B); 6(558.12 KB) Explanation Type of connection protocol Connection status Connection port used Count of active connections and amount of data transmitted in KB 6.3.1.11.
1. 2. 3. 4. Field Name Type Date IP Authentications Status Sample Value SSH; HTTP; HTTPS 2016-03-03, 13:40:59 192.168.2.10 Failed/Succeed Explanation Type of connection protocol Date and time of connection IP address from which the connection was made Status of authentication attempt 6.4 Device information The page displays factory information that was written into the device during manufacturing process.
1. 2. 3. 4. 5. 6. 6. 7. 8. 9. 10.
6.6 Routes The page displays ARP table and active IP routes of the device. 6.6.1 ARP Show the routers active ARP table. An ARP table contains recently cached MAC addresses of every immediate device that was communicating with the router. 1. Field Name IP Address Sample Value 192.168.99.17 2. MAC Address 00:25:22:D7:CA:A7 3.
1. 2. Field Name Network Target Sample Value ppp 192.168.99.0/24 3. 4. IP Gateway Metric 0.0.0.0 0 Explanation Interface to be used to transmit TCP/IP packets through Indicates where a TCP/IP packet, with a specific IP address, should be directed Indicates through which gateway a TCP/IP packet should be directed Metric number indicating interface priority of usage 6.6.3 Active IPv6-Routes Display active IPv6 routes for data packet transition. 1. 2.
1. 2. 3. 4. Field Name Connection type Signal Average Peak Sample Value 3G (WCDMA) -72 dBm -72.0 dBm -72 dBm Explanation Type of mobile connection used Current signal strength value Average signal strength value Peak signal strength value 6.7.2 Realtime Load This tri-graph illustrates average CPU load values in real time. The graph consists out of three color coded graphs, each one corresponding to the average CPU load over 1 (red), 5 (orange) and 15 (yellow) most recent minutes.
1. 2. 3. Field Name 1/5/15 Minutes Load Average Peak Sample Value 0.83 Explanation Time interval for load averaging, colour of the diagram 0.86 1.
6.7.3 Realtime Traffic This graph illustrates average system inbound and outbound traffic over the course of ~3 minutes; each new measurement is taken every 3 seconds. The graph consists out of two colors coded graphs (green graph shows the outbound traffic, blue graph shows inbound traffic). Although not graphed, the page also displays peak loads and average of inbound and outbound traffic. 1. Field Name Bridge Explanation Cumulative graph, which encompasses wired Ethernet LAN and the wireless network.
6.7.4 Realtime Wireless Display the wireless radio signal, signal noise and theoretical maximum channel permeability. Average and peak signal levels are displayed.
6.7.5 Realtime Connections Displays currently active network connections with the information about network, protocol, source and destination addresses, transfer speed.
6.8 Mobile Traffic Displays mobile connection data sent and received in KB of this day, week, Month. By default mobile traffic usage logging is disabled. To use this functionality is needed to enable it. 1. 2. Field Name Enable Interval between records (sec) Sample Value Enable/Disable 60 Explanation Make a functionality active/inactive The interval between logging records (minimum 60 sec) 6.9 Speed Test Speed test is a tool for measuring your internet connection upload and download speeds.
6.10 Events Log Event log displays such actions as: login, reboot, firmware flashing and reset. 6.10.1 All Events Display all router events, their types and time of occurrence.
6.10.2 System Events Display all system events, their type and time of occurrence. Events include authentication or reboot requests, incoming and outgoing SMS and calls, Mails, Configuration changes, DHCP events.
6.10.3 Network Events Display information about recent network events like connection status change, lease status change, network type or operator change.
6.10.4 Events Reporting Allow to view, enable/disable or modify created rules for events reporting. 6.10.4.1 Events Reporting Configuration Allow to review created rules details and modify them, so after event occurrence, messages or emails are sent to specified address or phone numbers with information about the event.
1. 2. 3. Enable Event type Event subtype 4. 5. 6. Event subtype Action Enable delivery retry Message text on Event 7. 8 9.
FTP: 1. 2. 3. 4. 5. Field Name Enable Events log Transfer type Compress file Host Sample Value Enable/Disable System FTP Enable 192.168.123.123 6. User name Username 7. Password password 8. Interval between reports Weekday Hour Week Explanation Make a rule active/inactive Events log for which the rule is applied Events log file transfer type: Email/FTP Enable/disable compress events log file using gzip FTP (File Transfer Protocol) host name, e.g. ftp.exemple.com, 192.168.123.123.
10. Field Name Enable Events log Transfer type Compress file Subject Message SMTP server SMTP server port Secure connection User name 11. Password 12. Sender‘s email address Recipient‘s email address Interval between reboots Weekday Hour 1. 2. 3. 4. 5. 6. 7. 8. 9. 13. 14. 15. 16. Sample Value Enable/Disable System Email Enable Subject YourMessage smtp.gmail.
7 Network 7.1 Mobile 7.1.1 General 7.1.1.1 Mobile configuration Here you can configure mobile settings which are used when connecting to your local 3G network. 2. Field Name Mode Sample value NAT / Passthrough 3. APN “APN” 4. PIN number 5. “1525” or any number that falls between 0000 and 9999 *99# 7. Dialing number Authentication CHAP, PAP or none method Username “username” 8. Password 6. “password” Explanation NAT mode enables network address translation on router.
9. Service mode 2G only, 3G only, or automatic. 10. Deny data roaming Use IPv4 only Enable/Disable 11. Enable / Disable Your network preference. If your local mobile network supports 2G and 3G you can specify to which network you wish to connect. E.g.: if you choose 2G only, the router will connect only to a 2G network. If you select auto, then the router will connect to the network that provides better connectivity.
7.1.1.2 Mobile Data On Demand 1. 2. Field name Enable Possible values Enable/Disable No data timeout(sec) 1-99999999 Explanation Mobile Data On Demand function enables you to keep mobile data connection on only when it's in use A mobile data connection will be terminated if no data is transferred during the timeout period 7.1.2 SIM Management 1. 2. 3.
4. On weak signal Enable/Disable 5. On data limit* Enable/Disable 6. On SMS limit* Enable/Disable 7. 8. 9. 10.
7.1.3.2 Operator List This function lets to create white list/black list based on operator’s code. 1. 2. Field name Enable Mode Possible values Enable/Disable White list/Black list 3. 4. Name Operator code Tele2 LT 24603 Explanation Enable/disable operators blocking White list - allows every operator on the list and blocks everything else. Black list – block every operator on the list and allow everything else Operator’s name Operator’s code 7.1.
7.1.4.1 Data Connection Limit Configuration 1. 2. 3. 4. Field Name Enable data connection limit Data limit* (MB) Period Start day/ Start hour Sample value Enable/Disable Explanation Disables mobile data when a limit for current period is reached 200 Month/Week/Day 1 Disable mobile data after limit value in MB is reached Period for which mobile data limiting should apply A starting time for mobile data limiting period * Your carrier's data usage accounting may differ.
7.1.5.1 Settings 1. 2. 3. 4. 5. 6. 7. 8. Field Name Enable Period Day Hour Minute Host to ping Ping package size Ping requests Sample value Enable/Disable Month / Week 1-31 / Monday Sunday 1-24 1-60 8.8.8.8 56 Explanation Enables SIM idle protection Switches between monthly and weekly SIM activation periods Specifies the day for SIM idle protection activation, 1-31 if Period is Month, and Monday – Sunday if period is week.
3. Type Main WAN Backup WAN/Load balancing Interface Name 4. 5. 6. Protocol IP Address Sort 1. 2.
7.2.2.1 General Setup 7.2.2.1.1 Static: This is the configuration setup for when you select the static protocol. 1. 2. 3. 4. 5. Filed name IPv4 address IPv4 netmask IPv4 gateway IPv4 broadcast Sample 192.168.99.162 255.255.255.0 192.168.99.254 192.168.99.255 Use custom DNS servers 8.8.8.8 8.8.6.
7.2.2.1.3 PPPoE This protocol is mainly used by DSL providers: This is the configuration setup for when you select PPPoE protocol. 1. Filed name PAP/CHAP username Sample test 2. 3. PAP/CHAP password Access Concentrator your_password auto 4. Service Name auto Explanation Your username and password that you would use to connect to your carriers network. A mask used to define how “large” the WAN network is Specifies the name of access concentrator. Leave empty to auto detect.
3. Override MTU 1500 4. Use gateway metric 0 gateway in thinking that it is communicating with your computer. Maximum Transmission Unit – specifies the largest possible size of a data packet. The WAN configuration by default generates a routing table entry. With this field you can alter the metric of that entry. 7.2.2.2.2 DHCP 1. 2 3. 4. 5. 6.
7.2.2.2.3 PPPoE Field name Disable NAT Sample value Enable/Disable Enable/Disable 0 Enable/Disable 6. Use default gateway Use gateway metric Use DNS servers advertised by peer LCP echo failure threshold LCP echo interval 7. Inactivity timeout 0 1. 2 3. 4. 5.
You may also optionally define a broadcast address and a custom DNS server. 7.2.2.2.5 Backup WAN configuration Backup WAN is function that allows you to back up your primary connection in case it goes down. There can be two backup connections selected at the same time, in that case, when primary connection fails, router tries to use backup with higher priority and if that is unavailable or fails too, then router tries the backup with lower priority.
7.2.2.3 How do I set up a backup link? First we must select a main link and choose one or two backup links in WAN section. Then push the “Edit” button and configure your WAN and Backup Wan settings to your liking. Click Save and wait until the settings are applied. Now in the Status -> Network Information -> WAN page there should be a status indication for the backup WAN.
7.3 LAN This page is used to configure the LAN network, where all your devices and computers that you connect to the router will reside. 7.3.1 Configuration 7.3.1.1 General Setup 1. 2 3. Field name IP address IP netmask IP broadcast Sample value 192.168.1.1 255.255.255.0 Explanation Address that the router uses on the LAN network A mask used to define how large the LAN network is IP broadcasts are used by BOOTP and DHCP clients to find and send requests to their respective servers 7.3.1.
7.3.2 DHCP Server The DHCP server is the router side service that can automatically configure the TCP/IP settings of any device that requests such a service. If you connect a device that has been configured to obtain IP address automatically the DHCP server will lease an IP address and the device will be able to fully communicate with the router. 7.3.2.1 General Setup 1. Field Name DHCP 2. Start Sample value Enable / Disable/ DHCP Relay 100 3. Limit 150 4.
7.3.2.2 Advanced settings You can also define some advanced options that specify how the DHCP server will operate on your LAN network. 1. Field Name Sample Value Dynamic DHCP Checked/Unchecked 2. Force 3. IP netmask 4. DHCP Options Checked/Unchecked Explanation Dynamically allocate client addresses, if set to 0 only clients present in the ethers files are served Forces DHCP serving even if another DHCP server is detected on the same network segment.
7.3.2.4.2 Advanced Settings You may also optionally define a broadcast address and a custom DNS server. 7.4 Wireless On this page you can configure your wireless settings. Depending on whether your WAN mode is set to WiFi or not, the page will display either the options for configuring an Access Point or options for configuring a connection to some local access point.
Access Point: Here you can see the Overview of the wireless configuration. It is divided into two main sections – device and interface. One is dedicated to configuring hardware parameters other – software. Here you can toggle the availability of the wireless radio and the physical channel frequency. Important note: As seen in the picture you should always Save before toggling the radio on and off. SSID – Your wireless networks identification string. This is the name of your WiFi network.
1. Field name Mode Sample value Auto, b, g, g+n 2. Country Code 3. 4. Transmit power Fragmentation threshold 5. RTS/CTS Threshold Explanation Different modes provide different throughput and security options. Any ISO/IEC 3166 alpha2 Selecting this will help the wireless radio configure its country code internal parameters to meet your countries wireless regulations. 20%/40%/60%/80%/100% Select WiFi signal power 2346 The smallest packet size that can be fragmented and transmitted by multiple frames.
7.4.1.2.3 Advanced settings Separate clients – prevents WiFi clients from communicating with each other on the same subnet. Increase TTL packet size – increase TTL packet size for incoming packets. 7.4.1.3 Client RUT9xx can work as a WiFi client. Client mode is nearly identical to AP, except for the fact that most for the options are dictated by the wireless access point that the router is connecting to. Changing them can result in an interrupted connection to an AP.
7.5.1.2 VLAN Network List If VLAN mode – Port based: 1. 2. 3. 4. Field Name VLAN ID LAN ports 1/2/3 Wireless access points LAN Sample Value 1 on Explanation VLAN Identification number, allowed in range (1-4094) Switches each LAN port between ON, OFF or tagged state. Enabled / Disabled Assign selected access point(s) to selected LAN. None Select to which LAN to assign selected LAN ports and wireless access points. If VLAN mode – Tag based: 1. 3. 4.
7.5.2 LAN Networks In this page you can create extra LAN networks, and assign them with LAN Ports and wireless access points. You can get extra information on how to configure any of your LAN’s settings in section – 7.3 LAN 1. 2. Field Name LAN name Interface name Sample Value Lan eth0 tap0 Explanation Specifies new LAN name Specifies LAN interface name 7.6 Firewall In this section we will look over the various firewall features that come with RUT900. 7.6.
2. Input Reject/Drop/Accept DEFAULT* action that is to be performed for packets that pass through the Input chain. 3. Output Reject/Drop/Accept DEFAULT* action that is to be performed for packets that pass through the Output chain. 4. Forward Reject/Drop/Accept DEFAULT* action that is to be performed for packets that pass through the Forward chain. *DEFAULT: When a packet goes through a firewall chain it is matched against all the rules for that specific chain.
You can use port forwarding to set up servers and services on local LAN machines. The above picture shows how you can set up a rule that would allow a website that is being hosted on 192.168.1.109, to be reached from the outside by entering http://routersExternalIp:12345/. 1. Field Name Name 2. 3. Protocol External Port 4. Internal IP address 5. Internal port Sample value Explanation Enable_SSH_WAN_PASSTHROUGH Name of the rule. Used purely to make it easier to manage rules.
1. Field Name Name 2. Protocol 3. 4. 5. 7. Source zone Source MAC address Source IP address Source port 8. External IP address 9. External port 10. Internal zone 11. Internal IP address 12. Internal port 13. Enable NAT loopback 14. Extra arguments Sample value Explanation ENABLE_SSH_WAN_PASSTHROUGH Name of the rule. Used purely to make it easier to manage rules.
7.6.4 Traffic Rules The traffic rule page contains a more generalized rule definition. With it you can block or open ports, alter how traffic is forwarded between LAN and WAN and many more things. 1. 2. 3. 4. 5. 6. Field Name Name Protocol Source Destination Action Enable 7. Sort Explanation Name of the rule.
Field Name Name Restrict to address family Protocol Sample value “Allow-DHCP-Relay” IPv4 and IPV6 Explanation Used to make rule management easier Match traffic from selected address family only TCP/UDP/Any/ICMP/Custom any any zone/LAN/VPN/WAN any 7. 8. Match ICMP type Source zone Source MAC address Source address Source port Protocol of the packet that is being matched against traffic rules.
7.6.4.1 Open Ports On the Router 1. 2. Field Name Name Protocol 3. External port Sample value Explanation Open_Port_rule Used to make rule management easier TCP/UDP/Any/ICMP/Custom Protocol of the packet that is being matched against traffic rules. 1-65535 Match incoming traffic directed at the given destination port or port range on this host. 7.6.4.2 New Forward Rule 1. 2. 3.
2. Protocol TCP/UDP/Any/ICMP/Custom 3. 4. 5. Source Destination SNAT LAN/VPN/WAN LAN/VPN/WAN Rewrite to source IP 10.101.1.10 6. Enable Enable/Disable Protocol of the packet that is being matched against traffic rules.
10. SNAT IP address 11. SNAT port “10.101.1.10” “22” 12. Extra arguments Rewrite matched traffic to the given IP address Rewrite matched traffic to the given source port. May be left empty to only rewrite the IP address' Passes additional arguments to iptables. Use with care! 7.6.5 Custom Rules Here you have the ultimate freedom in defining your rules – you can enter them straight into the iptables program. Just type them out into the text field ant it will get executed as a Linux shell script.
1. 2. Field Name Enable SYN flood protection SYN flood rate Sample value Enable/Disable “25” 3. SYN flood burst “50” 4. TCP SYN cookies Enable/Disable Explanation Makes router more resistant to SYN flood attacks. Set rate limit (packets/second) for SYN packets above which the traffic is considered a flood. Set burst limit for SYN packets above which the traffic is considered a flood if it exceeds the allowed rate.
1. 2. 3. 4. Enable SSH limit Limit period Limit Limit burst Enable/Disable Second/Minute/Hour/Day “10” “5” Enable SSH connections limit in selected period Select in what period limit SSH connections Maximum SSH connections during the period Indicating the maximum burst before the above limit kicks in. 7.6.6.4 HTTP Attack Prevention HTTP attack sends a complete, legitimate HTTP header, which includes a 'Content-Length' field to specify the size of the message body to follow.
7.6.7 Port Scan Prevention 7.6.7.1 Port Scan 1. 2. Field Name Enable Interval Sample value Enable/Disable 30 3. Scan count 10 Explanation Enable port scan prevention Time interval in seconds counting how much port scan (10 – 60 sec.) How much port scan before blocked 7.6.7.2 Defending type 1. 2. 3. 4. 5.
1. 2. 3. 4. Field name Routing table Interface Destination address Netmask Value MAIN/WAN/WAN2/WAN3 MAIN/WAN/WAN2/WAN3 IP address IP mask 5. Gateway IP address 6.
1. 2. Field name Enable Router ID Value Enable/Disable 192.168.1.1 Explanation Enable dynamic routes Router’s ID 7.7.2.2 OSPF Protocol 7.7.2.2.1 OSPF General Instance 1. 2. 3. 4. 5.
1. 2. Field name Area name Enable Value OSPF_area Yes/No Explanation OSPF area’s name Enable/disable OSPF area To see at specific configuration settings press “edit” button located in newly created OSPF area. A new page with detailed configuration appears, as shown in the picture below. 1. 2. 3. 4.
7.7.2.3 General Protocol 1. 2. 3. Field name Enable Learn Persist Value Enable/Disable Enable/Disable Enable/Disable 4. 5. 6. 7. 8. Scan time Import Export Enable Scan time 20 All All Enable/Disable 10 Explanation Enable/Disable settings Enables routes learning If checked it allows to store routes.
7.8 Load Balancing Load balancing lets users divide traffic between different interfaces. 2 Remote monitoring and administration RUT9XX supports multiple monitoring and administration possibilities. One can get routers information through SMS or using RMS (Remote Management System). Furthermore, some system related parameters can be obtained using MODBUSD or MQTT publisher services. How to use them are described in the 9.19 and 9.20 chapters respectively.
Apart from services mentioned earlier, there is one service, which is used only for communication between router and Android type device (phones, etc’). It is called json-rpc and allows to set or get various parameters of the system. JSON-RPC can execute the same commands, like user through SSH. To sum up, this approach opens wide possibilities in communication between router and Android.
1. 2. 3. 4. 5. 6. 7. Application MQTT publisher MODBUS daemon SSH RMS SMS SNMP JSON-RPC Can obtain parameters Can set parameters o o By summarizing, RUT9XX provides several solutions for router management. Each user can choose what solution to use. If required functionality is not found in particular service, the user can combine several applications, for example, use MQTT publisher along with SNMP.
8.1.2 Check Internet connection 1. 2. 3. 4. 5. Field name Enable Ping IP address Ping interval Ping timeout (sec) Ping packet size Sample Enable/Disable 8.8.4.4 10 1 50 6.
8.3 Web filter 8.3.1 Site blocking 1. 2. Field name Enable Mode Sample Enable/Disable Whitelist/Blacklist 3. 4. Enable Host name Enable/Disable www.yahoo.com Explanation Enable host name based websites blocking Whitelist - allow every site on the list and block everything else. Blacklist block every site on the list and allow everything else. Check to enable site blocking Block/allow site with this hostname 8.3.
1. Field name Enable Sample Enable/Disable 2. Mode Whitelist/Blacklist 3. URL content example.com Explanation Enable proxy server based URL content blocking. Works with HTTP protocol only Whitelist - allow every part of URL on the list and block everything else. Blacklist - block every part of URL on the list and allow everything else Block/allow any URL containing this string. Example.com, example.*, *.example.com 8.4 NTP NTP configuration lets you setup and synchronize routers time. 1. 2. 3.
Protocol) 4. Update interval How often router updates systems time 5. Save time to flash Save last synchronized time to flash memory 6. Count of time Total amount of times that router will do the synchronization. Note: If left blank - the synchronizations count will be infinite 7. Offset frequency Adjust the minor drift of the clock so that it will be more accurate Note, that under Time Servers at least one server has to be present, otherwise NTP will not serve its purposes. 8.5 VPN 8.5.
To see at specific configuration settings press “edit” button located in newly created configuration entry. A new page with detailed configuration appears, as shown in the picture below (TLS client example).
There can be multiple server/client instances. You can set custom settings here according to your VPN needs. Below is summary of parameters available to set: 1. 2. Field name Enabled TUN/TAP 3. 4. 5. Protocol Port LZO Explanation Switches configuration on and off. This must be selected to make configuration active. Selects virtual VPN interface type. TUN is most often used in typical IP-level VPN connections, however, TAP is required to some Ethernet bridging configurations.
6. 7. Encryption Authentication 8. 9. 10. TLS cipher Remote host/IP address Resolve Retry 11. Keep alive 12. 18. Remote network IP address Remote network IP netmask Max routes HMAC authentication algorithm Additional HMAC authentication Certificate authority Client certificate 19. Client key 13. 14. 15. 16. 17. Selects Packet encryption algorithm. Sets authentication mode, used to secure data sessions.
IPsec system maintains two databases: Security Policy Database (SPD) which defines whether to apply IPsec to a packet or not and specify which/how IPsec-SA is applied and Security Association Database (SAD), which contain Key of each IPsec-SA. The establishment of the Security Association (IPsec-SA) between two peers is needed for IPsec communication. It can be done by using manual or automated configuration. Note: router starts establishing tunnel when data from router to remote site over tunnel is sent.
8. Remote VPN endpoint 9. IP address/Subnet mask 10. Enable keep alive 11. Host Domain name or IP address. Leave empty or any 12. Ping period (sec) Remote network secure group IP address and mask used to determine to what subnet an IP address belongs to. Range [0-32]. IP should differ from device LAN IP Enable tunnel keep alive function A host address to which ICMP (Internet Control Message Protocol) echo requests will be send Send ICMP echo request every x seconds.
8.5.3 GRE Tunnel GRE (Generic Routing Encapsulation RFC2784) is a solution for tunneling RFC1812 private address-space traffic over an intermediate TCP/IP network such as the Internet. GRE tunneling does not use encryption it simply encapsulates data and sends it over the WAN. In the example network diagram two distant networks LAN1 and LAN2 are connected. To create GRE tunnel the user must know the following parameters: 1. Source and destination IP addresses. 2. Tunnel local IP address 3.
1. 2. 3. 4. 5. 6. 7. Field name Enabled Remote endpoint IP address Remote network Remote network netmask Local tunnel IP Local tunnel netmask MTU 8. TTL 9. PMTUD 10. Enable Keep alive 11. Keep Alive host 12. Keep Alive interval Explanation Check the box to enable the GRE Tunnel function. Specify remote WAN IP address. IP address of LAN network on the remote device. Network of LAN network on the remote device. Range [0-32]. Local virtual IP address. Cannot be in the same subnet as LAN network.
8.5.4 PPTP Point-to-Point Tunneling Protocol (PPTP) is a protocol (set of communication rules) that allows corporations to extend their own corporate network through private "tunnels" over the public Internet. Effectively, a corporation uses a wide-area network as a single large local area network. A company no longer needs to lease its own lines for wide-area communication but can securely use the public networks. This kind of interconnection is known as a virtual private network (VPN). 1. 2. 3. 4. 5. 6.
2. 3. 4. 5. Use as default gateway Server Username Password Use this PPTP instance as default gateway The server IP address or hostname The user name for authorization with the server The password for authorization with the server 8.5.5 L2TP Allows setting up a L2TP server or client. Below is L2TP server configuration example. 1. 2. 3. 4. 5. 6. Field name Enable Local IP Remote IP range begin Remote IP range end Username Password Explanation Check the box to enable the L2TP Tunnel function.
You are provided with add/delete buttons to manage and use different DDNS configurations at the same time! You can configure many different DDNS Hostnames in the main DDNS Configuration section. To edit your selected configuration, hit Edit. 1. 2. 3. Field name Enable Status Service Value Enable/Disable 4. 5. 6. 7. Hostname Username Password IP Source yourhost.example.org your_username your_password Public Private Custom 1. dydns.org 2. 3322.org 3. no-ip.com 4. easydns.com 5. zoneedit.
8. 9. Network IP renew interval (min) 10. Force IP renew WAN 10 (minutes) 472 (minutes) Source network Time interval (in minutes) to check if the IP address of the device have changed. Time interval (in minutes) to force IP address renew. 8.7 SMS Utilities RUT900 has extensive amount of various SMS Utilities. These are subdivided into 6 sections: SMS Utilities, Call Utilities, User Groups, SMS Management, Remote Configuration and Statistics. 8.7.
1. Field name Reboot Enable Action SMS text Authorization method Allowed users Get status via SMS after reboot Message text 2. Get status Enable Action Explanation Notes This check box will enable and disable SMS reboot function. The action to be performed when this rule is met. SMS text which will reboot router. What kind of authorization to use for SIM management. Whitelist of allow users Check this to recieve connection status via SMS after a reboot. Allows router restart via SMS.
Enable SMS Status SMS text Authorization method Allowed users Message text 3. Get OpenVPN status Enable Action SMS text Authorization method 4. Allowed users Switch WiFi On/Off Enable Action SMS text Authorization method Allowed users Write to config 5. Switch mobile data on/off Enable Action SMS text Authorization method Allowed users Write to config when this rule is met. This check box will enable and disable SMS status function. SMS text which will send routers status.
If it is not selected, router will revert mobile state after reboot. 6. Manage OpenVPN Enable Action SMS text Authorization method 7. Allowed users Change mobile data settings Enable Action SMS text Authorization method Allowed users This check box will enable and disable this function. The action to be performed when this rule is met. Keyword which will turn OpenVPN ON/OFF. Allows OpenVPN control via SMS. Turn OpenVPN ON or OFF. SMS text can contain letters, numbers, spaces and special symbols.
8. 3G settings must be configured correctly. If SIM card has PIN number you must enter it at “Network” > “3G” settings. Otherwise SMS reboot function will not work. Sender phone number must contain country code. You can check sender phone number format by reading the details of old SMS text massages you receiving usually. Field name Get list of profiles Enable Action SMS text Authorization method 9. Allowed users Change profile Enable Action SMS text Authorization method Allowed users 10.
Authorization method Allowed users Enable HTTP access Enable remote HTTP access Enable remote HTTPS access 12. Restore to default Enable Action SMS text Authorization method Allowed users 13. Force switch SIM Enable Action SMS text Authorization method Allowed users Sender phone number 14. Force FW upgrade from server Enable Action SMS text Authorization method Allowed users access ON/OFF. What kind of authorization to use for SIM management.
15. Force Config update from server Enable Action SMS text Authorization method Allowed users 16. Switch monitoring on/off Enable Action SMS text Authorization method Allowed users This check box will enable and disable this function. The action to be performed when this rule is met. SMS text which will force router to upgrade configuration from server. What kind of authorization to use for SIM management. Whitelist of allow users Allows to upgrade router‘s Config via SMS.
1. 2. Field name Enable Action Sample Enable/Disable Reboot 3. Allowed users From all numbers 4. Get status via SMS after reboot Enable/Disable Explanation Enables the rule Action to be taken after receiving a call, you can choose from following actions: Reboot, Send status, Switch WiFi, Switch mobile data. Allows to limit action triggering from all users, to user groups or single user numbers Enables automatic message sending with router status information after reboot 8.7.2.1 Incoming Calls 1.
8.7.4 SMS Management 8.7.4.1 Read SMS In SMS Management page Read SMS you can read and delete received/stored SMS. 8.7.4.2 Send SMS 1. Field name Phone number Sample +3701111111 2. Message My text. Explanation Recipients phone number. Should be preceded with country code, i.e. “+370” Message text, special characters are allowed. 8.7.4.3 Storage With storage option you can choose for router NOT to delete SMS from SIM card.
1. 2. Field name Save messages on SIM SIM card memory 3. Leave free space Sample Enabled / Disabled Used: 0 Available: 50 1 Explanation Enables received message storing on SIM card Information about used/available SIM card memory How much memory (number of message should be left free 8.7.5 Remote Configuration RUT9xx can be configured via SMS from another RUT9xx.
1. 1. 2. Enabled / Disabled Enable Enables router to receive configuration No authorization / Describes what kind of authorization to use for SMS By serial management. Method at Receiving and Sending ends By administration password must match Allowed users From all numbers Gives greater control and security measures From group From single number Note, that for safety reasons Authorization method should be configured before deployment of the router. Authorization method 8.7.5.
1. Generate SMS New/From current configuration 2. Interface Mobile/Wired 3. 4. 6. WAN LAN Protocol 7. IP address 8. IP netmask 11. IP gateway 12. IP broadcast 13. Primary SIM card 14. Mobile connection 15. APN 16. Dialing number 17. Authentication method 18. User name 19. Password 20. Service mode 21. IP address 22. IP netmask 23.
Field name 1. 2. 3. Message text field Phone number Authorization method Values Generated configuration message Notes Here you can review and modify configuration message text to be sent “+37060000001” A phone number of router which will receive the configuration No authorization By serial By router admin password What kind of authorization to use for remote configuration 8.7.6 Statistics In statistics page you can review how much SMS was sent and received on both SIM card slots.
8.8.1 SNMP Settings 1. Field name Enable SNMP service 2. Enable remote access 3. 4. Port Community 5. 6. 7. 8.
8.8.2 TRAP Settings 1. Field name SNMP Trap Sample Enable/Disable 2. Host/IP 192.168.99.155 3. 4. Port Community 162 Public/Private Explanation Enable SNMP (Simple Network Management Protocol) trap functionality Host to transfer SNMP (Simple Network Management Protocol) traffic to Port for trap's host The SNMP (Simple Network Management Protocol) Community is an ID that allows access to a router's SNMP data 8.9 SMS Gateway 8.9.
Field name 1. 2. Enable User name Values Enabled / Disabled Notes Enable SMS management functionality through POST/GET admin User name used for authorization 3. Password ******* Password used for authorization (default- admin01) Do not forget to change parameters in the url according to your POST/GET Configuration! 8.9.1.1 SMS by HTTP POST/GET It is possible to read and send SMS by using valid HTTP POST/GET syntax.
/cgi-bin/sms_delete? username={your_user_name}&password={your_password}&number={MESSAGE_INDEX} /cgi-bin/ sms_list? username={your_user_name}&password={your_password} Delete message List all message s /cgi-bin/sms_ total? username={your_user_name}&password={your_password} Number of message s in memory Note: parameters of HTTP POST/GET string are in capital letters inside curly brackets. Curly brackets (“{ }”) are not needed when submitting HTTP POST/GET string. 8.9.1.3 Parameters of HTTP POST/GET string 1.
8.9.2 Email to SMS Field name 1. Enable Values Enable/Disable Notes Allows to convert received Email to SMS POP3 server address Server authentication port User name using for server authentication Password using for server authentication (SSL) is a protocol for transmitting private documents via the Internet. SSL uses a cryptographic system that uses two keys to encrypt data − a public key known to everyone and a private or secret key known only to the recipient of the message. Mail checking period 2.
8.9.3.1 Scheduled Messages Configuration Field name 1. 2. 3. 4. Enable Recipient’s phone number Message text Message sending interval Values Enable/Disable Notes Activates periodical messages sending. “+37060000001” Phone number that will receive messages. “Test” Day/Week/Month/Year Message that will be send. Message sending period. 8.9.4 Auto Reply Configuration Auto reply allows replying to every message that router receives to everyone or to listed numbers only. Field name 1. 2. Enable 3.
8.9.5 SMS Forwarding 8.9.5.1 SMS Forwarding To HTTP This functionality forwards mobile messages from all or only specified senders to HTTP, using either POST or GET methods. Field name 1. Enable 2. 3. 4. Method URL Number value name 5. 6. Message value name Extra data pair 1 7. Extra data pair 2 8. Mode Values Enable / Disable Notes Enable mobile message forwarding to HTTP POST / GET Defines the HTTP transfer method 192.168.99.250/getpost/index.
8.9.5.2 SMS Forwarding to SMS This functionality allows forwarding mobile messages from specified senders to one or several recipients. Field name 1. Enable Values Enable / Disable Notes Enable mobile message forwarding If enabled, original senders number will be added at the end of the forwarded message Specifies from which senders received messages are going to be forwarded. Phone numbers to which message is going to be forwarded to 2. Add sender number Enable / Disable 3. Mode 4.
Field name 1. Values Enable / Disable Enable 2. Add sender number 3. 4. 5. 6. Subject SMTP server SMTP server port Secure connection 7. 8. 9. 10. 11. User name Password Sender’s email address Recipient’s email address Mode Notes Enable mobile message forwarding to email Enable / Disable If enabled, original senders number will be added at the end of the forwarded message “forwarded message” Text that will be inserted in email Subject field mail.teltonika.
8.10 Hotspot Wireless hotspot provides essential functionality for managing an open access wireless network. In addition to standard RADIUS server authentication there is also the ability to gather and upload detailed logs on what each device (denoted as a MAC address) was doing on the network (what sites were traversed, etc.). 8.10.1 General settings 8.10.1.1 Main settings 1. 2. Field name Enabled AP IP 1. Radius server #1 2.
3. 4. 5. 6. 7. 8. 9. 10. 11. Authentication port Accounting port Radius secret key UAM port UAM UI port UAM secret NAS Identifier Swap octets Location name 1. External landing page Landing page address HTTPS redirect 2. 3. RADIUS server authentication port. RADIUS server accounting port.
8.10.2 Internet Access Restriction Settings Allows disable internet access on specified day and hour of every week. 8.10.3 Logging 8.10.3.1 Configuration 1. Field name Enable 2. 3. 4. Server address Username Password Explanation Check this box if you want to enable wireless traffic logging. This feature will produce logs which contain data on what websites each client was visiting during the time he was connected to your hotspot. The IP address of the FTP server to which you want the logs uploaded.
5. Port The TCP/IP Port of the FTP server. 1. Field name Mode 2. Interval 3. 4. Days Hours, Minutes Explanation The mode of the schedule. Use “Fixed” if you want the uploading to be done on a specific time of the day. Use “Interval” if you want the uploading to be done at fixed interval. Shows up only when “Mode” is set to Interval. Specifies the interval of regular uploads on one specific day. E.g. If you choose 4 hours, the uploading will be done on midnight, 4:00, 8:00, 12:00, 16:00 and 20:00.
8.10.4 Landing Page 8.10.4.1 General Landing Page Settings With this functionality you can customize your Hotspot Landing page. 1. 2. 3. 4.
8.10.4.2 Template In this page you can review landing page template HTML code and modify it. 8.10.5 Radius server configuration An authentication and accounting system used by many Internet Service Providers (ISPs). When you dial in to the ISP you must enter your username and password. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access to the ISP system.
1. 2. 3. 4. Field name Enable Remote access Accounting port Authentication port Explanation Activates an authentication and accounting system Activates remote access to radius server Port on which to listen for accounting Port on which to listen for authentication 8.10.6 Statistics On hotspot statistics page you can review statistical information about hotspot instances. 8.11 CLI CLI or Comand Line Interface functionality allows you to enter and execute comands into routers terminal.
8.12 Auto Reboot 8.12.1 Ping Reboot Ping Reboot function will periodically send Ping command to server and waits for echo receive. If no echo is received router will try again sending Ping command defined number times, after defined time interval. If no echo is received after the defined number of unsuccessful retries, router will reboot. It is possible to turn of the router rebooting after defined unsuccessful retries.
8.12.2 Periodic Reboot 1. 2. 3. Field name Enable Days Hours, Minutes Explanation This check box will enable or disable Periodic reboot feature. This check box will enable router rebooting at the defined days. Uploading will be done on that specific time of the day 8.13 UPNP 8.13.1 General Settings UPnP allows clients in the local network to automatically configure the router. 8.13.
1. 2. 3. Field name Use UPnP port mapping Use NAT-PMP port mapping Device UUID Explanation Enable UPnP port mapping functionality Enable NAT-PMP mapping functionality Specify Universal unique ID of the device 8.13.3 UPnP ACLs ACLs specify which external ports may be redirected to which internal addresses and ports. 1. 2. 3. 4. 5.
Field name 1. Interface 2. Enable 3. Calculate overhead 4. Half-duplex 5. Download speed (kbit/s) 6. Upload speed (kbit/s) 1. 2. 3. 4. 5. 6. 7.
In order to use TLS/SSL for connecting clients (subscribers and publishers) to the broker, the one should check Use TLS/SSL. After that, additional settings will be displayed to the user as shown below. Here the user can upload certificates, key files and choose TLS version, which will be used for data encryption between broker and clients (subscribers and publishers) The MQTT broker also supports option called Bridge. It means, that two brokers can be connected to each other and share messages.
, The last section of parameters is called Miscellaneous. It contains parameters, which does not depend on neither Security, nor Bridge categories. ACL File denotes access control list file name. The contents of this file are used to control client access to topics of the broker. The Password File denotes the file, there users and corresponding passwords are stored. This file is used for user authentication. This option is related to another option called Allow Anonymous.
It is possible to configure some sort of MQTT publisher. It is not simple publisher, but publisher, which publishes some system parameters to the broker. The publisher configuration window has few fields, like hostname and port of the broker to connect. Username and password fields are used for authentication. If these fields are left empty, no authentication is performed. The full list of system parameters, which can be published, are described below.
connection Check if data connection is available wan Get WAN’s IP address uptime Get system uptime in seconds name Get router’s name digital1 Get value of digital input no. 1 digital2 Get value of digital input no. 2 analog Get value of analog input In order system to work, MQTT broker should be configured in advance. You can use the broker, which is installed inside the router, or the broker in the other location. The publisher operates according to the scheme presented below.
8.16 Modbus TCP interface Modbus TCP interface allows the user to set or get some parameters from the router (the parameters, which can be set or get will be described later), like module temperature or signal strength. In other words, Modbus TCP is another manner to control router behavior. To use Modbus TCP capabilities it must be turned on by navigating to ServicesModbus. After “Save” button is pressed, the Modbus daemon will be launched on selected port of the system.
of SIM card for which set the APN. This byte should be set to 1 (in order to change APN for SIM card number 1) or to 2 (in order to change APN for SIM card number 2).
Step 3 (LAN) Next, you are given the chance to configure your LAN and DHCP server options. For a detailed explanation see LAN under Network. Step 4 (WiFi) The final step allows you to configure your wireless settings in order to set up a rudimentary Access Point.
When you’re done with the configuration wizard, press Save. 9.2 Profiles Router can have 5 configuration profiles, which you can later apply either via WebUI or via SMS. When you add New Profile, you save current full configuration of the router. Note: profile names cannot exceed 10 symbols.
9.3 Administration 9.3.1 General 1. 2. 3. Field name Router name Host name New Password 4. 5. 6. 7. 8. 9 10 Confirm new password Language IPv6 support Show mobile info at login page Show WAN IP at login page On/Off LEDs Restore to default Explanation Enter your new router name. Enter your new host name Enter your new administration password. Changing this password will change SSH password as well. Re-enter your new administration password. Website will be translated into selected language.
The only way to gain access to the web management if you forget the administrator password is to reset the device factory default settings. Default administrator login settings are: User Name: admin Password: admin01 9.3.2 Troubleshoot 7. Field name System log level Save log in Include GSMD information Include PPPD information Include Chat script information Include network topology information System Log 8. Kernel Log 9. Troubleshoot file 1. 2. 3. 4. 5. 6.
9.3.3 Backup 1. Field name Backup archive 2. Restore from backup Explanation Download current router settings file to personal computer. This file can be loaded to other RUT900 with same Firmware version in order to quickly configure it. Select, upload and restore router settings file from personal computer.
9.3.3.1 Access control 9.3.3.1.1 General Field name 1. Enable SSH access 2. Remote SSH access 3. Port 4. Enable HTTP access 5. Enable remote HTTP access 6. Port 7. Enable remote HTTPS access 8. Port 9. Enable CLI 10. Enable remote CLI 11. Port Explanation Check box to enable SSH access. Check box to enable remote SSH access.
9.3.3.1.2 Safety 1. 2. 3. 4. Field name SSH access secure enable Clean after reboot Fail count WebUI access secure enable Explanation Check box to enable SSH access secure functionality. If check box is selected – blocked addresses are removed after every reboot. Specifies maximum connection attempts count before access blocking. Check box to enable secure WebUI access. 9.3.4 Diagnostics 1. Field name Host Explanation Enter server IP address or hostname.
2. Ping 3. Traceroute 4. Nslookup Utility used to test the reach ability of a host on an Internet IP network and to measure the round-trip time for messages sent from the originating host to a destination server. Server echo response will be shown after few seconds if server is accessible. Diagnostics tool for displaying the route (path) and measuring transit delays of packets across an Internet IP network. Log containing route information will be shown after few seconds.
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12.
In Script Management window is shown content of a file /etc/rc.local. This file is executed at the end of startup, executing the line: sh /etc/rc.local In this script is needed to use sh (ash) commands. It should be noted, that this is embedded device and sh functionality is not full. 9.5 Restore point 9.5.1 Restore point create Allow to create firmware restore points with all custom configurations. You can download created restore points to your computer. 9.5.
9.6 Firmware 9.6.1 Firmware Keep all settings – if the check box is selected router will keep saved user configuration settings after firmware upgrade. When check box is not selected all router settings will be restored to factory defaults after firmware upgrade. When upgrading firmware, you can choose settings that you wish to keep after the upgrade. This function is useful when firmware is being upgraded via Internet (remotely) and you must not lose connection to the router afterwards.
9.6.2 FOTA 1. Field name Server address 2. 3. 4. 5. 6. User name Password Enable auto check Auto check mode WAN wired Explanation Specify server address to check for firmware updates. E.g. “http://teltonika.sritis.lt/rut9xx_auto_update/clients/” User name for server authorization. Password name for server authorization. Check box to enable automatic checking for new firmware updates. Select when to perform auto check function.
10.1 Reset button Reset button is located on the back panel of the device. Reset button has several functions: Reboot the device. After the device has started and if the reset button is pressed for up to 4 seconds the device will reboot. Start of the reboot will be indicated by flashing of all 5 signal strength LEDs together with green connection status LED. Reset to defaults.
11 Glossary WAN – Wide Area Network is a telecommunication network that covers a broad area (i.e., any network that links across metropolitan, regional, or national boundaries). Here we use the term WAN to mean the external network that the router uses to reach the internet. LAN – A local area network (LAN) is a computer network that interconnects computers in a limited area such as a home, school, computer laboratory, or office building.
TKIP – Temporal Key Integrity Protocol – scrambles the keys using hashing algorithm and, by adding an integritychecking feature, ensure that the keys haven’t been tampered with. CCMP – Counter Mode Cipher Block Chaining Message Authentication Code Protocol – encryption protocol designed for Wireless LAN products that implement the standards of the IEEE 802.11i amendment to the original IEEE802.11 standard.
12 Changelog Nr. 1 Date 2017-02-01 Version 1.