Teltonika TRB500

MOBILE

• Mobile module

  5G Sub-6Ghz SA/NSA 2.1/3.3Gbps DL (4x4 MIMO), 900/600 Mbps UL (2x2); 4G (LTE) – LTE Cat 20 2.0Gbps DL, 200Mbps UL; 3G – 42 Mbps DL, 5.76Mbps UL

• Status

  Signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, Bytes sent/received, connected band, IMSI, ICCID

• SMS

  SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP

• USSD

  Supports sending and reading Unstructured Supplementary Service Data messages

• Black/White list

  Operator black/white list

• Multiple PDN

  Possibility to use different PDNs for multiple network access and services

• Band management

  Band lock, Used band status display

• APN

  Auto APN

• Bridge

  Direct connection (bridge) between mobile ISP and device on LAN

• Passthrough

  Router assigns its mobile WAN IP address to another device on LAN

ETHERNET

• LAN

  1 x LAN port, 10/100/1000 Mbps, supports auto MDI/MDIX crossover

NETWORK

• Routing

  Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy based routing

• Network protocols

  TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SMNP, MQTT, Wake On Lan (WOL)

• VoIP passthrough support

  H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets

• Connection monitoring

  Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection

• Firewall

  Port forward, traffic rules, custom rules

• DHCP

  Static and dynamic IP allocation, DHCP Relay

• QoS / Smart Queue Management (SQM)

  Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e

• DDNS

  Supported >25 service providers, others can be configured manually

• Network backup

  Mobile, VRRP, Wired options, each of which can be used as an automatic Failover

• Load balancing

  Balance Internet traffic over multiple WAN connections

• SSHFS

  Possibility to mount remote file system via SSH protocol

SECURITY

• Authentication

  Pre-shared key, digital certificates, X.509 certificates, TACACS+, Radius, IP & Login attempts block

• Firewall

  Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T

• Attack prevention

  DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)

• VLAN

  Port and tag-based VLAN separation

• Mobile quota control

  Mobile data limit, customizable period, start time, warning limit, phone number

• WEB filter

  Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only

• Access control

  Flexible access control of TCP, UDP, ICMP packets, MAC address filter

VPN

• OpenVPN

  Multiple clients and a server can run simultaneously, 27 encryption methods

• OpenVPN Encryption

  DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192,

  BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256

• IPsec

  IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)

• GRE

  GRE tunnel, GRE tunnel over IPsec support

• PPTP, L2TP

  Client/Server instances can run simultaneously, L2TPv3, L2TP over IPsec support

• Stunnel

  Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code

• DMVPN

  Method of building scalable IPsec VPNs

• SSTP

  SSTP client instance support

• ZeroTier

  ZeroTier VPN client support

• WireGuard

  WireGuard VPN client and server support

• Tinc

  Tinc offers encryption, authentication and compression in it's tunnels. Client and server support.

MODBUS TCP SLAVE

• ID range

  Respond to one ID in range [1;255] or any

• Allow Remote Access

  Allow access through WAN

• Custom registers

  MODBUS TCP custom register block requests, which read/write to a file inside the router, and can be used to extend MODBUS TCP Slave functionality

MODBUS TCP MASTER

• Supported functions

  01, 02, 03, 04, 05, 06, 15, 16

• Supported data formats

  8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC)

DATA TO SERVER

• Protocol

  HTTP(S), MQTT, Azure MQTT, Kinesis

MQTT GATEWAY

• MQTT Gateway

  Allows sending commands and receiving data from MODBUS Master through MQTT broker

DNP3

• Supported modes

  TCP Master, DNP3 Outstation

MONITORING & MANAGEMENT

• WEB UI

  HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log

• FOTA

  Firmware update from server, automatic notification

• SSH

  SSH (v1, v2)

• SMS

  SMS status, SMS configuration, send/read SMS via HTTP POST/GET

•