Highlight Features
RUT956 is an industrial router that combines cellular, Wi-Fi, and wired connectivity options with automatic WAN failover and GNSS capabilities. Serial communication interfaces enable integrating more varied devices into the solution ecosystem, while I/O and advanced RutOS software facilitate equipment control, automation, and event notifications.
specification
- Mobile
- Mobile Module: 4G LTE Cat 4 up to 150 DL/50 UL Mbps; 3G up to 21 DL/5.76 UL Mbps; 2G up to 236.8 DL/236.8 UL kbps
- 3GPP Release: Release 11
- SIM Switch: 2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, SIM idle protection
- Status: IMSI, ICCID, operator, operator state, data connection state, network type, bandwidth, connected band, signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, and MNC
- SMS: SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP
- USSD: Supports sending and reading Unstructured Supplementary Service Data messages
- Black/White List: Operator black/white list (by country or separate operators)
- Multiple PDN: Possibility to use different PDNs for multiple network access and services
- Band Management: Band lock, used band status display
- SIM PIN Code Management: SIM PIN code management enables setting, changing, or disabling the SIM card’s PIN
- APN: Auto APN
- Bridge: Direct connection (bridge) between mobile ISP and device on LAN
- Passthrough: Router assigns its mobile WAN IP address to another device on LAN
- Wireless
- Wireless Mode: 802.11b/g/n (Wi-Fi 4), Access Point (AP), Station (STA)
- Wi-Fi Security: WPA2-Enterprise: PEAP, WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, Auto-cipher modes, client separation, EAP-TLS with PKCS#12 certificates, disable auto-reconnect, 802.11w Protected Management Frames (PMF)
- SSID/ESSID: SSID stealth mode and access control based on MAC address
- Wi-Fi Users: Up to 100 simultaneous connections
- Wireless Connectivity Features: Fast roaming (802.11r), Relayd, BSS transition management (802.11v), radio resource measurement (802.11k)
- Wireless MAC Filter: Allowlist, blocklist
- Wireless QR Code Generator: Once scanned, a user will automatically enter your network without needing to input login information
- TravelMate: Forward Wi-Fi hotspot landing page to a subsequent connected device
- Network
- Hotspot: Captive portal (hotspot), internal/external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual user or group limitations, user management, 9 default customizable themes and optionality to upload and download customized hotspot themes
- Routing: Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy-based routing
- Network Protocols: TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL), VXLAN
- VoIP Passthrough Support: H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
- Connection Monitoring: Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection
- Firewall: Port forward, traffic rules, custom rules, TTL target customization
- DHCP: Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards
- QoS / Smart Queue Management (SQM): Traffic priority queuing by source/destination, service, protocol, or port, WMM, 802.11e
- DDNS: Supported >25 service providers, others can be configured manually
- DNS over HTTPS: DNS over HTTPS proxy enables secure DNS resolution by routing DNS queries over HTTPS
- Network Backup: Wi-Fi WAN, Mobile, VRRP, Wired options, each of which can be used as an automatic Failover
- Load Balancing: Balance Internet traffic over multiple WAN connections
- SSHFS: Possibility to mount remote file system via SSH protocol
- Traffic Management: Real-time monitoring, wireless signal charts, traffic usage history
- Port Mirroring: Mirroring network traffic on Ethernet ports for monitoring and analysis
- Ethernet
- WAN: 1 x WAN port 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX
- LAN: 3 x LAN ports, 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
- Security
- Authentication: Pre-shared key, digital certificates, X.509 certificates, TACACS+, Internal & External RADIUS users authentication, IP & login attempts block, time-based login blocking, built-in random password generator
- Firewall: Preconfigured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64
- Attack Prevention: DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
- VLAN: Port and tag-based VLAN separation
- Mobile Quota Control: Mobile data limit, customizable period, start time, warning limit, phone number
- WEB Filter: Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only
- Access Control: Flexible access control of SSH, Web interface, CLI, and Telnet
- SSL Certificate Generation: Let’s Encrypt and SCEP certificate generation methods