*Standard package contents may differ based on standard order codes.
| Wireless Mode |
802.11b/g/n (Wi-Fi 4), Access Point (AP), Station (STA) |
| Wi-Fi Security |
WPA2-Enterprise: PEAP, WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, Auto-cipher modes, client separation, EAP-TLS with PKCS#12 certificates, disable auto-reconnect, 802.11w Protected Management Frames (PMF) |
| SSID/ESSID |
ESSID stealth mode |
| Wi-Fi Users |
Up to 50 simultaneous connections |
| Wireless Connectivity Features |
Wireless mesh (802.11s), fast roaming (802.11r), Relayd, BSS transition management (802.11v), radio resource measurement (802.11k) |
| Wireless MAC Filter |
Allowlist, blocklist |
| Wireless QR Code Generator |
Automatically connect to the network by scanning the QR code, no manual login needed |
| TravelMate |
Forward Wi-Fi hotspot landing page to a subsequent connected device |
| Routing |
Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy-based routing |
| Network Protocols |
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On LAN (WOL), VXLAN |
| VoIP Passthrough |
H.323 and SIP-ALG protocol NAT helpers, allowing proper routing of VoIP packets |
| Connection Monitoring |
Ping Reboot, Wget Reboot, Periodic Reboot, LCP, and ICMP for link inspection |
| Firewall |
Port forward, traffic rules, custom rules, TTL target customization |
| Firewall Status Page |
View all Firewall statistics, rules, and rule counters |
| Ports Management |
View device ports, enable/disable them, toggle auto-configuration, change transmission speed, etc. |
| Network Topology |
Visual representation of the network, showing which devices are connected to which others |
| DHCP |
Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards |
| QoS / SQM |
Traffic priority queuing by source/destination, service, protocol, or port; WMM, 802.11e |
| DDNS |
Supported >25 service providers, with manual configuration option for others |
| DNS over HTTPS |
Secure DNS resolution by routing DNS queries over HTTPS |
| Network Backup |
Wi-Fi WAN, VRRP, Wired options, with automatic Failover capability |
| Load Balancing |
Balance Internet traffic over multiple WAN connections |
| Hotspot |
Captive portal, internal/external Radius server, Radius MAC authentication, SMS authorization, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual/group limitations, user management, customizable themes, and upload/download of custom themes |
| SSHFS |
Possibility to mount remote file system via SSH protocol |
| Traffic Management |
Real-time monitoring, wireless signal charts, traffic usage history |
| Authentication |
Pre-shared key, digital certificates, X.509 certificates, TACACS+, Internal & External RADIUS user authentication, IP & login attempts block, time-based login blocking, built-in random password generator |
| Firewall |
Preconfigured firewall rules via WebUI, unlimited configuration via CLI, DMZ, NAT, NAT-T, NAT64 |
| Attack Prevention |
DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) |
| VLAN |
Port and tag-based VLAN separation |
| WEB Filter |
Blacklist for blocking unwanted websites, Whitelist for specifying allowed sites only |
| Access Control |
Flexible access control of SSH, Web interface, CLI, and Telnet |
| SSL Certificate Generation |
Let’s Encrypt and SCEP certificate generation methods |
| OpenVPN |
Multiple clients and a server can run simultaneously, 27 encryption methods |
| OpenVPN Encryption |
DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256 |
| IPsec |
XFRM, IKEv1, IKEv2, with 14 encryption methods: 3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16 |
| GRE |
GRE tunnel, GRE tunnel over IPsec support |
| PPTP, L2TP |
Client/Server instances can run simultaneously, L2TPv3, L2TP over IPsec support |
| Stunnel |
Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs code |
| DMVPN |
Method of building scalable IPsec VPNs, Phase 2 and Phase 3 and Dual Hub support |
| SSTP |
SSTP client instance support |
| ZeroTier |
ZeroTier VPN client support |
| WireGuard |
WireGuard VPN client and server support |
| Tinc |
Tinc offers encryption, authentication, and compression in its tunnels. Client and server support. |
| WEB UI |
HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, multiple event log servers, firmware update availability notifications, event log, system log, kernel log, Internet status |
| FOTA |
Firmware update from server, automatic notification |
| SSH |
SSH (v1, v2) |
| Email |
Receive email message status alerts of various services |
| TR-069 |
OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem |
| MQTT |
MQTT Broker, MQTT publisher |
| SNMP |
SNMP (v1, v2, v3), SNMP Trap, Brute force protection |
| JSON-RPC |
Management API over HTTP/HTTPS |
| RMS |
Teltonika Remote Management System (RMS) |