Teltonika RUT241 RUT2410300G0 Router 4G LTE eSIM™ 802.11b/g/n Global

INDUSTRIAL 4G eSIM™ ROUTER
The RUT241 is a compact, industrial-grade cellular router designed for reliable and versatile connectivity in IoT and M2M applications. RUT241 features rugged design, multiple connection interfaces including 4G LTE, Wi-Fi, and two Ethernet ports, as well as full compatibility with Teltonika’s Remote Management System (RMS). With support for automatic WAN failover and advanced RutOS software, the RUT241 enables continuous connectivity and solution automation through its digital inputs and outputs. RUT241 includes eSIM™ functionality based on the SGP.22 architecture, allowing up to seven eSIM™ profiles alongside a physical SIM card—easily managed via WebUI and RMS—offering even greater flexibility for global deployment. A non-eSIM™ version is also available - see the order code for details.

MOBILE

• Mobile module 4G (LTE) – Cat 4 up to 150 Mbps, 3G – Up to 42 Mbps, 2G – Up to 236.8 kbps

• 3GPP Release Release 10/11 depending on the hardware version

• eSIM* Consumer type eSIM, profile download and removal operations, up to 7 eSIM profiles; does not include data plans

• SIM switch 1 x 2FF SIM and 1 x eSIM, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail

• Status Signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, Bytes sent/received, connected band, IMSI, ICCID

• SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP

• USSD Supports sending and reading Unstructured Supplementary Service Data messages

• Black/White list Operator black/white list

• Multiple PDN Possibility to use different PDNs for multiple network access and services

• Band management Band lock, Used band status display

• APN Auto APN

• Bridge Direct connection (bridge) between mobile ISP and device on LAN

• Passthrough Router assigns its mobile WAN IP address to another device on LAN

WIRELESS

• Wireless mode IEEE 802.11b/g/n, Access Point (AP), Station (STA)

• WiFi security WPA2-Enterprise - PEAP, WPA2-PSK, WEP, WPA-EAP, WPA-PSK; AES-CCMP, TKIP, Auto Cipher modes, client separation

• SSID SSID stealth mode and access control based on MAC address

• WiFi users Up to 50 simultaneous connections

• Wireless Hotspot Captive portal (Hotspot), internal/external Radius server, SMS authorization, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual user or group limitations, user management, 9 default customizable themes

• Wireless Connectivity Features Fast roaming (802.11r), Relayd

ETHERNET

• WAN 1 x WAN port (can be configured to LAN) 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX

• LAN 3 x LAN ports, 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX

NETWORK

• Routing Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, NHRP)

• Network protocols TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SMNP, MQTT, Wake On Lan (WOL)

• VoIP passthrough support H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets

• Connection monitoring Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection

• Firewall Port forward, traffic rules, custom rules

• DHCP Static and dynamic IP allocation, DHCP Relay, Relayd

• QoS / Smart Queue Management (SQM) Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e

• DDNS Supported >25 service providers, others can be configured manually

• Network backup VRRP, Mobile, Wired and WiFi WAN options, each of which can be used as backup, using automatic Failover

• Load balancing Balance your internet traffic over multiple WAN connections

• SSHFS (optional) Possibility to mount remote file system via SSH protocol (not available in standard FW)

SECURITY

• Authentication Pre-shared key, digital certificates, X.509 certificates

• Firewall Pre-configured firewall rules can be enabled via web-ui, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T

• Attack prevention DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention ( SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)

• VLAN Port and tag based VLAN separation

• Mobile quota control Set up custom data limits for both SIM cards

• WEB filter Blacklist for blocking out unwanted websites, whitelist for specifying allowed sites only

• Access control Flexible access control of TCP, UDP, ICMP packets, MAC address filter

• Secure Boot Cryptographic integrity check of the each system boot process (available on device with special order code RUT950U072C0).

VPN

• OpenVPN Multiple clients and server can be running simultaneously, 12 encryption methods

• OpenVPN Encryption DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC

• IPsec IKEv1, IKEv2, supports up to 4 x VPN IPsec tunnels (instances), with 5 encryption methods (DES, 3DES, AES128, AES192, AES256)

• GRE GRE tunnel

• PPTP, L2TP Client/Server services can run simultaneously

• Stunnel Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs' code

• DMVPN Method of building scalable IPsec VPNs

• SSTP SSTP client instance support

• ZeroTier ZeroTier VPN

• WireGuard WireGuard VPN client and server support

• Tinc offers encryption, authentication and compression in it's tunnels. Client and server support.

MODBUS

• Supported modes: Server, Client

• Supported connection types: TCP

• Custom registers: MODBUS TCP custom register block requests, which read/write to a file inside the router, and can be used to extend MODBUS TCP Client functionality

• Supported data formats: 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII

DATA TO SERVER

• Protocol HTTP(S), MQTT, Azure MQTT

• Data to server: Extract parameters from multiple sources and different protocols, and send them all to a single server; Custom LUA scripting, allowing scripts to utilize the router's Data to server feature

MQTT GATEWAY

• MQTT gateway Allows sending commands and receiving data from MODBUS Master through MQTT broker

DNP3

• Supported modes TCP Master, DNP3 Outstation

MONITORING & MANAGEMENT

• WEB UI HTTP/HTTPS, status, configuration, FW update, CLI, troubleshoot, event log, system log, kernel log

• FOTA Firmware update from server, automatic notification

• SSH SSH (v1, v2)

• SMS SMS status, SMS configuration, send/read SMS via HTTP POST/GET

• Call Reboot, Status, WiFi on/off, Mobile data on/off, Output on/off

• TR-069 OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem

• MQTT MQTT Broker, MQTT publisher

• SNMP SNMP (v1, v2, v3), SNMP trap

• JSON-RPC Management API over HTTP/HTTPS

• MODBUS MODBUS TCP status/control

• RMS Teltonika Remote Management System (RMS)

IoT PLATFORMS

• Cloud of Things Allows monitoring of: Device data, Mobile data, Network info, Availability

• ThingWorx Allows monitoring of: WAN Type, WAN IP Mobile Operator Name, Mobile Signal Strength, Mobile Network Type

• Cumulocity Allows monitoring of: Device Model, Revision and Serial Number, Mobile Cell ID, ICCID, IMEI, Connection Type, Operator, Signal Strength, WAN Type and IP

• Azure IoT Hub Can send device IP, Number of bytes send/received/ 3G connection state, Network link state, IMEI, ICCID, Model, Manufacturer, Serial, Revision, IMSI, Sim State, PIN state, GSM signal, WCDMA RSCP WCDMA EC/IO, LTE RSRP, LTE SINR, LTE RSRQ, CELL ID, Operator, Operator number, Connection type, Temperature, PIN count to Azure IoT Hub server

SYSTEM CHARACTERISTICS

• CPU Mediatek, 580 MHz, MIPS 24KEc

• RAM 128 MB, DDR2

• FLASH storage 16 MB, SPI Flash

FIRMWARE / CONFIGURATION

• WEB UI Update FW from file, check FW on server, configuration profiles, configuration backup, restore point

• FOTA Update FW

• RMS Update FW/configuration for multiple devices

• Keep settings Update FW without losing current configuration

FIRMWARE CUSTOMIZATION

• Operating system RutOS (OpenWrt based Linux OS)

• Supported languages Busybox shell, Lua, C, C++

• Development tools SDK package with build environment provided

INPUT/OUTPUT

• Input 1 x Digital input, 0 - 5 V detected as logic low, 8 - 30 V detected as logic high

• Output 1 x Digital open collector output, max output 30 V, 300 mA

• Events SMS, EMAIL, RMS

POWER

• Connector 4 pin industrial DC power socket

• Input voltage range 9 – 30 VDC, reverse polarity protection; surge protection >31VDC 10us max

• PoE (passive) Passive PoE over spare pairs. Possibility to power up through LAN port, not compatible with IEEE802.3af, 802.3at and 802.3bt standards

• Power consumption < 2 W idle, < 7 W Max

PHYSICAL INTERFACES (PORTS, LEDS, ANTENNAS, BUTTONS, SIM)

• Ethernet 4 x RJ45 ports, 10/100 Mbps

• I/O’s 1 x Digital Input, 1 x Digital Output on 4 pin power connector (available from HW revision 1600)

• Status LEDs 1 x bi-color connection status LED, 5 x connection strength LEDs, 4 x LAN status LEDs, 1 x Power LED

• SIM 2 x SIM slots (Mini SIM - 2FF), 1.8 V/3 V, external SIM holders, eSIM (Optional)

• Power 1 x 4 pin power connector

• Antennas 2 x SMA for LTE, 2 x RP-SMA for WiFi antenna connectors

• Reset Reboot/User default reset/Factory reset button

PHYSICAL SPECIFICATION

• Casing material Aluminium housing, plastic panels

• Dimensions (W x H x D) 83 x 25 x 74 mm

• Weight 280 g

• Mounting options DIN rail (can be mounted on two sides), flat surface placement

OPERATING ENVIRONMENT

• Operating temperature -40 °C to 75 °C

• Operating humidity 10% to 90% non-condensing

• Ingress Protection Rating IP30

REGULATORY & TYPE APPROVALS

• Regulatory CE/RED, FCC, IC, PTCRB, RCM, EAC, CCC, RoHS, WEEE, IP rating, Anatel, GCF, TRA approval, REACH, DNV GL, Declaration of Software Security, Thailand NBTC, Ukraine UCRF, WiFi Certified, SDPPI (POSTEL)

• Operator AT&T, Verizon

EMI IMMUNITY

• Standards Draft EN 301 489-1 V2.2.0, Draft EN 301 489-17 V3.2.0, Draft EN 301 489-19 V2.1.0, Draft EN 301 489-52 V1.1.0 FCC 47 CFR Part 15B (2018), ANSI C63.4 (2014)

• ESD EN61000-4-2:2009

• RS EN 61000-4-3:2006 + A1:2008 + A2:2010

• EFT EN 61000-4-4:2012

• Surge immunity (AC Power Line) EN 61000-4-5:2006

• Surge immunity (Ethernet ports) EN 61000-4-5:2014, clause 7.1 of ITU-T K21

• Transient and surges ISO 7632-2:2004

• CS EN 61000-4-6:2009

• DIP EN 61000-4-11:2004

RF

• Standards EN 300 328 V2.1.1, EN 301 511 V12.5.1, EN 301 908-1 V11.1.1, EN 301 908-2 V11.1.1, EN 301 908-13 V11.1.1 AS/CA S042.1:2018, AS/ACIF S042.3:2005, AS/CA S042.4:2018, AS/NZS 4268:2017 FCC 47 CFR Part 15C, FCC 47 CFR Part 22H, FCC 47 CFR Part 24E, FCC 47 CFR Part 27

SAFETY

• Standards IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2:2013 AS/NZS 60950.1:2015 EN 50665:2017, EN 62311:2008 FCC 47 CFR Part 1 1.1310

ENVIRONMENTAL

• Ingress Protect LST EN 60529:1999+A1+AC:2002

• Vibration Class guideline-DNVGL-CG-0339:2016

• EN 60068-2-6:2008