Teltonika RUT100 User manual

2 | P a g e
LEGAL NOTICE
Copyright © 2009 TELTONIKA Ltd. All rights reserved. Reproduction, transfer, distribution
or storage of part or all of the contents in this document in any form without the prior written
permission of TELTONIKA Ltd is prohibited. The manufacturer reserves the right to modify the
product and manual for the purpose of technical improvement without prior notice.
CE compliance:
This equipment has been tested and found to comply with the limits for a Class B digital device.
CE mark declaration of conformity can be found at Teltonika WEB page www.teltonika.eu
Other product and company names mentioned herein may be trademarks or trade names of their
respective owners.
ATTENTION
Before using the device we strongly recommend read this user
manual.
Do not rip the device. Do not touch the device if the device block
is broken or its connecting wires are without isolation.
All wireless devices for data transferring may be susceptible to
interference, which could affect performance.
The device is not water-resistant. Keep it dry.
The device requires high 230V AC voltage.
IMPORTANT NOTES!
It is mandatory to read the notes and manual carefully before starting to use the device.
TECHNICAL SUPPORT CONTACTS
If you face any problems related to the device, which you are not able to solve by yourself, you are
always welcome to address our technical support department by e-mail [email protected]. We will
be very glad to help you.

3 | P a g e
Table of Contents
1SAFETY INFORMATION ........................................................................................................................5
2PRODUCT OVERVIEW............................................................................................................................6
2.1 Introduction .............................................................................................................................................6
2.2 Package contents .....................................................................................................................................6
2.3 System requirements...............................................................................................................................6
2.4 RUT100, RUT104 Hardware, LED's and connections.....................................................................7
2.4.1 Back panel......................................................................................................................................7
2.4.2 Front panel ....................................................................................................................................7
2.5 RUT110 Hardware, LED's and connections ......................................................................................8
2.5.1 Back panel......................................................................................................................................8
2.5.2 Front panel ....................................................................................................................................8
3GETTING STARTED.................................................................................................................................9
3.1 Initial setup...............................................................................................................................................9
3.2 Router installation guide.........................................................................................................................9
4ROUTER CONFIGURATION.............................................................................................................. 10
4.1 Connect to router WEB configuration page using wired connection.......................................... 10
4.2 Connect to router WEB configuration page using wireless connection...................................... 11
4.3 WEB configuration page interface structure.................................................................................... 12
4.4 Quick Setup........................................................................................................................................... 13
4.5 Status...................................................................................................................................................... 15
4.5.1 System Information................................................................................................................... 15
4.5.2 Hardware information .............................................................................................................. 16
4.5.3 ARP table.................................................................................................................................... 16
4.5.4 DDNS ......................................................................................................................................... 16
4.6 Configuration........................................................................................................................................ 17
4.6.1 Mobile Network Settings.......................................................................................................... 17
4.6.2 Network Settings ....................................................................................................................... 18
4.6.3 Wireless Settings ........................................................................................................................ 19
4.6.3.1 Country code......................................................................................................................... 19
4.6.3.2 Basic wireless settings .......................................................................................................... 19
4.6.3.3 Advanced wireless settings.................................................................................................. 19
4.6.3.4 Wireless security ................................................................................................................... 20
4.6.3.4.1 Wireless security with WEP 64/128bit .................................................................. 21
4.6.3.4.2 Wireless security WPA/WPA2 with pre-shared key............................................ 21
4.6.3.4.3 Wireless security with the RADIUS authentication ............................................. 21
4.6.4 Dynamic DNS Settings............................................................................................................. 22
4.6.5 Port forwarding.......................................................................................................................... 23
4.6.5.1 DMZ............................................................................................................................................ 24
4.6.6 Service ......................................................................................................................................... 25
4.6.6.1 SSH......................................................................................................................................... 25
4.6.6.2 HTTP..................................................................................................................................... 25
4.7 VPN ....................................................................................................................................................... 26
4.7.1 OpenVPN (site to site )............................................................................................................ 26
4.7.1.1 Server configuration............................................................................................................. 27
4.7.1.2 Client configuration ............................................................................................................. 27
4.7.1.3 Static authentication key...................................................................................................... 28
4.7.2 GRE Tunnel............................................................................................................................... 29
4.7.3 IPsec ............................................................................................................................................ 30
4.7.3.1 Manual IPsec Key exchange............................................................................................... 31
4.7.3.1.1 Authentication header (AH) settings...................................................................... 31
4.7.3.1.2 Encapsulating Security Payload (ESP) settings..................................................... 32
4.7.3.2 Auto IKE IPsec Key exchange.......................................................................................... 33

4 | P a g e
4.7.3.3 Tunnel keep alive ................................................................................................................. 34
4.8 Admin .................................................................................................................................................... 35
4.8.1 Account....................................................................................................................................... 35
4.8.2 Management ............................................................................................................................... 35
4.8.2.1 RCMS..................................................................................................................................... 35
4.8.2.2 SNMP .................................................................................................................................... 36
4.8.2.3 Clock/NTP ........................................................................................................................... 37
4.8.3 Maintenance ............................................................................................................................... 38
4.8.3.1 Firmware upgrade ................................................................................................................ 38
4.8.3.2 Reboot.................................................................................................................................... 38
4.8.3.3 Factory Defaults ................................................................................................................... 38
4.8.3.4 Troubleshooting file download.......................................................................................... 39
4.9 Tools ...................................................................................................................................................... 40
4.9.1 Site Survey .................................................................................................................................. 40
4.9.2 Ping Reboot................................................................................................................................ 40
5TECHNICAL SPECIFICATION........................................................................................................... 41
6ORDERING INFORMATION.............................................................................................................. 44
6.1 RUT100 HSDPA series....................................................................................................................... 44
6.2 RUT104 HSUPA series....................................................................................................................... 44
6.3 RUT110 HSDPA series....................................................................................................................... 44
7Appendix A Configuring PC wireless security........................................................................................ 45
8Appendix B Changing router IP address................................................................................................. 47
9Appendix C Updating router firmware.................................................................................................... 48
10 Appendix D Accessing RUT from the WEB ......................................................................................... 50
11 Appendix E SIM card public or private IP address............................................................................... 51

5 | P a g e
1 SAFETY INFORMATION
In this document you will be introduced how to use 3G Mobile Router safely. We suggest you
to adhere to following recommendations to avoid any damage to person or property.
You have to be familiar with the safety requirements before starting to use the device!
3G Mobile Router is used to provide a mobile Internet access using a GSM network. To avoid burning
and voltage caused traumas, of the personnel working with device, please follow these safety
requirements.
Device requires power supply source that satisfies all safety
requirements listed in LST EN 60950-1 standard. Each power
supply source should not exceed 15VA.
The PC and power supply source, to which the device is
connected, should satisfy LST EN 60950-1 standard. The device
can be used on first (Personal Computer) or second (Notebook)
computer safety class.
Disconnect device from power supply before mounting to avoid
voltage effect!
Do not mount or serve device during a thunderbolt.
To avoid mechanical damages of the device it is recommended to transport the device packed
in damage-proof pack. While using the device, it should be placed so, that its indication LED would be
visible as they inform in which working mode the device is and if it has any working problems.
Protection against over currents, short circuits and earth faults should be provided as a part of
the building installation. Two pole protective device is required to protect from short-circuit and earth
false. The power of connected device should satisfy power of release device. To disconnect the device
plug off AC/DC power adapter from the wall outlet or power strip. The interstice between contacts
should be no less than 3mm.
Signal level of the device depends on the environment in which it is working. If the device
starts working insufficiently only qualified personnel may repair this product. We recommend to
forward it to repair centre or to manufacturers. No exchangeable parts inside of the device.

6 | P a g e
2 PRODUCT OVERVIEW
2.1 Introduction
Teltonika 3G Mobile Router provides WAN connectivity to wired and wireless clients using the
3G cellular data network. It allows multiple users to get IEEE 802.11 compliant connection within
your wireless broadband network with a single 3G data access account and SIM card. 3G Mobile
Router is extremely useful for mobile work teams or emergency crews that need access to the
broadband Internet but have no permanent base. The 3G/IEEE 802.11 router might be an easy
solution to provide Internet connection for commuter vehicles, such as trains or company buses.
Quickly set up a IEEE 802.11 hotspot Internet connection to check email and browse the web or share
files.
2.2 Package contents
RUT100, RUT110
RUT104
3G Mobile Router
2 external Wireless LAN antennas
External GSM antenna
Power adapter
CAT5 LAN cable
CD with User Manual
Leaflet “Quick Start Guide”
3G Mobile Router
2 external Wireless LAN antennas
2 External GSM antennas
Power adapter
CAT5 LAN cable
CD with User Manual
Leaflet “Quick Start Guide”
Note: The manufacturer does not supply the SIM card, which is mandatory for setting up a
connection to the GSM network! The SIM card may be purchased from your GSM (mobile) service
provider!
Note: Using a power supply with a different voltage rating than the one included with the
RUT100 will cause damage and void the warranty for this product.
Note: If any of the components is missing or damaged, please contact the retailer or reseller
from which this product was purchased.
2.3 System requirements
A computer with Windows®, Macintosh®, or Linux-based operating systems with a network
connection (wired or wireless).
A web browser Internet Explorer 6.0, Netscape Navigator™ 6.0, Opera 9.0, Mozilla 5.0 or later
versions for configuration.

7 | P a g e
2.4 RUT100, RUT104 Hardware, LED's and connections
2.4.1 Back panel
Figure 1. Router back panel view.
1. Wireless LAN antenna connection.
2. GSM antenna connection.
3. Wireless LAN antenna connection.
2.4.2 Front panel
Figure 2. Router front panel view.
1. 3G LED. A solid light indicates proper connection of the 3G.
2. Reset button.
3. Ethernet socket.
4. Ethernet LED. A solid light indicates proper connection of the Ethernet. A blinking light
indicates data transfer.
5. Power LED. A solid light indicates a proper connection to the power supply.
6. SIM card socket.
7. Power supply adapter socket.

8 | P a g e
2.5 RUT110 Hardware, LED's and connections
2.5.1 Back panel
Figure 1. Router back panel view.
WLAN - wireless LAN antenna connection.
Power - power adapter socket.
GSM - GSM antenna connection.
LAN - Ethernet connection.
2.5.2 Front panel
Figure 2. Router top panel view.
GSM –solid light indicates proper connection to GSM network.
WLAN –solid light indicates that the wireless network is turned on.
LAN –solid light indicates proper connection of the Ethernet. A blinking light indicates data transfer.
Power –solid light indicates proper connection to the power supply.

9 | P a g e
3 GETTING STARTED
3.1 Initial setup
3G Mobile Router enables to access network using a wireless connection from virtually
anywhere within the operating range of wireless network. Some things should be considered before
finding place to set up access point:
1. Make sure the power outlet is nearby as the router requires power supply.
2. Keep the access point as central in work area as possible.
3. The number of walls and ceilings between the router and other network devices should be kept
to a minimum as each wall or ceiling probably will reduce adapter’s range from 1-30 meters.
Signal strength and speed fall off with distance.
4. Higher is often better. Set up the router on the top shelf of a bookcase rather than the bottom
one, if it is possible. The antenna usually works best if oriented to point straight up.
5. Building materials make a difference. A solid metal door or aluminum studs may have a
negative effect on range. Try to position access point and computers so that the signal passes
through drywall or open doorways. Materials and objects such as glass, steel, metal, walls with
insulation, mirrors, file cabinets, bricks, and concrete will degrade wireless signal.
6. Keep router away (at least 1-2 meters) from electrical devices or appliances that generate RF
noise.
7. If you are using 2.4GHz cordless phones or other wireless products your wireless connection
may degrade dramatically or drop completely. Make sure your 2.4GHz phone base is as far
away from your wireless devices as possible. The base transmits a signal even if the phone in
not in use.
3.2 Router installation guide
1. Attach Wireless LAN and GSM antennas.
Remove the antenna from its plastic wrapper.
Screw the antenna in a clockwise direction to the back panel of the unit.
Position the antenna upward at its connecting joint. This will ensure optimal reception.
2. Insert the SIM card which was given by your GSM (mobile) service provider.
3. Insert the Ethernet cable into LAN Port if the router will be configured using wired
connection.
4. Connect the power adapter to the socket on the front panel of 3G Mobile Router. Then plug
the other end of the power adapter into a wall outlet or power strip.
Note: SIM card is mandatory for setting up connection to the GSM network. However, the
manufacturer of this equipment does not supply the SIM card. The SIM card can be purchased from
your GSM (mobile) service provider! For APN, user name and password please contact your GSM
(mobile) service provider. The 3G Mobile Router must be powered off while inserting or taking out the
SIM card.

10 | P a g e
4 ROUTER CONFIGURATION
4.1 Connect to router WEB configuration page using wired connection
Step 1 Connect 3G Mobile Router to your PC using LAN cable.
Step 2 Setup Local Area Network adapter on your
computer (Go to Start > Settings > Network Connections
Right click on Local Network Connection select
Properties)
Step 3 Setup the Local Area network adapter’s IP address.
Choose Internet Protocol (TCP/IP) and click Properties.
Setup the Local area network adapter to
Obtain an IP address automatically and
Obtain DNS server address automatically
Note: It is possible to assign manually static IP address within
192.168.0.2 - 192.168.0.254 address range with mask 255.255.255.0,
gateway 192.168.0.1 and DNS server 192.168.0.1.
Step 4 Open the Web browser and type the IP address of the router (Default : 192.168.0.1) and
enter the 3G Mobile Router administrator login details to access the Web management tool:
The default administrator login settings are:
Login: admin
Password: admin01
Note: It is strongly recommended to change the password after the first router configuration.
Step 5 After successful administrator log on you will see the main page of the 3G Mobile
Router Web configuration interface. The device now is ready for configuration.

11 | P a g e
4.2 Connect to router WEB configuration page using wireless connection
Note: the Wireless network function is shipped disabled by default and the configuration for
the first time can be made only by using wired connection.
Step 1 Setup wireless network adapter on your
computer (Go to Start>Settings>Network
Connections>Right click on Wireless Network
Connection associated with the wireless adapter and
select Properties):
Step 2 Setup the wireless network adapter’s IP address
(choose Internet Protocol (TCP/IP) and click Properties):
Setup the wireless network adapter to
Obtain an IP address automatically and
Obtain DNS server address automatically
Note: It is possible to assign manually static IP address within
192.168.0.2 - 192.168.0.254 address range with mask 255.255.255.0,
gateway 192.168.0.1 and DNS server 192.168.0.1.
Step 3 Enable the wireless network connection.
Right click on Wireless Network Connection and chose
Enable.
Step 4 Choose the wireless network (default: www.teltonika.lt) from the list of available wireless
networks.
Step 5 Open the Web browser and type the device IP address (default 192.168.0.1) and enter
the 3G Mobile Router administrator login details to access the Web management.
The default administrator login settings are:
Login: admin
Password: admin01
Step 6 After successful administrator log on you will see the main page of the 3G Mobile
Router Web configuration interface. The device now is ready for configuration.

12 | P a g e
4.3 WEB configuration page interface structure
The main Web management menu is displayed after successful login into the system (Figure 3).
From this menu all essential configuration pages are accessed.
Figure 3. Main Management Menu
By default the Quick Setup menu is activated. The web management menu has the following
structure:
Quick Setup –quick router configuration wizard.
Status
System Information –displays general information of the device status.
Hardware information –displays device hardware information.
ARP table –displays map of IP addresses assigned to the MAC addresses.
DDNS –displays DDNS status information.
Configuration
Mobile Network Settings
Network Settings
Wireless Settings
Dynamic DNS Settings
Port forwarding
Services –SSH, HTTPS services management.
VPN
OpenVPN –Create site to site tunnel.
GRE Tunnel –Create GRE tunnel.
IPsec –IPsec client settings.
Admin
Account –change administrator’s password.
Management –administrative access settings.
Maintenance –firmware upgrade, log troubleshoot file download, reboot or reset to
factory defaults the device.
Tools
Site Survey –shows information about wireless networks in the local geography.
Ping Reboot –set up continuous ping IP address with possibility to automatically
reboot router if no echo received.

13 | P a g e
4.4 Quick Setup
Use Quick Setup to quickly configure basic 3G Mobile Router settings. The configuration is
made in four steps (this is the default page when accessing the administration web management
interface).
To start quick setup wizard click button Start Now.
Step 1. Change router login password in order to prevent unauthorized login to the router.
Step 2. Configure wireless network settings.
It is recommended to use WPA-PSK with TKIP or AES data encryption. The passphrase for
data encryption may be 8-63 characters long and can include symbols (!?*&_) and spaces. This
passphrase must be the same as Network key in the PC wireless network security settings. If encryption
is chosen do not forget to configure your PC settings (refer to Appendix A).
Note: If Open system will be chosen it will let anyone within the range and with proper
equipment to connect to your network.

14 | P a g e
Step 3. Configure mobile network settings. The configuration data should be provided by your
ISP (Internet Service Provider).
Step 4. After successful configuration please click Save button. The router will reboot and start
up with new settings. The process will take several minutes.

15 | P a g e
4.5 Status
4.5.1 System Information
System Information menu displays general devices status.
Figure 4. System Information
Connection information –displays the GSM network information
Local Network Information –displays local network configuration.
Wireless Information –displays wireless network information.

16 | P a g e
4.5.2 Hardware information
Figure 5. Interfaces
Uptime –displays the time since the system was last rebooted.
Firmware version –displays current version of the firmware.
Average system load –displays the average load of the device processor in the period of the
last 1 minute, 5 minutes and 15 minutes (a larger value means a larger average load on the processor:
<1.0 –System is idle; =1.0 –Normal load; >1.0 –Processor is busy).
System memory –displays total and free system memory.
LAN MAC address –displays wired LAN MAC address.
LAN MAC address –displays wireless LAN MAC address.
4.5.3 ARP table
The ARP Table shows map of the IP addresses assigned to the MAC addresses.
Figure 6. ARP information
4.5.4 DDNS
Dynamic DNS service status is displayed in the DDNS section.
Figure 7. DDNS status

17 | P a g e
4.6 Configuration
4.6.1 Mobile Network Settings
To set up the GSM connection SIM card is required. SIM card is not supplied with the router.
It may be purchased from internet service provider.
The following information to connect to the internet is required:
1. PPP authentication. The authentication protocol, which is used by your Internet Service
Provider [None, CHAP or PAP].
2. APN. Access Point Name (APN).
3. User Name. If GSM operator does not require username, leave it blank.
4. Password. If GSM operator does not require password, leave it blank.
5. SIM card PIN number.
6. DNS server 1. If GSM operator does not require DNS server 1, leave it blank.
7. DNS server 2. If GSM operator does not require DNS server 2, leave it blank.
Warning: It is strongly recommended to use SIM card with PIN disabled. Otherwise, if the
entered PIN will be wrong, the SIM card will be locked.
Figure 8. Mobile network configuration.
Authentication method –Select authentication type PAP, CHAP or None.
APN –Access Point Name (APN)
User Name –Enter your User Name for your mobile connection.
Password –Enter your Password for your mobile connection.
PIN –SIM card pin number.
Enable Manual DNS –check to enter custom DNS server IP addresses
DNS server 1 and DNS server 2 are ISP domain servers.

18 | P a g e
4.6.2 Network Settings
This section will allow you to change the local network settings of the router and to configure
the DHCP settings
Figure 9. Network settings.
Router IP address. The IP address of the router. The default IP address is 192.168.0.1.
Subnet mask. The Subnet Mask of the router. The default subnet mask is 255.255.255.0.
Enable DHCP server. Check the box to enable the DHCP server on your router. Uncheck to
disable this function
Enabled DHCP server allows configuring IP addresses pool that will be assigned by the router.
Figure 10. Network settings.
IP address from. Starting IP addresses for the DHCP server’s IP assignment.
IP address to. Ending IP addresses for the DHCP server’s IP assignment.
Subnet mask. The Subnet Mask of the router. The default subnet mask is 255.255.255.0.
Lease time. Determines how long IP addresses are assigned for you. During the lease time,
the DHCP server cannot assign that IP address to any other clients. The purpose of a lease is to limit
the length of time that a client may use an IP address. A lease prevents unused clients from taking up
IP addresses when there are more clients than addresses. Enter the Lease time in seconds.
WINS address. If WINS (Windows Internet Naming Service ) server is specified, the router
at system startup, will register its name and IP address with the WINS server. WINS server is used for
mapping host names to network addresses. This results in fast and efficient host name resolution.
Specify WINS server IP address.
Domain. Enter the domain name for the Router. Some ISP's require it for identification.
Check your ISP to see if your broadband Internet service has been configured with a domain name. In
most cases, leaving these fields blank will work.

19 | P a g e
4.6.3 Wireless Settings
4.6.3.1 Country code
Figure 11. Wireless network settings.
Country code. Select the country where the wireless network will be created.
4.6.3.2 Basic wireless settings
Figure 12. Wireless network settings.
Enable radio. Check the box to enable the wireless function. If you do not want to use
wireless network, uncheck the box to disable the wireless function.
SSID. Specify a unique name for your wireless network.
4.6.3.3 Advanced wireless settings
Figure 13. Wireless network settings.
IEEE mode. Specify the wireless network mode [B, G, mixed B/G].
Dynamic turbo. The dynamic function allows the router to automatically search for channels
with less noise and interference. By default, this feature is disabled. You can enable this feature by
selecting the checkbox. (For G mode only.)
Current Channel. Indicates the current channel of the router.

20 | P a g e
Channel. Select the channel for the wireless network.
Data rate. Set the maximum wireless network data rate.
Transmit power. Set the maximum transmitter radiation power.
ACK timeout. Set ACK timeout in order to adjust the timeout value for long distance
operation.
Fragmentation. Specify the fragmentation threshold (in bytes), which determines whether data
frames will be fragmented and at what size [256-2346/off/auto]. On the 802.11 wireless LAN, frames
exceeding the fragmentation threshold will be fragmented, i.e., split into smaller units suitable for the
circuit size. Data frames smaller than the specified fragmentation threshold value are not fragmented.
Default: off.
Note: Setting a lower fragmentation threshold value can help improve connection reliability in
noisy environments (where radio interference is present). This mechanism does add overhead and
therefore reduces effective throughput.
RTS. Specify the maximum packet size beyond which the wireless LAN card invokes it’s
RTS/CTS mechanism [0-2347/off/auto]. Packets that exceed the specified RTS threshold trigger the
RTS/CTS mechanism. The card transmits packets smaller than this threshold without using RTS/CTS.
Default: off.
Note: Setting a lower RTS threshold value can improve connection reliability and throughput
in crowded wireless LAN environments (where many clients are trying to communicate
simultaneously). It adds a certain amount of overhead, but can compensate for this by reducing
bandwidth lost due to collisions.
Throughput enhancements (available only on G mode).
Fast Frames –packet aggregation and timing modifications.
Packet Bursting –more data frames per given time period.
Compression –standards based (Lempel Ziv) real-time hardware compression.
Quality of service (WMM). Check the box to enable applications such as audio, video and
voice to have higher priority than less-sensitive data applications.
User isolation. Check the box to isolate the wireless clients from communicating with each
other.
Inter AP client isolation. Check the box to enable internal wireless network users isolation.
4.6.3.4 Wireless security
Figure 14. Wireless network authentication settings.
Broadcast SSID. Check the box to enable SSID broadcast.
Authentication Method. Choose the authentication method for wireless network:
Open system –no encryption. It will let anyone within range and with the proper equipment
to connect onto your network within the router operating range.
WEP-64-bit –choose the 64 bit WEP security with one of four pre-shared keys.
WEP-128-bit–choose the 128 bit WEP security with one of four pre-shared keys.
WPA-PSK-TKIP –choose the WPA security with pre-shared key, encrypted by the TKIP
(Temporal Key Integrity Protocol) algorithm.
WPA-PSK-AES –choose the WPA security with pre-shared key, encrypted by the AES
algorithm.