Home

USER MANUAL

1. ATT J wut Y IJ i AAA NANA r lavatatata Watatatlalalalalala p a e a atat er A MA A n 00 0 00000000000 000 000000 000000 01 0111 C 0000001 0 1 0000001 000000 00001 000000 10 1 Af Ta Ve ia NOON i U IWC y E DIN AL Yi UUU UUUUUUO I 111 00000001 0000001 10000001 0000C 1 0100001 0101 10101010000000001 O 000 000 00001 1010 vv uUuUU10 UUUUUU PO 0000000 00000001 000001 000 00000001 O 1 0000001 000 A Legal notice Copyright O 2012 TELTONIKA Ltd All rights reserved Reproduction transfer distribution or storage of part or all of the contents in this document in any form without the prior written permission of TELTONIKA Ltd is prohibited The manufacturer reserves the right to modify the product and manual for the purpose of technical improvement without prior notice Other product and company names mentioned herein may be trademarks or trade names of their respective owners Attention Before using the device we strongly recommend reading this user manual first Do not rip open the device Do not touch the device if the device block is broken All wireless devices for data transferring may be susceptible to interference which could affect performance The device is not water resistant Keep it dry Device is powered by low voltage 9V DC power adaptor UUU 00000001 UY 1 111 00000001 0000001 10000001 0000C aa m 1 01000000101 10101010000000001 O 000 0 O 00001 1010 10
2. 3 JUU UU UUUY Y V AA I 01010 000 VOL 0101010 1 g 010 l r Ry Ny J 90000111 00000001 0000001 10000 MAX antenna connectors Wi Fi antenna connector Reset button WiMAX LED Wi Fi antenna connector Reset button WiMAX LED USB Port After you re complete with the setting up as described in the section above you are ready to start logging into your router and start configuring it This example shows how to connect on Windows 7 On windows Vista click Start gt Control Panel gt Network and Sharing Centre gt Manage network Connections gt Go to step 4 On Windows XP Click Start gt Settings gt Network Connections gt see step 4 gt You wont s see Internet protocol version 4 TCP IPv4 instead you ll have to select TCP IP Settings and click options gt Go to step 6 10 91910101019 00000001 0000001 10000001 0000 101 01000000101 10101010000000001 0 000 O O 00001 1011 nunu VUV OUTTA 0000000 00000001 000001 000 00000001 O 1 0000001 00 We first must set up our network card so that it could properly communicate with the router 1 Press the start button Sg shipping Tool sticky Motes Z Paint qi XPS Viewer fee Windows Fax and scan a Remote Desktop Connection Calculator Mus Cor Con Control Panel 195 Find and fix networking and connection problems bd set up a connection or network us set up a virtual private network YPN co
3. 3 minute window 3 second interval 1 Minute Load 1 59 Average 1 59 Peak 1 66 5 Minute Load 0 95 Average 0 98 Peak 0 98 15 Minute Load 1 59 Average 0 93 Peak 0 93 22 UU UUUUUUU 1 i 11 00000001 0000001 10000001 00000 PP 1 01000000101 10101010000000001 O 000 0 0 00001 1010 ur YUUU10 DOUUT TON 0000000 00000001 000001 000 00000001 O 1 0000001 001 This tri graph illustrates average system load over the course of 3 minutes each new measurement is taken every 3 seconds The graph consists out of three colour coded graphs each one corresponding to the average system load over 1 red 5 orange and 15 yellow most recent minutes Although not graphed the page also displays peak loads over 1 5 and 15 minutes Traffic Bridge Realtime Traffic Bridge LAMHAN LAN WARM Cywired Wy WA WIFI 203 09 KBit 25 39 EBytels 135 39 EBitls 16 92 KBytels 07 7 EBit 8 46 EBytels 3 minute window 3 second interwal Inbound 45 42 KBit s Average 77 59 KHitls Peak 164 54 KHit s 5 68 KBytes 9 7 KBytes 23 07 KBytes Outbound 20 29 Kits Average 19 27 Kbilis Peak 246 16 KHits 2 54 KBytes 2 41 KBytejs 20 77 KBytes Cumulative graph which encompasses wired Ethernet LAN and the wireless network LAN WAN Realtime Traffic Bridge LANGPWMAN LAN WARM aired Wy WA WIFI 307 93 KBit s 38 49 EByte s 205 29 KBit 25 66 EBytels 102 64 EBitl 12 83 Ebyte s 3 minute window 3 second inter
4. 7 69 MB available Configuration files will be kept Compare firmware file checksum to ensure data integrity If checksum is correct click Proceed button below Wait until upgrade process completes Important notes e Leaving Keep settings check box unselected before upgrade process will change IP address of router to default value 192 168 1 1 and you may need to configure router again please read chapter Logging in at page 9 Warning Do not ever remove router power supply and do not press reset button during upgrade process This will totally damage your router and it won t be accessible If you have any problems related to firmware upgrade you should always consult with local dealer Reboot Reboot router by pressing button Reboot Logout Log out from router management WEB interface Glossary WAN Wide Area Network is a telecommunication network that covers a broad area i e any network that links across metropolitan regional or national boundaries Here we use the term WAN to mean the external network that the router uses to reach the internet 56 UUU UUUUUUU1 U 1 aa 111 00000001 0000001 10000001 0000C nn a m 101 01000000101 10101010000000001 O 000 0 O 00001 1010 7 wa UUUU 10 JUUUUU TURE 0000000 00000001 000001 000 00000001 O 1 0000001 000 LAN A local area network LAN is a computer network that interconnects computers in a limited area such as a home school computer
5. aa 111 00000001 0000001 10000001 0000C nn 1 01000000101 10101010000000001 O 000 O 0 00001 1010 yy UUUU 10 JUUUUUO TUR 09000000 00000001 000001 000 00000001 O 1 0000001 000 Function explanations The following sections contain a detailed explanation of every page tab and sub tab of the configuration interface in the order that they appear on the router Status The status section contains various information like current IP addresses of various network interfaces the state of the routers memory firmware version DHCP leases associated wireless stations graphs indicating load traffic etc and much more System Information The System Information tab contains data that pertains to the routers operating system GS TEL TONIKA Status WNetwork Services System Logout system information System Router Mame Teltonika Router Model Teltonika RUTSOO Firmware version RITS T_O0 00 436 Kernel version 3 2 15 Local Time Fri Jun 29 11 49 22 2072 Uptime Oh 40rn 34s Load Average 0 23 0 23 0 40 Memory Total Available 144416 kB 20064 kB 48 Free 1476 kB 209964 kB 4 Cached OS65 kB 20064 kB 32 Buffered 3072 kB 29964 kB 10 Teltonika solutions wwwteltonika It Field Name Sample value Explanation Teltonika Name of the router hostname of the routers system Router Model Teltonika RUT5xx Routers model Firmware Version RUT5XX_T_00 00 436 Shows the version of the firmware that is currently loade
6. 168 0 0 192 168 255 255 Diagnostics Contains Network Utilities used for testing network Network Utilities Fing Traceroute Nslookup Ping the utility used to test the reachability of a host on an Internet IP network and to measure the round trip time for messages sent from the originating host to a destination server Enter server IP address or hostname and click Ping Server echo response will be shown after few seconds if server is accessible Traceroute diagnostic tool for displaying the route path and measuring transit delays of packets across an Internet IP network Enter server IP address or hostname and click Traceroute Log containing route information will be shown after few seconds Nslookup network administration command line tool for querying the Domain Name System DNS to obtain domain name or IP address mapping or for any other specific DNS record Enter server hostname and click Nslookup Log containing specified server DNS lookup information will be shown after few seconds Full manual with all available Nslookup commands and parameters can be found in Linux manual page nslookup 1 Important notes e Note that DNS server must be configured correctly if you use server hostname instead of server IP address in address field Services PING Reboot PING Reboot function will periodically send PING command to server and waits for echo receive If no echo is received router will try a
7. Auto wireless channel selection e OpenVPN e PSec e Backup WAN e Ping reboot WiMAX RUT523 RUT525 RUT535 RUT538 RUT523U RUT525U RUT535U RUT538U e Standard Compliant IEEE 802 16e 2005 e Air Interface S OFDMA e Frequency Band 2 3 2 4GHz RUT523 2 5 2 7GHz RUT525 e 3 3 3 6GHz RUT535 or 3 3 3 8GHz RUT538 e Channel Bandwidth 3 MHz 3 5 MHz 5 MHz 6 MHz 7 MHz 8 75 MHz and 10 MHz e Modulation Adaptive QPSK 16QAM 64QAM e MIMO MRC Matrix A MRC Matrix B e Beamforming All I O Beamforming Items e RF Output Power 2x25 dBm 2 3 2 7GHz 2x23dBm 3 3 3 8GHz RX Sensitivity e OPSK1 2 99 5 2 5 GHz 10 MHz BW e 16QAM1 2 94 29 2 5 GHz 10 MHz BW e OPSK1 2 99 3 5 GHz 10 MHz BW e 16QAM1 2 93 8 3 5 GHz 10 MHz BW e Antenna Gain 5 dBi 2 5 GHz 3 5 GHz RUT5xxU 2 dBi e Antenna Type External dipole RUT5xxU internal e Handover Hard Optimized Handover e QoS Mechanism UGS Real Time VR Non Real Time VR Best Effort ERT VR 7 UU UUUUUUDU 1 i 11 00000001 0000001 10000001 0000C _ Y P Q401 01000000101 10101010000000001 O 000 0 0 00001 1010 uuu 10 OUUUUU TO 0000000 00000001 000001 000 00000001 O 1 0000001 00 e Authentication EAP TLS EAP TTLS MSCHAPv2 e Encryption 3 CCM Mode 128 bit AES e Error Handling HARQ UL and DL up to Category 7 Electrical Mechanical amp Environmental e Dimensions H x W x D 100mm x 85mm x 36mm e Weight 210 260g e Power Supply 100 240 V
8. CULITO POE 000000 00000001 000001 000 00000001 O 1 0000001 000 Table of Contents Lee NO E aan NT RF CPR FN CEN NERO FA HI FFYN HYNY aaa 2 PS CLOW ics fesse NN NWR FEN FRY NF FFWR TR FYN FFF NAWN FFF YF FFYN AN FFEFRYN NF EN FYN FN FAEN AF FYN AR 2 SAFETY INFORMA TION aiii 5 MOOC O eea oO 7 PE O artos 7 LAN NONE aa 7 WiMAX RUT523 RUT525 RUT535 RUT538 RUT523U RUT525U RUT535U RUT538U een 7 Electrical Mechanical ETIWIFODIRED LU O FR Ga Cd DN DU CU DA GEN GR 8 SOE VOU OU sin ole donc UF OE ANAN EA A AA UO 9 e A P P EFO YFYU AFF FAE RE FC FYND FUH IN EN ROF TREN EFE 9 o 0 q 9 o A one AR 10 E4 1 1LF un e o O EP o o era eee 10 AU A A GY RF NE FC RY FF FYNN 15 PCT NOPE 9 Fe 0 ONO FEDR riot ET EN FFA FFF NHY 17 A FAE RAY FAT YF A FN YF FA NF E Eo A 17 OS IO FNM sais Y a o NR NN 17 YN Le ur oo YN PP FFY FERN FA FRY RE FY O FE HRN FR FN A 18 PRO Y a PF UPON AFAN ENRFNNO Y MI 22 ae E qo noise psico 22 A 27 MM A PER ono E O A RR NF FYR FY HF FRY A PRI FE FT FF FRAU NER 27 LAN REY FYR PR FFR HR EU YNE veces EDR Y YF Ie NY FFF EF YHA HY FYNWY FYN NF ENI N FRYD 33 PA 35 Bac UN Po e E UU O 38 A ec HYF RNA FFA IF FFF FFY YNA NINNAU 40 o o A Y EA ENYN NN HAN AYN EDN NN 42 DIA EMOS rro Gano see FO EA HEFY FFYN HNN UN FD HYR FE ES UN 43 SCHOOL DDOD 43 PING RODO AMP A A A NU DA FOA 43 IEP NN FR O FN FR UFFFONNY FAFFNY E EF UN YN 44 DYO C ON o sti Y FFR 45 UU UUUUUUVU 11 00000001 00
9. Failover Altempts Before 1 WAN Recovery DNS Server s Auto el Backup ICMP host A remote host that willbe used to test wether your backup link is alive ICMP host 8 6 4 4 The majority of the options consist of timing and other important parameters that help determine the health of your primary connection Regular health checks are constantly performed in the form of ICMP packets PINGs on the your primary connection When the connections state starts to change READY gt NOT READY and vice versa a necessary 38 001 000 00000001 O 1 111 00000001 0000001 10000001 0000C A AA 9940 101 01000000101 10101010000000001 0 000 O 0 00001 1010 1 IO TITS AR 1000000 00000001 000001 000 00000001 O 1 0000001 000 tb amount of failed or passed health checks has to be reached before the state changes completely This delay is instituted so as to mitigate spikes in connection availability but it also extends the time before the backup link can be brought up or down ___ Field Name Sample value A 1 Health Monitor Interval Dsb 5 10 20 30 60 120 Seconds The interval at which health checks are performed 2 Health Monitor ICMP HOST Dsb DNS WAN GW Custom Where to PING for a health check As there is no definitive way to determine when the connection to internet is down for good you ll have to define a host whose availability that of the internet as a whole Health Monitor ICMP Timeout 3 4 5 10 Seconds How long to
10. IPV4 protocol TCP UDP ICMP the source address an IPv4 address the source port the destination address an IPv4 address the destination port and how much traffic has gone through that particular connection it s size in Bytes and the amount of packets Network Wan WAN configuration is arguably the crux of the routers configuration as it determines how the router will connect to the internet Here is quick rundown of how the page looks and what each field means Operation Mode Operation Mode Interface oa vired Ged VV INIA Ged Vit First and foremost a mode of connection has to be defined Available selections type Description o An Ethernet cable connected to the WAN port of the router The router will be able to connect to a local wireless access point and reach the internet through it WiMAX The router will connect to your local WiMAX network for internet access 27 01 OOU UUUUUOU 1 Y 1 gt 111 00000001 0000001 10000001 00000 i O 101 01000000101 10101010000000001 O 000 O O 00001 1010 1 YUU 10 OUUUUU TO 000000 00000001 000001 000 00000001 O 1 0000001 000 A m Common configuration Common configuration allows you to configure your TCP IP settings for the wan network Common Configuration seneral Setup Protocol DHCP client BA Really switch Switch protocol protocol You can switch between the Static DHCP or PPPoE protocol by selecting the protocol that y
11. configuration wizard press Finish Administration Administration properties Administration password Field name Explanation Enter your new administration password Re enter your new administration password Important notes e The only way to gain access to the web management if you forget the administrator password is to reset the device factory default settings Default administrator login settings are User Name admin Password admin01 Logging System logs are divided into following groups e Info e Notice e Warning e Error e Critical e Alert e Emergency You can watch logs by choosing the group from dropdown list and clicking button show SSH Access control A Field Name Explanation SSH Access SSH can be enabled or disabled by choosing Enable or Disable from dropdown list Specify port for SSH access Default port is 22 3 Remote SSH access If check box is selected users can access the router via SSH from the outside WAN When check box is not selected users can access the router only from LAN Note The router has 2 users admin for webUl and root for SSH When loging in via SSH use root Web Access control Fieldname Explanation HTTP Web server port specify a port number for routers web management via HTTP protocol Default port is 80 2 Remote HTTP access if check box is selected users can access the router via the HTTP WEB Interface from th
12. laboratory or office building DHCP The Dynamic Host Configuration Protocol DHCP is a network configuration protocol for hosts on Internet Protocol IP networks Computers that are connected to IP networks must be configured before they can communicate with other hosts The most essential information needed is an IP address and a default route and routing prefix DHCP eliminates the manual task by a network administrator It also provides a central database of devices that are connected to the network and eliminates duplicate resource assignments ETHERNET CABLE Refers to the CAT5 UTP cable with an RJ 45 connector In other words the most common internet cable ever AP Access point An access point is any device that provides wireless connectivity for wireless clients In this case when you enable Wi Fi on your router your router becomes an access point DNS Domain Name Resolver A server that translates names such as www google lt to their respective IPs In order for your computer or router to communicate with some external server it needs to know it s IP its name www something com just won t do There are special servers set in place that perform this specific task of resolving names into IPs called Domain Name servers If you have no DNS specified you can still browse the web provided that you know the IP of the website you are trying to reach 57
13. safety class or Notebook second safety class Associated equipment PSU power supply unit LPS and personal computer PC shall comply with the requirements of standard EN 60950 1 Do not mount or service the device during a thunderstorm To avoid mechanical damages to the device it is recommended to transport it packed in a damage proof pack Protection in primary circuits of associated PC and PSU LPS against short circuits and earth faults of associated PC shall be provided as part of the building installation gt gt gt ee To avoid mechanical damages to the device it is recommended to transport it packed in a damage proof pack While using the device it should be placed so that its indicating LEDs would be visible as they inform in which working mode the device is and if it has any working problems Protection against overcurrent short circuiting and earth faults should be provided as a part of the building installation Signal level of the device depends on the environment in which it is working In case the device starts working insufficiently please refer to qualified personnel in order to repair this product We recommend forwarding it to a repair centre or the manufacturer There are no exchangeable parts inside the device 00000001 0000001 10000001 0000 101 01000000101 10101010000000001 0 000 0 0 00001 101 UU TODO 0000000 00000001 000001 000 00000001 O 1 0000001 00 Device connection Aut
14. try resolve server hostname periodically in case of first resolve failure before generating service exception Keep alive Defines two time intervals one is used to periodically send ICMP request to OpenVPN server and another one defines a time window which is used to restart OpenVPN service if no ICPM request is received during the window time slice 7 10 Local tunnel IP address of virtual local network interface applicable only for point to point connections endpoint Remote tunnel IP address of virtual remote network interface endpoint Remote IP address subnet of remote virtual network network IP address Remote Subnet mask of remote virtual network network IP netmask a a n m He After setting any of these parameters press Save button Some of selected parameters will be shown in the configuration list table You should also be aware of the fact that router will launch separate OpenVPN service for every configuration entry if it is defined as active of course so the router has ability to act as server and client at the same time Server The difference between client and server configurations in TUN mode is that a server must have a public IP address which is needed for the client s configuration Other than that setting up a server is pretty much the same as setting up a client Role server w Mew configuration name Demo Add Mew Set the role as Server enter a name for your config
15. wait for an ICMP request to come back Set a higher value if your connection has high latency or high jitter latency spikes connection to be declared DOWN for good connection to be declared UP DNS Servers Auto Custom Define custom DNS servers Has meaning when you select DNS as your Health Monitor ICMP HOST 7 Backup ICMP host IPv4 address This is where the address of an ICMP host that will be used to check the health of your WiMAX backup link goes This has to be a ping able host How do I set up a backup link First we must pick a main link Wired or Wi Fi and ensure that the link is working Configure your WAN settings to use that link and see whether you have internet access If the main link is working we can continue configuring our Backup Link Now go to Backup WAN page and configure the settings to your liking Click Save and wait until the settings are applied Now in the Status gt Network Information page there should be a status indication for the backup WAN If everything is working correctly you should see this Backup WAN Status WAN Wired IM USE Backup WRN MIMARA READY The above picture shows the status for Backup WAN configured on a wired main link You can now simulate a downed link by simply unplugging your Ethernet WAN cable When you ve done so you should see this And if you plug the cable back in you should again see this Backup WAN Status 39 IU1 OUOU OUUUUOO1 U 1 _ 11
16. 0000 TO 19000000 00000001 000001 000 00000001 O 1 0000001 000 MAC Filter Interface Configuration General Setup Wireless Security MAC F ilter MAC Address Filter Allow listed only MAC List 3 Filter you can define a rule for what to do with the MAC list you ve defined You can either allow only the listed MACs or allow ALL but forbid only the listed ones Client Client mode is nearly identical to AP except for the fact that most for the options are dictated by the wireless access point that the router is connecting to Changing them can result in an interrupted connection to an AP In addition to standard options you can also click the Scan button to rescan the surrounding area and attempt to connect to a new wireless access point Backup WAN Backup WAN is function that allows you to back up your wired OR wireless connection in case they go down At the current moment you can only backup wired Wifi with WiMAX Backup Link Here you can setup your backup link ITveur conventional WAR connection such as wired Ethernet or Wifi fails the backup link will enable and take over to Keep the router connected Enable Timing amp other parameters Timing amp other parameters will indicate how and when it will be determined that your conventional connection has gone down Health Monitor 5 SEC Interval Health MonitorlcMP ONS Server s ss Hustis Health Monitor ICMP 1 sec is Timeout Attempts Before 1 e WAN
17. 00001 10000001 0000C 1 01000000101 10101010000000001 O 000 0 0 00001 1010 UU YO OUUUUOO TW 0000000 00000001 000001 000 00000001 O 1 0000001 001 o AAA it ce Ie FN EU YN YY YN en o A 53 Sea delo A res go RH Y EF RF e o E OOOO A 53 AOMA DION PE O CERO o NT FN FF TH REN AN RYAN AFR 55 Vol gall Uu ON 9 68 6 el sarna 55 Back ano FMI POr cacas 56 A o ne E ooo FFON HN FN NN 56 A A tesserae 56 or La cases ipa YNE RP ce A wn segs NN YNYR eee eee 56 001 U0U UUUUUOUU1 U 1 A 111 00000001 0000001 10000001 00000 e AAA 01000000101 10101010000000001 0 000 0 0 00001 1010 1 10 000000 TO 19000000 00000001 000001 000 00000001 O 1 0000001 000 one x SAFETY INFORMATION In this document you will be introduced on how to use a RUT5XX RUT5XXU router safely We suggest you to adhere to the following recommendations in order to avoid personal injuries and or property damage You have to be familiar with the safety requirements before using the device To avoid burning and voltage caused traumas of the personnel working with the device please follow these safety requirements The device is intended for supply from a Limited Power Source LPS that power consumption should not exceed 15VA and current rating of overcurrent protective device should not exceed 2A The highest transient overvoltage in the output secondary circuit of used PSU shall not exceed 71V peak The device can be used with the Personal Computer first
18. 001 0000C p i 1 01000000101 10101010000000001 O 000 O 0 00001 1010 svviUUUU10 OUUUUU T6 0000000 00000001 000001 000 00000001 O 1 0000001 000 PPPoE Common configuration seneral Setup Advanced Settings Disable NAT El lf checked router will not perform MAT Masquerade on this interface Llse default gateway If unchecked no default route is confiqured Use gateway metric Use DNS servers If unchecked the advertised UNS server addresses are ignored advertised by peer LCP echo failure threshold Presume peer to be dead after glven amount of LCF echo failures use U to ignore failures LEP echo interval send LOP echo requests at the given Interval in seconds only effective in conjunction with failure threshold Inactivity timeout Close inactive connection after the given amount of seconds use U to persist connection IP Aliases IP aliases are a way of defining or reaching a subnet that works in the same space as the regular network IP Aliases SUBNETSS General Setup Advanced Settings IPvd Address 1924160 55 161 IPv4 Netmask 255 255 255 0 A IPyd Gateway 1942 160 55 153 Delete Add As you can see the configuration is very similar to the static protocol only in the example a 55 th subnet is defined Now if some device has an IP in the 55 subnet 192 168 55 xxx and the subnets gateway metric is higher and the device is trying to reach the internet it will reroute it s traffic not to the gateway that is
19. 1 00000001 0000001 10000001 0000C mie 101 01000000101 10101010000000001 0 000 0 0 00001 1010 1 10 000000 TO 19000000 00000001 000001 000 00000001 O 1 0000001 000 Backup WAN Status WAH Wired I USE Backup WR If you witness the above sequence your backup link is working Firewall In this section we will look over the various firewall features that come with RUT5xx General Settings The routers firewall is a standard linux iptables package which uses routing chains and policies to facilitate control over inbound and outbound traffic General Settings Enable S M flood protection Drop invalid packets E Input accept Output accept E Forward reject A Sample value Explanation 1 Enable SYN flood Checked Unchecked When checked the router becomes more resistant against SYN protection flood attacks Drop Invalid packets Checked Unchecked A Drop action is performed on a packet that is determined to be invalid DEFAULT action that is to be performed for packets that pass through the Input chain a Output DEFAULT action that is to be performed for packets that pass through the Output chain 5 Forward Reject Drop Accept DEFAULT action that is to be performed for packets that pass through the Forward chain DEFAULT When a packet goes through a firewall chain it is matched against all the rules for that specific chain If no rule matches said packet an according Action either Drop or Reject or Ac
20. 6 to be reached from the outside by entering http routersExternallp 12345 Fieldname Sample value Explanation IocalWebsite Name of the rule Used purely to make it easier to manage rules TCP UDP TCP UDP Other Type of protocol of incoming packet 3 External Port 1 65535 From what port on the WAN network will the traffic be forwarded Internal IP address IPv4 address of some The IP address of the internal machine that hosts some service computer on your LAN that we want to access from the outside Internal port 1 65535 To what port on the internal machine would the rule redirect the traffic Additional note Notice how the external port is 12345 and not 80 It is perfectly fine to define the external port as 80 but then the routers configuration interface would not reachable unless you change the web access port from remote management When you click edit you can fine tune a rule to near perfection if you should desire that Traffic Rules The traffic rule page contains a more generalised rule definition With it you can block or open ports alter how traffic is forwarded between LAN and WAN and many more things 41 U01 000 00000001 U 1 UU 111 00000001 0000001 10000001 00000 SO 101 01000000101 10101010000000001 0 000 0 0 00001 1010 1 TO Oe 0000000 00000001 000001 000 00000001 O 1 0000001 000 mm Field Name Sample Value Explanation ame Used to make rule management easier amily Only IPv4 is current
21. AC gt 9 VDC wall adapter e Input voltage range 7 30 VDC e Power Consumption lt 7W e Antenna connectors 2 x RP SMA for WiMAX 1 x RP SMA for WiFi e Indicators 4 x Ethernet LEDs 1 x Power LED 1 x WiMAX LED e Operating Temperature OC to 50C e Storage temperature 20C to 0C e Operating Humidity 10 to 90 Non condensing e Storage humidity 5 to 95 Non condensing New hardware revision has 7 30VDC written on the device sticker while older revision has 9V 1A JUDO UUUUUUU1 U 1 i 111 00000001 0000001 10000001 0000C AR 1 010000 0101 10101010000000001 0 000 0 0 00001 1010 AU JUUUUT ea 0000000 00000001 000001 000 00000001 O 1 0000001 mele ee Setting up your router Installation After you unpack the box follow the steps documented below in order to properly connect the device For better Wi Fi performance put the device in clearly visible spot as obstacles such as walls and door hinder the signal 1 First assemble your router by attaching the necessary antennas If you have bought the RUT5XXU and a WiMAX dongle plug the dongle into the USB Port which is located on the back panel 2 TO power up your router please use the power adapter included in the box IMPORTANT Using a different power adapter can damage and void the warranty for this product 3 If you have a wired broadband connection you will also have to connect it to the WAN port of the router Front Panel LAN LEDs
22. AN When enabled this field will indicate the health of your primary connection IN USE Indicates that the connection is being used for main traffic READY Indicates that the connection is ready to take over network traffic if the other link should fail NOT READY Indicates that the connection is down Backup WAN Status HE Er o In IOC WAH Mired M l E Backup WAN Status More on this see the main backup WAN section of this manual 21 1 00000001 0000001 10000001 0000C Eaa 01000000101 10101010000000001 O 000 0 0 00001 1010 wu UUUU 10 OUUUUU es 01400000000 00000001 000001 000 00000001 O 1 0000001 00 Routes Routes The following rules are currently active on this system ARP IPvi Address MAC Address Interface 192 168 0350 POF Tbe 0c 78 5 br lan 182 1ER 99 254 O0 00 00 00 00 00 eth Active lPv4 Routes Network Target IPvd Gateway Metric wan 0 0 0 0 0 192 160 99 254 O lan 192 160 0 0 244 0 0 0 0 O wan 192 160 99 Of24 0 0 0 0 O Teltonika solutions www teltonika lt ARP Shows the routers active ARP table An ARP table contains recently cached MAC addresses of every immediate device that was communicating with the router Active IPv4 Routes Shows the routers routing table The routing table indicates where a TCP IP packet with a specific IP address should be directed to Realtime Graphs Real time graphs show how various statistical data changes over time Load Realtime Load
23. Ax Firmware version RUTSAX T 00 00 246 Kernel Version 3 2 15 Local Time Wed Aug o 13 10 47 2012 Uptime 1h 36m 51s Load Average 0 16 0 11 0 15 Memory Total Available 10476 kB 30012 kB 34 Free M 1672 KBs 30012 kB 5 Cached 5456 kB 130012 kB 21 Buffered UU 3348 KB 30012 kB 796 From here on out you can configure almost any aspect of your router Operation Modes The RUT5XX RUT5XXU router supports various operation modes It can be connected to the internet WAN via WiMAX standard Ethernet cable or via a wireless network If you connect to the internet via an Ethernet cable of Wi Fi you may also backup your connection with WiMAX for added stability On every case except when you connect to the internet via Wi Fi you can distribute your internet via an Ethernet cable 3 ports and or a wireless network When you connect via Wi Fi you cannot have Wi Fi in your LAN LAN WiMAX Backup link r IAN WAN Ethernet a MAU O In later sections it will be explained bit by bit how to configure your router to work in a desired mode 15 001 UUU UUUUUUU1 U 1 111 00000001 0000001 10000001 00000 M 1 01000000101 10101010000000001 0 000 0 0 00001 1010 Y UU TO DOLIDO TO 10000000 00000001 000001 000 00000001 O 1 0000001 000 ee Powering Options The RUT5xx router can be powered from power socket 1 or over Ethernet port applies only to the new hardware revision Depending on your network architecture
24. CP or Static AP runs a DHCP server DHCP Does not run Static When you ve configured your protocol settings press Save and wait until the settings are applied Next goto the Network gt Wireless page and wait until it loads For the first time an automatic Site Survey will be initiated You should now see a list of available local Access Points Choose one and click Join Network Should you be asked enter the secret Encryption Key and click Submit 32 OOU OUUUUUO1 YU 1 i 111 00000001 0000001 10000001 0000C M met 101 01000000101 10101010000000001 O 000 O O 00001 1010 us JuU010 CULITO TOS 0000000 00000001 000001 000 00000001 O 1 0000001 000 Now you should be transported to the Wireless Station page Click Save and wait until all the settings are applied The configuration is complete and you should now be able to access the internet LAN This page is used to configure the LAN network where all your devices and computers that you connect to the router will reside LAN On this page you can configure your LAN settings Common Configuration General Setup Adwanced settings Protocol static address ae IPv4 address 192 166 0 167 Pw netmask 299 nn 455 0 BA IPvd gateway IPw4 broadcast Use custom ONS E servers IP Aliases This section contains no values yet Add The common configuration and IP aliasing sections are identical to the ones found in WAN so for an explanation
25. DR value 52 UUU 00000001 UY 1 111 00000001 0000001 10000001 00000 i 1 01000000101 10101010000000001 0 000 0 0 00001 1010 110 00000 OO 0000000 00000001 000001 000 00000001 O 1 0000001 000 es Local tunnel IP The IP address of this device on the tunnel network E g 10 0 0 1 Local tunnel CIDR The subnet mask of the tunnel network Remote IP address Specify remote WAN IP address 6 MTU Specify the maximum transmission unit MTU of a communications protocol of a layer in bytes Systems Configuration Wizard The configuration wizard provides a simple way of quickly configuring the device in order to bring it up to basic functionality The wizard is comprised out of 4 steps and they are as follows Step 1 Password change Step Password First let s change your router password from the default one Password Confirmation Skip First the wizard prompts you to change the default password Simply enter the same password into both Password and Confirmation fields and press Next Note At this point you can also Skip the wizard Step 2 LAN 53 0O0UU 00000001 OU 1 I 11 00000001 0000001 10000001 0000C Ss r 1 01000000101 10101010000000001 O 000 0 0 00001 1010 vel vuUUU10 JOUUUUU TUS 00000000 00000001 000001 000 00000001 O 1 0000001 000 step LAN Here we will configure the basic settings of a typical LAN configuration The wizard will cower 2 basic configurations static IP a
26. Gateway 10 12 104 97 Indicates the default gateway an address where traffic destined for the internet is routed to DNS 8 8 8 8 Domain name server s Expires 1h 57m 25s The amount of time before the routers DHCP lease expires Oh 2m 2s How long the connection has been successfully maintained These fields show up on other connection modes Exclusive to other Modes with DHCP LAN LAN IFw4 address 192 166 1 161 Metmask 255 255 255 0 Connected Oh bm 145 Field Name Sample Value IPv4 address 192 168 1 161 Address that the router uses on the LAN network 255 255 255 0 Indicates the networks netmask Oh 6m 14s How long LAN has been successfully maintained Wireless Wireless can work in two modes AP or Client AP is when the wireless radio is used to create an Access Point that other devices can connect to Client is when the radio is used to connect to an Access Point via WAN Client Wireless ull Soll teltonika rnd division ap Mode Client Channel B 2 44 GHz BsslD Co 35 02 FE BD Encryption WPA2 PSK CCMP Hit rate 65 0 MBits Country LT MA Field Name Sample Value Explanation SSID teltonika_rnd_division_ap The SSID that the AP to which the routers is connected to uses 19 UU1 UOO 00000001 O 1 1111 00000001 0000001 10000001 00000 ee on 101 01000000101 10101010000000001 0 000 0 0 00001 1010 1 suuUU10 000008 000000 00000001 000001 000 00000001 O 1 0000001 000 some local AP 3 Ch
27. active WAN connection 24 001 0000001 1000001 1010000000001 0 000 000 00001 101 UU 001 000001 000 00000001 O 1 0000001 Wi Fi Realtime Traffic Bridge LANFWMAN LAN WAR ire cd Wy MAGS WIFI 106 08 EBit s 13 26 Ebytefs 70 72 EEitJs 8 84 KBytels 35 36 EBitis 4 42 KBytes 3 minute window 3 second interval Inbound O KBits Average 0 Kits Peak 0 KBitis EU KBytes 0 KBytes 0 KBytes Outbound 18 92 KHits Average 26 77 KBits Peak 128 59 KHitls 2 37 KBytejs 3 35 KBytes 16 07 KBytes Shows the amount of traffic that has been sent and received through the wireless radio Wireless Realtime Wireless welan 3 minute window 3 second interval Signal 49 dBm SNR 206 dBm Average 45 dBm SNR 206 dEm Peak 45 dBm SNR 210 dBm Noise 255 dBm Average 255 dBm Peak 255 dBm This graph illustrates how signal strength and the amount of noise change over time 25 YY YUUUUUUUT U IT 11 00000001 0000001 10000001 000000 gt ao 101 01000000101 10101010000000001 O 000 0 O 00001 1010 10 ryt U Ju010 000000 So 00000000 00000001 000001 000 00000001 O 1 0000001 0000 de MBit s 32 WIBitls 16 MBit s 3 minute window 3 second interval Phy Rate 59 MBit s Average 59 MBit s Peak 59 MBit s This graph illustrates how the physical rate of wireless changes over time Connections Active Connections a minute window 3 second interval UDP 4 Average 3 Peak 5 TCP 4 A
28. address ee will be 192 168 2 254 100 150 1 254 Advanced settings How long can a leased IP be considered valid An IP address after the specified amount of time will expire and the device that leased it out will have to request for a new one You can also define some advanced options that specify how the DHCP server will operate on your LAN network DHCP Server General Setup Advanced Settings Dynamic DHCP Force C B Force DHCP on this network even if another server is detected IPv4 netmask DHCP Options E E Define additional DHF options forexample e 192 168 2 1 192 168 2 2 which advertises different ONS servers to clients Field Name Sample Value Explanation 1 Dynamic DHCP Checked Unchecked Dynamically allocate client addresses if set to 0 only clients present in the ethers files are served same network segment think it s serving a larger or a smaller network than it actually is 34 UU 00U0UU0U1 U 1 mn 111 00000001 0000001 10000001 0000C a 01000000101 10101010000000001 O 000 O O 00001 1010 10 CUUUDO Pe 00000000 00000001 000001 000 00000001 O 1 0000001 000 DHCP Options 6 192 168 2 1 192 168 2 2 Additional options to be added for this DHCP server For example with 26 1470 26 1470 or option mtu 1470 you can assign an MTU per DHCP option mtu 1470 Your client must accept MTU by DHCP for this to work Wireless On this page you can configure your wireless settings D
29. ake configuration active _ all Selects virtual VPN interface type TUN is most often used in typical IP level VPN connections however TAP is required to some Ethernet bridging configurations defines TCP or UDP port number make sure that this port allowed by firewall 5 LZO This setting enables LZO compression With LZO compression your VPN connection will generate less network traffic however this means higher router CPU loads Use it carefully with high rate traffic or low CPU resources Authentication Sets authentication mode used to secure data sessions Two possibilities you have here Static means that OpenVPN client and server will use the same secret key which must be uploaded to the router using Static pre shared key option Tls authentication mode uses X 509 type certificates Depending on your selected OpenVPN mode client or server you have to upload these certificates to the router For client Certificate Authority CA Client certificate Client key For server Certificate Authority CA Server certificate Server key and Diffie Hellman DH certificate used to key exchange through unsafe data networks All mention certificates can be generated using OpenVPN or OpenSSL utilities on any type host machine Certificate generation and theory is out of scope of this user manual IP address of OpenVPN server applicable only for client configuration address Sets time in seconds to
30. anation Bring up on boot Specifies whether the interface will be configured and brought up when the router boots up Disabling will render your WAN connection non functional Disable NAT On Off Toggle NAT on and off 3 Override MAC address 00 0C 43 30 50 38 Override MAC address of the WAN interface If your ISP gives you a static IP address it might also bind it to your computers MAC address i e that IP will only work with your computer In this field you can enter your computers MAC address and fool the gateway in thinking that it is communicating with your computer Override MTU 1500 Maximum transmission unit specifies the largest possible size of a data packet 5 Use gateway metric The WAN configuration by default generates a routing table entry With this field you can alter the metric of that entry DHCP Common Configuration General Setup Advanced Settings Bring up on boot Disable NAT E gy If checked router will not perform NAT Masquerade on this interface Lise broadcastflag E B Required for certain ISPs e g Charter with DOCSIS 3 Use detault gateway B If unchecked no default route is configured Use DNS servers B If unchecked the advertised ONS server addresses are ignored adverised by peer Lise gateway metric client ID to send when requesting HER Vendor Class to send when requesting DHCP Override MAC address Override MTU 30 p UUU VUUUUUU 7 I UU 11 00000001 0000001 10000
31. annel 6 2 44 GHz The channel that the AP to which the routers is connected to uses Your wireless radio is forced to work in this channel in order to maintain the connection BSSID C8 3A 53 02 FC BO The MAC address of the access points radio 5 WPA2 PSK CCMP The AP to which the router is connected to dictates the type of encryption 65 0 MBit s The physical maximum possible throughput that the routers radio can handle Keep in mind that this value is cumulative The bitrate will be shared between the router and other possible devices that connect to the local AP 7 Country code AP Wireless ull signal quality 100 Soll Teltonika demo Mode Master Channel E 2 44 Hz BsslD 00 01 43 30 50 35 Encryption WPA2 PSK CCMP Bit rate 1 0 MBit s Country LT Signal Quality 100 The quality between routers radio and some other device that is connecting to the router Will show 0 if no devices are trying to connect or are currently ae maintaining a connection Teltonika_demo The SSID that is being broadcast Other devices will see this and will be able Y N 6 2 44 GHz The channel which is used to broadcast the SSID and to establish new connections to devices SN Encryption WPA2 PSK The type of encryption that the router will use to authenticate establish and CCMP maintain a connection Bitrate 1 0 MBit s The bitrate will be shared between all devices that connect to the routers wireless network Cou
32. ce Target IPv4 Netmask IPv4 Gateway Metric Host lP or Network if target is a network lan x 192 168 55 0 255 255 255 0 192 168 55 145 Delete Add Save fieldname___ Value Explanation The zone where the Target resides IPv4 address The source of the traffic 3 IPv4 Netmask IPv4 mask Mask that is applied to the Target to determine to what actual IP A MD 4 IPva Gateway IPv4 address To where the router should send all the traffic that applies to the rule _ 5 Metric integer Used as a sorting measure If a packet about to be routed fits two rules D ineonewittne ghar meticbappieds Additional note on Target amp Netmask You can define a rule that applies to a single IP like this Target some IP Netmask 255 255 255 255 Furthermore you can define a rule that applies to a segment of IPs like this Target some IP that STARTS the segment Netmask Netmask that defines how large the segment is E g 192 168 55 161 255 255 255 255 Only applies to 192 168 55 161 192 168 55 0 255 255 255 0 Applies to IPs in range 192 168 55 0 42 001 UOU 00000001 U 1 111 00000001 0000001 10000001 0000C AO 101 01000000101 10101010000000001 O 000 0 0 00001 1010 1 10 OOUUUUU no 0000000 00000001 000001 000 00000001 O 1 0000001 000 1 192 168 55 255 192 168 55 240 255 255 255 240 Applies 192 168 55 240 192 168 55 255 192 168 55 161 255 255 255 0 192 168 55 0 192 168 55 255 192 168 0 0 255 255 0 0 192
33. cept is performed Accept Packet gets to continue down the next chain Drop Packet is stopped and deleted Reject Packet is stopped deleted and differently from Drop an ICMP packet containing a message of rejection is sent to the source of the dropped packet 40 JUY UOU UUUUOOOU 1 U 1 111 00000001 0000001 10000001 00000 a ALO 101 01000000101 10101010000000001 0 000 0 0 00001 1010 1 10 CUUUDO Oe 0000000 00000001 000001 000 00000001 O 1 0000001 000 DMZ DMZ configuration Enabled E OMZ hostiP address By enabling DMZ for a specific internal host for e g your computer you will expose that host and its services to the routers WAN network i e internet Port Forwarding Here you can define your own port forwarding rules Firewall Port Forwarding Port forwarding allows remote computers on the Internet to connect to a specific computer or service within the private LAN Port Forwarding Name Protocol Source Via Destination Enable Sort localMWebsite TCP From any host in wan To any router IP at port Forward to IP 192766 99 756 port 80 in Edit Delete 12345 lan New port forward Mame Protocol External port Internal IP address Internal port localWebsite TCP UDP e 12345 192 168 99 156 80 Add You can use port forwarding to set up servers and services on local LAN machines The above picture shows how you can set up a rule that would allow a website that is being hosted on 192 168 99 15
34. col you can use it as is because most networks will not require any additional advanced configuration PPPoE This protocol is mainly used by DSL providers Common configuration General Setup Advanced Settings Protocal PPPoE oe PAPICHAP username test Th PAPICHAP password er Access Concentrator Leave empty to autodetect service Mame Leave empty to autodetect This is the configuration setup for when you select PPPoE protocol Filed name Sample Explanation PAP CHAP username Your username and password that you would use to connect to your PAP CHAP password carriers network Access Concentrator Specifies the name of access concentrator Leave empty to autodetect 14 ServiceName isp Specifies the name of the service Leave empty to autodetect Advanced These are the advanced settings for each of the protocols if you are unsure of how to alter these attributes it is highly recommended to leave them to a trained professional 29 IU1 OUOU OUUUUOO1 U 1 _ 111 00000001 0000001 10000001 0000C AA eres 01 010000U 0101 10101010000000001 O 000 0 0 00001 1010 m 10 000000 3000000 00000001 000001 000 00000001 O 1 0000001 000 Static Common Configuration General Setup Advanced Settings Bring up on boot Disable NAT O gg If checked router will not perfarm NAT Masquerade on this interface Override MAC address Override MTL Lise gateway metric Field name _ Sample value Expl
35. d in the router Newer versions might become available as new features are added Use this field to decide whether you need a firmware upgrade or not 3 2 15 The version of the Linux kernel that is currently running on the router 2012 because the router synchronizes it s time with an NTP server Reboots will reset this timer to O Load Average 0 98 0 57 0 30 Indicates how busy the router is Let s examine some sample output 2 43 2 96 3 41 The first number 2 43 means that in the past minute there have been on average 2 43 processes running or waiting for a resource The second number show that in the past 10 minutes on average there have been 2 96 processes 17 JU 000 00000001 Y 1 111 00000001 0000001 10000001 0000C A es 8540 101 01000000101 10101010000000001 0 000 0 0 00001 1010 1 Y IO DOLIDO TP 1000000 00000001 000001 000 00000001 O 1 0000001 000 running or waiting for a resource The last number indicates the same on the last 15 minutes Memory Field Name Sample Value Total Available 14416 29964 Shows how much memory is available to maintain routers functionality 2 Free 1476 29964 The amount of memory that is completely free Should this rapidly decrease or get close to O it would indicate that the router is running out of memory which could cause crashes and unexpected reboots accessed data A o a dn mown another location Network Information This page is much like the status page p
36. dd hostname of the update URL ENS Hostname Domain name which will be linked with dynamic IP address Name of the user account 6 Password Password of the user account 7 IP renew Time interval in minutes to check if the IP address of the device have changed interval 8 Force IP renew Time interval in minutes to force IP address renew OpenVPN VPN Virtual Private Network is a method for secure data transfer through unsafe public network This section explains how to configure OpenVPN which is implementation of VPN supported by the RUT5XX router 46 VOU UUU0UUO1 Y 1 i 111 00000001 0000001 10000001 0000C 1 01000000101 10101010000000001 O 000 000 00001 1010 0000000 00000001 000001 000 00000001 O 1 0000001 000 aa 110 TODO OpenVPN OpenVPN instances Below is a list of configured OpenVPN instances and their current state Tunnel Name Tun Tap Protocol Port Status This section contains no values yet Role Client New configuration name Add New A picture above demonstrates default OpenVPN configurations list which is empty so you have to define a new configuration to establish any sort of OpenVPN connection To create it enter desired configuration name in New configuration name field select device role from Role drop down list For example to create a OpenVPN client with configuration name Demo select client role name it Demo and press Add New button as shown in the follow
37. ddress LAN and DHCP client Common Configuration Protocol Static address ma lPwl address 192 163 0 161 Fv netmask 255 255 255 0 P IPwd gateway Fw broadcast Use custom ONS ca Se pre E DHCP Server Disable E Start 100 Limit 150 Le asetime 12h Bi Expiry time of leased addresses minimum is 2 Minutes 2m Next you are given the chance to configure your LAN and DHCP server options For a detailed explanation see LAN under Network Step 3 Wifi Step Wireless Mow let s configure your wireless radio Note ifyou are currently connecting via wireless and you change parameters like SSID encryption etc your connection will be dropped and you will have to reconnect with a new set of parametes Device Configuration Wireless network is Disable enabled B Important note Do not disable ifthe only way to reach the router is your wireless network Channel EB 2 437 GHz e Mode 802 110 se Country Code LT Lithuania aeu Interface Configuration ESSID Teltonika_derno Hide ESSID Encryption WPA2 PSK ia Cipher autu Key TT a The final step allows you to configure your wireless settings in order to set up a rudimentary Access Point 54 JU 000 00000001 Y 1 se 111 00000001 0000001 10000001 00000 A 86 40 101 01000000101 10101010000000001 O 000 O O 00001 1010 1 Y iOeiEI AIAA t s mu 3000000 00000001 000001 000 00000001 O 1 0000001 000 e When you re done with the
38. defined in common configurations but through the one that is specified in IP aliases 31 91 0UU OUUUOUUU1 O 1 y 111 00000001 0000001 10000001 0000C An ao 101 01000000101 10101010000000001 O 000 0 0 00001 1010 1 10 CULVUDO Pe 0000000 00000001 000001 000 00000001 O 1 0000001 000 IP Aliases SUBNETIS General Setup Adwanced settings lPud Broadcast DNS Server Delete Add You may also optionally define a broadcast address and a custom DNS server WiMAX If you have selected WiMAX to be your primary means of connecting to the internet you will also be granted additional control over the WiMAX module WIMAX Here you can disable wvibl A connection or reboot the modem WIMAX Management Reboot vvitiaAx Reboot modem Turn onfott yi Ax Turn off UN Field Name Explanation Reboot WiMAX modem Pressing this button will reboot the WiMAX module Turn on off WiMAX Pressing this button will either turn on or off the connection to any available WiMAX network These buttons differ from any other in a way that they make alterations to the WiMAX module directly instead of the router How do I setup Wifi WAN First we must switch the mode to Wifi Do so by selecting Wifi from the list and wait for the page to quickly reload Now you have a selection of protocols available for you Depending on whether the Access Point that you intend to connect to runs a DHCP server or not you will have to choose DH
39. e outside WAN When check box is not selected users can access the router only from LAN 443 rn cd WAN Wher check bors nor sele ues can ees the router ny Fem UAN outside WAN When check box is not selected users can access the router only from LAN 55 OOU OUUUUUO1 YU 1 i 111 00000001 0000001 10000001 0000C M 1 01000000101 10101010000000001 O 000 0 0 00001 1010 naeuuU010 OUUUOU TY 00000000 00000001 000001 000 00000001 O 1 0000001 000 Backup and Firmware Router firmware backup upgrade and settings reset to their factory defaults Backup and reset configuration Backup archive download current router settings file to personal computer Reset to defaults reset router settings to their defaut values Restore configuration Restore backup upload and restore router settings file from personal computer Firmware upgrade Keep settings when check box is selected router will keep saved user configuration settings after firmware upgrade When check box is not selected all router settings will be restored to factory defaults after firmware upgrade Image router firmware upgrade file Firmware upgrade Verify Firmware upgrade Verify The flash image was uploaded Below is the checksum and file size listed compare them with the original file to ensure data integrity Click Proceed below to start the flash procedure Checksum 446e4c75bf7f5586d42aabb5b61 37f94 Size 4 50 MB
40. e the Following DNS server addresses Preferred DNS server Alternate DNS server Validate settings upon exit If you choose to configure manually here s what you do First select an IP address Due to the stock settings that your router has arrived in you can only enter an IP in the form of 192 168 1 XXX where XXX is a number in the range of 2 254 192 168 1 2 192 168 1 254 192 168 1 155 and so on are valid 192 168 1 0 192 168 1 1 192 168 1 255 192 168 1 699 and so on are not Next we enter the subnet mask this has to be 255 255 255 0 Then we enter the default gateway this has to be 192 168 1 1 Finally we enter primary and secondary DNS server IPs One will suffice though it is good to have a secondary one as well as it will act as a backup if the first should fail The DNS can be your routers IP 192 168 1 1 but it can also be some external DNS server like the one Google provides 8 8 8 8 13 UU UUUUUUU I 11 00000001 0000001 10000001 0000C rw _ 0 01 01000000101 10101010000000001 O 00000 00001 1010 uuu uuUU10 D00000 Pa 0000000 00000001 000001 000 00000001 O 1 0000001 001 Internet Protocol Version 4 4TCP TPv4 Properties General You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator For the appropriate IP settings gt obtain an IP address automatically ia Use the Following IP addres
41. epending on whether your WAN mode is set to Wifi or not the page will display either the options for configuring an Access Point or options for configuring a connection to some local access point Access Point Wireless Access Point Here you can configure your wireless settings like radio frequency mode encrytion etc Device Configuration General Setup Advanced Settings Wireless networkis Disable enabled E Don t farget tn save before toggling the wireless radio on and off Channel 11 2 462 GHz Interface Configuration General Setup Wireless Security MAc Filter ESSID Teltonika Hide ESSID Here you can see the Overview of the wireless configuration It is divided into two main sections device and interface One is dedicated to configuring hardware parameters other software Device General Device Configuration General Setup Advanced Settings Wireless networkis Disable enabled y Donttorgetto save before toggling the wireless radio on and off Channel 11 2 462 GHz Le Here you can toggle the availability of the wireless radio and the physical channel frequency Important note As seen in the picture you should always Save before toggling the radio on and off 35 OOU UUUUUUOU1 Y 1 i 111 00000001 0000001 10000001 0000C i 01 01000000101 10101010000000001 O 000 0 0 00001 1010 m s 10 000000 0000000 00000001 000001 000 00000001 O 1 0000001 000 Advanced Device Confi
42. gain sending PING command defined number times after defined time interval If no echo is received after the defined number of unsuccessful retries router will reboot It is possible to turn of the router rebooting after defined unsuccessful retries Therefore this feature can be used as Keep Alive function when router PINGs the host unlimited number of times 43 JUY OO OUUUUOUO1 U 1 111 00000001 0000001 10000001 0000C 01 01000000101 10101010000000001 O 000 0 0 00001 1010 TE 10 OUUU 3000000 00000001 000001 000 00000001 O 1 0000001 000 O Common configuration Enable PING Reboot M Reboot routerifno M echo received Interval between 0 PIMt5s min a Minimum 5 minutes Retry count 45 Server to PING 127 0 0 1 a e g 192 158 1 1 or www host com If ONS server configured correctly A A NEO t Enable PING Reboot This check box will enable or disable PING PING Reboot is disabled by default reboot feature Reboot router if no This check box will disable router rebooting This check box must be unselected if echo received after the defined number of unsuccessful you want to use PING Reboot feature retries as Keep Alive function 3 Interval between PINGs Time interval in minutes between two PINGs Minimum time interval is 5 minutes Retry count Number of times try sending PING to server Minimum retry number is 1 Second after time interval if echo receive was retry will be done af
43. guration General Setup Advanced Settings Mode 802 11g n HT mode 20MHz Country Code OO World E Use ISOMIEC 3166 alpha country codes Distance Optimization jJ Distance to farthest network member in meters Fragmentation Threshold RTSICTS Threshold Here you can configure more advanced parameters Field name Sample value Explanation ol uone S OMO AA CO country code parameters to meet your countries wireless regulations Distance Optimization 10 Distance to farthest network member in meters to Distance to farthest network member in meters network member in meters HE Threshold The smallest packet size that can be fragmented and transmitted by multiple frames In areas were interference is a problem setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers thus increasing speed 5 RTS CTS Threshold 2346 Reguest to send threshold It can help resolve problems arising when several access points are in the same area contending Interface General Interface Configuration General Setup Wireless Security MAC Filter ESSID Teltonika_derno Hide ESSID E ESSID Your wireless networks identification string This is the name of your Wi Fi network When other Wi Fi capable computers or devices scan the area for Wi Fi networks they will see your network with this name Hide ESSID Will render your SSID hidden from other devices that try t
44. ing a Intel PRO Wireless 39454BG Network Connection This connection uses the following items Mk Client for Microsoft Networks ml QoS Packet Scheduler B File and Printer Sharing for Microsoft Networks GCT WiMax Protocol Driver C Internet Protocol Version 6 TCP IP v6 Sa Internet Protocol Version 4 TCP IP y4 Link Layer Topology Discovery Mapper 1 0 Driver Link Layer Topology Discovery Responder Description Transmission Control Protocol Internet Protocol The default wide area network protocol that provides communication across diverse interconnected networks 6 By default the router is going to have DHCP enabled which means that if you select Obtain an IP address automatically and Obtain DNS server address automatically the router should lease you an IP and you should be ready to login 12 7 UUU UUUUUUU 1 U 1 i 111 00000001 0000001 10000001 0000C a SS 1 010000 0101 10101010000000001 O 000 000 00001 1010 vu uUUU10 UUUUUU PO 0000000 00000001 000001 000 00000001 O 1 0000001 000 Internet Protocol Version 4 1CP TP 4 Properties General Alternate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise vou need to ask your network administrator For the appropriate IP settings a Obtain an IP address automatically 5 Use the Following IP address IP address Subnet mask Default gateway 6 Us
45. ing picture Role Client Le Mew configuration name Demo Add New A new configuration entry has appeared in the list and it is populated with default OpenVPN client settings Tunnel Name Tun Tap Protocol Port Status client_Demo 1194 Disabled Edit Delete You could select a server in previous step to create server default configuration To see at specific configuration settings press edit button located in newly created configuration entry A new page with detailed configuration appears as shown in the picture below OpenVPN instance client Demo Main settings Enable Tun Tap Tunftunnel A Type of used device Protocol Udp A Pot 1194 TECFMUDF port far both local and remote Lo P Llse fast LZO compression Authentication Tls Remote host IP address Resolve Retry infinite No Bind E Do not bind to local address and port Keep alive Helper directive to simplify the expression of ping and ping restart Client El Certificate authority Poo Browse Client certificate Poo Browse Client key fo Bross You can set custom settings here according to your VPN needs Below is a summary of parameters available to set 47 001 000 00000001 O 1 111 00000001 0000001 10000001 00000 a p A4101 01000000101 10101010000000001 0 000 0 0 00001 1010 1 JUUU10 D00000 TO 3000000 00000001 000001 000 00000001 O 1 0000001 000 Field Name Explanation Enabled Switches configuration on and off This must be selected to m
46. ion h My identifier Set the device identifier for IPSec tunnel Preshare key specify the authentication secret string Secret s length depends on selected algorithm eg 128 bit long secret is 16 characters in length 128 bits 8 bits one character 16 Remote VPN Endport set remote IPSec server IP address 50 1 O00 OUUUOUUU1 UY 1 111 00000001 0000001 10000001 0000C 0 101 01000000101 10101010000000001 0 000 0 0 00001 1010 10 TTT yo i 0000000 00000001 000001 000 00000001 O 1 0000001 000 Phase 1 Encryption JES l Hash shal Dh group Modp1024 Phase 2 PFS group modp1024 Encryption Jdes Es E E Authentication himac_ shat Remote network secure group IP address 192 168 2 0 Subnet mask 24 Number 0 32 Phase 1 and Phase 2 must be configured accordingly to the IPSec server configuration Remote Network Secure Group Set the remote network Secure Policy Database information Tunnel keep alive Enable keep alive E Ping IP address Ping period seconds Fieldname_ Explanation 1 Tunnel keep alive Allows sending ICMP echo request ping utility to the remote tunnel network This function may be used to automatically start the IPSec tunnel Ping IP address Enter IP address to which ICMP echo requests will be sent Ping period seconds Set sent ICMP request period in seconds GRE Tunnel GRE Generic Routing Encapsulation RFC2784 is a solution for tunneling RFC1812
47. ly supported Protocol TCP UDP Other Protocol of the packet that is being matched against traffic rules ES ource IPv4 address The source of the packet Destination IPv4 address The destination of the packet Action Drop Accept Reject Action to be taken on the packet if it matches the rule You can also define chain additional additional options like limiting packet volume and defining to which chain the rules rule belongs 7 Enable Checked Unchecked Self explanatory Uncheck to make the rule inactive The rule will not be deleted but it also will not be loaded into the firewall Sort Up Down When a packet arrives it gets checked for a matching rule If there are several rules that match the rule the first one is applied i e the order of the rule list impacts how your firewall operates therefore you are given the ability to sort your list as you wish Custom Rules Here you have the ultimate freedom in defining your rules you can enter them straight into the iptables program Just type them out into the text field ant it will get executed as a linux shell script If you are unsure of how to use iptables check the internet out for manuals examples and explanations Static Routes Static routes provide a way of entering custom entries in the internal routing table of the router Routes Routes specify over which interface and gateway a certain host or network can be reached Static IPv4 Routes Interfa
48. nnection S View network connections a Manage network passwords Es Add a wireless device to the network 5r Connect to a network Identify and repair network problems Files 9 Ay nelldnt Ci wireshark dictionary usr Cisco 2 dictionary T Llserlvlanual DFH4ll1 en wt Llserblanual DPH411 en A 4 See more results network connection 11 UUVUUUUU 11 00000001 0000001 10000001 0000 ym 11 01000000101 10101010000000001 O 000 0 0 00001 1010 du uuUU10 000000 0000000 00000001 000001 000 00000001 O 1 0000001 001 Control Panel 10 ue View network status and tasks LE o o ee View network connections E E i ur View network computers al Network and sharing Center View devices and printers View network connections E E A se Manage wireless networks m 4 Then right click on your wireless device that you use to connect to other access points It is the one with the name Wireless Network Connection and has signal bars on its icon rae ote at TJO ug Control Panel Network and Internet Network Connections Organize Disable this network device Diagnose this connection we Wireless Network Connection li Disabled il Intel R PRO Wireless 394 Enable Status Diagnose Create Shortcut Delete Rename Properties 5 Select Internet Protocol Version 4 TCP IPv4 and then click Properties y Wireless Network Connection Properties Connect us
49. nnel mode can be used to build a secure connection between two remote LANs serving as a VPN solution IPsec system maintains two databases Security Policy Database SPD which defines whether to apply IPsec to a packet or not and specify which how IPsec SA is applied and Security Association Database SAD which contain Key of each IPsec SA The establishment of the Security Association IPsec SA between two peers is needed for IPsec communication It can be done by using manual or automated configuration Note router starts establishing tunnel when data from router to remote site over tunnel is sent For automatic tunnel establishment used tunnel keep alive feature 49 IU1 OOU OUUUUOO1 U 1 ee 111 00000001 0000001 10000001 0000C 0 101 01000000101 10101010000000001 0 000 0 0 00001 1010 IO OUUUUt S6 19000000 00000001 000001 000 00000001 O 1 0000001 000 Automatic IPSec Key exchange Description Enable IPsec IPSec key exchange Auto Key IKE mode Mode aggressive Enable NAT traversal E Enable initial contact El My identifier type address ES My identifier we Preshare Key 123456709 Length 6 327 Remote WPN endpoint 51 51 51 51 IF address Enable initial contact Enable this to send an INITIAL CONTACT message Peers identifier type Choose fqdn or user fgdn accordingly to your IPSec server configuration Mod Select Main or Aggressive mode accordingly to your IPSec server configurat
50. ntry code SID 00 0C 43 30 50 38 MAC address of your wireless radio N 8 Additional note MBit s indicates the bits not bytes To get the throughput in bytes divide the bit value by 8 for e g 54MBits s would be 6 75MB s Mega Bytes per second Associated Stations Outputs a list of all devices and their MAC addresses that are maintain a connection with your router right now This can either be the information of the Access Point that the router is connecting to in Client Mode OR a list of all devices that are connecting to the router in Access Point mode 20 _ UUU UUUUUUU 1 i 111 00000001 0000001 10000001 0000C A n RR 401 01000000101 10101010000000001 0 000 O O 00001 1010 sevasuuUU10 OUUUUO TO 0000000 00000001 000001 000 00000001 O 1 0000001 000 Associated Stations MAC Address Network Signal RX Rate TX Rate BRTETOFEACA S Waster Teltonika_demo_ap 48 dBm 2 2 Mbits MES 7 2DMHZ 43 3 hibits MES 4 20MHZ UD 2 ED Caa 44 Master Teltonika_demo_ap T0 dBm 22 0 Mbits MES 5 2OMHz 6 5 Mbits MES 0 20mMHz DHCP Leases If you have enabled a DHCP server this field will show how many devices have received an IP address and what those IP addresses are DHCP Leases Hostname IPv4 Address MAC Address Leasetime remaining android _b8594credt14b08 1927 168 1 101 be Dfeac 45 11h 59m 40s The picture above shows a DHCP lease for an Android phone that is currently connecting to the routers Access Point Backup W
51. o scan the area 36 UUU UUUUUUU 1 M uz 111 00000001 0000001 10000001 0000C F _ 1 01000000101 10101010000000001 O 000 O O 00001 1010 svviUUUU10 OUUUUU 6i 0000000 00000001 000001 000 00000001 O 1 0000001 000 Security Interface Configuration seneral Setup Wireless Security MAC Filter Encryption WWPA2 PSK Cipher auto BA key EEE te Encryption There are many modes of encryption though two distinctive classes have to pointed out WEP Encryption EF Open system A Used Key Slot Key 1 e Key 1 Ee Key He z Key 3 E Key iid E Enter the keys that will be used as passphrase for connecting computers and then specify which key will be preferred above the remaining It s sufficient to enter one key and then specify it as the preferred one Length is important as well 10 or 26 characters in length in hex mode OR 5 or 13 in ASCII mode A hex key may only contain numbers 0 through 9 and letters a through f WPA Encryption WPA PSK Cipher auto l key TILLIT ly First select an encryption method TKIP CCMP TKIP amp CCMP auto Note Some authentication methods won t support TKIP and TKIP amp CCMP encryption After you ve selected your encryption method you should enter your passphrase which must be at least 8 characters long 37 000 00000001 O 1 A 111 00000001 0000001 10000001 0000C lt A 0101 01000000101 10101010000000001 O 000 O O 00001 1010 10 0
52. omatic Shutdown Wall Outlet Decics mw oll 230V AC AC DC 9V UTP cable U1 UUU 00000001 UY 1 y 111 00000001 0000001 10000001 0000C Mc ato 101 01000000101 10101010000000001 O 000 0 0 00001 1010 y 1suuUU10 O00000 TOR 0000000 00000001 000001 000 00000001 O 1 0000001 000 Introduction Thank you for purchasing a RUT5XX RUT5XXU WiMAX router RUT5XX is a series of compact mobile routers with high speed wireless and Ethernet connections This router is ideal for people who d like to share their internet on the go as it is not restricted by a cumbersome cable connection Unrestricted but not forgotten the router still supports internet distribution via a broadband cable simply plug it in to the wan port set the router to a correct mode and you are ready to browse Specifications LAN and Wi Fi e Wireless AP Router 4 Port Switch and Firewall in one device e High performance 320 MHz CPU with 256 Mbits SDRAM e EEE 802 11b g n IEEE 802 3 IEEE 802 3u standards 64 128 bit WEP WPA WPA2 WPA amp WPA2 encryption methods e 3xLAN 10 100Mbps Ethernet ports e 1xWAN 10 100Mbps Ethernet port e Supports Auto MDI MDIX e Remote local Web management e 1x 5dBi wireless antenna e SSID stealth mode and access control based over MAC address e System log to record the status of the Router e Auto negotiation manual mode for IEEE 802 11b g n e Dynamic DNS e LAN access control over Internet connection e Virtual server e
53. on how they work please follow through there DHCP Server The DHCP server is the router side service that can automatically configure the TCP IP settings of any device that reguests such a service If you connect a device that has been configured to obtain IP address automatically the DHCP server will lease an address and the device will be able to fully communicate with the router 33 JU 000 00000001 Y 1 se 111 00000001 0000001 10000001 00000 A AA 640 101 01000000101 10101010000000001 O 000 O 0 00001 1010 1 yu uuu 10 COUT 1000000 00000001 000001 000 00000001 O 1 0000001 000 DHCP Server General Setup Advanced Settings Disable E Stat 100 Limit 150 Leasetime 12h E Expiry time ofleased addresses minimum is 2 Minutes zm __ Field Name Sample value Checked unchecked Check to DISABLE the DHCP server 2 Start 100 The starting address of the range that the DHCP server can use to give out to devices E g if your LAN IP is 192 168 2 1 and your subnet mask is 255 255 255 0 that means that in your network a valid IP address has to be in the range of 192 168 2 1 192 168 2 254 192 168 2 0 and 192 168 2 255 are special unavailable addresses If the Start value is set to 100 then the DHCP server will only be able to lease out addresses starting from 192 168 2 100 3 Limit How many addresses the DHCP server gets to lease out Continuing on the above example if the start address is 192 168 2 100 then the end
54. ou want to use and then pressing Switch Protocol General This area is dedicated for protocol specific options Static Common Configuration seneral Setup Advanced settings Protocol static address Pwl address 9 192 166 99 1b2 IPv4 netmask 255 255 255 0 IPvd gateway 192 160 939 254 IPv4 broadcast Lise custom ONS 6 5 5 0 A 9 0 6 6 E E This is the configuration setup for when you select the static protocol Filedname Sample Explanation o A mask used to define how large the WAN network is Address where the router will send all the outgoing traffic A RHEE a O blank unless you know what you are doing 5 custom DNS servers 8 8 8 8 8 8 6 6 Usually the gateway has some predefined DNS servers As such the router when it needs to resolve a hostname www google com www cnn com etc to an IP address it will forward all the DNS requests to the gateway By entering custom DNS servers the router will take care of host name resolution You can enter multiple DNS servers to provide redundancy in case the one of the server fails 28 UUU 00000001 UY 1 111 00000001 0000001 10000001 0000C aa m 1 01000000101 10101010000000001 O 000 0 O 00001 1010 10 CULITO POE 09000000 00000001 000001 000 00000001 O 1 0000001 000 DHCP Common Configuration General Setup Advanced Settings Protocal DHCP client A Hostname to send when reguesting DHCP When you select the DHCP proto
55. private address space traffic over an intermediate TCP IP network such as the Internet GRE tunneling does not use encryption it simply encapsulates data and sends it over the WAN 51 1 OOU UUUUUUO 1 OU 1 aa 111 00000001 0000001 10000001 0000C 1 01000000101 10101010000000001 O 000 0 0 00001 1010 0000000 00000001 000001 000 00000001 O 1 0000001 000 WAN IP WAN IP A A A A Tl SR B B B B Tunnel 10 0 0 1 24 Tunnel 10 0 0 2 24 LAN1 192 168 0 0 24 LAN1 192 168 1 0 24 In the example network diagram two distant networks LAN1 and LAN2 are connected To create GRE tunnel the user must know the following parameters 1 Source and destination IP addresses 2 Tunnel local IP address 3 Distant network IP address and Subnet mask Enable GRE Tunnel C TTL Value 0 255 PTUD E Remote network IP emote network CIDR CIDR netmask value 0 32 Local tunnel IP Local tunnel CIDR CIDR netmask value 0 32 Femote endpoint IF address MTU 1500 MTU value 0 1500 Fieldname Explanation Enable GRE Tunnel Check the box to enable the GRE Tunnel function special value meaning that packets inherit the TTL value 3 PMTUD Check the box to enable the Path Maximum Transmission Unit Discovery PMTUD status on this tunnel TL Specify the fixed time to live TTL value on tunneled packets 0 255 The O is a Remote tunnel network Specify remote LAN Subnet address address Remote CIDR Specify remote LAN Subnet CI
56. reviously described though dedicated to data associated with networking WiMAX Statistics for the WiMAX module and the connection WIMAX d Uptime 0 07 14 State Connected Singal Strength 83 dBm Signal Quality 10 3 dB MAC address 00 1 42 80 00 26 BS MAC address 00 00 22 01 05 48 Uplink Modulation ugpsk cte 1J2 Downlink Modulation upsk cte 1J2 Version Linux none 2 6 25 uc0 sqn 52 Mon Feb 6 16 41 31 EET 2012 armw5teb 64k v1 54 State Shows the state of the connection o o O MAC address The MAC address of the WiMAX module and effectively your routers on the WiMAX network Modulation Type of modulation used when receiving information Modulation WiMAX module version WAN Statistics on the routers WAN connection 18 JU 000 00000001 Y 1 111 00000001 0000001 10000001 0000C a S0 101 01000000101 10101010000000001 O 000 00 00001 1010 1 yr UU 10 CUUUDO POE 3000000 00000001 000001 000 00000001 O 1 0000001 000 WAN Interface Wii AX Type DHOP IPw4 address 82 140 177 32 Field Name Sample Value Explanation 1 Interface WiMAX Specifies through what medium the router is connecting to the internet This can either be Wired WiMAX or Wi Fi Type DHCP Specifies the type of connection This can either be static or DHCP ane i 82 140 177 32 The IP address that the routers uses to connect the internet 255 255 255 240 Indicates the networks netmask 5
57. rking NTP servers Otherwise time sync feature will not synchronizing with defined work NTP servers 5 NTP server candidates NTP server hostname You can add as many servers as you need by clicking add button at the end of server hostname field Dynamic DNS Dynamic DNS DDNS is a domain name service allowing to link dynamic IP addresses to static hostname To start using this feature firstly you should register to DDNS service provider You are provided with add delete buttons to manage and use different DDNS configurations at the same time 45 JUY UUU UUUUUUU1 U 1 T 111 00000001 0000001 10000001 0000 pee 101 01000000101 10101010000000001 O 000 0 0 00001 1010 1 10 000000 Tl 0000000 00000001 000001 000 00000001 O 1 0000001 000 Dynamic DNS Dynamic DNS allows that your router can be reached with a fixed hostname while having a dynamically changing IP address DEMO Enable Status UA Service dvndns ord Hostname mypersonaldoamain dyadns org Username MmyUsername Th Password 2 00000 IF renew interval 10 imini Force IP renew min T2 Delete Add Field name Explanation Enables current DDNS configuration 2 status o O 3 Service Your dynamic DNS service provider selected from the list 1 dydns org 2 3322 org 3 no ip com 4 easydns com 5 zoneedit com In case your DDNS provider is not present from the ones provided please feel free to use custom and a
58. s IP address 192 168 1 100 Subnet mask 255 255 255 0 Default gateway 192 168 1 1 Obtain CNS server address automatically Use the Following DNS server addresses Preferred DNS server 192 168 1 Alternate DNS server 5 8 Validate settings upon exit Right click on the Wireless network icon and select Connect Disconnect A list should pop up with all available wireless networks Select Teltonika and click connect A Wireless Network Connection Connect Disconnect Diagnose Bridge Connections Create Shortcut Rename Then we launch our favourite browser and enter the routers IP into the address field e DO 19216811 Press enter If there are no problems you should be greeted with a login screen such as this 14 _ UUUU AO 11 00000001 0000001 10000001 0000 101 010001 01 10101010000000001 O 000 0 0 00001 101 ey YUU y 10 VUUUUE 120000000 00000001 000001 000 00000001 O 1 0000001 00 Authorization Required Please enter your username and password Username admin Password Login Reset Teltonika solutions wwwteltanika lt Enter the default password which is admin01 into the Password field and then either click Login with your mouse or press the Enter key You have now successfully logged into the router and should see the Status page System information System Router Name Teltonika Router Model Teltonika RLITE
59. ter defined time unsuccessful interval Server to PING Server IP address or host name which will If you use server host name instead of receive PING from router the IP address you must configure DNS server first Important notes e Always check if your defined server responds to echo commands before using PING Reboot function Otherwise router keeps rebooting after unsuccessful PING echo receive You can test PING send at Network gt Diagnostics NTP Hostname Network Time Protocol NTP and time zone configuration settings is needed to periodically update router local time Common configuration 44 101 000 00000001 O 1 111 00000001 0000001 10000001 0000C M A O RARO 101 01000000101 10101010000000001 O 000 O 0 00001 1010 IO OUUUUU PA 0000000 00000001 000001 000 00000001 0 1 0000001 000 System Properties Local Time Wed Aug a 08 32 11 2012 Sync with browser Hostname Teltonika Timezone LTC hd Time Synchronization Enable builtin WTP M NTP server candidates U europe pool ntp org Ej E 3 europe pool ntp org Sync with browser button will synchronize local router time with computer browser time Field name Description Notes 1 Local Time Localtime of router fm 2 Hostname Hostname of router ee 3 Timezone Time zone of your country Enable builtin NTP This check box willturnon When check box is selected you must enter one or more automatic time wo
60. uration and then click Add New After a while you should see this 48 ee ee eee ee eee pee Tunnel Hame server Demo aa U0DO UUU0UUO0U1 U 111 00000001 0000001 10000001 0000C 110 OOOO FOAN Tun Tap Protocol Port Status 1194 Disabled To fine tune your configuration click Edit Main settings Enable r Tun T ap Tunftun nel P E Type of used device Protocol Udp Port 1194 fi TEPFUDP port for both local and remote LAO Authentication E E Use fast ZO compression Tis 1 01000000101 10101010000000001 O 000 O 0 00001 1010 09000000 00000001 000001 000 00000001 O 1 0000001 000 Edit Delete Clientto client M E Allow clientto client traffic Allow duplicate r certificates Keep aliwe di Helper directive to simplify the expression of ping and ping restart in server mode configurations Serwer F address Sener netmask Nepasiri failas Nepasiri fallas Mepasiri failas Nepasiri failas Cerificate authority Sener certificate Sener key Diffie Hellman parameters The difference between client and server configurations in TUN mode is that a server must have a public IP address which is needed for the client s configuration IPsec The IPsec protocol client enables the router to establish a secure connection to an IPsec peer via the Internet IPsec is supported in two modes transport and tunnel Transport mode creates secure point to point channel between two hosts Tu
61. verage 3 Peak 5 Other O Awerage U Peak 2 This graph shows a concise history of the amount of connections that the router maintained Blue graph indicates UDP connections green TCP and red other types ICMP etc Other values indicate each respective graphs average and peak connection amounts over 3 minutes 26 1 0100001 OOU OUUUUUO1 U 1 111 00000001 0000001 10000001 0000C 0101 10101010000000001 0 000 0 0 00001 1010 SOOT TOR 10000000 00000001 000001 000 00000001 O 1 0000001 000 Network Protocol Source Destination Transfer IP UP 192 166 0 156 377D6 192 166 99 30 3389 613 24 KB 8330 Pkts 1 IP UDP 192 166 0 19 137 192 168 0 255 137 7 24 KB 54 Pkis Pg UDP 192 166 0 19 158 192 166 0 255 130 5 20 KB 24 Pkis AL TAR 192 1695 0 156 52547 173 194 fe 13860 3 30 KB 11 Pkts AL TLP 192 166 0 156 36821 199 127 194 50 00 1 97 KB 17 Pkts j Pa UDP 194 TE I a 255 255 225 299 60 1 13 KB 2 Pkts Pa TOF 192 166 0 156 42797 209 05 148 140 00 930 00 6 5 Pkts IP Ter 192 168 0 30 5566 9 192 168 0 161 50 r03 00 B 3 Pkts IFP UDP 0 0 0 0 68 209 200 209 200 57 600 00 E 2 Pkts IP UDP 122 ee 5 by 220 255 aa Ea 604 00 E 2 Pkts IP UDP 192 166 0 156 54245 0 0 0 0 55 142 00 E 2 Pkts IP UDP 192 168 0 156 41391 0 0 0 8 53 66 00 E 1 Pkts On the same page you can also analyse a detailed list of all active connections that the router maintains Each entry consist of a type of network
62. wal Inbound 39 23 KHit s Average 42 47 KHills Peak 373 25 KHit s 4 9 KBytes 5 31 KBytes 46 66 KBytes Outbound 29 75 Bits Average 20 62 KHitls Peak 59 33 KHitls 3 72 KBytes 2 58 KBytes 1 42 KBytejs 23 U UUUUUUU 11 00000001 0000001 10000001 00001 1 01000000101 10101010000000001 0 000 0 0 00001 1010 evi uuUU10 O0UUUU TWR 0000000 00000001 000001 000 00000001 O 1 0000001 OO Graphs the total traffic that passes through both WAN and LAN network interfaces LAN Realtime Traffic Bridge LAM WAMN LAN WAM Cyvired Vi MAS WIFI 89 4 Ebitfs 11 17 Ebytels 59 6 EBit s 7 45 KBytes 29 8 EBitls 3 72 KBytes 3 minute window 3 second interwal Inbound 66 96 KBit s Average 52 67 KBits Peak 108 36 KBit s 6 62 KBytes 6 58 KBytes 13 54 KByte s Outbound 21 21 KBit s Average 18 25 KHills Peak 57 41 KBitis 2 65 KBytes 2 28 KBytejs 1 18 KBytes Indicates how much traffic has been passed through your Ethernet LAN network WAN x Realtime Traffic Bridge LANGFWMAN LAN WAN wire Wy MAX WIFI 4 54 MEit 652 29 EBytels 3 29 MEitJs 421 53 EBytels 1 65 MBitls 210 76 EByteis C3 minute window 3 second interwal Inbound 19 25 KBitls Average 21 24 KBits Peak 5 99 MbBitis 2 41 KHyte s 2 65 KBytes 766 42 KBytes Outbound KBit s Average 1 42 Kits Peak 474 28 KHitls 0 KBytes 0 18 KByte s 59 29 KBytejs Graphs the amount of traffic which passed through the current
63. you can use LAN 3 2 or WAN 3 Ethernet port to power the device RUT5xx can be powered from power socket and over Ethernet simultaneously Power socket has higher priority meaning that the device will draw power from power socket as long as it is available When RUT5xx is switching from one power source to the other it loses power for a fraction of the second and may reboot The device will function correctly after the reboot Do not use LAN3 and WAN port for powering RUT5xx simultaneously Use pins 4 and 5 of Ethernet port to supply posite voltage and connect pins 7 and 8 ground Pin Signal ID T568A Color T568B Color Pins on plug face socket is reversed 1 TX te white green stripe white orange stripe 2 TX Pin Position green solid orange solid 8 3 RX gt E 26 white orange stripe white green stripe 3 1 4 7 30VDC Aa ESD blue solid blue solid 5 7 30VDC A A white blue stipe white blue stripe 5 RX 4 orange solid green solid GROUND m white brown stripe white brown stripe s GROUND l brown solid brown solid Though the device can be powered over Ethernet port it is not compliant with IEEE 802 3af 2003 standard Powering RUT5xx from IEEE 802 3af 2003 power supply will damage the device as it is not rated for input voltages of PoE standard New hardware revision has 7 30VDC written on the device sticker while older revision has 9V 1A 16 UUU UUUUUUU1 U 1

USER MANUAL

Contents

Download Pdf Manuals

Related Search

Related Contents