FEATURES

LTE (Cat M1) / NB-IoT / EGPRS

2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, on roaming, no network, network denied, data connection fail

Signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP Bytes sent/received, connected band, IMSI, ICCID.

SIM switch

Status

MOBILE

Mobile module

Supports sending and reading Unstructured Supplementary Service Data messages

SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS,

scheduled SMS, SMS autoreply, Call utilities

USSD

SMS/Call

Tag based VLAN separation

Custom data limits for both SIM cards

VLAN (planned)

Mobile quota control

WEB filter (planned) Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only

Access control Flexible access control of TCP, UDP, ICMP packets, MAC address filter

Operator black/white list

Used band status display, Band lock

Black/White list

Band management

Auto APN

Direct connection (bridge) between mobile ISP and device on LAN

APN

Bridge

Multiple PDN Possibility to use different PDNs for multiple network access and services

Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2) (planned)

TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, PPP, SSH, DHCP, Telnet, MQTT, Wake On Lan

(WOL)

H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets

Network protocols

VoIP passthrough support

(planned)

NETWORK

Routing

Pre-shared key, digital certificates, X.509 certificates

DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN,

SYN-RST, X-mas, NULL flags, FIN scan attacks)

DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC,

AES-192-CBC, AES-256-CBC

Attack prevention

SECURITY

Authentication

Firewall Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T

IKEv1, IKEv2, with 5 encryption methods (DES, 3DES, AES128, AES192, AES256)

GRE tunnel

IPSec

GRE

Stunnel (planned) Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code

PPTP, L2TP Client/Server services can run simultaneously, L2TPv3 support

DMVPN (planned) Method of building scalable IPsec VPNs

SSTP (planned) SSTP client instance support

ZeroTier ZeroTier VPN client support

WireGuard VPN client and server support

WireGuard

Multiple clients and server can be running simultaneously, 12 encryption methods

VPN

OpenVPN

OpenVPN Encryption

Ping Reboot, Periodic Reboot, LCP and ICMP for link inspection

Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e

Connection monitoring

QoS / Smart Queue

Management (SQM) (planned)

Firewall Port forward, traffic rules, custom rules

DHCP Static and dynamic IP allocation, DHCP Relay

Supported >25 service providers, others can be configured manually

Possibility to mount remote file system via SSH protocol

DDNS

SSHFS

1 x LAN port 10/100 Mbps, comply IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX crossover (Configurable to work

as WAN port)

ETHERNET

LAN