SAFETY INFORMATION In this document you will be introduced on how to use a RUT500 router safely. We suggest you to adhere to the following recommendations in order to avoid personal injuries and or property damage. You have to be familiar with the safety requirements before using the device! To avoid burning and voltage caused traumas, of the personnel working with the device, please follow these safety requirements.
Thank you for purchasing a RUT500 3G router! RUT500 is part of the RUT5xx series of compact mobile routers with high speed wireless and Ethernet connections. This router is ideal for people who‘d like to share their internet on the go, as it is not restricted by a cumbersome cable connection.
Electrical, Mechanical & Environmental: Dimensions (H x W x D) 100mm x 85mm x 36mm Weight 210 - 260g Power Supply 100 – 240 VAC -> 9 VDC wall adapter Input voltage range: 9-12 V Power Consumption <...
Setting up your router Installation After you unpack the box, follow the steps, documented below, in order to properly connect the device. For better Wi- Fi performance, put the device in clearly visible spot, as obstacles such as walls and door hinder the signal. 1.
3. Connect the power adapter to the socket on the front panel of the device. Then plug the other end of the power adapter into a wall outlet or power strip. 4. Connect to the device wirelessly (SSID: Teltonika) or use Ethernet cable and plug it into any LAN Ethernet port. Logging in After you’re complete with the setting up as described in the section above, you are ready to start logging into your...
Page 10
Click “View network connections” 4. Then right click on your wireless device that you use to connect to other access points (It is the one with the name “Wireless Network Connection” and has signal bars on its icon).
Page 11
5. Select Internet Protocol Version 4 (TCP/IPv4) and then click Properties 6. By default the router is going to have DHCP enabled, which means that if you select “Obtain an IP address automatically” and “Obtain DNS server address automatically”, the router should lease you an IP and you should be ready to login.
Page 12
Right click on the Wireless network icon and select Connect / Disconnect. A list should pop up with all available wireless networks. Select “Teltonika” and click connect. Then we launch our favourite browser and enter the routers IP into the address field:...
Operation Modes The RUT500 router supports various operation modes. It can be connected to the internet (WAN) via 3G, standard Ethernet cable or via a wireless network. If you connect to the internet via an Ethernet cable of Wi-Fi, you may also backup your connection with 3G for added stability.
Name of the router (hostname of the routers system). Router Model Teltonika Routers model. RUT500 Firmware Version Shows the version of the firmware that is currently loaded in the router. Newer versions might become available as new features are added. Use this field to decide whether you need a firmware upgrade or not.
Memory Field Name Sample Value Explanation Total Available 14416/29964 Shows how much memory is available to maintain routers functionality. Free 1476/29964 The amount of memory that is completely free. Should this rapidly decrease or get close to 0, it would indicate that the router is running out of memory, which could cause crashes and unexpected reboots.
Page 16
Field Name Sample Value Explanation Interface Specifies through what medium the router is connecting to the internet. This can either be Wired, 3G or Wi-Fi. Type DHCP Specifies the type of connection. This can either be static or DHCP. IPv4 10.12.104.103 The IP address that the routers uses to connect the internet.
Page 17
Field Name Sample Value Explanation SSID teltonika_rnd_division_ap The SSID that the AP, to which the routers is connected to, uses. Mode Client Connection mode – Client indicates that the router is a client to some local AP. Channel 6 (2.44 GHz) The channel that the AP, to which the routers is connected to, uses.
Page 18
DHCP Leases If you have enabled a DHCP server this field will show how many devices have received an IP address and what those IP addresses are. The picture above shows a DHCP lease for an Android phone that is currently connecting to the routers Access Point. Backup WAN When enabled this field will indicate the health of your primary connection: IN USE...
Routes Shows the routers active ARP table. An ARP table contains recently cached MAC addresses of every immediate device that was communicating with the router. Active IPv4-Routes Shows the routers routing table. The routing table indicates where a TCP/IP packet, with a specific IP address, should be directed to.
Page 20
This tri-graph illustrates average system load over the course of ~3 minutes; each new measurement is taken every 3 seconds. The graph consists out of three colour coded graphs, each one corresponding to the average system load over 1 (red), 5 (orange) and 15 (yellow) most recent minutes. Although not graphed, the page also displays peak loads over 1, 5 and 15 minutes.
Page 21
LAN+WAN Graphs the total traffic that passes through both WAN and LAN network interfaces. Indicates how much traffic has been passed through your Ethernet LAN network.
Page 22
WAN(x) Graphs the amount of traffic which passed through the current active WAN connection. Wi-Fi Shows the amount of traffic that has been sent and received through the wireless radio.
Page 23
Wireless This graph illustrates how signal strength and the amount of noise change over time. This graph illustrates how the physical rate of wireless changes over time. Connections...
Bytes and the amount of packets. Network IF you have purchased a 3G version of the RUT500 router OR the RUT5XXU and some supported 3G dongle you will have to configure the 3G settings so the router could successfully connect to a 3G network.
Page 25
The configuration is simple and straightforward. Here we will gloss over all the fields: Field name Possible values Explanation 1. APN “bangapro” Access Point Name (APN) is a configurable network identifier used by a mobile device when connecting to a GSM carrier. 2.
The router will be able to connect to a local wireless access point and reach the internet through it. 3. 3G The router will connect to your local mobile network for 3G access. (Available for RUT500 and RUT5XXU + supported USB 3G dongle) Important notes: ...
Page 27
This is the configuration setup for when you select the static protocol. Filed name Sample Explanation IPv4 address 192.168.99.162 Your routers address on the WAN network IPv4 netmask 255.255.255.0 A mask used to define how “large” the WAN network is IPv4 gateway 192.168.99.254 Address where the router will send all the outgoing traffic...
Page 28
Field name Sample value Explanation Bring up on boot Specifies whether the interface will be configured and brought up when the router boots up. Disabling will render your WAN connection non-functional Disable NAT On/Off Toggle NAT on and off. Override MAC address 00:0C:43:30:50:38 Override MAC address of the WAN interface.
Page 29
IP Aliases IP aliases are a way of defining or reaching a subnet that works in the same space as the regular network. As you can see, the configuration is very similar to the static protocol; only in the example a 55’th subnet is defined. Now if some device has an IP in the 55 subnet (192.168.55.xxx) and the subnets gateway metric is “higher”...
Should you be asked enter the secret Encryption Key and click Submit. Now you should be transported to the Wireless Station page. Click Save and wait until all the settings are applied. The configuration is complete and you should now be able to access the internet. This page is used to configure the LAN network, where all your devices and computers that you connect to the router will reside.
Page 31
Field Name Sample value Explanation Disable Checked/unchecked Check to DISABLE the DHCP server. Start The starting address of the range that the DHCP server can use to give out to devices. E.g.: if your LAN IP is 192.168.2.1 and your subnet mask is 255.255.255.0 that means that in your network a valid IP address has to be in the range of [192.168.2.1 –...
4. DHCP-Options 6,192.168.2.1,192.168.2.2 Additional options to be added for this DHCP server. For example with 26,1470 '26,1470' or 'option:mtu, 1470' you can assign an MTU per DHCP. option:mtu, 1470 Your client must accept MTU by DHCP for this to work. Wireless On this page you can configure your wireless settings.
Page 33
Advanced Here you can configure more advanced parameters: Field name Sample value Explanation 1. Mode Auto, b, g, g+n Different modes provide different throughput and security options. 2. Country Code Any ISO/IEC 3166 Selecting this will help the wireless radio configure its internal alpha2 country code parameters to meet your countries wireless regulations.
Page 34
Security Encryption – There are many modes of encryption, though two distinctive classes have to pointed out. Enter the keys that will be used as passphrase for connecting computers and then specify which key will be preferred above the remaining. It’s sufficient to enter one key and then specify it as the preferred one. Length is important as well: 10 or 26 characters in length in hex mode OR 5 or 13 in ASCII mode.
MAC-Filter Filter – you can define a rule for what to do with the MAC list you’ve defined. You can either allow only the listed MACs or allow ALL, but forbid only the listed ones. Client Client mode is nearly identical to AP, except for the fact that most for the options are dictated by the wireless access point that the router is connecting to.
Page 36
amount of failed or passed health checks has to be reached before the state changes completely. This delay is instituted so as to mitigate “spikes” in connection availability, but it also extends the time before the backup link can be brought up or down.
If you witness the above sequence, your backup link is working! Firewall In this section we will look over the various firewall features that come with rut500. General Settings The routers firewall is a standard linux iptables package, which uses routing chains and policies to facilitate control over inbound and outbound traffic.
By enabling DMZ for a specific internal host (for e.g.: your computer), you will expose that host and its services to the routers WAN network (i.e. - internet). Port Forwarding Here you can define your own port forwarding rules. You can use port forwarding to set up servers and services on local LAN machines. The above picture shows how you can set up a rule that would allow a website that is being hosted on 192.168.99.156, to be reached from the outside by entering http://routersExternalIp:12345/ .
1. Name “ruleName” Used to make rule management easier 2. Family IPv4 Only IPv4 is currently supported 3. Protocol TCP/UDP/Other… Protocol of the packet that is being matched against traffic rules. 4. Source IPv4 address The source of the packet. 5.
192.168.55.240 255.255.255.240 Applies 192.168.55.240 - 192.168.55.255 192.168.55.161 255.255.255.0 192.168.55.0 - 192.168.55.255 192.168.0.0 255.255.0.0 192.168.0.0 - 192.168.255.255 Diagnostics Contains Network Utilities used for testing network. Ping – the utility used to test the reachability of a host on an Internet IP network and to measure the round-trip time for messages sent from the originating host to a destination server.
Common configuration Field name Description Notes Enable PING Reboot This check box will enable or disable PING Reboot is disabled by default. PING reboot feature. Reboot router if no echo received This check box will disable router This check box must be unselected if rebooting after the defined number of you want to use PING Reboot feature unsuccessful retries.
SMS text SMS text which will reboot router. SMS text can contain letters, numbers, spaces and special symbols. Capital letters also matters. Sender phone number Phone number of person who can You can add as many phone numbers reboot router via SMS message as you need.
“Sync with browser” button will synchronize local router time with computer browser time. Field name Description Notes Local Time Local time of router. Hostname Hostname of router. Timezone Time zone of your country. Enable builtin NTP This check box will turn on automatic When check box is selected you time synchronizing with defined NTP must enter one or more working...
Time interval (in minutes) to force IP address renew. OpenVPN VPN (Virtual Private Network) is a method for secure data transfer through unsafe public network. This section explains how to configure OpenVPN, which is implementation of VPN supported by the RUT500 router.
Page 45
A picture above demonstrates default OpenVPN configurations list, which is empty, so you have to define a new configuration to establish any sort of OpenVPN connection. To create it, enter desired configuration name in “New configuration name” field, select device role from “Role” drop down list. For example, to create a OpenVPN client with configuration name Demo, select client role, name it “Demo”...
Enabled Switches configuration on and off. This must be selected to make configuration active. TUN/TAP Selects virtual VPN interface type. TUN is most often used in typical IP-level VPN connections, however, TAP is required to some Ethernet bridging configurations. Protocol Defines a transport protocol used by connection.
The establishment of the Security Association (IPsec-SA) between two peers is needed for IPsec communication. It can be done by using manual or automated configuration. Note: router starts establishing tunnel when data from router to remote site over tunnel is sent. For automatic tunnel establishment used tunnel keep alive feature.
Phase 1 and Phase 2 must be configured accordingly to the IPSec server configuration. Remote Network Secure Group – Set the remote network (Secure Policy Database) information. Tunnel keep alive Allows sending ICMP echo request (ping utility) to the remote tunnel network. This function may be used to automatically start the IPSec tunnel.
Page 49
WAN IP: WAN IP: A.A.A.A B.B.B.B Internet Tunnel 10.0.0.1/24 Tunnel 10.0.0.2/24 GRE tunnel LAN1 192.168.0.0/24 LAN1 192.168.1.0/24 LAN2 192.168.1.2 192.168.0.2 Figure 1 Typical GRE tunnel application connecting two remote networks In the example network diagram (Fig. 22) two distant networks LAN1 and LAN2 are connected. To create GRE tunnel the user must know the following parameters: 1.
Systems Configuration Wizard The configuration wizard provides a simple way of quickly configuring the device in order to bring it up to basic functionality. The wizard is comprised out of 4 steps and they are as follows: Step 1 (Password change) First, the wizard prompts you to change the default password.
Page 51
Next, you are given the chance to configure your LAN and DHCP server options. For a detailed explanation see LAN under Network. Step 4 (Wifi) The final step allows you to configure your wireless settings in order to set up a rudimentary Access Point.
When you’re done with the configuration wizard, press Finish. Administration Administration properties Administration password 1. Password Enter your new administration password. 2. Confirmation Re-enter your new administration password. Important notes: The only way to gain access to the web management if you forget the administrator password is to reset the device factory default settings.
Backup and reset configuration – download current router settings file to personal computer. Backup archive – reset router settings to their defaut values. Reset to defaults Restore configuration Restore backup – upload and restore router settings file from personal computer. Firmware upgrade Keep settings –...
Page 54
DHCP – The Dynamic Host Configuration Protocol (DHCP) is a network configuration protocol for hosts on Internet Protocol (IP) networks. Computers that are connected to IP networks must be configured before they can communicate with other hosts. The most essential information needed is an IP address, and a default route and routing prefix. DHCP eliminates the manual task by a network administrator.
Need help?
Do you have a question about the RUT500 and is the answer not in the manual?
Questions and answers