Mobile
- Mobile module 4G LTE Cat 4 up to 150 DL/50 UL Mbps; 3G up to 21 DL/5.76 UL Mbps; 2G up to 236.8 DL/236.8 UL kbps
- 3GPP Release Release 11
- SIM switch 2 SIM cards, auto-switch cases: weak signal, data limit, SMS limit, roaming, no network, network denied, data connection fail, SIM idle protection
- Status IMSI, ICCID, operator, operator state, data connection state, network type, bandwidth, connected band, signal strength (RSSI), SINR, RSRP, RSRQ, EC/IO, RSCP, data sent/received, LAC, TAC, cell ID, ARFCN, UARFCN, EARFCN, MCC, and MNC
- SMS SMS status, SMS configuration, send/read SMS via HTTP POST/GET, EMAIL to SMS, SMS to EMAIL, SMS to HTTP, SMS to SMS, scheduled SMS, SMS autoreply, SMPP
- USSD Supports sending and reading Unstructured Supplementary Service Data messages
- Black/White list Operator black/white list (by country or separate operators)
- Multiple PDN Possibility to use different PDNs for multiple network access and services
- Band management Band lock, Used band status display
- SIM PIN code management SIM PIN code management enables setting, changing, or disabling the SIM card’s PIN
- APN Auto APN
- Bridge Direct connection (bridge) between mobile ISP and device on LAN
- Passthrough Router assigns its mobile WAN IP address to another device on LAN
Wireless
- Wireless mode 802.11b/g/n (Wi-Fi 4), Access Point (AP), Station (STA)
- Wi-Fi security WPA2-Enterprise: PEAP, WPA2-PSK, WPA-EAP, WPA-PSK, WPA3-SAE, WPA3-EAP, OWE; AES-CCMP, TKIP, Auto-cipher modes, client separation, EAP-TLS with PKCS#12 certificates, disable auto-reconnect, 802.11w Protected Management Frames (PMF)
- SSID/ESSID SSID stealth mode and access control based on MAC address
- Wi-Fi users Up to 100 simultaneous connections
- Wireless Connectivity Features Fast roaming (802.11r), Relayd, BSS transition management (802.11v), radio resource measurement (802.11k)
- Wireless MAC filter Allowlist, blocklist
- Wireless QR code generator Once scanned, a user will automatically enter your network without needing to input login information
- TravelMate Forward Wi-Fi hotspot landing page to a subsequent connected device
Ethernet
- WAN 1 x WAN port 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX
- LAN 3 x LAN ports, 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u standards, supports auto MDI/MDIX
Security
- Authentication Pre-shared key, digital certificates, X.509 certificates, TACACS+, Internal & External RADIUS users authentication, IP & login attempts block, time-based login blocking, built-in random password generator
- Firewall Preconfigured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64
- Attack prevention DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks)
- VLAN Port and tag-based VLAN separation
- Mobile quota control Mobile data limit, customizable period, start time, warning limit, phone number
- WEB filter Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only
- Access control Flexible access control of SSH, Web interface, CLI and Telnet
- SSL certificate generation Let’s Encrypt and SCEP certificate generation methods
VPN
- OpenVPN Multiple clients and a server can run simultaneously, 27 encryption methods
- OpenVPN Encryption DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256
- IPsec XFRM, IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16)
- GRE GRE tunnel, GRE tunnel over IPsec support
- PPTP, L2TP Client/Server instances can run simultaneously, L2TPv3, L2TP over IPsec support
- Stunnel Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code
- DMVPN Method of building scalable IPsec VPNs, Phase 2 and Phase 3 and Dual Hub support
- SSTP SSTP client instance support
- ZeroTier ZeroTier VPN client support
- WireGuard WireGuard VPN client and server support
- Tinc Tinc offers encryption, authentication and compression in it’s tunnels. Client and server support.
