Description
The RUT301 is one of the most cost-efficient industrial Ethernet routers in the IoT market, providing robust network connectivity with advanced security features. This Ethernet router comes with five Ethernet ports, two configurable digital I/Os, and a USB 2.0 port for easy compliance with industrial machinery, enterprise, or retail equipment. Additionally, the RUT301 has a pre-configured firewall and supports multiple industrial communication protocols.
Standard package*
- Router RUT301
- 9 W PSU
- Ethernet cable (1.5 m)
- QSG (Quick Start Guide)
- Packaging box
*Standard package contents may differ based on standard order codes.
Feature
Ethernet
| Feature | Details |
|---|---|
| WAN | 1 x WAN port 10/100 Mbps, compliance IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX |
| LAN | 4 x LAN ports, 10/100 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
Network
| Feature | Details |
|---|---|
| Routing | Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP), Policy based routing |
| Network protocols | TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL), VXLAN |
| VoIP passthrough support | H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets |
| Connection monitoring | Ping Reboot, Wget Reboot, Periodic Reboot, LCP and ICMP for link inspection |
| Firewall | Port forward, traffic rules, custom rules, TTL target customisation |
| Firewall status page | View all your Firewall statistics, rules, and rule counters |
| Ports management | View device ports, enable and disable each of them, turn auto-configuration on or off, change their transmission speed |
| Network topology | Visual representation of your network, showing which devices are connected to which other devices |
| DHCP | Static and dynamic IP allocation, DHCP relay, DHCP server configuration, status, static leases: MAC with wildcards |
| QoS / Smart Queue Management (SQM) | Traffic priority queuing by source/destination, service, protocol or port, WMM, 802.11e |
| DDNS | Supported >25 service providers, others can be configured manually |
| DNS over HTTPS | DNS over HTTPS proxy enables secure DNS resolution by routing DNS queries over HTTPS |
| Network backup | VRRP, Wired options, each of which can be used as an automatic Failover |
| Load balancing | Balance Internet traffic over multiple WAN connections |
| Hotspot | Captive portal (hotspot), internal/external Radius server, Radius MAC authentication, SMS authorisation, SSO authentication, internal/external landing page, walled garden, user scripts, URL parameters, user groups, individual user or group limitations, user management, 9 default customisable themes and optionality to upload and download customised hotspot themes |
| SSHFS | Possibility to mount remote file system via SSH protocol |
| Traffic Management | Real-time monitoring, wireless signal charts, traffic usage history |
Security
| Feature | Details |
|---|---|
| Authentication | Pre-shared key, digital certificates, X.509 certificates, TACACS+, Internal & External RADIUS users authentication, IP & login attempts block, time-based login blocking, built-in random password generator |
| Firewall | Preconfigured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI, DMZ, NAT, NAT-T, NAT64 |
| Attack prevention | DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN, SYN-RST, X-mas, NULL flags, FIN scan attacks) |
| VLAN | Port and tag-based VLAN separation |
| WEB filter | Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only |
| Access control | Flexible access control of SSH, Web interface, CLI and Telnet |
| SSL certificate generation | Let's Encrypt and SCEP certificate generation methods |
| 802.1x | Port-based network access control server |
VPN
| Feature | Details |
|---|---|
| OpenVPN | Multiple clients and a server can run simultaneously, 27 encryption methods |
| OpenVPN Encryption | DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256 |
| IPsec | XFRM, IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16) |
| GRE | GRE tunnel, GRE tunnel over IPsec support |
| PPTP, L2TP | Client/Server instances can run simultaneously, L2TPv3, L2TP over IPsec support |
| Stunnel | Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code |
| DMVPN | Method of building scalable IPsec VPNs, Phase 2 and Phase 3 and Dual Hub support |
| SSTP | SSTP client instance support |
| ZeroTier | ZeroTier VPN client support |
| WireGuard | WireGuard VPN client and server support |
| Tinc | Tinc offers encryption, authentication and compression in its tunnels. Client and server support. |
Want to buy in bulk?
Custom Requirements?
Discussion Forum
Welcome to the discussion thread for RUT301 - Industrial Ethernet Router
Feel free to ask questions, share tips or report issues.
Feel free to ask questions, share tips or report issues.