FEATURES

1 x WAN port (can be configured as LAN) 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards,

supports auto MDI/MDIX crossover

3 x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX

crossover

Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP)

TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet,

SNMP, MQTT, Wake on LAN (WOL), DLNA

H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets

Connection monitoring Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection

VoIP passthrough support

Routing

Network protocols

Port forwards, traffic rules, custom rules

Static and dynamic IP allocation, DHCP Relay, Relayd

Traffic priority queuing by source/destination, service, protocol or port

Supported >25 service providers, others can be configured manually

Network backup VRRP

QoS / Smart Queue

Management (SQM)

DDNS

Internal/external Radius server, captive portal, built in customizable landing page

Possibility to mount remote file system via SSH protocol

Hotspot

SSHFS

Firewall

DHCP

LAN

ETHERNET

WAN

NETWORK

Multiple clients and a server can run simultaneously, 12 encryption methods

DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC,

OpenVPN Encryption AES-192-CBC, AES-256-CBC

VPN

OpenVPN

Pre-shared key, digital certificates, X.509 certificates

Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T

DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN,

SYN-RST, X-mas, NULL flags, FIN scan attacks)

Attack prevention

Authentication

Firewall

Port and tag based VLAN separation

Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only

VLAN

WEB filter

Access control Flexible access control of TCP, UDP, ICMP packets, MAC address filter

IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256)

GRE tunnel

IPsec

GRE

Client/Server instances can run simultaneously, L2TPv3 support

Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code

PPTP, L2TP

Stunnel

Method of building scalable IPsec VPNs

SSTP client instance support

DMVPN

SSTP

SECURITY

Respond to one ID in range [1;255] or any

Modbus TCP custom register block, which allows to read/write to a file inside the router, and can be used to extend Modbus

Custom registers TCP slave functionality

MODBUS TCP SLAVE

ID filtering

Allow remote access Allow access through WAN

ZeroTier VPN client support

WireGuard VPN client and server support

ZeroTier

WireGuard