FEATURES
1 x WAN port (can be configured as LAN) 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards,
supports auto MDI/MDIX crossover
3 x LAN ports, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX
crossover
Static routing, Dynamic routing (BGP, OSPF v2, RIP v1/v2, EIGRP, NHRP)
TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, FTP, SMTP, SSL v3, TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet,
SNMP, MQTT, Wake on LAN (WOL), DLNA
H.323 and SIP-alg protocol NAT helpers, allowing proper routing of VoIP packets
Connection monitoring Ping Reboot, Wget reboot, Periodic Reboot, LCP and ICMP for link inspection
VoIP passthrough support
Routing
Network protocols
Port forwards, traffic rules, custom rules
Static and dynamic IP allocation, DHCP Relay, Relayd
Traffic priority queuing by source/destination, service, protocol or port
Supported >25 service providers, others can be configured manually
Network backup VRRP
QoS / Smart Queue
Management (SQM)
DDNS
Internal/external Radius server, captive portal, built in customizable landing page
Possibility to mount remote file system via SSH protocol
Hotspot
SSHFS
Firewall
DHCP
LAN
ETHERNET
WAN
NETWORK
Multiple clients and a server can run simultaneously, 12 encryption methods
DES-CBC, RC2-CBC, DES-EDE-CBC, DES-EDE3-CBC, DESX-CBC, BF-CBC, RC2-40-CBC, CAST5-CBC, RC2-64-CBC, AES-128-CBC,
OpenVPN Encryption AES-192-CBC, AES-256-CBC
VPN
OpenVPN
Pre-shared key, digital certificates, X.509 certificates
Pre-configured firewall rules can be enabled via WebUI, unlimited firewall configuration via CLI; DMZ; NAT; NAT-T
DDOS prevention (SYN flood protection, SSH attack prevention, HTTP/HTTPS attack prevention), port scan prevention (SYN-FIN,
SYN-RST, X-mas, NULL flags, FIN scan attacks)
Attack prevention
Authentication
Firewall
Port and tag based VLAN separation
Blacklist for blocking out unwanted websites, Whitelist for specifying allowed sites only
VLAN
WEB filter
Access control Flexible access control of TCP, UDP, ICMP packets, MAC address filter
IKEv1, IKEv2, with 5 encryption methods for IPsec (DES, 3DES, AES128, AES192, AES256)
GRE tunnel
IPsec
GRE
Client/Server instances can run simultaneously, L2TPv3 support
Proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the program’s code
PPTP, L2TP
Stunnel
Method of building scalable IPsec VPNs
SSTP client instance support
DMVPN
SSTP
SECURITY
Respond to one ID in range [1;255] or any
Modbus TCP custom register block, which allows to read/write to a file inside the router, and can be used to extend Modbus
Custom registers TCP slave functionality
MODBUS TCP SLAVE
ID filtering
Allow remote access Allow access through WAN
ZeroTier VPN client support
WireGuard VPN client and server support
ZeroTier
WireGuard