5G network slicing & other RutOS firmware updates

RutOS keeps evolving, and today we're introducing versions 7.22 and 7.23. These firmware updates bring a wide range of additions across the board, from 5G network slicing and two-factor authentication to dark mode, Starlink location details, SMCRoute support, and more. 

Introducing: 5G network slicing 

For 5G SA deployments, this firmware update introduces network slicing as a more precise way to use mobile connectivity.

A single physical 5G infrastructure can be divided into multiple isolated virtual networks, with each slice configured by the mobile operator for specific service requirements, such as lower latency, higher reliability, stronger isolation, or specific traffic priorities. 

When a slice is available, the device can connect to the part of the 5G network intended for a particular application or traffic type, bringing 5G connectivity closer to the needs of each deployment.

Instead of treating all mobile traffic the same way, industrial and enterprise IoT networks can rely on network behaviour defined for the specific service they need to support.

What’s new in UX/UI? 

Starlink location details in WebUI 

WebUI includes additional location parameters for Starlink connections, giving you a clearer view of satellite-based network positioning directly from the router interface.

When monitoring Starlink deployments, these added details help you better understand the connection context without leaving the interface. 

WebUI dark mode 

Among the update's visual improvements, dark mode gives WebUI a more comfortable look for low-light environments and longer configuration sessions. By reducing visual strain, it makes device management easier to handle when working across multiple configuration tasks or extended periods of screen time 

PPTP & SSTP VPN status in WebUI 

WebUI displays status information for PPTP and SSTP connections directly in the interface, giving you a clearer view of tunnel state during setup or troubleshooting. Instead of relying on separate diagnostic tools, you can check connection status faster and get back to what matters. 

Topology support for TAP-series access points 

Teltonika’s TAP100, TAP200, and TAP400 access points can be scanned directly through the Topology application, giving you a clear view of connected devices and the overall network structure.

Managing and identifying what's connected to your network becomes much simpler from a single interface. 

Mobile signal quality coefficient 

Mobile signal quality is calculated using several key signal metrics and displayed both in WebUI and through device LEDs. Rather than checking each metric separately, a single coefficient gives you a quick and straightforward way to evaluate connection quality. 

Industrial protocol updates 

IEC 60870-5-101 Client and IEC 60870-5-101/104 

The IEC 60870-5-101 Client supports serial communication, enabling data collection and monitoring over serial connections. Universal gateway functionality has also been expanded to include IEC 60870-5-101/104, giving you more options for protocol-based integration in industrial and utility networks. 

Serial wildcards for Data Sender MQTT topics 

MQTT topic configuration in Data Sender supports a device serial number wildcard, allowing each device to publish to a unique topic automatically. For large deployments, it eliminates the need for separate manual topic configuration across devices. 

The latest in networking & routing 

SMCRoute support 

Manual multicast routing becomes more controlled with SMCRoute support, allowing you to define and manage multicast routing entries in the kernel and get precise control over how multicast traffic is forwarded between network interfaces. 

It’s especially useful in applications, where multicast streams need to follow a specific path, such as video distribution, monitoring systems, or other multicast-based communication setups. 

DS-Lite for IPv4 connectivity over IPv6 networks 

In IPv6-only networks, DS-Lite keeps IPv4 connectivity available by tunnelling IPv4 traffic over IPv6. Carrier-grade NAT handles access to IPv4 services on the other end, removing the need for native IPv4 infrastructure in this firmware update. 

Multiple DHCP relay servers 

The DHCP relay configuration supports multiple relay servers, giving you more flexibility in networks where requests need to be forwarded to different DHCP destinations. Segmented or more complex network designs can be matched with relay setups built around your specific requirements. 

IPv6 support for DMVPN 

DMVPN extends to IPv6, making dynamic VPN deployments possible in IPv6-based networks. Building scalable VPN architectures no longer requires relying solely on IPv4 addressing, giving you more flexibility in modern network environments. 

FRRouting version 10.2.1 

Version 10.2.1 brings an updated FRRouting package to routing functionality used by BGP, OSPF, RIP, NHRP, EIGRP, BFD, and MPLS. Dynamic routing features receive enhancements within this firmware update, providing your network with the  improvements included in this package version. 

Tailscale version 1.92.3 

Remote access through Tailscale now features an updated package to ensure mesh VPN connectivity remains fully synchronized. For networks that rely on Tailscale to reach devices securely across locations, the update helps maintain compatibility and stable operation. 

Expanded TR-069 management and diagnostics 

Remote management through TR-069 covers a wider set of device and network data in this firmware update. It includes Ethernet interfaces, hosts, NAT port mapping, Wi-Fi access points, cellular information, and DHCPv4 server configuration. Monitoring device behaviour, configuration, and network status across multiple devices becomes more manageable without checking each one manually. 

TR-143 UploadDiagnostics and DownloadDiagnostics support has also been added for remote connection testing. Compatible management platforms can run upload and download diagnostics to evaluate connection performance more directly, going beyond visible status data alone. 

Persistent SNMP ifIndex support 

Network monitoring depends on stable interface data, and changing index values after a restart can disrupt long-term tracking. With persistent SNMP ifIndex support, interface identifiers remain consistent after network restarts, helping monitoring systems maintain cleaner historical data and more reliable records. 

SFTP support for traffic logging 

Traffic logs often contain information you do not want moving across the network unprotected. With SFTP support, log data can be transferred to a remote server over an encrypted connection, keeping sensitive information secure in transit. 

Security updates 

2FA for router login 

Two-factor authentication adds an extra layer of security to router login in this firmware update, requiring an additional verification step before access is granted.

For deployments where multiple users manage devices or remote access is enabled, it helps reduce the risk of unauthorized access caused by exposed or reused credentials. 

IPsec warnings for insecure proposals 

During IPsec configuration, improved warnings help identify insecure proposals before they are applied. Catching weak encryption or authentication settings early reduces the risk of deploying VPN setups with outdated or unsafe security choices. 

SNMP authentication with SHA-256 & SHA-512 

SHA-256 and SHA-512 support brings stronger authentication options to SNMP, helping protect communication between devices and monitoring systems. For networks where SNMP is used to collect device data, stronger algorithms reduce the risk of exposing sensitive monitoring traffic. 

Integrity check for system file verification 

Arriving as part of the firmware update's security additions, a generated filesystem index provides a baseline for verifying specified system files. Comparing the current file state against that index makes it possible to detect unauthorized modifications before they cause any damage. 

Session management for active login control 

You can view active sessions on the device, terminate them manually, and define session timeout settings. Better session control helps limit unattended access and gives you a clearer view of who is connected at all times. 

Kick and block wireless clients from the status page 

When a connected wireless client needs to be removed from the network, you can act directly from the wireless status page. Client kick and block controls make it easier to manage unwanted or problematic connections without navigating through separate configuration menus. 

Share your feedback! 

The latest firmware updates bring improvements across usability, industrial communication, networking, routing, and security. Many of these changes are shaped by real deployment needs and your feedback, so if there is a feature or improvement you would like to see in future releases, we would love to hear from you.  

Share your thoughts through our feedback form.