Teltonika Oxa – embedded networking system
Teltonika Oxa is an embedded IoT gateway for integration into OEM and industrial equipment. It combines LTE Cat 4, one Gigabit Ethernet port and RutOS. A digital input and an open-collector output support equipment integration. RMS enables remote administration, while Modbus TCP, DNP3 and OPC UA support industrial communication. Supply input is 9–30 V DC. Passive PoE uses a different power arrangement from standardized IEEE PoE.
Technical specifications
Mobile
| Mobile module | 4G LTE Cat 4 up to 150 DL/50 UL Mbps; 3G up to 21 DL/5.76 UL Mbps; 2G up to 236.8 DL/236.8 UL kbps |
|---|---|
| 3GPP Release | Release 11 |
| Status | Cellular identity and radio diagnostics: IMSI, ICCID, operator/state, connection/network type, bandwidth/band, RSSI, SINR, RSRP, RSRQ, EC/IO, RSCP, traffic counters, LAC/TAC/cell ID, ARFCN/UARFCN/EARFCN and MCC/MNC. |
| SMS | SMS status/configuration; email, HTTP and SMS forwarding; scheduling, automatic replies and SMPP. |
| USSD | Send and read USSD messages. |
| Block/Allow list | Operator or country based block/allow lists. |
| Multiple PDN | Multiple PDNs for separate network connections and services. |
| Band management | Band locking and active-band display. |
| SIM PIN code management | Set, change or disable the SIM PIN. |
| APN | Auto APN |
| Bridge | Bridge the cellular provider connection to a LAN device. |
| Passthrough | Assign the cellular WAN address to a LAN device. |
Ethernet
| ETH | 1 x ETH port, 10/100/1000 Mbps, compliance with IEEE 802.3, IEEE 802.3u, 802.3az standards, supports auto MDI/MDIX crossover |
|---|
System Characteristics
| CPU | ARM Cortex-A7 1.3 GHz |
|---|---|
| RAM | 128 MB, DDR2 |
| FLASH storage | 512 MB, SPI Flash |
Input/Output
| Input | 1 x Digital Input, 0 - 6 V detected as logic low, 8 - 30 V detected as logic high |
|---|---|
| Output | 1 x Digital Output, Open collector output, max output 30 V, 300 mA |
| Events | Email, RMS, SMS |
| I/O juggler | Trigger events from configurable I/O conditions. |
Power
| Connector | 4-pin industrial DC power socket |
|---|---|
| Input voltage range | 9 – 30 VDC, reverse polarity protection; surge protection >31 VDC 10us max |
| PoE (passive) | Passive PoE through LAN1: Mode B, 9–30 VDC. Not compatible with IEEE 802.3af/at/bt. |
| Power consumption | < 5 W |
Physical Interfaces
| Ethernet | 1 x RJ45 port, 10/100/1000 Mbps |
|---|---|
| I/O’s | 1 x Digital Input, 1 x Digital Output on 4-pin power connector |
| Status LEDs | 3 x connection type status LEDs, 5 x connection strength LEDs, 2 x LAN status LEDs, 1x Power LED |
| SIM | 1 x SIM slot (Mini SIM – 2FF), 1.8 V/3 V |
| Power | 1 x 4-pin power connector |
| Antennas | 1 x SMA for Mobile |
| USB | 1 x Virtual network interface via micro USB |
| Reset | Reboot/User default reset/Factory reset button |
Physical Specification
| Dimensions (W x H x D) | 70 x 18.2 x 67.7 mm |
|---|---|
| Weight | 36 g |
Operating Environment
| Operating temperature | -40 °C to 75 °C |
|---|
Network
| Routing | Static, policy based and dynamic routing; configurable routing rules. |
|---|---|
| Network protocols | TCP, UDP, IPv4, IPv6, ICMP, NTP, DNS, HTTP, HTTPS, SFTP, FTP, SMTP, SSL/TLS, ARP, VRRP, PPP, PPPoE, UPNP, SSH, DHCP, Telnet, SMPP, SNMP, MQTT, Wake On Lan (WOL), VXLAN |
| VoIP passthrough support | NAT helpers for H.323 and SIP ALG. |
| Connection monitoring | Ping/Wget and periodic reboot; LCP/ICMP link checks. |
| Firewall | Port forwarding, traffic/custom rules and adjustable TTL targets. |
| Firewall status page | Firewall rules, counters and statistics in the status view. |
| Port management | Enable/disable ports; configure speed and auto-negotiation. |
| Network topology | Topology view of connected network devices. |
| Hotspot | Captive portal with internal/external RADIUS, RADIUS MAC, SMS and SSO authentication; internal/external landing page, walled garden, scripts, URL parameters, users/groups and limits; 9 editable themes with theme import/export. |
| DHCP | Static/dynamic allocation, DHCP relay/server, status and static MAC leases with wildcards. |
| QoS / Smart Queue Management (SQM) | Priority queues by source/destination, service, protocol or port; WMM and 802.11e. |
| DDNS | More than 77 preconfigured providers; additional providers configurable manually. |
| DNS over HTTPS | DNS proxy using HTTPS for encrypted DNS queries. |
| Network backup | Automatic failover options: cellular, wired and VRRP. |
| SSHFS | Mount remote file systems through SSH. |
| Traffic Management | Live traffic monitoring, radio-signal charts and usage history. |
Security
| Authentication | PSK, digital/X.509 certificates, TACACS+ and internal/external RADIUS; IP/login blocking, timed lockouts and random password generation. |
|---|---|
| Firewall | WebUI presets and CLI configuration; DMZ, NAT, NAT-T and NAT64. |
| Attack prevention | DoS protections for SYN flood, SSH and HTTP/HTTPS; scan detection for SYN-FIN, SYN-RST, X-mas, NULL and FIN. |
| VLAN | Port based and tagged VLAN separation. |
| Mobile quota control | Cellular data limits with period, start time, warning threshold and notification number. |
| WEB filter | Website blocklists and allowlists. |
| Access control | Access rules for SSH, WebUI, CLI and Telnet. |
| Certificate Manager | Create CA, server/client, Let’s Encrypt and SCEP certificates. |
VPN
| OpenVPN | Simultaneous server and multiple clients; 27 encryption options. |
|---|---|
| OpenVPN Encryption | DES-CBC 64, RC2-CBC 128, DES-EDE-CBC 128, DES-EDE3-CBC 192, DESX-CBC 192, BF-CBC 128, RC2-40-CBC 40, CAST5-CBC 128, RC2-64-CBC 64, AES-128-CBC 128, AES-128-CFB 128, AES-128-CFB1 128, AES-128-CFB8 128, AES-128-OFB 128, AES-128-GCM 128, AES-192-CFB 192, AES-192-CFB1 192, AES-192-CFB8 192, AES-192-OFB 192, AES-192-CBC 192, AES-192-GCM 192, AES-256-GCM 256, AES-256-CFB 256, AES-256-CFB1 256, AES-256-CFB8 256, AES-256-OFB 256, AES-256-CBC 256 |
| IPsec | XFRM, IKEv1, IKEv2, with 14 encryption methods for IPsec (3DES, DES, AES128, AES192, AES256, AES128GCM8, AES192GCM8, AES256GCM8, AES128GCM12, AES192GCM12, AES256GCM12, AES128GCM16, AES192GCM16, AES256GCM16) |
| GRE | GRE and GRE over IPsec tunnels. |
| PPTP, L2TP | Concurrent client/server instances; L2TPv3 and L2TP over IPsec. |
| Stunnel | TLS proxy for existing client/server applications. |
| DMVPN | Scalable IPsec VPN: phase 2, phase 3 and dual-hub operation. |
| SSTP | SSTP client. |
| ZeroTier | ZeroTier client. |
| WireGuard | WireGuard client and server. |
| Tinc | Tinc client/server with encryption, authentication and compression. |
BacNET
| Supported modes | Router |
|---|---|
| Supported connection types | IP |
| Configuration options | Multiple BACnet/IP interfaces, network-number assignment and preset BDT entries for BBMD. |
OPC UA
| Supported modes | Client, Server |
|---|---|
| Supported connection types | TCP |
MODBUS
| Supported modes | Server, Client |
|---|---|
| Supported connection types | TCP |
| Custom registers | File backed custom Modbus TCP register blocks for read/write requests. |
| Supported data formats | 8-bit: INT, UINT; 16-bit: INT, UINT (MSB or LSB first); 32-bit: float, INT, UINT (ABCD (big-endian), DCBA (little-endian), CDAB, BADC), HEX, ASCII |
Data to Server
| Protocol | HTTP(S), MQTT, Azure MQTT |
|---|---|
| Data to server | Collect parameters across sources/protocols and transmit to one server; custom Lua scripts supported. |
MQTT Gateway
| Modbus MQTT Gateway | Read Modbus-server data and send commands through an MQTT broker. |
|---|
DNP3
| Supported modes | Station, Outstation |
|---|---|
| Supported connection | TCP |
DLMS/COSEM
| DLMS Support | Utility-meter data exchange using DLMS. |
|---|---|
| Supported modes | Client |
| Supported connection types | TCP |
API
| Teltonika Networks Web API (beta) support | Configurable API endpoints to read/change device data; developer documentation available. |
|---|
Site Manager
| Supported modes | Manager |
|---|---|
| Functionalities | Manage TAP access points and Teltonika managed switches: pairing/grouping, FOTA, status, scheduled reboot with ping/Wget checks, SSIDs and VLANs. |
Monitoring & Management
| WEB UI | HTTP/HTTPS administration: status, settings, firmware, CLI, diagnostics, remote/event/system/kernel logs and update notifications. |
|---|---|
| FOTA | Server based firmware updates with notifications. |
| SSH | SSH (v1, v2) |
| SMS | Status and configuration by SMS. |
| Call | Call triggered reboot/status, cellular and output switching; timed answer/hang-up. |
| TR-069 | OpenACS, EasyCwmp, ACSLite, tGem, LibreACS, GenieACS, FreeACS, LibCWMP, Friendly tech, AVSystem |
| MQTT | MQTT Broker, MQTT publisher |
| SNMP | SNMP (v1, v2, v3), SNMP Trap, Brute force protection |
| JSON-RPC | Management API through HTTP/HTTPS. |
| RMS | Teltonika Remote Management System (RMS) |
IoT Platforms
| ThingWorx | Monitor WAN type/IP, operator, cellular signal and network type. |
|---|---|
| Cumulocity - Cloud of Things | Monitor device/revision/serial, WAN, cell ID, ICCID/IMEI, connection, operator and signal; remote reboot and firmware updates. |
| Azure IoT Hub | Cloud telemetry through Data to Server; RutOS API direct methods; Plug and Play with Device Provisioning Service. |
| AWS IoT Core | AWS IoT integration with device API calls through AWS Jobs. |
Firmware/Configuration
| WEB UI | Local/server firmware update, configuration profiles and backups. |
|---|---|
| FOTA | Firmware update. |
| RMS | Batch firmware/configuration updates for multiple devices. |
| Keep settings | Retain configuration during firmware updates. |
| Factory settings reset | Restore manufacturer defaults, including IP, PIN and user data settings. |
FIRMWARE CUSTOMISATION
| Operating system | RutOS (OpenWrt based Linux OS) |
|---|---|
| Supported languages | Busybox shell, Lua 5.1, C, C++, Java, Python |
| Development tools | SDK with build environment. |
| GPL customization | Customize firmware branding, colours, logos and web applications. |
| Package Manager | Install additional software packages on the device. |
Ordering version and package
Hardware family EBG140. The manufacturer lists EBG1400AAA00 for EMEA: Oxa, quick start guide and packaging; power supply not included. Package contents depend on the complete order code.
| LTE-FDD | B1, B3, B7, B8, B20, B28A |
|---|---|
| LTE-TDD | B38, B40, B41 |
| 3G / 2G | B1, B8 / B3, B8 |
| Region | EMEA; manufacturer excludes Russia, Belarus and Iran |
| HS / HTS | 851762 / 8517.62.00 |
Accessories with manufacturer-listed compatibility
Check connector, regional version and any limitations on the accessory page.
- Teltonika PR324EUB – EU Single Port Gigabit Passive PoE Injector, 24 W
- Teltonika PR3PDNP0 – DIN Rail Power Supply, 20 W, 12 V
- Teltonika PR2PP10B – 4-Pin To 4-Pin Power Cable
- Teltonika PR4MK04K – 4-Pin Plug With Contact Terminals
- Teltonika PR5MEC21 – 4-Pin Power Adapter With I/O Access
- Teltonika PR2PD01B – 4-Pin To Barrel Socket Adapter
- Teltonika PR2FK20M – Power Cable With 4-Way Screw Terminal
- Teltonika PR2AM20M – Automotive Power Supply
- Teltonika PR3PUAU3 – AU Power Supply, 9 W
- Teltonika PR3PUUS3 – US Power Supply, 9 W
- Teltonika PR3PUUK3 – UK Power Supply, 9 W
- Teltonika PR3PUEU3 – EU Power Supply, 9 W
- Teltonika PR3PUJP3 – JP Power Supply, 9 W
- Teltonika PR3PUPS3 – Universal Power Supply, 9 W
- Teltonika BAT120000000 – Bat120 – Uninterruptible Power Supply
- Teltonika PR2VM20M – SMA Cable Extension
- Teltonika PR1AS420 – Mobile Adhesive SMA Antenna
- Teltonika PR1US450 – Angled Compact Mobile SMA Antenna
- Teltonika PR1CS450 – Straight Compact Mobile SMA Antenna
- Teltonika PR1US440 – Mobile SMA Antenna
- Teltonika PR1KS210 – Mobile Magnetic SMA Antenna
- Teltonika PR5MEC32 – RJ45 Dust Covers
- Teltonika PR5MEC19 – Sim Adapter Kit
- Teltonika PR2US08M – USB 2.0 Type A To Micro-USB Type B Cable
- Teltonika PR2LA15B – Ethernet Cable 1.5M
Documentation and downloads
- Manufacturer page, datasheet and downloads
- Quick start guide
- Firmware-Downloads
- User manual
- Certifications and approvals
- Software Development Kit
- GPL-Downloads
- Measurements and 3D models
- Manufacturer knowledge base
- API developer documentation
Technical information checked against the linked manufacturer page on 17 October 2026. Radio bands, approvals and package contents can depend on the full order code and region. Software features depend on firmware, configuration and any additional packages or licences. Price and availability are confirmed on enquiry.
Reviews
There are no reviews yet.