Skip to main contentSkip to search
Skip to main content

Teltonika Router - OpenRoaming Configuration

Configure OpenRoaming on Teltonika RUTX and RUT series industrial routers with IronWiFi RADIUS authentication and Hotspot 2.0. This guide covers RADIUS server configuration, roaming consortium OI setup, and NAI realm configuration through the RutOS web interface and CLI.

Quick Start​

  1. Enable OpenRoaming in IronWiFi Console and note RADIUS details
  2. Configure RADIUS server in Teltonika web interface
  3. Create wireless interface with WPA2-Enterprise
  4. Enable Hotspot 2.0 / 802.11u
  5. Add roaming consortium OIs: 
    5A03BA0000
    , 
    5A03BA0200
    , 
    004096
  6. Configure NAI realms for 
    ironwifi.com

Supported Devices​

  • RUTX Series - RUTX08, RUTX09, RUTX10, RUTX11, RUTX12, RUTX14, RUTX50
  • RUT Series - RUT950, RUT955, RUT956 (with Hotspot 2.0 support)

Prerequisites​

In Teltonika:​

  • Teltonika router with RutOS 7.x or later
  • Firmware with Hotspot 2.0 / 802.11u support
  • Network connectivity to IronWiFi RADIUS servers

In IronWiFi Console (complete these first):​

  1. Create or select a Network in the IronWiFi Console
  2. Enable OpenRoaming from the dropdown menu
  3. Configure roaming type (Settled or Settlement-free)
  4. Note the RADIUS server details (IP address, port, and shared secret)

OpenRoaming Overview​

Teltonika routers support OpenRoaming through:

  • Hotspot 2.0 (Passpoint) - Automatic network discovery
  • 802.11u - Interworking protocol
  • WPA2-Enterprise - Secure RADIUS authentication

This makes Teltonika ideal for:

  • Industrial IoT - Factory and warehouse WiFi
  • Transportation - Vehicle and fleet connectivity
  • Remote sites - Oil, gas, and utility installations
  • Kiosks - Retail and service deployments

RutOS Web Interface Configuration​

Step 1: Configure RADIUS Server​

  1. Log in to Teltonika router web interface
  2. Navigate to Services > Hotspot > RADIUS
  3. Configure Authentication Server:
    • Server Address: IronWiFi RADIUS IP
    • Server Port: Customer Authentication Port
    • Shared Secret: Your RADIUS secret
  4. Configure Accounting Server:
    • Server Address: IronWiFi RADIUS IP
    • Server Port: Customer Accounting Port
    • Shared Secret: Your RADIUS secret
  5. Click Save

Step 2: Create Wireless Interface​

  1. Navigate to Network > Wireless
  2. Click Add to create new interface
  3. Configure basic settings:
    • SSID: OpenRoaming
    • Mode: Access Point
    • Encryption: WPA2-Enterprise (WPA2-EAP)
  4. In Security settings:
    • Authentication: RADIUS
    • RADIUS Profile: Select configured profile

Step 3: Enable Hotspot 2.0​

  1. In wireless interface settings, find Advanced Settings
  2. Locate Hotspot 2.0 or 802.11u section
  3. Enable Hotspot 2.0
  4. Enable Interworking (802.11u)

Step 4: Configure 802.11u Settings​

Interworking:

SettingValue
Access Network TypeFree public network
Internet AccessEnabled
ASRADisabled
ESRDisabled

Venue Information:

SettingValue
Venue GroupBusiness
Venue TypeUnspecified Business
Venue NameYour Location Name

Step 5: Configure Domain Name​

  1. Find Domain Name setting
  2. Enter: 
    ironwifi.net

Step 6: Configure Roaming Consortium​

Add Organization Identifiers:

OIDescription
5A03BA0000
WBA OpenRoaming (Settlement-free)
BAA2D00000
WBA OpenRoaming (Settled)
004096
Cisco OpenRoaming

Step 7: Configure NAI Realm​

  1. Find NAI Realm section
  2. Add realm configuration:
    • Realm: 
      ironwifi.com
    • EAP Method: EAP-TTLS
    • Inner Authentication: PAP

Step 8: Apply Configuration​

  1. Click Save & Apply
  2. Wait for wireless interface to restart

CLI Configuration​

SSH Access​

Connect via SSH:

UCI Configuration for OpenRoaming​

Advanced Configuration​

Multiple Domain Names​

For broader OpenRoaming compatibility:

WAN Metrics​

Configure WAN link information for client selection:

Connection Capability​

Define available services:

Operator Name​

Set operator friendly name:

3GPP Cellular Information​

For carrier offload:

RMS (Remote Management System) Configuration​

For fleet deployments using Teltonika RMS:

Configure via RMS​

  1. Log in to RMS
  2. Select device or device group
  3. Navigate to Services > Hotspot
  4. Configure RADIUS and Hotspot 2.0 settings
  5. Push configuration to devices

Template Configuration​

Create configuration template for multiple devices:

  1. In RMS, go to Management > Configuration Templates
  2. Create new template with OpenRoaming settings
  3. Apply template to device groups
  4. Schedule configuration push

Testing OpenRoaming​

Verify Configuration​

Check Hotspot 2.0 status:

Test Client Connection​

iOS:

  • Users with Apple ID should auto-connect
  • Or install OpenRoaming profile from IronWiFi

Android:

  • Enable Passpoint in WiFi settings
  • Sign in with Google account
  • Device auto-connects to OpenRoaming networks

Monitor Connections​

Troubleshooting​

Network Not Discovered​

  1. Verify Hotspot 2.0 Enabled

  2. Check Firmware Version

    • Ensure RutOS version supports HS2.0
    • Update firmware if needed

  3. Verify Wireless Driver

Authentication Failures​

  1. Test RADIUS Connectivity

  2. Check Logs

  3. Verify Secret

    • Confirm RADIUS secret matches IronWiFi configuration

Debug Commands​

Common Issues​

IssueSolution
HS2.0 option not visibleUpdate firmware to latest version
RADIUS timeoutCheck firewall, verify server reachable
Clients don't auto-connectVerify OI and NAI realm configuration
Intermittent failuresCheck for interference, verify signal

Best Practices​

  1. Firmware Updates: Keep RutOS updated for best OpenRoaming support
  2. Use RMS: Centrally manage multiple devices
  3. Test Thoroughly: Verify with multiple Passpoint clients
  4. Monitor: Set up alerts for authentication failures
  5. Documentation: Document your configuration
  6. Backup: Export configuration before changes

Same vendor

Standards & reference

Was this page helpful?