MBMap Registry
  1. Devices
  2. Teltonika
  3. RUT200 / RUT241

Teltonika RUT200 / RUT241 Modbus register map

LTE routers (RUT200 and RUT241): system, mobile data and I/O values over the Modbus server

  • Official
  • 39 registers
  • Revision 2 · 2026-11-10
  • Identity: serial number

Official: Written from the manufacturer's documentation, but not tested on a device yet. Check the map against the manufacturer's documentation before you write to a live device. Tested it? Report a test.

Communication

Protocol
Modbus TCP and RTUdefault
Unit ID
1
TCP port
502default
Serial
9600 8N1 · 9600 baud, 8 data bits, none parity, 1 stop bit
Byte / word order
ABCD · bytes big-endian, words high first
Addresses
0-based

Connection values are defaults: the device may be configured differently.

Map

Registers
39 holding registers
Groups
4
Revision
2 · 2026-11-10
Added
()
File
maps/teltonika/rut200-rut241.mbmap.json · 10 KB · history
SHA-256
eacd0a0e81ea5c2c126ba596fbef8a1f62980e89050e14a0ed6f06c582dd6b24
Manufacturer
teltonika-networks.com

Device identity

What a tool can read to check that this map fits the connected device (SPEC.md section 4.7). Registers with a role are read like any other register.

Registers
RoleRegisterAddressTypeValues
Serial number Serial number holding 39 string[16]

Sources and notes

Source: Teltonika Networks Wiki, "RUT200 Modbus"; https://wiki.teltonika-networks.com/view/RUT200_Modbus; Teltonika Networks Wiki, "RUT241 Modbus"; https://wiki.teltonika-networks.com/view/RUT241_Modbus

  • Teltonika RUT200 and RUT241 LTE routers: the Modbus TCP server and the serial Modbus server both answer with the same system values. The registers are holding registers (function 3 to read, 6 and 16 to write).
  • The manual lists a register address (0-based, as sent on the bus) and a register number (address + 1). This map uses the address.
  • Text values take 2 characters per register. Numbers take 2 registers; the manual gives no word order, so big is assumed.
  • Mobile data counters are in bytes, kilobytes or megabytes, as chosen by the Mobile data type setting of the Modbus server.
  • The server is off by default. Factory settings: TCP port 502, device ID 1 (0 answers to any ID), serial 9600 baud, 8 data bits, no parity, 1 stop bit.
  • With 'Enable custom register block' on, registers from 1025 onward are a user-defined block that is not in this map.
  • Left out because the manual is not clear: Mobile data received last month (SIM1), Mobile data sent last month (SIM1), Mobile data received last week (SIM1), Mobile data sent last week (SIM1), Change APN (length not fixed).
  • Teltonika RUT241 LTE router: the Modbus TCP server and the serial Modbus server both answer with the same system values. The registers are holding registers (function 3 to read, 6 and 16 to write).
AreaAddressNameTypeAccessUnitScaleDescription
HR 1 uint32 ABCD R System uptime
HR 3 int32 ABCD R dBm RSSI
HR 5 int32 ABCD R °C ×0.1
HR 7 string[16] RW
HR 23 string[16] R
HR 39 string[16] R
HR 55 string[16] R
HR 71 string[16] RW
HR 87 string[16] R
HR 103 string[16] R
HR 119 string[16] R
HR 139 uint32 ABCD R The manual calls it an 8-bit unsigned integer but gives two registers; read as one 32-bit number
HR 185 uint32 ABCD R
HR 187 uint32 ABCD R
HR 189 uint32 ABCD R
HR 191 uint32 ABCD R
HR 193 uint32 ABCD R
HR 195 uint32 ABCD R
HR 197 uint32 ABCD R
HR 199 uint32 ABCD R
HR 203 uint16 W Turns WiFi ON or OFF
HR 204 uint16 W Turns mobile data connection ON or OFF
HR 205 uint16 R Index of the active SIM
HR 206 uint16 W Write 1 to reboot the device
HR 292 uint32 ABCD R
HR 294 uint32 ABCD R
HR 296 uint32 ABCD R
HR 298 uint32 ABCD R
HR 324 uint16 R
HR 325 uint16 RW
HR 328 string[8] R
HR 348 string[16] R
HR 364 uint32 ABCD R
HR 366 string[12] R
HR 378 string[12] R
HR 390 uint16 W Turns 2.4GHz WiFi ON or OFF
HR 394 uint32 ABCD RW
HR 396 uint16 W Sends an SMS with content defined in Add SMS (397) register
HR 397 string[90] RW

Help improve this map