Teltonika RUT955 Modbus register map
LTE router with I/O and GPS: system, mobile data and I/O values over the Modbus server
- Official
- 65 registers
- Revision 2 · 2026-11-10
- Identity: serial number
Official: Written from the manufacturer's documentation, but not tested on a device yet. Check the map against the manufacturer's documentation before you write to a live device. Tested it? Report a test.
Communication
- Protocol
- Modbus TCP and RTUdefault
- Unit ID
- 1
- TCP port
- 502default
- Serial
- 9600 8N1 · 9600 baud, 8 data bits, none parity, 1 stop bit
- Byte / word order
- ABCD · bytes big-endian, words high first
- Addresses
- 0-based
Connection values are defaults: the device may be configured differently.
Map
- Registers
- 65 holding registers
- Groups
- 5
- Revision
- 2 · 2026-11-10
- Added
- ()
- File
- maps/teltonika/rut955.mbmap.json · 15 KB · history
- SHA-256
- 5973072a32e4aeb9fa4e23d1add0e5bd7a4aefb49ff2af26a5286dc497d61c51
- Manufacturer
- teltonika-networks.com
Device identity
What a tool can read to check that this map fits the connected device (SPEC.md section 4.7). Registers with a role are read like any other register.
| Role | Register | Address | Type | Values |
|---|---|---|---|---|
| Serial number | Serial number | holding 39 | string[16] |
Sources and notes
- RUT955 Modbus (Teltonika Networks Wiki) · version wiki revision 123083 Modbus Registers: get and set parameter tables
Source: Teltonika Networks Wiki, "RUT955 Modbus"; https://wiki.teltonika-networks.com/view/RUT955_Modbus
- Teltonika RUT955 LTE router with I/O and GPS: the Modbus TCP server and the serial Modbus server both answer with the same system values. The registers are holding registers (function 3 to read, 6 and 16 to write).
- The manual lists a register address (0-based, as sent on the bus) and a register number (address + 1). This map uses the address.
- Text values take 2 characters per register. Numbers take 2 registers; the manual gives no word order, so big is assumed.
- Mobile data counters are in bytes, kilobytes or megabytes, as chosen by the Mobile data type setting of the Modbus server.
- The server is off by default. Factory settings: TCP port 502, device ID 1 (0 answers to any ID), serial 9600 baud, 8 data bits, no parity, 1 stop bit.
- With 'Enable custom register block' on, registers from 1025 onward are a user-defined block that is not in this map.
- Left out because the manual is not clear: Change APN (length not fixed).
| Area | Address | Name | Type | Access | Unit | Scale | Description |
|---|---|---|---|---|---|---|---|
| HR | 1 | uint32 ABCD | R | System uptime | |||
| HR | 3 | int32 ABCD | R | dBm | RSSI | ||
| HR | 5 | int32 ABCD | R | °C | ×0.1 | ||
| HR | 7 | string[16] | RW | ||||
| HR | 23 | string[16] | R | ||||
| HR | 39 | string[16] | R | ||||
| HR | 55 | string[16] | R | ||||
| HR | 71 | string[16] | RW | ||||
| HR | 87 | string[16] | R | ||||
| HR | 103 | string[16] | R | ||||
| HR | 119 | string[16] | R | ||||
| HR | 135 | int32 ABCD | R | ||||
| HR | 137 | int32 ABCD | R | ||||
| HR | 139 | uint32 ABCD | R | The manual calls it an 8-bit unsigned integer but gives two registers; read as one 32-bit number | |||
| HR | 141 | uint32 ABCD | R | ||||
| HR | 143 | float32 ABCD | R | ||||
| HR | 145 | float32 ABCD | R | ||||
| HR | 147 | string[16] | R | Text format (Unix timestamp×1000) | |||
| HR | 163 | string[16] | R | Text format (DDMMYYhhmmss) | |||
| HR | 179 | float32 ABCD | R | ||||
| HR | 181 | uint32 ABCD | R | ||||
| HR | 183 | float32 ABCD | R | ||||
| HR | 185 | uint32 ABCD | R | ||||
| HR | 187 | uint32 ABCD | R | ||||
| HR | 189 | uint32 ABCD | R | ||||
| HR | 191 | uint32 ABCD | R | ||||
| HR | 193 | uint32 ABCD | R | ||||
| HR | 195 | uint32 ABCD | R | ||||
| HR | 197 | uint32 ABCD | R | ||||
| HR | 199 | uint32 ABCD | R | ||||
| HR | 201 | uint16 | RW | ||||
| HR | 202 | uint16 | RW | ||||
| HR | 203 | uint16 | W | Turns WiFi ON or OFF | |||
| HR | 204 | uint16 | W | Turns mobile data connection ON or OFF | |||
| HR | 205 | uint16 | RW | Reading gives the active SIM; writing 1 or 2 selects it, 0 switches to the other one | |||
| HR | 206 | uint16 | W | Write 1 to reboot the device | |||
| HR | 292 | uint32 ABCD | R | ||||
| HR | 294 | uint32 ABCD | R | ||||
| HR | 296 | uint32 ABCD | R | ||||
| HR | 298 | uint32 ABCD | R | ||||
| HR | 300 | uint32 ABCD | R | ||||
| HR | 302 | uint32 ABCD | R | ||||
| HR | 304 | uint32 ABCD | R | ||||
| HR | 306 | uint32 ABCD | R | ||||
| HR | 308 | uint32 ABCD | R | ||||
| HR | 310 | uint32 ABCD | R | ||||
| HR | 312 | uint32 ABCD | R | ||||
| HR | 314 | uint32 ABCD | R | ||||
| HR | 316 | uint32 ABCD | R | ||||
| HR | 318 | uint32 ABCD | R | ||||
| HR | 320 | uint32 ABCD | R | ||||
| HR | 322 | uint32 ABCD | R | ||||
| HR | 324 | uint16 | R | ||||
| HR | 325 | uint16 | RW | ||||
| HR | 328 | string[8] | R | ||||
| HR | 345 | uint16 | RW | ||||
| HR | 346 | float32 ABCD | R | ||||
| HR | 348 | string[16] | R | ||||
| HR | 364 | uint32 ABCD | R | ||||
| HR | 366 | string[12] | R | ||||
| HR | 378 | string[12] | R | ||||
| HR | 390 | uint16 | W | Turns 2.4GHz WiFi ON or OFF | |||
| HR | 394 | uint32 ABCD | RW | The manual calls it an 8-bit unsigned integer but gives two registers; read as one 32-bit number | |||
| HR | 396 | uint16 | W | Sends an SMS with content defined in Add SMS (397) register | |||
| HR | 397 | string[90] | RW |
No registers match
Try part of the name, an address (decimal or 0x hex) or clear the filters.
Help improve this map
- I tested it on a deviceReport whether it worked, even if you did not write the map.
- Suggest a correctionEdit the file on GitHub; it opens a pull request.
- Report a problemA wrong address, type, scale or byte order.
- Read the formatWhat each key of the file means (SPEC.md).