Configurations and device-specific data

[JP-Rotec]

Currently we have a few (5) RUTX10 devices in RMS. All these devices are used for the same purpose and should have the same configuration. Each device also has a VPN hub configured.

When a new RUTX10 (D6) must be added, we are currently exporting a backup (.tar.gz) from an existing device (D5) and restoring that backup on D6. After restoring the configuration backup we create a VPN hub for D6.

The problem is that restoring a backup to D6 from another device (D5), will also include the VPN hub connectivity configuration. So in the D6 RUTX10 UI, you will see 2 OpenVPN clients: One for the D5 VPN hub and one for the D6 VPN hub.

This causes problems when connecting to the D6 VPN hub. We had to learn the hard way that you then have to manually remove the D5 VPN client configuration from the D6.
Here’s an example of how VPN failed for D6 in those cases.

This can be explained with the tcpdump of the D6 RUTX10:
– Ping request 1
10:45:29.674344 tun_c_rms_tv3AU In IP 192.168.255.10 > 10.11.12.1: ICMP echo request, id 1, seq 107, length 40
10:45:29.674628 tun_c_rms_tv3AU Out IP 10.11.12.1 > 192.168.255.10: ICMP echo reply, id 1, seq 107, length 40

– Ping request 2
10:45:30.696021 tun_c_rms_tv3AU In IP 192.168.255.10 > 10.11.12.1: ICMP echo request, id 1, seq 108, length 40
10:45:30.696236 tun_c_rms_KhymH Out IP 10.11.12.1 > 192.168.255.10: ICMP echo reply, id 1, seq 108, length 40

As you can see the failed ‘ping request 2’ tries to respond over the wrong VPN tunnel (KhymH instead of tv3AU). This is because D6 has 2 VPN client configurations, the one from D5 (KhymH) and the one from D6 (tv3AU).

This leaves me with 2 questions:

1. What is the proper way to copy device configuration to a new device, without device-specific stuff like VPN hub connectivity?
2. How is it possible that in this case the response goes through that wrong tunnel? D6 is not even added to the D5 VPN hub in RMS and it seems a lot more logical that a response should be passed through the tunnel from which it arrived (tv3AU).

[Matas]

Hello,

@JP-Rotec

What is the proper way to copy device configuration to a new device, without device-specific stuff like VPN hub connectivity?

Definitely look into setting up a template for your devices. These are set up directly in RMS, and more information can be found here: RMS Device configuration - Teltonika Networks Wiki

@JP-Rotec

How is it possible that in this case the response goes through that wrong tunnel? D6 is not even added to the D5 VPN hub in RMS and it seems a lot more logical that a response should be passed through the tunnel from which it arrived (tv3AU).

Not sure if I understood this question correctly, but are you asking why pings are going through although the VPN tunnel is configured on a device that isn’t even added to the VPN Hub? I’d need more elaboration on this, if possible.

Regards,
M.

[JP-Rotec]

VPN issues

Okay let me clarify the situation with the devices.
After registering D5 device and creating a VPN Hub for D5, the result will be:

Device name	RUTX10	RMS
D5	Contains VPN connection details for D5 Hub	Has a registered D5 device and a VPN hub that has D5 as a client

Then I export a configuration backup (.tar.gz) from the D5 device.
Then after registering the D6 device and applying the D5 configuration backup to it:

Device name	RUTX10	RMS
D5	Contains VPN connection details for D5 Hub	Has a registered D5 device and a VPN hub that has D5 as a client
D6	Contains VPN connection details for D5 Hub	Has a registered D6 device

Then I create a new VPN hub with D6 as a client:

Device name	RUTX10	RMS
D5	Contains VPN connection details for D5 Hub	Has a registered D5 device and a VPN hub that has D5 as a client
D6	Contains VPN connection details for D5 AND D6 Hub	Has a registered D6 device and a VPN hub that has D6 as a client

So the problem is that D6 has VPN connection details to BOTH the D5 and D6 VPN hubs. This causes the issues I mentioned in the post above.

Configuration

I think the way of doing configurations as you suggested would solve this issue, as the VPN connection details would no longer be copied from D5 to D6.
There are a few issues I have with this way of configuration though:

1. The wiki article link you sent was last updated in March 2025, in the meantime the RMS environment has had a lot of changes and UI updates.
2. The configuration templates currently provide no way to install packages, the only thing package-related you can do is turn on/off the package manager.
3. The configuration templates currently provides no way to easily copy the complete device configuration from one device to another.

[Matas]

Hello,

@JP-Rotec

The wiki article link you sent was last updated in March 2025, in the meantime the RMS environment has had a lot of changes and UI updates.

While you’re correct, the navigation & buttons should still have the same exact positions, all that really has changed was the design.

@JP-Rotec

The configuration templates currently provide no way to install packages, the only thing package-related you can do is turn on/off the package manager.

Regarding package installs, you may have to utilize RMS Task Manager - some examples can be found here: RMS Task Manager Examples - Teltonika Networks Wiki
More details overall here: RMS Task Manager - Teltonika Networks Wiki

@JP-Rotec

The configuration templates currently provides no way to easily copy the complete device configuration from one device to another.

Need some elaboration on this as to what you exactly mean. In theory, you set up one device by hand with the Device Configuration functionality, and then you save it as a template, which you are able to later apply with a single click onto a different device.

Regards,
M.