GL.iNet Beryl 7 GL-MT3600BE

This is a compact dual-band router built on IEEE 802.11be with WireGuard and OpenVPN support. Built on a quad-core MediaTek 2.0 GHz processor with 512 MB of RAM, the Beryl 7 delivers VPN speeds up to ~1000 Mbps — a level of performance that was previously only available on much more expensive devices. It is the solution for anyone who needs a reliable, secure internet connection.

Gigabit-class VPN performance

The Beryl 7 supports WireGuard (real-world speed ~1000 Mbps) and OpenVPN with DCO support (~1000 Mbps), making it compatible with most commercial VPN services. For the best compatibility, speed and privacy protection, we recommend GemiGuard VPN. Once the VPN connection is configured, all traffic from every device on the network is automatically routed through the encrypted tunnel — without installing a separate VPN client on each device. The Beryl 7 supports running a VPN client and a VPN server simultaneously (VPN Cascading), letting you connect remotely to local network resources while also using a VPN client for internet access.

IEEE 802.11be and modern networking technologies

The Beryl 7 supports IEEE 802.11be technologies, including Multi-Link Operation (MLO), 4K QAM and preamble puncturing, which deliver a stable connection and minimal latency even in environments crowded with wireless networks. Maximum Wi-Fi speed is 688 Mbps (2.4 GHz) and 2882 Mbps (5 GHz). The device serves up to 120 client devices simultaneously.

Connectivity and interfaces

The router is equipped with two 2.5G Ethernet ports (1 WAN + 1 LAN) to make full use of gigabit and multi-gigabit internet plans. The USB 3.0 port supports connecting external drives to set up a network file server via Samba or WebDAV, and also supports 4G/5G USB dongles to provide internet access over a mobile network — a convenient alternative when no wired connection is available.

Power and blackout resilience

The Beryl 7 is powered via USB Type-C with Power Delivery support (5 V / 3 A, 9 V / 3 A, 12 V / 2.5 A). This means the device can be powered from a laptop charger, a phone charger or any PD-compatible adapter. Power consumption is under 12 W. During a blackout, the Beryl 7 keeps running off a power bank, ensuring uninterrupted internet access. Combined with a 4G/5G USB dongle, this is a complete backup solution for staying connected when both the power and wired internet go down.

Physical switch for quick control

The Beryl 7 has a physical switch on its body whose function can be configured through the web admin panel. For example, a single flip of the switch can turn a VPN connection, AdGuard or other features on or off — without logging into the control panel.

Privacy and cybersecurity with GemiGuard Mirage

The GemiGuard Mirage package is available for the Beryl 7 — our software solution for boosting the privacy, anonymity and cybersecurity of GL.iNet devices. Mirage for the GL-MT3600BE includes: BSSID and MAC address randomization, system log wiping, removal of the connected Wi-Fi client history, hardened encrypted DNS and other security enhancements. These features significantly reduce the device’s digital footprint and protect the user’s privacy.

Beryl 7 vs Flint 3 / Flint 3e — which model to choose?

Customers often compare the Beryl 7 with the Flint 3 (GL-BE9300) and Flint 3e (GL-BE6500). The Beryl 7 offers very high VPN performance (~1000 Mbps) and dual-band IEEE 802.11be at a price that is 25–35% lower than the Flint 3 and 3e. The Flint 3 is a more powerful tri-band router in every respect, with more Ethernet ports and higher Wi-Fi throughput, designed for the most demanding use cases or networks with a large number of devices. The Flint 3e is dual-band, but also larger and more expensive. If you need a compact, high-performance VPN router with IEEE 802.11be at an affordable price — the Beryl 7 is an excellent choice.

Networking features and protection

The Beryl 7 supports WPA3 encryption, Cloudflare DNS over TLS and DNS over HTTPS to protect DNS queries from interception, the IPv4 and IPv6 protocols, and a built-in firewall with port forwarding, open ports and DMZ. The device works in several modes: router, access point (AP), wireless bridge and WDS — allowing it to be flexibly integrated into any existing network. Multi-WAN is supported with load balancing and automatic failover.

OpenWrt, custom firmware and full technical support

The OpenWrt operating system gives you full control over settings and additional options. GemiGuard is not just a store. We are a team of system administrators, network engineers and DevOps specialists with deep expertise in OpenWrt and GL.iNet. We develop custom firmware, provide full technical support throughout the entire device lifecycle, handle warranty cases directly (repair or replacement), and can build a fully tailored solution for your needs.

What’s in the box

GL.iNet Beryl 7 router (GL-MT3600BE), USB-C power cable, power supply with adapters (EU, UK, AU), Ethernet cable, user manual, warranty card.

Full technical specifications

Wi-Fi standards

802.11b · 802.11g · 802.11n · 802.11a · 802.11ac · 802.11ax · 802.11be

Wi-Fi bands

2.4 GHz · 5 GHz

Wi-Fi speed

2882 Mbps (5 GHz) · 688 Mbps (2.4 GHz)

Ethernet interfaces

2 (1 WAN + 1 LAN)

Ethernet speed

1 Gbps · 10 Mbps · 100 Mbps · 2.5 Gbps

VPN protocols

OpenVPN · OpenVPN (with DCO support) · WireGuard

WireGuard speed

~1000 Mbps

OpenVPN speed

~1000 Mbps (DCO)

Network modes

wireless bridge · wired bridge · router · access point

Operating system

OpenWrt

Processor

MediaTek MT7987A, quad-core, 2.0 GHz

RAM

DDR4 512 MB

Storage

512 MB NAND flash memory

USB ports

1x USB 3.0 Type-A

Antennas

2 pcs., external

Power port

USB Type-C

Supply voltage

5 V

Power consumption

< 4.5 W

Operating temperature

0–40° C

Color

White

Dimensions

120 × 83 × 34 mm

Weight

205 g

Humidity

5% - 95%, non-condensing

Warranty

24 months

Certifications

CE · FCC · IC · MIC · RCM · REACH · RoHS · WEEE