GL.iNet Beryl AX GL-MT3000

A compact dual-band IEEE 802.11ax VPN router with a 2.5G WAN port. It’s the right solution for anyone who needs secure internet access at home or in the office with high VPN throughput. After basic setup and connecting a VPN service, the router delivers a protected network for all connected devices — with no need to install a VPN client on each of them individually. Beryl AX stands out for its stable, proven firmware and reliable hardware.

Connecting to the internet

Beryl AX gets internet through a wired connection (2.5G WAN port), in repeater mode (connecting to an existing Wi-Fi network), or via USB tethering from a smartphone. The WAN port supports speeds up to 2500 Mbps, letting you take full advantage of gigabit and multi-gigabit provider plans. The device shares internet over a dual-band Wi-Fi network at speeds up to 574 Mbps (2.4 GHz) and 2402 Mbps (5 GHz), as well as through a gigabit LAN port. A realistic number of simultaneously connected devices is up to 15.

VPN and encryption

Beryl AX supports the WireGuard and OpenVPN protocols at the router level. The VPN works centrally — all traffic from every device on the network passes through the encrypted tunnel automatically. WireGuard reaches up to 300 Mbps, OpenVPN up to 120 Mbps. This VPN router is compatible with most commercial VPN services. For the best compatibility, speed and privacy protection, we recommend GemiGuard VPN.

Power and blackout resilience

Beryl AX is powered via USB Type-C (5 V / 3 A) and draws less than 4.5 W. That means the router runs reliably from any power bank. Plug a 4G LTE USB modem into the USB 3.0 port and you have full internet with VPN protection even during a power outage, with no dependence on your provider’s infrastructure. Power bank + USB modem + Beryl AX = secure internet in any conditions. The compact body and USB power also make this portable router convenient for use away from home — on a business trip or anywhere else you need secure network access.

Privacy and cybersecurity with GemiGuard Mirage

The GemiGuard Mirage package is available for Beryl AX — our software solution for enhancing the privacy, anonymity and cybersecurity of GL.iNet devices. Mirage for the GL-MT3000 includes automatic BSSID randomization, MAC address randomization, automatic system log cleanup, removal of connected Wi-Fi client history, hardened encrypted DNS and other security improvements. These features significantly reduce the device’s digital footprint and protect user privacy.

Beryl AX vs Opal GL-SFT1200 and Slate AX GL-AXT1800 — which model to choose?

Customers most often compare Beryl AX with two other GL.iNet models — Opal GL-SFT1200 and Slate AX GL-AXT1800. Opal costs less than Beryl AX, runs on the IEEE 802.11ac standard, has three gigabit Ethernet ports (1 WAN + 2 LAN) and delivers WireGuard speeds of up to 65 Mbps in our tests — which is enough for everyday use and working with most online services. Beryl AX offers higher VPN throughput (WireGuard up to 300 Mbps), the IEEE 802.11ax standard and a 2.5G WAN port. Slate AX GL-AXT1800 costs more than Beryl AX and is equipped with a quad-core Qualcomm IPQ6000 processor, higher VPN speed (WireGuard up to 500 Mbps in our tests), three gigabit Ethernet ports (1 WAN + 2 LAN) and a MicroSD slot up to 512 GB for local file storage. Beryl AX, in turn, has a 2.5G WAN port and higher combined Wi-Fi speed (3000 Mbps versus 1800 Mbps). The choice between these three models depends on your needs for VPN speed, the number of Ethernet ports and your budget.

Network features and protection

Beryl AX supports WPA3 encryption, DNS over TLS and DNS over HTTPS to protect DNS queries from interception, the IPv4 and IPv6 protocols, and a built-in firewall with support for port forwarding, port opening and DMZ. The router is equipped with a USB 3.0 Type-A port for connecting an external drive — the Samba and WebDAV protocols are supported for setting up file storage on the local network. The device works in several modes: classic router, access point (AP), wireless or wired bridge — letting you flexibly integrate it into any existing network.

OpenWrt, custom firmware and full technical support

GL.iNet firmware is based on OpenWrt and gives you full control over settings and additional options. Our team of system administrators, network engineers and DevOps specialists supports the router for its whole life, handles warranty repair or replacement directly, and builds custom firmware and set-ups on request.

What’s in the box

GL.iNet Beryl AX router (GL-MT3000), USB Type-C power adapter (EU plug), Ethernet cable, warranty card, getting-started guide.

Useful materials

• WireGuard on GL.iNet routers

Full technical specifications

Wi-Fi standards

802.11b · 802.11g · 802.11n · 802.11a · 802.11ac · 802.11ax

Wi-Fi bands

2.4 GHz · 5 GHz

Wi-Fi speed

2402 Mbps (5 GHz) · 574 Mbps (2.4 GHz)

Ethernet interfaces

2 (1 WAN + 1 LAN)

Ethernet speed

1 Gbps · 10 Mbps · 100 Mbps · WAN 2.5 Gbps

VPN protocols

OpenVPN · WireGuard

WireGuard speed

up to 300 Mbps

OpenVPN speed

up to 120 Mbps

Network modes

wireless bridge · wired bridge · router · access point

Operating system

GL.iNet firmware based on OpenWrt

Processor

MediaTek MT7981B, dual-core, 1.3 GHz

RAM

DDR4 512 MB

Storage

256 MB NAND flash memory

USB ports

1x USB 3.0 Type-A

Antennas

2 pcs., external

Antenna type

non-removable

Power port

USB Type-C

Supply voltage

5 V

Power consumption

< 4.5 W

Operating temperature

0–40° C

Color

white

Dimensions

120 × 83 × 34 mm

Weight

196 g

Humidity

5% - 95%, non-condensing

Warranty

24 months

Certifications

CE · FCC · IC · MIC · RoHS · UKCA · WEEE

In the box

GL.iNet Beryl AX (GL-MT3000) VPN router · USB-C power adapter with EU plug · Ethernet cable · user manual

Frequently asked questions about the GL.iNet Beryl AX