5G internet with VPN support
Puli AX is equipped with the Quectel RM520N-GL modem supporting 5G NR Sub-6 (built on the Qualcomm Snapdragon X62 platform) with 4G LTE fallback. The modem is compatible with Ukrainian operators — Kyivstar (recommended), Vodafone and Lifecell — and works on 5G bands n78 (3.5 GHz) and n28 (700 MHz). After basic setup and connecting to a VPN service, the router broadcasts a secure Wi-Fi network to all connected devices — phones, laptops, tablets. The VPN runs at the router level, so there’s no need for a separate VPN client on every device.
Puli AX supports two protocols — WireGuard (up to 300 Mbps) and OpenVPN (up to 150 Mbps), as both client and server, making it compatible with most commercial VPN services. For the best compatibility, speed and privacy protection, we recommend GemiGuard VPN.
Battery life and blackout protection
The built-in 6400 mAh lithium-polymer battery (7.4 V · 47.4 Wh) takes over power instantly and without dropping the connection the moment external power is lost — Puli AX keeps serving internet during power outages. Real-world runtime is around 6.5 hours, with a full charge in roughly 3.2 hours. You can keep the device permanently plugged into the mains as a stationary router with backup power in case of a blackout.
Multi-WAN, load-balancing and failover
Puli AX supports several WAN channels at once: wired 2.5 Gbps Ethernet, cellular 5G/LTE and Wi-Fi in repeater mode. You can set a priority for each channel, enable load-balancing to distribute traffic evenly, or automatic failover — if the primary channel drops, the router switches to the backup instantly without losing the connection. Two Nano-SIM slots add redundancy even at the mobile-operator level.
Privacy and cybersecurity with GemiGuard Mirage Pro
The GemiGuard Mirage package is available for Puli AX in the Pro edition — our software solution for enhancing the privacy, anonymity and cybersecurity of GL.iNet devices. Mirage Pro for the GL-XE3000 includes: automated IMEI randomization when the SIM card is swapped, MAC address and BSSID randomization, system log wiping, removal of connected Wi-Fi client history and hardened encrypted DNS. These features significantly reduce the device’s digital footprint and protect the user’s privacy.
Dual-band 802.11ax Wi-Fi and interchangeable antennas
Puli AX runs on the 802.11ax standard across two bands simultaneously — 2.4 GHz (574 Mbps) and 5 GHz (2402 Mbps), up to 3000 Mbps combined. MU-MIMO and OFDMA technologies ensure stable performance in networks with a large number of connected devices and reduce latency. The six external antennas with SMA connectors (four for 5G NR and two for Wi-Fi) can be swapped for antennas suited to a specific scenario — for example, directional antennas for remote locations with a weak signal.
Networking features and protection
Puli AX supports WPA3 encryption, encrypted DNS to protect DNS queries from interception, IPv4 and IPv6 protocols, and a built-in firewall with port forwarding, DMZ and Drop-in Gateway mode. The router is equipped with a 2.5 Gbps WAN port and a 1 Gbps LAN port, two Nano-SIM slots, a USB 2.0 port and a TF (MicroSD) card slot up to 1 TB — handy for local data storage. The device operates in several modes: classic router, access point (AP), wireless or wired bridge.
OpenWrt, custom firmware and full technical support
The OpenWrt operating system gives you full control over settings and advanced options. GemiGuard is more than just a shop. We are a team of system administrators, network engineers and DevOps specialists with deep expertise in OpenWrt and GL.iNet. We develop custom firmware, provide full technical support throughout the entire device lifecycle, handle warranty cases directly (repair or replacement), and can build a fully bespoke solution for your needs.
What’s in the box
GL.iNet Puli AX router (GL-XE3000), power adapter with four interchangeable plugs (US, EU, UK, AU), two Wi-Fi antennas, four 5G NR antennas, Ethernet cable, wall-mount kit, warranty card, quick start guide.
Useful resources
- IMEI obfuscation
- WireGuard and OpenVPN — protocol comparison
- backup internet channel for your router
Full technical specifications
- Wi-Fi standards
- 802.11a · 802.11b · 802.11g · 802.11n · 802.11ac · 802.11ax
- Wi-Fi bands
- 2.4 GHz · 5 GHz
- Wi-Fi speed
- 2402 Mbps (5 GHz) · 574 Mbps (2.4 GHz)
- Ethernet interfaces
- 2 (1 WAN + 1 LAN)
- Ethernet speed
- 2.5 Gbps (WAN) · 1 Gbps (LAN)
- VPN protocols
- WireGuard · OpenVPN
- WireGuard speed
- up to 300 Mbps
- OpenVPN speed
- up to 150 Mbps
- Network modes
- router · access point · wired bridge · wireless bridge
- Modem
- Quectel RM520N-GL · 5G NR Sub-6
- 5G NR
- n1/2/3/5/7/8/12/13/14/18/20/25/26/28/29/30/38/40/41/48/66/70/71/75/76/77/78/79
- LTE-FDD
- B1/2/3/4/5/7/8/12/13/14/17/18/19/20/25/26/28/29/30/32/66/71
- LTE-TDD
- B34/38/39/40/41/42/43/48
- SIM card
- 2× Nano-SIM
- TF (MicroSD) slot
- up to 1 TB
- Operating system
- OpenWrt
- Advanced features
- Multi-WAN · load-balancing · failover · AdGuard · DNS over TLS · DDNS
- Processor
- MediaTek, dual-core, 1.3 GHz
- RAM
- DDR4 512 MB
- Storage
- eMMC 8 GB
- USB ports
- 1× USB 2.0 Type-A
- Antennas
- 6 pcs., external SMA (4× 5G NR + 2× Wi-Fi)
- Power port
- DC5521 (5.5 × 2.1 mm) · 12 V / 2.5 A · 9–16 V
- Power consumption
- <14 W
- Battery
- Li-Po 6400 mAh · 7.4 V · 47.4 Wh (built-in)
- Battery life
- ~6.5 hours · full charge ~3.2 hours
- Operating temperature
- 0–40° C
- Color
- white
- Dimensions
- 155 × 95 × 49 mm
- Weight
- 761 g
- Humidity
- 5% - 95%, non-condensing
- Warranty
- 24 months
- Certifications
- CE · CP65 · FCC · IC · RoHS · UKCA · WEEE