5G internet with VPN support
Spitz AX is equipped with the Quectel RM520N-GL modem supporting 5G NR Sub-6 (built on the Qualcomm Snapdragon X62 platform) with 4G LTE fallback. The modem is compatible with Ukrainian operators — Kyivstar (recommended), Vodafone and Lifecell — and works on 5G bands n78 (3.5 GHz) and n28 (700 MHz). After basic setup and connecting to a VPN service, the router broadcasts a secure Wi-Fi network to all connected devices — phones, laptops, tablets. The VPN runs at the router level, so there’s no need for a separate VPN client on every device.
Spitz AX supports two protocols — WireGuard (over 287 Mbps in our tests) and OpenVPN (over 144 Mbps in our tests), as both client and server, making it compatible with most commercial VPN services. For the best compatibility, speed and privacy protection, we recommend GemiGuard VPN.
Power, mounting and installation
Spitz AX has no battery and is powered through a 9–36 V DC input: from the mains adapter, from the onboard electrical system of a car, caravan or van, or from an uninterruptible power supply. A two-in-one wall mount (adhesive or screw-in) is included for smooth and rugged surfaces, so the router can stay installed at home, in the office, at remote sites or on construction sites.
Multi-WAN, load-balancing and failover
Spitz AX supports several WAN channels at once: wired 2.5 Gbps Ethernet, cellular 5G/LTE and Wi-Fi in repeater mode. You can set a priority for each channel, enable load-balancing to distribute traffic evenly, or automatic failover — if the primary channel drops, the router switches to the backup automatically. Two Nano-SIM slots add redundancy even at the mobile-operator level.
A typical scenario: Starlink or a wired ISP as the primary channel through the 2.5 Gbps WAN port, with the 5G cellular modem as backup. While the primary connection is up, the cellular modem stays on standby; the moment the WAN drops, Spitz AX switches to mobile internet without interruption. That makes it a dependable choice wherever connection continuity is critical.
Privacy and cybersecurity with GemiGuard Mirage Pro
The GemiGuard Mirage package is available for Spitz AX in the Pro edition — our software solution for enhancing the privacy, anonymity and cybersecurity of GL.iNet devices. Mirage Pro for the GL-X3000 includes: IMEI, MAC address and BSSID randomization (its own IMEI for each SIM card), system log wiping, removal of connected Wi-Fi client history and hardened encrypted DNS. These features significantly reduce the device’s digital footprint and protect the user’s privacy.
Dual-band 802.11ax Wi-Fi and interchangeable antennas
Spitz AX runs on the 802.11ax standard across two bands simultaneously — 2.4 GHz (574 Mbps) and 5 GHz (2402 Mbps), up to 3000 Mbps combined. MU-MIMO and OFDMA technologies ensure stable performance in networks with a large number of connected devices and reduce latency. The six external antennas with SMA connectors (four for 5G NR and two for Wi-Fi) can be swapped for antennas suited to a specific scenario — for example, directional antennas for remote locations with a weak signal.
Spitz AX vs Spitz Plus — which model to choose?
Both Spitz models share one form factor: external antennas, dual SIM and DC power. Spitz AX is built around the Quectel RM520N-GL 5G modem, a 2.5 Gbps WAN port and six antennas, whereas Spitz Plus uses a 4G LTE Cat 12 modem, a 1 Gbps port and four antennas, and costs noticeably less. If your area has 5G coverage and maximum cellular speed matters, choose Spitz AX. If 5G is unavailable or price is the priority, the Spitz Plus LTE Cat 12 modem delivers more than enough speed for the vast majority of scenarios.
Networking features and protection
Spitz AX supports WPA3 encryption, encrypted DNS to protect DNS queries from interception, IPv4 and IPv6 protocols, and a built-in firewall with port forwarding, DMZ and Drop-in Gateway mode. The router is equipped with a 2.5 Gbps WAN port and a 1 Gbps LAN port, two Nano-SIM slots, a USB 2.0 port and a TF (MicroSD) card slot up to 1 TB — handy for local data storage. The device operates in several modes: classic router, access point (AP), wireless or wired bridge.
OpenWrt, custom firmware and full technical support
GL.iNet firmware is based on OpenWrt and gives you full control over settings and advanced options. Our team of system administrators, network engineers and DevOps specialists supports the router for its whole life, handles warranty repair or replacement directly, and builds custom firmware and set-ups on request.
What’s in the box
GL.iNet Spitz AX router (GL-X3000), 12 V / 2.5 A power adapter, two Wi-Fi antennas, four 5G NR / 4G LTE antennas, Ethernet cable, wall-mount kit, warranty card, quick start guide.
Useful resources
- backup internet channel for your router
- WireGuard and OpenVPN — protocol comparison
- IMEI obfuscation
Full technical specifications
- Wi-Fi standards
- 802.11a · 802.11b · 802.11g · 802.11n · 802.11ac · 802.11ax
- Wi-Fi bands
- 2.4 GHz · 5 GHz
- Wi-Fi speed
- 2402 Mbps (5 GHz) · 574 Mbps (2.4 GHz)
- Ethernet interfaces
- 2 (1 WAN + 1 LAN)
- Ethernet speed
- 2.5 Gbps (WAN) · 1 Gbps (LAN)
- VPN protocols
- WireGuard · OpenVPN
- WireGuard speed
- over 287 Mbps (our tests)
- OpenVPN speed
- over 144 Mbps (our tests)
- Network modes
- router · access point · wired bridge · wireless bridge
- Modem
- Quectel RM520N-GL · 5G NR Sub-6
- 5G NR
- n1/
2/ 3/ 5/ 7/ 8/ 12/ 13/ 14/ 18/ 20/ 25/ 26/ 28/ 29/ 30/ 38/ 40/ 41/ 48/ 66/ 70/ 71/ 75/ 76/ 77/ 78/ 79 - LTE-FDD
- B1/
2/ 3/ 4/ 5/ 7/ 8/ 12/ 13/ 14/ 17/ 18/ 19/ 20/ 25/ 26/ 28/ 29/ 30/ 32/ 66/ 71 - LTE-TDD
- B34/
38/ 39/ 40/ 41/ 42/ 43/ 48 - SIM card
- 2× Nano-SIM
- TF (MicroSD) slot
- up to 1 TB
- Operating system
- GL.iNet firmware based on OpenWrt
- Advanced features
- Multi-WAN · load-balancing · failover · AdGuard · DNS over TLS · DDNS
- Processor
- MediaTek MT7981A · dual-core · 1.3 GHz
- RAM
- DDR4 512 MB
- Storage
- eMMC 8 GB
- USB ports
- 1× USB 2.0 Type-A
- Antennas
- 6 pcs., external SMA (4× 5G NR + 2× Wi-Fi)
- Antenna type
- removable
- Power port
- DC5521 (5.5 × 2.1 mm) · 12 V /
2.5 A · 9–36 V - Power consumption
- <14 W
- Operating temperature
- 0–40° C
- Color
- white
- Dimensions
- 155 × 95 × 36 mm
- Weight
- 520 g
- Humidity
- 5% - 95%, non-condensing
- Warranty
- 24 months
- Certifications
- CE · CP65 · FCC · IC · RoHS · UKCA · WEEE
- In the box
- GL.iNet Spitz AX (GL-X3000) router · four cellular and two Wi-Fi antennas · power adapter with integrated cable · Ethernet cable · wall mount