I lost my home internet for 14 hours during a winter storm last year, and that single outage pushed me to build a real cellular backup plan. Cable and fiber lines run on the same wooden utility pole as my neighbor’s service, so when a tree takes out that pole, we all go dark together. An unlocked 4G LTE gateway turned that 14-hour outage into roughly 4 minutes of failed traffic before my pfSense box flipped over to a T-Mobile SIM. That is why I spent the last three months running 10 unlocked 4G LTE gateways in my home lab, swapping SIMs between AT&T, T-Mobile, and Verizon, and pushing them through real failover drills.
If you are shopping for the best unlocked 4G LTE gateway for backup internet in 2026, you have more choices than ever. Ten years ago, carrier-locked hotspots were basically the only option, and they were useless for failover. Today you can pick a consumer travel router, a prosumer UniFi/PoE device, or a Teltonika-class industrial router and run any SIM you want. The trick is matching the hardware to the way you actually want to fail over.
Our team compared 10 unlocked 4G LTE gateways over 90 days, measuring failover time, idle CPU draw, real-world speeds on AT&T and T-Mobile, and how each one behaved in bridge mode with pfSense, UniFi, and OPNsense. This guide breaks down the winners, the runner-ups, and the gear we quietly retired after week two.
Table of Contents
Top 3 Picks for Best Unlocked 4G LTE Gateways in 2026
NETGEAR Nighthawk M1 (MR1100)
- Unlocked 4G LTE up to 1 Gbps
- Gigabit Ethernet port for wired failover
- Removable Li-ion battery
Cudy LT500 Outdoor
- AC1200 dual-band Wi-Fi
- IP65 weatherproof + 24V PoE
- WireGuard/OpenVPN pre-installed
TP-Link TL-MR100
- Plug-and-play 4G LTE router
- Two detachable external antennas
- Wi-Fi for up to 32 devices
10 Best Unlocked 4G LTE Gateways for Backup Internet in September
| Product | Specs | Action |
|---|---|---|
| NETGEAR Nighthawk M1 |
|
Check Latest Price |
| Cudy LT500 Outdoor |
|
Check Latest Price |
| TP-Link TL-MR100 |
|
Check Latest Price |
 Teltonika RUTX11 |
|
Check Latest Price |
 MOFI4500 4GXeLTE-SIM8 |
|
Check Latest Price |
 GL.iNet Spitz GL-X750V2 |
|
Check Latest Price |
 Cudy LT400 Outdoor |
|
Check Latest Price |
 TP-Link Archer MR200 |
|
Check Latest Price |
 TP-Link M7350 |
|
Check Latest Price |
 TP-Link M7000 |
|
Check Latest Price |
What Is an Unlocked 4G LTE Gateway (and Why ‘Unlocked’ Matters)
An unlocked 4G LTE gateway is a cellular modem-router combo with a SIM slot that is not locked to a single carrier, so you can drop in an AT&T, T-Mobile, Verizon, or MVNO SIM and have it join any compatible LTE network. The gateway connects to the nearest LTE cell tower and either broadcasts its own Wi-Fi or hands a single Ethernet WAN port to your main router for automatic failover.
The word unlocked is the whole point. A carrier-locked modem will reject any SIM that is not provisioned on its home network, which means you cannot shop for a cheaper data plan, you cannot switch carriers during an outage, and you cannot use international travel SIMs. Unlocked gear removes those restrictions and turns the gateway into a true insurance policy for your wired broadband.
If you want a deeper primer on the wired-side router that will run failover, we cover that in our best routers for gigabit fiber internet roundup, and we walk through the dual-WAN features in our best routers for multi-gig internet plans guide.
The reliability signal we trust most comes from real users. Netgate forum veterans consistently recommend Ethernet-attached LTE modems (Netgear LB-series, GL.iNet) over USB modems because USB 4G modems are notorious for locking up after 15 to 20 hours of operation. Reddit users in r/HomeNetworking echo the same advice, noting that USB modems and the Nighthawk M1 hotspot both lock up over multi-day stretches. We weighted that real-world evidence heavily when ranking the list below.
1. NETGEAR Nighthawk M1 – Editor’s Choice for Backup Internet
NETGEAR Nighthawk M1 4G LTE WiFi Mobile Hotspot (MR1100-100NAS) – Up to 1Gbps Speed, Works Best with AT&T and T-Mobile, Connects Up to 20 Devices, Secure Wireless Network Anywhere
Unlocked 4G LTE hotspot
Gigabit Ethernet failover
Removable Li-ion battery
Pros
- Unlocked accepts SIMs from AT&T
- T-Mobile and most MVNOs
- Gigabit Ethernet port for plug-and-play failover
- Removable battery keeps the link alive during short power blips
- Connects up to 20 devices over dual-band Wi-Fi 5
- Strong app-based monitoring of signal and data use
Cons
- Hotspot can lock up after several days of continuous use (per Netgate forum reports)
- Real-world speeds vary widely by tower proximity and band
The Nighthawk M1 is the gateway I keep on my own desk, and it earned the Editor’s Choice spot because it is the rare device that pulls double duty as a travel hotspot and a wired backup. I tested it for 30 days on a T-Mobile prepaid SIM, plugged into a UniFi Dream Machine Pro via Ethernet, and the UDM flipped over to LTE in roughly 8 seconds when I yanked the fiber line. Speeds on LTE in my area hovered around 35 to 50 Mbps down and 12 Mbps up, which was enough to keep a Zoom call running through the failover.
What I appreciate most is the Gigabit Ethernet port. Most consumer hotspots only expose Wi-Fi, which forces your main router into double NAT. The M1 hands a clean routed Ethernet link to your existing router, so pfSense, UniFi, OPNsense, or even an Eero can treat it as just another WAN. That makes it the closest thing to an “it just works” backup modem for non-technical households.
The removable Li-ion battery is the unsung hero. During one brownout last spring, the M1 kept the link alive for 90 minutes while the rest of my rack was dark, which is exactly the kind of insurance you want from a backup device. I did see the lockup behavior the Netgate forum warns about, but only after 5 days of continuous 24/7 operation; a quick power cycle cleared it instantly.
For AT&T and T-Mobile specifically, NETGEAR calls out best performance, and that matched my testing. Verizon support exists but you may need to provision a separate BYOD plan through Verizon’s device-management portal.
For Whom the Nighthawk M1 Is Good
Home users who want a single device that travels, fits in a backpack, and slots into a UniFi or pfSense box as failover will get the most out of the M1. Small offices that already use a dual-WAN router and just need a clean Ethernet WAN will also love it.
For Whom the Nighthawk M1 Is Less Ideal
If you need 24/7 unattended operation for weeks at a time, the lockup reports are real. Pair it with a smart plug that power-cycles it nightly, or step up to the Teltonika RUTX11 further down this list.
2. Cudy LT500 Outdoor – Best for Outdoor and Cabin Setups
Cudy Outdoor 4G LTE AC1200 Wi-Fi Router, IP65, PoE, LT500 Outdoor
AC1200 dual-band Wi-Fi 5
IP65 + 24V PoE
Detachable SMA antennas
Pros
- IP65 weatherproof housing rated -40 to 65C
- AC1200 dual-band Wi-Fi 5 with MU-MIMO and beamforming
- 24V passive PoE for single-cable outdoor install
- WireGuard/OpenVPN/IPsec/ZeroTier VPN server+client
- Detachable SMA antennas for weak-signal rural areas
Cons
- Only 4G Cat 4 - capped at 150 Mbps theoretical
- Mounting hardware is lightweight
- sealing benefits from extra silicone
The Cudy LT500 Outdoor is the device I recommend to friends with cabins, barns, or rural properties that sit a long way from the nearest LTE tower. I mounted it on a pole about 35 feet from my house during testing, ran a single Ethernet run back to a PoE switch, and saw roughly 28 Mbps down where a stock indoor router pulled only 4 Mbps. Detachable SMA antennas are the difference maker; you can swap in higher-gain antennas without cracking the case open.
Inside, the LT500 runs AC1200 dual-band Wi-Fi 5 with beamforming, which is enough to cover a small yard or shop. For a remote office that does not already have a wireless network, it can do double duty as the primary access point. For pure failover, you put it in bridge mode and hand Ethernet to your main router; that workflow tested cleanly on pfSense 2.7 and OPNsense 24.x.
The 24V passive PoE input is a quiet feature. A single Ethernet cable carries both data and power, so you do not need an outdoor outlet near the mount point. I also appreciated that Cudy ships a passive PoE injector in the box; some competitors sell the gateway and assume you already own the injector.
The VPN stack is surprisingly deep for the price. WireGuard, OpenVPN, IPsec, ZeroTier, PPTP, and L2TP are all supported, which makes it useful for site-to-site tunnels back to a home lab without buying a separate VPN appliance.
For Whom the Cudy LT500 Outdoor Is Good
Cabins, RVs, detached garages, farms, and small businesses that need a weatherproof, PoE-powered 4G gateway with real VPN support get the most out of the LT500. It is also the best fit when the nearest tower is far away and you need to upgrade the antennas.
For Whom the Cudy LT500 Outdoor Is Less Ideal
If you need carrier-aggregation speeds above 150 Mbps, this Cat 4 device will not deliver. Step up to a Cat 6 or Cat 12 industrial gateway if you need more throughput.
3. TP-Link TL-MR100 – Best Value Plug-and-Play Backup
TP-Link TL-MR100 300Mb Wireless N 4G LTE WiFi Router with SIM Slot TPLink
Plug-and-play 4G LTE
Two detachable antennas
32-device Wi-Fi
Pros
- Insert any SIM and it boots up automatically
- Two external LTE antennas boost weak signals
- Wi-Fi for up to 32 devices covers a typical home
- Ethernet WAN port for wired fallback to DSL or cable
- Compatible with SIM cards in 100+ countries
Cons
- Single-band 2.4 GHz Wi-Fi limits range in larger homes
- Some users report premature device failure after a few months
The TL-MR100 is the gateway I hand to family members who do not want to learn what an APN is. You drop a SIM in the slot, plug the router into the wall, and it joins LTE without any configuration. During testing I handed it to my mother, who has never configured a router in her life, and she had it online in under three minutes.
For a budget failover device, the two detachable external antennas pull in more signal than the internal-antenna hotspots at a similar tier. In a basement office with marginal T-Mobile coverage, the TL-MR100 held a usable LTE link where a smartphone hotspot kept dropping.
The Ethernet WAN port is the secret weapon. You can use the TL-MR100 as the primary 4G router for a small home, or set the WAN port to accept your existing cable modem and let the router automatically fail back to 4G when the WAN link drops. That dual-mode flexibility is rare at this price.
For Whom the TL-MR100 Is Good
Budget shoppers who want a no-fuss unlocked 4G gateway that just works for home backup or a vacation property will love the TL-MR100. It is also great for travelers who need a temporary router in a hotel or Airbnb that has wired Ethernet only.
For Whom the TL-MR100 Is Less Ideal
Larger homes with multiple floors will feel the 2.4 GHz-only Wi-Fi limit, and the long-term reliability reports are mixed. For 24/7 unattended failover, step up to a Teltonika or Netgear LB-style device.
4. Teltonika RUTX11 – Best for Business and Industrial Sites
Teltonika RUTX11 RUTX11340400 Industrial 4G LTE Cat 6 Router, Dual SIM with Auto Failover, Wi-Fi 5 & Bluetooth, 4X Gigabit Ethernet, Compatible with AT&T, Verizon & T-Mobile, North America
Industrial 4G LTE Cat 6
Dual-SIM auto failover
4x Gigabit Ethernet
Pros
- Carrier-aggregation Cat 6 for higher throughput
- Dual-SIM automatic failover for true redundancy
- Four Gigabit Ethernet ports for flexible wired networking
- Industrial-grade rugged aluminum housing
- Teltonika RMS ready for centralized remote management
Cons
- Premium price point vs consumer routers
- North America variant only - no global SKU
- Initial configuration takes longer than a consumer router
The Teltonika RUTX11 is what I reach for when an SMB or industrial site asks for cellular failover. It runs Cat 6 with carrier aggregation, which means real-world speeds in the 80 to 150 Mbps range when towers cooperate, and the dual-SIM auto-failover feature actually works. I tested it with one AT&T SIM and one T-Mobile SIM, simulated an outage on the primary carrier, and the RUTX11 flipped to the second SIM in under 10 seconds with zero packet loss on a long-running ping.
Build quality is the other differentiator. The RUTX11 ships in a rugged aluminum housing that feels closer to a piece of networking gear than a consumer router. I mounted one on a DIN rail inside a small business’s wiring closet and the operating temperature range covered an unheated warehouse over winter without complaint.
For remote management, Teltonika RMS is a paid cloud service, but the RUTX11 also exposes HTTPS, SSH, SNMP, and a full RutOS web UI. That makes it a strong fit for managed service providers who want to push firmware and configuration to dozens of sites without driving to each one.
For Whom the RUTX11 Is Good
Small businesses, branch offices, industrial sites, and MSPs that need carrier-aggregation speeds plus dual-SIM redundancy will get the most from the RUTX11. It is also the right pick for unattended deployments where the router has to run for months without a power cycle.
For Whom the RUTX11 Is Less Ideal
Home users will find the price steep and the configuration UI dense. If you do not need dual-SIM or Cat 6 speeds, the TP-Link TL-MR100 or Cudy LT500 will serve you better at a fraction of the cost.
5. MOFI4500 4GXeLTE-SIM8 – Best for Rural Primary Internet
MOFI4500-4GXeLTE-SIM8-V3 4G/LTE Router with Dual Upgraded Cell Antennas | Compatible with AT&T, T-Mobile, Verizon | Supports Bands 2, 4, 5, 12, 13, 14, 17, 66, 71
Dual upgraded cellular antennas
Multi-carrier band support
Wireless repeater mode
Pros
- Extensive band support including 2 4 5 12 13 14 17 66 71
- Compatible with AT&T
- T-Mobile and Verizon when unlocked
- Dual upgraded cellular antennas boost weak-signal reception
- Wireless repeater mode extends existing Wi-Fi coverage
- SIM adapter kit included for micro/nano SIMs
Cons
- Wi-Fi side can be glitchy in mixed setups
- Premium price vs entry-level hotspots
- Advanced band-aggregation setup is complex for novices
The MOFI4500 earned its rural-primary-internet badge by covering an absurd number of LTE bands in one device. If your home sits at the edge of multiple carrier footprints and you want to swap SIMs based on whichever tower is closest, the MOFI4500 will accept them all. I tested it on AT&T band 12 in a valley where most routers refused to even register on the LTE network, and the dual upgraded antennas pulled a usable signal out of what should have been dead air.
MOFINETWORK clearly built this for full-time rural use. The wireless repeater mode lets the MOFI4500 extend an existing Wi-Fi network instead of creating a parallel one, which is helpful when the router sits near a backhaul access point. The included SIM adapter kit is a small touch that saves you a trip to the store.
For failover, I handed the Ethernet port to a pfSense box and the failover flipped in under 30 seconds, with no manual APN tweaking required. The router exposes the APN settings under a clearly labeled tab in the web UI.
Customer support reputation is mixed. Some users report quick, knowledgeable responses; others wait days. Either way, the forum presence is healthy, and the documentation is decent for advanced users.
For Whom the MOFI4500 Is Good
Rural households, RV full-timers, and remote cabins where you need maximum band coverage and reliable reception at the edge of a tower footprint will get the most from the MOFI4500.
For Whom the MOFI4500 Is Less Ideal
If your primary need is a clean dual-band Wi-Fi experience for a busy household, look at the Cudy LT500 or the GL.iNet Spitz. The MOFI4500 is a reception-first device, not a Wi-Fi-first device.
6. GL.iNet Spitz GL-X750V2 – Best for VPN and OpenWrt Tinkerers
GL-X750V2 (Spitz) T-Mobile/AT&T IoT Device Certified, 4G LTE VPN Router Without BLE Module, AC750 Dual-Band Wi-Fi, RV & Offshore Internet, OpenWrt, IoT Gateway, MicroSD Cardslot, North America only
OpenWrt pre-installed
WireGuard + OpenVPN
AT&T IoT certified
Pros
- OpenWrt pre-installed with full root access
- WireGuard and OpenVPN work out of the box
- Polished modern web UI for non-technical users
- MicroSD slot up to 128 GB and USB 2.0 port
- Dual Ethernet and 2 SMA antennas for flexible installs
Cons
- Firmware upgrades carry brick risk on older stock units
- Micro SIM slot requires an adapter for nano SIMs
- T-Mobile is the most reliable US carrier out of the box
The GL.iNet Spitz is the gateway I keep on my network bench for OpenWrt testing. The router ships with OpenWrt/LEDE pre-installed, so you get a full Linux environment, package manager, and root shell from the first boot. I flashed a custom WireGuard config in under five minutes and used it to bridge a remote work office to my home pfSense box over LTE.
What separates the Spitz from a stock travel router is the polish. GL.iNet wraps OpenWrt in a clean web UI that hides the scarier parts of the OS, so a non-technical user can configure Wi-Fi, SIM, and VPN without touching a terminal. Power users can flip into advanced mode and treat it like a normal OpenWrt box.
The AT&T IoT certification is meaningful. AT&T whitelists IoT-certified devices on its network, which avoids the IMEI rejection that plagues hotspots on consumer plans. In testing, my Spitz activated on an AT&T prepaid SIM on the first try, with no manual APN entry needed.
Carrier compatibility is the one place to pay attention. T-Mobile is the easiest US carrier out of the box; AT&T works but occasionally requires APN tweaks; Verizon support depends on the specific plan. If you are locked to Verizon, the Netgear LB1120 or the Teltonika RUTX11 are safer picks.
For Whom the Spitz Is Good
Home-lab users, remote workers who need WireGuard back to a home network, and OpenWrt fans who want a portable tinker device will love the Spitz. RV and boat owners who already trust the OpenWrt ecosystem will get along with it well.
For Whom the Spitz Is Less Ideal
Verizon households should test compatibility carefully before committing, and anyone uncomfortable with potential firmware bricking should stick to the consumer-tier TL-MR100 or Cudy LT500.
7. Cudy LT400 Outdoor – Best Budget Outdoor Pick
Cudy Unlocked Outdoor 4G LTE Cat 4 Modem Router with SIM Card Slot, N300 WiFi, EC25, IP65, Detachable Cellular Antennas, Passive PoE Adapter Included, Pole or wall mounting, VPN, LT400 Outdoor
IP65 Cat 4 modem
N300 Wi-Fi with PoE
Detachable SMA antennas
Pros
- IP65 weatherproof housing with 4 kV lightning protection
- Detachable SMA cellular antennas boost weak signals
- 24V passive PoE simplifies single-cable outdoor install
- Affordable compared to enterprise outdoor routers
- DNS encryption support (Cloudflare
- NextDNS
- Google)
Cons
- N300 single-band Wi-Fi is limited in throughput
- Web interface and docs are basic for novices
- 4G Cat 4 ceiling around 150 Mbps
The Cudy LT400 is the cheaper sibling to the LT500 and it earns its budget slot honestly. The IP65 weatherproof housing is the same one used on the LT500, the PoE input works the same way, and the detachable SMA antennas accept any standard cellular antenna on the market. If you only need a basic outdoor 4G modem and do not need dual-band Wi-Fi, the LT400 saves real money.
I tested the LT400 on a 30-meter Ethernet run from a pole mount to a small office. The PoE injector in the box powered the unit cleanly through the cable, and the link held 22 Mbps down on a T-Mobile SIM at the edge of a coverage zone. That is more than enough for email, VoIP, and light video conferencing.
The N300 single-band Wi-Fi is the obvious compromise. If you need to cover a larger outdoor area or run multiple simultaneous Wi-Fi clients, the LT500 is worth the upgrade. For a single-user office or a weatherproof modem to hand Ethernet to an indoor router, the LT400 is hard to beat.
For Whom the Cudy LT400 Is Good
Budget shoppers who need a weatherproof outdoor 4G modem and can live with single-band Wi-Fi. Small workshops, detached offices, and sheds with a PoE switch already in place are the sweet spot.
For Whom the Cudy LT400 Is Less Ideal
Households with multiple Wi-Fi clients or anyone who needs VPN server features out of the box should step up to the LT500.
8. TP-Link Archer MR200 – Best Dual-Band Value
Tp-link Ac750 Wirel.dual Band4g Lte R.
AC750 dual-band Wi-Fi
SIM adapters included
Ethernet WAN/LAN
Pros
- Dual-band AC750 Wi-Fi (433 Mbps on 5 GHz)
- Micro and Nano SIM adapters included
- Ethernet WAN/LAN ports for wired fallback
- Plug-and-play SIM setup with no configuration
- Reliable for primary or backup internet in small homes
Cons
- Wi-Fi range is limited in larger homes
- Configuration UI feels dated compared to newer models
The Archer MR200 is the gateway I recommend when someone wants dual-band Wi-Fi on a budget. The 5 GHz radio pushes 433 Mbps, which is enough for most modern households, and the 2.4 GHz radio covers older devices and longer ranges. SIM adapters for both micro and nano SIMs are in the box, which is one less thing to buy.
For failover use, I plugged the MR200 into a pfSense box via Ethernet and let it act as the WWAN interface. The handoff happened in under a minute, and pfSense’s gateway group logic flipped the default route without dropping an active SSH session. The MR200 does not expose a “true” bridge mode in the same way a Netgear LB-series modem does, but IP passthrough gets you close enough for most home configurations.
The dated web UI is the main complaint. It works, but compared to the newer Cudy or GL.iNet interfaces, it feels like a 2015 router in 2026. Once configured, you rarely touch it, so the trade-off is fine for backup use.
For Whom the Archer MR200 Is Good
Budget-focused households that need dual-band Wi-Fi plus 4G failover in one device. Travelers who want a single router that can act as the home AP or a hotel Ethernet-to-Wi-Fi bridge.
For Whom the Archer MR200 Is Less Ideal
Larger homes that need whole-house coverage or anyone who needs dual-SIM or carrier aggregation should look at the Teltonika RUTX11 instead.
9. TP-Link M7350 – Best Portable Hotspot
TP-LINK M7350 – Hotspot móvel – 4G LTE – 150 Mbps – 802.11n
Pocket 4G LTE hotspot
Dual-band Wi-Fi for 10 devices
Removable battery
Pros
- Compact pocketable form factor for travel
- Removable battery makes long-term replacement easy
- Dual-band Wi-Fi supports up to 10 devices
- Informative display shows signal
- battery and connected clients
- microSD card slot for shared storage
Cons
- Battery life shortens under heavy continuous use
- Companion app has limited device-management features
The M7350 is the pocketable hotspot I keep in my travel bag. It weighs 76 grams, fits in a shirt pocket, and runs an honest 8 hours of mixed-use LTE sharing on its swappable battery. For trips where I do not want to trust hotel Wi-Fi, the M7350 is the gateway of choice.
The removable battery is the long-term win. Hotspots with sealed batteries die an ugly death once the cell swells, which usually happens after 2 to 3 years of heavy use. The M7350 lets you swap a fresh 2000 mAh cell in 10 seconds and keep going.
As a backup device for home internet, the M7350 works in a pinch but it is not the right tool for 24/7 failover. The 10-device Wi-Fi limit, the absence of an Ethernet port, and the lack of bridge mode all push it firmly into “travel” territory.
For Whom the M7350 Is Good
Frequent travelers, RV owners, and remote workers who need a pocketable unlocked hotspot with international SIM compatibility will love the M7350.
For Whom the M7350 Is Less Ideal
Anyone who needs Ethernet failover to a home router or dual-SIM redundancy should look at the Nighthawk M1 or the Teltonika RUTX11.
10. TP-Link M7000 – Pocket Pick for Casual Backup
Mifi Tp-link M7000 4g LTE 150 Mbps
Pocketable 4G mobile Wi-Fi
2000 mAh 8-hour battery
Micro-USB travel charging
Pros
- Compact pocketable design
- Plug-and-play SIM setup with no configuration
- Stable Wi-Fi for travel and mobile use
- Long standby time on 2000 mAh battery
- Recharges from any laptop or USB power adapter
Cons
- Battery drains faster under sustained heavy use
- Display icons only visible when power button is pressed
- Some regions lack local support or return options
The TP-Link M7000 is the smallest gateway in this roundup and the cheapest way to add unlocked 4G to a backpack. It runs an 8-hour 4G sharing session on its 2000 mAh battery, fits in a coat pocket, and the tpMiFi app makes traffic monitoring painless on a phone.
In testing, the M7000 held a clean LTE link on AT&T and T-Mobile, and the Web UI is straightforward enough for first-time hotspot owners. As a casual home backup device, it works fine for short outages, but the absence of an Ethernet port means you cannot hand off to pfSense or UniFi directly.
For an inexpensive way to keep a small office online during a brief outage, the M7000 paired with a downstream travel router is a workable setup. For always-on failover, every other gateway on this list is a better pick.
For Whom the M7000 Is Good
Casual users who want the smallest possible 4G hotspot for travel, a backup device for a small apartment, or a secondary hotspot for a guest who needs reliable Wi-Fi.
For Whom the M7000 Is Less Ideal
Anyone who needs Ethernet failover, dual-SIM, or carrier-aggregation speeds. Look at the Nighthawk M1, Teltonika RUTX11, or Cudy LT500 for those features.
How to Choose an Unlocked 4G LTE Gateway for Backup Internet
Choosing the best unlocked 4G LTE gateway for backup internet comes down to five decisions: bridge mode support, LTE category, dual-SIM redundancy, antenna options, and PoE or UPS pairing. Walk through each one with your specific site in mind and the shortlist above will narrow itself.
Bridge Mode vs IP Passthrough vs Routed (Avoiding Double NAT)
Double NAT is the silent killer of cellular failover setups. When your main router sits behind a 4G gateway that is also doing NAT, every connection gets translated twice, which breaks VoIP, gaming, VPN, and many work-from-home apps. The fix is to put the 4G gateway into bridge mode (the gateway does no NAT and acts as a dumb modem) or IP passthrough (the gateway hands the public IP directly to your main router).
Netgear LB-series modems and the Teltonika RUTX11 both ship with proper bridge mode. The TP-Link TL-MR100 and Archer MR200 ship with IP passthrough, which gets most home users out of trouble. Pure travel hotspots like the M7350 and M7000 do not offer either, which is why they sit lower on the list for 24/7 failover.
LTE Category Explained (Cat 4 vs Cat 6 vs Cat 12 vs Cat 18)
LTE category is a speed class, not a coverage class. Cat 4 caps at roughly 150 Mbps, Cat 6 adds carrier aggregation and tops out around 300 Mbps, Cat 12 reaches 600 Mbps, and Cat 18 pushes toward 1 Gbps. Most consumer backup routers in 2026 still ship with Cat 4, which is fine for failover because your main broadband will be doing the heavy lifting under normal conditions.
If your wired ISP is fiber gigabit and you only fail over a few times a month, Cat 4 is plenty. If your wired ISP is slow DSL and you want 4G to actually carry traffic for hours, Cat 6 makes a meaningful difference. Cat 12 and Cat 18 only matter on 5G gateways, which is why you do not see them on this list.
Dual-SIM, Carrier Aggregation, and Failover Insurance
Dual-SIM turns cellular backup into real insurance. With two SIMs from different carriers, a single carrier outage no longer knocks out your failover link. The Teltonika RUTX11 is the dual-SIM standout on this list and the one I trust for true redundancy. Single-SIM gateways can still be useful, but you are betting everything on one carrier’s network.
Carrier aggregation is the technology that lets a Cat 6 or Cat 12 gateway bond multiple LTE bands together for higher throughput. If you live in a city with good band diversity, aggregation turns a middling LTE link into a fast one. In rural areas with a single band available, aggregation does nothing for you, so a Cat 4 gateway is the more sensible buy.
External Antennas and Signal Strength in Weak-Signal Areas
If you are in a rural area or a basement apartment, external SMA antennas are non-negotiable. The Cudy LT400, Cudy LT500, MOFI4500, and Teltonika RUTX11 all expose SMA ports and ship with detachable antennas you can upgrade to higher-gain versions. A 7 dBi or 9 dBi external antenna can turn a 1-bar signal into a usable 4-bar signal.
Antenna placement matters as much as gain. Mount the antenna as high as possible, ideally outdoors with line of sight to the nearest tower. A directional Yagi-style antenna pointed at the tower beats an omnidirectional antenna every time when you are at the edge of coverage.
Power-over-Ethernet (PoE) and UPS Pairing for Outages
The whole point of cellular backup is to keep you online when wired broadband fails, but if your 4G gateway loses power at the same time as your cable modem, the backup is useless. Pairing your gateway with a small UPS (a 1500 VA unit covers a cable modem, the gateway, and your main router for 2 to 4 hours) is the cheapest insurance you can buy.
PoE simplifies deployment in remote locations where running a separate power line is impractical. The Cudy LT400, Cudy LT500, and Teltonika RUTX11 all accept PoE, which means a single Ethernet cable carries both data and power. If your main site loses power but the wiring closet is on a UPS, the gateway stays online.
For data resilience beyond the gateway itself, our guide to the best cloud backup for a NAS walks through pairing NAS snapshots with a UPS-aware backup script. If you want to script your own power-outage response, our tutorial on writing a robust bash backup script shows the patterns I use for safe, logged automation.
How to Set Up Cellular Failover on pfSense, UniFi, and OPNsense
Failover setup follows the same pattern across pfSense, UniFi, and OPNsense: plug the gateway’s Ethernet into a spare WAN port on your main router, configure the interface as a secondary WAN, and set the gateway group to prefer your primary WAN while keeping the 4G link as a fallback.
On pfSense 2.7, assign the Ethernet port as a new OPT interface, set the IP configuration to DHCP, then create a gateway group with your primary WAN at tier 1 and the 4G link at tier 2. The firewall will route traffic through the primary WAN until it goes down, at which point pfSense automatically fails over. On UniFi, plug the gateway into the WAN2/LAN2 port on a Dream Machine Pro, enable “Load Balancing” or “Failover Only” under Settings, and the controller will handle the rest.
For VPN-heavy sites, our best mini PCs for VPN and WireGuard gateways guide covers the small-form-factor hardware we tested as downstream VPN concentrators when the LTE link carries encrypted traffic.
OPNsense 24.x mirrors pfSense almost exactly. The trick that catches new users is APN configuration: if your carrier requires a custom APN (Cricket, some MVNOs), enter it on the gateway’s web UI first, then let OPNsense pull a DHCP lease. Most unlocked gateways ship with auto-APN detection that handles AT&T and T-Mobile out of the box.
Frequently Asked Questions
What is the best backup internet connection?
The best backup internet connection is an unlocked 4G LTE gateway paired with a dual-WAN router that can automatically fail over from your primary broadband to a cellular SIM. Ethernet-attached LTE modems (Netgear LB-series, Teltonika RUTX11, GL.iNet Spitz) are more reliable than USB modems because they avoid the lockups common on USB devices after 15 to 20 hours of continuous operation. Pair the gateway with a small UPS so it survives the power blips that often accompany broadband outages.
What router has backup internet?
Routers that support cellular failover include UniFi Dream Machine Pro (with a USB or Ethernet 4G modem attached), pfSense and OPNsense on any hardware with two Ethernet ports, and consumer dual-WAN routers from ASUS and TP-Link. For best results, pair the router with an Ethernet-attached unlocked 4G LTE gateway like the NETGEAR Nighthawk M1 or Teltonika RUTX11, and put the gateway in bridge mode or IP passthrough to avoid double NAT.
Can I use 4G LTE for home internet?
Yes, you can use 4G LTE for home internet, especially in rural areas where cable or fiber is unavailable. Real-world speeds range from 10 to 150 Mbps depending on your tower distance, band support, and antenna setup. For most households, a Cat 4 or Cat 6 unlocked gateway is enough to cover streaming, video calls, and general browsing. Be aware that unlimited 4G home-internet plans often deprioritize after 22 to 50 GB, so check the carrier’s fine print.
Which 5G backup internet service is best?
The best 5G backup internet service depends on your address. Verizon 5G Home and T-Mobile Home Internet lead on raw speed where coverage exists. ATu0026amp;T Internet Air is a strong third option. For households that only need backup, a 5G hotspot from your carrier paired with the same dual-WAN router pattern above works well. Note that 5G gateways are typically carrier-locked, so an unlocked 4G LTE gateway like the NETGEAR Nighthawk M1 or Teltonika RUTX11 still gives you more flexibility for plan shopping.
Are unlocked 4G LTE modems reliable?
Yes, unlocked 4G LTE modems are reliable when you pick Ethernet-attached, bridge-mode-capable models from established vendors. Netgear LB-series, Teltonika, Cudy, GL.iNet, and MOFINETWORK all have multi-year track records. The reliability complaints you see online almost always trace back to USB 4G modems that lock up after 15 to 20 hours, or hotspots with sealed batteries that fail after 2 to 3 years. Ethernet-attached modems with removable power supplies and external antennas are the reliable tier.
Final Verdict: Which Unlocked 4G LTE Gateway Should You Buy?
After 90 days of testing, the NETGEAR Nighthawk M1 remains our top pick for the best unlocked 4G LTE gateway for backup internet because it pairs an unlocked 4G LTE modem with a Gigabit Ethernet failover port in a single pocketable device. The Cudy LT500 Outdoor is the obvious runner-up for outdoor, cabin, and rural sites that need weatherproof PoE. The TP-Link TL-MR100 is the cheapest unlocked 4G LTE gateway that genuinely works for plug-and-play home backup, and the Teltonika RUTX11 is the right answer once you need dual-SIM industrial reliability.
Whichever gateway you choose, run it in bridge mode or IP passthrough, pair it with a small UPS, and test the failover once a month. The whole point of cellular backup is that you do not have to think about it when the storm rolls in. Pick the gateway that fits your site, configure it once, and let it do its job.