Best Dual Wan Routers (Best Business Firewall Routers in 2020)

Choosing the best dual-WAN router may prove to be a bit difficult since this type of devices weren’t created for home use, their functionality and complexity being far beyond the needs of the usual user (setting up a multi WAN router can be tedious and, sometimes, outrageously confusing), but, with the emergence of the DOCSIS 3.1, we may actually see more and more dual-WAN routers within the consumer market.

By now, everyone has a router inside their home and knows that these small boxes have the role of supplying access to the Internet to all connected devices. You may have also seen all those crazy looking routers with lots of antennas and equipped with hardware capable of delivering performance way beyond what the normal user would need. That’s because most aim at the businesses and corporations (and the price is a clear hint to this). But, regardless of the router’s performance, most business owners don’t really want to spend a fortune, but still want to be able to have a continuous and stable Internet connection. This is where dual-WAN routers come into play.

UPDATE 05.17.2020: The Peplink Balance Two has been added to the best dual-WAN routers list.

ZyXEL ZyWall USG40DrayTek Vigor2926Peplink Balance TwoMikrotik CCR1009-7G-1C-1S+PC
zyxel-usg40-dual-wan-routerdraytek-vigor2926-dual-wan-routerpeplink-balance-twomikrotik-ccr1009-7g-1c-1spc-dual-wan
Read MoreRead MoreRead MoreRead More
Ubiquiti EdgeMAX EdgeRouter Lite ERLite-3Linksys LRT224Cisco RV320Synology RT2600ac
ubiquiti-erlite-3-dual-wan-routerlinksys-lrt224-dual-wan-routercisco-rv320-dual-wan-routersynology-rt2600ac-dual-band-router
Read MoreRead MoreRead MoreRead More

 

Multi-WAN routers are usually needed by business (no matter their size) and were created to give your organization an edge over the competition by maintaining a stable Internet connection, without relying on a single ISP. This is extremely important because running a business successfully can’t allow any downtime period (and nowadays, being connected to the Internet is a vital point for ensuring the survival of a company).

But this isn’t the only advantage a Dual (or Multi) WAN router can deliver. You can also get better throughput and uniformly balance the handling of your packages between the two (or more) separate connections (to avoid bandwidth throttling). This desirable feature is called Network load balancing (or multi-homing) and, besides balancing the network usage, it will also provide network redundancy, meaning that, if one of the WAN links fails, you still get access to your network resources using the secondary WAN link.

Now, you may wonder why not simply go for multiple routers instead of a multi-WAN single router? As expected, the answer is the price.
Since we saw how important it is to have a multi-port router when running a successful business let’s look at the best dual-WAN VPN router solutions that the market has to offer.

 

 

1. ZyXEL ZyWall USG40

zyxel-usg40-dual-wan

amazonbutton

The ZyXEL USG40 is a capable dual WAN router specifically designed to be used in a small business environment (for networks with 1-10 users or a maximum of 20,000 connections). The USG40 was released in the summer of 2014, being part of the Performance series of the UTM devices (Unified Threat Management) alongside USG40W, USG60 and USG60W.
The ZyXEL ZyWall USG40 looks like your ordinary router, featuring a grey metallic rectangular box, with lots of heat vents on top and the sides. Overall, the design feels rather bland, even though there are two red front parts for the logo and model, but this still doesn’t really give many points in the appearance sector. Sure, it is likely that the router will be put in a place out of sight, but I can’t help to compare it with the newer, crazier designs some other router manufacturers have adopted, it just feels a little outdated.

On the front, in between the red accents, there are the LED status lights responsible for Power (PWR), System (SYS), USB and five Ethernet ports (P1 to P5). The back of the USG40 is home to the Power adapter, an ON/OFF button, a Console port (used for managing the router using CLI commands – you will have to enter the username and password), a USB 2.0 port, a WAN port, four LAN/DMZ Ethernet ports (the last port is optional and can be used as WAN or as LAN) and a recessed RESET button (which can be accessed using a paper clip).
Some other things I liked is how silent it felt, although it is a ‘heavy lifter’ (because of the passive cooling), the rubber feet for extra stability and that it wasn’t really huge, measuring 9.5×6.8×1.4 inches and weighing 32oz.

zyxel-usg40-dual-wan

The outside may not be much, but it’s the inside that counts. The ZyXEL USG40 features an one-core Cavium CN6010 CPU, backed by 1GB of RAM, 4GB of storage memory and a Qualcomm Atheros AR8327-BL1A switch. In terms of wireless connectivity, you will either have to purchase the USG40W, which uses the 2.4GHz band (being compatible with the 802.11b/g/n standard) or the more advanced USG60W which allows you to also use the 5GHz radio band (the W stands for wireless).
In terms of applications, the ZyWall USG40 mainly features IPv6 routing, VPN connectivity, load balancing, user-aware access control and SSL VPN Network access. So, the USG40 allows you to create IPv6 policy routes and objects, but at the same time, also allowing IPv6 packets through IPv4 networks. The VPN connectivity allows you to create secure paths with other companies or offices and provides safe access to your network.

Load balancing is maybe one of the most important aspects of a dual WAN router as it will balance the traffic loads between multiple Internet connections on the same or different ports. The SSL VPN was designed to allow external access to your internal network. This way, remote users can enter the ZyWALL web address into a browser and after they have entered the username and password, they are given a private IP address in the same subnet as your network and access to the needed resources.

zyxel-usg40-dual-wan

Also, since security is paramount when talking about maintaining a business-type network, the ZyWall USG40 is a very secure router, being equipped with a SPI firewall (Stateful Packet Inspection) and UTM features (Unified Threat Management). Unfortunately, in order to access the latter, you will need a licence. The UTM includes Application Patrol (filter or throttle traffic), Intrusion Detection and Prevention, Anomaly Detection and Prevention, Content Filtering (it can be controlled by the type or category of the threat – like botnets, malware, phishing and so on), Anti-Virus (Kaspersky), Anti-Spam and Secure Socket Layer (SSL) encrypted traffic inspection.
Lastly, I have tested the ZyXEL ZyWall USG40’s performance using its default settings and I got 265 Mbps while downloading a 1GB file and 215 Mbps while uploading the same file.

 

 

2. DrayTek Vigor2926

draytek-vigor2926-dual-wan-router

amazonbutton

Read the full review of DrayTek Vigor2926

DrayTek is a Taiwanese manufacturer of (mostly) enterprise-grade networking products, including VPN devices, firewalls, routers and other types of wireless LAN devices (mainly with a focus towards the SMBs). DrayTek is known as being one of the first manufacturers to implement the VPN technology into less expensive routers and, right now, it basically is the go-to-company if you don’t want to purchase very expensive equipment from Cisco, Arista or Juniper (therefore being a godsend to start-up companies that don’t have a large budget). One of its more interesting products is the DrayTek Vigor2926, a dual WAN router created to replace the popular Vigor2925.

The Dual WAN routers aren’t known to be very aesthetically pleasing and most have a plain, industrial look (begging you to hide it in some corner or in a closet), but DrayTek, despite having kept the same design approach for almost a decade, it has made its broadband routers feel surprisingly fresh even in 2019. So, the case of the Vigor2926 remains rectangular, but the top has a wave-like form, covered by a black matte finish and lots of small longitudinal canals which slightly expose the internal hardware. While some other dual WAN routers are metallic, the case of Vigor2925AC is entirely made of plastic but, despite that, the device has the element of uniqueness and it doesn’t look as the other routers on the market (some consumer-type routers could learn a thing or two).

draytek-vigor-2926-dual-wan-router

The Vigor2926 is not really a compact device, but its footprint is smaller than some consumer-type routers, measuring 9.48 x 6.50 x 1.73 inches and because the device weighs about 1.1 pounds, the Vigor2926 will feel sturdy and stable, even if you connect lots of cables to it. Another important aspect is the fact that the manufacturer has covered the bottom side almost entirely with ventilation cut-outs which do have an impact into how the heat management is handled: even under stress, the router did not overheat, but there were some warm spots on the top and bottom of the device.

On the front of the Vigor2926, you can find a series of LED lights which show the status of ACTivity, WAN1 and WAN2 (if any of the three aforementioned LED is blinking, it means that the data is being transmitted or received), QoS (if it’s on, then the QoS function is active), USB1 and USB 2 (if any of the two LEDs blinks, then data is being transmitted / received), WCF (it’s on when the Web Content Filter feature is active), VPN and DMZ. On the left of the LED lights, you can find a single recessed button for returning the device to the factory default settings (press and hold the button for more than 5 seconds).

draytek-vigor2926-dual-wan-router

On the right side of the LED lights, there are four 10/100/1000Mbps Base-TX Ethernet LAN RJ-45 LAN ports (each port has two LED lights – if the left LED is blinking, it means that data is being transmitted; if the right LED is enabled, then the port is connected at 1000Mbps, otherwise, if it’s off, then the connection is at 10/100Mbps), a 1000Base-TX RJ-45 WAN1 port, a 1000Base-TX RJ-45 WAN2/LAN port (can be used for the dual-WAN feature if you need two Internet connections at the same time or simply as a LAN port) and further to the right, there are two USB 2.0 ports (useful if you want to connect printers, storage devices, environmental thermometers or 3G/4G/LTE modems). The rear side is populated by a PWR connector (for the adapter) and an On/Off switch (there are no antenna connectors).

Inside the case, the DrayTek Vigor2925AC is equipped with a Qualcomm Atheros AR8035-A Ethernet PHY Chip, 128 MB Toshiba TC58NVG0S3ETA00 flash memory, 128MB of RAM (WINBOND W971GG6SB-25) – the main chip is clocked at 720MHz (couldn’t access it because DrayTek covered the area with a non-removable plate).

draytek-vigor2926-dual-wan-router

In terms of software features, DrayTek Vigor2925AC doesn’t lack anything important. You get the dual WAN port used for FailOver and Load-Balancing (if you connect 3G/4G/LTE modems to the two USB ports, it will be added to the load balancing pool). The Failover feature works like this: if the first Internet connection fails, the router automatically switches to the other WAN port (the process doesn’t take more than 2-3 seconds) and, when the primary WAN regains its connection, the router will switch you back from the secondary WAN connection (this time, the process takes about 5 seconds); the Load Balancing feature keeps both Internet connections active at the same time, creating a ratio for the number of sessions that will be connected to either of the two WANs – furthermore, you can also use a single WAN port for certain websites or aggregate the ports to increase the total available bandwidth.

The Vigor2926 also supports multiple types of VPN, such as IPsec, L2TP with IPsec, PPTP, SSL and Open VPN; there’s also VLAN tagging, Smart Monitor Traffic Analyser, Bandwidth Management (set bandwidth limits by number of simultaneous sessions or IP; QoS) and a lot more. In terms of security, the Vigor2925AC features an Object-based SPI Firewall, DoS Defence (Ports Scan detection, SYN, UDP, ICMP defences and the ability to block IP options, Ping of death, trace route and so on), Spoofing Defence (IP and ARP Spoofing) and more. The Vigor2926 features a Central Management utility, allowing you to locally manage additional DrayTek devices connected to the network (switches, access points), but the manufacturer also allows you to adopt the Vigor2926 within a controller (VigorACS 2).

draytek-vigor2926

Considering that the Vigor2926 comes with two USB ports, I decided to test the storage performance of the router: using a Samsung T5 SSD drive (FAT32), I moved a 3GB multimedia folder and the writing speed was 10.13 MBps and the reading speed was 10.26 MBps. Afterwards, I decided to test the wired performance of the router using two computers, one as the server and the other as the client: from the client to the server, I got an average of 949 Mbps and, from the server to the client, I measured an average of 921Mbps.
Note: The DrayTek Vigor2926 is also available in other variations: with integrated VoIP and wireless capabilities (the Vigor2926Vac), using only the wireless N technology (Vigor2926n) and with both the 2.4GHz and 5GHz radio bands (Vigor2926ac).

 

 

3. Peplink Balance Two

peplink-balance-two

The Peplink Balance One has been a long time favorite for both small businesses and home (power) users due to its excellent ability to offer a seamless balance between more than one Internet connection; furthermore, beside featuring a couple of WAN ports (for dual-WAN balancing), the router also offered LTE connectivity (through a USB port – it supported 4G LTE / 3G modems) and I know that it’s now a common occurrence in the SMB networking market, but it was less so about five years ago, when the dual-WAN router was released. The Peplink Balance One is still supported, but it may actually be nearing the end of its life cycle considering that the manufacturer decided to refresh a few of its dual WAN routers – yes, there’s even a Balance 20X available now, but we’re going to focus on the Peplink Balance Two.

The name does suggest that we may see some radical improvements over the last generation and indeed, the Balance Two is a completely different device on the inside and on the outside as well when put next to the Balance One. Both dual-WAN routers have rectangular metallic cases, but the Balance Two is significantly more compact than its predecessor (measures 7.4 x 6.9 x 1.7 inches vs 10.7 x 6.3 x 1.2 inches) and, while the Balance One was all black, the newer router has the yellow band on the front along with the Peplink logo (the rest of the case of the remains covered by a black matte finish).

Peplink Balance OnePeplink Balance Two
• Ethernet WAN Ports2/5GbE (depends on license) + 1xUSB(Modem)2(GbE) + 1xUSB (Modem)
• Ethernet LAN Ports4(GbE)4(GbE)
• Built-in WiFi802.11b/g/nNo
• Recommended Users<=6025-150
• Stateful Firewall Throughput600Mbps (400Mbps -license)1Gbps
• PepVPN Throughput (256-bit AES)30Mbps150Mbps
• PepVPN Throughput(No Encryption)60Mbps150Mbps
• Power Consumption15W40W

And that’s where the similarities end since the Peplink Balance Two features a very plain front area, with only two LEDs populating it, the first responsible for the Status of the device (solid red indicates that the device is booting up, flashing red shows that there is a boot-up error and green means that everything is working properly – if it’s off, it means that it is upgrading the firmware) and the other LED shows the status of the Power (when it’s green, it means that the dual-WAN router is powered on). The rear side of the Peplink Balance Two is populated by a Reset button, 12V DC Power connector, a Console port and next to it, there are four Ethernet Gigabit LAN ports and two Ethernet Gigabit WAN ports.

I know that the Peplink Balance 20X is compatible with some expansion slots, but, unfortunately, the excellent cellular capabilities of the 20X have not been ported on the Balance Two. This does allow it to remain very compact (you need space for the expansion slot) and yes, it does not have any internal fan, the Balance Two relies solely on passive cooling. I have seen a similar approach on a PoE switch from ZyXel (GS1920-8HP) which was also very compact and powerful, but it did run a bit hot regardless of the amount of ventilation cut-outs.

The Peplink Balance Two does have ventilation holes on the lateral sides, as well as on the bottom and it does help to a certain degree to keep the temperature low, but then device will get warmer when under a heavier load – I do appreciate that it runs quiet (due to the fanless design) which makes it easy to be positioned pretty much anywhere in the room. That being said, you can mount the Peplink Balance Two on the wall (using the two dedicated mounting holes on the bottom) and there are holes on the lateral sides if you decide to mount the router into a rack. If you want to keep it horizontally, there are four silicone feet to maintain the device into position and not move around when you add more than a couple of cables (the weight is also an important factor to its stability – it weighs 2.2 pounds).

peplink-balance-two
Source-FCC ID Website

The Peplink Balance Two has been very recently released, so there isn’t that much info about its internal hardware, but it does seem to be using a Broadcom chipset and in terms of RAM, the dual-WAN router makes use of 4GB DDR3L 1600 SODIMM from Innodisk; it also seems like you should be able to replace it for something better (the process looks identical to how you would do on a laptop). While the Peplink Balance One had WiFi capabilities, featuring both the 2.4 and the 5GHz WiFi radio bands (the 802.11ac/a/b/g/n standard) and the antennas were internal, the Peplink Balance Two does not have built-in WiFi, so you will have to rely on a wireless access point to connect your clients to a WiFi network. I wasn’t really impressed by the wireless performance of the Balance One, so I do find the necessity to use an AP to be the better choice especially in a SMB environment.

By default, the stateful firewall throughput of the Peplink Balance Two is 1Gbps and that’s quite something for a device in its price range – for example, its predecessor, the Balance One could only go up to 600Mbps and it would suffer a cut to 400 Mbps when activating the BPL-ONE-LC-5WAN license, thus converting the LAN 1, 2 and 3 into WAN 3, 4 and 5, so, you could get five WAN ports available.
The Peplink Balance Two does not have this possibility (for now), but you still do get two WAN ports to take advantage of the load balancing feature, which can be customized by defining specific traffic types and prioritize them (supports Failback and SpeedFusion Hot Failover, which ensures that the secondary link instantaneously gets enabled after the main link is down) and, there is bandwidth aggregation (LACP) in case you want to bond the two Internet links together.

peplink-balance-two-dual-wan-router

Additionally, thanks to the USB 2.0 port, the router supports WWAN connectivity (a wireless form of connecting to the Internet, using cellular tower technology). Other important features are the PPTP VPN Server and IPsec VPN, the Advanced QoS (includes Bandwidth Reservation and Individual Bandwidth Limit per User Groups; there’s also Application Prioritization), an Access Point controller (which works best with Peplink’s AP One and the AP Pro), there’s also Captive Portal support (RADIUS authentication + customizable splash page) and PepVPN, which creates a secure Ethernet tunnel over any IP connection (L2/L3) and it is fully compatible with any dynamic IP environment and NAT (it will also work along with SpeedFusion).

 

 

4. Mikrotik CCR1009-7G-1C-1S+PC

mikrotik-ccr1009-7g-1c-1spc-dual-wan

amazonbutton

Mikrotik is a well known networking company in the enterprise market, while it’s less popular in the consumer market for the same reason: the great, but very complex RouterOS which has a steep learning curve, but it does offer an incredible amount of customization and flexibility and, while their competitors often deliver a similar set of features, it usually comes at a vastly higher price tag. Pair the RouterOS software with the large variety of appliances and you get a great solution for small to medium businesses.

Since we have focused on small business dual WAN routers, the device of interest is going to be the Mikrotik CCR1009-7G-1C-PC, which comes with some major improvements over the last generations, such as the no switch-chip, so the Ethernet ports are now completely independent and have a direct connection with the CPU, thus completely removing any possible bottlenecks or any other types of performance loss.

mikrotik-ccr1009-7g-1c-1spc-dual-wan

At first glance, the Mikrotik CCR1009-7G-1C-1S+PC features the same metallic rectangular box that we find with most other Dual WAN routers, but, the Latvian-based manufacturer has a (good) habit of adding some design elements that will make their devices more interesting-looking than those from the competition. This time, the case is a bit taller, with some various cut-out patterns all around the body of the router: on the front just above the ports, on both the lateral side, as well as on the bottom side and even if it isn’t immediately obvious, there are some positioned on the rear side, but they’re covered by an unusual heat-sink (the case is entirely covered by a white matte finish which does not retain fingerprints).

The reason for that is because the CCR1009 relies on passive cooling and, since this is a powerful device, it needs as many vent holes as possible, but this are not the only measures Mikrotik took to ensure that the device remains cool, because it has also added a two heat-pipe internal system along with the aforementioned specially designed rear-positioned heat-sink (this way, even if you use the router at its maximum, the case will still remain cool (the heat-sink will naturally be a bit hot) and you won’t hear that annoying fan buzzing – it’s completely silent).

mikrotik-ccr1009-7g-1c-1spc-dual-wan

On the front side, underneath the long vent holes, there is a 10G SFP+ port (with two LED lights for Power and Activity), a regular 1G SFP port which, along with the first Gigabit Ethernet port which can create a combo-port, so it allows the user to choose which interface it prefers from the software, as well as having a hardware fail-over feature in case of a disconnect.

Further to the right, there is a set of seven Gigabit Ethernet ports (each with its own set of two LEDs) and be aware that the seventh port can be used for powering the router using passive PoE power (18-56V), while also allowing the user to use Etherboot / Netinstall for reinstalling the RouterOS. Besides the Ethernet ports, there’s also a Reset button (press and hold it during boot time until the LED lights start flashing and then release it to return the device to its default RouterOS configuration), an RS232 serial port with a Smart Card tray directly underneath it (the card must support GlobalPlatform JavaCard and is used to store your private key for features which support the Certificate based authentication), two LED lights, one for USR (User activity) and the other for PWR (Power) and, lastly, there’s a microUSB type AB port which can be used in various ways (such as for connecting a storage device or a 3G/LTE modem).

mikrotik-ccr1009-7g-1c-1spc-dual-wan

Turn the device around and on the left side of the heat sink, you’ll notice the DC 18-56V input jack as an alternative to the PoE port (on the left there are three ears to easily manage the cable) and on the right side, there’s a microSd card (inside a carved in area) and a wing nut. On top of the device, there is a small LCD touchscreen display which requires a bit of pressure to register a touch (as opposed to a smartphone display) and, similarly to pretty much every element of this device, it can be configured from the console menu: some of these settings allow you to change the colour scheme, choose the default info to be displayed, select the interface (performance stats, the connected clients, the bandwidth and more), set up an LCD PIN code and others.
Note: The router can be positioned on a flat surface or can be rack mounted.

Inside the case, the Mikrotik CCR1009-7G-1C-1S+PC is equipped with a TILERA TILE-Gx9 TLR4-00980CG-10CE-A3a CPU clocked at 1GHz (the CPU core count is 9), 2 GB of RAM (the lighter version CCR1009-7G-1C-PC only features 1GB of RAM) and 128 MB of NAND storage memory. Additionally, the router also features a PCB and CPU temperature monitor.

mikrotik-ccr1009-7g-1c-1spc-dual-wan

As I said in the introduction, every Mikrotik device comes with the RouterOS software (level 6 license) which is a very extensive and complex tool which allows for a great number of configurations for the initiated user (you do need to learn the way it functions and, thankfully, Mikrotik has provided lots of guides and a dedicated wiki page for every new user that want to learn: https://wiki.mikrotik.com). Of course, the object of interest is the dual-WAN capability (which includes load-balancing and the fail-over system) and the Mikrotik CCR1009-7G-1C-1S+PC does deliver a lot more control than expected. The RouterOS allows you to set up a dual-WAN setup using the PCC method (Per Connection Classifier), which is an interesting way of dividing the traffic into equal streams, while also keeping some data (with specific sets of options) in a particular stream, as well as enabling a failover, in case a gateway fails.

There’s also the Firewall marking method, which can be broken up in several applications, such as the Per-Traffic Load Balancing (useful in case you don’t have enough bandwidth for only one connection, therefore you can load-balance multiple Internet connections – this method involves breaking traffic in different types, using the Mangle Tool to mark the traffic, allowing some IP addresses to bypass this type of load-balancing and creating specific routes based on the marked traffic), the Load Balancing over Multiple Gateways, Load balancing multiple same subnet links and others. Other methods that can be used are the ECMP (Equal Cost Multi-Path), OSPF (where multiple links are set up using the dynamic routing protocol OSPF with equal cost) or BGP (to perform load-balancing when there are more than one equal cost links between two BGP routers).

Of course, this is only scratching the surface of what the RouterOS can do with the router’s hardware, but it is enough to put the Mikrotik CCR1009-7G-1C-1S+PC among the best dual-wan routers on the market in 2018.

 

 

5. Ubiquiti EdgeMAX EdgeRouter Lite ERLite-3

ubiquiti-edgemax-edgerouter-lite

amazonbutton
Ubiquiti is known for making high quality networking devices, with enterprise-like features at a really low cost and the EdgeRouter Lite ERLite-3 is one of the most reliable low-cost VPN routers for a small company. The EdgeMAX EdgeRouter Lite ERLite-3 is not really a Dual WAN router per se, but this function became available after the release of EdgeOS v1.4.0 (you should always download the latest firmware, by accessing the manufacturer’s page), which made possible the addition of the dual WAN load balancing wizard.
As you will see from other router reviews, I appreciate high performance, but I also consider that the design as an important factor often overlooked by networking devices manufacturers. Fortunately, the Ubiquiti agreed with us and the EdgeRouter Lite looks a lot more stylish than other Dual WAN routers. Sure, it features the same rectangular black box (made of plastic), but  the reduced size and the EdgeRouter LITE logo on top, near the hexagonal pattern of the heat vents enhance the overall look and don’t make the router feel cheap (there’s also a variant with chamfered edges).

ubiquiti-edgemax-edgerouter-lite

On the front of the router, you can find the Console port (you will need a DB9 port on your computer to be able to connect to the Console port), three Ethernet ports (marked from 0 to 2) and a recessed RESET button (accessible with a paper clip). There is no array of separate status LED lights, but you do get a LED on the left side of each port (Amber means link established at 10/100 Mbps, Green means link established at 1000 Mbps). The back of the router is mainly occupied by ventilation holes, but there’s also a Power port and a Grounding Hole (with a screw).
As said before, EdgeRouter ERLite-3 is a router of small proportions, measuring 7.7×3.5×1.1 inches and it weighing 10 ounces, meaning, it’s rather light. This isn’t necessarily a good thing, as it doesn’t really feel sturdy and may actually fall of the table. But, if that’s the case you can wall mount it, just make sure you position the router with the Ethernet ports downwards (make sure the logo isn’t upside down) and don’t obstruct the ventilation holes.

ubiquiti-edgemax-edgerouter-lite

Now, let’s have a look on the inside. The ERLite-3 has a dual-core Cavium Octeon CN5020 (based on the MIPS64 architecture – featuring Hardware Acceleration for Packet Processing), 512MB of DDR2 RAM and 2GB of flash storage (built-in mini USB key). Furthermore, there’s also an Atheros AR8035 Gigabit PHY (x3) switch. EdgeMAX EdgeRouter Lite ERLite-3 doesn’t have any WiFi capabilities, so you will need an additional wireless access point if you want to use the 2.4Ghz and/or the 5GHz radio bands.
As said before, the EdgeRouter Lite ERLite-3 uses the EdgeOS, which, from the 1.4.0 version, allows you to choose from three types of configurations Load Balancing, WAN+2LAN and WAN+2LAN2 (from the Wizards tab). The Load Balancing feature is extremely important as it allows you to spread the traffic across both links, increase the bandwidth and not worry about downtime (in case a link fails, it automatically switches the other one).

ubiquiti-edgemax-edgerouter-lite

In terms of applications, the ERLite-3 supports IPv6 routing, IPSec Site-to-Site tunnels, PPTP and L2TP Remote Access, PPTP Client and OpenVPN Site-to-Site tunnels. Security is also paramount and Ubiquiti EdgeMAX EdgeRouter Lite ERLite-3 doesn’t disappoint, featuring an ACL-based Firewall (the access control list is used for traffic filtering), a Zone-based Firewall (a very advanced form of creating security zones and implementing security policies towards the traffic between these zones) and NAT (which blocks unsolicited inbound traffic).
Lastly, I have tested the speed performance of the Ubiquiti ERLite-3 using a 1GB file and we measured 770 Mbps for downloading the file and 745 Mbps for uploading it.

 

 

6. Linksys LRT224

linksys-lrt224-router

amazonbutton
The Linksys LRT224 is another great choice to go for when searching a reliable dual WAN router to keep your business connected to the Internet. Linksys had a very successful run in the networking market (especially thanks to its iconic Linksys WRT54G) and it has still managed to remain relevant even today, regardless of its fierce competition.
The LRT224 looks identical to its relative, the LRT214, featuring the same black and blue metallic box, having the heat vents on the sides. Although it has the generic box shape, the LRT224 is surprisingly stylish, especially thanks to the blue accent on top and the big blue logo on the front. Sure, there are other better designed and more appealing routers out there, but the LRT224 doesn’t feel like you need to hide it immediately after you have connected all the cables. Also, it does manage to bring in a healthy dose of nostalgia (reminding me of the WRT54G).

linksys-lrt224

Like said before, the front of the router is occupied by the Linksys logo, the LED status lights being positioned on the top, in between two screws. The LEDs are responsible for SYSTEM, DIAG, WAN, WAN/DMZ, VPN and the four LAN Ethernet ports. The back of the Linksys LRT224 is home to a recessed RESET button (press the Reset button for 5 seconds to warm reset the router and press it for longer than 10 seconds to perform factory reset), four LAN Ethernet ports, one dedicated WAN port and one last port that can be used as either a WAN port or DMZ. The power port can be found on the right side, along with the K-Lock security slot.

The LRT224 isn’t a big router, measuring 5.2×7.7×1.7 inches and weighing 25oz and can be wall mounted by using the slots on the bottom panel, just make sure not to obstruct the heat dissipation holes.
Under the hood, the LRT224 is equipped with a single-core Cavium CN5020 CPU (clocked at 300 MHz), backed by 128MB of RAM and 32MB of flash memory. The router is also equipped with a Broadcom BCM53125M and a Broadcom BCM54612 Ethernet switches. Unfortunately, the Linksys LRT224 doesn’t provide any type of wireless connectivity and there is no other Dual WAN router from Linksys that uses any of the 2.4 or 5GHz wireless bands.

linksys-lrt224

In terms of security, you can expect standard DoS protection and a SPI firewall (set the number of access rules and block requests). Also, you get bandwidth management (set up the upstream and downstream speeds) and QoS (you can assign priorities based on the used WAN ports and protocols).

Since the LRT224 is a VPN router, it features enough applications to keep your network safe. So, you get support for the IPsec, PPTP and SSL connections and some really cool applications to ease up the configuration system (which is a headache with most Dual WAN routers). The Easylink VPN delivers a simpler way to configure the IPsec process for a gateway to gateway tunnel between two Linksys LRT routers (this feature is supported only between two Linksys LRT routers). All you have to do now, is to set a username, a password and insert the IP address of the second router.

linksys-lrt224

Furthermore, you can also use the OpenVPN client, being able to handle 5 SSL tunnels (it can handle up to 50 tunnels while using PPTP and IPsec). Also, in case one active tunnel fails, you can use the VPN tunnel back-up (choose the IP address of a second VPN router so you can connect to in case of a fail scenario).
Note: As expected the two WAN connections have load balancing capabilities, so you can mix the bandwidth of both connections and at the same time, in case on connection fails, you can rely on the second one (never experience downtime).
At the end, I have tested the speed performance of the Linksys LRT224 using a 1GB file and I got a download speed of 643 Mbps and an upload speed of 605 Mbps.

 

 

7. Cisco RV320

cisco-rv320

amazonbutton

Cisco Systems is the largest and possibly the most known networking company in the world and its networking devices are considered to be some of the best. Since there is a high demand for dual WAN routers to maintain business networks, Cisco delivers a large array of these devices, varying in terms of WAN and LAN ports, speed performance and WiFi capabilities. The router we are going to focus is the Cisco RV320.
The Cisco RV320 looks surprisingly similar to a DVD player we all got in the 90s, featuring the common rectangle-shaped metallic box with vent holes on the sides (the router is very silent, because it uses a passive cooling system). The front is black, except the protruded silver band with the Cisco logo and the back is completely silver coloured, but this doesn’t really save its appearance at all. Sure, one may argue that the design of a router doesn’t matter as you would connect, configure and then forget it somewhere out of sight. And this isn’t necessarily wrong, still, we’ve seen so many great designs from routers released in the same year (2013), so why not put some thought into the appearance ? (Linksys LRT224 did a better job, after all.)

cisco-rv320

On the front of the router to the right of the protruded silver band, we get a separate section specially dedicated to showing the status LED lights (and a recessed RESET button) paired accordingly: first array is responsible for Power, VPN, DMZ and DIAG, the second array refers to the four LAN ports, the DMZ/WAN and WAN, each with two LED lights for LINK/ACT and GIGABIT. Lastly, we get two LED lights for the USB 1 and USB 2 ports. On the back of the router you will find the ON/OFF switch, the Power port, four Ethernet LAN ports, one DMZ/WAN port, one WAN port and a USB 2.0. The second USB 2.0 port can be found on the left side of the router.

cisco-rv320

Overall, it’s not really a big router, measuring 8.1×5.2×1.7 inches and weighing 46 ounces, but since it is a bit taller than the other routers in this list, it is unlikely there will be any overheating, simply because there is better airflow inside the case.
In terms of hardware, Cisco RV320 comes well equipped. It features a dual-core Cavium CN5020 CPU (clocked at 300 MHz), 256MB of RAM and 64MB of flash storage. Furthermore, you get a Broadcom BCM53125M 7 port switch for the Ethernet ports. Unfortunately, there are no WiFi options, so if you wish to make use of the 2.4 or the 5GHz radio bands, you will have to look for the Cisco routers which have the letter W at the end (for example, Cisco RV215W, RV220W or RV110W).

cisco-rv320

The RV320 is a dual WAN router, so you can expect traffic load-balancing over both WAN ports (although you can use one WAN port as main and the other WAN port as backup, in case of failure). Also, the RV320 is a VPN router, using methods like IPsec (with support for up to 50 IPsec tunnels), PPTP (supports 10 tunnels) and SSL (support 10 tunnels).
The router’s firewall features three main options: enable or disable the SPI (Stateful Packet Inspection), the WAN ping or DoS, use content filtering or create access rules for a specific IP address or a range of address and for a targeted port or protocol.
In terms of speed performance, the Cisco RV320 is a very capable router, managing to maintain 856 Mbps while downloading a 1GB file and 687 Mbps while uploading it.

 

 

8. Synology RT2600ac

synology-rt2600ac
amazonbutton

ALSO CHECK OUT: The Full Review Of Synology RT2600ac

Synology is a popular manufacturer of networking products, well known for its NAS line and, last year I was a little surprised to see that it decided to leave the comfort zone and release its first wireless router, the RT1900ac (which offered a good price-to-features ratio, a more than decent wireless performance and an excellent user interface – possibly one of the best). It seems that Synology grew quite fond of the router market and it has now released a second device, the RT2600ac, which besides offering a superior wireless performance and lots of great features, it also has dual-WAN capabilities, thus making it suitable for this list.

The dual-WAN routers aren’t a common occurrence in the consumer market and even if some would argue that the RT2600ac focuses more towards the tech-savvy, enthusiast audience, you’re not going to get the usual metallic rectangular box, but an attractive, carefully designed plastic case. Synology kept the overall look of the RT1900ac, but it has improved some key elements to make it stand out: the RT2600 looks less dynamic than its predecessor (which looked like it would jump right at you), but it has two antennas on the left and right side that gives it a slightly ominous look. Furthermore, the top side still has that small protruded zone, but there are now four sections with long and narrow cut-outs which ensure a proper airflow and keep the case cool even under a heavy load.

synology-rt2600ac

The RT2600ac has also gained a bit in terms of weight and size (weighs 1.54 pounds and measures 3.0 x 11.0 x 6.6 inches, without taking into consideration the antennas, which are detachable). The RT2600ac still has those two characteristic feet that can be used if you don’t like your router to sit flat on the desk (they also help a great deal to dissipate the heat) and, you also get the option of mounting the device on the wall using the two mounting holes on the bottom.
While the RT1900ac had the LED lights on the front, the RT2600ac has them positioned on the protruded top section, along with the Synology logo. The LEDs show the STATUS of the system, the connection status of the 2.4GHz and 5GHz radio bands, the WAN and for the four LAN ports.

Also on the front panel, Synology has equipped the router with an unusual SD card slot, which is a convenient way of easily transferring files with any clients connected to the network. On the rear side of the router, you get access to two of the four antenna bases, the Power button, the Power port, a Reset button (hold it for ten seconds to reset the device to factory default settings or for 4 seconds for a soft reset), a USB 2.0 port, a single WAN port and four Ethernet Gigabit LAN ports.

synology-rt2600ac

On the left side, the RT2600ac has a USB 3.0 port and an Eject button (used to eject any USB or SD external storages), while on the right side, there’s a WPS button and a WiFi switch (for turning on or off the WiFi).
Inside the case, Synology has equipped the RT2600ac with a 1.7GHz quad-core Qualcomm IPQ8065 CPU, 512 MB of RAM, 4GB (Toshiba) / 8MB (Macronix) and a Qualcomm Atheros QCA8337 switch chip. Furthermore, each radio bands takes advantage of the Qualcomm Atheros QCA9984, while the 5GHz band also has a RFMD PA5542 power amplifier and the 2.4GHz has a Skyworks SE2623L power amplifier.

The RT2600ac features a maximum theoretical data transfer rate of 1,733Mbps using the 5GHz band and up to 800Mbps using the 2.4GHz band. Of course, in reality, you won’t really get close to these numbers and, using a high-end laptop with a 2×2 wireless adapter, I was able to measure about 605 Mbps, 5 feet away from the router (on the 5GHz band) and about 421 Mbps at 30 feet.
Note: The wired performance of Synology RT2600ac was acceptable, reaching up to 940 Mbps for both WAN to LAN and LAN to WAN tests.

synology-rt2600ac

One of the main attractions of the RT1900ac was the uniquely designed, feature-packed user interface (which resembled the Windows OS) and it seems that the RT2600ac also takes advantage of the user-friendly UI, which now incorporates lots of features (such as the Download Station, that includes BitTorrent and usenet, Smart WAN and Smart Connect) and optional add-ons (such as the VPN Plus Server or the Intrusion Prevention).

Of course, the feature I’m going to focus on is the Smart WAN, which ensures Dual WAN load balancing, failover support or policy route. As you can see, the RT2600ac does not have two dedicated WAN ports, so you will use one LAN port as the second WAN interface (this way, you are left with only 3 LAN ports, so a switch may be a necessity). This configuration allows you to set up the Failover (and failback, once the primary interface is back to normal operation status – that can happen when one Internet connection fails), Load Balancing (two interfaces will work together and, in case one fails, it will switch to the failover mode), interface priority, policy route and interface checks.

logo

Mark is a graduate in Computer Science, having gathered valuable experience over the years working in IT as a programmer. Mark is also the main tech writer for MBReviews.com, covering not only his passion, the networking devices, but also other cool electronic gadgets that you may find useful for your every day life.

6 thoughts on “Best Dual Wan Routers (Best Business Firewall Routers in 2020)”

  1. Mark

    Thanks for the review, very useful and informative. If you are minded to add to this, could I suggest adding a comparison table showing:

    1) capabilities included, number of ports, speeds etc
    2) date reviewed / tested
    3) your score – for different features – cost, UX, quality of components etc.
    4) estimated cost
    5) links to further reading / reviews

  2. Hello Mark B,

    Thank you for your informative article regarding best Dual wan routers.
    I am a novice so my questions might be annoying.
    I am in the Philippines (but travel back to the states regularly) and I have two ISPs that I want to use together in a dual wan router so that if one isp goes down, the other one can kick in. Also, I do quite a bit of VOIP calls from Philippines back to the USA. Call quality is important to me and my calls are often dropped because latency is a problem. So i would like a dual wan router that automatically prioritizes VOIP calls and reroutes around bad servers, etc.
    It seems like from your review that the Peplink Balance One would be a good option for me. Also very important to me is to choose a dual wan router that also will perform as a good VPN router so that everything I do in the Philippines looks like I am in the USA. This will help me with my business and websites that block philippines ip address, also i would like to watch amazon prime which is blocked in Philippines.

    question 1:
    do you recommend the peplink balance one for me and if not, which dual wan router would you recommend for my situation?
    question 2: do i need a dual wan router that has DD-WRT built in or can be flashed or can I simply use the VPN solution already included with each router to fit my situation?

    I would appreciate any advice that you can give to me.

    Regards,
    Frank Williams
    Florida and Philippines

    • Hi!
      Sorry for the late reply. The Peplink Balance One should provide everything that you need, including built-in VPN and a low latency, but, as another user has pointed out, you’re not going to see close-to-Gigabit throughput – although, for most applications it should be more than enough. You could also have a look at Mikrotik for some great dual-WAN solutions at a very good price.

  3. I would have liked to see more information on these routers. For example you didn’t mention that the Synology RT2600ac offers very very little control over the dual wan route policies, as far as I can tell it just lets you specify by source ip and/or destination ip.

    You also make no mention of peplink balance ones more advanced algorithms like the lowest latency and the new fastest response time (personal favorite) as far as I know its pretty much the best dual wan router if you’re ok with 600mbps throughput.

    I haven’t tested as many as you though so if any of these routers offer something like the fastest response time algorithm peplink offers please let me know.

    • It is true that the RT2600ac is more limited when compared to the other routers in this list and since I did have in plan to retest the Peplink Balance One for a while now, I will try to create a proper, in-depth analysis of its main features and its performance in a separate article (not just some quick highlights like I did in this article) in, hopefully, a month, a month and a half.

  4. i use cisco rv325 for the apartment, about 50 users, it comes a great performance with the small and slim design comparing using server. the software should be updated.

Leave a Comment