Every network has a single point of failure, and almost always it’s the ISP. The fiber is great until a backhoe touches it. The cable is great until a neighborhood node fails at 6 PM on a Friday. If you’re working from home, that’s a lost afternoon. If you run an Airbnb, that’s a bad review. If you have a security system on cameras that record to a local NVR, the cameras still record — but remote access, notifications, and smart- lock cloud integrations all go dark.
Dual-WAN with cellular failover is the fix, and in 2026 it costs less and works better than most people think. Here’s what it actually is, what hardware does it well, how much the cellular side costs, and who should care.
What dual-WAN failover actually does
“Dual-WAN” just means the router has two upstream internet connections instead of one. One is your primary — fiber, cable, fixed wireless, whatever the ISP provides. The second is a backup, almost always cellular (LTE or 5G). The router monitors the primary link and, when it drops or degrades past a threshold, automatically switches traffic to the backup. When the primary comes back, it switches back.
In practice, a well-configured failover is seamless enough that the user experience is a brief pause — maybe 10–30 seconds of degraded connectivity while the switchover happens — and then everything works normally on the backup link. Video calls reconnect. Cameras come back online remotely. Smart locks respond to app commands again.
The cellular side: options and real-world cost
T-Mobile Home Internet (the budget option that actually works)
T-Mobile’s 5G Home Internet service has become a legitimate failover option, especially along the Wasatch Front where T-Mobile’s 5G mid-band coverage is solid. The typical plan is ~$50/month for unlimited data with no contract. T-Mobile ships a gateway device (the Sagemcom, Nokia, or Arcadyan unit) that connects to their network and gives you an Ethernet handoff.
The catch: the T-Mobile gateway is a standalone router and doesn’t natively plug into a dual-WAN setup. What we typically do is put the T-Mobile gateway in its own corner, run an Ethernet cable from its LAN port to the secondary WAN port on the main router, and let the router treat it as a dumb pipe. Some routers (UniFi, Peplink) handle this natively; others need a small amount of configuration.
Performance: 50–300 Mbps down in most Wasatch Front locations, depending on tower congestion. More than enough for failover-tier use.
The real advantage: $50/month with no data cap is dramatically cheaper than a dedicated LTE failover SIM from a business carrier.
USB LTE/5G modem on the router itself
Some routers — notably Peplink and a few others — accept a USB cellular modem or a SIM directly in the chassis. The router treats the cellular connection as a native WAN interface. This is the cleanest possible setup: one device, one management interface, no external gateway.
Cost depends on the data plan. A 10–20 GB/month plan on a carrier like Verizon or AT&T business runs $30–50/month. Enough for failover (where you’re only using it when the primary is down), not enough for day-to-day heavy use.
Dedicated LTE/5G failover appliance
Products like the Cradlepoint IBR series or the Peplink MAX BR1 are purpose-built cellular routers designed to sit alongside your primary router and provide a clean WAN handoff. These are the gold standard for businesses and STRs where failover needs to be completely transparent and carrier-managed.
Cost: $300–800 for the hardware, plus the carrier plan. Overkill for most residences, appropriate for revenue-generating properties and small businesses.
What hardware handles failover well
The router/firewall is what actually does the switching. Not all routers support dual-WAN, and of the ones that do, the quality of failover logic varies enormously. What we install and trust:
UniFi Cloud Gateway / Dream Machine series
The UniFi Cloud Gateway Ultra and Dream Machine Pro both have dual-WAN ports and support automatic failover. You plug the ISP into WAN1, the cellular backup into WAN2, set failover conditions (ping test to an external host, fail after N missed pings), and you’re done.
Works well for most residential and small-business installs. Failover time is typically 15–30 seconds. The switchback to primary is configurable — you can set it to wait until the primary is stable for N seconds before switching back, which prevents flapping.
Peplink Balance series
Peplink is the name in dual-WAN and cellular failover. The Balance 20X has a built-in LTE modem and two Ethernet WAN ports. SpeedFusion bonding (their premium feature) can even combine both links for seamless VoIP and video calls — no drop at all during a switchover.
We use Peplink for clients who need zero-downtime failover: medical offices, commercial spaces, and high-revenue STRs where a guest-facing outage is unacceptable.
Firewalla Gold / Purple series
Firewalla supports dual-WAN failover and has a strong following among technically-inclined homeowners. Failover logic is solid, the app is excellent, and it doubles as a serious IDS/IPS platform. The main gap is that it’s a standalone product — it doesn’t integrate into a broader UniFi or access-control ecosystem the way a Cloud Gateway does.
Who actually needs this
Short-term rental hosts — yes, always
We covered this in detail in our STR security post: a WAN outage on a Saturday in a Park City rental is a bad review, a smart-lock that stops responding, and cameras that can’t push alerts. The cellular backup literally pays for itself on the first avoided incident.
Work-from-home professionals — probably
If you take video calls for a living and your ISP goes down twice a year for 2–4 hours each time, that’s 8 hours of lost productivity. A $50/month T-Mobile backup is cheaper than a day of missed meetings.
Homes with security systems — yes, if the system is cloud-dependent
A local NVR (UniFi Protect, etc.) records on-premises even when the internet is down — that’s the whole point. But remote access, notifications, smart-lock cloud commands, and any alarm monitoring that calls out over IP all go dark without internet. Cellular backup keeps the notification path live.
Small businesses — usually yes
A restaurant, retail shop, salon, or dental office with a POS system, VoIP phones, and appointment scheduling needs the internet to take money and run the business. A $50–100/month cellular backup is trivial compared to a half-day of downtime.
Most single-family homes without revenue on the line — it depends
If your ISP is reliable (UTOPIA fiber, Google Fiber, Xfinity on a stable node) and you can tolerate an occasional outage, failover is a nice-to-have, not a need. But if you’re on a single cable or DSL link in a mountain neighborhood with one path to the CO, it’s a different story.
How we typically install it
The most common residential failover setup we install:
- UniFi Cloud Gateway or Dream Machine as the primary router, with the ISP fiber/cable on WAN1.
- T-Mobile Home Internet gateway on a shelf near the network closet, Ethernet from its LAN port into WAN2 on the UniFi.
- Failover configured to ping 1.1.1.1 and 8.8.8.8 every 5 seconds; fail after 3 misses; wait 60 seconds of stable primary before switching back.
- Notification to the homeowner (or us, for managed properties) when failover activates, so the ISP issue gets reported.
Total added cost: ~$50/month for the T-Mobile plan, ~$0 in additional hardware if the router already has two WAN ports (which UniFi Cloud Gateways do). If the router doesn’t have dual-WAN, a Cloud Gateway Ultra is ~$130 and solves it.
A note on load balancing vs failover
Some routers offer “load balancing” where both WAN links are active simultaneously and traffic is split. This sounds appealing but causes real problems: some services don’t handle mid-session IP changes well (banking sites, VPNs, game servers), and it burns through cellular data constantly even when the primary is fine.
For residential and small-business use, failover- only is almost always the right mode. Primary handles everything; secondary activates only when primary fails. Clean, predictable, no surprise data bills.
Bottom line
Dual-WAN cellular failover used to be an enterprise luxury. In 2026, with T-Mobile Home Internet at $50/month and routers with dual-WAN support at $130+, it’s accessible to anyone with a reason to care about uptime. For STRs, WFH, and small businesses, it’s table- stakes. For everyone else, it’s cheap insurance.
Keystone Integration installs dual-WAN and cellular failover across Cottonwood Heights and the rest of the Wasatch Front — integrated into the same network we design for cameras, access control, and guest Wi-Fi. You can see the full list of what we do on our main site, or get in touch to add failover to your setup.