5G Backup Router: Automatic Failover for Business Broadband

Fixed lines fail. Diggers cut cables, cabinets get water in them, exchange equipment breaks and providers make mistakes. For most businesses the question is not whether the line will go down, it is what happens when it does. A 5G backup router turns a day of lost sales or idle staff into a few seconds of reconnection.

How 5G failover works

The router has two WAN connections: the fixed line, plugged into a WAN port, and the 5G connection from its own modem. One is set as primary and the other as backup.

The router continually checks the primary. A good failover setup does not just check whether the cable is connected, because a line can be physically up but passing no traffic. Instead it sends regular test traffic, usually pings to reliable addresses or DNS lookups, and declares the line down if several checks fail in a row. It then moves traffic to 5G.

Failover versus load balancing

Failover uses 5G only when the main line is down. Load balancing uses both connections at once, spreading traffic between them. Some routers can do both: load balance normally, then put everything on the surviving link if one fails.

Load balancing gets more value from the 5G connection, but uses more data. It can also cause problems for applications that dislike changing IP addresses mid-session, such as some banking and VPN services. Many sites start with simple failover and add policy routing later, for example sending guest Wi-Fi over 5G while business traffic stays on the fixed line.

Getting the health checks right

This is where most backup setups are either excellent or useless. Things to configure carefully:

• Check targets. Use at least two reliable, independent addresses. If you only ping one and it has a problem, the router will fail over for no reason.
• Interval. Every few seconds is common. Too frequent wastes data on the backup link, too slow delays detection.
• Failure threshold. Require several consecutive failures before switching, to avoid flapping on a single lost packet.
• Recovery threshold. Require the line to pass checks for a while before switching back. Lines often bounce up and down during repairs.
• Keep the backup warm. Keep the 5G connection registered and ready rather than starting it from cold, so failover takes seconds rather than a minute.

Where to fit the 5G router

There are two common designs.

One router doing both. A business router with a WAN port for the fixed line and a built-in 5G modem. Simple, one box, one configuration. The fixed line usually connects via the provider’s ONT or modem in bridge mode, or via the provider’s router with the business router behind it.

A separate 5G router feeding the main firewall. If the site already has a firewall with two WAN ports, the 5G router acts as a second WAN feed. The firewall handles failover. This keeps the existing security setup intact and is common in larger offices and retail estates.

Either way, the antenna position matters. Backup routers often get put in the comms cabinet beside the main router, where the 5G signal is weakest. During an outage that can mean a backup connection too slow to be useful. Fit an external antenna. See adding an external antenna.

Why 5G rather than 4G for backup?

For a small site where the backup only needs to keep a card terminal and email working, 4G is fine. For an office where people expect to carry on working normally during an outage, 5G makes a real difference. Users stop noticing they are on backup, which is the whole point.

5G also tends to have more capacity in busy areas. If an outage affects a whole street because a cable has been cut, every business with a 4G backup on that street suddenly shares the same cells. 5G holds up better in that situation.

Data allowances for backup

A backup SIM may use almost nothing for months, then carry a whole site for days. Plan for the worst realistic outage, not the average. Fixed line repairs that involve civil works can take several days.

• Small bundles are fine for health checks and short outages but can run out quickly in a long one.
• Pooled data across many backup SIMs is ideal for multi-site estates, because outages rarely hit every site at once.
• Some providers offer backup tariffs with low monthly costs and higher charges only when used.
• Configure alerts so someone knows when a site is running on backup.

What breaks when you fail over

Failover changes the site’s public IP address. Most things cope, but some do not:

IP-whitelisted services. Supplier portals, payment gateways or cloud services that only accept connections from your fixed IP will reject traffic from the 5G connection. Either add the backup IP to the whitelist, which needs a fixed IP SIM, or route that traffic through a VPN with a stable exit address.

Inbound access. Anything reached from outside through the fixed IP stops working. Standard mobile SIMs are behind carrier-grade NAT, so they cannot accept inbound connections at all. See public and static IP on 5G.

Site-to-site VPNs. These need to re-establish over the new connection. Make sure the VPN is configured to do so automatically, ideally with the branch initiating the connection outwards.

VoIP calls in progress. Active calls usually drop and need redialling. New calls should work once the phones re-register.

Testing failover

A backup that has not been tested should be assumed broken. Test it properly when you install it, then on a schedule:

1. Unplug the fixed line’s WAN cable and time the switch to 5G.
2. Reconnect, then simulate a more realistic failure by blocking traffic upstream while leaving the cable connected.
3. Check phones, card payments, VPNs and key cloud services all work on 5G.
4. Check speed and call quality on the backup connection, from inside the building.
5. Restore the line and confirm the router switches back cleanly.
6. Check that alerts reached the right people.

Monitoring

The worst outcome is a backup that fails silently months before it is needed, perhaps because the SIM was suspended for inactivity or the data bundle expired. Use a management platform or monitoring tool that checks the backup connection regularly and alerts if it is not available. Some routers can run a scheduled test over the backup link and report the result.

Dual SIM and dual modem backup

For sites where 5G is the primary connection, the backup can be a second mobile network. A dual SIM router switches between two SIMs on one modem. A dual modem router keeps both connected at once. See dual SIM 5G routers for the trade-offs.

Using two different networks for primary and backup avoids the risk of a single network outage taking down both. It does not protect against a local problem, such as a mast failure that affects both networks sharing the same site, so for the highest availability a fixed line plus 5G is still the strongest combination.

Backup across a multi-site estate

For retailers, banks, hospitality groups and anyone with many branches, 5G backup is usually rolled out as a standard design rather than site by site. A few things make that work smoothly.

Use one router model and one configuration template everywhere, with site-specific values such as LAN addressing filled in automatically by the management platform. Use pooled data across all backup SIMs, because outages rarely affect many sites at once. Set up a dashboard that shows which sites are currently on backup, and how long they have been there. A site that has been on backup for a week is a fixed line fault someone needs to chase.

Think about which traffic needs to keep flowing during an outage. Card payments, stock systems and phones are essential. Guest Wi-Fi and large software updates are not. Many routers can restrict what uses the backup link, which keeps data costs under control and leaves capacity for what matters.

Backup for home workers and small offices

The same idea works at small scale. A home office or two person business that depends on its connection can add a compact 5G or 4G router with failover, or a business router that accepts both the existing broadband and a SIM. The investment is small compared with a lost day of work, and it also covers the inevitable moment when the broadband provider schedules engineering work at the worst possible time.

Signs your backup is not as good as you think

• nobody can say when it was last tested
• the backup SIM is on a network nobody checked at that site
• the router is in a cabinet with no external antenna
• failover is triggered only by link status, not health checks
• there are no alerts when the site switches to backup
• the data bundle would last about an hour of normal use

Summary

A 5G backup router is one of the simplest ways to make a business more resilient. Get the antenna position right, configure sensible health checks, choose a data plan for the worst case, sort out IP-dependent services, and test it. Then forget about it until the day it saves you.

For help designing backup for one site or a whole estate, email sales@5grouter.co.uk.