Products · Branch Routers

One box per branch.
Hundreds of branches, one pane.

Peplink's B One series is the high-volume branch SD-WAN router. Embedded 5G, fibre WAN, SpeedFusion VPN to the bank or chain HQ, PCI-friendly segmentation, zero-touch provisioning. The default endpoint for retail chains, branch banks, satellite clinics, ATMs and SME wholesale SD-WAN.

Peplink B One Branch Router family
The lineup

Three deployments. One stack.

Same fundamental routing engine — the role changes per site.

Use case · Retail & bank branches

Retail Stores & Bank Branches

Retail branch operations

Multi-outlet chains running POS, inventory, CCTV and guest Wi-Fi on the same router. Fibre primary, 5G failover. Card terminals stay authorising when the mall ISP drops. Zero-touch provisioning at scale.

  • B One 5G per store
  • multi-carrier failover
  • SpeedFusion VPN to HQ
  • PCI-friendly VLAN
  • InControl multi-tenant
Use case · ATMs & off-site endpoints

ATM Cabinets & Off-site Endpoints

ATM endpoint with B One router

Off-site bank ATMs at fuel stations, malls and hospitals. Cellular primary, multi-SIM failover. Compact enough to drop into a standard ATM enclosure, manageable from one dashboard regardless of count.

  • B One 5G in the ATM cabinet
  • dual-SIM multi-carrier
  • encrypted SpeedFusion VPN
  • InControl at scale
Use case · Wholesale SD-WAN CPE

Wholesale SD-WAN CPE

Wholesale SD-WAN deployment

The carrier-grade CPE behind a telco's wholesale SD-WAN-as-a-Service for SME customers. Multi-tenant InControl, zero-touch provisioning, white-labelable. The router that ships to every SME end-customer site.

  • B One 5G shipped as CPE
  • ICVA + FusionHub at the carrier
  • InControl multi-tenant
  • SLA-grade failover
Why B One is the volume play

Three reasons chain rollouts ship B One.

When you're shipping hundreds or thousands of identical units, the things that matter aren't the spec sheet headlines. They're the operations: provisioning, failover behaviour, and segmentation reliability.

Zero-touch provisioning

Pre-stage the config in InControl. Ship the box to the site. Plug it in. The B One pulls its config from InControl on first boot, joins the SpeedFusion tunnel, and is in production without an engineer on site. Chain rollouts go from quarters to weeks.

Embedded 5G failover

No extra modem, no extra antenna, no extra rack space. Embedded 5G modem inside the chassis means the failover path is integrated. Connect a SIM, configure priority, done. The card terminal keeps authorising when the fibre cuts.

Edge segmentation

VLAN per service, enforced at the router. POS on its own VLAN, staff Wi-Fi on its own, guest Wi-Fi on its own, CCTV on its own. PCI-DSS scope stays small. Audits get simpler. Guest streaming doesn't compete with card authorisations.

Bonding is provided by Peplink's SpeedFusion technology — running on every router in this lineup.

Where they go to work

Branch Routers touches these.

Get started

Specify the B One config for your estate.

One conversation — site count, the WAN inventory, brand standards, PCI scope, expansion roadmap. We come back with the right B One config, the zero-touch provisioning plan and the InControl rollout that scales with the chain.