ATL 5G R16 (ATLGM&RG520F-EU)

The ATL 5G R16 (product code ATLGM&RG520F-EU) is a small outdoor router with a 5G/LTE modem and a built-in eSIM. There is one gigabit port and no Wi-Fi. That shape tells you where it belongs: outside on a wall or a pole where the signal is, with one cable going inside to the router or switch that does the actual network.

The catalogue records the default configuration router-lte and lte1 as the WAN interface. Everything you fill in about your internet connection therefore concerns the SIM, not the cable.

The catalogue entry adds one more thing: the interface names for this model were confirmed on real hardware by stevenma on the MikroTik forum. The verified flag is true, so the tool shows no "port layout not verified" note here.

The port and the modem

• lte1: the modem, and your WAN by default. This is where the APN goes, and the credentials if your SIM wants them.
• ether1: one gigabit port with PoE-in. It is your power supply and your only cable at once. Mounted on a wall that is the point: one UTP run inside.

There is no PoE-out: the catalogue records no feeding port, so the PoE-out per port field never appears. See PoE-out per port.

One wired port means the roles that demand at least three are greyed out: Office router with VLANs, Router + CAPsMAN and Hotspot, with the message "Needs at least 3 wired ports (WAN + LAN + trunk)". If more than one device has to hang off it, a switch goes in between.

No Wi-Fi

The catalogue records no radios for this model. Everything that needs one is therefore greyed out with "No wifi radio": Access point, CAP (managed by CAPsMAN), Wi-Fi repeater and Wireless CPE / point-to-point. The Wi-Fi step does not appear in the wizard and the script writes no wireless lines. If you want Wi-Fi, it comes from an access point behind ether1.

What the catalogue does not record

The architecture is recorded as ARM 64bit. The memory size, the licence level and the switch chip are not in our catalogue for this model, so this page does not quote them and the tool does not reason with them either. Because there is no memory figure, the small-board warning never appears here, even if the board were in fact tight. hw_vlan is empty, so you will not see the warning about bridge VLAN filtering and hardware offload either.

Setting up the connection

In the LTE / 5G router role the wizard starts at the uplink, with lte1 already filled in. What matters there:

• APN: your carrier's access point name. This is the field that goes wrong most often. A wrong APN looks exactly like a weak signal: a modem that registers and passes no data.
• Authentication: usually none; some business SIMs want a username and password.
• Default route and the carrier's DNS: normally leave these on.

After that you set up the LAN, see LAN and DHCP, and walk the usual path: DNS, firewall, management access, system. The configurator says nothing about the built-in eSIM: which SIM is active is something you arrange on the device itself.

What it is good at, and where it runs out

Good at: hanging outside where the signal is, and bringing that connection inside over one cable. As a backup line behind a fixed connection it works too, see Recipe: LTE as a backup line.

Where it runs out:

• One port, no Wi-Fi. This device is the connection; the network is built behind it.
• Carrier-grade NAT. Many carriers put mobile internet behind CGNAT. Port forwarding and inbound VPN then do not work, whatever you do to the firewall. An outbound tunnel to a fixed point is the answer; see WireGuard.
• Data allowances. A camera or automatic updates behind it drain a bundle faster than you expect.

Which roles fit

• LTE / 5G router: the role this device exists for. It only appears on devices with a modem, and this is one.
• Home router: available, because this is not a switch. Useful if you actually want ether1 as the WAN.
• VPN gateway: available, with the CGNAT caveat above.
• Harden only (baseline): for an ATL that is already mounted.
• All Wi-Fi roles are greyed out with "No wifi radio".

The quickest route to a working configuration

1. Pick One device and search for ATL.
2. Pick the LTE / 5G router role.
3. Fill in the APN and leave the rest of the uplink on its defaults.
4. Set up the LAN and set an admin password.
5. Reset the device and paste the script. See Using the script.

Afterwards check on the device with /interface lte print and /ip address print that the modem is connected and has an address. No address on lte1? The APN is the first place to look; see LTE does not connect.

What trips people up

• The wrong APN. The most reported fault on every mobile model.
• Looking for a LAN port. There is one, and in the LTE role that is your LAN. Use it as a second uplink and nothing wired is left.
• Expecting Wi-Fi. There is none, and the tool says so.
• Forgetting the power. The port takes PoE-in; the injector or switch indoors has to supply it.
• Port forwarding that does not work. Check whether you have a public address first; see Opening a port.