The Peplink Balance 580X HW2 is the flagship 1U enterprise SD-WAN router. Multi-gig WAN and LAN, gigabit SpeedFusion bonding, 720W of PoE++ output and onboard edge computing. Built for enterprise headquarters, large branches, campus networks, stadiums and any deployment where serious throughput, deep failover and centralised SIM management matter.
Hardware revision HW2, the latest generation. Supersedes the original Balance 580X (HW1). Optional FlexModule Mini bay for embedded LTE/5G or SIM Injector. Multiple PrimeCare options and SpeedFusion peer licence tiers (50 default, 300, 500). SKU BPL-580X-PRM.
What you get
- 8 Gbps router throughput. Multi-gig real-world performance for enterprise traffic loads.
- Gigabit SpeedFusion VPN. 1 Gbps SpeedFusion throughput with 256-bit AES encryption. Bonding, hot failover, WAN smoothing.
- 10G + 2.5G multi-gig WAN. 1x 10G Ethernet plus 4x 2.5G Ethernet WAN ports, with 2-5 configurable as LAN. Plus 2x USB-C for additional WAN options.
- 8x 802.3bt PoE++ outputs. Type 4, 720W total budget. Power 5G Domes, Antenna MAX, Wi-Fi 7 access points, PTZ cameras, all from the router.
- FlexModule Mini bay. Add an embedded 5G modem (EXM-MINI-15GN), LTE-A Cat-12 or Cat-6, or a SIM Injector for centralised carrier management.
- Edge computing. Docker support, run automation and processing directly on the router.
- 50 SpeedFusion peers built in, expandable to 300 (SFN-LC-300) or 500 (SFN-LC-500).
- AP Controller. Manage up to 100 Peplink access points via the router's built-in controller, alongside switches.
- High Availability and Drop-in Mode. Run two 580X in HA pair, or drop into an existing network without reconfiguration.
- TAA Compliant for federal and government deployments.
- 1-year PrimeCare J included. InControl 2 cloud, SpeedFusion entitlement, FusionHub licences, warranty cover.
Built for
Enterprise headquarters and large branches. 500-2,000 user capacity. The 580X HW2 anchors the WAN edge of an organisation: multi-gig fibre, redundant cellular via FlexModule, SpeedFusion bonding to remote sites and cloud workloads.
Stadiums and campus networks. Multiple uplinks aggregated, PoE++ powering distributed access points and cameras, SIM Injector centralising carrier failover. The Peplink reference architecture for venues.
Mission-critical deployments. HA pairing, Drop-in Mode for non-disruptive deployment, and proven SD-WAN failover. Used in healthcare, broadcast operations centres, and public safety command rooms.
The Tech Factory's take
The 580X HW2 sits at the strategic centre of Peplink's enterprise lineup. Below it, the Balance 310 covers mid-branch at multi-gig but without FlexModule expansion. Above it, the SDX Pro scales to true datacentre throughput. The 580X HW2 hits the sweet spot: enough throughput for nearly any branch or HQ, full PoE++ delivery for clean integrated deployments, FlexModule expansion for cellular when needed.
The 8x PoE++ output is genuinely rare at this throughput class. Most competing enterprise routers expect you to buy a separate PoE switch. With the 580X HW2 you can power your 5G Domes, your Wi-Fi 7 APs, and your PTZ cameras directly from the router. One box, one cable per device, less rack clutter, fewer points of failure.
The hardware refresh from HW1 to HW2 brought multi-gig WAN/LAN throughout, doubled PoE budget, USB-C WAN options, and a cleaner FlexModule bay design. If you're shopping new, get the HW2.
When it's not the right fit
Small branch. If you have under 100 users and don't need PoE++ or FlexModule, the Balance 310 does the job for a quarter of the price.
True datacentre throughput. If you need 20 Gbps or more sustained, look at the SDX Pro.
Mobile/vehicle. The 580X HW2 is rack-mount and fan-cooled, mains-powered. For vehicles, vessels and mobile production, the BR or Transit ranges are designed for that role.
Specifications
| Performance | |
|---|---|
| Router throughput | 8 Gbps |
| SpeedFusion throughput | 1 Gbps with 256-bit AES |
| Recommended users | 500 to 2,000 |
| WAN interfaces | |
| Multi-Gig Ethernet | 4x 2.5G + 1x 10G |
| USB-C | 2x |
| Optional cellular | 1x via FlexModule Mini bay |
| WAN/LAN configurable | Ethernet WAN ports 2-5 are configurable as LAN |
| LAN interfaces | |
| Multi-Gig Ethernet | Up to 8x 2.5G + 1x 10G |
| NIC bonding | LACP (802.3ad) |
| PoE | |
| Output | 8x Type 4 802.3bt PoE++ |
| Total budget | 720W |
| SpeedFusion VPN | |
| Peers built in | 50 |
| Peers with SFN-LC-300 | 300 |
| Peers with SFN-LC-500 | 500 |
| Features | Site-to-site VPN, bandwidth aggregation, hot failover, WAN smoothing, X.509 cert support, dynamic routing |
| Other VPN | PPTP/L2TP/OpenVPN server, IPsec network-to-network, GRE tunnel |
| Routing | |
| Dynamic protocols | BGP, OSPFv2, RIPv2 |
| Load balancing | 7 algorithms: Weighted, Enforced, Persistence, Priority, Overflow, Least Used, Lowest Latency |
| QoS | User groups, bandwidth reservation, individual limits, application prioritisation (SIP, HTTPS, VPN, custom) |
| Security | |
| Firewall | Stateful firewall, DoS prevention, web blocking, content filtering |
| Authentication | RADIUS, LDAP, Active Directory, local user |
| High Availability | |
| HA pair | Yes |
| Drop-in Mode | Yes |
| Edge computing | |
| Container support | Docker |
| AP Controller | |
| Max APs supported | 100 (500 with AP Controller Pro upgrade) |
| Features | Auto AP discovery, firmware management, profile configuration, Wi-Fi usage statistics |
| Power | |
| Input | Universal 100-240V AC |
| Consumption | 37W nominal, 39W max (without PoE or USB-C output) |
| Physical and environmental | |
| Form factor | 1U rack-mount |
| Dimensions | 440 x 310 x 44 mm (17.3 x 12.2 x 1.73 in) |
| Weight | 4.26 kg (9.39 lb) |
| Operating temperature | 0°C to 40°C |
| Humidity | 10% to 95% non-condensing |
| Compliance | |
| Certifications | FCC, CE, RoHS, TAA Compliant |
| Management | |
| Tools | InControl 2 cloud, web admin, CLI, SNMP v1/v2c/v3 |
| Notifications | Email, syslog, active client and session lists |
| Warranty | 1-year limited (extendable via PrimeCare J or PrimeCare+ J) |
What's in the box
- 1x Balance 580X HW2
- 1x Power cord (ACW-614)
- 1x Ear rack mount kit with screws
- Rubber foot pad set
- Quick start guide
FlexModule Mini options
The Balance 580X HW2 has a single FlexModule Mini bay. Choose the cellular or carrier-management module that fits your deployment. Modules are sold separately.
- FlexModule Mini 5G (EXM-MINI-15GN). Embedded 5G modem for primary or backup cellular WAN.
- FlexModule Mini LTEA Cat-12 (EXM-MINI-1LTEA-Q). LTE Advanced Cat-12 cellular WAN for deployments where 5G isn't required.
- FlexModule Mini LTEA Cat-6 (EXM-MINI-1LTEA-B). Entry LTE Advanced cellular WAN.
- FlexModule Mini SIM Injector (EXM-MINI-SIM-8). 8-SIM centralised carrier management. Pull SIM profiles to connected Domes and Antenna MAX over the network.
Recommended add-ons
- SpeedFusion peer licences. SFN-LC-300 (300 peers) or SFN-LC-500 (500 peers). The default 50 peers covers most deployments; scale up when adding many remote sites.
- PrimeCare J extension (PRM-J-1Y/2Y/4Y). Keeps cloud management, SpeedFusion entitlement and warranty cover live beyond year one.
- PrimeCare+ J extension (PCP-J-1Y/2Y/4Y). Adds advanced 24/7 technical support, faster RMA, premium hardware warranty.
- HD1 Dome Pro 5G. Outdoor 5G Dome powered directly from the 580X's PoE++ ports.
- Antenna MAX. Enclosed IP67 antenna for fixed-mount cellular WAN, also PoE-powered.
- Wi-Fi 7 access points. Pair with Peplink AP One Enterprise series, managed via the built-in AP Controller.
How it compares
| Balance 310 (HW5) | Balance 580X HW2 | SDX Pro | |
|---|---|---|---|
| Router throughput | 4 Gbps | 8 Gbps | 20+ Gbps |
| SpeedFusion throughput | 1 Gbps | 1 Gbps | 10 Gbps |
| WAN ports | 2x 2.5GbE | 4x 2.5G + 1x 10G + 2x USB-C | SFP+ multi-gig |
| LAN ports | 10G + 2.5G | Up to 8x 2.5G + 1x 10G | SFP+ multi-gig |
| PoE output | 1x PoE+ | 8x PoE++ (720W) | None (use external) |
| FlexModule slots | 0 | 1x Mini | Multiple full-size |
| SpeedFusion peers | 2 default | 50 default, 500 max | Unlimited via licence |
| Form factor | Fanless desktop | 1U rack-mount | 1U rack-mount |
| Recommended users | 50-250 | 500-2,000 | 2,000+ |
| Best for | Mid branch, AV/media | HQ, large branch, stadium | Datacentre, ISP edge |
Frequently asked questions
Which FlexModule Mini should I add for cellular?
For new deployments, the EXM-MINI-15GN (5G) is the right choice in 5G coverage areas. Cat-12 (EXM-MINI-1LTEA-Q) is a sensible step down where 5G isn't available or budget matters. Cat-6 (EXM-MINI-1LTEA-B) is entry tier. The SIM Injector module (EXM-MINI-SIM-8) doesn't add cellular itself; it centralises SIM management for connected Domes and Antenna MAX.
Can I run two 580X HW2 in HA pair?
Yes. The 580X supports HA, providing automatic failover between primary and standby units. Recommended for any deployment where router failure would cause a service outage.
What's the PoE budget and how do I plan it?
Total PoE budget is 720W across 8x 802.3bt Type 4 ports. Each port can deliver up to 90W. Plan against typical loads: a 5G Dome draws ~25W, a Wi-Fi 7 AP ~30W, a PTZ camera 30-60W. Most realistic deployments use under half the available budget.
Does it support Drop-in Mode?
Yes. Drop-in Mode lets you deploy the 580X HW2 without reconfiguring the existing network. Useful for non-disruptive upgrades and testing.
How many SpeedFusion peers do I really need?
50 default peers is plenty for most enterprises with 25-40 remote sites. Scale to 300 (SFN-LC-300) for large multi-site networks. The 500-peer licence (SFN-LC-500) is for service providers and very large enterprises.
Will it fit in my standard 19-inch rack?
Yes. 1U rack-mount form factor, ear rack mount kit included. Total depth 310mm.
Resources
- Balance 580X HW2 datasheet (PDF)
- Balance 580X HW2 FAQ (PDF)
- Comparison table
- Firmware and user manual
Need help sizing this for your deployment?
The Tech Factory is a Peplink Gold Partner with an in-house engineering team that deploys these in the field. Enterprise-tier deployments need careful sizing of FlexModule cellular, SpeedFusion peer count, PoE budget and HA architecture. Talk to us before you order; we'll quote and design the deployment properly.
Email info@thetechfactory.co.uk or call us.
Router-side SpeedFusion throughput: up to 1 Gbps unencrypted, 1 Gbps with 256-bit AES.