Can I use Starlink and 5G together in Nigeria?

Yes with a dual-WAN router, health checks, and policy routing. Starlink bypass mode plus 5G CPE in bridge is a common pattern.

Which should be primary — Starlink or 5G?

Depends on site. Starlink primary suits rain-tolerant download-heavy offices with good sky view. 5G primary suits excellent indoor cellular and Starlink as rain backup.

Will VPN survive failover?

Often brief disconnect on path switch. SD-WAN or patient reconnect policies help. Test before production deploys.

Do I need enterprise install for dual-WAN?

Skilled in-house IT can DIY. Estates, NGOs, and regulated offices benefit from documented handover and tested failover logs.

Does failover double my monthly cost?

You pay both subscriptions — Starlink plan plus 5G data plan. Resilience is insurance against downtime cost, not a discount.

Combining Starlink with 5G as a Failover Multi-WAN Setup

Use fibre or a strong 5G line as the office link when it is already stable, and add Starlink as the backup that takes over when that line is cut. Use Starlink as the primary link when the address has no dependable fibre or cellular path. Use both at the same time only when a dual-WAN router can fail over, and only when the second subscription costs less than the outage it prevents.

Starlink is not automatically the cheapest ISP. It is a second path with its own sky view, its own power, and its own subscription. This page is the land version. A vessel that needs Starlink beside VSAT or LTE belongs on marine SD-WAN, not in an office failover diagram.

Primary, backup, or both

Primary means the office lives on Starlink and the other link is the spare. That fits a site where fibre is absent, frequently cut, or too slow for the work. Backup means fibre or 5G carries the day and Starlink appears when the first link fails. Both means policy routing: voice and VPN on one path, bulk transfers on the other, with a written order for which path wins.

Write that choice down before you buy the second subscription. A dish on the roof with no failover rule is two internet bills and one confused router. Where the comparison is fibre against Starlink at a Lagos address, start with Starlink versus fibre, then use this page for the dual-WAN design. Document the priority, test it monthly, and fix power before you buy a third router.

Why multi-WAN in Nigeria specifically

Fibre street cuts, oversubscribed LTE, rain fade on LEO, and generator changeovers create correlated failures if all gear shares one UPS and one careless electrician. Multi-WAN spreads risk across independent carriers. It doesn't eliminate outages — misconfigured failover still drops VPN sessions — but recovery time drops from hours to seconds when health checks work.

Hardware: one firewall, two WAN ports

Use a router or firewall with dual WAN and configurable health checks — MikroTik, Ubiquiti UDM-Pro, FortiGate, Peplink, depending on budget and IT skill. Avoid two consumer Starlink-style setups with double NAT and manual cable swapping. Starlink in bypass mode presents one clean WAN; 5G CPE in bridge or IP passthrough presents the second.

5G CPE placement

5G routers need indoor placement near windows or external antennas on roofs — different optimal spot than Starlink dish. Don't hide CPE in a metal cabinet. Spectranet, MTN, and Airtel performance varies by estate; survey with speed tests at desk locations, not only at the shop where you bought the SIM.

Failover vs load balancing

Failover: Starlink carries everything until health check fails — latency spike, packet loss, or interface down — then 5G takes over. Load balancing: split flows across both — useful when neither link alone covers upload needs. Most Nigerian SMEs want failover primary with optional policy routing for heavy bulk on the cheaper path.

Policy routing examples

Send Zoom and VPN via Starlink; send Windows Update and NAS offsite backup via 5G if cheaper/unmetered. Tag traffic by VLAN — finance subnet strict failover, guest Wi-Fi 5G only to protect priority quota. Document rules so the next IT volunteer doesn't undo them.

Health checks and sticky sessions

Ping 1.1.1.1 alone is lazy — test multiple targets or use interface group checks. VPN users may still drop on failover — accept brief reconnect or use SD-WAN features if budget allows. Session stickiness matters for banking portals; banking users should know failover isn't invisible magic.

Power and UPS on both paths

Failover fails if 5G CPE reboots on generator transfer while Starlink on UPS stays up — both need conditioning or shared clean circuit. Read power backup for Starlink and apply the same logic to CPE.

Enterprise handoff

Enterprise installation includes failover test logs, IP plans, and labelled rack paths. Estate IT in Abuja should sign handover before go-live payroll.

SIM and data plan management

5G failover fails when the SIM data wallet is empty — automate top-ups or use postpaid corporate SIMs. Store SIM ICCID and APN settings in runbooks. MTN and Airtel performance varies by mast load; test at your desk, not highway speedtests.

Cost justification for SMEs

Dual subscriptions cost more than one link — compare against one hour of trading desk downtime or missed client deliverable. Hybrid is insurance, not duplication for speed unless you load-balance intentionally.

Testing failover without drama

Monthly drill: unplug Starlink WAN cable during a standup window, confirm 5G takes over in under 60 seconds, document VPN reconnect time. Quarterly drill during rain if you're brave — that's when you'll actually need it.

Common multi-WAN mistakes

Two DHCP servers on LAN. Forgetting to UPS the 5G CPE. Health check only pings one dead target. Guest Wi-Fi leaking onto failover path without quota. Fix topology on paper before buying another gadget.

Step-by-step rollout for SMEs

Week one: install Starlink with low obstruction and baseline speed tests at desks. Week two: add 5G CPE, connect second WAN on firewall, configure health checks without enabling failover yet. Week three: deliberately unplug Starlink WAN during business hours, verify 5G picks up within seconds, document VPN reconnect time. Week four: enable policy routes and train staff what to expect during switchover.

Starlink bypass before dual-WAN

Enable bypass on Starlink router before dual-WAN on third-party firewall — double NAT breaks health checks and VPN passthrough. Ethernet from dish to firewall WAN; disable Starlink Wi-Fi if your firewall owns wireless. Mesh access points hang off LAN, not a second router on WAN fighting for DHCP.

When fibre enters the picture

Some Lagos offices run fibre primary, Starlink secondary, 5G tertiary — policy routing sends bulk backup to whichever path is healthy. Document three-WAN priority in runbooks; guards and junior IT should know which LED pattern is normal on each CPE.

Flapping failover troubleshooting

If WAN bounces every few minutes, health check thresholds are too aggressive for satellite jitter — widen latency or loss tolerances. If failover never triggers when Starlink is dead, checks may ping only one blocked host. If both WANs show active but traffic stalls, check asymmetric routing or DNS pinned to one provider. Enterprise handoff includes tuned thresholds from field tests, not factory defaults.