Hi. There are a number of directions one could go. I think this may be the least expensive way to go → http://download.peplink.com/resources/peplink_balance_20x_datasheet.pdf. If a second WAN port is required I’d use an inexpensive USB-ethernet dongle. Cat4 LTE is bult-in. This is a “PrimeCare” device so SpeedFusion and a 5-PepVPN license is included. And, for this router, PrimeCare renewal after the first year is inexpensive.
Ahh. OK. Then look here → Peplink.com - Model Comparison. I was trying to get you SF and 5 PepVPN license for “almost free.”
If avoiding the USB-ethernet converter is important you’re probably looking at a Balance One Core with optional SF and 5 PepVPN licenses or the Balance 210 which includes SF but you’d still need to purchase the 5-VPN license.