TP-Link Omada Gigabit Rackmount/Desktop VPN Router
- SKU: ER7406
Product Information
Omada Gigabit Rackmount/Desktop VPN Router
Software Defined Networking (SDN) with Cloud Access
Remotely manage your access points, switches, and gateways across multiple sites all from a single interface.
High-Security and High-Performance VPN
SSL/ IPSec / GRE / WireGuard / PPTP / L2TP VPN & OpenVPN easily build secure VPN tunnels for secure Internet browsing, communication between different branches, or enabling remote work or study from home.
DPI (Deep Packet Inspection)
Leverage Deep Packet Inspection (DPI) to effectively block or prioritize specific applications for enhanced security and optimized bandwidth allocation. Easily manage internet access rights and policies through IP/MAC/Location/URL Filtering and Access Control Lists (ACL).
Attack Prevention with 4000+ Signature Rules
Enhance threat detection and defense with the integrated IDS/IPS engine. Benefit from continuous protection with an extensive attack prevention signature database, featuring over 4,000 regularly updated signature rules.
DoS/DDoS Protection
Automatically detect and block Denial of Service (DoS) attacks, including TCP/UDP/ICMP Flooding, Ping of Death, and related threats, ensuring uninterrupted network performance.
Features:
- 1× Gigabit SFP WAN/LAN port
- 5× Gigabit RJ45 ports (1× WAN, 4× WAN/LAN)
- 1× USB 3.0 port (Supports USB storage, and LTE backup with LTE dongle)
- Load Balancing on up to 5 WAN ports raises the utilization rate of multi-line broadband
- High-security SSL/ IPSec / GRE§ / WireGuard / PPTP / L2TP VPN & OpenVPN
- Centralized cloud management via the web or the Omada app*
- DoS defense, IP/MAC/URL filtering, DPI, and IPS/IDS for enhanced security.
- Rackmount/Desktop
Specifications
Specifications ER7406
| Hardware | |
| Standards and Protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP |
| Interface | 1 Gigabit SFP WAN/LAN Port 1 Gigabit WAN port 4 Gigabit LAN/WAN ports |
| USB | 1 USB3.0 (supports USB LTE dongle and USB Storage) |
| Fan Quantity | Fanless |
| Network Media | 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m) |
| Button | Reset button |
| Power Supply | 100-240VAC,50/60Hz |
| Flash | 128 MB NAND |
| DRAM | 512 MB DDR4 |
| LED | PWR, SYS, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act) |
| Max Power Consumption | 7.5 W (with USB 3.0 connected) 4.5 W (without USB 3.0 connected) |
| Surge Protection | 4 kV surge protection |
| Mounting | Desktop/ Rackmount |
| Dimensions ( W x D x H ) | 11.6 × 5.5 × 1.7 in (294 × 140 × 44 mm) |
| SDN Support | |
| Hardware Controller (OC200/OC300) | Automatic Device Discovery Intelligent Network Monitoring Abnormal Event Warnings Unified Configuration Reboot Schedule Captive Portal Configuration |
| Performance | |
| Concurrent Session | 150000 |
| New Sessions /Second | 5300 |
| IPS Throughput | TCP: 229 Mbps UDP: 188 Mbps |
| DPI Throughput | TCP: 933 Mbps UDP: 927 Mbps |
| Static IP NAT Throughput (Upload / Download) | 945.3 Mbps / 940.5 Mbps |
| DHCP NAT Throughput (Upload / Download) | 939.6 Mbps / 940.9 Mbps |
| PPPoE NAT Throughput (Upload / Download) | 943.6 Mbps / 940.9 Mbps |
| L2TP NAT Throughput (Upload / Download) | 880.1 Mbps / 859.0 Mbps |
| PPTP NAT Throughput (Upload / Download) | 855.0 Mbps / 907.2 Mbps |
| 66 Byte Packet forwarding rate (Upload / Download) | 1,453,489 pps / 1,453,488 pps |
| 1,518 Byte Packet forwarding rate (Upload / Download) | 81,279 pps / 81,275 pps |
| IPSec VPN Throughput | ESP-SHA1-AES256: 617.1 Mbps ESP-SHA256-AES256: 592.8 Mbps ESP-SHA384-AES256: 592.4 Mbps ESP-SHA512-AES256: 604.5 Mbps |
| GRE | Unencrypted: 611.9 Mbps Encrypted: 325.0 Mbps |
| WireGuard VPN | 341.3 Mbps |
| SSL VPN | 131.6 Mbps |
| OpenVPN | 139.1 Mbps |
| L2TP VPN Throughput | Unencrypted: 977.4 Mbps Encrypted: 334.6 Mbps |
| PPTP VPN Throughput | Unencrypted: 1064.1 Mbps Encrypted: 206.8 Mbps |
| Basic Functions | |
| WAN Connection Type | Static IP Dynamic IP PPPoE (supports MRU Configuration) PPTP L2TP |
| DHCP | DHCP Server DHCPv6 PD Server (only in Standalone Mode) DHCP Options Customization DHCP Address Reservation Multi-IP Interfaces Multi-Net DHCP |
| MAC Clone | Modify WAN/LAN MAC Address2 |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
| IPv6 | StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode |
| Stateful ACL | √ |
| mDNS Repeater | √ |
| Quality of Service | √ |
| Bridge VLAN | √ |
| VLAN | 802.1Q VLAN |
| Transmission | |
| Load Balance | Intelligent Load Balance Application Optimized Routing Link Backup (Timing, Failover) Online Detection |
| NAT | One-to-One NAT Multi-Net NAT Port Forwarding Port Triggering1 NAT-DMZ FTP/H.323/SIP/IPSec/PPTP ALG UPnP |
| Routing | Static Routing Policy Routing RIP OSPF |
| Session Limit | IP-based Session Limit |
| Bandwidth Control | IP-based Bandwidth Control |
| VPN | |
| IPSec VPN | 100 IPSec VPN Tunnels LAN-to-LAN, Client-to-LAN Main, Aggressive Negotiation Mode DES, 3DES, AES128, AES192, AES256 Encryption Algorithm IPsec Failover IKE v1/v2 MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm NAT Traversal (NAT-T) Dead Peer Detection (DPD) Perfect Forward Secrecy (PFS) |
| PPTP VPN | PPTP VPN Server PPTP VPN Client (10) 50 Tunnels PPTP with MPPE Encryption |
| L2TP VPN | L2TP VPN Server L2TP VPN Client (10) 50 Tunnels L2TP over IPSec |
| GRE | Only in Standalone Mode |
| WireGuard VPN | √ |
| SSL VPN | 50 Tunnels |
| OpenVPN | OpenVPN Server OpenVPN Client (5)3 55 OpenVPN Tunnels ""Certificate + Account"" Mode Full Mode |
| Security | |
| Attack Defense | TCP/UDP/ICMP Flood Defense Block TCP Scan (Stealth FIN/Xmas/Null) Block Ping from WAN |
| Filtering | Web Group Filtering1 URL Filtering Web Security1 |
| DNS Proxy | DNSSEC, DoH, and DoT |
| ARP Inspection | Sending GARP Packets ARP Scanning2 IP-MAC Binding |
| Access Control | Source/Destination IP Based Access Control |
| Web Authentication | No Authentication Simple Password3 Hotspot (Local User / Voucher3 / SMS3 / Radius3) External Radius Sever External Portal Sever3 LDAP4 |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) |
| Maintenance | Web Management Interface Remote Management Export & Import Configuration SNMP v1/v2c/v3 Diagnostics (Ping & Traceroute)5 NTP Synchronize5 Port Mirroring CLI (only in Standalone Mode) Syslog Support |
| Certification | CE, FCC, RoHS |
| Package Contents | ER7406, Power Cord, Quick Installation Guide, Rackmount Kit |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX or Linux |
| Environment | Operating Temperature: 0 °C to 50 °C (32 °F to 122 °F) Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) Operating Humidity: 10% to 90% non-condensing Storage Humidity: 5% to 90% non-condensing |