TP-Link Omada VPN Rack Mountable Router with 10G Ports, 2x 10GE SFP+, 8x 1GE RJ45 WAN/LAN, 2x USB Ports, , 1411 Mbps WireGuard VPN, 4 kV Surge Protection, Black | ER8411

ER8411
Omada VPN Router with 10G Ports
Specifications
SECURITY
Access Control
Source/Destination IP Based Access Control
Filtering
WEB Group Filtering
URL Filtering
Web Security
ARP Inspection
Sending GARP Packets
ARP Scanning
IP-MAC Binding
Attack Defense
TCP/UDP/ICMP Flood Defense
Block TCP Scan (Stealth FIN/Xmas/Null)
Block Ping from WAN
HARDWARE FEATURES
Standards and Protocols
IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q
TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN
Interface
2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)
1× 1GE SFP WAN/LAN Ports
8× 1GE RJ45 WAN/LAN Ports
1× RJ45 Console Ports
2× USB Ports (Connecting 4G/3G Modem as WAN Backup)
Network Media
10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)
EIA/TIA-568 100Ω STP (Max 100 m)
100BASE-TX: UTP category 5, 5e cable (Max 100 m)
EIA/TIA-568 100Ω STP (Max 100 m)
1000BASE-T: UTP category 5e, 6 cable (Max 100 m)
Fan Quantity
2
Button
Reset Button
Power Supply
Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz)
PoE Budget
–
Flash
4MB SPI NOR + 256 MB NAND
DRAM
4 GB DDR4
LED
PWR, SYS, WAN, LAN, USB, FAN
Dimensions (W x D x H)
17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm)
Protection
4 kV surge protection
Enclosure
Steel
Mounting
Rack Mountable
Max Power Consumption
26.36 W (with USB 3.0 connected)
19.12 W (without USB 3.0 connected)
PERFORMANCE
WireGuard VPN
1411 Mbps
Concurrent Session
2,300,000
New Sessions /Second
20,000
NAT (Static IP)
Upload: 9445.82 Mbps
Download: 9449.26 Mbps
NAT (DHCP)
Upload: 9426.83 Mbps
Download: 9426.20 Mbps
NAT (PPPoE)
Upload: 9413.96 Mbps
Download: 9102.01 Mbps
NAT (L2TP)
Upload: 4230.62 Mbps
Download: 4169.53 Mbps
NAT (PPTP)
Upload: 3933.86 Mbps
Download: 3821.97 Mbps
64 Byte Packet Forwarding Rate
Upload: 1080 Mbps
Download: 1030 Mbps
IPsec VPN Throughput
SHA1-AES256: 2140.45 Mbps
SHA2-AES256: 2080.20 Mbps
OpenVPN
1665.64 Mbps
L2TP VPN Throughput
Unencrypted: 5013.50 Mbps
Encrypted: 2274.74 Mbps
PPTP VPN Throughput
Unencrypted: 10143 Mbps
Encrypted: 952 Mbps
SSL VPN Throughput
1511.10 Mbps
1,518 Byte Packet forwarding rate
Upload: 9970 Mbps
Download: 9970 Mbps
BASIC FUNCTIONS
WAN Connection Type
Static/Dynamic IP
PPPoE
PPTP
L2TP
6to4 Tunnel
Pass-Through
Mobile Broadband: 4G/3G modem for backup via USB port
MAC Clone
Modify WAN/LAN MAC Address*4
DHCP
DHCP Server/Client
DHCP Address Reservation
Multi-net DHCP
Multi-IP Interfaces
IPv6
WAN Connection
VLAN
802.1Q VLAN
IPTV
IGMP v2/v3 Proxy
ADVANCED FUNCTIONS
ACL
IP/Port/Protocol/Domain Name Filtering
Advanced Routing
Static Routing
Policy Routing
Bandwidth Control
IP/Port-based Bandwidth Control
Guarantee & Limited Bandwidth
Load Balance
Intelligent Load Balance
Application Optimized Routing
Link Backup (Timing, Failover)
Online Detection
NAT
One-to-One NAT
Multi-Net NAT
Virtual Server
Port Triggering
NAT-DMZ
FTP/H.323/SIP/IPSec/PPTP ALG
UPnP
Security
SPI Firewall
VPN Passthrough
FTP/H.323/PPTP/SIP/IPsec ALG
DoS Defence, Ping of Death
Local Management
Session Limit
IP-based Session Limit
VPN
SSL VPN
SSL VPN Server
SSL VPN Client
500 OpenVPN Tunnels
IPsec VPN
300 IPSec VPN Tunnels
LAN-to-LAN, Client-to-LAN
Main, Aggressive Negotiation Mode
DES, 3DES, SHA1, SHA2, AES128, AES192, AES256 Encryption Algorithm
IKE v1/v2
MD5, SHA1 Authentication Algorithm
NAT Traversal (NAT-T)
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)
PPTP VPN
PPTP VPN Server
PPTP VPN Client (32)
300 Tunnels (Shared with L2TP)
PPTP with MPPE Encryption
L2TP VPN
L2TP VPN Server
L2TP VPN Client (32)
300 Tunnels (Shared with PPTP)
L2TP over IPSec
OpenVPN
OpenVPN Server
OpenVPN Client (10)
110 OpenVPN Tunnels
AUTHENTICATION
Web Authentication
No Authentication
Simple Password
Hotspot（Local User / Voucher / SMS / Radius）
External Radius Sever
External Portal Sever
Facebook Check-In
Instagram Follow
MANAGEMENT
Omada App
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management
Omada Hardware Controller (OC300)
Omada Hardware Controller (OC200)
Omada Software Controller
Omada Cloud-Based Controller
Cloud Access
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Service
Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Maintenance
Web Management Interface
Remote Management
Export & Import Configuration
SNMP v1/v2c/v3
Diagnostics (Ping & Traceroute)
NTP Synchronize
Syslog Support
Zero-Touch Provisioning
Yes. Requiring the use of Omada Cloud-Based Controller.
Management Features
Automatic Device Discovery
Intelligent Network Monitoring
Abnormal Event Warnings
Unified Configuration
Reboot Schedule
Captive Portal Configuration
OTHERS
Certification
CE, FCC, RoHS
Package Contents
Omada 10G Multi-WAN Security Gateway ER8411
Power Cord
Rack-Mount Kit
Quick Installation Guide
System Requirements
Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux
Environment
Operating Temperature: 0–40 ℃ (32–104 ℉);
Storage Temperature: -40–70 ℃ (-40–158 ℉)
Operating Humidity: 10–90% RH non-condensing
Storage Humidity: 5–90% RH non-condensing