Description
This VPN router from TP-Link is integrated into the Omada SDN providing zero-touch provisioning, centralised cloud management and intelligent monitoring via cloud access and the Omada app for convenience.
It features 2 x 10G SFP+ ports (1 WAN & 1 WAN/LAN) for high-bandwidth aggregation connectivity and both the fibre and RJ45 WAN ports with load balance raise the utilisation rate of multi-line broadband.
Enterprise-standard SSL/IPSec/PPTP/L2TP VPN & OpenVPN/L2TP over IPSec VPN are ideal for use across multiple branches and for WFH.
It also features abundant security features like a powerful firewall, DoS Defense, IP/MAC/URL filtering and IP-MAC binding and One-Click ALG activation providing world-class security.
Specification
| Interface | 2 x 10GE SFP+ Ports (1 WAN, 1 WAN/LAN) 1 x 1GE SFP WAN/LAN Ports 8 x 1GE RJ45 WAN/LAN Ports 1 x RJ45 Console Ports 2 x USB Ports (Connecting 4G/3G Modem as WAN Backup) |
| Button | Reset Button |
| Power Supply | Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz) |
| Flash | 4MB SPI NOR + 256 MB NAND |
| DRAM | 4 GB DDR4 |
| LED | PWR, SYS, WAN, LAN, USB, FAN |
| Dimensions ( W x D x H ) | 17.3 x 8.7 x 1.7 in (440 x 220 x 44 mm) |
| Max Power Consumption | 26.36 W (with USB 3.0 connected) 19.12 W (without USB 3.0 connected) |
| Certification | CE, FCC, RoHS |
| Package Contents | Omada 10G Multi-WAN Security Gateway ER8411 Power Cord Rack-Mount Kit Quick Installation Guide |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux |
| Environment | Operating Temperature: 0–40 ℃ (32–104 ℉); Storage Temperature: -40–70 ℃ (-40–158 ℉) Operating Humidity: 10–90% RH non-condensing Storage Humidity: 5–90% RH non-condensing |
Performance
| Concurrent Session | 2,300,000 |
| New Sessions /Second | 20,000 |
| NAT (Static IP) | Upload: 9445.82 Mbps Download: 9449.26 Mbps |
| NAT (DHCP) | Upload: 9426.83 Mbps Download: 9426.20 Mbps |
| NAT (PPPoE) | Upload: 9413.96 Mbps Download: 9102.01 Mbps |
| NAT (L2TP) |
Upload: 4230.62 Mbps Download: 4169.53 Mbps |
| NAT (PPTP) | Upload: 3933.86 Mbps Download: 3821.97 Mbps |
| 64 Byte Packet Forwarding Rate | Upload: 1080 Mbps Download: 1030 Mbps |
| IPsec VPN Throughput | SHA1-AES256: 2140.45 Mbps SHA2-AES256: 2080.20 Mbps |
| OpenVPN | 1665.64 Mbps |
| L2TP VPN Throughput | Unencrypted: 5013.50 Mbps Encrypted: 2274.74 Mbps |
| SSL VPN Throughput | 1511.10 Mbps |
Basic Functions
| WAN Connection Type | Static/Dynamic IP PPPoE PPTP L2TP 6to4 Tunnel Pass-Through Mobile Broadband: 4G/3G modem for backup via USB port |
| MAC Clone | Modify WAN/LAN MAC Address |
| DHCP | DHCP Server/Client DHCP Address Reservation Multi-net DHCP Multi-IP Interfaces |
| IPv6 | WAN Connection |
| VLAN | 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy |
Advanced Functions
| ACL | IP/Port/Protocol/Domain Name Filtering |
| Advanced Routing | Static Routing Policy Routing |
| Bandwidth Control | IP/Port-based Bandwidth Control Guarantee & Limited Bandwidth |
| Load Balance | Intelligent Load Balance Application Optimized Routing Link Backup (Timing, Failover) Online Detection |
| NAT | One-to-One NAT Multi-Net NAT Virtual Server Port Triggering NAT-DMZ FTP/H.323/SIP/IPSec/PPTP ALG UPnP |
| Security | SPI Firewall VPN Passthrough FTP/H.323/PPTP/SIP/IPsec ALG DoS Defence, Ping of Death Local Management |
| Session Limit | IP-based Session Limit |
VPN
| SSL VPN | SSL VPN Server SSL VPN Client 500 OpenVPN Tunnels |
| IPsec VPN | 300 IPSec VPN Tunnels LAN-to-LAN, Client-to-LAN Main, Aggressive Negotiation Mode DES, 3DES, SHA1, SHA2, AES128, AES192, AES256 Encryption Algorithm IKE v1/v2 MD5, SHA1 Authentication Algorithm NAT Traversal (NAT-T) Dead Peer Detection (DPD) Perfect Forward Secrecy (PFS) |
| PPTP VPN | PPTP VPN Server PPTP VPN Client (32)*6 300 Tunnels (Shared with L2TP) PPTP with MPPE Encryption |
| L2TP VPN | L2TP VPN Server L2TP VPN Client (32)*6 300 Tunnels (Shared with PPTP) L2TP over IPSec |
| OpenVPN |
OpenVPN Server |
Security
| Filtering | WEB Group Filtering URL Filtering Web Security |
| ARP Inspection | Sending GARP Packets ARP Scanning IP-MAC Binding |
| Attack Defense | TCP/UDP/ICMP Flood Defense Block TCP Scan (Stealth FIN/Xmas/Null) Block Ping from WAN |
| Access Control | Source/Destination IP Based Access Control |
Authentication
| Web Authentication | No Authentication Simple Password Hotspot（Local User / Voucher / SMS / Radius） External Radius Sever External Portal Sever Facebook Check-In Instagram Follow |
Management
| Omada App | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Centralized Management | Omada Hardware Controller (OC300) Omada Hardware Controller (OC200) Omada Software Controller Omada Cloud-Based Controller |
| Cloud Access | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe) |
| Maintenance | Web Management Interface Remote Management Export & Import Configuration SNMP v1/v2c/v3 Diagnostics (Ping & Traceroute) NTP Synchronize Syslog Support |
| Zero-Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
| Management Features | Automatic Device Discovery Intelligent Network Monitoring Abnormal Event Warnings Unified Configuration Reboot Schedule Captive Portal Configuration |
Payment & Security
Your payment information is processed securely. We do not store credit card details nor have access to your credit card information.
The Cable Intelligence Difference
Here's how we help you make sure your jobs are supplied without issues.