-
Integrated into the Omada SDN: Zero-Touch Provisioning (ZTP), central cloud management and intelligent monitoring.
-
Centrally Managed: Cloud access and Omada app provide ultra-convenient and easy management.
-
Two 10GE SFP+ ports: 1 WAN and 1 WAN/LAN 10GE SFP+ ports provide high-bandwidth aggregation connectivity.
-
Up to 10 WAN ports: Fiber optic and RJ45 WAN ports with load balancing allow you to use your Internet connections as effectively as possible.
- Highly secure VPN
-
Comprehensive security features: Powerful firewall, DoS defense, IP/MAC/URL filtering and IP-MAC binding, and one-click ALG activation provide best-in-class security.
Get the most out of your internet access with the Omada Enterprise 10G gateway
Maximum bandwidth with the 10G Omada Enterprise Gateway. Build a lightning-fast network with Omada ER8411, an enterprise-grade VPN router with 10G ports. It exceeds the need for fast, reliable and secure enterprise networks and is ideal for large installations such as office buildings, schools and hotels.
10 ������ WAN ports and one USB WAN for mobile broadband
With up to 10 WAN SFP+, SFP and RJ45 ports, the router supports a wide range of Internet access. *1 Multi-WAN load balancing distributes your data streams according to the bandwidth share of each WAN port in order to utilize and bundle all your Internet lines as efficiently and equally as possible, thus increasing your Internet bandwidth to the maximum. Connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN redundancy.
Highly secure and powertraffic and multiple VPN protocols including SSL, IPSec, PPTP and L2TP in client/server mode. One-click Auto IPSec VPN simplifies VPN configuration and makes network management and deployment easier. *2 The router also has built-in VPN engine hardware that enables support and management of hundreds of IPSec, PPTP, L2TP, SSL VPN and OpenVPN tunnels.
1. At least one WAN/LAN port must be used as a LAN port.
2. These features require the use of an Omada hardware controller, software controller or cloud-based controller.
3. Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller. Please go to the Omada Cloud-Based Controller product list to find all models supported by Omada Cloud-Based Controller.
4. The LAN MAC address can only be changed in standalone mode.
5. These features are only supported in standalone mode.
6. The ER8411 can work as a VPN client and connect to TP VPN servers and 10 OpenVPN servers.
SPECIFICATIONS
|
SECURITY
|
| Access Control |
Source/Destination IP Based Access Control |
| Filtering |
• WEB Group Filtering*5
• URL Filtering
• Web Security*5
|
| ARP Inspection |
• Sending GARP Packets*5
• ARP Scanning*5
• IP-MAC Binding*5
|
| Attack Defense |
• TCP/UDP/ICMP Flood Defense
• Block TCP Scan (Stealth FIN/Xmas/Null)
• Block Ping from WAN |
|
HARDWARE FEATURES
|
| Standards and Protocols |
• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q
• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN
|
| Interface |
• 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)
• 1× 1GE SFP WAN/LAN Ports
• 8× 1GE RJ45 WAN/LAN Ports
• 1× RJ45 Console Ports
• 2× USB Ports (Connecting 4G/3G Modem as WAN Backup)
|
| Network Media |
• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)
EIA/TIA-568 100Ω STP (Max 100 m)
• 100BASE-TX: UTP category 5, 5e cable (Max 100 m)
EIA/TIA-568 100Ω STP (Max 100 m)
• 1000BASE-T: UTP category 5e, 6 cable (Max 100 m)
|
| Fan Quantity |
2 |
| Button |
Reset Button |
| Power Supply |
Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz) |
| PoE Budget |
- |
| Flash |
4MB SPI NOR + 256 MB NAND |
| DRAM |
4 GB DDR4 |
| LED |
PWR, SYS, WAN, LAN, USB, FAN |
| Dimensions ( W x D x H ) |
17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm) |
| Protection |
4 kV surge protection |
| Enclosure |
Steel |
| Mounting |
Rack Mountable |
| Max. Power Consumption |
• 26.36 W (with USB 3.0 connected)
• 19.12 W (without USB 3.0 connected) |
|
PERFORMANCE
|
| IPS Throughput |
TCP: 4924 Mbps;
UDP: 4521 Mbps
|
| DPI Throughput |
TCP: 5524 Mbps;
UDP: 3547 Mbps |
| WireGuard VPN |
1411 Mbps |
| Concurrent Session |
2,300,000 |
| New Sessions /Second |
20,000 |
| NAT (Static IP) |
• Upload: 9445.82 Mbps
• Download: 9449.26 Mbps |
| NAT(DHCP) |
• Upload: 9426.83 Mbps
• Download: 9426.20 Mbps |
| NAT(PPPoE) |
• Upload: 9413.96 Mbps
• Download: 9102.01 Mbps |
| NAT (L2TP) |
• Upload: 4230.62 Mbps
• Download: 4169.53 Mbps |
| NAT (PPTP) |
• Upload: 3933.86 Mbps
• Download: 3821.97 Mbps |
| 64 Byte Packet Forwarding Rate |
• Upload: 1080 Mbps
• Download: 1030 Mbps |
| IPsec VPN Throughput |
• SHA1-AES256: 2140.45 Mbps
• SHA2-AES256: 2080.20 Mbps |
| OpenVPN |
1665.64 Mbps |
| L2TP VPN Throughput |
• Unencrypted: 5013.50 Mbps
• Encrypted: 2274.74 Mbps |
| PPTP VPN Throughput |
• Unencrypted: 10143 Mbps
• Encrypted: 952 Mbps |
| SSL VPN Throughput |
1511.10 Mbps |
| 66 Byte Packet Forwarding Rate |
- |
| 1,518 Byte Packet forwarding rate |
• Upload: 9970 Mbps
• Download: 9970 Mbps |
|
BASIC FUNCTIONS
|
| WAN Connection Type |
• Static/Dynamic IP
• PPPoE
• PPTP
• L2TP
• 6to4 Tunnel
• Pass-Through
• Mobile Broadband: 4G/3G modem for backup via USB port |
| MAC Clone |
Modify WAN/LAN MAC Address*4
|
| DHCP |
• DHCP Server/Client
• DHCP Address Reservation
• Multi-net DHCP
• Multi-IP Interfaces |
| IPv6 |
WAN Connection |
| VLAN |
802.1Q VLAN |
| IPTV |
IGMP v2/v3 Proxy |
|
Advanced Features
|
| Access Control |
IP/Port/Protocol/Domain Name Filtering |
| Advanced Routing |
• Static Routing
• Policy Routing |
| Bandwidth Control |
• IP/Port-based Bandwidth Control
• Guarantee & Limited Bandwidth |
| Load Balance |
• Intelligent Load Balance
• Application Optimized Routing
• Link Backup (Timing*5, Failover)
• Online Detection |
| NAT |
• One-to-One NAT*5
• Multi-Net NAT
• Virtual Server
• Port Triggering*5
• NAT-DMZ
• FTP/H.323/SIP/IPSec/PPTP ALG
• UPnP |
| Security |
• SPI Firewall
• VPN Passthrough
• FTP/H.323/PPTP/SIP/IPsec ALG
• DoS Defence, Ping of Death
• Local Management |
| Session Limit |
IP-based Session Limit |
|
VPN
|
| SD-WAN |
√ (Only in Controller Mode) |
| SSL VPN |
• SSL VPN Server
• SSL VPN Client
• 500 OpenVPN Tunnels |
| IPsec VPN |
• 300 IPSec VPN Tunnels
• LAN-to-LAN, Client-to-LAN
• Main, Aggressive Negotiation Mode
• DES, 3DES, SHA1, SHA2, AES128, AES192, AES256 Encryption Algorithm
• IKE v1/v2
• MD5, SHA1 Authentication Algorithm
• NAT Traversal (NAT-T)
• Dead Peer Detection (DPD)
• Perfect Forward Secrecy (PFS) |
| PPTP VPN |
• PPTP VPN Server
• PPTP VPN Client (32)*6
• 300 Tunnels (Shared with L2TP)
• PPTP with MPPE Encryption |
| L2TP VPN |
• L2TP VPN Server
• L2TP VPN Client (32)*6
• 300 Tunnels (Shared with PPTP)
• L2TP over IPSec |
| OpenVPN |
• OpenVPN Server
• OpenVPN Client (10)*6
• 110 OpenVPN Tunnels |
| WireGuard VPN |
• 300 Tunnels |
|
AUTHENTICATION
|
| Web Authentication |
• No Authentication
• Simple Password*2
• Hotspot（Local User / Voucher*2 / SMS*2 / Radius*2）
• External Radius Sever
• External Portal Sever*2
• Facebook Check-In*2
• Instagram Follow*2
|
|
Management Features
|
| Omada App |
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Centralized Management |
• Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada Software Controller
• Omada Cloud-Based Controller |
| Cloud Access |
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Service |
Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe) |
| Maintenance |
• Web Management Interface
• Remote Management
• Export & Import Configuration
• SNMP v1/v2c/v3
• Diagnostics (Ping & Traceroute)*5
• NTP Synchronize*5
• Syslog Support |
| Zero-Touch Provisioning |
Yes. Requiring the use of Omada Cloud-Based Controller. |
| Management Features |
• Automatic Device Discovery
• Intelligent Network Monitoring
• Abnormal Event Warnings
• Unified Configuration
• Reboot Schedule
• Captive Portal Configuration |
|
OTHERS
|
| Certification |
CE, FCC, RoHS |
| Package Content |
• Omada 10G Multi-WAN Security Gateway ER8411
• Power Cord
• Rack-Mount Kit
• Quick Installation Guide |
| System Requirements |
Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux |
| Environment |
• Operating Temperature: 0–40 ℃ (32–104 ℉);
• Storage Temperature: -40–70 ℃ (-40–158 ℉)
• Operating Humidity: 10–90% RH non-condensing
• Storage Humidity: 5–90% RH non-condensing |
TP-LINK OMADA 10G VPN ROUTER, 10GE SFP+ WAN(1), LAN/WAN(1), GbE SFP(1), LAN/WAN(8), 5Y
