TP-Link Omada VPN Router (ER8411)

SPECIFICATIONS

HARDWARE FEATURESStandards and Protocols IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP Interface 2 10GE SFP+ Ports (1 WAN, 1 WAN/LAN) 1 1GE SFP WAN/LAN Ports 8 1GE RJ45 WAN/LAN Ports 1 RJ45 Console Ports 2 USB Ports (Connecting 4G/3G Modem as WAN Backup) Network Media 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)EIA/TIA-568 100 STP (Max 100 m) 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100 STP (Max 100 m) 1000BASE-T: UTP category 5e, 6 cable (Max 100 m) Fan Quantity 2Button Reset ButtonPower Supply Redundant Dual Power Supplies (100240 VAC, 50/60 Hz)PoE Budget -Flash 4MB SPI NOR + 256 MB NANDDRAM 4 GB DDR4LED PWR, SYS, WAN, LAN, USB, FANDimensions ( W x D x H ) 17.3 8.7 1.7 in (440 220 44 mm)Protection 4 kV surge protectionEnclosure SteelMounting Rack MountableMax Power Consumption 26.36 W (with USB 3.0 connected)19.12 W (without USB 3.0 connected)PERFORMANCEConcurrent Session 2,300,000New Sessions /Second 20,000NAT (Static IP) Upload: 9445.82 MbpsDownload: 9449.26 Mbps NAT(DHCP) Upload: 9426.83 MbpsDownload: 9426.20 Mbps NAT(PPPoE) Upload: 9413.96 MbpsDownload: 9102.01 Mbps NAT (L2TP) Upload: 4230.62 MbpsDownload: 4169.53 Mbps NAT (PPTP) Upload: 3933.86 MbpsDownload: 3821.97 Mbps 64 Byte Packet Forwarding Rate Upload: 1080 MbpsDownload: 1030 Mbps IPsec VPN Throughput SHA1-AES256: 2140.45 MbpsSHA2-AES256: 2080.20 Mbps OpenVPN 1665.64 MbpsL2TP VPN Throughput Unencrypted: 5013.50 MbpsEncrypted: 2274.74 Mbps PPTP VPN Throughput Unencrypted: 3933.86 MbpsEncrypted: 3821.97Mbps SSL VPN Throughput 1511.10 Mbps66 Byte Packet forwarding rate -1,518 Byte Packet forwarding rate Upload: 9970 MbpsDownload: 9970 Mbps BASIC FUNCTIONSWAN Connection Type Static/Dynamic IP PPPoE PPTP L2TP 6to4 Tunnel Pass-Through Mobile Broadband: 4G/3G modem for backup via USB port MAC Clone Modify WAN/LAN MAC Address4DHCP DHCP Server/Client DHCP Address Reservation Multi-net DHCP Multi-IP Interfaces IPv6 WAN ConnectionVLAN 802.1Q VLANIPTV IGMP v2/v3 ProxyADVANCED FUNCTIONSACL IP/Port/Protocol/Domain Name FilteringAdvanced Routing Static RoutingPolicy Routing Bandwidth Control IP/Port-based Bandwidth Control Guarantee & Limited BandwidthLoad Balance Intelligent Load Balance Application Optimized Routing Link Backup (Timing5, Failover) Online Detection NAT One-to-One NAT5 Multi-Net NAT Virtual Server Port Triggering5 NAT-DMZ FTP/H.323/SIP/IPSec/PPTP ALG UPnP Security SPI Firewall VPN Passthrough FTP/H.323/PPTP/SIP/IPsec ALG DoS Defence, Ping of Death Local Management Session Limit IP-based Session LimitVPNSSL VPN SSL VPN Server SSL VPN Client 500 OpenVPN Tunnels IPsec VPN 300 IPSec VPN Tunnels LAN-to-LAN, Client-to-LAN Main, Aggressive Negotiation Mode DES, 3DES, SHA1, SHA2, AES128, AES192, AES256 Encryption Algorithm IKE v1/v2 MD5, SHA1 Authentication Algorithm NAT Traversal (NAT-T) Dead Peer Detection (DPD) Perfect Forward Secrecy (PFS) PPTP VPN PPTP VPN Server PPTP VPN Client (32)6 300 Tunnels (Shared with L2TP) PPTP with MPPE Encryption L2TP VPN L2TP VPN Server L2TP VPN Client (32)6 300 Tunnels (Shared with PPTP) L2TP over IPSec OpenVPN OpenVPN Server OpenVPN Client (10)6 110 OpenVPN Tunnels SECURITYFiltering WEB Group Filtering5 URL Filtering Web Security5 ARP Inspection Sending GARP Packets5 ARP Scanning5 IP-MAC Binding5 Attack Defense TCP/UDP/ICMP Flood Defense Block TCP Scan (Stealth FIN/Xmas/Null) Block Ping from WAN Access Control Source/Destination IP Based Access ControlAUTHENTICATIONWeb Authentication No Authentication Simple Password2 HotspotLocal User / Voucher2 / SMS2 / Radius2 External Radius Sever External Portal Sever2 Facebook Check-In2 Instagram Follow*2 MANAGEMENTOmada App Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.Centralized Management Omada Hardware Controller (OC300) Omada Hardware Controller (OC200) Omada Software Controller Omada Cloud-Based ControllerCloud Access Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.Service Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)Maintenance Web Management Interface Remote Management Export & Import Configuration SNMP v1/v2c/v3 Diagnostics (Ping & Traceroute)5 NTP Synchronize5 Syslog Support Zero-Touch Provisioning Yes. Requiring the use of Omada Cloud-Based Controller.Management Features Automatic Device Discovery Intelligent Network Monitoring Abnormal Event Warnings Unified Configuration Reboot Schedule Captive Portal Configuration OTHERSCertification CE, FCC, RoHSPackage Contents Omada 10G Multi-WAN Security Gateway ER8411 Power Cord Rack-Mount Kit Quick Installation Guide System Requirements Microsoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or LinuxEnvironment Operating Temperature: 040 (32104 ); Storage Temperature: -4070 (-40158 ) Operating Humidity: 1090% RH non-condensing Storage Humidity: 590% RH non-condensing Notes1. At least one WAN/LAN port needs to function as a LAN port.2. These functions require the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller.3. Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller. Please go to Omada Cloud-Based Controller Product List to find all the models supported by Omada Cloud-Based Controller.4. LAN MAC Address can be modified only in Standalone Mode.5. These functions are supported only in Standalone Mode.6. ER8411 can work as a VPN client and can connect with up to 32 PPTP/L2TP VPN servers and 10 OpenVPN servers.