Description
TP-Link Omada ER8411 VPN Router with 10G Ports
Integrated into Omada SDN: Zero-Touch Provisioning (ZTP), Centralized Cloud Management, and Intelligent Monitoring. Centralized Management: Cloud access and Omada app for ultra convenience and easy management. Highly Secure VPN: Enterprise-standard SSL/ IPSec / PPTP / L2TP VPN & OpenVPN / WireGuard / L2TP over IPSec VPN are ideal for use across multiple branches and for WFH. Abundant Security Features: Powerful Firewall, DoS defense, IP/MAC/URL filtering, and IP-MAC Binding, and One-Click ALG Activation provide world-class security. High-Capacity Performance with Quad-Core 2.2 GHz CPU: Manage your entire business network with the right amount of processing power. Dual redundant power supplies further ensure carrier-class reliability for enterprise networking. High-Security and High-Performance VPN: ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPSec, PPTP, WireGuard, and L2TP in Client/Server mode. One-click auto IPSec VPN simplifies VPN configuration and facilitates network management and deployment. The router also features built-in VPN engine hardware, allowing support and management of hundreds of IPSec, PPTP, L2TP, SSL VPN, and OpenVPN Tunnels. Attack Defence: TCP/UDP/ICMP Flood DefenseBlock TCP Scan (Stealth FIN/Xmas/Null)Block Ping from WAN Load Balance: Intelligent Load BalanceApplication Optimized RoutingLink Backup (Timing, Failover)Online Detection Web Authentication: No AuthenticationSimple PasswordHotspot (Local User / Voucher / SMS / Radius)External Radius ServerExternal Portal Server Omada App: Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. Centralized Management: Omada Hardware Controller (OC300)Omada Hardware Controller (OC200)Omada Software ControllerOmada Cloud-Based Controller Cloud Access: Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. Maintenance: Web Management InterfaceRemote ManagementExport & Import ConfigurationSNMP v1/v2c/v3Diagnostics (Ping & Traceroute)NTP SynchronizeSyslog Support Management Features: Automatic Device DiscoveryIntelligent Network MonitoringAbnormal Event WarningsUnified ConfigurationReboot ScheduleCaptive Portal Configuration
Specs
BIOS
| Flash | 4MB SPI NOR + 256 MB NAND |
What's Included
| Package Contents | Omada 10G Multi-WAN Security Gateway ER8411Power CordRack-Mount KitQuick Installation Guide |
Network
| Two 10GE SFP+ Ports | 1x WAN and 1x WAN/LAN 10GE SFP+ ports provide high-bandwidth aggregation connectivity. |
| Maximize the 10G Broadband with Omada Enterprise Gateway | Maximized 10G Broadband with the Omada Enterprise Gateway Build your lightning-fast network with Omada ER8411 an enterprise VPN router with 10G ports. It surpasses the need for high-speed, reliable, and safe enterprise networks, ideal for large-scale deployments such as offices, schools, and hotels. |
| Network Media | 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)EIA/TIA-568 100O STP (Max 100 m)100BASE-TX: UTP category 5, 5e cable (Max 100 m)EIA/TIA-568 100O STP (Max 100 m)1000BASE-T: UTP category 5e, 6 cable (Max 100 m) |
Rear Panel I/O Ports
| 10x WAN Ports & One USB WAN for Mobile Broadband | Up to 10 WAN SFP+, SFP, and RJ45 ports allow the router to support various internet access requirements. Multi-WAN Load Balancing distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN backup. |
Physical
| Protection | 4 kV surge protection |
| Enclosure | Steel |
| Mounting | Rack Mountable |
| Max Power Consumption | 26.36 W (with USB 3.0 connected)19.12 W (without USB 3.0 connected) |
| IPS Throughput | TCP: 4924 Mbps;UDP: 4521 Mbps |
| DPI Throughput | TCP: 5524 Mbps;UDP: 3547 Mbps |
| Wireguard VPN | 1411 Mbps |
| Concurrent Session | 2,300,000 |
| New Sessions/Second | 20,000 |
| NAT (Static IP) | Upload: 9445.82 MbpsDownload: 9449.26 Mbps |
| Bandwidth Control | IP/Port-based Bandwidth ControlGuarantee & Limited Bandwidth |
Other
| Up to 10 WAN Ports | Fiber and RJ45 WAN ports with load balance raise the utilization rate of multi-line broadband. |
| Access Control | Source/Destination IP Based Access Control |
| Filtering | WEB Group FilteringURL FilteringWeb Security |
| ARP Inspection | Sending GARP PacketsARP ScanningIP-MAC Binding |
| Standards and Protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1qTCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN |
| Interface | 2x 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)1x 1GE SFP WAN/LAN Ports8x 1GE RJ45 WAN/LAN Ports1x RJ45 Console Ports2x USB Ports (Connecting 4G/3G Modem as WAN Backup) |
| Fan Quantity | 2 |
| Button | Reset Button |
| Power Supply | Redundant Dual Power Supplies (100240 VAC, 50/60 Hz) |
| 64 Byte Packet Forwarding Rate | Upload: 1080 MbpsDownload: 1030 Mbps |
| IPSec VPN Throughput | ESP-SHA1-AES256: 3099.4 MbpsESP-SHA256-AES256: 2928.4 MbpsESP-SHA384-AES256: 2935.7 MbpsESP-SHA512-AES256: 2878 Mbps |
| OpenVPN | UDP: 4424.1 Mbps |
| L2TP VPN Throughput | Unencrypted: 10497 MbpsEncrypted: 3178.5 Mbps |
| PPTP VPN Throughput | Unencrypted: 10143 MbpsEncrypted: 952 Mbps |
| SSL VPN Throughput | 4486 Mbps |
| 1,518 Byte Packet forwarding rate | Upload: 9970 MbpsDownload: 9970 Mbps |
| WAN Connection Type | Static/Dynamic IPPPPoEPPTPL2TP6to4 TunnelPass-ThroughMobile Broadband: 4G/3G modem for backup via USB port |
| MAC Clone | Modify WAN/LAN MAC Address |
| IPv6 | WAN Connection |
| Advanced Routing | Static RoutingPolicy Routing |
| Session Limit | IP-based Session Limit |
| IPSec VPN | 300 IPSec VPN TunnelsLAN-to-LAN, Client-to-LANMain, Aggressive Negotiation ModeDES, 3DES, SHA1, SHA256, SHA384, SHA512, AES128, AES192, AES256 Encryption AlgorithmIKE v1/v2MD5, SHA1 Authentication AlgorithmNAT Traversal (NAT-T)Dead Peer Detection (DPD)Perfect Forward Secrecy (PFS) |
| OpenVPN | OpenVPN ServerOpenVPN Client (10)110 OpenVPN Tunnels |
| WireGuard VPN | 300 Tunnels |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe) |
| Zero-Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
| Certification | CE, FCC, RoHS |