TP-Link Omada ER8411 VPN Router with 10G Ports

Integrated into Omada SDN

Zero-Touch Provisioning (ZTP), Centralized Cloud Management, and Intelligent Monitoring.

Centralized Management

Cloud access and Omada app for ultra convenience and easy management.

Two 10GE SFP+ Ports

1x WAN and 1x WAN/LAN 10GE SFP+ ports provide high-bandwidth aggregation connectivity.

Up to 10 WAN Ports

Fiber and RJ45 WAN ports with load balance raise the utilization rate of multi-line broadband.

Highly Secure VPN

Enterprise-standard SSL/ IPSec / PPTP / L2TP VPN & OpenVPN / WireGuard / L2TP over IPSec VPN are ideal for use across multiple branches and for WFH.

Abundant Security Features

Powerful Firewall, DoS defense, IP/MAC/URL filtering, and IP-MAC Binding, and One-Click ALG Activation provide world-class security.

High-Capacity Performance with Quad-Core 2.2 GHz CPU

Manage your entire business network with the right amount of processing power. Dual redundant power supplies further ensure carrier-class reliability for enterprise networking.

Maximize the 10G Broadband with Omada Enterprise Gateway

Maximized 10G Broadband with the Omada Enterprise Gateway Build your lightning-fast network with Omada ER8411 – an enterprise VPN router with 10G ports. It surpasses the need for high-speed, reliable, and safe enterprise networks, ideal for large-scale deployments such as offices, schools, and hotels.

10x WAN Ports & One USB WAN for Mobile Broadband

Up to 10 WAN SFP+, SFP, and RJ45 ports allow the router to support various internet access requirements. Multi-WAN Load Balancing distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN backup.

High-Security and High-Performance VPN

ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPSec, PPTP, WireGuard, and L2TP in Client/Server mode. One-click auto IPSec VPN simplifies VPN configuration and facilitates network management and deployment. The router also features built-in VPN engine hardware, allowing support and management of hundreds of IPSec, PPTP, L2TP, SSL VPN, and OpenVPN Tunnels.

Specifications

Access Control

Source/Destination IP Based Access Control

Filtering

• WEB Group Filtering
• URL Filtering
• Web Security

ARP Inspection

• Sending GARP Packets
• ARP Scanning
• IP-MAC Binding

Attack Defence

• TCP/UDP/ICMP Flood Defense
• Block TCP Scan (Stealth FIN/Xmas/Null)
• Block Ping from WAN

Standards and Protocols

IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q

TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN

Interface

• 2x 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)
• 1x 1GE SFP WAN/LAN Ports
• 8x 1GE RJ45 WAN/LAN Ports
• 1x RJ45 Console Ports
• 2x USB Ports (Connecting 4G/3G Modem as WAN Backup)

Network Media

• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)
• EIA/TIA-568 100O STP (Max 100 m)
• 100BASE-TX: UTP category 5, 5e cable (Max 100 m)
• EIA/TIA-568 100O STP (Max 100 m)
• 1000BASE-T: UTP category 5e, 6 cable (Max 100 m)

Fan Quantity

2

Button

Reset Button

Power Supply

Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz)

Flash

4MB SPI NOR + 256 MB NAND

DRAM

4 GB DDR4

PWR, SYS, WAN, LAN, USB, FAN

Dimensions

17.3 x 8.7 x 1.7 in (440 x 220 x 44 mm)

Protection

4 kV surge protection

Enclosure

Steel

Mounting

Rack Mountable

Max Power Consumption

26.36 W (with USB 3.0 connected)

19.12 W (without USB 3.0 connected)

IPS Throughput

TCP: 4924 Mbps;

UDP: 4521 Mbps

DPI Throughput

TCP: 5524 Mbps;

UDP: 3547 Mbps

Wireguard VPN

1411 Mbps

Concurrent Session

2,300,000

New Sessions/Second

20,000

NAT (Static IP)

Upload: 9445.82 Mbps

Download: 9449.26 Mbps

NAT (DHCP)

Upload: 9426.83 Mbps

Download: 9426.20 Mbps

NAT (PPPOE)

Upload: 9413.96 Mbps

Download: 9102.01 Mbps

NAT (L2TP)

Upload: 9064.66 Mbps

Download: 8587.57 Mbps

NAT (PPTP)

Upload: 8712.11 Mbps

Download: 8505.61 Mbps

64 Byte Packet Forwarding Rate

Upload: 1080 Mbps

Download: 1030 Mbps

IPSec VPN Throughput

• ESP-SHA1-AES256: 3099.4 Mbps
• ESP-SHA256-AES256: 2928.4 Mbps
• ESP-SHA384-AES256: 2935.7 Mbps
• ESP-SHA512-AES256: 2878 Mbps

OpenVPN

UDP: 4424.1 Mbps

L2TP VPN Throughput

Unencrypted: 10497 Mbps

Encrypted: 3178.5 Mbps

PPTP VPN Throughput

Unencrypted: 10143 Mbps

Encrypted: 952 Mbps

SSL VPN Throughput

4486 Mbps

1,518 Byte Packet forwarding rate

Upload: 9970 Mbps

Download: 9970 Mbps

WAN Connection Type

• Static/Dynamic IP

PPPoE

PPTP

L2TP

6to4 Tunnel

Pass-Through

Mobile Broadband: 4G/3G modem for backup via USB port

MAC Clone

Modify WAN/LAN MAC Address

DHCP

• DHCP Server/Client
• DHCP Address Reservation
• Multi-net DHCP
• Multi-IP Interfaces

IPv6

WAN Connection

VLAN

802.1Q VLAN

IPTV

IGMP v2/v3 Proxy

ACL

IP/Port/Protocol/Domain Name Filtering

Advanced Routing

Static Routing

Policy Routing

Bandwidth Control

IP/Port-based Bandwidth Control

Guarantee & Limited Bandwidth

Load Balance

• Intelligent Load Balance
• Application Optimized Routing
• Link Backup (Timing, Failover)
• Online Detection

NAT

• One-to-One NAT
• Multi-Net NAT
• Port Forwarding
• Port Triggering

NAT-DMZ

FTP/H.323/SIP/IPSec/PPTP ALG

UPnP

Session Limit

IP-based Session Limit

SSL VPN

• SSL VPN Server
• SSL VPN Client
• 500 SSL VPN Tunnels

IPSec VPN

• 300 IPSec VPN Tunnels
• LAN-to-LAN, Client-to-LAN
• Main, Aggressive Negotiation Mode
• DES, 3DES, SHA1, SHA256, SHA384, SHA512, AES128, AES192, AES256 Encryption Algorithm
• IKE v1/v2
• MD5, SHA1 Authentication Algorithm
• NAT Traversal (NAT-T)
• Dead Peer Detection (DPD)
• Perfect Forward Secrecy (PFS)

PPTP VPN

• PPTP VPN Server
• PPTP VPN Client (32)
• 300 Tunnels (Shared with L2TP)
• PPTP with MPPE Encryption

L2TP VPN

• L2TP VPN Server
• L2TP VPN Client (32)
• 300 Tunnels (Shared with PPTP)
• L2TP over IPSec
• OpenVPN Server
• OpenVPN Client (10)
• 110 OpenVPN Tunnels
• 300 Tunnels

Web Authentication

• No Authentication
• Simple Password
• Hotspot (Local User / Voucher / SMS / Radius)
• External Radius Server
• External Portal Server

Omada App

Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.

• Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada Software Controller
• Omada Cloud-Based Controller

Cloud Access

Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.

Service

Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)

Maintenance

• Web Management Interface
• Remote Management
• Export & Import Configuration
• SNMP v1/v2c/v3
• Diagnostics (Ping & Traceroute)
• NTP Synchronize
• Syslog Support

Zero-Touch Provisioning

Yes. Requiring the use of Omada Cloud-Based Controller.

Management Features

• Automatic Device Discovery
• Intelligent Network Monitoring
• Abnormal Event Warnings
• Unified Configuration
• Reboot Schedule
• Captive Portal Configuration

Certification

CE, FCC, RoHS

Package Contents

• Omada 10G Multi-WAN Security Gateway ER8411
• Power Cord
• Rack-Mount Kit
• Quick Installation Guide