TP-LINK Omada Enterprise VPN Router With 10G Ports, ER8411

Future-Proof Your Business with 10G Enterprise Connectivity

QUICK FEATURES

• Integrated into Omada SDN: Zero-Touch Provisioning (ZTP), Centralized Cloud Management, and Intelligent Monitoring.
• Centralized Management: Cloud access and Omada app for ultra convenience and easy management.
• Two 10GE SFP+ Ports: 1× WAN and 1× WAN/LAN 10GE SFP+ ports provide high-bandwidth aggregation connectivity.
• Up to 10 WAN Ports: Fiber and RJ45 WAN ports with load balance raise the utilization rate of multi-line broadband.
• Highly Secure VPN: Enterprise-standard SSL/ IPSec / PPTP / L2TP VPN & OpenVPN / L2TP over IPSec VPN are ideal for use across multiple branches and for WFH.
• Abundant Security Features: Powerful Firewall, DoS defense, IP/MAC/URL filtering, and IP-MAC Binding, and One-Click ALG Activation provide world-class security.

FEATURES

High-Capacity Performance with Quad-Core 2.2 GHz CPU

Manage your entire business network with the right amount of processing power. Dual redundant power supplies further ensure carrier-class reliability for enterprise networking.

Maximize the 10G Broadband with Omada Enterprise Gateway

Maximized 10G Broadband with the Omada Enterprise Gateway Build your lightning-fast network with Omada ER8411 — an enterprise VPN router with 10G ports. It surpasses the need for high-speed, reliable, and safe enterprise networks, ideal for large-scale deployments such as offices, schools, and hotels.

10× WAN Ports & One USB WAN for Mobile Broadband

Up to 10× WAN SFP+, SFP, and RJ45 ports allow the router to support various internet access requirements. Multi-WAN Load Balancing distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN backup.

High-Security and High-Performance VPN

ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPSec, PPTP, and L2TP in Client/Server mode. One-click auto IPSec VPN simplifies VPN configuration and facilitates network management and deployment. The router also features built-in VPN engine hardware, allowing support and management of hundreds of IPSec, PPTP, L2TP, SSL VPN, and OpenVPN Tunnels.

Robust Security Features

• Powerful Firewall: Advanced firewall policies protect your network and data.
• IP/MAC/URL/Keyword Filtering: Forcefully prevent viruses and attacks from intruders.
• Convenient VLAN Support: Create virtual network segments for enhanced security and simplified network management.
• IP-MAC Binding: Reserves static IP assignment for clients to defend against ARP attacks and spoofing.
• DoS Defense: Automatically detects and blocks Denial of Service (DoS) attacks such as TCP/UDP/ICMP Flooding, Ping of Death, and other related threats.
• One-Click ALG Activation: One-Click ALG Activation for applications such as FTP, H323, SIP, IPSec, and PPTP.

Seamless Integration into Omada SDN

The Omada Software Defined Networking (SDN) platform integrates network devices including access points, switches, and routers to provide 100% centralized cloud management and create a highly scalable network—all controlled from a single interface.

SPECS

SECURITY

• Access Control: Source/Destination IP Based Access Control
• Filtering: WEB Group Filtering, URL Filtering, Web Security
• ARP Inspection: Sending GARP Packets, ARP Scanning, IP-MAC Binding
• Attack Defense: TCP/UDP/ICMP Flood Defense, Block TCP Scan (Stealth FIN/ Xmas/Null), Block Ping from WAN

HARDWARE FEATURES

• Standards and Protocols: IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN
• Interface: 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN), 1× 1GE SFP WAN/LAN Ports, 8× 1GE RJ45 WAN/LAN Ports, 1× RJ45 Console Ports, 2× USB Ports (Connecting 4G/ 3G Modem as WAN Backup)
• Network Media 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m), EIA/TIA-568 100Ω STP (Max 100 m)
• Network Media 100BASE-TX: UTP category 5, 5e cable (Max 100 m), EIA/TIA-568 100Ω STP (Max 100 m)
• Network Media 1000BASE-T: UTP category 5e, 6 cable (Max 100 m)
• Fan Quantity: 2
• Button: Reset Button
• Power Supply: Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz)
• Flash: 4MB SPI NOR + 256 MB NAND
• DRAM: 4 GB DDR4
• LED: PWR, SYS, WAN, LAN, USB, FAN
• Dimensions ( W x D x H ): 440 × 220 × 44 mm
• Protection: 4 kV surge protection
• Enclosure: Steel
• Mounting: Rack Mountable
• Max Power Consumption: 26.36 W (with USB 3.0 connected), 19.12 W (without USB 3.0 connected)

PERFORMANCE

• WireGuard VPN: 1411 Mbps
• Concurrent Session: 2,300,000
• New Sessions /Second: 20,000
• NAT (Static IP): Upload: 9445.82 Mbps, Download: 9449.26 Mbps
• NAT(DHCP): Upload: 9426.83 Mbps, Download: 9426.20 Mbps
• NAT(PPPoE): Upload: 9413.96 Mbps, Download: 9102.01 Mbps
• NAT (L2TP): Upload: 4230.62 Mbps, Download: 4169.53 Mbps
• NAT (PPTP): Upload: 3933.86 Mbps, Download: 3821.97 Mbps
• 64 Byte Packet Forwarding Rate: Upload: 1080 Mbps, Download: 1030 Mbps
• IPsec VPN Throughput: SHA1-AES256: 2140.45 Mbps, SHA2-AES256: 2080.20 Mbps
• OpenVPN: 1665.64 Mbps
• L2TP VPN Throughput: Unencrypted: 5013.50 Mbps, Encrypted: 2274.74 Mbps
• PPTP VPN Throughput: Unencrypted: 10143 Mbps, Encrypted: 952 Mbps
• SSL VPN Throughput: 1511.10 Mbps
• 1,518 Byte Packet forwarding rate: Upload: 9970 Mbps, Download: 9970 Mbps

BASIC FUNCTIONS

• WAN Connection Type: Static/Dynamic IP, PPPoE, PPTP, L2TP, 6 to 4 Tunnel, Pass-Through, Mobile Broadband (4G/ 3G modem for backup via USB port)
• MAC Clone: Modify WAN/LAN MAC Address
• DHCP: DHCP Server/Client, DHCP Address Reservation, Multi-net DHCP, Multi-IP Interfaces
• IPv6: WAN Connection
• VLAN: 802.1Q VLAN
• IPTV: IGMP v2/v3 Proxy

ADVANCED FUNCTIONS

• ACL: IP/Port/Protocol/Domain Name Filtering
• Advanced Routing: Static Routing, Policy Routing
• Bandwidth Control: IP/Port-based Bandwidth Control, Guarantee & Limited Bandwidth
• Load Balance: Intelligent Load Balance, Application Optimized Routing, Link Backup (Timing, Failover), Online Detection
• NAT: One-to-One NAT, Multi-Net NAT, Virtual Server, Port Triggering, NAT-DMZ, FTP/ H.323/ SIP/ IPSec/ PPTP ALG, UPnP
• Security: SPI Firewall, VPN Passthrough, FTP/ H.323/ PPTP/ SIP/ IPsec ALG, DoS Defence- Ping of Death, Local Management
• Session Limit: IP-based Session Limit

VPN

• SSL VPN: SSL VPN Server, SSL VPN Client, 500 OpenVPN Tunnels
• IPsec VPN: 300 IPSec VPN Tunnels, LAN-to-LAN, Client-to-LAN, Main, Aggressive Negotiation Mode, DES, 3DES, SHA1, SHA2, AES128, AES192, AES256 Encryption Algorithm, IKE v1/v2, MD5, SHA1 Authentication Algorithm, NAT Traversal (NAT-T), Dead Peer Detection (DPD), Perfect Forward Secrecy (PFS)
• PPTP VPN: PPTP VPN Server, PPTP VPN Client (32)*6, 300 Tunnels (Shared with L2TP), PPTP with MPPE Encryption
• L2TP VPN: L2TP VPN Server, L2TP VPN Client (32), 300 Tunnels (Shared with PPTP), L2TP over IPSec
• OpenVPN: OpenVPN Server, OpenVPN Client (10), 110 OpenVPN Tunnels

AUTHENTICATION

• Web Authentication: No Authentication, Simple Password, Hotspot（Local User / Voucher / SMS / Radius), External Radius Sever, External Portal Sever, Facebook Check-In. Instagram Follow

MANAGEMENT

• Omada App: Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
• Centralized Management: Omada Hardware Controller (OC300), Omada Hardware Controller (OC200), Omada Software Controller, Omada Cloud-Based Controller
• Cloud Access: Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
• Service: Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
• Maintenance: Web Management Interface, Remote Management, Export & Import Configuration, SNMP v1/v2c/v3, Diagnostics (Ping & Traceroute), NTP Synchronize, Syslog Support
• Zero-Touch Provisioning: Yes. Requiring the use of Omada Cloud-Based Controller.
• Management Features: Automatic Device Discovery, Intelligent Network Monitoring, Abnormal Event Warnings, Unified Configuration, Reboot Schedule, Captive Portal Configuration

OTHERS

• Certification: CE, FCC, RoHS
• Package Contents: Omada 10G Multi-WAN Security Gateway ER8411, Power Cord, Rack-Mount Kit, Quick Installation Guide
• System Requirements: Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/ 8/ 8.1/ 10/ 11, MAC OS, NetWare, UNIX or Linux
• Operating Temperature: 0–40 ℃ (32–104 ℉)
• Operating Humidity: 10–90% RH non-condensing