TP-Link Omada ER8411 VPN Router with 10G Ports

Integrated into Omada SDN
Zero-Touch Provisioning (ZTP) Centralized Cloud Management and Intelligent Monitoring.

Centralized Management
Cloud access and Omada app for ultra convenience and easy management.

Two 10GE SFP+ Ports
1x WAN and 1x WAN/LAN 10GE SFP+ ports provide high-bandwidth aggregation connectivity.

Up to 10 WAN Ports
Fiber and RJ45 WAN ports with load balance raise the utilization rate of multi-line broadband.

Highly Secure VPN
Enterprise-standard SSL/ IPSec / PPTP / L2TP VPN & OpenVPN / WireGuard / L2TP over IPSec VPN are ideal for use across multiple branches and for WFH.

Abundant Security Features
Powerful Firewall DoS defense IP/MAC/URL filtering and IP-MAC Binding and One-Click ALG Activation provide world-class security.

High-Capacity Performance with Quad-Core 2.2 GHz CPU
Manage your entire business network with the right amount of processing power. Dual redundant power supplies further ensure carrier-class reliability for enterprise networking.

Maximize the 10G Broadband with Omada Enterprise Gateway
Maximized 10G Broadband with the Omada Enterprise Gateway Build your lightning-fast network with Omada ER8411 — an enterprise VPN router with 10G ports. It surpasses the need for high-speed reliable and safe enterprise networks ideal for large-scale deployments such as offices schools and hotels.

10x WAN Ports & One USB WAN for Mobile Broadband
Up to 10 WAN SFP+ SFP and RJ45 ports allow the router to support various internet access requirements. Multi-WAN Load Balancing distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN backup.

High-Security and High-Performance VPN
ER8411 supports pass-through traffic and multiple VPN protocols including SSL IPSec PPTP WireGuard and L2TP in Client/Server mode. One-click auto IPSec VPN simplifies VPN configuration and facilitates network management and deployment. The router also features built-in VPN engine hardware allowing support and management of hundreds of IPSec PPTP L2TP SSL VPN and OpenVPN Tunnels.

Specifications

Access Control
Source/Destination IP Based Access Control

Filtering
WEB Group Filtering
URL Filtering
Web Security

ARP Inspection
Sending GARP Packets
ARP Scanning
IP-MAC Binding

Attack Defence
TCP/UDP/ICMP Flood Defense
Block TCP Scan (Stealth FIN/Xmas/Null)
Block Ping from WAN

Standards and Protocols
IEEE 802.3 IEEE802.3u IEEE802.3ab IEEE802.3z IEEE 802.3x IEEE 802.1q
TCP/IP DHCP ICMP NAT PPPoE NTP HTTP HTTPS DNS IPSec PPTP L2TP OpenVPN SNMP WireGuard VPN

Interface
2x 10GE SFP+ Ports (1 WAN 1 WAN/LAN)
1x 1GE SFP WAN/LAN Ports
8x 1GE RJ45 WAN/LAN Ports
1x RJ45 Console Ports
2x USB Ports (Connecting 4G/3G Modem as WAN Backup)

Network Media
10BASE-T: UTP category 3 4 5 cable (Max 100 m)
EIA/TIA-568 100O STP (Max 100 m)
100BASE-TX: UTP category 5 5e cable (Max 100 m)
EIA/TIA-568 100O STP (Max 100 m)
1000BASE-T: UTP category 5e 6 cable (Max 100 m)

Fan Quantity
2

Button
Reset Button

Power Supply
Redundant Dual Power Supplies (100–240 VAC 50/60 Hz)

Flash
4MB SPI NOR + 256 MB NAND

DRAM
4 GB DDR4

LED
PWR SYS WAN LAN USB FAN

Dimensions
17.3 x 8.7 x 1.7 in (440 x 220 x 44 mm)

Protection
4 kV surge protection

Enclosure
Steel

Mounting
Rack Mountable

Max Power Consumption
26.36 W (with USB 3.0 connected)
19.12 W (without USB 3.0 connected)

IPS Throughput
TCP: 4924 Mbps;
UDP: 4521 Mbps

DPI Throughput
TCP: 5524 Mbps;
UDP: 3547 Mbps

Wireguard VPN
1411 Mbps

Concurrent Session
2 300 000

New Sessions/Second
20 000

NAT (Static IP)
Upload: 9445.82 Mbps
Download: 9449.26 Mbps

NAT (DHCP)
Upload: 9426.83 Mbps
Download: 9426.20 Mbps

NAT (PPPOE)
Upload: 9413.96 Mbps
Download: 9102.01 Mbps

NAT (L2TP)
Upload: 9064.66 Mbps
Download: 8587.57 Mbps

NAT (PPTP)
Upload: 8712.11 Mbps
Download: 8505.61 Mbps

64 Byte Packet Forwarding Rate
Upload: 1080 Mbps
Download: 1030 Mbps

IPSec VPN Throughput
ESP-SHA1-AES256: 3099.4 Mbps
ESP-SHA256-AES256: 2928.4 Mbps
ESP-SHA384-AES256: 2935.7 Mbps
ESP-SHA512-AES256: 2878 Mbps

OpenVPN
UDP: 4424.1 Mbps

L2TP VPN Throughput
Unencrypted: 10497 Mbps
Encrypted: 3178.5 Mbps

PPTP VPN Throughput
Unencrypted: 10143 Mbps
Encrypted: 952 Mbps

SSL VPN Throughput
4486 Mbps

1 518 Byte Packet forwarding rate
Upload: 9970 Mbps
Download: 9970 Mbps

WAN Connection Type
Static/Dynamic IP
PPPoE
PPTP
L2TP
6to4 Tunnel
Pass-Through
Mobile Broadband: 4G/3G modem for backup via USB port

MAC Clone
Modify WAN/LAN MAC Address

DHCP
DHCP Server/Client
DHCP Address Reservation
Multi-net DHCP
Multi-IP Interfaces

IPv6
WAN Connection

VLAN
802.1Q VLAN

IPTV
IGMP v2/v3 Proxy

ACL
IP/Port/Protocol/Domain Name Filtering

Advanced Routing
Static Routing
Policy Routing

Bandwidth Control
IP/Port-based Bandwidth Control
Guarantee & Limited Bandwidth

Load Balance
Intelligent Load Balance
Application Optimized Routing
Link Backup (Timing Failover)
Online Detection

NAT
One-to-One NAT
Multi-Net NAT
Port Forwarding
Port Triggering
NAT-DMZ
FTP/H.323/SIP/IPSec/PPTP ALG
UPnP

Session Limit
IP-based Session Limit

SSL VPN
SSL VPN Server
SSL VPN Client
500 SSL VPN Tunnels

IPSec VPN
300 IPSec VPN Tunnels
LAN-to-LAN Client-to-LAN
Main Aggressive Negotiation Mode
DES 3DES SHA1 SHA256 SHA384 SHA512 AES128 AES192 AES256 Encryption Algorithm
IKE v1/v2
MD5 SHA1 Authentication Algorithm
NAT Traversal (NAT-T)
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)

PPTP VPN
PPTP VPN Server
PPTP VPN Client (32)
300 Tunnels (Shared with L2TP)
PPTP with MPPE Encryption

L2TP VPN
L2TP VPN Server
L2TP VPN Client (32)
300 Tunnels (Shared with PPTP)
L2TP over IPSec

OpenVPN
OpenVPN Server
OpenVPN Client (10)
110 OpenVPN Tunnels

WireGuard VPN
300 Tunnels

Web Authentication
No Authentication
Simple Password
Hotspot (Local User / Voucher / SMS / Radius)
External Radius Server
External Portal Server

Omada App
Yes. Requiring the use of OC300 OC200 Omada Cloud-Based Controller or Omada Software Controller.

Centralized Management
Omada Hardware Controller (OC300)
Omada Hardware Controller (OC200)
Omada Software Controller
Omada Cloud-Based Controller

Cloud Access
Yes. Requiring the use of OC300 OC200 Omada Cloud-Based Controller or Omada Software Controller.

Service
Dynamic DNS (Dyndns No-IP Peanuthull Comexe)

Maintenance
Web Management Interface
Remote Management
Export & Import Configuration
SNMP v1/v2c/v3
Diagnostics (Ping & Traceroute)
NTP Synchronize
Syslog Support

Zero-Touch Provisioning
Yes. Requiring the use of Omada Cloud-Based Controller.

Management Features
Automatic Device Discovery
Intelligent Network Monitoring
Abnormal Event Warnings
Unified Configuration
Reboot Schedule
Captive Portal Configuration

Certification
CE FCC RoHS

Package Contents
Omada 10G Multi-WAN Security Gateway ER8411
Power Cord
Rack-Mount Kit
Quick Installation Guide