ER8411 - TP-Link ER8411 Omada VPN router with 10G ports

Powerful quad-core 2.2 GHz CPU
Manage your entire enterprise network with the right amount of computing power. Dual redundant power supplies also ensure carrier-class reliability for enterprise networks.
Get the most out of your Internet access with the Omada Enterprise 10G Gateway
Maximise bandwidth with the 10G Omada Enterprise Gateway. Build a lightning-fast network with Omada ER8411, an enterprise-grade VPN router with 10G ports. It exceeds the need for fast, reliable and secure enterprise networks and is ideal for large installations such as office buildings, schools and hotels.
10x WAN ports and a USB WAN for mobile broadband
With up to 10x WAN SFP+, SFP and RJ45 ports, the router supports a wide variety of Internet accesses.*1 Multi-WAN load balancing distributes your data streams according to the bandwidth share of each WAN port to utilise and bundle all your Internet lines as efficiently and equally as possible to increase your Internet bandwidth to the maximum. Connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN redundancy.
Note: At least one of the ten WAN/LAN ports must function as a LAN.
Highly secure and powerful VPN
ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPSec, PPTP and L2TP in client/server mode. One-click Auto-IPSec VPN simplifies VPN configuration and facilitates network management and deployment.*2 The router also has built-in VPN engine hardware that enables support and management of hundreds of IPSec, PPTP, L2TP, SSL VPN and OpenVPN tunnels.
Seamless integration with Omada SDN
The Omada Software Defined Networking (SDN) platform integrates network devices such as access points, switches and routers to provide 100% centralised cloud management and create a highly scalable network - all controlled from a single interface.

Security
- Access control: source/destination IP-based access control
- Filtering: WEB group filtering, URL filtering, web security
- ARP inspection: sending GARP packets, ARP scanning, IP-MAC binding
- Attack protection: TCP/UDP/ICMP flood defence, block TCP scan (Stealth FIN/Xmas/Null), block ping from WAN
Hardware
- Standards and protocols: IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP
- Interface: 2x 10GE SFP+ ports (1 WAN, 1 WAN/LAN), 1x 1GE SFP WAN/LAN ports, 8x 1GE RJ45 WAN/LAN ports, 1x RJ45 console ports, 2x USB ports (connection of a 4G/3G modem as WAN backup)
- Cable: 10BASE-T: Category 3, 4, 5 UTP cable (max. 100 m), EIA/TIA-568 100 Ω STP (max. 100 m); 100BASE-TX: Category 5, 5e UTP cable (max. 100 m), EIA/TIA-568 100 Ω STP (max. 100 m); 1000BASE-T: UTP Category 5e, 6 cable (max. 100 m)
- Number of fans: 2
- Button: Reset button
- Power supply: Redundant dual power supplies (100-240 VAC, 50/60 Hz)
- PoE budget: -
- Flash: 4 MB SPI NOR + 256 MB NAND
- DRAM 4 GB DDR4
- LED: PWR, SYS, WAN, LAN, USB, FAN
- Dimensions (WxDxH): 17.3 x 8.7 x 1.7 inches (440 x 220 x 44 mm)
- Protection: 4 kV overvoltage protection
- Cover: steel
- Mounting: rack mountable
- Maximum power consumption: 26.36 W (with USB 3.0 connected); 19.12 W (without USB 3.0 connected)
Power
- WireGuard VPN: 1411 Mbit/s
- Simultaneous connections: 2,300,000
- New sessions/second: 20,000
- NAT (Static IP): Upload: 9445.82 Mbit/s, Download: 9449.26 Mbit/s
- NAT (DHCP): Upload: 9426.83 Mbit/s, Download: 9426.20 Mbit/s
- NAT (PPPoE): Upload: 9413.96 Mbit/s, Download: 9102.01 Mbit/s
- NAT (L2TP): Upload: 4230.62 Mbit/s, Download: 4169.53 Mbit/s
- NAT (PPTP): Upload: 3933.86 Mbit/s, Download: 3821.97 Mbit/s
- 64-byte packet forwarding rate: Upload: 1080 Mbit/s, Download: 1030 Mbit/s
- IPsec VPN throughput: SHA1-AES256: 2140.45 Mbit/s, SHA2-AES256: 2080.20 Mbit/s
- OpenVPN: 1665.64 Mbit/s
- L2TP VPN throughput: Unencrypted: 5013.50 Mbit/s, Encrypted: 2274.74 Mbit/s
- PPTP VPN throughput: Unencrypted: 10143 Mbit/s, Encrypted: 952 Mbit/s
- SSL VPN throughput: 1511.10 Mbit/s
- 66-byte packet forwarding rate: -
- 1.518 byte packet forwarding rate: Upload: 9970 Mbit/s, Download: 9970 Mbit/s
Basic functions
- WAN connection type: Static/dynamic IP, PPPoE, PPTP, L2TP, 6to4 tunnel, pass-through, Mobile broadband: 4G/3G modem for backup via USB port
- MAC address cloning: Change WAN/LAN MAC address
- DHCP: DHCP server/client, DHCP address reservation, multi-net DHCP, multi-IP interfaces
- IPv6: WAN connection
- VLAN: 802.1Q VLAN
- IPTV: IGMP v2/v3 proxy
Advanced features
- ACL: IP/port/protocol/domain name filtering
- Advanced routing: Static routing, policy routing
- Data rate control: IP/port-based bandwidth control, limited bandwidth
- Load balancing: Intelligent load balancing, application-optimised routing, link backup (timing, failover), online detection
- NAT: One-to-one NAT, multi-net NAT, virtual server, port triggering, NAT-DMZ, FTP/H.323/SIP/IPSec/PPTP ALG, UPnP
- Security: SPI firewall, VPN passthrough, FTP/H.323/PPTP/SIP/IPsec ALG, DoS defence, Ping of Death, local management
- Session limit: IP-based session limit
VPN
- SSL VPN: SSL VPN server, SSL VPN client, 500 SSL VPN tunnels
- IPsec VPN: 300 IPSec VPN tunnels; LAN-to-LAN, client-to-LAN; main mode, aggressive negotiation mode; encryption algorithm DES, 3DES, SHA1, SHA2, AES128, AES192, AES256; IKE v1/v2; MD5, SHA1 authentication algorithm; NAT traversal (NAT-T); Dead Peer Detection (DPD); Perfect Forward Secrecy (PFS)
- PPTP VPN: PPTP VPN server, PPTP VPN client (32), 300 tunnels (shared with L2TP), PPTP with MPPE encryption
- L2TP VPN: L2TP VPN server, L2TP VPN client (32), 300 tunnels (shared with PPTP), L2TP via IPSec
- OpenVPN: OpenVPN server, OpenVPN client (10), 110 OpenVPN tunnels
Authentication
- Web authentication: No authentication; Simple password; Hotspot (local user/voucher/SMS/radius); External radio disconnector; External portal server; Facebook check-in; Instagram follow
Management
- Omada App: Yes, with Omada Controller
- Centralised Management: Omada Hardware Controller (OC300), Omada Hardware Controller (OC200), Omada Software Controller, Omada Cloud-based Controller
- Cloud Access: Yes, with Omada Controller
- Service: Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
- Maintenance: time setting, diagnostics, firmware upgrade, factory reset/restart, restore backup, system log, remote management, statistics, controller settings, SNMP
- Zero-touch deployment: Yes, requires the use of Omada Cloud-Based Controller
- Management functions: Automatic Device Discovery, Intelligent Network Monitoring, Unique Event Alerts, Unified Configuration, Reboot Schedule, Captive Portal Configuration
Miscellaneous
- Certification: CE, FCC, RoHS
- Package Contents: Omada 10G Multi-WAN Security Gateway ER8411, Power Cord, Rack Mount Kit, Quick Installation Guide
- System Requirements: Microsoft Windows 98SE, NT, 2000, XP, Vistaâ„¢ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux
- Environment: Operating temperature: 0-40°C (32-104°F); Storage temperature: -40-70°C (-40-158°F); Operating humidity: 10-90% humidity, non-condensing; Storage humidity: 5-90% humidity, non-condensing