TP-Link Omada VPN Gateway ER8411 with 4 GB DDR4 RAM and 10G SFP+ Ports

Overview

The TP-Link Omada VPN Gateway ER8411 delivers high-performance networking with 10GE connectivity on both WAN and LAN ports. It supports multiple VPN protocols and advanced security features, ensuring remote employees connect securely to their main office as if they were onsite. This device is designed for robust and secure VPN capabilities with high throughput and extensive management options.

Technical Specifications

• DPI: Deep Packet Inspection supporting 2421 application types
• IDS/IPS: Signature-based threat detection
• Access Control: Source/Destination IP ACL, Stateful ACL, IPv4/IPv6 ACL, National Based ACL, FQDN
• DNS Proxy: DNSSEC, DoH, DoT, DNS Override
• Filtering: WEB Group Filtering, URL Categories and URL Filtering, Web Security
• ARP Inspection: Sending GARP Packets, ARP Scanning, IP-MAC Binding, ARP Detection
• Attack Defense: TCP/UDP/ICMP Flood Defense, Block TCP Scan (Stealth FIN/Xmas/Null), Block Ping from WAN
• Standards and Protocols: LLDP
• Interface: 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN), 1× 1GE SFP WAN/LAN Port, 8× 1GE RJ45 WAN/LAN Ports, 1× RJ45 Console Port, 2× USB 3.0 Ports (one supports LTE backup with LTE dongle)
• Network Media: 10BASE-T (UTP Cat 3/4/5, max 100 m), 100BASE-TX (UTP Cat 5/5e, max 100 m), 1000BASE-T (UTP Cat 5e/6, max 100 m)
• Fan Quantity: 2
• Button: Reset Button
• Power Supply: Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz)
• Flash: 4MB SPI NOR + 256 MB NAND
• DRAM: 4 GB DDR4
• LED Indicators: PWR, SYS, WAN, LAN, USB, FAN
• Dimensions (W×D×H): 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm)
• Protection: 4 kV surge protection
• Enclosure: Steel
• Mounting: Rack Mountable
• Max. Power Consumption: 26.36 W (with USB 3.0 connected), 19.12 W (without USB 3.0 connected)
• Concurrent Session: 2,300,000
• New Sessions / Second: 20,000
• NAT (Static IP) Throughput: Upload 9445.82 Mbps, Download 9449.26 Mbps
• NAT (DHCP) Throughput: Upload 9426.83 Mbps, Download 9426.20 Mbps
• NAT (PPPoE) Throughput: Upload 9413.96 Mbps, Download 9102.01 Mbps
• NAT (L2TP) Throughput: Upload 9064.66 Mbps, Download 8587.57 Mbps
• NAT (PPTP) Throughput: Upload 8712.11 Mbps, Download 8505.61 Mbps
• 1,518 Byte Packet Forwarding Rate: Upload and Download 820,982 pps
• IPsec VPN Throughput: ESP-SHA1-AES256 3099.4 Mbps, ESP-SHA256-AES256 2928.4 Mbps, ESP-SHA384-AES256 2935.7 Mbps, ESP-SHA512-AES256 2878 Mbps
• GRE Throughput: Unencrypted 8437 Mbps, Encrypted 2775 Mbps
• WireGuard VPN Throughput: 1411 Mbps
• OpenVPN Throughput: 1043 Mbps
• L2TP VPN Throughput: Unencrypted 10497 Mbps, Encrypted 3178.5 Mbps
• DPI Throughput: TCP 9067 Mbps, UDP 5873 Mbps
• 64 Byte Packet Forwarding Rate: Upload 2,109,375 pps, Download 2,011,719 pps
• SSL VPN Throughput: 1006 Mbps
• IPS Throughput: TCP 9388 Mbps, UDP 7538 Mbps
• WAN Connection Types: Static/Dynamic IP, PPPoE, PPTP, L2TP, 6to4 Tunnel, Pass-Through, Mobile Broadband (4G/3G modem backup via USB port)
• MAC Clone: Modify WAN/LAN MAC Address
• DHCP: Server/Client, Address Reservation, Multi-net DHCP, Multi-IP Interfaces, WAN DHCP 60
• IPv6: WAN Connection supported
• VLAN: 802.1Q VLAN
• IPTV: IGMP v2/v3 Proxy
• Advanced Routing: Static Routing, Policy Routing, RIP, OSPF
• Bandwidth Control: IP/Port-based control, Guarantee & Limited Bandwidth
• Load Balance: Intelligent Load Balance, Application Optimized Routing, Link Backup (Timing, Failover), Online Detection
• NAT Features: One-to-One NAT, Multi-Net NAT, Port Forwarding, Port Triggering, NAT-DMZ, FTP/H.323/SIP/IPSec/PPTP ALG, UPnP, Disable NAT
• Session Limit: IP-based Session Limit
• GRE: Supported (Standalone Mode only)
• SD-WAN: Supported (Controller Mode only)
• SSL VPN: Server with 500 SSL VPN Tunnels
• IPsec VPN: 300 Tunnels, LAN-to-LAN and Client-to-LAN, Main/Aggressive Negotiation Modes, Multiple encryption and authentication algorithms, NAT Traversal, Dead Peer Detection, Perfect Forward Secrecy
• PPTP VPN: Server and Client (32), 300 Tunnels shared with L2TP, MPPE Encryption
• L2TP VPN: Server and Client (32), 300 Tunnels shared with PPTP, L2TP over IPsec
• OpenVPN: Server and Client (10), 110 Tunnels
• WireGuard VPN: Supported
• Web Authentication: No Authentication, Simple Password, Hotspot (Local User/Voucher/SMS/Radius), External Radius Server, External Portal Server
• Omada App: Supported (requires Omada Controller)
• Centralized Management: Omada Hardware Controller, Software Controller, Omada Central (Cloud-Based)
• Cloud Access: Supported (requires Omada Controller)
• Service: Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)
• Maintenance: Web Management Interface, Remote Management, Export/Import Configuration, SNMP v1/v2c/v3, Diagnostics (Ping & Traceroute), NTP Synchronize, Port Mirroring, Syslog Support
• Management Features: Automatic Device Discovery, Intelligent Network Monitoring, Abnormal Event Warnings, Unified Configuration, Reboot Schedule, Captive Portal Configuration, ZTP (Zero-Touch Provisioning)
• Certification: CE, FCC, RoHS
• Package Content: Omada VPN Gateway ER8411, Power Cord, Rackmount Kit, RJ45 Console Cord, Quick Installation Guide
• System Requirements: Microsoft Windows 98SE, NT, 2000, XP, Vista™, Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux
• Environment: Operating Temperature 0–40 °C (32–104 °F), Storage Temperature -40–70 °C (-40–158 °F), Operating Humidity 10–90% RH non-condensing, Storage Humidity 5–90% RH non-condensing

Source: TP-Link official page

Datasheet & Support Downloads