TP-Link ER8411 Omada Enterprise VPN Router with Powerful 10GE Ports

ER8411 Omada VPN Router with 10G Ports SECURITY Access Control Source/Destination IP Based Access Control Filtering • WEB Group Filtering*5 • URL Filtering • Web Security*5 ARP Inspection • Sending GARP Packets*5 • ARP Scanning*5 • IP-MAC Binding*5 Attack Defense • TCP/UDP/ICMP Flood Defense • Block TCP Scan (Stealth FIN/Xmas/Null) • Block Ping from WAN HARDWARE FEATURES Standards and Protocols • IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN Interface • 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN) • 1× 1GE SFP WAN/LAN Ports • 8× 1GE RJ45 WAN/LAN Ports • 1× RJ45 Console Ports • 2× USB Ports (Connecting 4G/3G Modem as WAN Backup) Network Media • 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 1000BASE-T: UTP category 5e, 6 cable (Max 100 m) Fan Quantity 2 Button Reset Button Power Supply Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz) PoE Budget – Flash 4MB SPI NOR + 256 MB NAND DRAM 4 GB DDR4 LED PWR, SYS, WAN, LAN, USB, FAN Dimensions ( W x D x H ) 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm) Protection 4 kV surge protection Enclosure Steel Mounting Rack Mountable Max. Power Consumption • 26.36 W (with USB 3.0 connected) • 19.12 W (without USB 3.0 connected) PERFORMANCE IPS Throughput TCP: 4924 Mbps; UDP: 4521 Mbps DPI Throughput TCP: 5524 Mbps; UDP: 3547 Mbps WireGuard VPN 1411 Mbps Concurrent Session 2,300,000 New Sessions /Second 20,000 NAT (Static IP) • Upload: 9445.82 Mbps • Download: 9449.26 Mbps NAT(DHCP) • Upload: 9426.83 Mbps • Download: 9426.20 Mbps NAT(PPPoE) • Upload: 9413.96 Mbps • Download: 9102.01 Mbps NAT (L2TP) • Upload: 4230.62 Mbps • Download: 4169.53 Mbps NAT (PPTP) • Upload: 3933.86 Mbps • Download: 3821.97 Mbps 64 Byte Packet Forwarding Rate • Upload: 1080 Mbps • Download: 1030 Mbps IPsec VPN Throughput • SHA1-AES256: 2140.45 Mbps • SHA2-AES256: 2080.20 Mbps OpenVPN 1665.64 Mbps L2TP VPN Throughput • Unencrypted: 5013.50 Mbps • Encrypted: 2274.74 Mbps PPTP VPN Throughput • Unencrypted: 10143 Mbps • Encrypted: 952 Mbps SSL VPN Throughput 1511.10 Mbps 66 Byte Packet Forwarding Rate – 1,518 Byte Packet forwarding rate • Upload: 9970 Mbps • Download: 9970 Mbps BASIC FUNCTIONS WAN Connection Type • Static/Dynamic IP • PPPoE • PPTP • L2TP • 6to4 Tunnel • Pass-Through • Mobile Broadband: 4G/3G modem for backup via USB port MAC Clone Modify WAN/LAN MAC Address*4 DHCP • DHCP Server/Client • DHCP Address Reservation • Multi-net DHCP • Multi-IP Interfaces IPv6 WAN Connection VLAN 802.1Q VLAN IPTV IGMP v2/v3 Proxy Advanced Features Access Control IP/Port/Protocol/Domain Name Filtering Advanced Routing • Static Routing • Policy Routing Bandwidth Control • IP/Port-based Bandwidth Control • Guarantee & Limited Bandwidth Load Balance • Intelligent Load Balance • Application Optimized Routing • Link Backup (Timing*5, Failover) • Online Detection NAT • One-to-One NAT*5 • Multi-Net NAT • Virtual Server • Port Triggering*5 • NAT-DMZ • FTP/H.323/SIP/IPSec/PPTP ALG • UPnP Security • SPI Firewall • VPN Passthrough • FTP/H.323/PPTP/SIP/IPsec ALG • DoS Defence, Ping of Death • Local Management Session Limit IP-based Session Limit VPN SSL VPN • SSL VPN Server • SSL VPN Client • 500 OpenVPN Tunnels IPsec VPN • 300 IPSec VPN Tunnels • LAN-to-LAN, Client-to-LAN • Main, Aggressive Negotiation Mode • DES, 3DES, SHA1, SHA2, AES128, AES192, AES256 Encryption Algorithm • IKE v1/v2 • MD5, SHA1 Authentication Algorithm • NAT Traversal (NAT-T) • Dead Peer Detection (DPD) • Perfect Forward Secrecy (PFS) PPTP VPN • PPTP VPN Server • PPTP VPN Client (32)*6 • 300 Tunnels (Shared with L2TP) • PPTP with MPPE Encryption L2TP VPN • L2TP VPN Server • L2TP VPN Client (32)*6 • 300 Tunnels (Shared with PPTP) • L2TP over IPSec OpenVPN • OpenVPN Server • OpenVPN Client (10)*6 • 110 OpenVPN Tunnels WireGuard VPN • 300 Tunnels AUTHENTICATION Web Authentication • No Authentication • Simple Password*2 • Hotspot（Local User / Voucher*2 / SMS*2 / Radius*2） • External Radius Sever • External Portal Sever*2 • Facebook Check-In*2 • Instagram Follow*2 Management Features Omada App Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. Centralized Management • Omada Hardware Controller (OC300) • Omada Hardware Controller (OC200) • Omada Software Controller • Omada Cloud-Based Controller Cloud Access Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. Service Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe) Maintenance • Web Management Interface • Remote Management • Export & Import Configuration • SNMP v1/v2c/v3 • Diagnostics (Ping & Traceroute)*5 • NTP Synchronize*5 • Syslog Support Zero-Touch Provisioning Yes. Requiring the use of Omada Cloud-Based Controller. Management Features • Automatic Device Discovery • Intelligent Network Monitoring • Abnormal Event Warnings • Unified Configuration • Reboot Schedule • Captive Portal Configuration OTHERS Certification CE, FCC, RoHS Package Content • Omada 10G Multi-WAN Security Gateway ER8411 • Power Cord • Rack-Mount Kit • Quick Installation Guide System Requirements Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux Environment • Operating Temperature: 0–40 ℃ (32–104 ℉); • Storage Temperature: -40–70 ℃ (-40–158 ℉) • Operating Humidity: 10–90% RH non-condensing • Storage Humidity: 5–90% RH non-condensing