TP-LINK ER7206 V2.2 Omada Gigabit VPN Router
| • Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)**, Centralized Cloud Management, and Intelligent Monitoring. • Centralized Management: Cloud access and Omada app for ultra convenience and easy management. • Gigabit Ports: 1 gigabit SFP and 5 gigabit RJ45 ports provide high-speed wired connectivity. • Up to 5 WAN Ports: Gigabit SFP WAN port and gigabit RJ45 WAN port optimize bandwidth usage. • Highly Secure VPN: upports multiple VPN protocols including SSL / Wireguard / OpenVPN/ IPSec / GRE VPN§/ PPTP/ L2TP/ L2TP over IPSec, helping users to establish VPN connections more flexibly. • Abundant Security Features: Advanced firewall policies, DoS defense,IP/MAC/URL filtering, and more security functions protect your network and data. |
Omada SDN-The Smarter Cloud Solution for Business Networking
As the gateway that seamlessly integrates into the Omada Software Defined Networking (SDN) platform, ER7206 allows for remote and centralized management, anywhere, anytime. Standalone management via the Web UI or app is also available to maximize convenience.
Up to Five WAN Gigabit Ports to Optimize Bandwidth Usage
One gigabit SFP WAN/LAN port, one gigabit RJ45 WAN port, and four freely interchangeable WAN/LAN ports allow the router to support up to five WAN ports to satisfy various internet access requirements through one device. The multi-WAN Load Balancing function distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband.
Highly Secure VPN
ER7206 supports IPSec/PPTP/L2TP VPN over IPSec/SSL protocols. With a powerful hardware design, the router supports and manages up to 100× LAN-to-LAN IPSec, 50× OpenVPN*, 50× L2TP, and 50× PPTP VPN connections. One-click auto IPSec VPN* greatly simplifies VPN configuration and facilitates network management and deployment while also securing and encrypting private site-to-site data communications traveling over the internet.
Internet Access Management Strategy
Standardize users’ online behavior and easily specify the internet access rights and strategies of employee via IP/MAC/URL Filtering and Access Control List (ACL). Captive Portal authentication facilitates network resource control by capturing, authenticating, and classifying user access. Appropriate network resources can also be allocated for particular users or guests.
Easy Management with the Omada App
Follow configuration instructions on the free Omada app to get set up in minutes. Omada lets you configure settings, monitor the network status and manage clients, all from the convenience of a smart phone or tablet.
*OpenVPN requires the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller.
**Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller.
| HARDWARE FEATURES | |
| Standards and Protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, SNMP |
| Interface | 1 Gigabit SFP WAN/LAN Port 1 Gigabit WAN port 4 Gigabit LAN/WAN ports |
| USB | 1 USB3.0 (supports USB LTE dongle and USB Storage) |
| Network Media | 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m) |
| Button | Reset Button |
| Power Supply | 12VDC / 1A Power Adapter |
| Flash | 128 MB NAND |
| DRAM | 512 MB DDR4 |
| LED | PWR, SYS, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act) |
| Max Power Consumption | 7.5 W (with USB 3.0 connected) 4.5 W (without USB 3.0 connected) |
| Surge Protection | 4 kV surge protection |
| Dimensions(WxDxH) | 226 x 131 x 35 mm |
| SDN SUPPORT | |
| Hardware Controller (OC200/OC300) | Automatic Device Discovery Intelligent Network Monitoring Abnormal Event Warnings Unified Configuration Reboot Schedule Captive Portal Configuration |
| Software Controller | |
| PERFORMANCE | |
| Concurrent Session | 150,000 |
| New Sessions / Second | 5,300 |
| IPS Throughput | TCP: 229 Mbps UDP: 188 Mbps |
| DPI Throughput | TCP: 933 Mbps UDP: 927 Mbps |
| Static IP NAT Throughput (Upload / Download) | 945.3 Mbps / 940.5 Mbps |
| DHCP NAT Throughput (Upload / Download) | 939.6 Mbps / 940.9 Mbps |
| PPPoE NAT Throughput (Upload / Download) | 943.6 Mbps / 940.9 Mbps |
| L2TP NAT Throughput (Upload / Download) | 880.1 Mbps / 859.0 Mbps |
| PPTP NAT Throughput (Upload / Download) | 855.0 Mbps / 907.2 Mbps |
| 66 Byte Packet forwarding rate (Upload / Download) | 1,453,489 pps / 1,453,488 pps |
| 1,518 Byte Packet forwarding rate (Upload / Download) | 81,279 pps / 81,275 pps |
| IPSec VPN Throughput (AES256) | ESP-SHA1-AES256: 617.1 Mbps ESP-SHA256-AES256: 592.8 Mbps ESP-SHA384-AES256: 592.4 Mbps ESP-SHA512-AES256: 604.5 Mbps |
| GRE | Unencrypted: 611.9 Mbps Encrypted: 325.0 Mbps |
| WireGuard VPN | 341.3 Mbps |
| SSL VPN | 131.6 Mbps |
| OpenVPN | 139.1 Mbps |
| L2TP VPN Throughput | Unencrypted: 977.4 Mbps Encrypted: 334.6 Mbps |
| PPTP VPN Throughput | Unencrypted: 1064.1 Mbps Encrypted: 206.8 Mbps |
| BASIC FUNCTIONS | |
| WAN Connection Type | Static IP Dynamic IP PPPoE(supports MRU Configuration) PPTP L2TP |
| DHCP | DHCP Server DHCPv6 PD Server (only in Standalone Mode) DHCP Options Customization DHCP Address Reservation Multi-IP Interfaces Multi-Net DHCP |
| MAC Clone | Modify WAN/LAN MAC Address |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
| IPv6 | StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode |
| Stateful ACL | Yes |
| mDNS Repeater | Yes |
| Quality of Service | Yes |
| Bridge VLAN | Yes |
| VLAN | 802.1Q VLAN |
| TRANSMISSION | |
| Load Balance | Intelligent Load Balance Application Optimized Routing Link Backup (Timing, Failover) Online Detection |
| NAT | One-to-One NAT Multi-Net NAT Port Forwarding Port Triggering1 NAT-DMZ FTP/H.323/SIP/IPSec/PPTP ALG UPnP |
| Routing | Static Routing Policy Routing RIP OSPF |
| Session Limit | IP-based Session Limit |
| Bandwidth Control | IP-based Bandwidth Control |
| VPN | |
| IPSec VPN | 100 IPSec VPN Tunnels LAN-to-LAN, Client-to-LAN Main, Aggressive Negotiation Mode DES, 3DES, AES128, AES192, AES256 Encryption Algorithm IPsec Failover IKE v1/v2 MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm NAT Traversal (NAT-T) Dead Peer Detection (DPD) Perfect Forward Secrecy (PFS) |
| PPTP VPN | PPTP VPN Server 10 PPTP VPN Clients 50 Tunnels PPTP with MPPE Encryption |
| L2TP VPN | L2TP VPN Server 10 L2TP VPN Clients 50 Tunnels L2TP over IPSec |
| GRE | Only in Standalone Mode |
| WireGuard VPN | Yes |
| SSL VPN | 50 Tunnels |
| OpenVPN | OpenVPN Server OpenVPN Clients (5) 55 OpenVPN Tunnels "Certificate + Account" Mode Full Mode |
| SECURITY | |
| Attack Defense | TCP/UDP/ICMP Flood Defense Block TCP Scan (Stealth FIN/Xmas/Null) Block Ping from WAN |
| Filtering | Web Group Filtering URL Filtering Web Security |
| ARP Inspection | Sending GARP Packets ARP Scanning IP-MAC Binding |
| DNS Proxy | DNSSEC, DoH, and DoT |
| Access Control | Source/Destination IP Based Access Control |
| AUTHENTICATION | |
| Web Authentication | No Authentication Simple Password Hotspot (Local User / Voucher / SMS / Radius) External Radius Sever External Portal Sever LDAP |
| MANAGEMENT | |
| Maintenance | Web Management Interface Remote Management Export & Import Configuration SNMP v1/v2c/v3 Diagnostics (Ping & Traceroute) NTP Synchronize Syslog Support CLI (only in Standalone Mode) |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe) |
| OTHERS | |
| Certification | CE, FCC, RoHS |
| Package Contents | ER7206 V2 Power Adapter Quick Installation Guide |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX or Linux |
| Environment | Operating Temperature: 0°C to 40°C Storage Temperature: -40°C to 70°C Operating Humidity: 10% to 90% non-condensing Storage Humidity: 5% to 90% non-condensing |
