 1.png)
TP-LINK ER706W V1.2 Omada AX3000 Gigabit VPN Router
TP-LINK ER706W V1.2 Omada AX3000 Gigabit VPN Router
| • AX3000 WiFi 6 with 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz* • 1 Gigabit SFP slot and 5 Gigabit RJ45 ports • 1× USB 3.0 port (Supports USB storage, and LTE backup with LTE dongle) • Load Balancing on up to 5 WAN ports raises the utilization rate of multi-line broadband • Mesh with Omada access points to extend WiFi without extra cabling and switch** • Centralized cloud management via the web or the Omada app§ • High-security SSL/ IPSec / GRE† / WireGuard / PPTP / L2TP VPN & OpenVPN△ • DoS defense, IP/MAC/URL filtering, DPI, and IPS/IDS for enhanced security |
Up to Five WAN Gigabit Ports & One USB WAN for Mobile Broadband
1× USB 3.0 Port(supports a USB LTE dongle for connecting a 4G/3G Modem as WAN Backup)
Distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband.
Software Defined Networking (SDN) with Cloud Access
Remotely manage your access points, switches, and gateways across multiple sites all from a single interface.
High-Security and High-Performance VPN
IPSec/PPTP/L2TP/GRE†/WireGuard/ Open VPN/ SSL VPN easily builds secure VPN tunnels for secure Internet browsing, communication between different branches, or enabling remote work or study in distributed environments.
Secure Traffic and Access
Leverage Deep Packet Inspection (DPI) to effectively block or prioritize specific applications for enhanced security and optimized bandwidth allocation. Easily manage internet access rights and policies through IP/MAC/Location/URL Filtering and Access Control Lists (ACL).
Attack Prevention with 4000+ Signature Rules
Enhance threat detection and defense with the integrated IDS/IPS engine. Benefit from continuous protection with an extensive attack prevention signature database, featuring over 4000+ regularly updated signature rules.
DoS/DDoS Protection
Automatically detect and block Denial of Service (DoS) attacks, including TCP/UDP/ICMP Flooding, Ping of Death, and related threats, ensuring uninterrupted network performance.
*Maximum wireless signal rates are the physical rates derived from IEEE Standard 802.11 specifications. Actual wireless data throughput and coverage are not guaranteed and will vary.
**Omada Mesh Technology requires the use of EAPs that support mesh functionality. Please refer to https://www.tp-link.com/en/omada-mesh/product-list/ to confirm which Omada EAPs are compatible with Omada Mesh. Additionally, ER706W also supports standalone Mesh. Please refer to https://www.tp-link.com/en/standalonemesh/product-list/ to confirm the models that support standalone Mesh.
‡Use of WiFi 6 (802.11ax) and its features, including OFDMA, HE160, and 1024-QAM, require clients to support the corresponding features. The 160 MHz bandwidth is only available on the 5 GHz band. It may be unavailable in some regions/countries due to regulatory restrictions.
△For PPTP VPN and L2TP VPN, ER706W can connect with up to 10 VPN servers. For OpenVPN, ER706W can connect withup to 5 VPN servers.
†These functions are supported only in Standalone Mode.
§These functions are supported only in Controller Mode.
#This model supports manual URL entry only and does not support category-based URL Filtering.
※Performance data has been updated since software version 5.15.20. See ER706W | Omada Gigabit AX3000 Wi-Fi 6 VPN Gateway | Omada by TP-Link for details.
| HARDWARE FEATURES | |
| Standards and Protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, 802.11a/b/g/n/ac/ax |
| Interface | 1 Gigabit SFP WAN/LAN Port 1 Gigabit WAN port 4 Gigabit LAN/WAN ports |
| USB | 1 USB3.0 (supports USB LTE dongle and USB Storage) |
| Wi-Fi Speed | 2.4 GHz: 574 Mbps 5 GHz: 2402 Mbps HE160 |
| Antennas | 2.4 GHz: 2x 3 dBi dual-band detachable antennas 5 GHz: 3x 4.5 dBi dual-band detachable antennas |
| Network Media | 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m) |
| Button | Reset button |
| Power Supply | 12VDC / 2A Power Adapter |
| Flash | 128 MB NAND |
| DRAM | 512 MB DDR4 |
| LED | SYS, WLAN, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act) |
| Max Power Consumption | EU: 16.8W (with USB 3.0 connected), 11.8W (without USB 3.0 connected) |
| Surge Protection | 4 kV surge protection |
| Mounting | Desktop/ Wall-mounting |
| Dimensions ( W x D x H ) | 226 × 131 × 35 mm (Antenna dimensions not included) |
| SDN SUPPORT | |
| Hardware Controller (OC200/OC300) | Automatic Device Discovery Intelligent Network Monitoring Abnormal Event Warnings Unified Configuration Reboot Schedule Captive Portal Configuration |
| Software Controller | |
| Omada App | |
| PERFORMANCE1 | |
| Concurrent Session | 150,000 |
| New Sessions / Second | 5,100 |
| Static IP NAT Throughput (Upload / Download) | 937.2 Mbps / 936.1 Mbps |
| DHCP NAT Throughput (Upload / Download) | 945.8 Mbps / 940.6 Mbps |
| PPPoE NAT Throughput (Upload / Download) | 942.9 Mbps / 942.9 Mbps |
| L2TP NAT Throughput (Upload / Download) | 837.4 Mbps / 881.5 Mbps |
| PPTP NAT Throughput (Upload / Download) | 803.0 Mbps / 910.5 Mbps |
| 66 Byte Packet forwarding rate (Upload / Download) | 1,453,489 pps / 1,453,488 pps |
| 1,518 Byte Packet forwarding rate (Upload / Download) | 81274 pps / 91275 pps |
| IPSec VPN Throughput (AES256) | ESP-SHA1-AES256: 646.9Mbps ESP-SHA256-AES256: 642.8Mbps ESP-SHA384-AES256: 648.9Mbps ESP-SHA512-AES256: 658.4 Mbps |
| GRE | Unencrypted: 624.2Mbps Encrypted: 301.5Mbps |
| WireGuard VPN | 393.5Mbps |
| SSL VPN | 126.7Mbps |
| OpenVPN | 129.3Mbps |
| L2TP VPN Throughput | Unencrypted: 1034.0 Mbps Encrypted: 570.0 Mbps |
| PPTP VPN Throughput | Unencrypted: 1165.0 Mbps Encrypted: 209.0 Mbps |
| BASIC FUNCTIONS | |
| WAN Connection Type | Static IP Dynamic IP PPPoE (supports MRU Configuration) PPTP L2TP |
| DHCP | DHCP Server DHCPv6 PD Server (only in Standalone Mode) DHCP Options Customization DHCP Address Reservation Multi-IP Interfaces Multi-Net DHCP |
| MAC Clone | Modify WAN Address |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
| IPv6 | StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / NonAddress mode |
| Stateful ACL | Yes |
| mDNS Repeater | Yes |
| Quality of Service | Yes |
| Bridge VLAN | Yes |
| VLAN | 802.1Q VLAN |
| 1. Rated specifications are based on test results using software version 1.0.0 Build 20230712 Rel.61639. Device performance may vary as a result of the actual scenario. | |
| TRANSMISSION | |
| Load Balance | Intelligent Load Balance Application Optimized Routing Link Backup (Timing, Failover) Online Detection |
| NAT | One-to-One NAT Multi-Net NAT Port Forwarding Port Triggering1 NAT-DMZ FTP/H.323/SIP/IPSec/PPTP ALG UPnP |
| Routing | Static Routing Policy Routing RIP2 OSPF2 |
| Session Limit | IP-based Session Limit |
| Bandwidth Control | IP-based Bandwidth Control |
| Wireless Function | |
| Wireless Encryption | WPA/WPA2/WPA3 Personal, WPA/WPA2/WPA3 Enterprise |
| Multiple SSIDs | 16 in total (8 per radio) |
| Enable/Disable Wireless Radio | Yes |
| Enable/Disable SSID Broadcast | Yes |
| Guest Network | Yes |
| Automatic Channel Selection Algorithm | Yes |
| Transmit Power Control | Adjust transmit Power on dBm |
| Seamless Roaming | Yes |
| Mesh | Yes |
| OFDMA | Yes |
| Beamforming | Yes |
| MU-MIMO | Yes |
| Rate Limit | Yes |
| Load Balance | Yes |
| Airtime Fairness | Yes |
| Band Steering | Yes |
| RADIUS Accounting | Yes |
| MAC Authentication | Yes |
| Reboot Schedule | Yes |
| Wireless Schedule | Yes |
| Support Data Rates | 802.11ax: 8 Mbps to 2402 Mbps (MCS0-MCS11, NSS = 1 to 2 HE20/40/80/160) 802.11ac: 6.5 Mbps to 2166.7 Mbps (MCS0-MCS11, NSS = 1 to 2 VHT20/40/80/160) 802.11n: 6.5 Mbps to 300 Mbps (MCS0-MCS15, HT20/40) 802.11g: 6, 9, 12, 18, 24, 36, 48 ,54 Mbps 802.11b: 1, 2, 5.5, 11 Mbps 802.11a: 6, 9, 12, 18, 24, 36, 48 ,54 Mbps |
| VPN | |
| IPSec VPN | 100 IPSec VPN Tunnels LAN-to-LAN, Client-to-LAN Main, Aggressive Negotiation Mode DES, 3DES, AES128, AES192, AES256 Encryption Algorithm IPsec Failover IKE v1/v2 MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm NAT Traversal (NAT-T) Dead Peer Detection (DPD) Perfect Forward Secrecy (PFS) |
| PPTP VPN | PPTP VPN Server PPTP VPN Client (10)3 50 Tunnels PPTP with MPPE Encryption |
| L2TP VPN | L2TP VPN Server L2TP VPN Client (10)3 50 Tunnels L2TP over IPSec |
| GRE | Only in Standalone Mode |
| WireGuard VPN | Yes |
| SSL VPN | 50 Tunnels |
| OpenVPN | OpenVPN Server OpenVPN Client (5)3 55 OpenVPN Tunnels "Certificate + Account" Mode Full Mode |
| 1. Port Triggering is supported only in Standalone Mode. 2. RIP and OSPF are supported only in Standalone Mode. 3. For PPTP VPN and L2TP VPN, ER706W can connect with up to 10 VPN servers. For OpenVPN, ER706W can connect with up to 5 VPN servers |
|
| SECURITY | |
| Attack Defense | TCP/UDP/ICMP Flood Defense Block TCP Scan (Stealth FIN/Xmas/Null) Block Ping from WAN |
| Filtering | Web Group Filtering1 URL Filtering Web Security1 |
| DNS Proxy | DNSSEC, DoH, and DoT |
| ARP Inspection | Sending GARP Packets ARP Scanning2 IP-MAC Binding |
| Access Control | Source/Destination IP Based Access Control |
| AUTHENTICATION | |
| Web Authentication | No Authentication Simple Password3 Hotspot (Local User / Voucher3 / SMS3 / Radius3 ) External Radius Server External Portal Server3 LDAP |
| MANAGEMENT | |
| Maintenance | Web Management Interface Remote Management Export & Import Configuration SNMP v1/v2c/v3 Diagnostics (Ping & Traceroute)4 NTP Synchronize4 Port Mirroring CLI (only in Standalone Mode) Syslog Support |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) |
| OTHERS | |
| Certification | CE, FCC, RoHS |
| Package Contents | ER706W Power Adapter Quick Installation Guide |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11 MAC OS, NetWare, UNIX or Linux |
| Environment |
Operating Temperature: 0 °C to 40 °C |
| 1. Web Group Filtering and Web Security are supported only in Standalone Mode. 2. ARP Scanning is supported only in Standalone Mode. 3. The following web authentication methods are supported only in Controller Mode: Simple Password, Voucher, SMS, Radius, and External Portal Server. 4. Diagnostics (Ping & Traceroute) and NTP Synchronize are supported only in Standalone Mode. |
|
Caution! According to current Greek Legislation, of N.F.B.A.R. and the provisions of the P.D. 98/2017 the lawful use of this product in the frequency band 2400 – 2483,5 MHz, provides for a maximum transmit power of 100mW e.i.r.p.
At this maximum power the output power of the transmitter and the gain of the antenna are both taken into account. Responsible for spectrum surveillance is H.T.P.C.
This product is CE marked, P.D. 98/2017
This product is intended for indoor use.
Caution! According to current Greek Legislation, of N.F.B.A.R. and the provisions of the P.D. 98/2017 the lawful use of this product in the frequency band 5150 – 5250MHz and 5250 – 5350MHz, provides for a maximum transmit power of 200 mW e.i.r.p. and in the frequency band 5470 – 5725MHz, provides for a maximum transmit power of 1 W e.i.r.p.
At this maximum power the output power of the transmitter and the gain of the antenna are both taken into account. Responsible for spectrum surveillance is H.T.P.C.
This product is CE marked, P.D. 98/2017
This product is intended for indoor use.
