TL-ER6120

End of Life

SafeStream Gigabit Dual-WAN VPN Router

2 Gigabit WAN ports, 2 Gigabit LAN ports, 1 Gigabit LAN/DMZ port and a console port
Supports multiple VPN protocols including IPsec/PPTP/L2TP, which helps users establish their VPN more flexibly
Supports up to 100 IPsec VPN tunnels with a hardware-based VPN engine
Abundant security features including ARP Inspection, DoS Defense, URL/Keyword Domain Filter and Access Control
Deploys One-Click restriction of IM/P2P applications to manage staff online behavior
Professional 4kV lightning protection keeps your investments as safe as possible

Overview

What This Product Does

The TL-ER6120 SafeStream Gigabit Dual-WAN VPN Router from TP-LINK possesses excellent data processing capabilities and multiple powerful functions including IPsec/PPTP/L2TP VPN, Load Balance, Access Control, IM/P2P Blocking, DoS Defense, Bandwidth Control, Session Limit, PPPoE Server and so on, which consumedly meet the needs of small and medium enterprises, hotels and communities with large volumes of users demanding an efficient and easy-to-manage network with high security.

High VPN Performance

The TL-ER6120 supports multiple VPN protocols including IPsec, PPTP and L2TP in Client/Server mode and can handle pass-through traffic as well. It also features a built-in hardware-based VPN engine allowing the router to support and manage up to 100 LAN-to-LAN/Client-to-LAN IPsec VPN connections. Advanced VPN features include: DES/3DES/AES128/AES192/AES256 encryption, MD5/SHA1 authentication, Manual/IKE key management, and Main/Aggressive negotiation modes.

Abundant Security Features

For defense against external threats, TL-ER6120 features an automatic protection to detect and block Denial of service (DoS) attacks such as TCP/UDP/ICMP Flooding, TCP Scanning, Ping of Death and other related threats. Moreover, this router offers a hardware DMZ port, which allows you to setup public servers without exposing your internal network, to avoid attacks from external threats. For better management of the internal network, TL-ER6120 allows administrators to set rules to block specific web sites and IM/P2P applications with just one-click, and restrict staff to use specific services such as FTP, HTTP and SMTP.

Optimizing Bandwidth Usage

The TL-ER6120 features two WAN ports, allowing the router to satisfy various Internet access requirements through one device. The Intelligent Load Balancing function can distribute data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. With IP-based Bandwidth Control and Session Limit functions, network administrators can flexibly manage network bandwidth to optimize bandwidth usage.

Safety Minded Enterprise Investments

Professional lightning protection technology is designed to prevent electrical surges from penetrating the interior of the electrical equipment and is discharged harmlessly into the Earth. This router is designed to prevent lightning up to 4Kv in the well-grounded connection conditions. This feature ensures that networking infrastructure investments remain as safe as possible from one of mother nature's more violent situations.

Specifications

SECURITY
Access Control	Source/Destination IP Based Access Control
Filtering	MAC Filtering URL/Keywords Filtering
ARP Inspection	Sending GARP Packets ARP Scanning by WAN/LAN IP-MAC Binding
Attack Defense	TCP/UDP/ICMP Flood Defense Block TCP Scan (Stealth FIN/Xmas/Null) Block Ping from WAN

HARDWARE FEATURES
Standards and Protocols	IEEE 802.3, IEEE802.3u, IEEE802.3ab TCP/IP, DHCP, ICMP, NAT, PPPoE, SNTP, HTTP, DNS, IPsec, PPTP, L2TP
Interface	2 Gigabit WAN ports 2 Gigabit LAN ports 1 Gigabit LAN/DMZ port 1 Console Port (RJ-45 On RS232)
Network Media	10BASE-T: UTP category 3, 4, 5 cable (Max 100m) EIA/TIA-568 100Ω STP (Max 100m) 100BASE-TX: UTP category 5, 5e cable (Max 100m) EIA/TIA-568 100Ω STP (Max 100m) 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100m)
Button	Reset Button
Power Supply	Internal Universal Power Supply AC100-240V~ 50/60Hz Input
Flash	32MB
DRAM	DDRII 128MB
LED	PWR, SYS, Link/Act, Speed, DMZ
Dimensions ( W x D x H )	17.3x7.1x1.7 in.(440x180x44 mm)

PERFORMANCE
Concurrent Session	150000
NAT(iMIX)	936Mbps
NAT(DHCP)	878Mbps
NAT(PPPoE)	665Mbps
IPsec VPN Throughput (AES256)	373Mbps

BASIC FUNCTIONS
WAN Connection Type	Static/Dynamic IP, PPPoE/Russian PPPoE, PPTP/Russian PPTP, L2TP/Russian L2TP, Bigpond Cable Dual Access, BigPond
MAC Clone	Modify WAN/LAN/DMZ MAC Address
DHCP	DHCP Server/Client DHCP Reservation
IPv6	IPv6 Support
VLAN	802.1Q VLAN, Port VLAN
IPTV	Bridge, Custom

ADVANCED FUNCTIONS
Load Balance	Intelligent Load Balance Link Backup (Timing, Failover) Online Detection
NAT	One-to-One NAT Multi-nets NAT Virtual Server, DMZ Host, Port Triggering, UPnP FTP/H.323/SIP/IPsec/PPTP ALG
Routing	Static Routing Policy Routing
Traffic Control	IP-based Bandwidth Control IP-based Session Limit

VPN
IPsec VPN	100 IPsec VPN Tunnels LAN-to-LAN, Client-to-LAN Main, Aggressive Negotiation Mode DES, 3DES, AES128, AES192, AES256 Encryption Algorithm MD5, SHA1 Authentication Algorithm IPsec NAT Traversal (NAT-T) Dead Peer Detection (DPD) Perfect Forward Secrecy (PFS)
PPTP VPN	50 PPTP VPN Tunnels PPTP VPN Server/Client PPTP with MPPE Encryption
L2TP VPN	50 L2TP VPN Tunnels L2TP VPN Server/Client L2TP over IPsec
VPN Pass-through	IPsec (ESP), PPTP, L2TP

MANAGEMENT
Service	Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Maintenance	Web Management Interface Remote Management Export & Import Configuration SNMP Diagnostics(Ping & Traceroute) NTP Synchronize Syslog Support
Web-based Management	Local User Authentication, Radius Sever Authentication, Onekey Online

OTHERS
Certification	CE, FCC, RoHS
Package Contents	TL-ER6120 Power Cord Rack-mount Kit Installation Guide
System Requirements	Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX or Linux
Environment	Operating Temperature: 0℃~40℃ (32℉~104℉) Storage Temperature: -40℃~70℃ (-40℉~158℉) Operating Humidity: 10%~90% non-condensing Storage Humidity: 5%~90% non-condensing