ER605
Omada Gigabit VPN Router
- Integrated into Omada SDN: Zero-Touch Provisioning***, Centralized Cloud Management, and Intelligent Monitoring.
- Centralized Management: Cloud access and Omada app for convenience and easy management.
- Five Gigabit Ports: High-speed wired connectivity.
- Up to 3 WAN Ethernet Ports: 1 gigabit WAN port and 2 gigabit WAN/LAN ports with load balance raise the utilization rate of multi-line broadband.
- One USB WAN Port for Mobile Broadband: Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port.‡
- Highly Secure VPN: Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN*, 16× L2TP, and 16× PPTP VPN connections.
- Abundant Security Features: Advanced firewall policies, DoS defense, IP/MAC/URL filtering, and more security functions protect your network and data.
Centralized ManagementProfessional,
Secure, and Reliable Gigabit VPN Router
ER605
- Centralized Management
- Gigabit Ports
- 1 USB + 1 WAN + 2 WAN/LAN
- Load Balance
- IPSec/OpenVPN/ PPTP/L2TP
- Powerful Firewall
- VLAN
- Omada App
Omada SDN—The Smarter Cloud Solution for Business Networking
As the gateway that seamlessly integrates into the Omada Software Defined Networking (SDN) platform, ER605 allows for remote and centralized management, anywhere, anytime. Standalone management via the Web UI or app is also available to maximize convenience.
- Hardware or Software Controllers
- Centralized Cloud Management
- Intelligent Monitoring
Up to Three WAN Gigabit Ports & One USB WAN for Mobile Broadband
Two freely interchangeable ports allow the router to support up to three WAN ports for various Internet access requirements. The multi-WAN Load Balancing function distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband.
Mobile broadband via 4G/3G modem by connecting to the USB port is also supported for WAN backup.
High-Security and High-Performance VPN
ER605 supports IPSec/PPTP/L2TP VPN over IPSec/SSL protocols. One-click auto IPSec VPN* greatly simplifies VPN configuration and facilitates network management and deployment. It also secures and encrypts private site-to-site data communications traveling over the internet. This version improves VPN performance by 4–5 times thanks to the open line of communication with Omada's user base.
Abundant Security Features
Powerful Firewall
Advanced firewall policies
protect your network and data.
Convenient VLAN Support
Create virtual network segments for
enhanced security and simplified
network management.
DoS Defense
Automatically detects and blocks Denial of Service
(DoS) attacks such as TCP/UDP/ICMP Flooding, Ping
of Death, and other related threats.
IP/MAC/URL Filtering
Forcefully prevent viruses and attacks
from intruders.
IP-MAC Binding
Reserves static IP assignment for
clients to defend against ARP
attacks and spoofing.
One-Click ALG Activation
One-Click ALG Activation for
applications such as FTP, H323, SIP,
IPSec and PPTP.
Internet Access Management Strategy
Administrators can moderate users' online behavior and easily specify employees' internet access rights and strategies via IP/MAC/URL Filtering and Access Control List (ACL). Captive Portal authentication facilitates network resource control by capturing, authenticating, and classifying user access. Appropriate network resources can also be allocated for particular users or guests.
Easy Management with the Omada App
Follow configuration instructions on the free Omada app to get set up in minutes. Omada lets you configure settings, monitor the network status, and manage clients, all from the convenience of a mobile device.
| SECURITY | |
|---|---|
| Access Control | Source/Destination IP Based Access Control |
| Filtering | • WEB Group Filtering§• URL Filtering• Web Security§ |
| ARP Inspection | • Sending GARP Packets§• ARP Scanning§• IP-MAC Binding§ |
| Attack Defense | • TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN |
| HARDWARE FEATURES | |
|---|---|
| Standards and Protocols | • IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP |
| Interface | • 1 Fixed Gigabit WAN Port• 2 Fixed Gigabit LAN Ports• 2 Changeable Gigabit WAN/LAN Ports• 1 USB 2.0 Port (Connecting 4G/3G Modem as WAN Backup‡) |
| Network Media | • 10BASE-T: UTP category 3, 4, 5 cable (Max 100m)EIA/TIA-568 100Ω STP (Max 100m)• 100BASE-TX: UTP category 5, 5e cable (Max 100m)EIA/TIA-568 100Ω STP (Max 100m)• 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100m) |
| Fan Quantity | Fanless |
| Button | Reset Button |
| Power Supply | External 12V/1A DC Adapter |
| PoE Budget | - |
| Flash | 128 MB NAND |
| DRAM | 256 MB DDR |
| LED | PWR, SYS, WAN (Link/Act), LAN (Link/Act), USB |
| Dimensions ( W x D x H ) | 6.2 × 4.0 × 1.0 in (158 × 101 × 25mm) |
| Protection | 4 kV surge protection |
| Enclosure | Steel |
| Mounting | Desktop/Wall-mount |
| Max Power Consumption | 7.94 W |
| PERFORMANCE | |
|---|---|
| DPI Throughput | TCP: 905 Mbps; UDP: 788 Mbps |
| WireGuard VPN Throughput | • 123.4 Mbps |
| Concurrent Session | 150,000 |
| New Sessions /Second | 2,600 |
| NAT (Static IP) | • Upload: 945.77 Mbps• Download: 945.56 Mbps• Bi-Directional: 1808.29 Mbps |
| NAT(DHCP) | • Upload: 945.93 Mbps• Download: 945.43 Mbps• Bi-Directional: 1808.11 Mbps |
| NAT(PPPoE) | • Upload: 940.44Mbps• Download: 940.52 Mbps• Bi-Directional: 1804.27 Mbps |
| NAT (L2TP) | • Upload: 845.64 Mbps• Download: 802.65 Mbps• Bi-Directional: 931.96 Mbps |
| NAT (PPTP) | • Upload: 771.66 Mbps• Download: 874.81 Mbps• Bi-Directional: 999.54 Mbps |
| 64 Byte Packet Forwarding Rate | • Upload/Download: 1,402,238 pps• Bi-Directional: 1,681,548 pps |
| IPsec VPN Throughput | • ESP-MD5-AES256: 171.26 Mbps• ESP-SHA1-AES256: 224.86 Mbps• ESP-SHA2-AES256: 248.04 Mbps |
| OpenVPN | • 21.70 Mbps |
| L2TP VPN Throughput | • Unencrypted: 864.65 Mbps• Encrypted: 47.11 Mbps |
| PPTP VPN Throughput | • Unencrypted: 703.20 Mbps• Encrypted: 76.65 Mbps |
| SSL VPN Throughput | - |
| 66 Byte Packet forwarding rate | • Upload/Download: 954.50 Mbps • Bi-Directional: 1130.00 Mbps |
| 1,518 Byte Packet forwarding rate | • Upload/Download: 997.50 Mbps• Bi-Directional: 1965.00 Mbps |
| BASIC FUNCTIONS | |
|---|---|
| WAN Connection Type | • Static/Dynamic IP• PPPoE• PPTP• L2TP• Mobile Broadband: 4G/3G modem for backup via USB port‡ |
| MAC Clone | Modify WAN/LAN MAC Address† |
| DHCP | • DHCP Server/Client• DHCP Address Reservation• Multi-net DHCP*• Multi-IP Interfaces* |
| IPv6 | StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough |
| VLAN | 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
| ADVANCED FUNCTIONS | |
|---|---|
| ACL | IP/Port/Protocol/Domain Name Filtering |
| Advanced Routing | • Static Routing• Policy Routing |
| Bandwidth Control | IP-based Bandwidth Control |
| Load Balance | • Intelligent Load Balance• Application Optimized Routing• Link Backup (Timing§, Failover)• Online Detection |
| NAT | • One-to-One NAT§• Multi-Net NAT• Virtual Server• Port Triggering§• NAT-DMZ• FTP/H.323/SIP/IPSec/PPTP ALG, UPnP |
| Security | • SPI Firewall• VPN Passthrough• FTP/H.323/PPTP/SIP/IPsec ALG• DoS Defence, Ping of Death• Local Management |
| Session Limit | IP-based Session Limit |
| VPN | |
|---|---|
| IPsec VPN | • 20 IPsec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, AES128, AES192, AES256 Encryption Algorithm• IKEv1/v2• MD5, SHA1 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS) |
| PPTP VPN | • PPTP VPN Server• 10 PPTP VPN Clients**• 16 Tunnels• PPTP with MPPE Encryption |
| L2TP VPN | • L2TP VPN Server• 10 L2TP VPN Clients**• 16 Tunnels• L2TP over IPSec |
| OpenVPN | • OpenVPN Server*• 10 OpenVPN Clients*△• 16 OpenVPN Tunnels* |
| WireGuard VPN | • 20 Tunnels |
| AUTHENTICATION | |
|---|---|
| Web Authentication | • No Authentication• Simple Password*• Hotspot（Local User / Voucher* / SMS* / Radius*）• External Radius Sever• External Portal Sever*• Facebook* |
| MANAGEMENT | |
|---|---|
| Omada App | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Centralized Management | • Omada Hardware Controller (OC300)• Omada Hardware Controller (OC200)• Omada Software Controller• Omada Cloud-Based Controller |
| Cloud Access | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe) |
| Maintenance | • Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3• Diagnostics (Ping & Traceroute)§• NTP Synchronize§• Syslog Support |
| Zero-Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
| Management Features | • Automatic Device Discovery• Intelligent Network Monitoring• Abnormal Event Warnings• Unified Configuration• Reboot Schedule• Captive Portal Configuration |
| OTHERS | |
|---|---|
| Certification | CE, FCC, RoHS |
| Package Contents | • Gigabti VPN Router ER605• Power Adapter• RJ45 Ethernet Cable• Quick Installation Guide |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux |
| Environment | • Operating Temperature: 0–40 ℃ (32–104 ℉);• Storage Temperature: -40–70 ℃ (-40–158 ℉)• Operating Humidity: 10–90% RH non-condensing• Storage Humidity: 5–90% RH non-condensing |
‡For the complete compatibility list of 4G/3G modem, go to https://www.tp-link.com/en/er605/compatibility/
*These functions requires the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller.
† LAN MAC Address can be modified only in Standalone Mode.
§ These functions are supported only in Standalone Mode.
△For OpenVPN: When set up as a VPN server, each WAN port can connect with up to 10 VPN clients. At the same time, the ER605 can work as a VPN client to connect with up to 10 VPN servers. The total number of OpenVPN tunnels is limited to 16.
**For PPTP and L2TP VPN: ER605 can work as a VPN client and can connect with up to 10 VPN servers.
***Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller. Go to https://www.tp-link.com/en/omada-cloud-based-controller/product-list/ to confirm which models are compatible with Omada Cloud-Based Controller.