Omada Gigabit VPN Router
- Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)**, Centralized Cloud Management, and Intelligent Monitoring.
- Centralized Management: Cloud access and Omada app for ultra convenience and easy management.
- Gigabit Ports: 1 gigabit SFP and 5 gigabit RJ45 ports provide high-speed wired connectivity.
- Up to 5 WAN Ports: Gigabit SFP WAN port and gigabit RJ45 WAN port optimize bandwidth usage.
- Highly Secure VPN△: Supports multiple VPN protocols including SSL / Wireguard / OpenVPN/ IPSec / GRE VPN§/ PPTP/ L2TP/ L2TP over IPSec, helping users to establish VPN connections more flexibly
- Abundant Security Features: Advanced firewall policies, DoS defense,IP/MAC/URL filtering, and more security functions protect your network and data.
Learn more about Omada Cloud SDN>
Centralized Management
A Professional, Secure, and Reliable Gateway with Centralized Management Capability
Omada Gigabit VPN Router
ER7206
-
Centralized Management
-
Gigabit Ports
-
Up to 5 WAN Ports
-
Load Balance
-
SSL/Wireguard/
IPSec/OpenVPN -
Multi-Net
DHCP -
Powerful Firewall
-
Omada App
Omada SDN—The Smarter Cloud Solution for Business Networking
As the gateway that seamlessly integrates into the Omada Software Defined Networking (SDN) platform, ER7206 allows for remote and centralized management, anywhere, anytime. Standalone management via the Web UI or app is also available to maximize convenience.
WiFi 6 AP for High-Density Environments
Cloud-Based Controller
Hassle-Free Centralized Cloud Management:
100% centralized cloud management of whole network from different sites—all controlled from a single interface anywhere, anytime.
Up to Five WAN Gigabit Ports to Optimize Bandwidth Usage
One gigabit SFP WAN/LAN port, one gigabit RJ45 WAN port, and four freely interchangeable WAN/LAN ports allow the router to support up to five WAN ports to satisfy various internet access requirements through one device. The multi-WAN Load Balancing function distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband.
Highly Secure VPN
ER7206 supports multiple VPN protocols including SSL / Wireguard/ IPSec/ OpenVPN/ GRE VPN§/PPTP/ L2TP/ L2TP over IPSec, helping users to establish VPN connections more flexibly. One-click auto IPSec VPN* greatly simplifies VPN configuration and facilitates network management and deployment while also securing and encrypting private site-to-site data communications traveling over the internet.
Abundant Security Features
Powerful Firewall
Advanced firewall policies
protect your network and data.
Convenient VLAN Support
Create virtual network segments for
enhanced security and simplified
network management.
DoS Defense
Automatically detects and blocks Denial of Service
(DoS) attacks such as TCP/UDP/ICMP Flooding, Ping
of Death, and other related threats.
IP/MAC/URL Filtering
Forcefully prevent viruses and attacks
from intruders.
IP-MAC Binding
Reserves static IP assignment for
clients to defend against ARP
attacks and spoofing.
One-Click ALG Activation
One-Click ALG Activation for
applications such as FTP, H323, SIP,
IPsec and PPTP.
Internet Access Management Strategy
Standardize users’ online behavior and easily specify the internet access rights and strategies of employee via IP/MAC/URL Filtering and Access Control List (ACL). Captive Portal authentication facilitates network resource control by capturing, authenticating, and classifying user access. Appropriate network resources can also be allocated for particular users or guests.
Easy Management with the Omada App
Follow configuration instructions on the free Omada app to get set up in minutes. Omada lets you configure settings, monitor the network status and manage clients, all from the convenience of a smart phone or tablet.
| SECURITY | |
|---|---|
| Access Control | Source/Destination IP Based Access Control |
| Filtering | • WEB Group Filtering§• URL Filtering• Web Security§ |
| ARP Inspection | • Sending GARP Packets§• ARP Scanning§• IP-MAC Binding |
| Attack Defense | • TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN |
| HARDWARE FEATURES | |
|---|---|
| Standards and Protocols | • IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP |
| Interface | • 1 Gigabit SFP WAN/LAN Port • 1 Gigabit WAN Port• 4 Gigabit LAN/WAN Ports • 1 USB 3.0 Port (supports USB LTE dongle and USB storage) |
| Network Media | • 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m)• 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m)• 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m) |
| Fan Quantity | Fanless |
| Button | Reset Button |
| Power Supply | 12V DC/ 1A Power Adapter |
| PoE Budget | - |
| Flash | 128 MB NAND |
| DRAM | 512 MB DDR4 |
| LED | PWR, SYS, SFP, USB, WAN(1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act) |
| Dimensions ( W x D x H ) | 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm) |
| Protection | 4 kV surge protection |
| Enclosure | Steel |
| Mounting | Desktop/ Wall-Mounting |
| Max Power Consumption | • 7.5 W (with USB 3.0 connected)• 4.5 W (without USB 3.0 connected) |
| PERFORMANCE | |
|---|---|
| WireGuard VPN | 341.3 Mbps |
| Concurrent Session | 150,000 |
| New Sessions /Second | 5,300 |
| NAT (Static IP) | 945.3 Mbps / 940.5 Mbps |
| NAT(DHCP) | 939.6 Mbps / 940.9 Mbps |
| NAT(PPPoE) | 943.6 Mbps / 940.9 Mbps |
| NAT (L2TP) | 880.1 Mbps / 859.0 Mbps |
| NAT (PPTP) | 855.0 Mbps / 907.2 Mbps |
| 64 Byte Packet Forwarding Rate | - |
| IPsec VPN Throughput | • ESP-SHA1-AES256: 617.1 Mbps• ESP-SHA256-AES256: 592.8 Mbps• ESP-SHA384-AES256: 592.4 Mbps• ESP-SHA512-AES256: 604.5 Mbps |
| OpenVPN | 139.1 Mbps |
| L2TP VPN Throughput | • Unencrypted: 977.4 Mbps • Encrypted: 334.6 Mbps |
| PPTP VPN Throughput | • Unencrypted: 1064.1 Mbps • Encrypted: 206.8 Mbps |
| SSL VPN Throughput | 131.6 Mbps |
| 66 Byte Packet forwarding rate | 1,453,489 pps / 1,453,488 pps |
| 1,518 Byte Packet forwarding rate | 81,279 pps / 81,275 pps |
| BASIC FUNCTIONS | |
|---|---|
| WAN Connection Type | • Static IP• Dynamic IP• PPPoE(supports MRU Configuration)• PPTP• L2TP |
| MAC Clone | Modify WAN/LAN MAC Address† |
| DHCP | • DHCP Server• DHCPv6 PD Server (only in Standalone Mode) • DHCP Options Customization• DHCP Address Reservation• Multi-IP Interfaces• Multi-Net DHCP |
| IPv6 | StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode |
| VLAN | 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
| ADVANCED FUNCTIONS | |
|---|---|
| ACL | IP/Port/Protocol/Domain Name Filtering |
| Advanced Routing | • Static Routing• Policy Routing• RIP§• OSPF§ |
| Bandwidth Control | IP-based Bandwidth Control |
| Load Balance | • Intelligent Load Balance• Application Optimized Routing• Link Backup (Timing, Failover)• Online Detection |
| NAT | • One-to-One NAT• Multi-Net NAT• Port Forwarding• Port Triggering§• NAT-DMZ• FTP/H.323/SIP/IPSec/PPTP ALG• UPnP |
| Session Limit | IP-based Session Limit |
| VPN | |
|---|---|
| SSL VPN | 50 Tunnels |
| IPsec VPN | • 100 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, AES128, AES192, AES256 Encryption Algorithm • IPsec Failover• IKE v1/v2• MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm • NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS) |
| PPTP VPN | • PPTP VPN Server• PPTP VPN Client (10)‡• 50 Tunnels• PPTP with MPPE Encryption |
| L2TP VPN | • L2TP VPN Server • L2TP VPN Client (10)‡• 50 Tunnels• L2TP over IPSec |
| OpenVPN | • OpenVPN Server • OpenVPN Client (5)‡• 55 OpenVPN Tunnels• "Certificate + Account" Mode • Full Mode |
| AUTHENTICATION | |
|---|---|
| Web Authentication | • No Authentication• Simple Password*• Hotspot(Local User /Voucher*/ SMS*/Radius*)• External Radius Sever• External Portal Sever*• LDAP§ |
| MANAGEMENT | |
|---|---|
| Omada App | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Centralized Management | • Omada Cloud-Based Controller• Omada Hardware Controller (OC300)• Omada Hardware Controller (OC200)• Omada Software Controller |
| Cloud Access | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) |
| Maintenance | • Web Management Interface • Remote Management • Export & Import Configuration • SNMP v1/v2c/v3 • Diagnostics (Ping & Traceroute)§ • NTP Synchronize§• Port Mirroring• CLI (only in Standalone Mode) • Syslog Support |
| Zero-Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
| Management Features | • Automatic Device Discovery• Intelligent Network Monitoring• Abnormal Event Warnings• Unified Configuration• Reboot Schedule• Captive Portal Configuration |
| OTHERS | |
|---|---|
| Certification | CE, FCC, RoHS |
| Package Contents | • ER7206(TL-ER7206)• Power Cord• Quick Installation Guide |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX or Linux |
| Environment | • Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F) • Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) • Operating Humidity: 10% to 90% non-condensing • Storage Humidity: 5% to 90% non-condensing |
*These functions require the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller
**Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller. Go to https://www.tp-link.com/en/omada-cloud-based-controller/product-list/ to confirm which models are compatible with Omada Cloud-Based Controller.
† LAN MAC Address can be modified only in Standalone Mode.
§ These functions are supported only in Standalone Mode.
△For PPTP VPN and L2TP VPN, ER7206 V2 can connect with up to 10 VPN servers. For OpenVPN, ER7206 V2 can connect with up to 5 VPN servers.
‡ ER7206 can work as a VPN client and can connect with up to 10 VPN servers.