TP Link ER7412-M2 Omada Gigabit VPN Router - 2x 2.5G RJ45 WAN/LAN / 10x 1Gbe WAN/LAN

Technical Specifications

Access Control

• Source/Destination IP-Based ACL
• Stateful ACL
• IPv4/IPv6 ACL
• Location Based ACL

Filtering

• WEB Group Filtering
• URL Filtering
• Web Security

ARP Inspection

• Sending GARP Packets
• ARP Scanning
• IP-MAC Binding

Attack Defence

• TCP/UDP/ICMP Flood Defence
• Block TCP Scan (Stealth FIN/Xmas/Null)
• Block Ping from WAN

Hardware Features

Standards and Protocols

• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE802.1q
• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP

Interface

• 1 x 2.5G RJ45 WAN/LAN Port
• 1 x 2.5G RJ45 WAN/LAN Port
• 2 x Gigabit SFP WAN/LAN Ports
• 8 x Gigabit RJ45 WAN/LAN Ports
• 1 x RJ45 Console Port
• 1 x USB 3.0 Port (Supports USB storage, and LTE backup with LTE dongle)

Network Media

• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100O STP (Max 100 m)
• 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100O STP (Max 100 m)
• 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
• 2500BASE-T: UTP category 5e, 6 cable (Max 100 m)

Button

• Reset Button

Power Supply

• 100–240 VAC, 50/60 Hz

Flash

• 128MB NAND

DRAM

• 1 GB DDR4

Dimensions (W x D x H)

• 294 x 180 x 44 mm (11.6 x 7.1 x 1.7 in.)

Protection

• 4 kV surge protection

Enclosure

• Steel

Mounting

• Desktop
• Rackmountable

Max Power Consumption

• 18.5W (With USB 3.0 connected)

Performance

GRE

• Unencrypted: 1153.0 Mbps
• Encrypted: 559.2 Mbps

WireGuard VPN

• 771.6 Mbps

Concurrent Session

• 1,000,000

New Sessions / Second

• 7,000

NAT (Static IP)

• 2345.71 Mbps / 2351.22 Mbps

NAT(DHCP)

• 2353.41 Mbps / 2353.40 Mbps

NAT(PPPoE)

• 2336.52 Mbps / 2336.08 Mbps

NAT (L2TP)

• 1937.53 Mbps / 1761.82 Mbps

NAT (PPTP)

• 1757.54 Mbps / 2011.33 Mbps

IPsec VPN Throughput

• ESP-SHA1-AES256: 1125.60 Mbps
• ESP-SHA256-AES256: 1133.1 Mbps
• ESP-SHA384-AES256: 1126.6 Mbps
• ESP-SHA512-AES256: 1132.8 Mbps

OpenVPN

• UDP: 266.2 Mbps

L2TP VPN Throughput

• Unencrypted: 2724.5 Mbps
• Encrypted: 1018.4Mbps

VLAN

• 802.1Q VLAN

IPTV

• IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

Advanced Functions

Advanced Routing

• Static Routing
• Policy Routing
• RIP (available in Standalone Mode)
• OSPF (available in Standalone Mode)

Bandwidth Control

• IP/Port-based Bandwidth Control

Load Balance

• Intelligent Load Balance
• Application Optimised Routing
• Link Backup (Timing, Failover)
• Online Detection

NAT

• One-to-One NAT
• Multi-Net NAT
• Virtual Server
• Port Triggering
• NAT-DMZ
• FTP/H.323/SIP/IPSec/PPTP ALG
• UPnP

Session Limit

• IP-based Session Limit

VPN

GRE

• Only in Standalone Mode

SSL VPN

• 80 Tunnels

IPsec VPN

• 150 IPSec VPN Tunnels
• LAN-to-LAN, Client-to-LAN
• Main, Aggressive Negotiation Mode
• DES, 3DES, AES128, AES192, AES256 Encryption Algorithm
• IPsec Failover
• IKE v1/v2
• MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm
• NAT Traversal (NAT-T)
• Dead Peer Detection (DPD)
• Perfect Forward Secrecy (PFS)

PPTP VPN

• PPTP VPN Server
• PPTP VPN Client (15)
• 150 Tunnels
• PPTP with MPPE Encryption

L2TP VPN

• L2TP VPN Server
• L2TP VPN Client (15)
• 150 Tunnels
• L2TP over IPSec

OpenVPN

• OpenVPN Server
• OpenVPN Client (11)
• 121 OpenVPN Tunnels
• "Certificate + Account" Mode
• Full Mode

Authentication

Web Authentication

• No Authentication
• Simple Password
• Hotspot (Local User/Voucher/SMS/Radius)
• External Radius Server
• External Portal Server
• LDAP

Management

Omada App

• Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.

Centralised Management

• Omada Cloud-Based Controller
• Omada Hardware Controller
• Omada Software Controller

Cloud Access

• Yes. Requiring the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.

Service

• Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customisation)

Maintenance

• Web Management Interface
• Remote Management
• Export & Import Configuration
• SNMP v1/v2c/v3
• Diagnostics (Ping & Traceroute)
• NTP Synchronise
• Port Mirroring
• CLI (only in Standalone Mode)
• Syslog Support

Zero-Touch Provisioning

• Yes. Requiring the use of Omada Cloud-Based Controller.

Management Features