TP-Link ER707-M2 Omada Multi-Gigabit VPN Router

ER707-M2

Omada Multi-Gigabit VPN Router

RRP RM1,369.00
Datasheet (PDF)

Specifications

Product Description
Omada Multi-Gigabit VPN Router

General

CPU
Dual-core ARMv8
Interface
1× 2.5G RJ45 WAN Port,
1× 2.5G RJ45 WAN/LAN Port,
1× Gigabit SFP WAN/LAN Port,
4× Gigabit RJ45 WAN/LAN Ports
USB
1 USB2.0 (Supports LTE backup with LTE dongle, and USB Storage)
Button
Reset button
Power Supply
12V / 1.5A Adapter
Flash
128 MB NAND
DRAM
1 GB DDR4
Surge Protection
4 kV surge protection
Max Power Consumption
14.2 W (with USB2.0 connected)
7.1 W (without USB2.0 connected)
Dimensions ( W x D x H )
8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm)

SDN Support

Hardware Controller (OC200/OC300)
Automatic Device Discovery
Intelligent Network Monitoring
Abnormal Event Warnings
Software Controller
Unified Configuration
Reboot Schedule
Cloud-Based Controller
Captive Portal Configuration
ZTP (Zero-Touch Provisioning)
*Zero-Touch Provisioning is supported only when using Omada Cloud-Based Controller.

Performance

Concurrent Session
500,000
New Sessions /Second
6,000
IPS Throughput
TCP: 208 Mbps
UDP: 161 Mbps
DPI Throughput
TCP: 1823 Mbps
UDP: 1272 Mbps
Static IP NAT Throughput (Upload / Download)
2365.17 Mbps / 2364.45 Mbps
DHCP NAT Throughput (Upload / Download)
2364.45 Mbps / 2366.04 Mbps
PPPoE NAT Throughput (Upload / Download)
2347.14 Mbps / 2348.29 Mbps
L2TP NAT Throughput (Upload / Download)
1308.86 Mbps / 974.10 Mbps
PPTP NAT Throughput (Upload / Download)
1236.27 Mbps / 1280.99 Mbps
66 Byte Packet forwarding rate (Upload / Download)
1832.69 Mbps / 1741.84 Mbps
1,518 Byte Packet forwarding rate (Upload / Download)
2461.18 Mbps / 2457.32 Mbps
SSL VPN Throughput
132.24 Mbps
GRE VPN Throughput
286.84 Mbps
*GRE VPN is supported only in Standalone Mode.
IPSec VPN Throughput
ESP-SHA1-AES256: 673.3 Mbps, ESP-SHA256-AES256: 650.2 Mbps, ESP-SHA384-AES256: 629.3 Mbps, ESP-SHA512-AES256: 633.8 Mbps
L2TP VPN Throughput
Unencrypted: 1243.7 Mbps, Encrypted: 561.0 Mbps
OpenVPN Throughput
135.0 Mbps

Basic Functions

WAN Connection Type
IPv4_Static IP, IPv4_Dynamic IP, IPv4_PPPOE, IPv4_L2TP, IPv4_PPTP
IPv6_PPP, IPv6_DHCPv6, IPv6_Static IP, IPv6_6in4, IPv6_Pass-Through
Mobile Broadband: 4G/3G modem for backup via USB port
DHCP
DHCP Server
DHCPv6 PD Server (only in Standalone Mode)
DHCP Options Customization
DHCP Address Reservation
Multi-IP Interfaces
Multi-Net DHCP
MAC Clone
Modify WAN/LAN MAC Address
*LAN MAC Address can be modified only in Standalone Mode.
IPTV
IGMP v2/v3 Proxy, Custom Mode, Bridge Mode
IPv6
StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode
Stateful ACL
√
mDNS Repeater
√
Quality of Service
√
Bridge VLAN
√
VLAN
802.1Q VLAN

Transmission

Load Balance
Intelligent Load Balance
Application Optimized Routing
Link Backup (Timing, Failover)
Online Detection
*The Timing mode in Link Backup is supported only in Standalone Mode.
NAT
One-to-One NAT
Multi-Net NAT
Port Forwarding
Port Triggering
NAT-DMZ
FTP/H.323/SIP/IPSec/PPTP ALG
UPnP
*Port Triggering is supported only in Standalone Mode.
Routing
Static Routing
Policy Routing
RIP (only in Standalone Mode)
OSPF (only in Standalone Mode)
Session Limit
IP-based Session Limit
Bandwidth Control
IP/Port-based Bandwidth Control
Guarantee & Limited Bandwidth

VPN

SSL VPN
SSL VPN Server
60 SSL VPN Tunnels
IPSec VPN
100 IPSec VPN Tunnels
LAN-to-LAN, Client-to-LAN
Main, Aggressive Negotiation Mode
DES, 3DES, SHA1, AES128, AES192, AES256 Encryption Algorithm
IKE v1/v2
MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm
NAT Traversal (NAT-T)
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)
GRE
Only in Standalone Mode
WireGuard VPN
√
PPTP VPN
PPTP VPN Server
PPTP VPN Client (12)
60 Tunnels (Shared with L2TP)
PPTP with MPPE Encryption
*ER707-M2 can work as a VPN client and can connect with up to 12 PPTP/L2TP VPN servers and 6 OpenVPN servers.
L2TP VPN
L2TP VPN Server
L2TP VPN Client (12)
60 Tunnels (Shared with PPTP)
L2TP over IPSec
OpenVPN
OpenVPN Server
OpenVPN Client (6)
66 OpenVPN Tunnels

Security

Attack Defense
TCP/UDP/ICMP Flood Defense
Block TCP Scan (Stealth FIN/Xmas/Null)
Block Ping from WAN
Filtering
Web Group Filtering
URL Filtering
Web Security
*Web Group Filtering and Web Security are supported only in Standalone Mode.
DNS Proxy
DNSSEC, DoH, and DoT
ARP Inspection
Sending GARP Packets
ARP Scanning
IP-MAC Binding
*ARP Scanning is supported only in Standalone Mode.
Access Control
Source/Destination IP Based Access Control

Authentication

Web Authentication
No Authentication
Simple Password
Hotspot (Local User / Voucher / SMS / Radius)
External Radius Server
External Portal Server
LDAP
*The following web authentication methods are supported only in Controller Mode: Simple Password, Voucher, SMS, Radius, External Portal Server, and LDAP.

Management

Service
Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Maintenance
Web Management Interface
Remote Management
Export & Import Configuration
SNMP v1/v2c/v3
Diagnostics (Ping & Traceroute)
NTP Synchronize
Port Mirroring
CLI (only in Standalone Mode)
Syslog Support
*Diagnostics (Ping & Traceroute) and NTP Synchronize are supported only in Standalone Mode.

Others

Certification
CE, FCC, RoHS
Package Contents
ER707-M2, Power Adapter, Quick Installation Guide
System Requirements
Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10
MAC OS, NetWare, UNIX or Linux
Environment
Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F)
Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F)
Operating Humidity: 10% to 90% non-condensing
Storage Humidity: 5% to 90% non-condensing
*Specifications are subject to change without prior notice.