TP-Link ER7412-M2 Omada Multi-Gigabit VPN Router

ER7412-M2

Omada Multi-Gigabit VPN Router

RRP RM1,649.00
Datasheet (PDF)

Specifications

Product Description
Omada Multi-Gigabit VPN Router

Hardware

CPU
Quad-core ARMv8
Standards and Protocols
IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP
Interface
1× 2.5G RJ45 WAN/LAN Port,
1× 2.5G RJ45 WAN/LAN Port,
2× Gigabit SFP WAN/LAN Port,
8× Gigabit RJ45 WAN/LAN Ports
1× RJ45 Console Port
USB
1 USB3.0 (supports USB LTE dongle and USB Storage)
Network Media
10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m)
100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m)
1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
2500BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
Button
Reset button
Power Supply
100–240 VAC, 50/60 Hz
Flash
128MB NAND
DRAM
1GB DDR4
Max Power Consumption
18.5W (With USB 3.0 connected)
Surge Protection
4 kV surge protection
Mounting
Desktop/ Rackmount
Dimensions ( W x D x H )
11.6 × 7.1 × 1.7 in (294 × 180 × 44 mm)

SDN Support

Hardware Controller (OC200/OC300)
Automatic Device Discovery
Intelligent Network Monitoring
Abnormal Event Warnings
Software Controller
Unified Configuration
Reboot Schedule
Captive Portal Configuration
Cloud-Based Controller
ZTP (Zero-Touch Provisioning)
*Zero-Touch Provisioning is supported only when using Omada Cloud-Based Controller.

Performance

Concurrent Session
1,000,000
New Sessions /Second
7,000
Static IP NAT Throughput (Upload / Download)
2345.71 Mbps / 2351.22 Mbps
DHCP NAT Throughput (Upload / Download)
2353.41 Mbps / 2353.40 Mbps
PPPoE NAT Throughput (Upload / Download)
2336.52 Mbps / 2336.08 Mbps
L2TP NAT Throughput (Upload / Download)
1937.53 Mbps / 1761.82 Mbps
PPTP NAT Throughput (Upload / Download)
1757.54 Mbps / 2011.33 Mbps
66 Byte Packet forwarding rate (Upload / Download)
1833 Mbps / 1835 Mbps
1,518 Byte Packet forwarding rate (Upload / Download)
2461 Mbps / 2461 Mbps
IPSec VPN Throughput
ESP-SHA1-AES256: 1125.60 Mbps
ESP-SHA256-AES256: 1133.1 Mbps
ESP-SHA384-AES256: 1126.6 Mbps
ESP-SHA512-AES256: 1132.8 Mbps
GRE
Unencrypted: 1153.0 Mbps
Encrypted: 559.2 Mbps
WireGuard VPN Throughput
771.6 Mbps
SSL VPN Throughput
263.1 Mbps
OpenVPN
UDP: 266.2 Mbps
L2TP VPN Throughput
Unencrypted: 2724.5 Mbps
Encrypted: 1018.4Mbps
PPTP VPN Throughput
Unencrypted: 3035 Mbps
Encrypted: 534.6 Mbps

Basic Functions

WAN Connection Type
Static IP/Dynamic IP
PPPoE (supports MRU Configuration)
PPTP
L2TP
Mobile Broadband: 4G/3G modem for backup via USB port
DHCP
DHCP Server
DHCPv6 PD Server (only in Standalone Mode)
DHCP Options Customization
DHCP Address Reservation
Multi-IP Interfaces
Multi-Net DHCP
MAC Clone
Modify WAN/LAN Address
*LAN MAC Address can be modified only in Standalone Mode
IPTV
IGMP v2/v3 Proxy, Custom Mode, Bridge Mode
IPv6
StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode
mDNS Repeater
√
Quality of Service
√
Bridge VLAN
√
VLAN
802.1Q VLAN

Transmission

Load Balance
Intelligent Load Balance
Application Optimized Routing
Link Backup (Timing, Failover)
Online Detection
NAT
One-to-One NAT
Multi-Net NAT
Virtual Server
Port Triggering
NAT-DMZ
FTP/H.323/SIP/IPSec/PPTP ALG
UPnP
*Port Triggering is supported only in Standalone Mode.
Routing
Static Routing
Policy Routing
RIP
OSPF
*RIP and OSPF are supported only in Standalone Mode.
Session Limit
IP-based Session Limit
Bandwidth Control
IP/Port-based Bandwidth Control

VPN

IPSec VPN
150 IPSec VPN Tunnels
LAN-to-LAN, Client-to-LAN
Main, Aggressive Negotiation Mode
DES, 3DES, AES128, AES192, AES256 Encryption Algorithm
IPsec Failover
IKE v1/v2
MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm
NAT Traversal (NAT-T)
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)
PPTP VPN
PPTP VPN Server
PPTP VPN Client (15)
150 Tunnels
PPTP with MPPE Encryption
*ER7412-M2 can work as a VPN client and can connect with up to 32 PPTP/L2TP VPN servers and 10 OpenVPN servers.
L2TP VPN
L2TP VPN Server
L2TP VPN Client (15)
150 Tunnels
L2TP over IPSec
GRE
Only in Standalone Mode
WireGuard VPN
√
SSL VPN
80 Tunnels
OpenVPN
OpenVPN Server
OpenVPN Client (11)
121 OpenVPN Tunnels
"Certificate + Account" Mode
Full Mode

Security

Attack Defense
TCP/UDP/ICMP Flood Defense
Block TCP Scan (Stealth FIN/Xmas/Null)
Block Ping from WAN
Filtering
Web Group Filtering
URL Filtering
Web Security
*Web Group Filtering and Web Security are supported only in Standalone Mode.
DNS Proxy
DNSSEC, DoH, and DoT
ARP Inspection
Sending GARP Packets
ARP Scanning
IP-MAC Binding
*ARP Scanning is supported only in Standalone Mode.
DPI
Deep Packet Inspection
IPS/IDS
Intrusion Detection/Prevention
ACL
Source/Destination IP Based ACL
Stateful ACL
IPv4/IPv6 ACL
National Based ACL

Authentication

Web Authentication
No Authentication
Simple Password
Hotspot (Local User / Voucher / SMS / Radius)
External Radius Server
External Portal Server
LDAP
*The following web authentication methods are supported only in Controller Mode: Simple Password, Voucher, SMS, Radius, and External Portal Server.

Management

Service
Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)
Maintenance
Web Management Interface
Remote Management
Export & Import Configuration
SNMP v1/v2c/v3
Diagnostics (Ping & Traceroute)
NTP Synchronize
Port Mirroring
CLI (only in Standalone Mode)
Syslog Support
*Diagnostics (Ping & Traceroute) and NTP Synchronize are supported only in Standalone Mode.

Others

Certification
CE, FCC, RoHS
Package Contents
ER7412-M2, Power Cord, Quick Installation Guide, Rackmount Kit, RJ45 Console Cord
System Requirements
Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11
MAC OS, NetWare, UNIX or Linux
Environment
Operating Temperature: 0 °C to 45 °C (32 °F to 113 °F)
Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F)
Operating Humidity: 10% to 90% non-condensing
Storage Humidity: 5% to 90% non-condensing
*Specifications are subject to change without prior notice.