ER8411

Specifications

Product Description

Omada VPN Router with 10G Ports

General

CPU

Quad-core Cortex-A72 @2.2GHz

Interface

1 10G SFP+ WAN port,
1 10G SFP+ WAN/LAN port,
1 Gigabit SFP WAN/LAN port,
8 Gigabit RJ45 WAN/LAN ports

USB

2 USB3.0 (One supports LTE backup with LTE dongle)

Network Media

10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)
EIA/TIA-568 100Ω STP (Max 100 m)
100BASE-TX: UTP category 5, 5e cable (Max 100 m)
EIA/TIA-568 100Ω STP (Max 100 m)
1000BASE-T: UTP category 5e, 6 cable (Max 100 m)

Button

Reset button

Dual Redundant Power Supply

2 Fixed AC Power Supply

Power Supply

100–240 VAC, 50/60 Hz

Flash

4MB SPI NOR + 256 MB NAND

DRAM

4 GB DDR4

Surge Protection

4 kV surge protection

FAN Quantity

2

Max Power Consumption

26.36W (with USB3.0 connected)
19.12W (without USB3.0 connected)

Dimensions ( W x D x H )

17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm)

SDN Support

Hardware Controller (OC200/OC300)

Automatic Device Discovery
Intelligent Network Monitoring
Abnormal Event Warnings

Software Controller

Unified Configuration
Reboot Schedule
Captive Portal Configuration

Cloud-Based Controller

ZTP (Zero-Touch Provisioning)
*Zero-Touch Provisioning is supported only when using Omada Cloud-Based Controller.

Performance

Concurrent Session

2,300,000

New Sessions /Second

20,000

IPS Throughput

TCP: 4924 Mbps
UDP: 4521 Mbps

DPI Throughput

TCP: 5524 Mbps
UDP: 3547 Mbps

Static IP NAT Throughput (Upload / Download)

9445.82 Mbps / 9449.26 Mbps

DHCP NAT Throughput (Upload / Download)

9426.83 Mbps / 9426.20 Mbps

PPPoE NAT Throughput (Upload / Download)

9413.96 Mbps / 9102.01 Mbps

L2TP NAT Throughput (Upload / Download)

9064.66 Mbps / 8587.57 Mbps

PPTP NAT Throughput (Upload / Download)

8712.11 Mbps / 8505.61 Mbps

64 Byte Packet forwarding rate (Upload / Download)

1080 Mbps / 1030 Mbps

1,518 Byte Packet forwarding rate (Upload / Download)

9970 Mbps / 9970 Mbps

SSL VPN Throughput

4486 Mbps

WireGuard VPN Throughput

1411 Mbps

IPSec VPN Throughput

ESP-SHA1-AES256: 3099.4 Mbps
ESP-SHA256-AES256: 2928.4 Mbps
ESP-SHA384-AES256: 2935.7 Mbps
ESP-SHA512-AES256: 2878 Mbps

L2TP VPN Throughput

Unencrypted: 10497Mbps
Encrypted: 3178.5Mbps

OpenVPN Throughput

4424.1 Mbps

Basic Functions

WAN Connection Type

Static/Dynamic IP
PPPoE
PPTP
L2TP
6to4 Tunnel
IPv6 Pass-Through
Mobile Broadband: 4G/3G modem for backup via USB port

DHCP

DHCP Server/Client
DHCP Address Reservation
Multi-IP Interfaces
Multi-Net DHCP

MAC Clone

Modify WAN/LAN MAC Address
*LAN MAC Address can be modified only in Standalone Mode.

IPTV

IGMP v2/v3 Proxy

IPv6

WAN Connection

VLAN

802.1Q VLAN

Transmission

Load Balance

Intelligent Load Balance
Application Optimized Routing
Link Backup (Timing, Failover)
Online Detection
*The Timing mode in Link Backup is supported only in Standalone Mode.

NAT

One-to-One NAT
Multi-Net NAT
Port Forwarding
Port Triggering
NAT-DMZ
FTP/H.323/SIP/IPSec/PPTP ALG,
UPnP
*One-to-One NAT and Port Triggering are supported only in Standalone Mode.

Routing

Static Routing
Policy Routing

Session Limit

IP-based Session Limit

Bandwidth Control

IP/Port-based Bandwidth Control
Guarantee & Limited Bandwidth

VPN

SSL VPN

SSL VPN Server
500 OpenVPN Tunnels

IPSec VPN

300 IPSec VPN Tunnels
LAN-to-LAN, Client-to-LAN
Main, Aggressive Negotiation Mode
DES, 3DES, SHA1, SHA 256, SHA 384, SHA 512, AES128, AES192, AES256 Encryption Algorithm
IKE v1/v2
MD5, SHA1 Authentication Algorithm
NAT Traversal (NAT-T)
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)

PPTP VPN

PPTP VPN Server
PPTP VPN Client (32)
300 Tunnels (Shared with L2TP)
PPTP with MPPE Encryption
*ER8411 can work as a VPN client and can connect with up to 32 PPTP/L2TP VPN servers and 10 OpenVPN servers.

L2TP VPN

L2TP VPN Server
L2TP VPN Client (32)
300 Tunnels (Shared with PPTP)
L2TP over IPSec

OpenVPN

OpenVPN Server
OpenVPN Client (10)
110 OpenVPN Tunnels

Security

Attack Defense

TCP/UDP/ICMP Flood Defense
Block TCP Scan (Stealth FIN/Xmas/Null)
Block Ping from WAN

Filtering

Web Group Filtering
URL Filtering
Web Security
*Web Group Filtering and Web Security are supported only in Standalone Mode.

ARP Inspection

Sending GARP Packets
ARP Scanning
IP-MAC Binding
*ARP Inspection is supported only in Standalone Mode.

Access Control

Source/Destination IP Based Access Control

Authentication

Web Authentication

No Authentication
Simple Password
Hotspot (Local User / Voucher / SMS / Radius)
External Radius Server
External Portal Server
Facebook
*The following web authentication methods are supported only in Controller Mode: Simple Password, Voucher, SMS, Radius, External Portal Server, and Facebook.

Management

Service

Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)

Maintenance

Web Management Interface
Remote Management
Export & Import Configuration
SNMP v1/v2c/v3
Diagnostics (Ping & Traceroute)
NTP Synchronize
Syslog Support
*Diagnostics (Ping & Traceroute) and NTP Synchronize are supported only in Standalone Mode.

Others

Certification

CE, FCC, RoHS

Package Contents

ER8411, Power Cord, Quick Installation Guide, Rackmount Kit, RJ45 Console Cord

System Requirements

Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10
MAC OS, NetWare, UNIX or Linux

Environment

Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F)
Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F)
Operating Humidity: 10% to 90% non-condensing
Storage Humidity: 5% to 90% non-condensing