TP-Link ER7406 Omada Gigabit Rackmount/Desktop VPN Gateway Router
Secure Multi-WAN Connectivity for Business Networks The TP-Link ER7406 Omada Gigabit Rackmount/Desktop VPN Gateway provides flexible internet connectivity, secure remote access and centralised network management...
Secure Multi-WAN Connectivity for Business Networks
The TP-Link ER7406 Omada Gigabit Rackmount/Desktop VPN Gateway provides flexible internet connectivity, secure remote access and centralised network management for offices, branches and multi-site deployments. Its Gigabit SFP, configurable Gigabit RJ45 ports and USB connectivity support multiple broadband options within a compact rackmount or desktop design.
Highlights
Flexible Multi-WAN Connectivity
- Six Gigabit network ports, including one SFP WAN/LAN port
- Load balancing across up to five WAN connections
- USB 3.0 support for compatible LTE dongles and USB storage
- Rackmount or desktop installation
Business VPN Support
- Supports SSL, IPSec, WireGuard, OpenVPN, GRE, PPTP and L2TP VPN
- Suitable for secure branch-to-branch and remote-user connectivity
- SD-WAN support in Omada Controller mode
- Automatic IPSec VPN deployment through Omada SDN
Centralised Security and Management
- Centralised management through the Omada platform
- Deep Packet Inspection and content filtering
- IDS/IPS threat detection and prevention
- DoS/DDoS protection and IP, MAC and URL filtering
Key Features
TP-Link ER7406 Omada Gigabit Rackmount/Desktop VPN Gateway
The ER7406 combines multi-WAN routing, business VPN connectivity and network security in one wired gateway. It is suitable for organisations requiring resilient internet access, secure remote connectivity and consistent network policies across one or more locations.
Multi-WAN Load Balancing and LTE Backup
Up to five WAN connections can be configured to distribute network traffic across multiple broadband lines. A compatible USB LTE dongle can provide an additional backup option where mobile network redundancy is required.
Compatible LTE dongles are sold separately. Availability and performance depend on the mobile operator, data plan, signal conditions and current compatibility list.
Secure VPN Connectivity
Support for multiple VPN protocols provides flexibility for connecting branch offices, remote employees and external locations. Controller mode also supports SD-WAN and automatic IPSec VPN configuration for simpler multi-site deployment.
Omada Centralised Management
When adopted by a compatible Omada Controller, the ER7406 can be managed alongside Omada switches and access points through a unified interface. Administrators can monitor connected sites, apply network settings and manage supported devices through the web or Omada app.
Controller hardware, licences and supported services may be sold separately. Available functions can vary between standalone and controller operating modes.
Integrated Network Protection
Security functions include Deep Packet Inspection, IDS/IPS, DoS/DDoS protection, access control and IP, MAC and URL filtering. These tools help administrators manage application traffic, enforce network policies and strengthen protection against common network threats.
Summary
The TP-Link ER7406 is a flexible Omada Gigabit VPN Gateway for businesses requiring multi-WAN connectivity, LTE backup, secure VPN access and centralised network management. Its rackmount and desktop design makes it suitable for offices, branch networks, retail locations and multi-site deployments.
TP-Link ER7406 Omada Gigabit Rackmount/Desktop VPN Gateway
The TP-Link ER7406 is a rackmountable Omada VPN gateway designed for secure, centrally managed business networks. It provides Gigabit Ethernet and SFP connectivity, load balancing across up to five WAN ports, USB LTE support, multiple VPN protocols, advanced security and flexible desktop or rackmount installation.
Specifications
| Specification | Details |
|---|---|
| Security | |
| IDS/IPS | Signature-based IDS/IPS threat detection |
| Access Control | Source/destination IP-based ACL • Stateful ACL • IPv4/IPv6 ACL • Country-based ACL • FQDN |
| Deep Packet Inspection | Deep Packet Inspection supporting 2,421 application types |
| DNS Proxy | DNSSEC • DNS over HTTPS (DoH) • DNS over TLS (DoT) • DNS Override • DNS Cache |
| Filtering | Web Group Filtering¹ • URL category and URL filtering • Web Security¹ |
| Attack Defence | TCP/UDP/ICMP flood defence • Block TCP scans including Stealth FIN, Xmas and Null • Block Ping from WAN |
| ARP Inspection | Sending GARP packets • ARP scanning¹ • IP-MAC binding • ARP detection |
| VPN | |
| GRE VPN | Supported in Standalone Mode only |
| SSL VPN | Up to 50 tunnels |
| IPsec VPN | Up to 100 tunnels • LAN-to-LAN and Client-to-LAN • Main and Aggressive negotiation modes • DES, 3DES, AES128, AES192 and AES256 encryption • IPsec Failover • IKEv1/v2 • MD5, SHA1, SHA2-384 and SHA2-512 authentication • NAT Traversal • Dead Peer Detection • Perfect Forward Secrecy |
| PPTP VPN | PPTP VPN Server • PPTP VPN Client with up to 10 server connections⁵ • Up to 50 tunnels • MPPE encryption |
| L2TP VPN | L2TP VPN Server • L2TP VPN Client with up to 10 server connections⁵ • Up to 50 tunnels • L2TP over IPsec |
| OpenVPN | OpenVPN Server • OpenVPN Client with up to 5 server connections⁵ • Up to 55 tunnels • Certificate and account authentication • Full Mode |
| WireGuard VPN | Supported |
| SD-WAN | Supported in Controller Mode only² |
| Hardware Features | |
| Standards and Protocols | IEEE 802.3 • IEEE 802.3u • IEEE 802.3ab • IEEE 802.3z • IEEE 802.3x • IEEE 802.1Q • TCP/IP • DHCP • ICMP • NAT • PPPoE • NTP • HTTP • HTTPS • DNS • IPsec • PPTP • L2TP • OpenVPN • WireGuard • GRE • SNMP • LLDP |
| Interfaces | 1 × Gigabit SFP WAN/LAN port • 1 × Gigabit RJ45 WAN port • 4 × Gigabit RJ45 WAN/LAN ports • 1 × USB 3.0 port supporting compatible USB LTE dongles and USB storage |
| Maximum WAN Ports | Up to 5 WAN ports; at least one WAN/LAN port must operate as a LAN port |
| Network Media | 10BASE-T: Cat 3, 4 or 5 UTP, maximum 100m • 100BASE-TX: Cat 5 or 5e UTP, maximum 100m • 1000BASE-T: Cat 5, 5e or 6 UTP, maximum 100m |
| Cooling | Fanless |
| Button | Reset button |
| Power Supply | 100–240V AC, 50/60Hz |
| Flash Storage | 128MB NAND |
| Memory | 512MB DDR4 |
| LED Indicators | Power • System • SFP • USB • WAN Link/Activity • WAN/LAN Link/Activity |
| Dimensions | 294 × 140 × 44mm |
| Surge Protection | 4kV |
| Mounting | Desktop or rackmount |
| Maximum Power Consumption | 7.5W with USB 3.0 connected • 4.5W without USB 3.0 connected |
| Performance | |
| Concurrent Sessions | 150,000 |
| New Sessions per Second | 4,600 |
| NAT Throughput, Static IP | 945.3Mbps / 940.5Mbps |
| NAT Throughput, DHCP | 939.6Mbps / 940.9Mbps |
| NAT Throughput, PPPoE | 943.6Mbps / 940.9Mbps |
| NAT Throughput, L2TP | 908.6Mbps / 918.4Mbps |
| NAT Throughput, PPTP | 906.2Mbps / 915.9Mbps |
| 66-Byte Packet Forwarding Rate | 1,453,489pps / 1,453,488pps |
| 1,518-Byte Packet Forwarding Rate | 81,279pps / 81,275pps |
| IPsec VPN Throughput | ESP-SHA1-AES256: 885.3Mbps • ESP-SHA256-AES256: 844.8Mbps • ESP-SHA384-AES256: 868.5Mbps • ESP-SHA512-AES256: 849.5Mbps |
| GRE VPN Throughput | Unencrypted: 1,094.2Mbps • Encrypted: 702.2Mbps |
| WireGuard VPN Throughput | 341.3Mbps |
| OpenVPN Throughput | 139.1Mbps |
| L2TP VPN Throughput | Unencrypted: 1,422.4Mbps • Encrypted: 686.2Mbps |
| PPTP VPN Throughput | Unencrypted: 1,356.1Mbps • Encrypted: 205.1Mbps |
| SSL VPN Throughput | 131.6Mbps |
| DPI Throughput | TCP: 933Mbps • UDP: 927Mbps |
| IPS Throughput | TCP: 918Mbps • UDP: 920Mbps |
| Management Features | |
| Omada App | Supported when managed through an Omada Hardware Controller, Software Controller or Cloud-Based Controller |
| Centralised Management | Omada Cloud-Based Controller • Omada Hardware Controller • Omada Software Controller |
| Cloud Access | Supported through an Omada Controller |
| Dynamic DNS | DynDNS • No-IP • Peanuthull • Comexe • Custom DDNS |
| Maintenance | Web management • Remote management • Configuration export and import • SNMP v1/v2c/v3 • Ping and Traceroute • NTP synchronisation¹ • Port mirroring • CLI¹ • Syslog • Speedtest |
| Zero-Touch Provisioning | Supported with Omada Cloud-Based Controller |
| Controller Management | Automatic device discovery • Intelligent network monitoring • Abnormal event warnings • Unified configuration • Scheduled reboot • Captive portal configuration |
| Basic Functions | |
| LAN DNS | Supported |
| WAN Connection Types | Static IP • Dynamic IP • PPPoE with MRU configuration • PPTP • L2TP |
| MAC Clone | Modify WAN MAC address • Modify LAN MAC address in Standalone Mode³ |
| DHCP | DHCP Server • DHCPv6 PD Server¹ • Custom DHCP options • DHCP address reservation • Multi-IP interfaces • Multi-Net DHCP • WAN DHCP Option 60 |
| Stateful ACL | Supported |
| Quality of Service | Supported |
| Bridge VLAN | Supported |
| mDNS Repeater | Supported |
| IPv6 | Static IP • SLAAC • DHCPv6 • PPPoE • 6to4 Tunnel • Pass-Through • Non-Address Mode |
| VLAN | IEEE 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy • Custom Mode • Bridge Mode |
| Advanced Features | |
| Advanced Routing | Static Routing • Policy Routing • RIP¹ • OSPF¹ |
| Bandwidth Control | IP-based bandwidth control |
| Load Balancing | Intelligent Load Balance • Application Optimised Routing • Link Backup with timing and failover • Online Detection |
| NAT | One-to-One NAT • Multi-Net NAT • Port Forwarding • Port Triggering¹ • NAT-DMZ • FTP, H.323, SIP, IPsec and PPTP ALG • UPnP • Disable NAT |
| Session Limit | IP-based session limit |
| Authentication | |
| Web Authentication | No authentication • Simple password • Hotspot using local user, voucher⁴, SMS⁴ or RADIUS⁴ • External RADIUS server • External Portal Server⁴ • LDAP¹ |
| Others | |
| Certifications | CE • FCC • RoHS |
| Package Contents | ER7406 • Power cord • Quick Installation Guide • Rackmount kit |
| System Requirements | Microsoft Windows • macOS • NetWare • UNIX • Linux |
| Operating Temperature | 0°C to 50°C |
| Storage Temperature | −40°C to 70°C |
| Operating Humidity | 10% to 90% RH, non-condensing |
| Storage Humidity | 5% to 90% RH, non-condensing |