What This Product Does
The ER8411 Omada 10G Multi-WAN Security Gateway from TP-Link boasts excellent data processing capabilities and an array of powerful functions, including SSL/ IPSec / PPTP / L2TP VPN & OpenVPN, Load Balance, Access Control, DoS Defense, and Bandwidth Control. Two 10GE SFP+ ports and up to 10 WAN ports allow for high-bandwidth aggregation connectivity and multi-line broadband. As a router that seamlessly integrates into the Omada Software Defined Networking (SDN) platform, ER8411 provides for remote and centralized management anywhere, anytime.

Integration into Omada SDN for Centralized Management
As the gateway that seamlessly integrates into the Omada Software Defined Networking (SDN) platform, ER8411 allows for remote and centralized management anywhere, anytime. Standalone management via the Web UI or app is also available to maximize convenience. View network topology and configuration, real-time switch statistics, and debugging metrics from a single easy-to-use interface.

Learn More about Omada SDN >>

High-Capacity Performance
Featuring two 10G SFP+ ports (1 WAN, 1 WAN/LAN), the Security Gateway ER8411 supports high-bandwidth aggregation connectivity for enterprise-level businesses, schools, hotels, and large-scale deployments.

Learn More about 10G Multi-Gigabit Solution >>

Intelligent Bandwidth Allocation
The ER8411 features 1× 10GE SFP+ WAN port, 1× 10GE SFP+ WAN/LAN port, 1× 1GE SFP WAN/LAN ports, and 8× 1GE RJ45 WAN/LAN ports, raising the utilization rate of multi-line broadband. Intelligent Load Balance distributes data streams according to the bandwidth proportion of each WAN port to make the most of multi-line broadband. IP-based Bandwidth Control and Session Limit functions give network administrators the power to manage how their bandwidth is used flexibly.

Enterprise-Standard VPN
The ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPsec, PPTP, and L2TP in Client/Server mode. It also features built-in VPN engine hardware, allowing the router to support and manage LAN-to-LAN/Client-to-LAN IPsec VPN connections. Advanced VPN features include DES/3DES/AES128/AES192/AES256 encryption, MD5/SHA1 authentication, and Main/Aggressive negotiation modes.

Abundant Security Features

Powerful Firewall: Advanced firewall policies protect your network and data
Convenient VLAN Support: Create virtual network segments for enhanced security and simplified network management.
DoS Defense: Automatically detects and blocks Denial of Service (DoS) attacks such as TCP/UDP/ICMP Flooding, Ping of Death, and other related threats.
IP/MAC/URL Filtering: Forcefully prevent viruses and attacks from intruders.
IP-MAC Binding: Reserves static IP assignment for clients to defend against ARP attacks and spoofing.
One-Click ALG Activation: One-Click ALG Activation for applications such as FTP, H323, SIP, IPsec, and PPTP.

*Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller. Please go to Omada Cloud-Based Controller Product List to find all the models supported by Omada Cloud-Based Controller.
**These functions requires the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller.
† LAN MAC Address can be modified only in Standalone Mode.
§ These functions are supported only in Standalone Mode.
?ER8411 can work as a VPN client and can connect with up to 10 VPN servers.

Specifications

Hardware Features

Standards and Protocols
- IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q
- TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP
Interface:
- 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)
- 1× 1GE SFP WAN/LAN Ports
- 8× 1GE RJ45 WAN/LAN Ports
- 1× RJ45 Console Ports
- 2× USB Ports (Connecting 4G/3G Modem as WAN Backup)
Button: Reset Button
Power Supply: Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz)
LED: PWR, SYS, WAN, LAN, USB, FAN
Dimensions ( W x D x H ): 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm)

Basic Functions

WAN Connection Type:
- Static/Dynamic IP
- PPPoE
- PPTP
- L2TP
- 6to4 Tunnel
- Pass-Through
- Mobile Broadband: 4G/3G modem for backup via USB port
MAC Clone: Modify WAN/LAN MAC Address†
DHCP:
- DHCP Server/Client
- DHCP Address Reservation
- Multi-net DHCP**
- Multi-IP Interfaces**
IPv6: Yes
VLAN: 802.1Q VLAN
IPTV: IGMP v2/v3 Proxy

Advanced Functions

ACL: IP/Port/Protocol/Domain Name Filtering
Advanced Routing:
- Static Routing
- Policy Routing
Bandwidth Control:
- IP/Port-based Bandwidth Control
- Guarantee & Limited Bandwidth
Load Balance:
- Intelligent Load Balance
- Application Optimized Routing
- Link Backup (Timing§, Failover)
- Online Detection
NAT:
- One-to-One NAT§
- Multi-Net NAT
- Virtual Server
- Port Triggering§
- NAT-DMZ
- FTP/H.323/SIP/IPSec/PPTP ALG, UPnP
Security:
- SPI Firewall
- VPN Passthrough
- FTP/H.323/PPTP/SIP/IPsec ALG
- DoS Defence, Ping of Death
- Local Management
Session Limit: IP-based Session Limit

Security

Filtering:
- WEB Group Filtering§
- URL Filtering
- Web Security§
ARP Inspection:
- Sending GARP Packets§
- ARP Scanning§
- IP-MAC Binding§
Attack Defense:
- TCP/UDP/ICMP Flood Defense
- Block TCP Scan (Stealth FIN/Xmas/Null)
- Block Ping from WAN
Access Control: Source/Destination IP Based Access Control

Authentification

Web Authentication:
- No Authentication
- Simple Password**
- Hotspot?Local User / Voucher** / SMS** / Radius**?
- External Radius Sever
- External Portal Sever**
- Facebook Check-In**
- Instagram Follow**

Management

Omada App: Yes
Centralized Management:
- Omada Hardware Controller (OC300)
- Omada Hardware Controller (OC200)
- Omada Software Controller
- Omada Cloud-Based Controller
Cloud Access: Yes (Through OC300, OC200, Omada Software Controller, or Omada Cloud-Based Controller)
Service: Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Maintenance:
- Time Setting
- Diagnostic
- Firmware Upgrade
- Factory Defaults/Reboot
- Backup&Restore
- System Log
- Remote Management
- Statistics
- Controller Settings
- SNMP
Management Features:
- Automatic Device Discovery
- Intelligent Network Monitoring
- Abnormal Event Warnings
- Unified Configuration
- Reboot Schedule
- Captive Portal Configuration

Others

Certification: CE, FCC, RoHS
Package Contents:
- Omada 10G Multi-WAN Security Gateway ER8411
- Power Cord
- Rack-Mount Kit
- Quick Installation Guide
Environment:
- Operating Temperature: 0–40 ? (32–104 ?);
- Storage Temperature: -40–70 ? (-40–158 ?)
- Operating Humidity: 10–90% RH non-condensing
- Storage Humidity: 5–90% RH non-condensing