TP-Link Omada Gigabit Rackmount/Desktop VPN Gateway
Email sales@sourceit.com.sg or use Request for Quotation below and our team will confirm the latest price, availability and lead time.
PRODUCT DESCRIPTION
TP-Link Omada Gigabit Rackmount/Desktop VPN Gateway (ER7406) - 5 Years Local Warranty
The ER7406 is Omada's Gigabit multi-WAN VPN gateway for sites that need more than a dual-WAN router: six Gigabit ports (one SFP), a USB 3.0 port for an LTE dongle, an integrated IDS/IPS engine and DPI, in a fanless steel chassis that sits on a desk or mounts in a 19-inch rack with the kit supplied.
Up to 5 WAN Links Plus USB Mobile Broadband Backup
The ER7406 has 1× Gigabit SFP WAN/LAN port, 1× Gigabit WAN port and 4× Gigabit WAN/LAN ports, so up to five wired WAN connections can be load-balanced (at least one port must stay as LAN). Load balancing distributes traffic according to each line's bandwidth proportion, and the USB 3.0 port accepts a USB LTE dongle as an additional mobile-broadband WAN for failover. Link backup (timing and failover), application-optimised routing and online detection keep the site connected when one ISP drops.
Seven VPN Types With Hundreds of Tunnels
SSL, IPsec, GRE, WireGuard, PPTP, L2TP and OpenVPN are all supported. TP-Link rates the box for 100 IPsec tunnels, 50 SSL VPN tunnels, 50 PPTP and 50 L2TP tunnels, 55 OpenVPN tunnels and 20 WireGuard tunnels, with published IPsec throughput of 617.1 Mbps (ESP-SHA1-AES256) and WireGuard at 341.3 Mbps — enough to link branch offices and remote staff back to head office without a separate VPN appliance. SD-WAN is available in Controller Mode.
IDS/IPS With 4,000+ Signature Rules and DPI
An integrated IDS/IPS engine draws on a database of over 4,000 regularly updated signature rules, with published IPS throughput of 229 Mbps (TCP). Deep Packet Inspection identifies applications so they can be blocked or prioritised, with DPI throughput of 933 Mbps (TCP). Automatic DoS/DDoS detection blocks TCP/UDP/ICMP flooding and Ping of Death, while URL category filtering and IP/FQDN-based access control round out the security set.
150,000 Concurrent Sessions at Near Wire-Speed NAT
TP-Link publishes 150,000 concurrent sessions and 5,300 new sessions per second, with NAT throughput of around 940 Mbps across static IP, DHCP and PPPoE WAN types. 512 MB DDR4 RAM and 128 MB NAND flash back that up, and the fanless design with 4 kV surge protection suits a quiet office comms cabinet. Maximum power draw is just 7.5 W with a USB device attached.
Centralised Omada SDN and Cloud Management
Adopted into Omada Central, an Omada Hardware Controller or the Software Controller, the ER7406 is managed alongside Omada switches and access points from one interface, with automatic device discovery, batch configuration and firmware upgrades, abnormal-event warnings and the Omada App. Zero-Touch Provisioning is available with the Cloud-Based Controller, so a gateway shipped to a branch can come up on its configuration without an engineer on site.
Ideal For
Multi-site SMEs, branch offices, schools and managed-service providers that need multi-WAN load balancing, high VPN tunnel counts and built-in IPS on a single Omada gateway. Supplied by SourceIT with local Singapore warranty, GST invoice and project pricing on request.
ER7406 Datasheet — Technical Specifications
General
| Model | ER7406 |
| Official Product Name | Omada Gigabit Rackmount/Desktop VPN Gateway |
| Brand | TP-Link Omada |
| Warranty | 5 Years Local Warranty (Singapore) |
Hardware
| Interface | 1× Gigabit SFP WAN/LAN Port, 1× Gigabit WAN Port, 4× Gigabit LAN/WAN Ports, 1× USB 3.0 Port (supports USB LTE dongle) |
| Standards & Protocols | IEEE 802.3, 802.3u, 802.3ab, 802.3z, 802.3x, 802.1q; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP |
| Network Media | 10BASE-T: UTP category 3, 4, 5 cable (max 100 m); 100BASE-TX / 1000BASE-T: UTP category 5/5e/6 (max 100 m) |
| Fan | Fanless |
| Button | Reset Button |
| Power Supply | 100-240VAC, 50/60Hz |
| Flash | 128 MB NAND |
| DRAM | 512 MB DDR4 |
| LED | PWR, SYS, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN |
| Dimensions (W × D × H) | 11.6 × 5.5 × 1.7 in (294 × 140 × 44 mm) |
| Protection | 4 kV surge protection |
| Enclosure | Steel |
| Mounting | Desktop and Rackmountable |
| Max. Power Consumption | 7.5 W (with USB 3.0 device) / 4.5 W (without) |
Performance
| Concurrent Sessions | 150,000 |
| New Sessions / Second | 5,300 |
| NAT (Static IP) | 945.3 Mbps / 940.5 Mbps |
| NAT (DHCP) | 939.6 Mbps / 940.9 Mbps |
| NAT (PPPoE) | 943.6 Mbps / 940.9 Mbps |
| NAT (L2TP) | 880.1 Mbps / 859.0 Mbps |
| NAT (PPTP) | 855.0 Mbps / 907.2 Mbps |
| 66 Byte Packet Forwarding Rate | 1,453,489 pps / 1,453,488 pps |
| 1,518 Byte Packet Forwarding Rate | 81,279 pps / 81,275 pps |
| IPsec VPN Throughput | ESP-SHA1-AES256: 617.1 Mbps; ESP-SHA256-AES256: 592.8 Mbps; ESP-SHA384-AES256: 592.4 Mbps; ESP-SHA512-AES256: 604.5 Mbps |
| GRE | Unencrypted: 611.9 Mbps; Encrypted: 325.0 Mbps |
| WireGuard VPN | 341.3 Mbps |
| OpenVPN | 139.1 Mbps |
| L2TP VPN Throughput | Unencrypted: 977.4 Mbps; Encrypted: 334.6 Mbps |
| PPTP VPN Throughput | Unencrypted: 1064.1 Mbps; Encrypted: 206.8 Mbps |
| SSL VPN Throughput | 131.6 Mbps |
| DPI Throughput | TCP: 933 Mbps; UDP: 927 Mbps |
| IPS Throughput | TCP: 229 Mbps; UDP: 188 Mbps |
VPN
| IPsec VPN | 100 IPsec VPN tunnels; LAN-to-LAN, Client-to-LAN; DES, 3DES, AES128, AES192, AES256; IPsec Failover; IKE v1/v2; NAT-T; DPD; PFS |
| SSL VPN | 50 tunnels |
| PPTP VPN | PPTP VPN Server; PPTP VPN Client (10); 50 tunnels; MPPE encryption |
| L2TP VPN | L2TP VPN Server; L2TP VPN Client (10); 50 tunnels; L2TP over IPSec |
| OpenVPN | OpenVPN Server; OpenVPN Client (5); 55 OpenVPN tunnels; Certificate + Account mode; Full mode |
| WireGuard VPN | 20 tunnels |
| GRE | Supported (Standalone Mode only) |
| SD-WAN | Supported (Controller Mode only) |
Basic & Advanced Functions
| WAN Connection Type | Static IP, Dynamic IP, PPPoE (supports MRU configuration), PPTP, L2TP |
| DHCP | DHCP Server, DHCPv6 PD Server (Standalone Mode), DHCP Options Customization, DHCP Address Reservation, Multi-IP Interfaces, Multi-Net DHCP, WAN DHCP 60 |
| IPv6 | Static IP / SLAAC / DHCPv6 / PPPoE / 6to4 Tunnel / Pass-Through / Non-Address mode |
| VLAN | 802.1Q VLAN; Bridge VLAN |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
| Other | Stateful ACL, QoS, mDNS Repeater |
| Advanced Routing | Static Routing, Policy Routing, RIP (Standalone Mode), OSPF (Standalone Mode) |
| Load Balance | Intelligent Load Balance, Application Optimized Routing, Link Backup (Timing, Failover), Online Detection |
| NAT | One-to-One NAT, Multi-Net NAT, Port Forwarding, Port Triggering (Standalone Mode), NAT-DMZ, FTP/H.323/SIP/IPSec/PPTP ALG, UPnP, Disable NAT |
| Bandwidth Control / Session Limit | IP-based Bandwidth Control; IP-based Session Limit |
Security & Authentication
| Access Control | Source/Destination IP Based Access Control / FQDN |
| Filtering | Web Group Filtering (Standalone Mode), URL Categories and URL Filtering, Web Security (Standalone Mode) |
| IDS/IPS | 4000+ regularly updated signature rules |
| DPI | Application blocking / prioritisation |
| Attack Defense | TCP/UDP/ICMP Flood Defense, Block TCP Scan, Block Ping from WAN; DoS/DDoS detection incl. Ping of Death |
| ARP Inspection | Sending GARP Packets, ARP Scanning (Standalone Mode), IP-MAC Binding, ARP Detection |
| Web Authentication | No Authentication, Simple Password (Controller Mode), Hotspot (Local User / Voucher / SMS / Radius), External Radius Server, External Portal Server (Controller Mode), LDAP (Standalone Mode) |
Management
| Centralized Management | Omada Cloud-Based Controller, Omada Hardware Controller, Omada Software Controller |
| Omada App / Cloud Access | Yes — requires an Omada Hardware, Cloud-Based or Software Controller |
| Zero-Touch Provisioning | Requires the Omada Cloud-Based Controller |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) |
| Maintenance | Web Management Interface, Remote Management, Export & Import Configuration, SNMP v1/v2c/v3, Diagnostics (Standalone Mode), NTP Synchronize (Standalone Mode), Port Mirroring, CLI (Standalone Mode), Syslog |
| Management Features | Automatic Device Discovery, Batch Configuration, Batch Firmware Upgrading, Intelligent Network Monitoring, Abnormal Event Warnings, Unified Configuration, Reboot Schedule |
Environment & Certification
| Operating Temperature | 0 °C to 50 °C (32 °F to 122 °F) |
| Storage Temperature | -40 °C to 70 °C (-40 °F to 158 °F) |
| Operating Humidity | 10% to 90% non-condensing |
| Storage Humidity | 5% to 90% non-condensing |
| Certification | CE, FCC |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/8.1/10, MAC OS, NetWare, UNIX or Linux |
Compatibility & Software Support
The ER7406 is part of the Omada ecosystem: gateways, switches and access points are managed together from one controller, under one set of policies, with one view of the network. Cloud and app features listed below require the device to be adopted into an Omada Controller.
| Omada SDN Controller | Supported — adopt and manage centrally from Omada Central (Cloud-Based Controller), the Omada Hardware Controller or the Omada Software Controller |
| Omada App | Supported — remote management from iOS and Android |
| Omada Cloud Access | Supported — requires adoption into an Omada Controller |
| Standalone Mode | Supported — the gateway can also be configured on its own via its web interface |
| Zero-Touch Provisioning | Supported — requires the Omada Cloud-Based Controller |
Package Contents & Ordering Information
What’s in the Box
| Package Contents | ER7406, Power Cord, Quick Installation Guide, Rackmount Kit |
Ordering Information
| Model | ER7406 |
| Recommended Retail Price (incl. GST) | S$309.00 |
Datasheet & Downloads
Frequently Asked Questions — ER7406
Does the ER7406 need an Omada Controller?
No. The ER7406 runs standalone through its own web interface. Adopting it into an Omada Software, Hardware or Cloud-Based Controller is what unlocks central configuration, monitoring, firmware management and cloud/app access across every Omada device on site — and SD-WAN and Zero-Touch Provisioning are controller-only features.
What warranty does SourceIT provide?
Five years local Singapore warranty. Every ER7406 sold by SourceIT comes with a GST invoice.
Is stock held locally?
SourceIT holds fast-moving Omada lines in Singapore. Anything not in local stock is brought in on indent — ask us for the current lead time before committing to a project date.
Is this model available for project orders?
Yes. TP-Link supplies this model for project deployments; contact SourceIT with your bill of materials for pricing and lead time.
Can SourceIT quote this for a project or tender?
Yes. Send the bill of materials and we will quote the whole Omada build — controller, gateway, switching, access points and optics — with local warranty and support.
We Also Recommend
