TP-Link Omada AX3000 Gigabit VPN Router
PRODUCT DESCRIPTION
TP-Link Omada AX3000 Gigabit VPN Router (ER706W) - 5 Years Local Warranty
The ER706W is the ER7206's Wi-Fi sibling: the same class of Gigabit VPN gateway with DPI and signature-based IPS, plus an AX3000 dual-band Wi-Fi 6 radio and five detachable antennas. For a small Singapore office or shop it replaces a separate gateway and access point, while still being adoptable into Omada alongside dedicated EAPs.
AX3000 Wi-Fi 6 Built Into the Gateway
The radio delivers 574 Mbps on 2.4 GHz and 2402 Mbps on 5 GHz with HE160 support — the wide 160 MHz channel that gives a modern laptop its full Wi-Fi 6 rate. Five detachable dual-band antennas (two 3 dBi for 2.4 GHz, three 4.5 dBi for 5 GHz) can be reoriented or replaced for a difficult layout. OFDMA, beamforming and MU-MIMO handle the several-dozen-client density a small office produces.
Mesh and Seamless Roaming With Omada Access Points
The ER706W's wireless supports seamless roaming and mesh with Omada EAPs that support mesh, which is the feature that makes it a starting point rather than a ceiling. A shop or clinic can begin with the ER706W alone, then add an EAP or two as coverage needs grow, and clients hand off between them without dropping a call. Rate limiting per SSID or per client, airtime fairness, band steering and load balancing are all available.
WPA3 Personal and Enterprise, With Guest Network
Wireless encryption covers WPA, WPA2 and WPA3 in both Personal and Enterprise modes, so a business that has moved to certificate or RADIUS-backed staff Wi-Fi can do so on this unit. A separate guest network is supported, as is RADIUS accounting and MAC authentication. Transmit power is adjustable in dBm, and both the radio and SSID broadcast can be scheduled or disabled outright.
Six Gigabit Interfaces With DPI and IPS Inspection
On the wired side the ER706W provides 1 Gigabit SFP WAN/LAN port, 1 Gigabit WAN port, 4 Gigabit LAN/WAN ports and a USB 3.0 port. Deep packet inspection runs at 933 Mbps TCP and 927 Mbps UDP with an updated application library, and signature-based IPS and IDS at 229 Mbps TCP and 188 Mbps UDP. NAT throughput reaches 945.8 Mbps on DHCP, with 150,000 concurrent sessions at 5,100 new sessions per second.
658 Mbps IPsec, Plus WireGuard, GRE and SSL VPN
IPsec throughput ranges from 642.8 to 658.4 Mbps depending on the algorithm, across up to 100 IPsec tunnels in LAN-to-LAN or client-to-LAN mode. WireGuard runs at 393.5 Mbps over 20 tunnels, GRE at 624.2 Mbps unencrypted and 301.5 Mbps encrypted, SSL VPN at 126.7 Mbps over 50 tunnels and OpenVPN at 129.3 Mbps over 55 tunnels. PPTP and L2TP each provide a server with 10 clients across 50 tunnels.
Wall-Mountable, Under 23 W
The unit measures 226 × 131 × 35 mm excluding antennas and mounts on a desk or wall, which is how most small sites deploy it — high on a wall, antennas up, doing both jobs at once. It runs from a 12VDC/2A adapter; maximum power consumption is 16.8 W on the EU model and 22.7 W on the US model. Operating range is 0 to 40 °C at 10–90% non-condensing humidity.
Ideal For
Singapore businesses, schools, hotels and managed-service providers building on Omada, and IT teams that want a gateway they can adopt, monitor and update centrally rather than box by box. Supplied by SourceIT with local Singapore warranty, GST invoice and project pricing on request.
ER706W Datasheet — Technical Specifications
General
| Model | ER706W |
| Official Product Name | Omada AX3000 Gigabit VPN Router |
| Brand | TP-Link Omada |
| Warranty | 5 Years Local Warranty (Singapore) |
Specifications
| Interface | 1× Gigabit SFP WAN/LAN Port, 1× Gigabit WAN Port, 4× Gigabit LAN/WAN Ports, 1× USB 3.0 |
| Wi-Fi Frequency & Signal Rate | 2.4 GHz: 574 Mbps; 5 GHz: 2402 Mbps (HE160) |
| Antenna | 2.4 GHz: 2× 3 dBi; 5 GHz: 3× 4.5 dBi — dual-band detachable antennas |
| Wireless Advanced Features | Seamless roaming, mesh (with EAP that supports mesh), OFDMA, beamforming, MU-MIMO, guest network |
| Wireless Encryption | WPA/WPA2/WPA3 Personal, WPA/WPA2/WPA3 Enterprise |
| Flash | 128 MB NAND |
| DRAM | 512 MB DDR4 |
| NAT Throughput (Static IP) | 937.2 Mbps |
| NAT Throughput (DHCP) | 945.8 Mbps |
| NAT Throughput (PPPoE) | 942.9 Mbps |
| NAT Throughput (L2TP / PPTP) | 837.4 Mbps / 803.0 Mbps |
| IPS Throughput | TCP 229 Mbps; UDP 188 Mbps |
| DPI Throughput | TCP 933 Mbps; UDP 927 Mbps |
| IDS / IPS | Signature-based IPS/IDS threat detection |
| Concurrent Sessions | 150,000 |
| New Sessions per Second | 5,100 |
| IPsec VPN Throughput | 642.8–658.4 Mbps depending on encryption algorithm |
| IPsec VPN Tunnels | 100 tunnels, LAN-to-LAN and Client-to-LAN |
| WireGuard VPN | 393.5 Mbps, 20 tunnels |
| GRE VPN | Unencrypted 624.2 Mbps; Encrypted 301.5 Mbps |
| SSL VPN | 126.7 Mbps, 50 tunnels |
| OpenVPN | 129.3 Mbps — Server, 5 clients, 55 tunnels |
| PPTP VPN | PPTP Server, 10 clients, 50 tunnels |
| L2TP VPN | L2TP Server, 10 clients, 50 tunnels |
| Access Control | Source/destination IP based access control |
| Filtering | Web group filtering, URL filtering, web security |
| ARP Inspection | Sending GARP packets, ARP scanning, IP-MAC binding |
| Attack Defense | TCP/UDP/ICMP flood defence, block TCP scan (Stealth FIN/Xmas/Null), block ping from WAN |
| DPI Application Control | Application control via DPI with updated app library |
| Centralized Management | Omada Cloud-Based Controller, Omada Hardware Controller, Omada Software Controller |
| Omada App / Cloud Access | Yes — cloud access requires an Omada Cloud-Based Controller |
| Power Supply | 12VDC / 2A power adapter |
| Max Power Consumption | EU: 16.8 W / 11.8 W; US: 22.7 W / 18.2 W |
| Dimensions (W x D x H) | 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm) |
| Mounting | Desktop or wall mounting |
| Operating Temperature | 0 °C to 40 °C |
| Operating Humidity | 10% to 90% non-condensing |
| Certification | CE, FCC, RoHS |
Compatibility & Software Support
The ER706W is part of the Omada ecosystem: gateways, switches and access points are managed together from one controller, under one set of policies, with one view of the network. Cloud and app features listed below require the device to be adopted into an Omada Controller.
| Omada SDN Controller | Supported — adopt and manage centrally from the Omada Software Controller, Hardware Controller or Cloud-Based Controller |
| Omada App | Supported — remote management from iOS and Android |
| Omada Cloud Access | Supported — no licence fee for cloud management |
| Standalone Mode | Supported — the device can also be configured on its own via its web interface |
Package Contents & Ordering Information
What’s in the Box
| Package Contents | ER706W, Power Adapter, Quick Installation Guide |
Ordering Information
| Model | ER706W |
| Brand | TP-Link Omada |
| Local Warranty | 5 Years (Singapore) |
Datasheet & Downloads
Frequently Asked Questions — ER706W
Does the ER706W need an Omada Controller?
No. The ER706W runs standalone through its own web interface. Adopting it into an Omada Software, Hardware or Cloud-Based Controller is what unlocks central configuration, monitoring, firmware management and cloud/app access across every Omada device on site — at no licence cost.
Can the ER706W work alongside Omada access points?
Yes. Its wireless supports seamless roaming and mesh with Omada EAPs that support mesh, so a site can start with the ER706W covering the main area and add access points as coverage requirements grow, all managed from the same controller.
What warranty does SourceIT provide?
Five years local Singapore warranty. Every ER706W sold by SourceIT comes with a GST invoice.
Is stock held locally?
SourceIT holds fast-moving Omada lines in Singapore. Anything not in local stock is brought in on indent — ask us for the current lead time before committing to a project date.
Can SourceIT quote this for a project or tender?
Yes. Send the bill of materials and we will quote the whole Omada build — controller, gateway, switching, access points and optics — with local warranty and support.






