TP-Link Omada Gigabit VPN Gateway
PRODUCT DESCRIPTION
TP-Link Omada Gigabit VPN Gateway (ER7206) - 5 Years Local Warranty
The ER7206 is Omada's workhorse Gigabit gateway and the one most Singapore SMB projects land on: six configurable Gigabit interfaces, a 150,000-session table, RIP and OSPF routing, and DPI, IPS and IDS inspection that still passes over 900 Mbps. It is the step up from the ER605, adding an SFP port, USB 3.0, deep packet inspection and roughly six times the session capacity.
Six Gigabit Interfaces, Almost All Configurable
The ER7206 provides 1 Gigabit SFP WAN/LAN port, 1 Gigabit WAN port, 4 Gigabit LAN/WAN ports and a USB 3.0 port. Because four of the copper ports and the SFP slot can each be assigned as WAN or LAN, the same box handles a single-circuit office today and dual or triple WAN load balancing later without replacement. The SFP slot is what lets a fibre handover come straight into the gateway rather than through a media converter.
Signature-Based IPS and IDS With DPI Across 2,421 Applications
Security inspection is the ER7206's main advance over the ER605. It runs signature-based IPS and IDS threat detection at 918 Mbps TCP and 920 Mbps UDP, and deep packet inspection across 2,421 application types at 933 Mbps TCP and 927 Mbps UDP — so inspection can be enabled on a Gigabit circuit without giving up throughput. Access control is stateful and covers IPv4 and IPv6, source and destination IP, FQDN and country-based rules.
DNS Security: DNSSEC, DNS over HTTPS and DNS over TLS
The built-in DNS proxy supports DNSSEC, DoH, DoT and DNS override, which matters for a business that wants name resolution encrypted and validated at the gateway rather than trusting each client's configuration. Alongside it sit web group filtering, URL category and URL filtering, web security, ARP inspection with GARP, ARP scanning, IP-MAC binding and ARP detection, and the usual flood, scan and ping-from-WAN defences.
885 Mbps IPsec Across 100 Tunnels, Plus WireGuard and GRE
IPsec throughput is 885.3 Mbps with ESP-SHA1-AES256 and holds between 845 and 869 Mbps across the SHA256, SHA384 and SHA512 variants, over up to 100 IPsec tunnels. WireGuard is supported at 341.3 Mbps, GRE at 1094.2 Mbps unencrypted and 702.2 Mbps encrypted in standalone mode, OpenVPN at 139.1 Mbps over 55 tunnels, and SSL VPN at 131.6 Mbps over 50 tunnels. SD-WAN is available in controller mode.
OSPF, RIP and 150,000 Concurrent Sessions
The ER7206 runs static routing, policy routing, RIP and OSPF, so it can be a participant in a routed campus network. The 150,000-session table with 4,600 new sessions per second is the practical measure of how many staff and devices it will carry — comfortably a few dozen users with heavy SaaS and cloud-storage use, plus a guest tier. Quality of service, bridge VLAN, stateful ACL and LAN DNS round out the feature set.
Fanless Steel Case, Desk, Wall or Rack
At 226 × 131 × 35 mm the ER7206 is fanless and therefore silent, and it can be desk-mounted, wall-mounted or rack-mounted — a rackmount kit is in the box. Power comes from a 12V/1A adapter with maximum consumption of 7.5 W with USB 3.0 connected and 4.5 W without, so it can sit behind a small UPS for a long time. It carries 4 kV surge protection and operates from 0 to 40 °C.
Ideal For
Singapore businesses, schools, hotels and managed-service providers building on Omada, and IT teams that want a gateway they can adopt, monitor and update centrally rather than box by box. Supplied by SourceIT with local Singapore warranty, GST invoice and project pricing on request.
ER7206 Datasheet — Technical Specifications
General
| Model | ER7206 |
| Official Product Name | Omada Gigabit VPN Gateway |
| Brand | TP-Link Omada |
| Warranty | 5 Years Local Warranty (Singapore) |
Specifications
| Interface | 1× Gigabit SFP WAN/LAN Port, 1× Gigabit WAN Port, 4× Gigabit LAN/WAN Ports, 1× USB 3.0 Port |
| Standards and Protocols | IEEE 802.3, 802.3u, 802.3ab, 802.3z, 802.3x, 802.1q; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP |
| Network Media | 10BASE-T, 100BASE-TX, 1000BASE-T UTP category 5, 5e, 6 cable (Max 100 m) |
| Flash | 128 MB NAND |
| DRAM | 512 MB DDR4 |
| NAT Throughput (Static IP) | 945.3 Mbps / 940.5 Mbps |
| NAT Throughput (DHCP) | 939.6 Mbps / 940.9 Mbps |
| NAT Throughput (PPPoE) | 943.6 Mbps / 940.9 Mbps |
| 66 Byte Packet Forwarding Rate | 1,453,489 pps / 1,453,488 pps |
| IPS Throughput | TCP 918 Mbps; UDP 920 Mbps |
| DPI Throughput | TCP 933 Mbps; UDP 927 Mbps — supports 2,421 application types |
| IDS / IPS | Signature-based IPS/IDS threat detection |
| Concurrent Sessions | 150,000 |
| New Sessions per Second | 4,600 |
| IPsec VPN Throughput | ESP-SHA1-AES256 885.3 Mbps; SHA256 844.8 Mbps; SHA384 868.5 Mbps; SHA512 849.5 Mbps |
| IPsec VPN Tunnels | 100 tunnels, LAN-to-LAN and Client-to-LAN, main and aggressive mode |
| WireGuard VPN | 341.3 Mbps |
| GRE VPN | Unencrypted 1094.2 Mbps; Encrypted 702.2 Mbps (standalone mode only) |
| SSL VPN | 131.6 Mbps, 50 tunnels |
| OpenVPN | 139.1 Mbps — Server, 5 clients, 55 tunnels |
| L2TP VPN Throughput | Unencrypted 1422.4 Mbps; Encrypted 686.2 Mbps — Server, 10 clients, 50 tunnels, L2TP over IPSec |
| PPTP VPN Throughput | Unencrypted 1356.1 Mbps; Encrypted 205.1 Mbps — Server, 10 clients, 50 tunnels, MPPE |
| SD-WAN | Supported (Controller Mode only) |
| DNS Proxy | DNSSEC, DoH, DoT and DNS override |
| Access Control | Source/destination IP-based ACL, stateful ACL, IPv4/IPv6 ACL, country-based ACL, FQDN |
| Filtering | Web group filtering, URL category and URL filtering, web security |
| ARP Inspection | Sending GARP packets, ARP scanning, IP-MAC binding, ARP detection |
| Attack Defense | TCP/UDP/ICMP flood defence, block TCP scan (Stealth FIN/Xmas/Null), block ping from WAN |
| Advanced Routing | Static routing, policy routing, RIP, OSPF |
| Load Balance | Intelligent load balance, application optimised routing, link backup, online detection |
| NAT Features | One-to-One NAT, Multi-Net NAT, port forwarding, port triggering, NAT-DMZ, ALG |
| DHCP | DHCP Server, DHCPv6 PD Server, DHCP option customisation, address reservation |
| IPv6 | Static IP, SLAAC, DHCPv6, PPPoE, 6to4 tunnel, pass-through, non-address mode |
| VLAN / IPTV | 802.1Q VLAN, bridge VLAN; IGMP v2/v3 proxy, custom mode, bridge mode |
| Quality of Service | Supported |
| Web Authentication | No authentication, simple password, hotspot, RADIUS, external portal server, LDAP |
| Centralized Management | Omada Central (Cloud-Based), Omada Hardware Controller, Omada Software Controller |
| Zero-Touch Provisioning | Supported |
| Maintenance | Web interface, remote management, config export/import, SNMP, diagnostics, NTP, port mirroring, CLI, syslog |
| Power Supply | 12V/1A DC power adapter |
| Max Power Consumption | 7.5 W (with USB 3.0 connected), 4.5 W (without) |
| Fan Quantity | Fanless |
| Dimensions (W x D x H) | 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm) |
| Enclosure / Mounting | Steel; desktop, wall or rackmount |
| Protection | 4 kV surge protection |
| LED | PWR, SYS, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act) |
| Operating Temperature | 0 °C to 40 °C |
| Storage Temperature | -40 °C to 70 °C |
| Operating Humidity | 10% to 90% non-condensing |
| Certification | CE, FCC, RoHS |
Compatibility & Software Support
The ER7206 is part of the Omada ecosystem: gateways, switches and access points are managed together from one controller, under one set of policies, with one view of the network. Cloud and app features listed below require the device to be adopted into an Omada Controller.
| Omada SDN Controller | Supported — adopt and manage centrally from the Omada Software Controller, Hardware Controller or Cloud-Based Controller |
| Omada App | Supported — remote management from iOS and Android |
| Omada Cloud Access | Supported — no licence fee for cloud management |
| Standalone Mode | Supported — the device can also be configured on its own via its web interface |
Package Contents & Ordering Information
What’s in the Box
| Package Contents | ER7206, Power Adapter, Quick Installation Guide, Rackmount Kit |
Ordering Information
| Model | ER7206 |
| Brand | TP-Link Omada |
| Local Warranty | 5 Years (Singapore) |
Datasheet & Downloads
Frequently Asked Questions — ER7206
Does the ER7206 need an Omada Controller?
No. The ER7206 runs standalone through its own web interface. Adopting it into an Omada Software, Hardware or Cloud-Based Controller is what unlocks central configuration, monitoring, firmware management and cloud/app access across every Omada device on site — at no licence cost.
How does the ER7206 compare with the ER605?
The ER7206 adds a Gigabit SFP WAN/LAN port and USB 3.0, deep packet inspection across 2,421 application types with signature-based IPS and IDS, RIP and OSPF routing, a DNS proxy with DNSSEC, DoH and DoT, and a 150,000-session table against the ER605's 25,000. IPsec capacity rises from 20 tunnels to 100.
What warranty does SourceIT provide?
Five years local Singapore warranty. Every ER7206 sold by SourceIT comes with a GST invoice.
Is stock held locally?
SourceIT holds fast-moving Omada lines in Singapore. Anything not in local stock is brought in on indent — ask us for the current lead time before committing to a project date.
Can SourceIT quote this for a project or tender?
Yes. Send the bill of materials and we will quote the whole Omada build — controller, gateway, switching, access points and optics — with local warranty and support.
