TP-Link Omada Multi-Gigabit VPN Router with 2× 2.5G and 4 Gigabit Ports
PRODUCT DESCRIPTION
TP-Link Omada Multi-Gigabit VPN Router (ER707-M2) - 5 Years Local Warranty
The ER707-M2 is the desktop multi-gigabit member of Omada's gateway line: a 2.5G WAN port, a second 2.5G WAN/LAN port, a Gigabit SFP slot and four Gigabit RJ45 ports in a fanless 226 mm steel case. It shares its official product name with the rack-mount ER7412-M2 but is the smaller unit — half the copper ports, one SFP slot, no console port, and no PoE output.
A 2.5G WAN Port for Faster-Than-Gigabit Circuits
The ER707-M2 provides 1× 2.5G RJ45 WAN port, 1× 2.5G RJ45 WAN/LAN port, 1× Gigabit SFP WAN/LAN port, 4× Gigabit RJ45 WAN/LAN ports and a USB 2.0 port. That layout is aimed squarely at the Singapore office whose fibre plan has moved past 1 Gbps: the 2.5G WAN terminates the circuit, the second 2.5G port feeds a multi-gigabit core switch, and the Gigabit ports handle secondary links or segmented internal networks.
2.36 Gbps NAT Throughput and a Half-Million Sessions
Static-IP NAT runs at 2365.17/2364.45 Mbps, DHCP at 2364.45/2366.04 Mbps and PPPoE at 2347.14/2348.29 Mbps, so the gateway passes a 2 Gbps service at close to line rate regardless of handover type. The session table holds 500,000 concurrent sessions with 6,000 new sessions per second — comfortable for a busy office or a guest-Wi-Fi tier where session count, not raw bandwidth, is the usual bottleneck.
673 Mbps IPsec Across 100 Tunnels, Plus WireGuard
IPsec throughput is 673.3 Mbps with ESP-SHA1-AES256 and stays between 629 and 651 Mbps across the SHA256, SHA384 and SHA512 variants, over up to 100 IPsec tunnels in LAN-to-LAN or client-to-LAN mode with IKEv1/v2, NAT-T, DPD and PFS. WireGuard adds 343.8 Mbps across 20 tunnels, SSL VPN runs at 132.24 Mbps, and the router supports 60 PPTP and 60 L2TP tunnels plus 66 OpenVPN tunnels. SD-WAN is available in controller mode.
DPI at 1.8 Gbps With Signature-Based IPS
Deep packet inspection sustains 1823 Mbps on TCP and 1272 Mbps on UDP, while intrusion prevention runs at 208 Mbps TCP and 161 Mbps UDP — figures worth reading before enabling IPS on a fully loaded 2.5G link. The rest of the security set covers source and destination IP access control, web group and URL filtering, web security, ARP inspection with IP-MAC binding, and flood, scan and ping-from-WAN defences.
OSPF and RIP on a Desktop Gateway
The ER707-M2 runs static routing, policy routing, RIP and OSPF, which is unusual at this size and lets the unit slot into a routed network rather than only terminating one. Load balancing covers intelligent load balance, application-optimised routing, link backup and online detection. The USB 2.0 port accepts a 4G/3G modem for WAN backup, and DHCP support includes a DHCPv6 PD server, option customisation and multi-net DHCP.
Fanless, Wall-Mountable and Under 15 W
At 226 × 131 × 35 mm in a fanless steel enclosure, the ER707-M2 is silent and can be mounted on a wall or sat on a desk, so it suits a small comms cupboard or an office without a rack. Maximum power consumption is 14.2 W with USB 2.0 connected and 7.1 W without, from a 12V/1.5A adapter. It carries 4 kV surge protection and operates from 0 to 40 °C.
Ideal For
Singapore businesses, schools, hotels and managed-service providers building on Omada, and IT teams that want a gateway they can adopt, monitor and update centrally rather than box by box. Supplied by SourceIT with local Singapore warranty, GST invoice and project pricing on request.
ER707-M2 Datasheet — Technical Specifications
General
| Model | ER707-M2 |
| Official Product Name | Omada Multi-Gigabit VPN Router |
| Brand | TP-Link Omada |
| Warranty | 5 Years Local Warranty (Singapore) |
Specifications
| Interface | 1× 2.5G RJ45 WAN Port, 1× 2.5G RJ45 WAN/LAN Port, 1× Gigabit SFP WAN/LAN Port, 4× Gigabit RJ45 WAN/LAN Ports, 1× USB 2.0 Port |
| Standards and Protocols | IEEE 802.3, 802.3u, 802.3ab, 802.3z, 802.3x, 802.1q, 802.3bz; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN |
| Network Media | 10BASE-T, 100BASE-TX, 1000BASE-T, 2500BASE-T (Max 100 m) |
| Flash | 128 MB NAND |
| DRAM | 1 GB DDR4 |
| NAT Throughput (Static IP) | 2365.17 Mbps / 2364.45 Mbps |
| NAT Throughput (DHCP) | 2364.45 Mbps / 2366.04 Mbps |
| NAT Throughput (PPPoE) | 2347.14 Mbps / 2348.29 Mbps |
| 1,518 Byte Packet Forwarding Rate | 2461.18 Mbps / 2457.32 Mbps |
| IPS Throughput | TCP 208 Mbps; UDP 161 Mbps |
| DPI Throughput | TCP 1823 Mbps; UDP 1272 Mbps |
| Concurrent Sessions | 500,000 |
| New Sessions per Second | 6,000 |
| IPsec VPN Throughput | ESP-SHA1-AES256 673.3 Mbps; SHA256 650.2 Mbps; SHA384 629.3 Mbps; SHA512 633.8 Mbps |
| IPsec VPN Tunnels | 100 tunnels, LAN-to-LAN and Client-to-LAN, IKEv1/v2, NAT-T, DPD, PFS |
| WireGuard VPN | 343.8 Mbps, 20 tunnels |
| SSL VPN | 132.24 Mbps |
| OpenVPN | OpenVPN Server, 6 clients, 66 tunnels |
| L2TP VPN Throughput | Unencrypted 1243.7 Mbps; Encrypted 561.0 Mbps — Server, 12 clients, 60 tunnels, L2TP over IPSec |
| PPTP VPN | Server, 12 clients, 60 tunnels, MPPE encryption |
| SD-WAN | Supported (Controller Mode only) |
| Security | Source/destination IP access control; web group filtering, URL filtering, web security; ARP inspection with GARP, ARP scanning, IP-MAC binding; TCP/UDP/ICMP flood defence, block TCP scan, block ping from WAN |
| Advanced Routing | Static routing, policy routing, RIP, OSPF |
| Load Balance | Intelligent load balance, application optimised routing, link backup, online detection |
| NAT Features | One-to-One NAT, Multi-Net NAT, port forwarding, port triggering, NAT-DMZ, FTP/H.323/SIP/IPSec/PPTP ALG, UPnP |
| DHCP | DHCP Server, DHCPv6 PD Server, DHCP option customisation, address reservation, multi-IP interfaces, multi-net DHCP |
| WAN Connection Types | IPv4 static/dynamic IP, PPPoE, L2TP, PPTP; IPv6 PPP, DHCPv6, static IP, 6in4, pass-through; mobile broadband 4G/3G modem backup via USB |
| VLAN / IPTV | 802.1Q VLAN; IGMP v2/v3 proxy, custom mode, bridge mode |
| Web Authentication | No authentication, simple password, hotspot, external RADIUS server, external portal server, LDAP |
| Centralized Management | Omada Cloud-Based Controller, Omada Hardware Controller (OC300/OC200), Omada Software Controller |
| Zero-Touch Provisioning | Yes (Omada Cloud-Based Controller required) |
| Power Supply | 12V/1.5A adapter |
| Max Power Consumption | 14.2 W (with USB 2.0 connected), 7.1 W (without) |
| Fan Quantity | Fanless |
| Dimensions (W x D x H) | 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm) |
| Enclosure / Mounting | Steel; desktop or wall mounting |
| Protection | 4 kV surge protection |
| LED | PWR, SYS, SFP, USB, WAN (Speed, Link/Act), LAN (Speed, Link/Act) |
| Operating Temperature | 0 °C to 40 °C |
| Storage Temperature | -40 °C to 70 °C |
| Operating Humidity | 10% to 90% RH non-condensing |
| Storage Humidity | 5% to 90% non-condensing |
| Certification | CE, FCC, RoHS |
Compatibility & Software Support
The ER707-M2 is part of the Omada ecosystem: gateways, switches and access points are managed together from one controller, under one set of policies, with one view of the network. Cloud and app features listed below require the device to be adopted into an Omada Controller.
| Omada SDN Controller | Supported — adopt and manage centrally from the Omada Software Controller, Hardware Controller or Cloud-Based Controller |
| Omada App | Supported — remote management from iOS and Android |
| Omada Cloud Access | Supported — no licence fee for cloud management |
| Standalone Mode | Supported — the device can also be configured on its own via its web interface |
Package Contents & Ordering Information
What’s in the Box
| Package Contents | ER707-M2, Power Adapter, Quick Installation Guide |
Ordering Information
| Model | ER707-M2 |
| Brand | TP-Link Omada |
| Local Warranty | 5 Years (Singapore) |
Datasheet & Downloads
Frequently Asked Questions — ER707-M2
Does the ER707-M2 need an Omada Controller?
No. The ER707-M2 runs standalone through its own web interface. Adopting it into an Omada Software, Hardware or Cloud-Based Controller is what unlocks central configuration, monitoring, firmware management and cloud/app access across every Omada device on site — at no licence cost.
Does the ER707-M2 supply PoE to access points?
No. The ER707-M2 has no PoE output — TP-Link publishes no PoE budget for this model. Pair it with an Omada PoE+ switch or a PoE injector to power access points, or look at the ER7212PC, which combines a gateway, an eight-port PoE+ switch and a built-in controller in one unit.
What warranty does SourceIT provide?
Five years local Singapore warranty. Every ER707-M2 sold by SourceIT comes with a GST invoice.
Is stock held locally?
SourceIT holds fast-moving Omada lines in Singapore. Anything not in local stock is brought in on indent — ask us for the current lead time before committing to a project date.
Can SourceIT quote this for a project or tender?
Yes. Send the bill of materials and we will quote the whole Omada build — controller, gateway, switching, access points and optics — with local warranty and support.



