TP-Link Omada 3-in-1 Gigabit VPN Router with PoE+ and Built-In Controller

TP-Link Omada 3-in-1 Gigabit VPN Router (ER7212PC) - 5 Years Local Warranty

The ER7212PC collapses three boxes into one: a Gigabit VPN router, an eight-port PoE+ switch with a 110 W budget, and an Omada controller for up to one router, two switches and ten access points. For a small Singapore office or retail site it removes the need to buy a separate switch and a separate OC200 alongside the gateway.

Router, PoE+ Switch and Controller in One Chassis

The ER7212PC carries 2 Gigabit SFP WAN/LAN ports, 1 Gigabit WAN port, 1 Gigabit LAN/WAN port and 8 Gigabit LAN ports, and those eight LAN ports deliver PoE+ output from a 110 W budget. Built into the same unit is an Omada controller licensed for up to 1 router, 2 switches and 10 EAPs with cloud access and Omada app support included. A twelve-person office with a handful of ceiling access points and IP phones can be built from this single unit.

110 W of PoE+ Across Eight Ports

All eight LAN ports support 802.3at PoE+ output sharing a 110 W budget, which is enough to run several Wi-Fi 6 ceiling access points, a few IP phones and a camera or two without a separate injector or PoE switch. Maximum power consumption is 133.2 W with the PoE budget fully drawn and 13.88 W without PoE, from a 53.5 VDC/2.43 A adapter. A PoE Max LED indicates when the budget is close to exhausted — useful when adding a device to a live site.

940 Mbps NAT Throughput on Every WAN Type

NAT throughput is 935.5/942.1 Mbps on static IP, 940.2/941.7 Mbps on DHCP and 913.1/935.2 Mbps on PPPoE, so the router saturates a Gigabit circuit. The session table holds 24,980 concurrent sessions at 1,900 new sessions per second — sized for a small site, and the reason a larger office should look at the ER7206 or ER707-M2 instead. IPsec VPN throughput with AES256 is 168.5 Mbps.

Twenty IPsec Tunnels for Branch-to-Head-Office Links

The gateway supports 20 IPsec VPN tunnels in LAN-to-LAN or client-to-LAN mode with main and aggressive negotiation, AES128/192/256, IKEv1/v2, SHA1 and SHA2 authentication, NAT traversal, dead peer detection and perfect forward secrecy. Alongside that sit a PPTP server with 10 clients over 16 tunnels, an L2TP server with L2TP over IPSec, and an OpenVPN server with 10 clients over 16 tunnels — enough for a branch office and a handful of remote workers.

Captive Portal and Hotspot Authentication Built In

Because the controller is on board, the ER7212PC can run guest Wi-Fi authentication without any extra hardware: no authentication, simple password, or hotspot with local user, voucher, SMS or RADIUS, plus external RADIUS server, external portal server and Facebook options. For a café, clinic or small hotel that is the whole guest-network requirement in one appliance, with the captive portal configured from the same interface that manages the access points.

Fanless, Wall-Mountable, 45 °C Rated

The unit is fanless in a 226 × 131 × 35 mm steel enclosure and mounts on a desk or a wall, so it can be fitted in a service cupboard without rack space. It carries 4 kV surge protection and is rated to 45 °C operating temperature — five degrees above the usual 40 °C, which matters in an unconditioned Singapore riser. Routing, switching and controller functions all run from one power supply and one point of management.

Ideal For

Singapore businesses, schools, hotels and managed-service providers building on Omada, and IT teams that want a gateway they can adopt, monitor and update centrally rather than box by box. Supplied by SourceIT with local Singapore warranty, GST invoice and project pricing on request.