Skip to product information
1 of 3

TP-LINK

TP-Link Omada ER8411 VPN Router with 10G Ports

TP-Link Omada ER8411 VPN Router with 10G Ports

Regular price £379.77 GBP
Regular price Sale price £379.77 GBP
Sale Sold out
Taxes included.
Quantity
View full details

Omada 10G Multi‑WAN Security Gateway ER8411

Build a lightning‑fast, secure, and centrally managed enterprise network with the Omada ER8411 — an enterprise VPN router with 10G ports, ideal for large‑scale deployments such as offices, schools, and hotels.


Key Features

Integrated with Omada SDN

  • Zero‑Touch Provisioning (ZTP)
  • Centralized cloud management
  • Intelligent monitoring

Easily deploy, manage, and monitor your entire network through the Omada SDN platform.

Centralized Cloud Management

  • Cloud access for remote administration
  • Omada app support for convenient, on‑the‑go management

High‑Speed 10G Connectivity

  • Two 10GE SFP+ ports
  • 1× 10GE SFP+ WAN
  • 1× 10GE SFP+ WAN/LAN
  • Designed for high‑bandwidth aggregation connectivity

Up to 10 WAN Ports

  • Fiber and RJ45 WAN ports
  • Load balance to increase utilization of multi‑line broadband

Highly Secure Enterprise VPN

  • Enterprise‑standard SSL / IPSec / PPTP / L2TP VPN
  • OpenVPN, WireGuard, and L2TP over IPSec
  • Suitable for multi‑branch networks and work‑from‑home scenarios

Advanced Security

  • Powerful firewall
  • DoS defense
  • IP/MAC/URL filtering
  • IP‑MAC binding
  • One‑click ALG activation

High‑Capacity Performance

  • Quad‑core 2.2 GHz CPU
  • Dual redundant power supplies for carrier‑class reliability

Multi‑WAN & Mobile Broadband

  • Up to 10 WAN SFP+, SFP, and RJ45 ports to support diverse internet access requirements
  • Multi‑WAN load balancing distributes data streams by WAN bandwidth to maximize multi‑line utilization
  • USB WAN backup: connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN redundancy

High‑Security, High‑Performance VPN

  • Supports pass‑through traffic and multiple VPN protocols:
  • SSL, IPSec, PPTP, WireGuard, L2TP (Client/Server modes), OpenVPN
  • One‑click auto IPSec VPN for simplified configuration and deployment
  • Built‑in VPN engine hardware to support and manage hundreds of VPN tunnels (IPSec, PPTP, L2TP, SSL VPN, and OpenVPN)

Technical Specifications

Hardware Specifications

Item Specification
Interfaces 2× 10GE SFP+ (1 WAN, 1 WAN/LAN)
1× 1GE SFP WAN/LAN
8× 1GE RJ45 WAN/LAN
1× RJ45 console port
2× USB ports (4G/3G modem as WAN backup)
Network Media 10BASE‑T: UTP Cat3/4/5 (Max 100 m), EIA/TIA‑568 100 Ω STP
100BASE‑TX: UTP Cat5/5e (Max 100 m), EIA/TIA‑568 100 Ω STP
1000BASE‑T: UTP Cat5e/6 (Max 100 m)
Fan Quantity 2
Buttons Reset
Power Supply Redundant dual power supplies (100–240 VAC, 50/60 Hz)
Flash 4 MB SPI NOR + 256 MB NAND
DRAM 4 GB DDR4
LEDs PWR, SYS, WAN, LAN, USB, FAN
Dimensions 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm)
Protection 4 kV surge protection
Enclosure Steel
Mounting Rack‑mountable
Max Power Consumption 26.36 W (with USB 3.0 connected)
19.12 W (without USB 3.0 connected)

Performance

Metric Performance
IPS Throughput (TCP) 4924 Mbps
IPS Throughput (UDP) 4521 Mbps
DPI Throughput (TCP) 5524 Mbps
DPI Throughput (UDP) 3547 Mbps
WireGuard VPN 1411 Mbps
Concurrent Sessions 2,300,000
New Sessions per Second 20,000
NAT Performance
NAT Type Upload Download
Static IP 9445.82 Mbps 9449.26 Mbps
DHCP 9426.83 Mbps 9426.20 Mbps
PPPoE 9413.96 Mbps 9102.01 Mbps
L2TP 9064.66 Mbps 8587.57 Mbps
PPTP 8712.11 Mbps 8505.61 Mbps
Packet Forwarding
Packet Size Upload Download
64 bytes 1080 Mbps 1030 Mbps
1518 bytes 9970 Mbps 9970 Mbps
IPSec VPN Throughput
Encryption Suite Throughput
ESP‑SHA1‑AES256 3099.4 Mbps
ESP‑SHA256‑AES256 2928.4 Mbps
ESP‑SHA384‑AES256 2935.7 Mbps
ESP‑SHA512‑AES256 2878 Mbps
Other VPN Throughput
VPN Type Throughput
OpenVPN (UDP) 4424.1 Mbps
L2TP (Unencrypted) 10497 Mbps
L2TP (Encrypted) 3178.5 Mbps
PPTP (Unencrypted) 10143 Mbps
PPTP (Encrypted) 952 Mbps
SSL VPN 4486 Mbps

Standards and Protocols

  • IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3z, IEEE 802.3x, IEEE 802.1Q
  • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS
  • IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN

Software & Network Features

WAN & IPv6

  • WAN Connection Types: Static IP, Dynamic IP, PPPoE, PPTP, L2TP, 6to4 Tunnel, Pass‑Through
  • Mobile Broadband: 4G/3G modem backup via USB port
  • MAC Clone: Modify WAN/LAN MAC address
  • IPv6 WAN connection support

DHCP

  • DHCP server/client
  • DHCP address reservation
  • Multi‑net DHCP
  • Multi‑IP interfaces

VLAN & IPTV

  • 802.1Q VLAN
  • IPTV support
  • IGMP v2/v3 Proxy

Access Control & Filtering

  • Source/Destination IP‑based access control
  • Web group filtering
  • URL filtering

Web Security & ARP Protection

  • ARP inspection
  • Sending GARP packets
  • ARP scanning
  • IP‑MAC binding

Attack Defense

  • TCP/UDP/ICMP flood defense
  • Block TCP scan (Stealth FIN/Xmas/Null)
  • Block Ping from WAN

Advanced Routing & Bandwidth Control

  • Static routing
  • Policy routing
  • IP/Port‑based bandwidth control
  • Guaranteed and limited bandwidth

Load Balancing & Link Backup

  • Intelligent load balance
  • Application‑optimized routing
  • Link backup (timing, failover)
  • Online detection

NAT Features

  • One‑to‑one NAT
  • Multi‑net NAT
  • Port forwarding
  • Port triggering
  • NAT‑DMZ
  • FTP/H.323/SIP/IPSec/PPTP ALG
  • UPnP
  • Session limit (IP‑based session limit)

VPN Capabilities

SSL VPN

  • SSL VPN server and client
  • Up to 500 SSL VPN tunnels

IPSec VPN

  • Up to 300 IPSec VPN tunnels
  • LAN‑to‑LAN and Client‑to‑LAN
  • Main and aggressive negotiation modes
  • Encryption: DES, 3DES, AES128, AES192, AES256
  • Hash/Authentication: MD5, SHA1, SHA256, SHA384, SHA512
  • IKE v1/v2
  • NAT Traversal (NAT‑T)
  • Dead Peer Detection (DPD)
  • Perfect Forward Secrecy (PFS)

PPTP VPN

  • PPTP VPN server and client (32 clients)
  • Up to 300 tunnels (shared with L2TP)
  • PPTP with MPPE encryption

L2TP VPN

  • L2TP VPN server and client (32 clients)
  • Up to 300 tunnels (shared with PPTP)
  • L2TP over IPSec

OpenVPN

  • OpenVPN server and client (10 clients)
  • Up to 110 OpenVPN tunnels

WireGuard VPN

  • Up to 300 WireGuard tunnels

Authentication & Hotspot

  • Web authentication: No authentication, simple password
  • Hotspot: Local user / Voucher / SMS / Radius
  • External Radius server support
  • External portal server support
  • Captive portal configuration

Omada SDN Management

  • Omada App support (requires OC300, OC200, Omada Cloud‑Based Controller, or Omada Software Controller)
  • Centralized management via:
  • Omada Hardware Controller (OC300, OC200)
  • Omada Software Controller
  • Omada Cloud‑Based Controller

Cloud Access & ZTP

  • Cloud access (with Omada controller)
  • Zero‑Touch Provisioning (with Omada Cloud‑Based Controller)

Management Features

  • Automatic device discovery
  • Intelligent network monitoring
  • Abnormal event warnings
  • Unified configuration
  • Reboot schedule

Services & Maintenance

  • Dynamic DNS: Dyndns, No‑IP, Peanuthull, Comexe
  • Web management interface
  • Remote management
  • Configuration export & import
  • SNMP v1/v2c/v3
  • Diagnostics (Ping & Traceroute)
  • NTP synchronization
  • Syslog support

Certification

  • CE
  • FCC
  • RoHS

Package Contents

  • Omada 10G Multi‑WAN Security Gateway ER8411
  • Power cord
  • Rack‑mount kit
  • Quick installation guide