Omada 10G Multi‑WAN Security Gateway ER8411
Build a lightning‑fast, secure, and centrally managed enterprise network with the Omada ER8411 — an enterprise VPN router with 10G ports, ideal for large‑scale deployments such as offices, schools, and hotels.
Key Features
Integrated with Omada SDN
- Zero‑Touch Provisioning (ZTP)
- Centralized cloud management
- Intelligent monitoring
Easily deploy, manage, and monitor your entire network through the Omada SDN platform.
Centralized Cloud Management
- Cloud access for remote administration
- Omada app support for convenient, on‑the‑go management
High‑Speed 10G Connectivity
- Two 10GE SFP+ ports
- 1× 10GE SFP+ WAN
- 1× 10GE SFP+ WAN/LAN
- Designed for high‑bandwidth aggregation connectivity
Up to 10 WAN Ports
- Fiber and RJ45 WAN ports
- Load balance to increase utilization of multi‑line broadband
Highly Secure Enterprise VPN
- Enterprise‑standard SSL / IPSec / PPTP / L2TP VPN
- OpenVPN, WireGuard, and L2TP over IPSec
- Suitable for multi‑branch networks and work‑from‑home scenarios
Advanced Security
- Powerful firewall
- DoS defense
- IP/MAC/URL filtering
- IP‑MAC binding
- One‑click ALG activation
High‑Capacity Performance
- Quad‑core 2.2 GHz CPU
- Dual redundant power supplies for carrier‑class reliability
Multi‑WAN & Mobile Broadband
- Up to 10 WAN SFP+, SFP, and RJ45 ports to support diverse internet access requirements
- Multi‑WAN load balancing distributes data streams by WAN bandwidth to maximize multi‑line utilization
- USB WAN backup: connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN redundancy
High‑Security, High‑Performance VPN
- Supports pass‑through traffic and multiple VPN protocols:
- SSL, IPSec, PPTP, WireGuard, L2TP (Client/Server modes), OpenVPN
- One‑click auto IPSec VPN for simplified configuration and deployment
- Built‑in VPN engine hardware to support and manage hundreds of VPN tunnels (IPSec, PPTP, L2TP, SSL VPN, and OpenVPN)
Technical Specifications
Hardware Specifications
| Item |
Specification |
| Interfaces |
2× 10GE SFP+ (1 WAN, 1 WAN/LAN) |
|
1× 1GE SFP WAN/LAN |
|
8× 1GE RJ45 WAN/LAN |
|
1× RJ45 console port |
|
2× USB ports (4G/3G modem as WAN backup) |
| Network Media |
10BASE‑T: UTP Cat3/4/5 (Max 100 m), EIA/TIA‑568 100 Ω STP |
|
100BASE‑TX: UTP Cat5/5e (Max 100 m), EIA/TIA‑568 100 Ω STP |
|
1000BASE‑T: UTP Cat5e/6 (Max 100 m) |
| Fan Quantity |
2 |
| Buttons |
Reset |
| Power Supply |
Redundant dual power supplies (100–240 VAC, 50/60 Hz) |
| Flash |
4 MB SPI NOR + 256 MB NAND |
| DRAM |
4 GB DDR4 |
| LEDs |
PWR, SYS, WAN, LAN, USB, FAN |
| Dimensions |
17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm) |
| Protection |
4 kV surge protection |
| Enclosure |
Steel |
| Mounting |
Rack‑mountable |
| Max Power Consumption |
26.36 W (with USB 3.0 connected) |
|
19.12 W (without USB 3.0 connected) |
Performance
| Metric |
Performance |
| IPS Throughput (TCP) |
4924 Mbps |
| IPS Throughput (UDP) |
4521 Mbps |
| DPI Throughput (TCP) |
5524 Mbps |
| DPI Throughput (UDP) |
3547 Mbps |
| WireGuard VPN |
1411 Mbps |
| Concurrent Sessions |
2,300,000 |
| New Sessions per Second |
20,000 |
NAT Performance
| NAT Type |
Upload |
Download |
| Static IP |
9445.82 Mbps |
9449.26 Mbps |
| DHCP |
9426.83 Mbps |
9426.20 Mbps |
| PPPoE |
9413.96 Mbps |
9102.01 Mbps |
| L2TP |
9064.66 Mbps |
8587.57 Mbps |
| PPTP |
8712.11 Mbps |
8505.61 Mbps |
Packet Forwarding
| Packet Size |
Upload |
Download |
| 64 bytes |
1080 Mbps |
1030 Mbps |
| 1518 bytes |
9970 Mbps |
9970 Mbps |
IPSec VPN Throughput
| Encryption Suite |
Throughput |
| ESP‑SHA1‑AES256 |
3099.4 Mbps |
| ESP‑SHA256‑AES256 |
2928.4 Mbps |
| ESP‑SHA384‑AES256 |
2935.7 Mbps |
| ESP‑SHA512‑AES256 |
2878 Mbps |
Other VPN Throughput
| VPN Type |
Throughput |
| OpenVPN (UDP) |
4424.1 Mbps |
| L2TP (Unencrypted) |
10497 Mbps |
| L2TP (Encrypted) |
3178.5 Mbps |
| PPTP (Unencrypted) |
10143 Mbps |
| PPTP (Encrypted) |
952 Mbps |
| SSL VPN |
4486 Mbps |
Standards and Protocols
- IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3z, IEEE 802.3x, IEEE 802.1Q
- TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS
- IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN
Software & Network Features
WAN & IPv6
- WAN Connection Types: Static IP, Dynamic IP, PPPoE, PPTP, L2TP, 6to4 Tunnel, Pass‑Through
- Mobile Broadband: 4G/3G modem backup via USB port
- MAC Clone: Modify WAN/LAN MAC address
- IPv6 WAN connection support
DHCP
- DHCP server/client
- DHCP address reservation
- Multi‑net DHCP
- Multi‑IP interfaces
VLAN & IPTV
- 802.1Q VLAN
- IPTV support
- IGMP v2/v3 Proxy
Access Control & Filtering
- Source/Destination IP‑based access control
- Web group filtering
- URL filtering
Web Security & ARP Protection
- ARP inspection
- Sending GARP packets
- ARP scanning
- IP‑MAC binding
Attack Defense
- TCP/UDP/ICMP flood defense
- Block TCP scan (Stealth FIN/Xmas/Null)
- Block Ping from WAN
Advanced Routing & Bandwidth Control
- Static routing
- Policy routing
- IP/Port‑based bandwidth control
- Guaranteed and limited bandwidth
Load Balancing & Link Backup
- Intelligent load balance
- Application‑optimized routing
- Link backup (timing, failover)
- Online detection
NAT Features
- One‑to‑one NAT
- Multi‑net NAT
- Port forwarding
- Port triggering
- NAT‑DMZ
- FTP/H.323/SIP/IPSec/PPTP ALG
- UPnP
- Session limit (IP‑based session limit)
VPN Capabilities
SSL VPN
- SSL VPN server and client
- Up to 500 SSL VPN tunnels
IPSec VPN
- Up to 300 IPSec VPN tunnels
- LAN‑to‑LAN and Client‑to‑LAN
- Main and aggressive negotiation modes
- Encryption: DES, 3DES, AES128, AES192, AES256
- Hash/Authentication: MD5, SHA1, SHA256, SHA384, SHA512
- IKE v1/v2
- NAT Traversal (NAT‑T)
- Dead Peer Detection (DPD)
- Perfect Forward Secrecy (PFS)
PPTP VPN
- PPTP VPN server and client (32 clients)
- Up to 300 tunnels (shared with L2TP)
- PPTP with MPPE encryption
L2TP VPN
- L2TP VPN server and client (32 clients)
- Up to 300 tunnels (shared with PPTP)
- L2TP over IPSec
OpenVPN
- OpenVPN server and client (10 clients)
- Up to 110 OpenVPN tunnels
WireGuard VPN
- Up to 300 WireGuard tunnels
Authentication & Hotspot
- Web authentication: No authentication, simple password
- Hotspot: Local user / Voucher / SMS / Radius
- External Radius server support
- External portal server support
- Captive portal configuration
Omada SDN Management
- Omada App support (requires OC300, OC200, Omada Cloud‑Based Controller, or Omada Software Controller)
- Centralized management via:
- Omada Hardware Controller (OC300, OC200)
- Omada Software Controller
- Omada Cloud‑Based Controller
Cloud Access & ZTP
- Cloud access (with Omada controller)
- Zero‑Touch Provisioning (with Omada Cloud‑Based Controller)
Management Features
- Automatic device discovery
- Intelligent network monitoring
- Abnormal event warnings
- Unified configuration
- Reboot schedule
Services & Maintenance
- Dynamic DNS: Dyndns, No‑IP, Peanuthull, Comexe
- Web management interface
- Remote management
- Configuration export & import
- SNMP v1/v2c/v3
- Diagnostics (Ping & Traceroute)
- NTP synchronization
- Syslog support
Certification
Package Contents
- Omada 10G Multi‑WAN Security Gateway ER8411
- Power cord
- Rack‑mount kit
- Quick installation guide