TP-LINK Omada ER707 2.5G Multi-Gigabit VPN Router

Two 2.5G ports: 1× 2.5G WAN and 1× 2.5G WAN/LAN ports provide high-bandwidth aggregation connectivity.
Up to 6 WAN ports: 2.5G RJ45, Gigabit fiber, and Gigabit RJ45 WAN ports with load balancing increase the utilization rate of multi-line broadband connections.
Highly secure VPN: SSL/IPSec/GER§/PPTP/L2TP VPN and OpenVPN by corporate standard are ideal for use in multiple branches and for WFH.
Integrated with Omada SDN: Supports Zero-Touch Provisioning (ZTP),** centralized cloud management, intelligent monitoring, and more.
Centralized management: Cloud access and the Omada app provide maximum management convenience.
Comprehensive security features: Protect your network and data with advanced firewall rules, DoS defense, IP/MAC/URL filtering, and more security features.

SECURITY
Access Control Source/Destination IP-based Access Control
Filtering • Web group filtering
• URL filtering
• Web security
ARP inspection • GARP packet transmission
• ARP scanning
• IP-MAC binding
Attack protection • TCP/UDP/ICMP flood protection
• Block TCP scanning (Stealth FIN/Xmas/Null)
• Block Ping from WAN
HARDWARE FEATURES
Standards and Protocols • IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q， IEEE802.3bz
• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN
Interface • 1× 2.5G RJ45 WAN port
• 1× 2.5G RJ45 WAN/LAN port
• 1× Gigabit SFP WAN/LAN port
• 4× Gigabit RJ45 WAN/LAN ports
• 1× USB 2.0 port (supports USB storage and LTE backup with LTE dongle)
Network media • 10BASE-T: Category 3, 4, 5 UTP cable (max. 100 m) EIA/TIA-568 100Ω STP (max. 100 m)
• 100BASE-TX: Category 5, 5e UTP cable (max. 100 m) EIA/TIA-568 100Ω STP (max. 100 m)
• 1000BASE-T: UTP cable category 5, 5e, 6 (max. 100 m)
• 2500BASE-T: Category 5, 5e, 6 UTP cable (max. 100 m)
Fan quantity No fan
Button Reset button
Power supply 12V/1.5A adapter
PoE budget -
Flash 128MB NAND
DRAM 1 GB DDR4
LED PWR, SYS, SFP, USB, WAN (speed, link/activity), LAN (speed, link/activity)
Dimensions (W x D x H) 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm)
Protection 4 kV surge protection
Steel housing
Mounting Desktop/wall mount
Maximum power consumption 14.2 W (with USB 2.0 connected)
7.1 W (without USB 2.0 connected)
DESIGN
IPS TCP throughput: 208 Mbps;
UDP: 161 Mbps
DPI Throughput TCP: 1823 Mbps;
UDP: 1272 Mbps
Simultaneous sessions 500,000
New sessions /others 6000
NAT (static IP) 2365.17 Mbps / 2364.45 Mbps
NAT(DHCP) 2364.45 Mbps / 2366.04 Mbps
NAT (PPPoE) 2347.14 Mbps / 2348.29 Mbps
NAT (L2TP) 1308.86 Mbps / 974.10 Mbps
NAT (PPTP) 1236.27 Mbps / 1280.99 Mbps
IPsec VPN throughput • ESP-SHA1-AES256: 673.3 Mbps
• ESP-SHA256-AES256: 650.2 Mbps
• ESP-SHA384-AES256: 629.3 Mbps
• ESP-SHA512-AES256: 633.8 Mbps
L2TP VPN throughput • Unencrypted: 1243.7 Mbps
• Encrypted: 561.0 Mb/s
SSL VPN throughput 132.24 Mbps
66-byte packet forwarding rate 1832.69 Mbps / 1741.84 Mbps
1518-byte packet forwarding rate 2461.18 Mbps / 2457.32 Mbps
BASIC FUNCTIONS
WAN connection type • IPv4_Static IP
• IPv4_Dynamic IP
• IPv4_PPPOE
• IPv4_L2TP
• IPv4_PPTP
• IPv6_PPP
• IPv6_DHCPv6
• IPv6_Static IP
• IPv6_6in4
• IPv6_Pass-Through
• Mobile broadband connection: 4G/3G modem for backup via USB port
MAC Clone Modify WAN/LAN MAC Address†
DHCP • DHCP Server
• DHCPv6 PD server (standalone mode only)
• DHCP option customization
• DHCP address reservation
• Multi-IP interfaces*
• Multi-Net DHCP*
IPv6 StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Addressless mode
VLAN 802.1Q VLAN
IPTV IGMP v2/v3 Proxy, custom mode, bridge mode
ADVANCED FEATURES
Advanced routing • Static routing
• Routing policy
• RIP (standalone mode only)
• OSPF (standalone mode only)
Bandwidth control • IP/port-based bandwidth control
• Guaranteed and limited bandwidth
Load balancing • Intelligent load balancing
• Application-optimized routing
• Link backup (Time§, failover)
• Web discovery
NAT • One-to-one NAT
• Multi-Net NAT
• Port forwarding
• Port triggering
• NAT-DMZ
• FTP/H.323/SIP/IPSec/PPTP ALG
• UPnP
Session restriction Session restriction based on IP
VPN
IPsec VPN • 100 IPSec VPN tunnels
• LAN-to-LAN, Client-to-LAN
• Main, aggressive negotiation mode
• DES, 3DES, SHA1, AES128, AES192, AES256 encryption algorithms
• IKEv1/v2
• MD5, SHA1, SHA2-384, and SHA2-512 authentication algorithms
• NAT traversal (NAT-T)
• Dead Peer Detection (DPD)
• Perfect Forward Secrecy (PFS)
PPTP VPN • PPTP VPN server
• PPTP VPN clients (12)
• 60 tunnels (shared with L2TP)
• PPTP with MPPE encryption
L2TP VPN • L2TP VPN server
• L2TP VPN clients (12)
• 60 tunnels (shared with PPTP)
• L2TP over IPSec
OpenVPN • OpenVPN server
• OpenVPN clients (6)
• 66 OpenVPN tunnels*
AUTHENTICATION
Web authentication • No authentication
• Simple password*
• Hotspot (local user/voucher*/SMS*/Radius*)
• External radius server
• External portal server*
• LDAP
MANAGEMENT
Omada application Yes. Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized management • Omada cloud controller
• Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada Software Controller
Cloud Access Yes. Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Dynamic DNS service (Dyndns, No-IP, Peanuthull, Comexe)
Maintenance • Web-based management interface
• Remote management
• Export and import configuration
• SNMP v1/v2c/v3*
• Diagnostics (Ping & Traceroute)
• NTP synchronization
• Port mirroring
• CLI (standalone mode only)
• System log support
Touchless enablement Yes. Requires the use of Omada Cloud Controller.
Management features • Automatic device discovery
• Intelligent network monitoring
• Abnormal event alerts
• Unified configuration
• Reboot schedule
• Proxy portal configuration
• ZTP (zero-touch provisioning)
OTHER
CE, FCC, RoHS certification
Package contents • ER707-M2
• Charger
• Quick installation guide
System requirements Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10, MAC OS, NetWare, UNIX or Linux
Environment • Operating temperature: 0–40 ℃ (32–104 ℉);
• Storage temperature: -40–70 ℃ (-40–158 ℉)
• Operating humidity: 10–90% RH non-condensing
• Storage humidity: 5–90% without condensation