TP-LINK Omada ER7206 Gigabit VPN Router

Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)**, centralized cloud management, and intelligent monitoring.
Centralized management: cloud access and Omada app for ultimate convenience and easy management.
Gigabit ports: 1 Gigabit SFP port and 5 Gigabit RJ45 ports provide fast wired connectivity.
Up to 5 WAN ports: Gigabit SFP WAN ports and Gigabit RJ45 WAN ports optimize bandwidth utilization.
Highly secure VPN: Supports multiple VPN protocols, including SSL/Wireguard/OpenVPN/IPSec/GRE VPN/PPTP/L2TP/L2TP over IPSec, helping users establish VPN connections more flexibly.
Abundant security features: Advanced firewall policies, attack defense, IP/MAC/URL filtering, and more security features protect your network and data.

HARDWARE FEATURES
Standards and Protocols • IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q
• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP
Interface • 1 Gigabit SFP WAN/LAN Port
• 1 Gigabit WAN port
• 4 Gigabit LAN/WAN ports
• 1 USB 3.0 port (supports USB LTE dongle and USB storage)
Network Media • 10BASE-T: Category 3, 4, 5 UTP cable (max. 100 m) EIA/TIA-568 100Ω STP (max. 100 m)
• 100BASE-TX: Category 5, 5e UTP cable (max. 100 m) EIA/TIA-568 100Ω STP (max. 100 m)
• 1000BASE-T: UTP cable category 5, 5e, 6 (max. 100 m)
Fan quantity No fan
Button Reset button
Power supply 12V DC/1A power supply
PoE budget -
Flash 128 MB NAND
DRAM 512 MB DDR4
LED PWR, SYS, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act)
Dimensions (W x D x H) 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm)
Protection 4 kV surge protection
Steel housing
Mounting Desktop/wall mount
Maximum power consumption • 7.5 W (with USB 3.0 connected)
• 4.5 W (without USB 3.0 connected)
DESIGN
Simultaneous sessions 150,000
New sessions/others 5300
NAT (static IP) 945.3 Mbps / 940.5 Mbps
NAT (DHCP) 939.6 Mb/s / 940.9 Mb/s
NAT (PPPoE) 943.6 Mbps / 940.9 Mbps
NAT (L2TP) 880.1 Mbps / 859.0 Mbps
NAT (PPTP) 855.0 Mbps / 907.2 Mbps
64-byte packet forwarding rate -
IPsec VPN throughput • ESP-SHA1-AES256: 617.1 Mbps
• ESP-SHA256-AES256: 592.8 Mbps
• ESP-SHA384-AES256: 592.4 Mbps
• ESP-SHA512-AES256: 604.5 Mbps
OpenVPN 139.1 Mbps
L2TP VPN throughput • Unencrypted: 977.4 Mbps
• Encrypted: 334.6 Mbps
PPTP VPN throughput • Unencrypted: 1064.1 Mbps
• Encrypted: 206.8 Mbps
SSL VPN throughput 131.6 Mbps
66-byte packet forwarding rate 1,453,489 pps / 1,453,488 pps
1518 bytes Packet forwarding rate 81,279 pps / 81,275 pps
BASIC FUNCTIONS
WAN connection type • Static IP
• Dynamic IP
• PPPoE (supports MRU configuration)
• PPTP
• L2TP
MAC Clone Modify WAN/LAN MAC Address
DHCP • DHCP server
• DHCPv6 PD server (standalone mode only)
• Customize DHCP Options
• DHCP Address Reservation
• Multi-IP interfaces
• Multi-Net DHCP
IPv6 StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/No Address
VLAN 802.1Q VLAN
IPTV IGMP v2/v3 Proxy, custom mode, bridge mode

ADVANCED FEATURES
ACL IP/port/protocol/domain name filtering
Advanced routing • Static routing
• Routing policy
• REST IN PEACE
• OSPF
Bandwidth control IP-based bandwidth control
Load balancing • Intelligent load balancing
• Application-optimized routing
• Link backup (scheduling, failover)
• Web discovery
NAT • One-to-one NAT
• Multi-Net NAT
• Virtual server
• Port triggering
• NAT-DMZ
• FTP/H.323/SIP/IPSec/PPTP ALG
• UPnP
Session restriction Session restriction based on IP
VPN
SSL VPN 50 tunnels
IPsec VPN • 100 IPSec VPN tunnels
• LAN-to-LAN, Client-to-LAN
• Main, aggressive negotiation mode
• DES, 3DES, AES128, AES192, AES256 encryption algorithms
• IPsec Failover
• IKE v1/v2
• MD5, SHA1, SHA2-384, and SHA2-512 authentication algorithms
• NAT traversal (NAT-T)
• Dead Peer Detection (DPD)
• Perfect Forward Secrecy (PFS)
PPTP VPN • PPTP VPN server
• PPTP VPN client (10)
• 50 tunnels
• PPTP with MPPE encryption
L2TP VPN • L2TP VPN server
• L2TP VPN client (10)
• 50 tunnels
• L2TP over IPSec
OpenVPN • OpenVPN server
• OpenVPN client (5)
• 55 OpenVPN tunnels
• "Certificate + account" mode.
• Full mode
SECURITY
Filtering • Web group filtering
• URL filtering
• Web security
ARP inspection • GARP packet transmission
• ARP scanning§
• IP-MAC binding
Attack protection • TCP/UDP/ICMP Flood protection
• Block TCP scanning (Stealth FIN/Xmas/Null)
• Block Ping from WAN
Access control Source/Destination IP-based access control
AUTHENTICATION
Web Authentication • No Authentication
• Simple password*
• Hotspot (local user /Voucher*/ SMS*/Radius*)
• External radius Sever
• External portal server*
• LDAP
MANAGEMENT
Omada application Yes. Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized management • Omada Cloud-Based Controller
• Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada Software Controller
Cloud Access Yes. Requires OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Service dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS customization)
Maintenance • Web management interface
• Remote management
• Export and import configuration
• SNMP v1/v2c/v3
• Diagnostics (Ping & Traceroute)
• NTP synchronization
• Port mirroring
• CLI (standalone mode only)
• System log support
Touchless enablement Yes. Requires the use of Omada Cloud Controller.
Management features • Automatic device discovery
• Intelligent network monitoring
• Abnormal event alerts
• Unified configuration
• Reboot schedule
• Interception portal configuration
OTHER
CE, FCC, RoHS certification
Package contents • ER7206(TL-ER7206)
• Power cable
• Quick installation guide
System Requirements Microsoft Windows 98SE, NT, 2000, XP, Vista™, or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX, or Linux
Environment • Operating temperature: 0°C to 40°C (32°F to 104°F)
• Storage temperature: -40°C to 70°C (-40°F to 158°F)
• Operating humidity: 10% to 90% non-condensing
• Storage humidity: 5% to 90% non-condensing