TP-Link Omada Gigabit VPN Gateway · ER605

Model code

ER605

Manufacturer designation

Omada Gigabit VPN Gateway

Source hardware version

V2.30

Access Control

• Source/Destination IP Based ACL ; • Stateful ACL ; • IPv4/IPv6 ACL ; • National Based ACL ; • FQDN

DPI

Deep Packet Inspection ; Support 2421 type Applications

DNS Proxy

DNSSEC, DoH, DoT, DNS Override

Filtering

• Web Group Filtering § ; • URL Filtering # ; • Web Security §

Attack Defense

• TCP/UDP/ICMP Flood Defense ; • Block TCP Scan (Stealth FIN/Xmas/Null) ; • Block Ping from WAN

ARP Inspection

• Sending GARP Packets § ; • ARP Scanning § ; • IP-MAC Binding; • ARP Detection

GRE

√ (Only in Standalone Mode)

IPsec VPN

• 20 IPSec VPN Tunnels; • LAN-to-LAN, Client-to-LAN; • Main, Aggressive Negotiation Mode; • DES, 3DES, AES128, AES192, AES256, SHA2-384 and SHA2-512 Encryption Algorithm; • IPsec Failover ; • IKE v1/v2; • MD5, SHA1 Authentication Algorithm, SHA2 Authentication Algorithm ; • NAT Traversal (NAT-T); • Dead Peer Detection (DPD); • Perfect Forward Secrecy (PFS)

PPTP VPN

• PPTP VPN Server; • PPTP VPN Client (10) ***; • 16 Tunnels; • PPTP with MPPE Encryption

L2TP VPN

• L2TP VPN Server ; • L2TP VPN Client (10) ***; • 16 Tunnels; • L2TP over IPSec

OpenVPN

• OpenVPN Server ; • OpenVPN Client (10)**; • 50 OpenVPN Tunnels; • "Certificate + Account" Mode ; • Full Mode

WireGuard VPN

√

SD-WAN

√ (Only in Controller Mode)

Standards and Protocols

• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3x, IEEE 802.1q; • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, LLDP

Interface

• 1 Gigabit WAN port; • 2 Gigabit WAN/LAN ports ; • 2 Gigabit LAN ports; • 1 USB2.0(supports USB LTE dongle ‡ )

Network Media

• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m); • 100BASE-TX: UTP category 5, 5e cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m); • 1000BASE-T: UTP category 5e, 6 cable (Max 100 m)

Button

Reset Button

Power Supply

External 12V/1A DC Adapter

Flash

128 MB NAND

DRAM

256 MB DDR

LED

PWR, SYS, WAN (Link/Act), LAN (Link/Act), USB

Dimensions ( W x D x H )

6.2 × 4.0 × 1.0 in (158 × 101 × 25mm)

Mounting

Desktop/Wall-mount

Max. Power Consumption

7.94 W

Concurrent Session

150,000

New Sessions /Second

1,800

NAT (Static IP)

• Upload: 941.64 Mbps; • Download: 944.35 Mbps ; • Bi-Directional: 1775.32 Mbps

NAT(DHCP)

• Upload: 941.23 Mbps; • Download: 943.85 Mbps ; • Bi-Directional: 1782.27 Mbps

NAT(PPPoE)

• Upload: 938.83 Mbps; • Download: 940.27 Mbps ; • Bi-Directional: 1781.77 Mbps

NAT (L2TP)

• Upload: 637.66 Mbps; • Download: 502.34 Mbps ; • Bi-Directional: 657.92 Mbps

NAT (PPTP)

• Upload: 655.36 Mbps; • Download: 511.95 Mbps ; • Bi-Directional: 665.43 Mbps

66 Byte Packet Forwarding Rate

Upload: 1,388,815 pps; Download: 1,388,806 pps

1,518 Byte Packet forwarding rate

Upload: 81,067 pps; Download: 81,069 pps

IPsec VPN Throughput

• ESP-SHA1-AES256: 239.39 Mbps; • ESP-SHA256-AES256: 250.94 Mbps; • ESP-SHA384-AES256: 31.44 Mbps; • ESP-SHA512-AES256: 53.57 Mbps

PERFORMANCE / GRE

Unencrypted: 460.97 Mbps; Encrypted: 161.83 Mbps

PERFORMANCE / OpenVPN

15.90 Mbps

L2TP VPN Throughput

• Unencrypted: 558.60 Mbps ; • Encrypted: 143.60 Mbps

PPTP VPN Throughput

• Unencrypted: 616.33 Mbps ; • Encrypted: 49.83 Mbps

WireGuard VPN Throughput

82.62 Mbps

DPI Throughput

TCP: 944 Mbps; ; UDP: 940 Mbps

Omada App

Yes. Requiring the use of Omada Controllers.

Centralized Management

• Omada Cloud-Based Controller; • Omada Hardware Controller; • Omada Software Controller

Cloud Access

Yes. Requiring the use of Omada Controllers.

Service

Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)

Maintenance

• Web Management Interface ; • Remote Management ; • Export & Import Configuration ; • SNMP v1/v2c/v3 ; • Diagnostics (Ping & Traceroute); • NTP Synchronize § ; • Port Mirroring; • CLI (only in Standalone Mode) ; • Syslog Support

Zero-Touch Provisioning

Yes. Requiring the use of Omada Cloud-Based Controller.

Management Features

• Automatic Device Discovery ; • Intelligent Network Monitoring ; • Abnormal Event Warnings ; • Unified Configuration ; • Reboot Schedule; • Captive Portal Configuration

LAN DNS

√

WAN Connection Type

• Static; • Dynamic IP; • PPPoE (supports MRU Configuration); • PPTP; • L2TP

MAC Clone

Modify WAN/LAN MAC Address §

DHCP

• DHCP Server; • DHCPv6 PD Server (only in Standalone Mode) ; • DHCP Options Customization; • DHCP Address Reservation; • Multi-IP Interfaces; • Multi-Net DHCP; • WAN DHCP 60

Stateful ACL

√

Quality of Service

√

Bridge VLAN

√

mDNS Repeater

√

IPv6

StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode

VLAN

802.1Q VLAN

IPTV

IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

Advanced Routing

• Static Routing; • Policy Routing; • RIP § ; • OSPF §

Bandwidth Control

IP-based Bandwidth Control

Load Balance

• Intelligent Load Balance; • Application Optimized Routing; • Link Backup (Timing, Failover); • Online Detection

NAT

• One-to-One NAT; • Multi-Net NAT; • Port Forwarding; • Port Triggering § ; • NAT-DMZ; • FTP/H.323/SIP/IPSec/PPTP ALG ; • UPnP; • Disable NAT

Session Limit

IP-based Session Limit

Web Authentication

• No Authentication; • Simple Password; • Hotspot（Local User / Voucher △ / SMS △ / Radius △ ）; • External Radius Sever; • External Portal Sever △ ; • LDAP §

System Requirements

Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX or Linux

Environment

• Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F) ; • Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) ; • Operating Humidity: 10% to 90% non-condensing ; • Storage Humidity: 5% to 90% non-condensing

Selection limits

Confirm exact hardware revision, regional model, adapter plug, firmware/controller support and required accessories before ordering. Published wireless PHY rates and maximum wired/VPN performance are conditional laboratory/standard limits, not guaranteed application throughput. PoE input powers this device; PoE output powers downstream equipment. Passive PoE is not automatically IEEE 802.3af/at/bt compatible; match voltage, polarity, pairs and available power budget.

Manufacturer operating-mode notes

† LAN MAC Address can be modified only in Standalone Mode.; ‡ For the complete compatibility list of 4G/3G modem, go to https://www.omadanetworks.com/en/omada-router/compatibility/ ; § These functions are supported only in Standalone Mode.; △ These functions are supported only in Controller Mode.; # This model supports manual URL entry only and does not support category-based URL filtering. ; *These functions requires the use of an Omada Controller.; **For OpenVPN: Each WAN port can connect with up to 10 VPN clients when set up as a VPN server. At the same time, the ER605 can work as a VPN client to connect with up to 10 VPN servers. The total number of OpenVPN tunnels is limited to 50.; ***For PPTP and L2TP VPN: ER605 can work as a VPN client and can connect with up to 10 VPN servers. Rated specifications are based on test results using the specific software. Device performance may vary as a result of the actual scenario.

Identifier scope

Documented model code. Regional ordering suffix and bundle are not invented and are confirmed separately.

Specification source: TP-Link ↗
Checked against documentation: 16.10.2026