TP-Link Omada Gigabit Rackmount/Desktop VPN Gateway · ER7406

Model code

ER7406

Manufacturer designation

Omada Gigabit Rackmount/Desktop VPN Gateway

Source hardware version

V1.20

IDS/IPS

Signature-based IPS/IDS threat detection

Access Control

• Source/Destination IP Based ACL ; • Stateful ACL ; • IPv4/IPv6 ACL ; • National Based ACL; • FQDN

DPI

• Deep Packet Inspection ; • Support 2421 type Applications

DNS Proxy

DNSSEC, DoH, DoT, DNS Override, and DNS Cache

Filtering

• Web Group Filtering § ; • URL Categories and URLs Filtering; • Web Security §

Attack Defense

• TCP/UDP/ICMP Flood Defense; • Block TCP Scan (Stealth FIN/Xmas/Null); • Block Ping from WAN

ARP Inspection

• Sending GARP Packets; • ARP Scanning § ; • IP-MAC Binding; • ARP Detection

GRE

√ (Only in Standalone Mode)

SSL VPN

50 Tunnels

IPsec VPN

• 100 IPSec VPN Tunnels; • LAN-to-LAN, Client-to-LAN; • Main, Aggressive Negotiation Mode; • DES, 3DES, AES128, AES192, AES256 Encryption Algorithm ; • IPsec Failover; • IKE v1/v2; • MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm ; • NAT Traversal (NAT-T); • Dead Peer Detection (DPD); • Perfect Forward Secrecy (PFS)

PPTP VPN

• PPTP VPN Server; • PPTP VPN Client (10) ※ ; • 50 Tunnels; • PPTP with MPPE Encryption

L2TP VPN

• L2TP VPN Server ; • L2TP VPN Client (10) ※ ; • 50 Tunnels; • L2TP over IPSec

OpenVPN

• OpenVPN Server ; • OpenVPN Client (5) ※ ; • 55 OpenVPN Tunnels; • "Certificate + Account" Mode ; • Full Mode

WireGuard VPN

√

SD-WAN

√

Standards and Protocols

• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q; • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP

Interface

• 1 Gigabit SFP WAN/LAN Port ; • 1 Gigabit WAN Port; • 4 Gigabit LAN/WAN Ports ; • 1 USB 3.0 Port (supports USB LTE dongle and USB storage)

Network Media

• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m); • 100BASE-TX: UTP category 5, 5e cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m); • 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)

Fan Quantity

Fanless

Button

Reset button

Power Supply

100-240VAC, 50/60Hz

Flash

128 MB NAND

DRAM

512 MB DDR4

LED

PWR, SYS, SFP, USB, WAN(1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act)

Dimensions ( W x D x H )

11.6 × 5.5 × 1.7 in (294 × 140 × 44 mm)

Protection

4 kV surge protection

Mounting

• Desktop; • Rackmount

Max. Power Consumption

• 7.5 W (with USB 3.0 connected); • 4.5 W (without USB 3.0 connected)

Concurrent Session

150,000

New Sessions /Second

4,600

NAT (Static IP)

945.3 Mbps / 940.5 Mbps

NAT(DHCP)

939.6 Mbps / 940.9 Mbps

NAT(PPPoE)

943.6 Mbps / 940.9 Mbps

NAT (L2TP)

908.6 Mbps / 918.4 Mbps

NAT (PPTP)

906.2 Mbps / 915.9 Mbps

66 Byte Packet Forwarding Rate

1,453,489 pps / 1,453,488 pps

1,518 Byte Packet forwarding rate

81,279 pps / 81,275 pps

IPsec VPN Throughput

• ESP-SHA1-AES256: 885.3Mbps ; • ESP-SHA256-AES256: 844.8 Mbps ; • ESP-SHA384-AES256: 868.5 Mbps ; • ESP-SHA512-AES256: 849.5 Mbps

PERFORMANCE / GRE

• Unencrypted: 1094.2 Mbps; • Encrypted: 702.2 Mbps

PERFORMANCE / WireGuard VPN

341.3 Mbps

PERFORMANCE / OpenVPN

139.1 Mbps

L2TP VPN Throughput

• Unencrypted: 1422.4 Mbps; • Encrypted: 686.2 Mbps

PPTP VPN Throughput

• Unencrypted: 1356.1 Mbps; • Encrypted: 205.1 Mbps

SSL VPN Throughput

131.6 Mbps

DPI Throughput

TCP: 933 Mbps; UDP: 927 Mbps

IPS Throughput

TCP: 918 Mbps; UDP: 920 Mbps

Omada App

Yes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.

Centralized Management

• Omada Cloud-Based Controller; • Omada Hardware Controller; • Omada Software Controller

Cloud Access

Yes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.

Service

Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)

Maintenance

• Web Management Interface ; • Remote Management ; • Export & Import Configuration ; • SNMP v1/v2c/v3 ; • Diagnostics (Ping & Traceroute) ; • NTP Synchronize § ; • Port Mirroring; • CLI § ; • Syslog Support; • Speedtest

Zero-Touch Provisioning

Yes. Requires the use of Omada Cloud-Based Controller.

Management Features

• Automatic Device Discovery; • Intelligent Network Monitoring; • Abnormal Event Warnings; • Unified Configuration; • Reboot Schedule; • Captive Portal Configuration

LAN DNS

√

WAN Connection Type

• Static IP; • Dynamic IP; • PPPoE(supports MRU Configuration); • PPTP; • L2TP

MAC Clone

Modify WAN/LAN MAC Address †

DHCP

• DHCP Server; • DHCPv6 PD Server § ; • DHCP Options Customization; • DHCP Address Reservation; • Multi-IP Interfaces; • Multi-Net DHCP; • WAN DHCP 60

Stateful ACL

√

Quality of Service

√

Bridge VLAN

√

mDNS Repeater

√

IPv6

StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode

VLAN

802.1Q VLAN

IPTV

IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

Advanced Routing

• Static Routing; • Policy Routing; • RIP § ; • OSPF §

Bandwidth Control

IP-based Bandwidth Control

Load Balance

• Intelligent Load Balance; • Application Optimized Routing; • Link Backup (Timing, Failover); • Online Detection

NAT

• One-to-One NAT; • Multi-Net NAT; • Port Forwarding; • Port Triggering § ; • NAT-DMZ; • FTP/H.323/SIP/IPSec/PPTP ALG; • UPnP; • Disable NAT

Session Limit

IP-based Session Limit

Web Authentication

• No Authentication; • Simple Password; • Hotspot (Local User /Voucher ‡ / SMS ‡ /Radius ‡ ); • External Radius Server; • External Portal Server ‡ ; • LDAP §

System Requirements

• Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10; • MAC OS, NetWare, UNIX or Linux

Environment

• Operating Temperature: 0 °C to 50 °C (32 °F to 122°F) ; • Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) ; • Operating Humidity: 10% to 90% non-condensing ; • Storage Humidity: 5% to 90% non-condensing

Selection limits

Confirm exact hardware revision, regional model, adapter plug, firmware/controller support and required accessories before ordering. Published wireless PHY rates and maximum wired/VPN performance are conditional laboratory/standard limits, not guaranteed application throughput. PoE input powers this device; PoE output powers downstream equipment. Passive PoE is not automatically IEEE 802.3af/at/bt compatible; match voltage, polarity, pairs and available power budget.

Manufacturer operating-mode notes

*These functions require the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller.; **At least one WAN/LAN port needs to function as a LAN port.; § These functions are supported only in Standalone Mode.; △ SD-WAN function is supported only in Controller Mode.; † LAN MAC Address can be modified only in Standalone Mode.; ‡ The following web authentication methods are supported only in Controller Mode: Voucher, SMS, Radius, and External Portal Sever.; ※ For PPTP VPN and L2TP VPN, ER7406 can connect with up to 10 VPN servers. For OpenVPN, ER7406 can connect with up to 5 VPN servers.

Identifier scope

Documented model code. Regional ordering suffix and bundle are not invented and are confirmed separately.

Specification source: TP-Link ↗
Checked against documentation: 16.10.2026