TP-Link Omada 3-in-1 Gigabit VPN Gateway · ER7212PC

Код модели

ER7212PC

Обозначение производителя

Omada 3-in-1 Gigabit VPN Gateway

Версия оборудования в источнике

V2.20

IDS/IPS

Signature-based IPS/IDS threat detection

DPI

Deep Packet Inspection; Support 2421 type Applications

ACL

• Source/Destination IP Based ACL; • Stateful ACL; • IPv4/IPv6 ACL; • National Based ACL; • FQDN

DNS Proxy

DNSSEC, DoH, DoT, DNS Override

Filtering

URL Categoroies and URLs Filtering

Attack Defense

• TCP/UDP/ICMP Flood Defense; • Block TCP Scan (Stealth FIN/Xmas/Null); • Block Ping from WAN

ARP Inspection

• Sending GARP Packets; • IP-MAC Binding; • ARP Detection

SSL VPN

80 Tunnels

IPsec VPN

• 20 IPSec VPN Tunnels; • LAN-to-LAN, Client-to-LAN; • Main, Aggressive Negotiation Mode; • DES, 3DES, AES128, AES192, AES256 Encryption Algorithm; • IPsec Failover; • IKE v1/v2; • MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm ; • NAT Traversal (NAT-T); • Dead Peer Detection (DPD); • Perfect Forward Secrecy (PFS)

PPTP VPN

• PPTP VPN Server; • PPTP VPN Client (10); • 16 Tunnels; • PPTP with MPPE Encryption

L2TP VPN

• L2TP VPN Server; • L2TP VPN Client (10); • 16 Tunnels; • L2TP over IPSec

OpenVPN

• OpenVPN Server; • OpenVPN Client (10); • 16 OpenVPN Tunnels; • "Certificate + Account" Mode ; • Full Mode

WireGuard VPN

√

Standards and Protocols

• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q; • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, SNMP, LLDP

Интерфейс

• 2 Gigabit SFP WAN/LAN ports ** ; • 1 Gigabit WAN port; • 1 Gigabit LAN/WAN port; • 8 Gigabit LAN ports

Network Media

• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)；EIA/TIA-568 100Ω STP (Max 100 m); • 100BASE-TX: UTP category 5, 5e cable (Max 100 m)；EIA/TIA-568 100Ω STP (Max 100 m); • 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)

Fan Quantity

Fanless

Button

Reset Button

Power Supply

53.5V DC/2.43A Adapter

PoE Budget

8× PoE+ Output Ports, 110 W PoE Budget

Flash

32Mbit Nor+8GB eMMC

DRAM

2 GB DDR4

Dimensions ( W x D x H )

8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm)

Surge Protection

6 kV

Protection

6kV surge protection

Enclosure

Steel

Mounting

• Desktop; • Wall-mount; • Rack-mount (rackmount kit sold separately)

Max. Power Consumption

131 W (110 V/60 Hz) (With 110 W PD connected)

Concurrent Session

50,000

New Sessions /Second

3,800

NAT (Static IP)

940.2 Mbps / 947.5 Mbps

NAT(DHCP)

947.8 Mbps / 948.6 Mbps

NAT(PPPoE)

943.1 Mbps / 942.6 Mbps

NAT (L2TP)

898.4 Mbps / 915.8 Mbps

NAT (PPTP)

909.7 Mbps / 912.8 Mbps

66 Byte Packet Forwarding Rate

1,453,459 pps / 1,453,459 pps

1,518 Byte Packet forwarding rate

81,272 pps / 81,272 pps

IPsec VPN Throughput

• ESP-SHA1-AES256: 984.7 Mbps, ESP-SHA2-AES256: 990.5 Mbps, ; • ESP-SHA384-AES256: 983.9 Mbps, ESP-SHA512-AES256: 985.8 Mbps

PERFORMANCE / WireGuard VPN

576.2 Mbps

PERFORMANCE / OpenVPN

233.1 Mbps

L2TP VPN Throughput

• Unencrypted: 1,273.9 Mbps ; • Encrypted: 851.8 Mbps

PPTP VPN Throughput

• Unencrypted: 1293.5 Mbps; • Encrypted: 297.1 Mbps

SSL VPN Throughput

243.1 Mbps

DPI Throughput

• TCP: 942 Mbps; • UDP: 940 Mbps

IPS Throughput

• TCP: 939 Mbps; • UDP: 936 Mbps

Omada App

Yes.

Centralized Management

Management of up to 24 Omada devices（2 gateway, 22 switches and EAPs in total）

Cloud Access

Yes.

Service

Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)

Maintenance

• Web Management Interface; • Remote Management; • Export & Import Configuration; • SNMP v1/v2c/v3; • Diagnostics (Ping & Traceroute); • NTP Synchronize; • Port Mirroring; • Syslog Support

Zero-Touch Provisioning

-

Management Features

• Automatic Device Discovery; • Intelligent Network Monitoring; • Abnormal Event Warnings; • Unified Configuration; • Reboot Schedule; • Captive Portal Configuration; • OpenAPI

WAN Connection Type

• Static IP; • Dynamic IP; • PPPoE; • PPTP; • L2TP

MAC Clone

Modify WAN Address

DHCP

• DHCP Server; • DHCP Options Customization; • DHCP Address Reservation; • Multi-IP Interfaces; • Multi-Net DHCP; • WAN DHCP 60

Quality of Service

√

Bridge VLAN

√

mDNS Repeater

√

IPv6

StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode

VLAN

802.1Q VLAN

IPTV

IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

Advanced Routing

• Static Routing; • Policy Routing

Bandwidth Control

IP-based Bandwidth Control

Load Balance

• Intelligent Load Balance; • Application Optimized Routing; • Link Backup; • Online Detection

NAT

• Multi-Net NAT; • One-to-One NAT; • Port Forwarding; • NAT-DMZ; • FTP/H.323/SIP/IPSec/PPTP ALG; • UPnP; • Disable NAT

Session Limit

IP-based Session Limit

Web Authentication

• No Authentication; • Simple Password; • Hotspot (Local User / Voucher/ SMS / Radius); • External Radius Sever; • External Portal Sever

System Requirements

• Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11; • MAC OS, NetWare, UNIX or Linux

Environment

• Operating Temperature: -5 °C to 45 °C; • Storage Temperature: -40 °C to 70 °C; • Operating Humidity: 10% to 90% non-condensing; • Storage Humidity: 5% to 90% non-condensing

Ограничения подбора

Confirm exact hardware revision, regional model, adapter plug, firmware/controller support and required accessories before ordering. Published wireless PHY rates and maximum wired/VPN performance are conditional laboratory/standard limits, not guaranteed application throughput. PoE input powers this device; PoE output powers downstream equipment. Passive PoE is not automatically IEEE 802.3af/at/bt compatible; match voltage, polarity, pairs and available power budget.

Примечания к режимам из документации

§ ER7212PC can work as a VPN client and can connect with up to 10 VPN servers.; △ Actual management scale of the Omada Software Controller depends on the PC/server’s hardware specifications.; ‡ DPI is supported by ER7212PC V2 and above.; * PoE budget calculations are based on laboratory testing. Actual PoE power budget is not guaranteed and will vary as a result of client limitations and environmental factors.; ** The SFP port of ER7212PC does not support direct-attach cable connection, including SM5220-1M, SM5220-3M, etc.

Тип идентификатора

Код модели из документации. Региональный заказной суффикс и комплектация не выдумываются и согласуются отдельно.

Источник характеристик: TP-Link ↗
Проверено по документации: 16.10.2026