TP-LINK ER707-M2 Omada Multi-Gigabit VPN Router

Security – Access Control

Source/Destination IP‑Based ACL

Security – Filtering

• WEB Group Filtering§
• URL Filtering
• Web Security§

Security – ARP Inspection

• Sending GARP Packets§
• ARP Scanning§
• IP‑MAC Binding§

Security – Attack Defense

• TCP/UDP/ICMP Flood Defense
• Block TCP Scan (Stealth FIN/Xmas/Null)
• Block Ping from WAN

Hardware – Standards & Protocols

• IEEE 802.3 / 802.3u / 802.3ab / 802.3z / 802.3x / 802.1q
• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP

Hardware – Interface

• 1 × 2.5 G RJ45 WAN
• 1 × 2.5 G RJ45 WAN/LAN
• 1 × Gigabit SFP WAN/LAN
• 4 × Gigabit RJ45 WAN/LAN
• 1 × USB 2.0 (storage, LTE backup)

Hardware – Network Media

• 10BASE‑T: UTP Cat 3/4/5 or STP 100 Ω (≤ 100 m)
• 100BASE‑TX: UTP Cat 5/5e or STP 100 Ω (≤ 100 m)
• 1000BASE‑T: UTP Cat 5/5e/6 (≤ 100 m)
• 2500BASE‑T: UTP Cat 5e/6 (≤ 100 m)

Hardware – Button

Reset Button

Hardware – Power & Supply

12 V / 1.5 A DC Adapter; no PoE

Hardware – Memory

128 MB NAND Flash; 1 GB DDR4

Hardware – LEDs

PWR, SYS, SFP, USB, WAN (Speed, Link/Act), LAN (Speed, Link/Act)

Hardware – Dimensions

8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm)

Hardware – Protection & Enclosure

4 kV surge protection; steel enclosure

Hardware – Mounting

Desktop or wall mounting

Hardware – Power Consumption

14.2 W (USB 2.0 connected); 7.1 W (without USB)

Performance – IPS Throughput

TCP: 208 Mbps; UDP: 161 Mbps

Performance – DPI Throughput

TCP: 1,823 Mbps; UDP: 1,272 Mbps

Performance – WireGuard VPN

343 Mbps

Performance – Sessions

Concurrent: 500,000; New/sec: 6,000

Performance – NAT

Static IP: 2,365.17 / 2,364.45 Mbps
DHCP: 2,364.45 / 2,366.04 Mbps
PPPoE: 2,347.14 / 2,348.29 Mbps
L2TP: 1,308.86 / 974.10 Mbps
PPTP: 1,236.27 / 1,280.99 Mbps

Performance – IPsec VPN

• ESP‑SHA1‑AES256: 673.3 Mbps
• ESP‑SHA256‑AES256: 650.2 Mbps
• ESP‑SHA384‑AES256: 629.3 Mbps
• ESP‑SHA512‑AES256: 633.8 Mbps

Performance – L2TP VPN

Unencrypted: 1,243.7 Mbps; Encrypted: 561.0 Mbps

Performance – SSL VPN

132.24 Mbps

Performance – Packet Forwarding

66 B: 1,832.69 / 1,741.84 Mbps;
1,518 B: 2,461.18 / 2,457.32 Mbps

Basic – WAN Connection

IPv4: Static/Dynamic/PPPoE/PPTP/L2TP; IPv6: PPP, DHCPv6, Static, 6in4, Pass‑Through; Mobile 4G/3G via USB

Basic – MAC Clone

Modify WAN/LAN MAC Address†

Basic – DHCP

DHCP Server; DHCPv6 PD (standalone); Options customization; Address reservation; Multi‑IP/Multi‑Net*

Basic – VLAN & IPTV

802.1Q VLAN; IGMP v2/v3 Proxy, Custom, Bridge modes

Advanced – Routing

Static & Policy routing; RIP/OSPF (standalone)

Advanced – Bandwidth & Load Balance

IP/Port‑based control; Guarantee & limit; Intelligent load balance; App‑optimized routing; Link backup (timing§, failover); Online detection

Advanced – NAT & ALG

One‑to‑one NAT§; Multi‑Net NAT; Virtual server; Port triggering§; NAT‑DMZ; FTP/H.323/SIP/IPSec/PPTP ALG; UPnP

Advanced – Session Limit

IP‑based session limit

VPN – SD‑WAN

√ (controller mode only)

VPN – IPsec

100 tunnels; LAN‑to‑LAN & client‑to‑LAN; DES/3DES/SHA1/AES128/192/256; IKE v1/v2; MD5/SHA1/SHA2‑384/512; NAT‑T; DPD; PFS

VPN – PPTP

Server; 12 clients; 60 tunnels (shared with L2TP); MPPE encryption

VPN – L2TP

Server; 12 clients; 60 tunnels (shared with PPTP); L2TP over IPSec

VPN – OpenVPN

Server; 6 clients; 66 tunnels*

VPN – WireGuard

20 tunnels

Authentication – Web

None; Simple password*; Hotspot (Local/Voucher*/SMS*/RADIUS*); External RADIUS; External portal*; LDAP

Management – Omada App

Yes (requires OC300, OC200, Cloud or Software Controller)

Management – Centralized

Omada Cloud‑Based, Hardware, or Software Controller

Management – Cloud Access

Yes (requires OC300, OC200, Cloud or Software Controller)

Service

Dynamic DNS (DynDNS, No‑IP, Pea­nutHull, Comexe, custom)

Maintenance & Tools

Web UI; Remote management; Export/import config; SNMP v1/v2c/v3*; Diagnostics (Ping & traceroute§); NTP sync§; Port mirroring; CLI (standalone); Syslog; Auto discovery; Network monitoring; Event warnings; Unified config; Reboot schedule; Captive portal config; ZTP

Others

Certification: CE, FCC, RoHS
Package: ER707‑M2, Power adapter, Quick guide
Requirements: Windows 98SE–11, macOS, NetWare, UNIX, Linux
Environment: Operating 0–40 ℃ (32–104 ℉); Storage –40–70 ℃ (–40–158 ℉); Humidity 10–90 %/5–90 % RH non‑condensing