TP-LINK ER7412-M2 Omada Multi-Gigabit VPN Router

Security – Access Control

• Source/Destination IP‑Based ACL
• Stateful ACL
• IPv4/IPv6 ACL
• Location‑Based ACL

Security – Filtering

• WEB Group Filtering§
• URL Filtering
• Web Security§

Security – ARP Inspection

• Sending GARP Packets§
• ARP Scanning§
• IP‑MAC Binding§

Security – Attack Defense

• TCP/UDP/ICMP Flood Defense
• Block TCP Scan (Stealth FIN/Xmas/Null)
• Block Ping from WAN

Hardware Standards & Protocols

• IEEE 802.3/802.3u/802.3ab/802.3z/802.3x/802.1q
• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP

Interface

• 2 × 2.5 G RJ45 WAN/LAN Ports
• 2 × Gigabit SFP WAN/LAN Ports
• 8 × Gigabit RJ45 WAN/LAN Ports
• 1 × RJ45 Console Port
• 1 × USB 3.0 Port (USB storage, LTE backup)

Network Media

• 10BASE‑T: UTP Cat 3/4/5 (≤100 m), STP 100 Ω (≤100 m)
• 100BASE‑TX: UTP Cat 5/5e (≤100 m), STP 100 Ω (≤100 m)
• 1000BASE‑T: UTP Cat 5/5e/6 (≤100 m)
• 2500BASE‑T: UTP Cat 5e/6 (≤100 m)

Button

Reset Button

Power Supply

100–240 VAC, 50/60 Hz

Flash & DRAM

128 MB NAND Flash; 1 GB DDR4 RAM

Dimensions (W × D × H)

11.6 × 7.1 × 1.7 in (294 × 180 × 44 mm)

Protection & Enclosure

4 kV surge protection; Steel enclosure

Mounting

Desktop or rackmountable

Max. Power Consumption

18.5 W (with USB 3.0 connected)

Performance – IPS Throughput

523 Mbps

Performance – DPI Throughput

2.2 Gbps

Performance – GRE VPN

• Unencrypted: 1,153 Mbps
• Encrypted: 559.2 Mbps

Performance – WireGuard VPN

771.6 Mbps

Performance – Concurrent Sessions

1,000,000

Performance – New Sessions/sec

7,000

Performance – NAT Throughput

• Static IP: 2,345.7 / 2,351.2 Mbps
• DHCP: 2,353.4 / 2,353.4 Mbps
• PPPoE: 2,336.5 / 2,336.1 Mbps
• L2TP: 1,937.5 / 1,761.8 Mbps
• PPTP: 1,757.5 / 2,011.3 Mbps

Performance – IPsec VPN

• ESP‑SHA1‑AES256: 1,125.6 Mbps
• ESP‑SHA256‑AES256: 1,133.1 Mbps
• ESP‑SHA384‑AES256: 1,126.6 Mbps
• ESP‑SHA512‑AES256: 1,132.8 Mbps

Performance – OpenVPN

UDP: 266.2 Mbps

Performance – L2TP VPN

• Unencrypted: 2,724.5 Mbps
• Encrypted: 1,018.4 Mbps

Performance – PPTP VPN

• Unencrypted: 3,035 Mbps
• Encrypted: 534.6 Mbps

Performance – SSL VPN

263.1 Mbps

Performance – Packet Forwarding

• 66 B: 1,833 / 1,835 Mbps
• 1,518 B: 2,461 / 2,461 Mbps

Basic Functions – WAN Connection

Static IP, Dynamic IP, PPPoE (MRU configurable), PPTP, L2TP, Mobile broadband (USB 4G/3G backup)

Basic Functions – MAC Clone

Modify WAN/LAN MAC Address†

Basic Functions – DHCP

DHCP Server; DHCPv6 PD Server (standalone); DHCP options customization; Address reservation; Multi‑IP & Multi‑Net DHCP

Basic Functions – IPv6

Static IP, SLAAC, DHCPv6, PPPoE, 6to4 Tunnel, PassThrough, Non‑Address Mode

Basic Functions – VLAN & IPTV

802.1Q VLAN; IGMP v2/v3 proxy, custom, bridge modes

Advanced Routing

Static routing; Policy routing; RIP & OSPF (standalone)

Bandwidth & Load Balance

IP/Port‑based bandwidth control; Intelligent load balance; Application‑optimized routing; Link backup (timing§, failover); Online detection

NAT & ALG

One‑to‑one NAT§; Multi‑Net NAT; Virtual server; Port triggering§; NAT‑DMZ; ALG for FTP/H.323/SIP/IPSec/PPTP; UPnP

Session Limit

IP‑based session limit

VPN – GRE

Standalone mode only

VPN – SSL

Up to 80 tunnels

VPN – IPsec

• 150 tunnels; LAN‑to‑LAN, Client‑to‑LAN; Main/Aggressive modes; DES/3DES/AES128/192/256; Failover; IKEv1/v2; MD5/SHA1/SHA2‑384/512; NAT‑T; DPD; PFS

VPN – PPTP

• Server; Client (15)**; 150 tunnels; MPPE encryption

VPN – L2TP

• Server; Client (15)**; 150 tunnels; L2TP over IPsec

VPN – OpenVPN

• Server; Client (11)**; 121 tunnels; “Certificate + Account” & Full modes

VPN – WireGuard

20 tunnels

Authentication – Web

• None; Simple password*; Hotspot (Local User/Voucher*/SMS*/RADIUS*); External RADIUS; External portal*; LDAP

Management – Omada App

Yes (requires Hardware/Cloud/Software Controller)

Management – Centralized

Omada Cloud‑Based, Hardware, or Software Controller

Management – Cloud Access

Yes (via Hardware/Cloud/Software Controller)

Service

Dynamic DNS: DynDNS, No‑IP, PeanutHull, Comexe, custom

Maintenance & Tools

Web interface; Remote management; Export/import config; SNMP v1/v2c/v3*; Ping & traceroute§; NTP sync§; Port mirroring; CLI (standalone); Syslog; Automatic discovery*, batch config*, batch firmware*, network monitoring*, event warnings*, unified config*, reboot schedule*

Others

Certification: CE, FCC
Package: ER7412‑M2, Power cord, Quick guide, Rackmount kit, Console cord
Requirements: Windows 98SE–11, macOS, NetWare, UNIX, Linux
Environment: Operating 0–45 ℃ (32–113 ℉); Storage –40–70 ℃ (–40–158 ℉); Humidity Operating 10–90 % RH; Storage 5–90 % RH (non‑condensing)