Omada Gigabit AX3000 Wi-Fi 6 VPN Gateway
- AX3000 Wi-Fi 6 with 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz*
- 1× Gigabit SFP slot and 5 Gigabit RJ45 ports
- 1× USB 3.0 port (Supports USB storage, and LTE backup with LTE dongle)
- Load Balancing on up to 5 WAN ports raises the utilization rate of multi-line broadband#
- Mesh with Omada access points to extend WiFi without extra cabling and switch**
- Centralized cloud management via the web or the Omada app§
- High-security SSL/IPSec/GRE†/WireGuard/PPTP△/L2TP VPN△/OpenVPN△
- DoS/DDoS defense, IP/MAC/URL filtering, DPI, and IPS/IDS for enhanced security
-
Up to 3.0 Gbps
Wi-Fi 6 Speeds* -
Omada Mesh &
Seamless Roaming** -
6× Gigabit Ports
(including 1× SFP),
1× USB 3.0 Port -
Load Balancing on up
to 5 WAN Ports# -
Centralized Cloud Management
-
IPSec/PPTP/L2TP/
GRE†/WireGuard/
OpenVPN/SSL VPN -
SD-WAN§ for
Multi-Site
Connectivity -
Enhanced
Security
Up to 3.0 Gbps Business‑Level Wi-Fi 6 Empowers Small and Medium Business*
-
HE 160
Double the data at peak transmission
times on a single stream‡ -
OFDMA
Enables different devices to
share
one transmission stream, increasing efficiency‡ -
1024 QAM
25% more data encoded at
one time‡
-
5 GHz 2 Streams 2402 Mbps
-
2.4 GHz 2 Streams 574 Mbps
Power Up Your Business with New-Era Wi-Fi 6
Besides, thanks to seamless roaming, enjoy uninterrupted streaming when moving between gateway and APs.§
VPN Gateway
PoE Switch
Ceiling Mount AP
Traditional Wired Networking
VPN Gateway
Ceiling Mount AP
Mesh Wireless Networking
Advanced Hardware to Power Reliable, Scalable Networks
Up to 5× WAN ports with USB and SFP deliver versatile internet access. Multi-WAN Load Balancing intelligently distributes data streams according to each port’s bandwidth, maximizing multi-line broadband efficiency for faster, more reliable connectivity.#
-
Up to
5 WAN
Ports -
1× Gigabit
SFP
WAN/LAN Port -
1× USB 3.0 Port
USB LTE Dongle
Supported
High-Security and
High-Performance VPN
IPSec/PPTP/L2TP/OpenVPN/WireGuard/GRE†
/SSL VPN easily build secure VPN tunnels for secure Internet browsing, communication between different branches, or enabling remote work or study in distributed environments.
Controller
SD-WAN for Multi-Site Connectivity
Connect branch offices to headquarters in just a few clicks—no complex VPN setup required. Centralized management delivers reliable site‑to‑site connectivity and seamless scalability as the network grows.§
Intelligent Protection and Performance Secure Your Network with Ease
Intelligent DPI & Content Filtering
DPI delivers precise application identification and intelligent traffic control to keep your network at peak performance, and Content Filtering offers flexible category- and time-based rules, simplifying internet management and facilitating the enforcement of policies for employees or families.
Proactive Threat Defense
Enhance threat detection and defense with the integrated IDS/IPS engine. Benefit from continuous protection with an extensive attack prevention signature database, featuring over 4,000 regularly updated signature rules.
Always-On DoS/DDoS Protection
Automatically detect and block Denial of Service (DoS) attacks, including TCP/UDP/ICMP Flooding, Ping of Death, and related threats, ensuring uninterrupted network performance.
Software Defined Networking (SDN) with Cloud Access
Remotely manage your access points, switches, and gateways across multiple sites all from a single interface.
VPN Gateway
VPN Gateway
VPN Gateway
Easy Management with the Omada App
| SECURITY | |
|---|---|
| DPI | Deep Packet Inspection Support 2421 type Applications |
| IDS/IPS | Signature-based IPS/IDS threat detection |
| Access Control | • Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL• FQDN |
| DNS Proxy | DNSSEC, DoH, DoT, DNS Override |
| Filtering | • Web Group Filtering†• URL Filtering• Web Security† |
| ARP Inspection | • Sending GARP Packets• ARP Scanning†• IP-MAC Binding• ARP Detection |
| Attack Defense | • TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN |
| VPN | |
|---|---|
| GRE | √ (Only in Standalone Mode) |
| SSL VPN | 50 Tunnels |
| IPsec VPN | • 100 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, AES128, AES192, AES256 Encryption Algorithm• IPsec Failover• IKE v1/v2• MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS) |
| PPTP VPN | • PPTP VPN Server• PPTP VPN Client (10)△• 50 Tunnels• PPTP with MPPE Encryption |
| L2TP VPN | • L2TP VPN Server• L2TP VPN Client (10)△• 50 Tunnels• L2TP over IPSec |
| OpenVPN | • OpenVPN Server• OpenVPN Client (5)△• 55 OpenVPN Tunnels• "Certificate + Account" Mode• Full Mode |
| WireGuard VPN | √ |
| SD-WAN | √ (Only in Controller Mode) |
| PERFORMANCE | |
|---|---|
| Concurrent Session | 150,000 |
| New Sessions /Second | 5,100 |
| NAT (Static IP) | 937.2 Mbps / 936.1Mbps |
| NAT(DHCP) | 945.8 Mbps / 940.6Mbps |
| NAT(PPPoE) | 942.9 Mbps / 942.9Mbps |
| NAT (L2TP) | 837.4 Mbps / 881.5Mbps |
| NAT (PPTP) | 803.0 Mbps / 910.5 Mbps |
| 66 Byte Packet Forwarding Rate | 1,453,489 pps / 1,453,488 pps |
| 1,518 Byte Packet forwarding rate | 81,274 pps / 91,275 pps |
| IPsec VPN Throughput | • ESP-SHA1-AES256: 646.9Mbps• ESP-SHA256-AES256: 642.8Mbps• ESP-SHA384-AES256: 648.9Mbps• ESP-SHA512-AES256: 658.4 Mbps |
| GRE | • Unencrypted: 1115 Mbps• Encrypted: 641 Mbps |
| WireGuard VPN | 393.5Mbps |
| OpenVPN | 129.3Mbps |
| L2TP VPN Throughput | • Unencrypted: 1034.0 Mbps• Encrypted: 570.0 Mbps |
| PPTP VPN Throughput | • Unencrypted: 1165.0 Mbps• Encrypted: 209.0 Mbps |
| SSL VPN Throughput | 126.7Mbps |
| DPI Throughput | • TCP: 933 Mbps• UDP: 927 Mbps |
| IPS Throughput | • TCP: 939 Mbps• UDP: 937 Mbps |
| Management Features | |
|---|---|
| Omada App | Yes |
| Centralized Management | • Omada Cloud-Based Controller• Omada Hardware Controller• Omada Software Controller |
| Cloud Access | Yes. Require the use of Omada Cloud-Based Controller. |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) |
| Maintenance | • Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3• Diagnostics (Ping & Traceroute)• NTP Synchronize†• Port Mirroring• CLI (only in Standalone Mode)• Syslog Support |
| Zero-Touch Provisioning | Yes. Require the use of Omada Cloud-Based Controller. |
| Management Features | • Automatic Device Discovery§• Intelligent Network Monitoring§• Abnormal Event Warnings§• Unified Configuration§• Reboot Schedule• Captive Portal Configuration§• ZTP (Zero-Touch Provisioning) |
| HARDWARE FEATURES | |
|---|---|
| Standards and Protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP, 802.11a/b/g/n/ac/ax |
| Interface | • 1 Gigabit SFP WAN/LAN Port• 1 Gigabit WAN Port• 4 Gigabit LAN/WAN Ports• 1 USB3.0 (supports USB LTE dongle and USB Storage) |
| Button | Reset Button |
| Power Supply | 12VDC / 2A Power Adapter |
| Wi-Fi Frequency & Signal Rate | • 2.4 GHz: 574 Mbps• 5 GHz: 2402 Mbps (HE160) |
| Flash | 128 MB NAND |
| DRAM | 512 MB DDR4 |
| LED | SYS, WLAN, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act) |
| Dimensions ( W x D x H ) | 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm) (Antenna dimensions are notincluded) |
| Antenna | • 2.4 GHz: 2x 3 dBi dual-band detachable antennas• 5 GHz: 3x 4.5 dBi dual-band detachable antennas |
| Surge Protection | 4 KV surge protection |
| Mounting | Desktop/ Wall-mounting/Rackmount (rackmount kit not provided) |
| Max. Power Consumption | • EU: 16.8W (with USB 3.0 connected), 11.8W (without USB 3.0 connected)• US: 22.7W (with USB 3.0 connected) 18.2W (without USB 3.0 connected) |
| WIRELESS FEATURES | |
|---|---|
| Advanced Features | • Enable/Disable Wireless Radio & SSID Broadcast• Automatic Channel Selection Algorithm• Transmit Power Control (Adjust transmit Power on dBm )• Seamless Roaming• Mesh (with EAP that supports Mesh)• OFDMA• Beamforming• MU-MIMO• Wireless Encryption: WPA/WPA2/WPA3 Personal, WPA/WPA2/WPA3 Enterprise |
| Guest Network | Support |
| BASIC FUNCTIONS | |
|---|---|
| LAN DNS | √ |
| WAN Connection Type | • Static IP• Dynamic IP• PPPoE (supports MRU Configuration)• PPTP• L2TP |
| MAC Clone | Modify WAN Address |
| DHCP | • DHCP Server• DHCPv6 PD Server (only in Standalone Mode)• DHCP Options Customization• DHCP Address Reservation• Multi-IP Interfaces• Multi-Net DHCP• WAN DHCP 60 |
| Stateful ACL | √ |
| Quality of Service | √ |
| Bridge VLAN | √ |
| mDNS Repeater | √ |
| IPv6 | StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode |
| VLAN | 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
| Advanced Features | |
|---|---|
| Advanced Routing | • Static Routing• Policy Routing• RIP†• OSPF† |
| Bandwidth Control | IP-Based Bandwidth Control |
| Load Balance | • Intelligent Load Balance• Application Optimized Routing• Link Backup(Timing, Failover)• Online Detection |
| NAT | One-to-One NAT Multi-Net NAT Virtual Server Port Triggering† NAT-DMZ FTP/H.323/SIP/IPSec/PPTP ALG UPnP Disable NAT |
| Session Limit | IP-Based Session Limit |
| AUTHENTICATION | |
|---|---|
| Web Authentication | • No Authentication• Simple Password• Hotspot (Local User / Voucher§ / SMS§ / Radius§)• External Radius Sever• External Portal Sever§• LDAP† |
| OTHER | |
|---|---|
| Network Services Enabled by Default | Web ServerManage and configure device through web (HTTP/HTTPS)• Port: 80/443 Protocol: TCP_____________________________________________________TDP ServerDevice discovery• Port: 20003 Protocol: UDP_____________________________________________________DHCP ServerHandle DHCP packets• Port: 67 Protocol: UDP_____________________________________________________DNSHandle DNS packets• Port: 53 Protocol: TCP/UDP |
| OTHERS | |
|---|---|
| Certification | CE, FCC, RoHS |
| Package Content | • ER706W• Power Adapter• Quick Installation Guide |
| System Requirements | • Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11• MAC OS, NetWare, UNIX or Linux |
| Environment | • Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F)• Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F)• Operating Humidity: 10% to 90% non-condensing• Storage Humidity: 5% to 90% non-condensing |
†These functions are supported only in Standalone Mode.
§These functions are supported only in Controller Mode.
#At least one WAN/LAN port needs to function as a LAN port.
△For PPTP VPN and L2TP VPN, ER706W can connect with up to 10 VPN servers. For OpenVPN, ER706W can connect withup to 5 VPN servers.
*Maximum wireless signal rates are the physical rates derived from IEEE Standard 802.11 specifications. Actual wireless data throughput and coverage are not guaranteed and will vary.
**Omada Mesh Technology requires the use of EAPs that support mesh functionality. Please refer to https://www.omadanetworks.com/en/omada-mesh/product-list/ to confirm which Omada EAPs are compatible with Omada Mesh. Additionally, ER706W also supports standalone Mesh. Please refer to https://www.tp-link.com/en/standalonemesh/product-list/ to confirm the models that support standalone Mesh.
‡Use of WiFi 6 (802.11ax) and its features, including OFDMA, HE160, and 1024-QAM, require clients to support the corresponding features. The 160 MHz bandwidth is only available on the 5 GHz band. It may be unavailable in some regions/countries due to regulatory restrictions.