Omada VPN Gateway with 10G Ports
- 2× 10G SFP+ Slots (1× WAN, 1× WAN/LAN) & 9× Gigabit Ports (1× SFP WAN/LAN, 8× RJ45 WAN/LAN)
- 2× USB 3.0 Ports (One Supports LTE Backup with LTE Dongle), 1× RJ45 Console Port
- Load Balancing on up to 10 WAN Ports
- 1 + 1 Redundant Power Supply
- IPSec/PPTP/L2TP/OpenVPN/GRE△/ WireGuard/SSL VPN
- DPI, IPS/IDS, DoS/DDoS Protection, IP/MAC/URL/Content Filtering
- SD-WAN for Multi-Site Connectivity‡
- Centralized Cloud Management via Omada App or Web†
- 
	 Quad-Core 
 2.2 GHz CPU
- 
	 2× 10G SFP+ & 
 1× Gigabit SFP Slots
- 
	 Up to 
 10× WAN Ports
- 
	 2× USB 3.0 
 Ports
- 
	 Centralized Cloud 
 Management†
- 
	 High-Capacity 
 Performance
- 
	 IPSec/PPTP/L2TP/ 
 OpenVPN/WireGuard
 /GRE△ /SSL VPN
- 
	 Enhanced 
 Security
High-Capacity Performance with Quad-Core 2.2 GHz CPU
Manage your entire business network with the right amount of processing power. Dual redundant power supplies further ensure carrier-class reliability for enterprise networking.
Dual Redundant Power Supplies
Quad-Core 2.2 GHz CPU
NAT Throughput up to 10 Gbps
Maximize the 10G Broadband with Omada Enterprise Gateway
Maximized 10G Broadband with the Omada Enterprise Gateway. Build your lightning-fast network with Omada ER8411 — an enterprise VPN gateway with 10G ports. It surpasses the need for high-speed, reliable, and safe enterprise networks, ideal for large-scale deployments such as offices, schools, and hotels.
1× 10G SFP+ WAN/LAN Port
1× 10G SFP+ WAN Port
10G speed
Easily Build a Whole 10G Multi-gigabit Network
 
10G Gateway
Ensures the fast way
Full 10G Fiber Switch
Lightning-fast aggregation switching
 Switch with Switch with
 10G Uplink
 PoE Switch PoE Switch
 with 10G Uplink
 Wi-Fi 7/6 APs Wi-Fi 7/6 APs
 with 10G/2.5G Ports
10× WAN Ports & One USB WAN for Mobile Broadband
Load Balancing up to
10× WAN Ports
2× WAN Ports up to
10G
1× USB 3.0 Ports for
LTE WAN Backup

High-Security and High-Performance VPN
IPSec/PPTP/L2TP/OpenVPN/WireGuard/GRE△ /SSL VPN easily build secure VPN tunnels for secure Internet browsing, communication between different branches, or enabling remote work or study from home.
Headquarters
One-click Auto
Subsidiary
Omada Controller
IPSec VPN
Smart Connectivity & Intelligent Protection Optimize Your Network with Ease
  - Intelligent DPI & Content Filtering - DPI delivers precise application identification and intelligent traffic control to keep your network at peak performance, and Content Filtering offers flexible category- and time-based rules, simplifying internet management and facilitating the enforcement of policies for employees or families. 
  - SD-WAN for Multi-Site Connectivity - Connect branch offices to headquarters in just a few clicks—no complex VPN setup required. Centralized management delivers reliable site-to-site connectivity and seamless scalability as the network grows.‡ 
  - Always-On DoS/DDoS Protection - Automatically detects and blocks Denial of Service (DoS) attacks such as TCP/UDP/ICMP Flooding, Ping of Death, and other related threats. 
Empowering Businesses with Reliable Omada SDN Solutions
Omada’s Software-Defined Networking (SDN) solution seamlessly integrates access points (APs), managed switches, and gateways, enabling 100% centralized cloud management for a highly scalable network.
On-Premises Controllers
Or
Or
Omada Central
Hardware
Software
Ceiling Mount
AccessPoint
Wall
Plate AP
Omada
Outdoor AP
Omada
POE Switch
Internet
Cloud Access
Omada App
Web Browser


| SECURITY | |
|---|---|
| DPI | • Deep Packet Inspection• Support 2421 type Applications• Max Throughput (Upload / Download) 942.7Mbps/937.3Mbps | 
| IDS/IPS | √ | 
| ACL | • Source/Destination IP Based ACL • Stateful ACL• IPv4/IPv6 ACL• National Based ACL• FQDN | 
| Filtering | • WEB Group Filtering△• URL Categories and URLs Filtering• Web Security△ | 
| ARP Inspection | • Sending GARP Packets• ARP Scanning• IP-MAC Binding• ARP Detection | 
| Attack Defense | • TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN | 
| HARDWARE FEATURES | |
|---|---|
| Interface | • 2× 10GE SFP+ Ports (1× WAN, 1× WAN/LAN)• 1× 1GE SFP WAN/LAN Ports• 8× 1GE RJ45 WAN/LAN Ports• 1× RJ45 Console Port• 2× USB 3.0 Ports (One supports LTE backup with LTE dongle) | 
| Network Media | • 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 100BASE-TX: UTP category 5, 5e cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 1000BASE-T: UTP category 5e, 6 cable (Max 100 m) | 
| Fan Quantity | 2 | 
| Button | Reset Button | 
| Power Supply | Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz) | 
| Flash | 4MB SPI NOR + 256 MB NAND | 
| DRAM | 4 GB DDR4 | 
| LED | PWR, SYS, WAN, LAN, USB, FAN | 
| Dimensions ( W x D x H ) | 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm) | 
| Protection | 4 kV surge protection | 
| Enclosure | Steel | 
| Mounting | Rack Mountable | 
| Max. Power Consumption | • 26.36 W (with USB 3.0 connected)• 19.12 W (without USB 3.0 connected) | 
| PERFORMANCE | |
|---|---|
| IPS Throughput | TCP: 4924 Mbps;UDP: 4521 Mbps | 
| DPI Throughput | TCP: 5524 Mbps; UDP: 3547 Mbps | 
| WireGuard VPN | 1411 Mbps | 
| Concurrent Session | 2,300,000 | 
| New Sessions /Second | 20,000 | 
| NAT (Static IP) | • Upload: 9445.82 Mbps• Download: 9449.26 Mbps | 
| NAT(DHCP) | • Upload: 9426.83 Mbps• Download: 9426.20 Mbps | 
| NAT(PPPoE) | • Upload: 9413.96 Mbps• Download: 9102.01 Mbps | 
| NAT (L2TP) | • Upload: 9064.66 Mbps• Download: 8587.57 Mbps | 
| NAT (PPTP) | • Upload: 8712.11 Mbps• Download: 8505.61 Mbps | 
| 64 Byte Packet Forwarding Rate | • Upload: 2,109,375 pps• Download: 2,011,719 pps | 
| IPsec VPN Throughput | • ESP-SHA1-AES256: 3099.4 Mbps• ESP-SHA256-AES256: 2928.4 Mbps• ESP-SHA384-AES256: 2935.7 Mbps• ESP-SHA512-AES256: 2878 Mbps | 
| OpenVPN | 1043 Mbps | 
| L2TP VPN Throughput | • Unencrypted: 10497 Mbp• Encrypted: 3178.5 Mbps | 
| SSL VPN Throughput | 1006 Mbps | 
| 1,518 Byte Packet forwarding rate | • Upload: 820,982 pps• Download: 820,982 pps | 
| BASIC FUNCTIONS | |
|---|---|
| WAN Connection Type | • Static/Dynamic IP• PPPoE• PPTP• L2TP• 6to4 Tunnel• Pass-Through• Mobile Broadband: 4G/3G modem for backup via USB port | 
| MAC Clone | Modify WAN/LAN MAC Address△ | 
| DHCP | • DHCP Server/Client• DHCP Address Reservation• Multi-net DHCP• Multi-IP Interfaces• WAN DHCP 60 | 
| IPv6 | WAN Connection | 
| VLAN | 802.1Q VLAN | 
| IPTV | IGMP v2/v3 Proxy | 
| Advanced Features | |
|---|---|
| Advanced Routing | • Static Routing• Policy Routing• RIP△• OSPF△ | 
| Bandwidth Control | • IP/Port-based Bandwidth Control• Guarantee & Limited Bandwidth | 
| Load Balance | • Intelligent Load Balance• Application Optimized Routing• Link Backup (Timing△, Failover)• Online Detection | 
| NAT | • One-to-One NAT△• Multi-Net NAT• Port Forwarding• Port Triggering△• NAT-DMZ• FTP/H.323/SIP/IPSec/PPTP ALG• UPnP• Disable NAT | 
| Session Limit | IP-based Session Limit | 
| VPN | |
|---|---|
| GRE | √ (Only in Standalone mode) | 
| SD-WAN | √ (Only in Controller mode) | 
| SSL VPN | • SSL VPN Server• 500 SSL VPN Tunnels | 
| IPsec VPN | • 300 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, SHA1, SHA256, SHA384, SHA512, AES128, AES192, AES256 Encryption Algorithm• IKE v1/v2• MD5, SHA1 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS) | 
| PPTP VPN | • PPTP VPN Server• PPTP VPN Client (32)*• 300 Tunnels (Shared with L2TP)• PPTP with MPPE Encryption | 
| L2TP VPN | • L2TP VPN Server• L2TP VPN Client (32)*• 300 Tunnels (Shared with PPTP)• L2TP over IPSec | 
| OpenVPN | • OpenVPN Server• OpenVPN Client (10)*• 110 OpenVPN Tunnels | 
| WireGuard VPN | √ | 
| AUTHENTICATION | |
|---|---|
| Web Authentication | • No Authentication• Simple Password‡• Hotspot(Local User / Voucher‡ / SMS‡ / Radius‡)• External Radius Sever• External Portal Sever‡ | 
| Management Features | |
|---|---|
| Omada App | Yes. Requiring the use of an Omada Controller. | 
| Centralized Management | • Omada Hardware Controller• Omada Software Controller• Omada Central (Cloud-Based) | 
| Cloud Access | Yes. Requiring the use of an Omada Controller. | 
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) | 
| Maintenance | • Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3• Diagnostics (Ping & Traceroute)• NTP Synchronize△• Port Mirroring• Syslog Support | 
| Management Features | • Automatic Device Discovery• Intelligent Network Monitoring• Abnormal Event Warnings• Unified Configuration• Reboot Schedule• Captive Portal Configuration• ZTP (Zero-Touch Provisioning)† | 
| OTHERS | |
|---|---|
| Certification | CE, FCC, RoHS | 
| Package Content | • Omada VPN Gateway with 10G Ports ER8411• Power Cord• Rackmount Kit• RJ45 Console Cord• Quick Installation Guide | 
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux | 
| Environment | • Operating Temperature: 0–40 ℃ (32–104 ℉);• Storage Temperature: -40–70 ℃ (-40–158 ℉)• Operating Humidity: 10–90% RH non-condensing• Storage Humidity: 5–90% RH non-condensing | 
†These features require the use of an Omada controller.
△These features are supported only in Standalone Mode
‡These features are supported only in Controller Mode
*ER8411 can work as a VPN client and can connect with up to 32 PPTP/L2TP VPN servers and 10 OpenVPN servers.
 
             
                
             
                
             
                
             
                
             
            
           
            
           
            
           
            
          