Omada Gigabit AX3000 Wi-Fi 6 VPN Gateway
- AX3000 Wi-Fi 6 with 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz*
 - 1× Gigabit SFP slot and 5 Gigabit RJ45 ports
 - 1× USB 3.0 port (Supports USB storage, and LTE backup with LTE dongle)
 - Load Balancing on up to 5 WAN ports raises the utilization rate of multi-line broadband
 - Mesh with Omada access points to extend WiFi without extra cabling and switch**
 - Centralized cloud management via the web or the Omada app§
 - High-security SSL/IPSec/GRE†/WireGuard/PPTP△/L2TP VPN△/OpenVPN△
 - DoS/DDoS defense, IP/MAC/URL filtering, DPI, and IPS/IDS for enhanced security
 


| SECURITY | |
|---|---|
| DPI | Deep Packet Inspection Support 2421 type Applications | 
| IDS/IPS | Signature-based IPS/IDS threat detection | 
| Access Control | Source/Destination IP Based Access Control | 
| DNS Proxy | DNSSEC, DoH, DoT, DNS Override | 
| Filtering | • Web Group Filtering†• URL Filtering• Web Security† | 
| ARP Inspection | • Sending GARP Packets• ARP Scanning†• IP-MAC Binding• ARP Detection | 
| Attack Defense | • TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN | 
| HARDWARE FEATURES | |
|---|---|
| Standards and Protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP, 802.11a/b/g/n/ac/ax | 
| Interface | • 1 Gigabit SFP WAN/LAN Port• 1 Gigabit WAN Port• 4 Gigabit LAN/WAN Ports• 1 USB3.0 (supports USB LTE dongle and USB Storage) | 
| Button | Reset Button | 
| Power Supply | 12VDC / 2A Power Adapter | 
| Wi-Fi Frequency & Signal Rate | • 2.4 GHz: 574 Mbps• 5 GHz: 2402 Mbps (HE160) | 
| Flash | 128 MB NAND | 
| DRAM | 512 MB DDR4 | 
| LED | SYS, WLAN, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act) | 
| Dimensions ( W x D x H ) | 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm) (Antenna dimensions are notincluded) | 
| Antenna | • 2.4 GHz: 2x 3 dBi dual-band detachable antennas• 5 GHz: 3x 4.5 dBi dual-band detachable antennas | 
| Surge Protection | 4 kV surge protection | 
| Mounting | Desktop/ Wall-mounting/Rackmount (rackmount kit not provided) | 
| Max. Power Consumption | • EU: 16.8W (with USB 3.0 connected), 11.8W (without USB 3.0 connected)• US: 22.7W (with USB 3.0 connected) 18.2W (without USB 3.0 connected) | 
| PERFORMANCE | |
|---|---|
| IPS Throughput | • TCP: 939 Mbps• UDP: 937 Mbps | 
| DPI Throughput | • TCP: 933 Mbps• UDP: 927 Mbps | 
| GRE | • Unencrypted: 624.2Mbps• Encrypted: 301.5Mbps | 
| WireGuard VPN | 393.5Mbps | 
| Concurrent Session | 150,000 | 
| New Sessions /Second | 5,100 | 
| NAT (Static IP) | 937.2 Mbps / 936.1Mbps | 
| NAT(DHCP) | 945.8 Mbps / 940.6Mbps | 
| NAT(PPPoE) | 942.9 Mbps / 942.9Mbps | 
| NAT (L2TP) | 837.4 Mbps / 881.5Mbps | 
| NAT (PPTP) | 803.0 Mbps / 910.5 Mbps | 
| IPsec VPN Throughput | • ESP-SHA1-AES256: 646.9Mbps• ESP-SHA256-AES256: 642.8Mbps• ESP-SHA384-AES256: 648.9Mbps• ESP-SHA512-AES256: 658.4 Mbps | 
| OpenVPN | 129.3Mbps | 
| L2TP VPN Throughput | • Unencrypted: 1034.0 Mbps• Encrypted: 570.0 Mbps | 
| PPTP VPN Throughput | • Unencrypted: 1165.0 Mbps• Encrypted: 209.0 Mbps | 
| SSL VPN Throughput | 126.7Mbps | 
| 66 Byte Packet Forwarding Rate | 1,453,489 pps / 1,453,488 pps | 
| 1,518 Byte Packet forwarding rate | 81,274 pps / 91,275 pps | 
| WIRELESS FEATURES | |
|---|---|
| Advanced Features | • Enable/Disable Wireless Radio & SSID Broadcast• Automatic Channel Selection Algorithm• Transmit Power Control (Adjust transmit Power on dBm )• Seamless Roaming• Mesh (with EAP that supports Mesh)• OFDMA• Beamforming• MU-MIMO• Wireless Encryption: WPA/WPA2/WPA3 Personal, WPA/WPA2/WPA3 Enterprise | 
| Guest Network | Support | 
| BASIC FUNCTIONS | |
|---|---|
| LAN DNS | √ | 
| WAN Connection Type | • Static IP• Dynamic IP• PPPoE (supports MRU Configuration)• PPTP• L2TP | 
| MAC Clone | Modify WAN Address | 
| DHCP | • DHCP Server• DHCPv6 PD Server (only in Standalone Mode)• DHCP Options Customization• DHCP Address Reservation• Multi-IP Interfaces• Multi-Net DHCP• WAN DHCP 60 | 
| Stateful ACL | √ | 
| Quality of Service | √ | 
| Bridge VLAN | √ | 
| mDNS Repeater | √ | 
| IPv6 | StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode | 
| VLAN | 802.1Q VLAN | 
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode | 
| Advanced Features | |
|---|---|
| Access Control | • Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL• FQDN | 
| Advanced Routing | • Static Routing• Policy Routing• RIP†• OSPF† | 
| Bandwidth Control | IP-Based Bandwidth Control | 
| Load Balance | • Intelligent Load Balance• Application Optimized Routing• Link Backup(Timing, Failover)• Online Detection | 
| NAT | One-to-One NAT Multi-Net NAT Virtual Server Port Triggering† NAT-DMZ FTP/H.323/SIP/IPSec/PPTP ALG UPnP Disable NAT | 
| Session Limit | IP-Based Session Limit | 
| VPN | |
|---|---|
| GRE | √ (Only in Standalone Mode) | 
| SD-WAN | √ (Only in Controller Mode) | 
| SSL VPN | 50 Tunnels | 
| IPsec VPN | • 100 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, AES128, AES192, AES256 Encryption Algorithm• IPsec Failover• IKE v1/v2• MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS) | 
| PPTP VPN | • PPTP VPN Server• PPTP VPN Client (10)△• 50 Tunnels• PPTP with MPPE Encryption | 
| L2TP VPN | • L2TP VPN Server• L2TP VPN Client (10)△• 50 Tunnels• L2TP over IPSec | 
| OpenVPN | • OpenVPN Server• OpenVPN Client (5)△• 55 OpenVPN Tunnels• "Certificate + Account" Mode• Full Mode | 
| WireGuard VPN | √ | 
| AUTHENTICATION | |
|---|---|
| Web Authentication | • No Authentication• Simple Password§• Hotspot (Local User / Voucher§ / SMS§ / Radius§)• External Radius Sever• External Portal Sever§• LDAP† | 
| Management Features | |
|---|---|
| Omada App | Yes | 
| Centralized Management | • Omada Cloud-Based Controller• Omada Hardware Controller• Omada Software Controller | 
| Cloud Access | Yes. Require the use of Omada Cloud-Based Controller. | 
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) | 
| Maintenance | • Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3• Diagnostics (Ping & Traceroute)• NTP Synchronize†• Port Mirroring• CLI (only in Standalone Mode)• Syslog Support | 
| Zero-Touch Provisioning | Yes. Require the use of Omada Cloud-Based Controller. | 
| Management Features | • Automatic Device Discovery§• Intelligent Network Monitoring§• Abnormal Event Warnings§• Unified Configuration§• Reboot Schedule• Captive Portal Configuration§• ZTP (Zero-Touch Provisioning) | 
| OTHER | |
|---|---|
| Network Services Enabled by Default | Web ServerManage and configure device through web (HTTP/HTTPS)• Port: 80/443 Protocol: TCP_____________________________________________________TDP ServerDevice discovery• Port: 20003 Protocol: UDP_____________________________________________________DHCP ServerHandle DHCP packets• Port: 67 Protocol: UDP_____________________________________________________DNSHandle DNS packets• Port: 53 Protocol: TCP/UDP | 
| OTHERS | |
|---|---|
| Certification | CE, FCC, RoHS | 
| Package Content | • ER706W• Power Adapter• Quick Installation Guide | 
| System Requirements | • Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11• MAC OS, NetWare, UNIX or Linux | 
| Environment | • Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F)• Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F)• Operating Humidity: 10% to 90% non-condensing• Storage Humidity: 5% to 90% non-condensing | 
†These functions are supported only in Standalone Mode.
§These functions are supported only in Controller Mode.
※At least one WAN/LAN port needs to function as a LAN port.
△For PPTP VPN and L2TP VPN, ER706W can connect with up to 10 VPN servers. For OpenVPN, ER706W can connect withup to 5 VPN servers.
*Maximum wireless signal rates are the physical rates derived from IEEE Standard 802.11 specifications. Actual wireless data throughput and coverage are not guaranteed and will vary.
**Omada Mesh Technology requires the use of EAPs that support mesh functionality. Please refer to https://www.omadanetworks.com/en/omada-mesh/product-list/ to confirm which Omada EAPs are compatible with Omada Mesh. Additionally, ER706W also supports standalone Mesh. Please refer to https://www.tp-link.com/en/standalonemesh/product-list/ to confirm the models that support standalone Mesh.
‡Use of WiFi 6 (802.11ax) and its features, including OFDMA, HE160, and 1024-QAM, require clients to support the corresponding features. The 160 MHz bandwidth is only available on the 5 GHz band. It may be unavailable in some regions/countries due to regulatory restrictions.