Omada Gigabit VPN Router

Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)^**, Centralized Cloud Management, and Intelligent Monitoring.
Centralized Management: Cloud access and Omada app for ultra convenience and easy management.
Gigabit Ports: 1 gigabit SFP and 5 gigabit RJ45 ports provide high-speed wired connectivity.
Up to 5 WAN Ports: Gigabit SFP WAN port and gigabit RJ45 WAN port optimize bandwidth usage.
Highly Secure VPN^△: Supports multiple VPN protocols including SSL / Wireguard / OpenVPN/ IPSec / GRE VPN^§/ PPTP/ L2TP/ L2TP over IPSec, helping users to establish VPN connections more flexibly
Abundant Security Features: Advanced firewall policies, DoS defense,IP/MAC/URL filtering, and more security functions protect your network and data.

SECURITY
Access Control	Source/Destination IP Based Access Control
Filtering	• WEB Group Filtering^§ • URL Filtering • Web Security^§
ARP Inspection	• Sending GARP Packets^§ • ARP Scanning^§ • IP-MAC Binding
Attack Defense	• TCP/UDP/ICMP Flood Defense • Block TCP Scan (Stealth FIN/Xmas/Null) • Block Ping from WAN

HARDWARE FEATURES
Standards and Protocols	• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP
Interface	• 1x Gigabit SFP WAN/LAN Port • 1x Gigabit WAN Port • 4x Gigabit LAN/WAN Ports • 1x USB 3.0 Port (supports USB LTE dongle and USB storage)
Network Media	• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
Fan Quantity	Fanless
Button	Reset Button
Power Supply	12V DC/ 1A Power Adapter
PoE Budget	-
Flash	128 MB NAND
DRAM	512 MB DDR4
LED	PWR, SYS, SFP, USB, WAN(1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act)
Dimensions ( W x D x H )	8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm)
Protection	4 kV surge protection
Enclosure	Steel
Mounting	Desktop/ Wall-Mounting
Max. Power Consumption	• 7.5 W (with USB 3.0 connected) • 4.5 W (without USB 3.0 connected)

PERFORMANCE
IPS Throughput	TCP: 229 Mbps; UDP: 188 Mbps
DPI Throughput	TCP: 933 Mbps; UDP: 927 Mbps
WireGuard VPN	341.3 Mbps
Concurrent Session	150,000
New Sessions /Second	5,300
NAT (Static IP)	945.3 Mbps / 940.5 Mbps
NAT(DHCP)	939.6 Mbps / 940.9 Mbps
NAT(PPPoE)	943.6 Mbps / 940.9 Mbps
NAT (L2TP)	880.1 Mbps / 859.0 Mbps
NAT (PPTP)	855.0 Mbps / 907.2 Mbps
64 Byte Packet Forwarding Rate	-
IPsec VPN Throughput	• ESP-SHA1-AES256: 617.1 Mbps • ESP-SHA256-AES256: 592.8 Mbps • ESP-SHA384-AES256: 592.4 Mbps • ESP-SHA512-AES256: 604.5 Mbps
OpenVPN	139.1 Mbps
L2TP VPN Throughput	• Unencrypted: 977.4 Mbps • Encrypted: 334.6 Mbps
PPTP VPN Throughput	• Unencrypted: 1064.1 Mbps • Encrypted: 206.8 Mbps
SSL VPN Throughput	131.6 Mbps
66 Byte Packet Forwarding Rate	1,453,489 pps / 1,453,488 pps
1,518 Byte Packet forwarding rate	81,279 pps / 81,275 pps

BASIC FUNCTIONS
WAN Connection Type	• Static IP • Dynamic IP • PPPoE(supports MRU Configuration) • PPTP • L2TP
MAC Clone	Modify WAN/LAN MAC Address^†
DHCP	• DHCP Server • DHCPv6 PD Server (only in Standalone Mode) • DHCP Options Customization • DHCP Address Reservation • Multi-IP Interfaces • Multi-Net DHCP
IPv6	StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode
VLAN	802.1Q VLAN
IPTV	IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

Advanced Features
Access Control	IP/Port/Protocol/Domain Name Filtering
Advanced Routing	• Static Routing • Policy Routing • RIP^§ • OSPF^§
Bandwidth Control	IP-based Bandwidth Control
Load Balance	• Intelligent Load Balance • Application Optimized Routing • Link Backup (Timing, Failover) • Online Detection
NAT	• One-to-One NAT • Multi-Net NAT • Virtual Server • Port Triggering^§ • NAT-DMZ • FTP/H.323/SIP/IPSec/PPTP ALG • UPnP
Session Limit	IP-based Session Limit

VPN
GRE	Yes (Only in Controller Mode)
SD-WAN	Yes (Only in Controller Mode)
SSL VPN	50 Tunnels
IPsec VPN	• 100 IPSec VPN Tunnels • LAN-to-LAN, Client-to-LAN • Main, Aggressive Negotiation Mode • DES, 3DES, AES128, AES192, AES256 Encryption Algorithm • IPsec Failover • IKE v1/v2 • MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm • NAT Traversal (NAT-T) • Dead Peer Detection (DPD) • Perfect Forward Secrecy (PFS)
PPTP VPN	• PPTP VPN Server • PPTP VPN Client (10)^‡ • 50 Tunnels • PPTP with MPPE Encryption
L2TP VPN	• L2TP VPN Server • L2TP VPN Client (10)^‡ • 50 Tunnels • L2TP over IPSec
OpenVPN	• OpenVPN Server • OpenVPN Client (5)^‡ • 55 OpenVPN Tunnels • "Certificate + Account" Mode • Full Mode
WireGuard VPN	• 20 Tunnels

AUTHENTICATION
Web Authentication	• No Authentication • Simple Password* • Hotspot(Local User /Voucher^/ SMS^/Radius^) • External Radius Sever • External Portal Sever^ • LDAP^§

Management Features
Omada App	Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management	• Omada Cloud-Based Controller • Omada Hardware Controller (OC300) • Omada Hardware Controller (OC200) • Omada Software Controller
Cloud Access	Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Service	Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)
Maintenance	• Web Management Interface • Remote Management • Export & Import Configuration • SNMP v1/v2c/v3 • Diagnostics (Ping & Traceroute)^§ • NTP Synchronize^§ • Port Mirroring • CLI (only in Standalone Mode) • Syslog Support
Zero-Touch Provisioning	Yes. Requiring the use of Omada Cloud-Based Controller.
Management Features	• Automatic Device Discovery • Intelligent Network Monitoring • Abnormal Event Warnings • Unified Configuration • Reboot Schedule • Captive Portal Configuration

OTHERS
Certification	CE, FCC, RoHS
Package Content	• ER7206(TL-ER7206) • Power Cord • Quick Installation Guide
System Requirements	Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX or Linux
Environment	• Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F) • Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) • Operating Humidity: 10% to 90% non-condensing • Storage Humidity: 5% to 90% non-condensing

*These functions require the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller

**Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller. Go to https://www.tp-link.com/en/omada-cloud-based-controller/product-list/ to confirm which models are compatible with Omada Cloud-Based Controller.

^† LAN MAC Address can be modified only in Standalone Mode.

^§ These functions are supported only in Standalone Mode.

^△For PPTP VPN and L2TP VPN, ER7206 V2 can connect with up to 10 VPN servers. For OpenVPN, ER7206 V2 can connect with up to 5 VPN servers.

‡ ER7206 can work as a VPN client and can connect with up to 10 VPN servers.