SECURITY
Source/Destination IP Based Access Control
Source/Destination IP Based Access Control
Source/Destination IP Based Access Control
Deep Packet InspectionSupport 2421 type Applications
• Deep Packet Inspection • Support 2421 type Applications
√
Signature-based IPS/IDS threat detection
Signature-based IPS/IDS threat detection
√
DNSSEC, DoH, DoT, DNS Override
DNSSEC, DoH, DoT, and DNS Override
DNSSEC, DoH, DoT, and DNS Override
• WEB Group Filtering§• URL Filtering• Web Security§
WEB Group Filtering§URL FilteringWeb Security§
• WEB Group Filtering*5• URL Filtering• Web Security*5
• TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN
• TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN
• TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN
• Sending GARP Packets§• ARP Scanning§• IP-MAC Binding§
• Sending GARP Packets§• ARP Scanning§• IP-MAC Binding§
• Sending GARP Packets*5• ARP Scanning*5• IP-MAC Binding*5
HARDWARE FEATURES
• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP
• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3z, IEEE 802.3x, IEEE 802.1q• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP
• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP
• 1× 2.5G RJ45 WAN Port• 1× 2.5G RJ45 WAN/LAN Port• 1× Gigabit SFP WAN/LAN Port• 4× Gigabit RJ45 WAN/LAN Ports• 1× USB 2.0 Port (Supports USB storage, and LTE backup with LTE dongle)
• 1 Fixed Gigabit SFP WAN Port• 1 Fixed Gigabit RJ45 WAN Port• 2 Fixed Gigabit RJ45 LAN Ports• 2 Changeable Gigabit RJ45 WAN/LAN Ports
• 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)• 1× 1GE SFP WAN/LAN Ports• 8× 1GE RJ45 WAN/LAN Ports• 1× RJ45 Console Ports• 2× USB Ports (Connecting 4G/3G Modem as WAN Backup)
• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m)• 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m)• 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)• 2500BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
• 10BASE-T: UTP category 3, 4, 5 cable (Max 100m)EIA/TIA-568 100Ω STP (Max 100m)• 100BASE-TX: UTP category 5, 5e cable (Max 100m)EIA/TIA-568 100Ω STP (Max 100m)• 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100m)
• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 100BASE-TX: UTP category 5, 5e cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 1000BASE-T: UTP category 5e, 6 cable (Max 100 m)
Fanless
Fanless
2
Reset Button
Reset Button
Reset Button
12V/1.5A Adapter
100–240 V~50/60 Hz
Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz)
-
-
-
128MB NAND
SPI 4MB + NAND 128MB
4MB SPI NOR + 256 MB NAND
1 GB DDR4
512MB
4 GB DDR4
PWR, SYS, SFP, USB, WAN (Speed, Link/Act), LAN (Speed, Link/Act)
PWR, SYS, SFP WAN, WAN (Speed, Link/Act), LAN (Speed, Link/Act)
PWR, SYS, WAN, LAN, USB, FAN
8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm)
8.9 × 5.2 × 1.4 in.
(226 × 131 × 35 mm)
(226 × 131 × 35 mm)
17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm)
4 kV surge protection
4 kV surge protection
4 kV surge protection
Steel
Steel
Steel
Desktop/Wall Mounting
Desktop
Rack Mountable
14.2 W (with USB2.0 connected)7.1 W (without USB2.0 connected)
8.95W
• 26.36 W (with USB 3.0 connected)• 19.12 W (without USB 3.0 connected)
Dual-core ARMv8
0.886 kg
PERFORMANCE
500,000
150,000
2,300,000
6,000
5,500
20,000
5,300
2365.17 Mbps / 2364.45 Mbps
940.3 Mbps / 940.2 Mbps
• Upload: 9445.82 Mbps• Download: 9449.26 Mbps
2364.45 Mbps / 2366.04 Mbps
940.3 Mbps / 940.4 Mbps
• Upload: 9426.83 Mbps• Download: 9426.20 Mbps
2347.14 Mbps / 2348.29 Mbps
939.7 Mbps / 937.9 Mbps
• Upload: 9413.96 Mbps• Download: 9102.01 Mbps
1308.86 Mbps / 974.10 Mbps
918.0 Mbps / 917.9 Mbps
• Upload: 4230.62 Mbps• Download: 4169.53 Mbps
1236.27 Mbps / 1280.99 Mbps
918.9 Mbps / 914.7 Mbps
• Upload: 3933.86 Mbps• Download: 3821.97 Mbps
1832.69 Mbps / 1741.84 Mbps
486,918 pps / 488,372 pps
-
2461.18 Mbps / 2457.32 Mbps
81,274 pps / 81,274 pps
• Upload: 9970 Mbps• Download: 9970 Mbps
• ESP-SHA1-AES256: 673.3 Mbps• ESP-SHA256-AES256: 650.2 Mbps• ESP-SHA384-AES256: 629.3 Mbps• ESP-SHA512-AES256: 633.8 Mbps
291.6 Mbps
• SHA1-AES256: 2140.45 Mbps• SHA2-AES256: 2080.20 Mbps
• ESP-SHA1-AES256: 617.1 Mbps• ESP-SHA256-AES256: 592.8 Mbps• ESP-SHA384-AES256: 592.4 Mbps• ESP-SHA512-AES256: 604.5 Mbps
Unencrypted: 951 Mbps Encrypted: 609 Mbps
Unencrypted: 1094.2 Mbps Encrypted: 702.2 Mbps
• Unencrypted: 8437 Mbps• Encrypted: 2775 Mbps
• Unencrypted: 611.9 Mbps• Encrypted: 325.0 Mbps
-
177.2 Mbps
1411 Mbps
135.0 Mbps
34.2 Mbps
1043 Mbps
• Unencrypted: 1243.7 Mbps• Encrypted: 561.0 Mbps
Unencrypted: 1360.3 MbpsEncrypted: 202.3 Mbps
• Unencrypted: 5013.50 Mbps• Encrypted: 2274.74 Mbps
• Unencrypted: 977.4 Mbps • Encrypted: 334.6 Mbps
Unencrypted: 1379.3 MbpsEncrypted: 115.6 Mbps
• Unencrypted: 3933.86 Mbps• Encrypted: 3821.97Mbps
TCP: 1823 Mbps; UDP: 1272 Mbps
TCP: 931 Mbps; UDP: 902 Mbps
• TCP: 9067 Mbps• UDP: 5873 Mbps
-
• Upload: 1080 Mbps• Download: 1030 Mbps
291.6 Mbps
132.24 Mbps
-
1006 Mbps
TCP: 208 Mbps; UDP: 161 Mbps
TCP: 200 Mbps; UDP: 150 Mbps
• TCP: 9388 Mbps;• UDP: 7538 Mbps
• TCP: 229 Mbps• UDP: 188 Mbps
• TCP: 4924 Mbps
• UDP: 4521 Mbps
• UDP: 4521 Mbps
4424.1 Mbps
• TCP: 5524 Mbps
• UDP: 3547 Mbps
• UDP: 3547 Mbps
4486 Mbps
343Mbps
BASIC FUNCTIONS
√
√
√
√
√
Modify WAN/LAN MAC Address†
Modify WAN/LAN MAC Address†
Modify WAN/LAN MAC Address*4
√
√
√
√
• DHCP Server• DHCPv6 PD Server (only in Standalone Mode)• DHCP Options Customization• DHCP Address Reservation• Multi-IP Interfaces*• Multi-Net DHCP*
• DHCP Server• DHCP Address Reservation• Multi-IP Interfaces*• Multi-Net DHCP*
• DHCP Server/Client• DHCP Address Reservation• Multi-net DHCP• Multi-IP Interfaces
• IPv4_Static IP• IPv4_Dynamic IP• IPv4_PPPOE• IPv4_L2TP• IPv4_PPTP• IPv6_PPP• IPv6_DHCPv6• IPv6_Static IP• IPv6_6in4• IPv6_Pass-Through• Mobile Broadband: 4G/3G modem for backup via USB port
• Static/Dynamic IP• PPPoE• PPTP• L2TP
• Static/Dynamic IP• PPPoE• PPTP• L2TP• 6to4 Tunnel• Pass-Through• Mobile Broadband: 4G/3G modem for backup via USB port
√
√
802.1Q VLAN
802.1Q VLAN
802.1Q VLAN
IGMP v2/v3 Proxy, Custom Mode, Bridge Mode
IGMP v2/v3 Proxy
IGMP v2/v3 Proxy
Advanced Features
IP/Port/Protocol/Domain Name Filtering
IP/Port/Protocol/Domain Name Filtering
• Static Routing• Policy Routing• RIP (only in Standalone Mode)• OSPF (only in Standalone Mode)
• Static Routing• Policy Routing
• Static Routing• Policy Routing
• IP/Port-based Bandwidth Control• Guarantee & Limited Bandwidth
• IP/Port-based Bandwidth Control• Guarantee & Limited Bandwidth
• IP/Port-based Bandwidth Control• Guarantee & Limited Bandwidth
• Intelligent Load Balance• Application Optimized Routing• Link Backup (Timing§, Failover)• Online Detection
• Intelligent Load Balance• Application Optimized Routing• Link Backup (Timing§, Failover)• Online Detection
• Intelligent Load Balance• Application Optimized Routing• Link Backup (Timing*5, Failover)• Online Detection
• One-to-One NAT§• Multi-Net NAT• Virtual Server• Port Triggering§• NAT-DMZ• FTP/H.323/SIP/IPSec/PPTP ALG• UPnP
• One-to-One NAT§• Multi-Net NAT• Virtual Server• Port Triggering§• NAT-DMZ• FTP/H.323/SIP/IPSec/PPTP ALG, UPnP
• One-to-One NAT*5
• Multi-Net NAT
• Virtual Server
• Port Triggering*5
• NAT-DMZ
• FTP/H.323/SIP/IPSec/PPTP ALG
• UPnP
• Multi-Net NAT
• Virtual Server
• Port Triggering*5
• NAT-DMZ
• FTP/H.323/SIP/IPSec/PPTP ALG
• UPnP
• SPI Firewall• VPN Passthrough• FTP/H.323/PPTP/SIP/IPsec ALG• DoS Defence, Ping of Death• Local Management
• SPI Firewall• VPN Passthrough• FTP/H.323/PPTP/SIP/IPsec ALG• DoS Defence, Ping of Death• Local Management
IP-based Session Limit
IP-based Session Limit
IP-based Session Limit
VPN
√ (Only in Standalone Mode)
√ (Only in Standalone Mode)
√ (Only in Standalone Mode)
√ (Only in Controller Mode)
√ (Only in Controller Mode)
√ (Only in Controller Mode)
SSL VPN Server60 SSL VPN Tunnels
-
• SSL VPN Server• SSL VPN Client• 500 OpenVPN Tunnels
• 100 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, SHA1, AES128, AES192, AES256 Encryption Algorithm• IKEv1/v2• MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS)
• 100 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, AES128, AES192, AES256 Encryption Algorithm• IKEv1/v2*• MD5, SHA1 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS)
• 300 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, SHA1, SHA2, AES128, AES192, AES256 Encryption Algorithm• IKE v1/v2• MD5, SHA1 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS)
• PPTP VPN Server• PPTP VPN Clients (12)• 60 Tunnels (Shared with L2TP)• PPTP with MPPE Encryption
• PPTP VPN Server• 10 PPTP VPN Clients• 50 Tunnels• PPTP with MPPE Encryption
• PPTP VPN Server• PPTP VPN Client (32)*6• 300 Tunnels (Shared with L2TP)• PPTP with MPPE Encryption
• L2TP VPN Server• L2TP VPN Clients (12)• 60 Tunnels (Shared with PPTP)• L2TP over IPSec
• L2TP VPN Server• 10 L2TP VPN Clients• 50 Tunnels• L2TP over IPSec
• L2TP VPN Server• L2TP VPN Client (32)*6• 300 Tunnels (Shared with PPTP)• L2TP over IPSec
• OpenVPN Server• OpenVPN Clients (6)• 66 OpenVPN Tunnels*
• OpenVPN Server*• 10 OpenVPN Clients*• 50 OpenVPN Tunnels*
• OpenVPN Server• OpenVPN Client (10)*6• 110 OpenVPN Tunnels
• 20 Tunnels
• 20 Tunnels
• 300 Tunnels
AUTHENTICATION
• No Authentication• Simple Password*• Hotspot (Local User/Voucher* /SMS*/Radius*)• External Radius Server• External Portal Server*• LDAP
• No Authentication• Simple Password*• Hotspot(Local User / Voucher* / SMS* / Radius*)• External Radius Sever• External Portal Sever*• Facebook*
• No Authentication
• Simple Password
• Hotspot(Local User / Voucher*2 / SMS*2 / Radius*2)
• External Radius Sever
• External Portal Sever*2
• Facebook Check-In*2
• Instagram Follow*2
• Simple Password
• Hotspot(Local User / Voucher*2 / SMS*2 / Radius*2)
• External Radius Sever
• External Portal Sever*2
• Facebook Check-In*2
• Instagram Follow*2
Management Features
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
• Omada Cloud-Based Controller• Omada Hardware Controller (OC300)• Omada Hardware Controller (OC200)• Omada Software Controller
• Omada Cloud-Based Controller• Omada Hardware Controller (OC300)• Omada Hardware Controller (OC200)• Omada Software Controller
• Omada Hardware Controller (OC300)• Omada Hardware Controller (OC200)• Omada Software Controller• Omada Cloud-Based Controller
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Yes (Through OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller)
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
• Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3*• Diagnostics (Ping & Traceroute)§• NTP Synchronize§• Port Mirroring• CLI (only in Standalone Mode)• Syslog Support
• Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3*• Diagnostics (Ping & Traceroute)§• NTP Synchronize§• Syslog Support
• Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3• Diagnostics (Ping & Traceroute)*5• NTP Synchronize*5• Syslog Support
Yes. Requiring the use of Omada Cloud-Based Controller.
Yes. Requiring the use of Omada Cloud-Based Controller.
Yes. Requiring the use of Omada Cloud-Based Controller.
• Automatic Device Discovery• Intelligent Network Monitoring• Abnormal Event Warnings• Unified Configuration• Reboot Schedule• Captive Portal Configuration• ZTP (Zero-Touch Provisioning)
• Automatic Device Discovery• Intelligent Network Monitoring• Abnormal Event Warnings• Unified Configuration• Reboot Schedule• Captive Portal Configuration• ZTP (Zero-Touch Provisioning)**
• Automatic Device Discovery• Intelligent Network Monitoring• Abnormal Event Warnings• Unified Configuration• Reboot Schedule• Captive Portal Configuration
OTHERS
CE, FCC, RoHS
CE, FCC, RoHS
CE, FCC, RoHS
• ER707-M2• Power Adapter• Quick Installation Guide
• ER7206• Power Cord• Quick Installation Guide
• Omada 10G Multi-WAN Security Gateway ER8411• Power Cord• Rack-Mount Kit• Quick Installation Guide
• Operating Temperature: 0–40 ℃ (32–104 ℉);• Storage Temperature: -40–70 ℃ (-40–158 ℉)• Operating Humidity: 10–90% RH non-condensing• Storage Humidity: 5–90% non-condensing
• Operating Temperature: 0–40 ℃ (32–104 ℉);• Storage Temperature: -40–70 ℃ (-40–158 ℉)• Operating Humidity: 10–90% RH non-condensing• Storage Humidity: 5–90% RH non-condensing
• Operating Temperature: 0–40 ℃ (32–104 ℉);• Storage Temperature: -40–70 ℃ (-40–158 ℉)• Operating Humidity: 10–90% RH non-condensing• Storage Humidity: 5–90% RH non-condensing