Integrated into Omada SDN
Zero-Touch Provisioning (ZTP), Centralized Cloud Management, and Intelligent Monitoring.
Centralized Management
Cloud access and Omada app for ultra convenience and easy management.
Two 10GE SFP+ Ports
1x WAN and 1x WAN/LAN 10GE SFP+ ports provide high-bandwidth aggregation connectivity.
Up to 10 WAN Ports
Fiber and RJ45 WAN ports with load balance raise the utilization rate of multi-line broadband.
Highly Secure VPN
Enterprise-standard SSL/ IPSec / PPTP / L2TP VPN & OpenVPN / WireGuard / L2TP over IPSec VPN are ideal for use across multiple branches and for WFH.
Abundant Security Features
Powerful Firewall, DoS defense, IP/MAC/URL filtering, and IP-MAC Binding, and One-Click ALG Activation provide world-class security.
High-Capacity Performance with Quad-Core 2.2 GHz CPU
Manage your entire business network with the right amount of processing power. Dual redundant power supplies further ensure carrier-class reliability for enterprise networking.
Maximize the 10G Broadband with Omada Enterprise Gateway
Maximized 10G Broadband with the Omada Enterprise Gateway Build your lightning-fast network with Omada ER8411 — an enterprise VPN router with 10G ports. It surpasses the need for high-speed, reliable, and safe enterprise networks, ideal for large-scale deployments such as offices, schools, and hotels.
10x WAN Ports & One USB WAN for Mobile Broadband
Up to 10 WAN SFP+, SFP, and RJ45 ports allow the router to support various internet access requirements. Multi-WAN Load Balancing distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN backup.
High-Security and High-Performance VPN
ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPSec, PPTP, WireGuard, and L2TP in Client/Server mode. One-click auto IPSec VPN simplifies VPN configuration and facilitates network management and deployment. The router also features built-in VPN engine hardware, allowing support and management of hundreds of IPSec, PPTP, L2TP, SSL VPN, and OpenVPN Tunnels.
Specifications
Access Control
Source/Destination IP Based Access Control
Filtering
WEB Group Filtering
URL Filtering
Web Security
ARP Inspection
Sending GARP Packets
ARP Scanning
IP-MAC Binding
Attack Defence
TCP/UDP/ICMP Flood Defense
Block TCP Scan (Stealth FIN/Xmas/Null)
Block Ping from WAN
Standards and Protocols
IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q
TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN
Interface
2x 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)
1x 1GE SFP WAN/LAN Ports
8x 1GE RJ45 WAN/LAN Ports
1x RJ45 Console Ports
2x USB Ports (Connecting 4G/3G Modem as WAN Backup)
Network Media
10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)
EIA/TIA-568 100O STP (Max 100 m)
100BASE-TX: UTP category 5, 5e cable (Max 100 m)
EIA/TIA-568 100O STP (Max 100 m)
1000BASE-T: UTP category 5e, 6 cable (Max 100 m)
Fan Quantity
2
Button
Reset Button
Power Supply
Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz)
Flash
4MB SPI NOR + 256 MB NAND
DRAM
4 GB DDR4
LED
PWR, SYS, WAN, LAN, USB, FAN
Dimensions
17.3 x 8.7 x 1.7 in (440 x 220 x 44 mm)
Protection
4 kV surge protection
Enclosure
Steel
Mounting
Rack Mountable
Max Power Consumption
26.36 W (with USB 3.0 connected)
19.12 W (without USB 3.0 connected)
IPS Throughput
TCP: 4924 Mbps;
UDP: 4521 Mbps
DPI Throughput
TCP: 5524 Mbps;
UDP: 3547 Mbps
Wireguard VPN
1411 Mbps
Concurrent Session
2,300,000
New Sessions/Second
20,000
NAT (Static IP)
Upload: 9445.82 Mbps
Download: 9449.26 Mbps
NAT (DHCP)
Upload: 9426.83 Mbps
Download: 9426.20 Mbps
NAT (PPPOE)
Upload: 9413.96 Mbps
Download: 9102.01 Mbps
NAT (L2TP)
Upload: 9064.66 Mbps
Download: 8587.57 Mbps
NAT (PPTP)
Upload: 8712.11 Mbps
Download: 8505.61 Mbps
64 Byte Packet Forwarding Rate
Upload: 1080 Mbps
Download: 1030 Mbps
IPSec VPN Throughput
ESP-SHA1-AES256: 3099.4 Mbps
ESP-SHA256-AES256: 2928.4 Mbps
ESP-SHA384-AES256: 2935.7 Mbps
ESP-SHA512-AES256: 2878 Mbps
OpenVPN
UDP: 4424.1 Mbps
L2TP VPN Throughput
Unencrypted: 10497 Mbps
Encrypted: 3178.5 Mbps
PPTP VPN Throughput
Unencrypted: 10143 Mbps
Encrypted: 952 Mbps
SSL VPN Throughput
4486 Mbps
1,518 Byte Packet forwarding rate
Upload: 9970 Mbps
Download: 9970 Mbps
WAN Connection Type
Static/Dynamic IP
PPPoE
PPTP
L2TP
6to4 Tunnel
Pass-Through
Mobile Broadband: 4G/3G modem for backup via USB port
MAC Clone
Modify WAN/LAN MAC Address
DHCP
DHCP Server/Client
DHCP Address Reservation
Multi-net DHCP
Multi-IP Interfaces
IPv6
WAN Connection
VLAN
802.1Q VLAN
IPTV
IGMP v2/v3 Proxy
ACL
IP/Port/Protocol/Domain Name Filtering
Advanced Routing
Static Routing
Policy Routing
Bandwidth Control
IP/Port-based Bandwidth Control
Guarantee & Limited Bandwidth
Load Balance
Intelligent Load Balance
Application Optimized Routing
Link Backup (Timing, Failover)
Online Detection
NAT
One-to-One NAT
Multi-Net NAT
Port Forwarding
Port Triggering
NAT-DMZ
FTP/H.323/SIP/IPSec/PPTP ALG
UPnP
Session Limit
IP-based Session Limit
SSL VPN
SSL VPN Server
SSL VPN Client
500 SSL VPN Tunnels
IPSec VPN
300 IPSec VPN Tunnels
LAN-to-LAN, Client-to-LAN
Main, Aggressive Negotiation Mode
DES, 3DES, SHA1, SHA256, SHA384, SHA512, AES128, AES192, AES256 Encryption Algorithm
IKE v1/v2
MD5, SHA1 Authentication Algorithm
NAT Traversal (NAT-T)
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)
PPTP VPN
PPTP VPN Server
PPTP VPN Client (32)
300 Tunnels (Shared with L2TP)
PPTP with MPPE Encryption
L2TP VPN
L2TP VPN Server
L2TP VPN Client (32)
300 Tunnels (Shared with PPTP)
L2TP over IPSec
OpenVPN
OpenVPN Server
OpenVPN Client (10)
110 OpenVPN Tunnels
WireGuard VPN
300 Tunnels
Web Authentication
No Authentication
Simple Password
Hotspot (Local User / Voucher / SMS / Radius)
External Radius Server
External Portal Server
Omada App
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management
Omada Hardware Controller (OC300)
Omada Hardware Controller (OC200)
Omada Software Controller
Omada Cloud-Based Controller
Cloud Access
Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Service
Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Maintenance
Web Management Interface
Remote Management
Export & Import Configuration
SNMP v1/v2c/v3
Diagnostics (Ping & Traceroute)
NTP Synchronize
Syslog Support
Zero-Touch Provisioning
Yes. Requiring the use of Omada Cloud-Based Controller.
Management Features
Automatic Device Discovery
Intelligent Network Monitoring
Abnormal Event Warnings
Unified Configuration
Reboot Schedule
Captive Portal Configuration
Certification
CE, FCC, RoHS
Package Contents
Omada 10G Multi-WAN Security Gateway ER8411
Power Cord
Rack-Mount Kit
Quick Installation Guide
