ER8411
$599.99
Skip to product information
Out of stock





ER8411
$599.99
Omada VPN Router with 10G Port
Omada VPN Router with 10G Ports PORT: 1 10G SFP+ WAN Port, 1 10G SFP+ WAN/LAN Port,1 Gigabit SFP WAN/LAN Port, 8 Gigabit RJ45 WAN/LAN Ports, 2 USB3.0 port Integration with Omada SDN Controller, Support SSL VPN, OpenVPN and IPsec/ PPTP/ L2TP/ L2TP over IPSec VPN, 1500000 Concurrent Sessions, Dual Power Supply, Load Balance, Link Backup, 4G LTE Backup with USB Dongle, Policy-based Firewall, Static Routing, Policy Routing, Multi-net DHCP, Guest Portal, VLAN, Support RJ45 SFP+/SFP Module
Get notified when
ER8411 is back in stock.
No spam. One single email when the product is available.
You're all set! You'll receive an email as soon as the product is back in stock.
Omada VPN Router with 10G Port
Centralized Cloud Management
Seamless integration into the Omada SDN platform
Quad-Core 2.2 GHz CPU
Enterprise–level hardware design provides maximum performance
High-bandwidth aggregation with 1× WAN and 1× WAN/LAN ports
Multi-WAN Load Balance raises the utilization rate of multi-line broadband*1
Available 4G/3G Modem connection for LTE WAN backup
High-Capacity Performance
Supports up to 2,300,000 concurrent sessions
Enterprise-standard SSL / IPSec / GER / PPTP / L2TP VPN & OpenVPN / L2TP over IPSec VPN / WireGuard
DPI and IPS/IDS, Powerful Firewall, DoS defense, IP/MAC/Location/URL filtering
Dual Redundant Power Supplies
Carrier-class reliability for enterprise networking
Manage your entire business network with the right amount of processing power. Dual redundant power supplies further ensure carrier-class reliability for enterprise networking.
Dual Redundant Power Supplies
Quad-Core 2.2 GHz CPU
Maximized 10G Broadband with the Omada Enterprise Gateway Build your lightning-fast network with Omada ER8411 — an enterprise VPN gateway with 10G ports. It surpasses the need for high-speed, reliable, and safe enterprise networks, ideal for large-scale deployments such as offices, schools, and hotels.
1× 10G SFP+ WAN/LAN Port
Full 10G Fiber Switch
PoE Switch with 10G Uplink
Connects PoE Devices, Hassle-Free
WiFi 6E and WiFi 6 Access Points
With 10G or 2.5G Ports
Connect WiFi 6 APs with 10G or 2.5G PoE Switches
Switch with 10G Uplink
Lightning-Fast Wired Connections
Up to 10× WAN SFP+, SFP, and RJ45 ports allow the gateway to support various internet access requirements.*1 Multi-WAN Load Balancing distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN backup.
Note: At least one of the ten WAN/LAN ports needs to function as a LAN.
2× USB 3.0 Ports
(Single 4G/3G Modem connection for LTE WAN backup)
1× Gigabit SFP WAN/LAN Port
1× 10G SFP+ WAN/LAN Port
8× Gigabit RJ45 WAN/LAN Ports
ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPSec, GER, PPTP, WireGuard, and L2TP in Client/Server mode. One-click auto IPSec VPN simplifies VPN configuration and facilitates network management and deployment.*2 The gateway also features built-in VPN engine hardware, allowing support and management of hundreds of IPSec, GER, PPTP, L2TP, SSL VPN, and OpenVPN Tunnels.
Easily specify internet access rights
and strategies via DPI (Deep Packet Inspection).
Forcefully prevent viruses and attacks from intruders.
Create virtual network segments for
enhanced security and simplified
network management.
There is an embedded, regularly updated signature database for attack prevention, bolstering threat detection and defense.
Automatically detects and blocks
Denial of Service (DoS) attacks such
as TCP/UDP/ICMP Flooding, Ping of
Death, and other related threats.
One-Click ALG Activation for
applications such as FTP, H323, SIP,
IPSec, and PPTP.
The Omada Software Defined Networking (SDN) platform integrates network devices including access points, switches, and gateways to provide 100% centralized cloud management and create a highly scalable network—all controlled from a single interface.
Learn more about Omada SDN >>
Hardware, Software, or Cloud-Based Controllers
Centralized Cloud Management
Intelligent Monitoring
Zero-Touch Provisioning (ZTP)*3
WiFi 6 Ceiling Mount AP
JetStream PoE Switches
Omada VPN Gateway
ER8411
Omada Hardware Controller
Omada Software Controller
Highlights
- DPI (Deep Packet Inspection)
- IP/MAC/Location/URL Filtering
- Convenient VLAN Support
- IDS/IPS
- DoS Defense
- One-Click ALG Activation
| Fabricant | TP-Link |
| Modèle | ER8411 |
| UPC | 840030703300 |
| Catégorie | Networking — Routers |
| Poids | 8.15 lbs |
| Dimensions (boîte) | 20.9" × 13.3" × 4.1" (L×P×H) |
Specifications
General
| DPI | √ |
| IDS/IPS | √ |
| Access Control | IP/Port/Protocol/Domain Name Filtering |
| Filtering | • WEB Group Filtering*5• URL Categoroies and URLs Filtering• Web Security*5 |
| ARP Inspection | • Sending GARP Packets*5• ARP Scanning*5• IP-MAC Binding*5• ARP Detection |
| Attack Defense | • TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN |
| Standards and Protocols | • IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN |
| Interface | • 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)• 1× 1GE SFP WAN/LAN Ports• 8× 1GE RJ45 WAN/LAN Ports• 1× RJ45 Console Ports• 2× USB 3.0 Ports (One supports LTE backup with LTE dongle) |
| Network Media | • 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 100BASE-TX: UTP category 5, 5e cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 1000BASE-T: UTP category 5e, 6 cable (Max 100 m) |
| Fan Quantity | 2 |
| Button | Reset Button |
| Power Supply | Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz) |
| PoE Budget | - |
| Flash | 4MB SPI NOR + 256 MB NAND |
| DRAM | 4 GB DDR4 |
| LED | PWR, SYS, WAN, LAN, USB, FAN |
| Dimensions ( W x D x H ) | 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm) |
| Protection | 4 kV surge protection |
| Enclosure | Steel |
| Mounting | Rack Mountable |
| Max. Power Consumption | • 26.36 W (with USB 3.0 connected)• 19.12 W (without USB 3.0 connected) |
| IPS Throughput | TCP: 4924 Mbps;UDP: 4521 Mbps |
| DPI Throughput | TCP: 5524 Mbps; UDP: 3547 Mbps |
| WireGuard VPN | • 300 Tunnels |
| Concurrent Session | 2,300,000 |
| New Sessions /Second | 20,000 |
| NAT (Static IP) | • Upload: 9445.82 Mbps• Download: 9449.26 Mbps |
| NAT(DHCP) | • Upload: 9426.83 Mbps• Download: 9426.20 Mbps |
| NAT(PPPoE) | • Upload: 9413.96 Mbps• Download: 9102.01 Mbps |
| NAT (L2TP) | • Upload: 9064.66 Mbps• Download: 8587.57 Mbps |
| NAT (PPTP) | • Upload: 8712.11 Mbps• Download: 8505.61 Mbps |
| 64 Byte Packet Forwarding Rate | • Upload: 2,109,375 pps• Download: 2,011,719 pps |
| IPsec VPN Throughput | • ESP-SHA1-AES256: 3099.4 Mbps• ESP-SHA256-AES256: 2928.4 Mbps• ESP-SHA384-AES256: 2935.7 Mbps• ESP-SHA512-AES256: 2878 Mbps |
| OpenVPN | • OpenVPN Server• OpenVPN Client (10)*6• 110 OpenVPN Tunnels |
| L2TP VPN Throughput | • Unencrypted: 10497Mbps• Encrypted: 3178.5Mbps |
| SSL VPN Throughput | 4486 Mbps |
| 1,518 Byte Packet forwarding rate | • Upload: 820,982pps• Download: 820,982ppps |
| WAN Connection Type | • Static/Dynamic IP• PPPoE• PPTP• L2TP• 6to4 Tunnel• Pass-Through• Mobile Broadband: 4G/3G modem for backup via USB port |
| MAC Clone | Modify WAN/LAN MAC Address*4 |
| DHCP | • DHCP Server/Client• DHCP Address Reservation• Multi-net DHCP• Multi-IP Interfaces• WAN DHCP 60 |
| IPv6 | WAN Connection |
| VLAN | 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy |
| Advanced Routing | • Static Routing• Policy Routing |
| Bandwidth Control | • IP/Port-based Bandwidth Control• Guarantee & Limited Bandwidth |
| Load Balance | • Intelligent Load Balance• Application Optimized Routing• Link Backup (Timing*5, Failover)• Online Detection |
| NAT | • One-to-One NAT*5• Multi-Net NAT• Port Forwarding• Port Triggering*5• NAT-DMZ• FTP/H.323/SIP/IPSec/PPTP ALG• UPnP• Disable NAT |
| Session Limit | IP-based Session Limit |
| GRE | √ (Only in Standalone Mode) |
| SD-WAN | √ (Only in Controller Mode) |
| SSL VPN | • SSL VPN Server• SSL VPN Client• 500 SSL VPN Tunnels |
| IPsec VPN | • 300 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, SHA1, SHA256, SHA384, SHA512, AES128, AES192, AES256 Encryption Algorithm• IKE v1/v2• MD5, SHA1 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS) |
| PPTP VPN | • PPTP VPN Server• PPTP VPN Client (32)*6• 300 Tunnels (Shared with L2TP)• PPTP with MPPE Encryption |
| L2TP VPN | • L2TP VPN Server• L2TP VPN Client (32)*6• 300 Tunnels (Shared with PPTP)• L2TP over IPSec |
| Web Authentication | • No Authentication• Simple Password*2• Hotspot(Local User / Voucher*2 / SMS*2 / Radius*2)• External Radius Sever• External Portal Sever*2 |
| Omada App | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Centralized Management | • Omada Hardware Controller (OC300)• Omada Hardware Controller (OC200)• Omada Software Controller• Omada Cloud-Based Controller |
| Cloud Access | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe) |
| Maintenance | • Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3• Diagnostics (Ping & Traceroute)*5• NTP Synchronize*5• Syslog Support |
| Zero-Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
| Management Features | • Automatic Device Discovery• Intelligent Network Monitoring• Abnormal Event Warnings• Unified Configuration• Reboot Schedule• Captive Portal Configuration |
| Certification | CE, FCC, RoHS |
| Package Content | • Omada 10G Multi-WAN Security Gateway ER8411• Power Cord• Rack-Mount Kit• Quick Installation Guide |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux |
| Environment | • Operating Temperature: 0–40 ℃ (32–104 ℉);• Storage Temperature: -40–70 ℃ (-40–158 ℉)• Operating Humidity: 10–90% RH non-condensing• Storage Humidity: 5–90% RH non-condensing |





General
| DPI | √ |
| IDS/IPS | √ |
| Access Control | IP/Port/Protocol/Domain Name Filtering |
| Filtering | • WEB Group Filtering*5• URL Categoroies and URLs Filtering• Web Security*5 |
| ARP Inspection | • Sending GARP Packets*5• ARP Scanning*5• IP-MAC Binding*5• ARP Detection |
| Attack Defense | • TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN |
| Standards and Protocols | • IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q• TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN |
| Interface | • 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)• 1× 1GE SFP WAN/LAN Ports• 8× 1GE RJ45 WAN/LAN Ports• 1× RJ45 Console Ports• 2× USB 3.0 Ports (One supports LTE backup with LTE dongle) |
| Network Media | • 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 100BASE-TX: UTP category 5, 5e cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 1000BASE-T: UTP category 5e, 6 cable (Max 100 m) |
| Fan Quantity | 2 |
| Button | Reset Button |
| Power Supply | Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz) |
| PoE Budget | - |
| Flash | 4MB SPI NOR + 256 MB NAND |
| DRAM | 4 GB DDR4 |
| LED | PWR, SYS, WAN, LAN, USB, FAN |
| Dimensions ( W x D x H ) | 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm) |
| Protection | 4 kV surge protection |
| Enclosure | Steel |
| Mounting | Rack Mountable |
| Max. Power Consumption | • 26.36 W (with USB 3.0 connected)• 19.12 W (without USB 3.0 connected) |
| IPS Throughput | TCP: 4924 Mbps;UDP: 4521 Mbps |
| DPI Throughput | TCP: 5524 Mbps; UDP: 3547 Mbps |
| WireGuard VPN | • 300 Tunnels |
| Concurrent Session | 2,300,000 |
| New Sessions /Second | 20,000 |
| NAT (Static IP) | • Upload: 9445.82 Mbps• Download: 9449.26 Mbps |
| NAT(DHCP) | • Upload: 9426.83 Mbps• Download: 9426.20 Mbps |
| NAT(PPPoE) | • Upload: 9413.96 Mbps• Download: 9102.01 Mbps |
| NAT (L2TP) | • Upload: 9064.66 Mbps• Download: 8587.57 Mbps |
| NAT (PPTP) | • Upload: 8712.11 Mbps• Download: 8505.61 Mbps |
| 64 Byte Packet Forwarding Rate | • Upload: 2,109,375 pps• Download: 2,011,719 pps |
| IPsec VPN Throughput | • ESP-SHA1-AES256: 3099.4 Mbps• ESP-SHA256-AES256: 2928.4 Mbps• ESP-SHA384-AES256: 2935.7 Mbps• ESP-SHA512-AES256: 2878 Mbps |
| OpenVPN | • OpenVPN Server• OpenVPN Client (10)*6• 110 OpenVPN Tunnels |
| L2TP VPN Throughput | • Unencrypted: 10497Mbps• Encrypted: 3178.5Mbps |
| SSL VPN Throughput | 4486 Mbps |
| 1,518 Byte Packet forwarding rate | • Upload: 820,982pps• Download: 820,982ppps |
| WAN Connection Type | • Static/Dynamic IP• PPPoE• PPTP• L2TP• 6to4 Tunnel• Pass-Through• Mobile Broadband: 4G/3G modem for backup via USB port |
| MAC Clone | Modify WAN/LAN MAC Address*4 |
| DHCP | • DHCP Server/Client• DHCP Address Reservation• Multi-net DHCP• Multi-IP Interfaces• WAN DHCP 60 |
| IPv6 | WAN Connection |
| VLAN | 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy |
| Advanced Routing | • Static Routing• Policy Routing |
| Bandwidth Control | • IP/Port-based Bandwidth Control• Guarantee & Limited Bandwidth |
| Load Balance | • Intelligent Load Balance• Application Optimized Routing• Link Backup (Timing*5, Failover)• Online Detection |
| NAT | • One-to-One NAT*5• Multi-Net NAT• Port Forwarding• Port Triggering*5• NAT-DMZ• FTP/H.323/SIP/IPSec/PPTP ALG• UPnP• Disable NAT |
| Session Limit | IP-based Session Limit |
| GRE | √ (Only in Standalone Mode) |
| SD-WAN | √ (Only in Controller Mode) |
| SSL VPN | • SSL VPN Server• SSL VPN Client• 500 SSL VPN Tunnels |
| IPsec VPN | • 300 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, SHA1, SHA256, SHA384, SHA512, AES128, AES192, AES256 Encryption Algorithm• IKE v1/v2• MD5, SHA1 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS) |
| PPTP VPN | • PPTP VPN Server• PPTP VPN Client (32)*6• 300 Tunnels (Shared with L2TP)• PPTP with MPPE Encryption |
| L2TP VPN | • L2TP VPN Server• L2TP VPN Client (32)*6• 300 Tunnels (Shared with PPTP)• L2TP over IPSec |
| Web Authentication | • No Authentication• Simple Password*2• Hotspot(Local User / Voucher*2 / SMS*2 / Radius*2)• External Radius Sever• External Portal Sever*2 |
| Omada App | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Centralized Management | • Omada Hardware Controller (OC300)• Omada Hardware Controller (OC200)• Omada Software Controller• Omada Cloud-Based Controller |
| Cloud Access | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe) |
| Maintenance | • Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3• Diagnostics (Ping & Traceroute)*5• NTP Synchronize*5• Syslog Support |
| Zero-Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
| Management Features | • Automatic Device Discovery• Intelligent Network Monitoring• Abnormal Event Warnings• Unified Configuration• Reboot Schedule• Captive Portal Configuration |
| Certification | CE, FCC, RoHS |
| Package Content | • Omada 10G Multi-WAN Security Gateway ER8411• Power Cord• Rack-Mount Kit• Quick Installation Guide |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux |
| Environment | • Operating Temperature: 0–40 ℃ (32–104 ℉);• Storage Temperature: -40–70 ℃ (-40–158 ℉)• Operating Humidity: 10–90% RH non-condensing• Storage Humidity: 5–90% RH non-condensing |
Contents not available.
Pour les questions fréquentes, consultez le centre d'aide Ubiquiti :
❓ Centre d'aide Ubiquiti