Skip to content
#1 Source in low voltage wire and cable. Call us today to learn more about special offers.
#1 Source in low voltage wire and cable. Call us today to learn more about special offers.

Omada VPN Router with 10G Ports

by TP-Link
SKU: ER8411
Various lead times may apply to this product. Please contact us for more details.
FCC Verified logo CE Verified logo RoHS Compliant


Maximize the 10G Broadband with Omada Enterprise Gateway

Maximized 10G Broadband with the Omada Enterprise Gateway. Build your lighting-fast network with Omada ER8411 – an Enterprise VPN router with 10G ports. It surpasses the need for high-speed, reliable and safe enterprise network, ideal for large-scale deployments such as offices, schools, and hotels

10 x WAN Ports & One USB WAN for Mobile Broadband

Up to 10 x WAN SFP+, SFP, and RJ45 ports allow the router to support various internet access requirements. Multi-WAN Load Balancing distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Connect a 4G/3G modem to one of the USB 3.0 ports for LTE WAN backup.

Switch Network Overview

High-Security and High-Performance VPN

ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPSec, PPTP, and L2TP in Client/Server mode. One-click auto IPSec VPN simplifies VPN configuration and facilitates network management and deployment. The router also features built-in VPN engine hardware, allowing support and management of hundreds if IPSec, PPTP, L2TP, SSL, VPN and OpenVPN Tunnels



  • Integrated into Omada SDN: Zero-Touch Provisioning (ZTP)*3, Centralized Cloud Management, and Intelligent Monitoring.
  • Centralized Management: Cloud access and Omada app for ultra convenience and easy management.
  • Two 10GE SFP+ Ports: 1× WAN and 1× WAN/LAN 10GE SFP+ ports provide high-bandwidth aggregation connectivity
  • Up to 10 WAN Ports: Fiber and RJ45 WAN ports with load balance raise the utilization rate of multi-line broadband 1.
  • Highly Secure VPN: Enterprise-standard SSL/ IPSec / PPTP / L2TP VPN & OpenVPN / L2TP over IPSec VPN are ideal for use across multiple branches and for WFH.
  • Abundant Security Features: Powerful Firewall, DoS defense, IP/MAC/URL filtering, and IP-MAC Binding, and One-Click ALG Activation provide world-class security.



Interface • 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN)
• 1× 1GE SFP WAN/LAN Ports
• 8× 1GE RJ45 WAN/LAN Ports
• 1× RJ45 Console Ports
• 2× USB Ports (Connecting 4G/3G Modem as WAN Backup)
Button Reset Button
Power Supply Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz)
Flash 4MB SPI NOR + 256 MB NAND
Dimensions (W x D x H) 17.3 x 8.7 x 1.7in (440 x 220 x 44mm)
Max Power Consumption • 26.36 W (with USB 3.0 connected)
• 19.12 W (without USB 3.0 connected)
Concurrent Session 2,300,000
New Sessions/Second 20,000
NAT (Static IP) • Upload: 9445.82 Mbps
• Download: 9449.26 Mbps
NAT (DHCP) • Upload: 9426.83 Mbps
• Download: 9426.20 Mbps
NAT (PPPoE) • Upload: 9413.96 Mbps
• Download: 9102.01 Mbps
NAT (L2TP) • Upload: 4230.62 Mbps
• Download: 4169.53 Mbps
NAT (PPTP) • Upload: 3933.86 Mbps
• Download: 3821.97 Mbps
64 Byte Packet Forwarding Rate • Upload: 1080 Mbps
• Download: 1030 Mbps
IPsec VPN Throughput • SHA1-AES256: 2140.45 Mbps
• SHA2-AES256: 2080.20 Mbps
OpenVPN 1665.64 Mbps
L2TP VPN Throughput • Unencrypted: 5013.50 Mbps
• Encrypted: 2274.74 Mbps
SSL VPN Throughput 1511.10 Mbps
WAN Connection Type • Static/Dynamic IP
• L2TP
• 6to4 Tunnel
• Pass-Through
• Mobile Broadband: 4G/3G modem for backup via USB port
MAC Clone Modify WAN/LAN MAC Address*4
DHCP • DHCP Server/Client
• DHCP Address Reservation
• Multi-net DHCP
• Multi-IP Interfaces
IPv6 WAN Connection
IPTV IGMP v2/v3 Proxy
ACL IP/Port/Protocol/Domain Name Filtering
Advanced Routing • Static Routing
• Policy Routing
Bandwidth Control • IP/Port-based Bandwidth Control
• Guarantee & Limited Bandwidth
Load Balance • Intelligent Load Balance
• Application Optimized Routing
• Link Backup (Timing, Failover)
• Online Detection
NAT  • One-to-One NAT
• Multi-Net NAT
• Virtual Server
• Port Triggering
• UPnP
Security • SPI Firewall
• VPN Passthrough
• DoS Defence, Ping of Death
• Local Management
Session Limit IP-based Session Limit
• SSL VPN Client
• 500 OpenVPN Tunnels
IPsec VPN • 300 IPSec VPN Tunnels
• LAN-to-LAN, Client-to-LAN
• Main, Aggressive Negotiation Mode
• DES, 3DES, SHA1, SHA2, AES128, AES192, AES256 Encryption Algorithm
• IKE v1/v2
• MD5, SHA1 Authentication Algorithm
• NAT Traversal (NAT-T)
• Dead Peer Detection (DPD)
• Perfect Forward Secrecy (PFS)
• PPTP VPN Client (32)
• 300 Tunnels (Shared with L2TP)
• PPTP with MPPE Encryption
L2TP VPN • L2TP VPN Server
• L2TP VPN Client (32)
• 300 Tunnels (Shared with PPTP)
• L2TP over IPSec
OpenVPN • OpenVPN Server
• OpenVPN Client (10)
• 110 OpenVPN Tunnels
Filtering • WEB Group Filtering
• URL Filtering
• Web Security
ARP Inspection • Sending GARP Packets
• ARP Scanning
• IP-MAC Binding
Attack Defense • TCP/UDP/ICMP Flood Defense
• Block TCP Scan (Stealth FIN/Xmas/Null)
• Block Ping from WAN
Access Control Source/Destination IP Based Access Control
Web Authentication • No Authentication
• Simple Password
• Hotspot(Local User / Voucher / SMS / Radius
• External Radius Sever
• External Portal Sever
• Facebook Check-In
• Instagram Follow
Omada App Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management • Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada Software Controller
• Omada Cloud-Based Controller
Cloud Access Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Service Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Maintenance • Web Management Interface
• Remote Management
• Export & Import Configuration
• SNMP v1/v2c/v3
• Diagnostics (Ping & Traceroute)
• NTP Synchronize
• Syslog Support
Zero-Touch Provisioning Yes. Requiring the use of Omada Cloud-Based Controller.
Management Features • Automatic Device Discovery
• Intelligent Network Monitoring
• Abnormal Event Warnings
• Unified Configuration
• Reboot Schedule
• Captive Portal Configuration
Certification CE, FCC, RoHS
Package Contents • Omada 10G Multi-WAN Security Gateway ER8411
• Power Cord
• Rack-Mount Kit
• Quick Installation Guide
System Requirements Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux
Environment • Operating Temperature: 0–40 ℃ (32–104 ℉);
• Storage Temperature: -40–70 ℃ (-40–158 ℉)
• Operating Humidity: 10–90% RH non-condensing
• Storage Humidity: 5–90% RH non-condensing

Additional Information

Ethernet Switch Accessories

An Ethernet network switch is a telecommunication device that receives data transmitted from a connected device and relays it to a specific device. Ethernet switches create separate collision domains per switch port, allowing for simultaneous data transfers to occur without interference. They also reduce the number of broadcast domains, and don't require heavy CPU usage. The Ethernet switch manages the flow of network traffic more efficiently and in a safer manner than repeater hubs. It allows for the flow of data between connected devices. Ethernet switches come in both managed and unmanaged varieties. Unmanaged switches are the easy to install, plug and play variety. To learn more about our switches please visit our overview page. Our Switches can be combined with a wide array of products.

What's In The Box

What's In The Box

  • Qty 1 - TL-SX3008F
  • Qty 1 - Power Cord
  • Qty 1 - Installation Guide
  • Qty 1 - Resource CD
  • Qty 4 - Rubber Feet