New Arrival ER8411, the first Omada Router that supports 10G Ports
Hi Everyone,
We’re excited to announce the official launch of ER8411 here!
ER8411 is the first Omada Router that supports 10G Ports. In addition, the SSL VPN function is supported, which enriches the application scenarios. Let's read on to learn more about this new product!
1. Overview
- 10G router for enterprise-class high-speed networking.
- Enterprise-standard SSL/ IPSec / PPTP / L2TP VPN & OpenVPN are ideal for use across multiple branches and working from home.
- Powerful Firewall, DoS defense, IP/MAC/URL/Keyword filtering, IP-MAC Binding, and One-Click ALG Activation provide world-class security.
2. Application Scenario
As an export router for offices, restaurants, and small and medium-sized hotels, it is used with 10G switch, WiFi-6E or WiFi-6 Access Points. Provides a high-quality and low-latency network experience.
- PoE Switch with 10G Uplink
- Wi-Fi 6E and Wi-Fi 6 Access Points with 10G or 2.5G ports
- Switch with 10G Uplink
Key Highlights Features
3. Software Feature Introduction
(1) High-Security and High-Performance VPN
- ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPsec, PPTP, and L2TP in Client/Server mode. One-click auto IPsec VPN greatly simplifies VPN configuration and facilitates network management and deployment.
- It also features built-in VPN engine hardware, allowing the router to support and manage up to 500 SSL VPN, 300 IPsec VPN, 300PPTP/L2TP, and 110 OpenVPN Tunnels.
(2) Two Kinds of Management Method
Support two kinds of management methods, providing users with more flexible options.
- Controller Mode: Configuration of Router, real-time network monitoring and logging, remote management in the cloud.
- Standalone Mode: Simple configuration, plug-and-play.
(3) SSL VPN
SSL VPN is a VPN remote access technology based on the SSL protocol. Using SSL VPN, mobile office workers can securely and conveniently access the corporate intranet, access corporate intranet resources, and improve work efficiency.
Comparison of SSL VPN and Traditional VPN
SSL protects data at the application layer and can be specifically protected for an application. The IPSec VPN is aimed at the entire network layer. Fine-grained control is not possible. Therefore, before the appearance of SSL VPN, although the VPN technologies such as IPSec and L2TP that appeared earlier can support the application scenario of remote access, these VPN technologies have the following defects.
|
SSL VPN |
IPsec VPN |
L2TP VPN |
Security |
High |
High |
Low |
Port |
Customize |
500/4500 |
1701 |
Service type |
TCP/UDP |
UDP |
UDP |
Configuration |
Simple |
Complicated |
Complicated |
Separation of permissions |
○ |
× |
× |
- The configuration of IPSec/L2TP VPN clients is more cumbersome
- Network administrators cannot control the rights of remote users to access intranet resources in detail.
Main application scenarios of SSL VPN
a. Service isolation can be achieved through the multi-virtual gateway technology. SSL VPN can set the permissions that each user can access to resources and improve the management of the entire network.
b. Ensure that remote users can safely and efficiently access network resources inside the enterprise outside the enterprise.
For detailed configuration steps, please refer to the following articles:
How to establish an SSL VPN Server by Omada Router in Standalone mode
How to establish an SSL VPN Server by Omada Router in Controller mode (Controller V5.4 or Above)
(4) USB Storage
One of the USB ports of the ER8411 supports the backup function. The configuration and log of the router can be backed up, and the configuration file and log can be preserved in case of an accident.
Note: USB Storage is only supported in Standalone mode.
4. Hardware Feature Introduction
(1) High-Capacity Performance with Quad-Core 2.2 GHz CPU
Enough processing power to support the massive management of your business network. Support to 1,500,000 concurrent sessions and NAT Throughput up to 10 Gbps, surpassing your expects.
(2) Dual Redundant Power Supplies
Dual redundant power supplies ensure carrier-class reliability for enterprise networking.
(3) Maximize the 10G Broadband with Omada Enterprise Gateway
Build your lightning-fast network with Omada ER8411—an enterprise VPN router with 10G ports. It meets and surpasses the needs for high-speed, reliable, and safe enterprise networks, ideal for enterprise-level businesses, schools, hotels, and large-scale deployments.
(4) Up to 9× WAN Gigabit Ports & One USB WAN for Mobile Broadband
1× Gigabit WAN SFP and 8× Gigabit RJ45 ports allow the router to support various Internet access requirements. The multi-WAN Load Balancing function distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Mobile broadband via 4G/3G modem by connecting to the USB 3.0 port is also supported for WAN backup.
(5) Rack-mountable
The ER8411 is designed as a rack-mountable. It can be placed on the rack together with more IT equipment, which is convenient for unified management. On the one hand, it can occupy the smallest space, and on the other hand, it is convenient to connect and manage with other network devices.
5. Performance Comparison
Due to the optimization of software functions, the VPN performance of ER8411 has also been greatly improved. It is more suitable for data forwarding scenarios under complex network scale.
--------------------------------------------------------------------------------------------------------------------
Q&A
1. Does the USB backup port function as a file server?
The USB backup port does not have the function of a file server, and can only be used for the backup function of the router configuration file. And the functions of the two USB ports are different and cannot be used compatible with each other.
2. Does SSL VPN support client account/password authentication and restrict client access to certain resources?
Yes. SSL VPN can configure the account password of the client to improve security. In addition, you can specify certain resources that the client can access.
3. Does the USB backup have auto backup function?
No. Currently, the USB Backup function can only be backed up manually. We will optimize it in subsequent versions to implement the automatic backup function.
4. If the router is managed by the Controller, can it still be configured using the Web UI?
No. Once the router is managed by the controller, logging in to the web UI will show that the router is managed by the controller and cannot be configured.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Any update yet on a release date in the US?
- Copy Link
- Report Inappropriate Content
@BGV2022 @hightechredneck Looks like it's now available at B&H for preordering. I can't link to the site but you can go to bhphotovideo dot com and search for "ER8411" and it'll come up. No release date listed yet though.
- Copy Link
- Report Inappropriate Content
@mattb123 Did you ever get an answer on these questions. I can find nothing about it on their site and data sheets.
- Copy Link
- Report Inappropriate Content
Hi when are you planning to release firmware update for ER8411. The latest firmware is of august 2022.
mdns, ping attack location and port speed change is not available in current version.
I have 2 of these Er8411 v 1.0 but cant use it to full potential until new firmware is relased.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
New firmware today :-)
https://www.tp-link.com/en/support/download/er8411/#Firmware
it fit perfectly, I'm getting my ER8411 later today.
But @Hank where is Controller v5.7 ?? this needed at the same time according to release note.
1. Optimized the processing logic of SSL VPN with Radius authentication. Please note that if you have configured SSL VPN with Radius authentication in Controller mode, you need to upgrade Controller to V5.7 at the same time, otherwise the SSL VPN page will be hidden
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
@shberge just updated the firmware to the latest version ER8411(UN)_V1_1.0.1 Build 20221110.
shberge wrote
New firmware today :-)
https://www.tp-link.com/en/support/download/er8411/#Firmwareit fit perfectly, I'm getting my ER8411 later today.
But @Hank where is Controller v5.7 ?? this needed at the same time according to release note.
1. Optimized the processing logic of SSL VPN with Radius authentication. Please note that if you have configured SSL VPN with Radius authentication in Controller mode, you need to upgrade Controller to V5.7 at the same time, otherwise the SSL VPN page will be hidden
Yes SSL VPN is lost.
The port speed configuration is not yet available.
None of the new features which were added for ER7206 in V 1.2.3 firmware like
- port speed
- Source IP address of large Ping attack packets.
- One-to-One NAT in Controller mode.
- "Certificate + Account" mode for OpenVPN
are added in current firmware. I hope TP Link releases the updated firmware soon.
useless firmware which reduces the functionality further.
- Copy Link
- Report Inappropriate Content
well, why I'm not surprised, but I'll have to test it to see if it's better than the other routers from TP-Link, I'll have to wait for the update until Controller 5.7 is available.
Have you checked whether there is a LAN-LAN ACL and a WAN-IN ACL on the router?
- Copy Link
- Report Inappropriate Content
I can't see LAN-LAN ACL, WAN-in is available.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 12
Views: 9520
Replies: 28