New Arrival ER8411, the first Omada Router that supports 10G Ports
Hi Everyone,
We’re excited to announce the official launch of ER8411 here!
ER8411 is the first Omada Router that supports 10G Ports. In addition, the SSL VPN function is supported, which enriches the application scenarios. Let's read on to learn more about this new product!
1. Overview
- 10G router for enterprise-class high-speed networking.
- Enterprise-standard SSL/ IPSec / PPTP / L2TP VPN & OpenVPN are ideal for use across multiple branches and working from home.
- Powerful Firewall, DoS defense, IP/MAC/URL/Keyword filtering, IP-MAC Binding, and One-Click ALG Activation provide world-class security.
2. Application Scenario
As an export router for offices, restaurants, and small and medium-sized hotels, it is used with 10G switch, WiFi-6E or WiFi-6 Access Points. Provides a high-quality and low-latency network experience.
- PoE Switch with 10G Uplink
- Wi-Fi 6E and Wi-Fi 6 Access Points with 10G or 2.5G ports
- Switch with 10G Uplink
Key Highlights Features
3. Software Feature Introduction
(1) High-Security and High-Performance VPN
- ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPsec, PPTP, and L2TP in Client/Server mode. One-click auto IPsec VPN greatly simplifies VPN configuration and facilitates network management and deployment.
- It also features built-in VPN engine hardware, allowing the router to support and manage up to 500 SSL VPN, 300 IPsec VPN, 300PPTP/L2TP, and 110 OpenVPN Tunnels.
(2) Two Kinds of Management Method
Support two kinds of management methods, providing users with more flexible options.
- Controller Mode: Configuration of Router, real-time network monitoring and logging, remote management in the cloud.
- Standalone Mode: Simple configuration, plug-and-play.
(3) SSL VPN
SSL VPN is a VPN remote access technology based on the SSL protocol. Using SSL VPN, mobile office workers can securely and conveniently access the corporate intranet, access corporate intranet resources, and improve work efficiency.
Comparison of SSL VPN and Traditional VPN
SSL protects data at the application layer and can be specifically protected for an application. The IPSec VPN is aimed at the entire network layer. Fine-grained control is not possible. Therefore, before the appearance of SSL VPN, although the VPN technologies such as IPSec and L2TP that appeared earlier can support the application scenario of remote access, these VPN technologies have the following defects.
|
SSL VPN |
IPsec VPN |
L2TP VPN |
Security |
High |
High |
Low |
Port |
Customize |
500/4500 |
1701 |
Service type |
TCP/UDP |
UDP |
UDP |
Configuration |
Simple |
Complicated |
Complicated |
Separation of permissions |
○ |
× |
× |
- The configuration of IPSec/L2TP VPN clients is more cumbersome
- Network administrators cannot control the rights of remote users to access intranet resources in detail.
Main application scenarios of SSL VPN
a. Service isolation can be achieved through the multi-virtual gateway technology. SSL VPN can set the permissions that each user can access to resources and improve the management of the entire network.
b. Ensure that remote users can safely and efficiently access network resources inside the enterprise outside the enterprise.
For detailed configuration steps, please refer to the following articles:
How to establish an SSL VPN Server by Omada Router in Standalone mode
How to establish an SSL VPN Server by Omada Router in Controller mode (Controller V5.4 or Above)
(4) USB Storage
One of the USB ports of the ER8411 supports the backup function. The configuration and log of the router can be backed up, and the configuration file and log can be preserved in case of an accident.
Note: USB Storage is only supported in Standalone mode.
4. Hardware Feature Introduction
(1) High-Capacity Performance with Quad-Core 2.2 GHz CPU
Enough processing power to support the massive management of your business network. Support to 1,500,000 concurrent sessions and NAT Throughput up to 10 Gbps, surpassing your expects.
(2) Dual Redundant Power Supplies
Dual redundant power supplies ensure carrier-class reliability for enterprise networking.
(3) Maximize the 10G Broadband with Omada Enterprise Gateway
Build your lightning-fast network with Omada ER8411—an enterprise VPN router with 10G ports. It meets and surpasses the needs for high-speed, reliable, and safe enterprise networks, ideal for enterprise-level businesses, schools, hotels, and large-scale deployments.
(4) Up to 9× WAN Gigabit Ports & One USB WAN for Mobile Broadband
1× Gigabit WAN SFP and 8× Gigabit RJ45 ports allow the router to support various Internet access requirements. The multi-WAN Load Balancing function distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Mobile broadband via 4G/3G modem by connecting to the USB 3.0 port is also supported for WAN backup.
(5) Rack-mountable
The ER8411 is designed as a rack-mountable. It can be placed on the rack together with more IT equipment, which is convenient for unified management. On the one hand, it can occupy the smallest space, and on the other hand, it is convenient to connect and manage with other network devices.
5. Performance Comparison
Due to the optimization of software functions, the VPN performance of ER8411 has also been greatly improved. It is more suitable for data forwarding scenarios under complex network scale.
--------------------------------------------------------------------------------------------------------------------
Q&A
1. Does the USB backup port function as a file server?
The USB backup port does not have the function of a file server, and can only be used for the backup function of the router configuration file. And the functions of the two USB ports are different and cannot be used compatible with each other.
2. Does SSL VPN support client account/password authentication and restrict client access to certain resources?
Yes. SSL VPN can configure the account password of the client to improve security. In addition, you can specify certain resources that the client can access.
3. Does the USB backup have auto backup function?
No. Currently, the USB Backup function can only be backed up manually. We will optimize it in subsequent versions to implement the automatic backup function.
4. If the router is managed by the Controller, can it still be configured using the Web UI?
No. Once the router is managed by the controller, logging in to the web UI will show that the router is managed by the controller and cannot be configured.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
ok, thanks for the info, I'll get mine later today so I'll have to test a bit to see what kind of thing they've come up with this time :-)
- Copy Link
- Report Inappropriate Content
@Hank21 Hi. What about Wireguard support? We don't need old stuff like OpenVPN and L2TP.
- Copy Link
- Report Inappropriate Content
@Hank21 I was excited till I found out that ER8411 doesn't support mDNS... When are you planning to fix it?
- Copy Link
- Report Inappropriate Content
@Hank21
Yeah one would have hoped the latest firmware features would be available to the new hardware especially the premium one.
Currently the ER8411 doesn't support mDNS, wireguard, LAG or the latest ACL features for now. The last firmware update was a few days ago so might be a bit for the next.
Any plans on a new firmware sooner than later?
- Copy Link
- Report Inappropriate Content
@Hank21 I've managed to get one and was wondering how do I get access to DHCP OPTION 61 to connect to a WAN PON?
- Copy Link
- Report Inappropriate Content
FYI to everyone on here. This router has a ridiculous amount of problems. I'm ashamed that I bought one and expected TP-Link to follow-through. My recommendation to you all is avoid unless you somehow get one for free, and even then, throw it away.
- Copy Link
- Report Inappropriate Content
We really do appreciate the info... but for us users that know the flow of things, I wouldn't recommend buying the new hotness until a few firmware version are released.
This issue have even bitten with the big name vendors. Instead of being mad, you should advised users to wait until its fully mature to buy.
Your post shows your immaturity with in the I.T. game. If you don't like go to another vendor.
- Copy Link
- Report Inappropriate Content
@KimcheeGUN
The thing is, the promise from TP-Link was that this router would piggy-back off of the firmware from the other models. Those other models experience far less issues. You know nothing about my experience in IT, no need to be aggressive about it.
I'm sorry, but straight-up false advertising about features that would be available at launch is wrong and unacceptable, even in the IT world.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 12
Views: 9575
Replies: 28