Hi Everyone,

 

We’re excited to announce the official launch of ER8411 here!

 

ER8411 is the first Omada Router that supports 10G Ports. In addition, the SSL VPN function is supported, which enriches the application scenarios. Let's read on to learn more about this new product!

1. Overview

 

• 10G router for enterprise-class high-speed networking.
• Enterprise-standard SSL/ IPSec / PPTP / L2TP VPN & OpenVPN are ideal for use across multiple branches and working from home.
• Powerful Firewall, DoS defense, IP/MAC/URL/Keyword filtering, IP-MAC Binding, and One-Click ALG Activation provide world-class security.

 

2. Application Scenario

 

As an export router for offices, restaurants, and small and medium-sized hotels, it is used with 10G switch, WiFi-6E or WiFi-6 Access Points. Provides a high-quality and low-latency network experience.

• PoE Switch with 10G Uplink
• Wi-Fi 6E and Wi-Fi 6 Access Points with 10G or 2.5G ports
• Switch with 10G Uplink

 

 

Key Highlights Features

 

 

3. Software Feature Introduction

 

(1) High-Security and High-Performance VPN

 

• ER8411 supports pass-through traffic and multiple VPN protocols, including SSL, IPsec, PPTP, and L2TP in Client/Server mode. One-click auto IPsec VPN greatly simplifies VPN configuration and facilitates network management and deployment.
• It also features built-in VPN engine hardware, allowing the router to support and manage up to 500 SSL VPN, 300 IPsec VPN, 300PPTP/L2TP, and 110 OpenVPN Tunnels.

 

(2) Two Kinds of Management Method

 

Support two kinds of management methods, providing users with more flexible options.

• Controller Mode: Configuration of Router, real-time network monitoring and logging, remote management in the cloud.
• Standalone Mode: Simple configuration, plug-and-play.

 

 

(3) SSL VPN

 

SSL VPN is a VPN remote access technology based on the SSL protocol. Using SSL VPN, mobile office workers can securely and conveniently access the corporate intranet, access corporate intranet resources, and improve work efficiency.

 

Comparison of SSL VPN and Traditional VPN

 

SSL protects data at the application layer and can be specifically protected for an application. The IPSec VPN is aimed at the entire network layer. Fine-grained control is not possible. Therefore, before the appearance of SSL VPN, although the VPN technologies such as IPSec and L2TP that appeared earlier can support the application scenario of remote access, these VPN technologies have the following defects.

 

	SSL VPN	IPsec VPN	L2TP VPN
Security	High	High	Low
Port	Customize	500/4500	1701
Service type	TCP/UDP	UDP	UDP
Configuration	Simple	Complicated	Complicated
Separation of permissions	○	×	×

 

• The configuration of IPSec/L2TP VPN clients is more cumbersome
• Network administrators cannot control the rights of remote users to access intranet resources in detail.

 

Main application scenarios of SSL VPN

 

a. Service isolation can be achieved through the multi-virtual gateway technology. SSL VPN can set the permissions that each user can access to resources and improve the management of the entire network.

b. Ensure that remote users can safely and efficiently access network resources inside the enterprise outside the enterprise.

 

 

For detailed configuration steps, please refer to the following articles:

How to establish an SSL VPN Server by Omada Router in Standalone mode

How to establish an SSL VPN Server by Omada Router in Controller mode (Controller V5.4 or Above)

 

(4) USB Storage

 

One of the USB ports of the ER8411 supports the backup function. The configuration and log of the router can be backed up, and the configuration file and log can be preserved in case of an accident.

 

 

Note: USB Storage is only supported in Standalone mode.  

 

4. Hardware Feature Introduction

 

(1) High-Capacity Performance with Quad-Core 2.2 GHz CPU

 

Enough processing power to support the massive management of your business network. Support to 1,500,000 concurrent sessions and NAT Throughput up to 10 Gbps, surpassing your expects.

 

 

(2) Dual Redundant Power Supplies

 

Dual redundant power supplies ensure carrier-class reliability for enterprise networking.

 

 

(3) Maximize the 10G Broadband with Omada Enterprise Gateway

 

Build your lightning-fast network with Omada ER8411—an enterprise VPN router with 10G ports. It meets and surpasses the needs for high-speed, reliable, and safe enterprise networks, ideal for enterprise-level businesses, schools, hotels, and large-scale deployments.

 

 

(4) Up to 9× WAN Gigabit Ports & One USB WAN for Mobile Broadband

 

1× Gigabit WAN SFP and 8× Gigabit RJ45 ports allow the router to support various Internet access requirements. The multi-WAN Load Balancing function distributes data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. Mobile broadband via 4G/3G modem by connecting to the USB 3.0 port is also supported for WAN backup.

 

 

(5) Rack-mountable

 

The ER8411 is designed as a rack-mountable. It can be placed on the rack together with more IT equipment, which is convenient for unified management. On the one hand, it can occupy the smallest space, and on the other hand, it is convenient to connect and manage with other network devices.

 

 

 

5.  Performance Comparison

 

Due to the optimization of software functions, the VPN performance of ER8411 has also been greatly improved. It is more suitable for data forwarding scenarios under complex network scale.

 

 

 

--------------------------------------------------------------------------------------------------------------------

 

Q&A

 

1. Does the USB backup port function as a file server?

The USB backup port does not have the function of a file server, and can only be used for the backup function of the router configuration file. And the functions of the two USB ports are different and cannot be used compatible with each other.

 

2. Does SSL VPN support client account/password authentication and restrict client access to certain resources?

Yes. SSL VPN can configure the account password of the client to improve security. In addition, you can specify certain resources that the client can access.

 

3. Does the USB backup have auto backup function?      

No. Currently, the USB Backup function can only be backed up manually. We will optimize it in subsequent versions to implement the automatic backup function.

 

4. If the router is managed by the Controller, can it still be configured using the Web UI?      

No. Once the router is managed by the controller, logging in to the web UI will show that the router is managed by the controller and cannot be configured.