The TP-Link ER605 is an Omada gigabit multi-WAN VPN router with five gigabit ports, USB 4G backup and IPsec, OpenVPN and WireGuard VPN, managed with Omada SDN.
The TP-Link ER605 is an Omada gigabit VPN router for small offices, with five gigabit RJ45 ports (1 WAN, 2 WAN/LAN, 2 LAN) and a USB 2.0 port for 4G LTE dongle backup. TP-Link quote 150,000 concurrent sessions, around 940 Mbps NAT throughput and IPsec, OpenVPN, WireGuard, L2TP and PPTP VPN, all manageable through Omada SDN.
The ER605 is the entry point to TP-Link's Omada business networking range: a wired tp link router that sits between your broadband line and the office network. Up to three of its ports can act as WAN, so you can load balance two or three internet lines or keep one as a backup, and a USB 4G dongle can take over if every fixed line drops.
It has no Wi-Fi of its own, so it is usually paired with Omada access points and an Omada switch. Run it standalone through its web interface, or adopt it into an Omada controller or Omada Cloud to manage the router, switches and APs from one place, including SD-WAN site-to-site links between branches.
Official TP-Link video: product overview of the Omada ER605 Gigabit VPN router.
| Interface | 1 Gigabit WAN port; 2 Gigabit LAN/WAN ports; 2 Gigabit LAN ports; 1 USB 2.0 (supports USB LTE dongle) |
| Standards and Protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3x, IEEE 802.1q; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN |
| Network Media | 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m); 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m); 1000BASE-T: UTP category 5e, 6 cable (Max 100 m) |
| Fan Quantity | Fanless |
| Button | Reset Button |
| Power Supply | External 12V/1A DC Adapter |
| Flash | 128 MB NAND |
| DRAM | 256 MB DDR |
| LED | PWR, SYS, WAN (Link/Act), LAN (Link/Act), USB |
| Dimensions (W x D x H) | 6.2 × 4.0 × 1.0 in (158 × 101 × 25 mm) |
| Protection | 4 kV surge protection |
| Enclosure | Steel |
| Mounting | Desktop/Wall-mount |
| Max. Power Consumption | 7.94 W |
| Concurrent Session | 150,000 |
| New Sessions/Second | 2,600 |
| NAT (Static IP) | Upload: 945.77 Mbps; Download: 938.79 Mbps; Bi-Directional: 1808.29 Mbps |
| NAT (DHCP) | Upload: 945.54 Mbps; Download: 945.66 Mbps; Bi-Directional: 1802.77 Mbps |
| NAT (PPPoE) | Upload: 939.71 Mbps; Download: 939.43 Mbps; Bi-Directional: 1788.54 Mbps |
| NAT (L2TP) | Upload: 815.55 Mbps; Download: 835.59 Mbps; Bi-Directional: 903.13 Mbps |
| NAT (PPTP) | Upload: 813.23 Mbps; Download: 850.91 Mbps; Bi-Directional: 894.41 Mbps |
| 66 Byte Packet Forwarding Rate | Upload: 1,388,815 pps; Download: 1,388,806 pps |
| 1,518 Byte Packet Forwarding Rate | Upload: 81,067 pps; Download: 81,067 pps |
| IPsec VPN | 20 IPsec VPN Tunnels; LAN-to-LAN, Client-to-LAN; Main, Aggressive Negotiation Mode; DES, 3DES, AES128, AES192, AES256, SHA2-384 and SHA2-512 Encryption Algorithm; IPsec Failover; IKE v1/v2; MD5, SHA1, SHA2 Authentication Algorithm; NAT Traversal (NAT-T); Dead Peer Detection (DPD); Perfect Forward Secrecy (PFS) |
| PPTP VPN | PPTP VPN Server; PPTP VPN Client (10); 16 Tunnels; PPTP with MPPE Encryption |
| L2TP VPN | L2TP VPN Server; L2TP VPN Client (10); 16 Tunnels; L2TP over IPSec |
| OpenVPN | OpenVPN Server; OpenVPN Client (10); 50 OpenVPN Tunnels; "Certificate + Account" Mode; Full Mode |
| WireGuard VPN | 20 Tunnels |
| GRE | Only in Standalone Mode |
| SD-WAN | Only in Controller Mode |
| IPsec VPN Throughput | ESP-SHA1-AES256: 259.78 Mbps; ESP-SHA256-AES256: 260.81 Mbps; ESP-SHA384-AES256: 37.65 Mbps; ESP-SHA512-AES256: 38.32 Mbps |
| GRE Throughput | Unencrypted: 460.97 Mbps; Encrypted: 161.83 Mbps |
| OpenVPN Throughput | 15.90 Mbps |
| L2TP VPN Throughput | Unencrypted: 558.60 Mbps; Encrypted: 143.60 Mbps |
| PPTP VPN Throughput | Unencrypted: 616.33 Mbps; Encrypted: 49.83 Mbps |
| WireGuard VPN Throughput | 123.4 Mbps |
| DPI Throughput | TCP: 905 Mbps; UDP: 788 Mbps |
| Access Control | Source/Destination IP Based Access Control/FQDN |
| DPI | Deep Packet Inspection, supports 2421 application types |
| DNS Proxy | DNSSEC, DoH, DoT, DNS Override |
| Filtering | Web Group Filtering; URL Categories and URLs Filtering; Web Security |
| Attack Defense | TCP/UDP/ICMP Flood Defense; Block TCP Scan (Stealth FIN/Xmas/Null); Block Ping from WAN |
| ARP Inspection | Sending GARP Packets; ARP Scanning; IP-MAC Binding; ARP Detection |
| Omada App | Yes. Requires OC300, OC200, Omada Cloud-Based Controller or Omada Software Controller |
| Centralized Management | Omada Cloud-Based Controller; Omada Hardware Controller (OC300); Omada Hardware Controller (OC200); Omada Software Controller |
| Cloud Access | Yes. Requires OC300, OC200, Omada Cloud-Based Controller or Omada Software Controller |
| Zero-Touch Provisioning | Yes. Requires Omada Cloud-Based Controller |
| Management Features | Automatic Device Discovery; Intelligent Network Monitoring; Abnormal Event Warnings; Unified Configuration; Reboot Schedule; Captive Portal Configuration |
| Maintenance | Web Management Interface; Remote Management; Export & Import Configuration; SNMP v1/v2c/v3; Diagnostics (Ping & Traceroute); NTP Synchronize; Port Mirroring; CLI (only in Standalone Mode); Syslog Support |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) |
| WAN Connection Type | Static IP; Dynamic IP; PPPoE (supports MRU Configuration); PPTP; L2TP |
| DHCP | DHCP Server; DHCPv6 PD Server (only in Standalone Mode); DHCP Options Customization; DHCP Address Reservation; Multi-IP Interfaces; Multi-Net DHCP; WAN DHCP 60 |
| IPv6 | Static IP/SLAAC/DHCPv6/PPPoE/6to4 Tunnel/Pass-Through/Non-Address mode |
| VLAN | 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
| Advanced Routing | Static Routing; Policy Routing; RIP; OSPF |
| Bandwidth Control | IP-based Bandwidth Control |
| Load Balance | Intelligent Load Balance; Application Optimized Routing; Link Backup (Timing, Failover); Online Detection |
| NAT | One-to-One NAT; Multi-Net NAT; Port Forwarding; Port Triggering; NAT-DMZ; FTP/H.323/SIP/IPSec/PPTP ALG; UPnP; Disable NAT |
| Session Limit | IP-based Session Limit |
| Web Authentication | No Authentication; Simple Password; Hotspot (Local User / Voucher / SMS / Radius); External Radius Server; External Portal Server; LDAP |
| Certification | CE, FCC |
| Package Content | ER605; Power Adapter; RJ45 Ethernet Cable; Quick Installation Guide |
| Environment | Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F); Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F); Operating Humidity: 10% to 90% non-condensing; Storage Humidity: 5% to 90% non-condensing |
Network cable for each link, your broadband modem or ONT on the WAN port, and a switch if you need more than two or three wired devices. For Wi-Fi add Omada access points. For central management you will need an Omada controller (software, hardware OC200/OC300 or Omada Cloud).
We are a supplier, not an installer. We will go through the ER605 with you before you buy, checking how many WAN lines you have, the VPN you need and how it fits with your switches and access points, and depending on your requirements and your area we can recommend a qualified trade installer. We have been operating since 2012 and you can visit our trade counter in Wolverhampton.
It has one dedicated gigabit WAN port and two gigabit WAN/LAN ports, so up to three wired internet connections can be load balanced or used as backup. A USB 4G LTE dongle can add mobile backup.
TP-Link list IPsec (20 tunnels), PPTP and L2TP (16 tunnels each), OpenVPN (50 tunnels) and WireGuard (20 tunnels). Measured IPsec throughput is around 260 Mbps with SHA1/SHA256-AES256 and WireGuard around 123 Mbps.
Yes, it is part of the Omada SDN range. It works standalone through its own web page, or can be adopted by an Omada software controller, hardware controller or Omada Cloud. SD-WAN works only in controller mode.
TP-Link quote NAT (PPPoE) throughput of 939.71 Mbps upload and 939.43 Mbps download, so it can run a gigabit broadband line at close to full speed.
No. It is a wired router. For built-in Wi-Fi see the ER706W, or add Omada access points.
We ship nationally from our multi-million pound warehouse, with orders leaving daily. Orders placed before 2:30pm are normally dispatched for delivery within 1–2 working days to England, Scotland and Wales. You can also collect in store from our trade counter. Call first so we can confirm your order is ready. We do not ship to Northern Ireland.
Yes. Our trade counter is at Unit 3, Park View Centre, 243 Dudley Road, Wolverhampton WV2 3JU. Call first so we can confirm the item is there for you.
Questions on specification or compatibility: call 01902 902251, see our FAQ and support pages, or contact us. Trade accounts are available, see trade customers. Browse the full TP-Link range.
Official TP-Link VAR Partner: Zenith Security Co is listed on TP-Link's UK where-to-buy page as a VAR Partner, so this is genuine UK-supplied TP-Link equipment. See our full TP-Link range.
| Product Code | ER605 |
|---|---|
| Dimensions | 158 × 101 × 25 mm |
| Manufacturer | TP-Link |
| Colour | Black |
| Device Port Speed | 10/100/1000 Mbps |
| Power Features | External 12V/1A DC adapter, 7.94 W max |
| Connection Type | Wired |
| Device Ports | 5 |
| Managed | Yes |
| PoE Ports | 0 |
| Uplink Ports | 0 |
We provide tailored support for you and your CCTV system.
Many of our Cameras and Recorders come with a comprehensive 3 year warranty.
We've got a fully functioning show room and IP suite to show you exactly how our CCTV equipment works
As cheap as £10, orders placed before 2:30pm are dispatched for delivery within 1–2 working days!
