TP-LINK OMADA - ER8411 - VPN Router with 10G SFP+ Ports and Dual Power Supply
Product Features
The TP-Link ER8411 is an Omada VPN router with two 10G SFP+ ports, eight gigabit WAN/LAN ports, over 9 Gbps NAT throughput and redundant dual power supplies.
ER8411 — TP-Link Omada VPN Router with 10G Ports
The TP-Link ER8411 is an Omada VPN router with two 10G SFP+ ports (one WAN, one WAN/LAN), a gigabit SFP WAN/LAN port, eight gigabit RJ45 WAN/LAN ports and two USB 3.0 ports. TP-Link quote 2,300,000 concurrent sessions, NAT throughput over 9 Gbps, IPsec VPN around 3 Gbps and redundant dual power supplies.
What the ER8411 is for
The ER8411 is the top of the Omada wired router range, built for multi-gigabit fibre lines, larger offices, hotels and campuses. The 10G SFP+ WAN port can take a multi-gigabit internet connection, and many ports can act as WAN for load balancing and failover, with a USB 4G dongle as an extra backup link.
It is a 1U rackmount unit with two power supplies for resilience. Pair it with Omada switches and access points and manage everything from an Omada controller or Omada Cloud.
Key features
- 2 x 10G SFP+ (1 WAN, 1 WAN/LAN), 1 x gigabit SFP WAN/LAN, 8 x gigabit RJ45 WAN/LAN
- NAT (PPPoE) throughput of 9413.96 Mbps up and 9102.01 Mbps down
- IPsec VPN throughput around 2.9 to 3.1 Gbps; SSL VPN 1006 Mbps
- 2,300,000 concurrent sessions and 20,000 new sessions per second
- Redundant dual power supplies, 100 to 240 V AC
- 2 x USB 3.0 (one supports 4G LTE dongle backup); RJ45 console port
- Omada SDN management; 1U steel rackmount case
Watch: Omada SDN series overview
Official TP-Link video: setting up a complete Omada network of gateway, switches and access points with the Omada SDN controller.
Full specification
| Interface | 2× 10GE SFP+ Ports (1× WAN, 1× WAN/LAN); 1× 1GE SFP WAN/LAN Port; 8× 1GE RJ45 WAN/LAN Ports; 1× RJ45 Console Port; 2× USB 3.0 Ports (one supports LTE backup with LTE dongle) |
| Network Media | 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m); 100BASE-TX: UTP category 5, 5e cable (Max 100 m); 1000BASE-T: UTP category 5e, 6 cable (Max 100 m) |
| Fan Quantity | 2 |
| Power Supply | Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz) |
| Flash | 4 MB SPI NOR + 256 MB NAND |
| DRAM | 4 GB DDR4 |
| Dimensions (W x D x H) | 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm) |
| Protection | 4 kV surge protection |
| Enclosure | Steel |
| Mounting | Rack Mountable |
| Max. Power Consumption | 26.36 W (with USB 3.0 connected); 19.12 W (without USB 3.0 connected) |
| Concurrent Session | 2,300,000 |
| New Sessions/Second | 20,000 |
| NAT (PPPoE) | Upload: 9413.96 Mbps; Download: 9102.01 Mbps |
| 64 Byte Packet Forwarding Rate | Upload: 2,109,375 pps; Download: 2,011,719 pps |
| IPsec VPN | 300 IPsec VPN Tunnels; LAN-to-LAN, Client-to-LAN; Main, Aggressive Negotiation Mode; DES, 3DES, SHA1, SHA256, SHA384, SHA512, AES128, AES192, AES256; IKE v1/v2; MD5, SHA1 Authentication; NAT-T; DPD; PFS |
| PPTP VPN | PPTP VPN Server; PPTP VPN Client (32); 300 Tunnels (shared with L2TP); PPTP with MPPE Encryption |
| L2TP VPN | L2TP VPN Server; L2TP VPN Client (32); 300 Tunnels (shared with PPTP); L2TP over IPSec |
| OpenVPN | OpenVPN Server; OpenVPN Client (10); 110 OpenVPN Tunnels |
| SSL VPN | SSL VPN Server; 500 SSL VPN Tunnels |
| GRE | Only in Standalone Mode |
| SD-WAN | Only in Controller Mode |
| IDS/IPS | Signature-based IPS/IDS threat detection |
| IPsec VPN Throughput | ESP-SHA1-AES256: 3099.4 Mbps; ESP-SHA256-AES256: 2928.4 Mbps; ESP-SHA384-AES256: 2935.7 Mbps; ESP-SHA512-AES256: 2878 Mbps |
| GRE Throughput | Unencrypted: 8437 Mbps; Encrypted: 2775 Mbps |
| WireGuard VPN Throughput | 1411 Mbps |
| OpenVPN Throughput | 1043 Mbps |
| L2TP VPN Throughput | Unencrypted: 10497 Mbps; Encrypted: 3178.5 Mbps |
| SSL VPN Throughput | 1006 Mbps |
| DPI Throughput | TCP: 9067 Mbps; UDP: 5873 Mbps |
| IPS Throughput | TCP: 9388 Mbps; UDP: 7538 Mbps |
| Centralized Management | Omada Hardware Controller; Omada Software Controller; Omada Central (Cloud-Based) |
| WAN Connection Type | Static/Dynamic IP; PPPoE; PPTP; L2TP; 6to4 Tunnel; Pass-Through; Mobile Broadband: 4G/3G modem for backup via USB port |
| VLAN | 802.1Q VLAN |
| Advanced Routing | Static Routing; Policy Routing; RIP; OSPF |
| Load Balance | Intelligent Load Balance; Application Optimized Routing; Link Backup (Timing, Failover); Online Detection |
| Package Content | ER8411; Power Cord; Rackmount Kit; RJ45 Console Cord; Quick Installation Guide |
| Environment | Operating Temperature: 0–40 °C; Storage Temperature: -40–70 °C; Operating Humidity: 10–90% RH non-condensing; Storage Humidity: 5–90% RH non-condensing |
What you will need
SFP+ modules or DAC cables for the 10G ports, RJ45 cabling, a 19-inch rack (rackmount kit included) and two power feeds to use the redundant PSUs. For central management, an Omada controller or Omada Cloud.
Buying from Zenith Security Co.
We are a supplier, not an installer. We will go through the ER8411 with you before you buy, checking your WAN speed, the SFP+ modules you need and VPN load, and depending on your requirements and your area we can recommend a qualified trade installer. We have been operating since 2012 and you can visit our trade counter in Wolverhampton.
How many WAN ports does the TP-Link ER8411 have?
One 10G SFP+ WAN port plus a 10G SFP+ WAN/LAN, a gigabit SFP WAN/LAN and eight gigabit RJ45 WAN/LAN ports. A USB 3.0 port supports a 4G LTE dongle for backup.
What throughput does the ER8411 handle?
TP-Link quote NAT (PPPoE) of 9413.96 Mbps upload and 9102.01 Mbps download, IPS of 9388 Mbps (TCP), WireGuard of 1411 Mbps and IPsec VPN up to 3099.4 Mbps.
Does the ER8411 have redundant power?
Yes. It has redundant dual power supplies (100 to 240 V AC, 50/60 Hz).
Is the ER8411 Omada compatible?
Yes. It works standalone through its own web interface, or can be adopted by an Omada software controller, hardware controller (OC200/OC300) or Omada Cloud so it is managed with your Omada switches and access points. SD-WAN works only in controller mode.
ER8411 or ER7206?
The ER7206 is a gigabit router with around 940 Mbps NAT. Choose the ER8411 for multi-gigabit internet, 10G uplinks or heavy VPN traffic.
How quickly can I get it?
We ship nationally from our multi-million pound warehouse, with orders leaving daily. Orders placed before 2:30pm are normally dispatched for delivery within 1–2 working days to England, Scotland and Wales. You can also collect in store from our trade counter. Call first so we can confirm your order is ready. We do not ship to Northern Ireland.
Can I collect or see one before buying?
Yes. Our trade counter is at Unit 3, Park View Centre, 243 Dudley Road, Wolverhampton WV2 3JU. Call first so we can confirm the item is there for you.
Questions on specification or compatibility: call 01902 902251, see our FAQ and support pages, or contact us. Trade accounts are available, see trade customers. Browse the full TP-Link range.
Official TP-Link VAR Partner: Zenith Security Co is listed on TP-Link's UK where-to-buy page as a VAR Partner, so this is genuine UK-supplied TP-Link equipment. See our full TP-Link range.
| Product Code | ER8411 |
|---|---|
| Dimensions | 440 × 220 × 44 mm (1U rackmount) |
| Manufacturer | TP-Link |
| Colour | Black |
| Device Port Speed | 10/100/1000 Mbps |
| Power Features | Redundant dual power supplies, 100–240 VAC, 26.36 W max |
| Connection Type | Wired |
| Device Ports | 8 |
| Managed | Yes |
| PoE Ports | 0 |
| Uplink Ports | 3 |
TECHNICAL SUPPORT
We provide tailored support for you and your CCTV system.
3 YEAR WARRANTY
Many of our Cameras and Recorders come with a comprehensive 3 year warranty.
COME & VISIT US
We've got a fully functioning show room and IP suite to show you exactly how our CCTV equipment works
FREE DELIVERY OVER £ 499
As cheap as £10, orders placed before 2:30pm are dispatched for delivery within 1–2 working days!
