Omada Gigabit VPN Router

Highlights

• 1 Gigabit WAN port, 1 Gigabit LAN Port and 3 Gigabit WAN/LAN ports provide high-speed wired connectivity.
• Supports multiple VPN protocols, including IPSec, L2TP, PPTP and OpenVPN. Up to 20 IPSec VPN tunnels, 16 L2TP VPN tunnels, 16 PPTP VPN tunnels, and 16 OpenVPN tunnels are simultaneously supported.
• SPI firewall and DoS defense protect your network from most known Internet attacks.
• Professional 4 KV lightning protection keeps your investment safe and sound.

Omada Solution

Omada Software Defined Networking (SDN) platform integrates network devices, including access points, switches and gateways, providing 100% centralized cloud management. Omada creates a highly scalable network—all controlled from a single interface. Seamless wireless and wired connections are provided, ideal for use in hospitality, education, retail, offices, and more.

The platform supports various deployment scenarios, including:

• Hospitality: High Quality and Full Coverage Wi-Fi
• Education: High-Density Wi-Fi
• Retail: Social Marketing for 020
• Office: Wireless and Wired Connections
• Catering: Full Wi-Fi Coverage in High-Density Environment

The network topology can be managed through the Omada Software Controller or Omada Hardware Controller, connecting multiple sites (Site A, Site B, Site C, Site D, Site E) with routers, switches, and access points.

Hassle-Free Centralized Cloud Management

100% centralized cloud management of the whole network from different sites—all controlled from a single interface anywhere, anytime.

Unified Management from One Interface includes Access Points, Switches, and Gateways.

Management can be done via:

• Omada Software Controller: On-premises controller with no charging for hardware.
• Omada Hardware Controller: On-premises controller with no need to run a PC/server.

Key benefits include:

• No additional training needed
• Unlimited scalability
• Batch management
• Devices still work even when not connected to the Cloud

Assign Different Management Roles

Multi-user privilege assignment is available to increase management efficiency and security. Multi-person management, multi-level permissions, and the ability to add admins as needed, enable flexible network operation and maintenance.

Example roles include:

• Brain: Headquarter
• Mary: US Branch
• John: EU Branch
• Mike: APAC Branch

Easy and Intelligent Network Monitoring

The easy-to-use dashboard makes it easy to see your real-time network status; check network usage and traffic distribution; receive network condition logs, abnormal event warnings, and notifications; or even track key data for better business results. Network topology helps IP admins quickly see and troubleshoot connection at a glance.

Features include:

• Network Status Report
• Check the Traffic Distribution
• Network Topology at a Glance

The Omada ecosystem includes controllers like OC200 and OC300, along with various access points and switches.

Comprehensive Protection for the Whole Network

Better Protection for Users' Privacy

TP-Link Omada separates network management data from user data, with no user traffic passing through the cloud, ensuring better protection for users' privacy.

The data flow involves:

• Cloud: Management Data
• User Traffic: T1/DSL, SafeStream Gateway, JetStream Switch, Omada Access Point

Abundant Security Functions

Powerful firewall and advanced security functions further protect the network and data.

• High-Security VPN
• Powerful Firewall
• IP/MAC/URL Filtering
• Access Control
• Advanced WPA3 Encryption
• Captive Portal

Product Features

High-security VPN Capabilities

ER605 (TL-R605) supports multiple VPN protocols (IPSec, L2TP, PPTP, and OpenVPN) and can handle IPSec/PPTP/L2TP/OpenVPN pass-through traffic. It features a built-in hardware-based VPN engine supporting up to 20 LAN-to-LAN IPSec, 16 L2TP, 16 PPTP, and 16 OpenVPN connections. Advanced VPN features include DES/3DES/AES128/AES192/AES256 encryption, MD5/SHA1 authentication, Manual/IKE v1/v2 key management, and Main/Aggressive negotiation modes.

Abundant Security Features

For defense against external threats, ER605 (TL-R605) features SPI Firewall function. It can automatically detect and block Denial of Service (DoS) attacks such as TCP/UDP/ICMP Flooding, Ping of Death, and other related threats. The router provides IP/MAC/Domain name filtering functions to prevent attacks from intruders and viruses. For applications not well compatible with NAT, such as FTP, TFTP, H.323, and RTSP, ER605 (TL-R605) offers administrators one-click enable of ALG choices.

Safety Minded Enterprise Investments

Professional lightning protection technology is designed to prevent electrical surges from penetrating electrical equipment and discharges them harmlessly into the Earth. This router is designed to prevent lightning up to 4 KV in well-grounded connection conditions, ensuring that networking infrastructure investments remain safe.

Specifications

Model

ER605 (TL-R605)

Product Description

Omada Gigabit VPN Router

Standards and Protocols

IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP

Interface

1 Gigabit WAN port, 3 Gigabit LAN/WAN ports, 1 Gigabit LAN port

Network Media

10BASE-T: UTP category 3, 4, 5 cable (Max 100 m), EIA/TIA-568 100Ω STP (Max 100 m)

100BASE-TX: UTP category 5, 5e cable (Max 100 m), EIA/TIA-568 100Ω STP (Max 100 m)

1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)

Hardware

• Button: Reset Button
• Power Supply: External 9 V/0.85 A DC Adapter
• Flash: 16 MB SPI
• DRAM: 128 MB
• LED: PWR, SYS, WAN (Link/Act), LAN (Link/Act)
• Dimensions (WxDxH): 6.2 × 4.0 × 1.0 in (158 × 101 × 25 mm)

SDN Support

• Hardware Controller (OC200/OC300): Automatic Device Discovery, Intelligent Network Monitoring, Abnormal Event Warnings
• Software Controller: Unified Configuration, Reboot Schedule, Captive Portal Configuration

Performance

• Concurrent Session: 25,000
• New Sessions/Second: 2,400
• Static IP NAT Throughput: Upload: 936.7 Mbps, Download: 940.1 Mbps
• DHCP NAT Throughput: Upload: 941.1 Mbps, Download: 940.5 Mbps
• PPPOE NAT Throughput: Upload: 940.1 Mbps, Download: 939.6 Mbps
• L2TP NAT Throughput: Upload: 781.2 Mbps, Download: 708.4 Mbps
• PPTP NAT Throughput: Upload: 826.4 Mbps, Download: 607.1 Mbps
• 66 Byte Packet forwarding rate: Upload: 1,308,139 pps, Download: 1,308,140 pps
• 1,518 Byte Packet forwarding rate: Upload: 81,067 pps, Download: 81,063 pps
• IPSec VPN Throughput (AES256): 41.5 Mbps

VPN

• L2TP VPN Throughput: Unencrypted: 748.7 Mbps, Encrypted: 15.0 Mbps
• PPTP VPN Throughput: Unencrypted: 719.0 Mbps, Encrypted: 72.0 Mbps
• WAN Connection Type: Static IP, Dynamic IP, PPPOE, PPTP, L2TP
• DHCP: DHCP Server, DHCP Address Reservation, Multi-IP Interfaces, Multi-Net DHCP
• MAC Clone: Modify WAN/LAN MAC Address
• IPTV: IGMP v2/v3 Proxy
• IPv6: Developing
• VLAN: 802.1Q VLAN
• Load Balance: Intelligent Load Balance, Application Optimized Routing, Link Backup (Timing, Failover), Online Detection
• NAT: One-to-One NAT, Multi-Net NAT, Virtual Server, Port Triggering, NAT-DMZ
• Routing: Static Routing, Policy Routing
• Session Limit: IP-based Session Limit
• Bandwidth Control: IP-based Bandwidth Control
• IPSec VPN: 20 IPSec VPN Tunnels, LAN-to-LAN, Client-to-LAN, Main, Aggressive Negotiation Mode, DES, 3DES, AES128, AES192, AES256 Encryption Algorithm, IKE v1/v2, MD5, SHA1 Authentication Algorithm, NAT Traversal (NAT-T), Dead Peer Detection (DPD), Perfect Forward Secrecy (PFS)
• PPTP VPN: PPTP VPN Server, PPTP VPN Client (10), 16 Tunnels, PPTP with MPPE Encryption

Security

• Attack Defense: TCP/UDP/ICMP Flood Defense, Block TCP Scan (Stealth FIN/Xmas/Null), Block Ping from WAN
• Filtering: Web Group Filtering, URL Filtering, Web Security
• ARP Inspection: Sending GARP Packets, ARP Scanning, IP-MAC Binding
• Access Control: Source/Destination IP Based Access Control

Authentication

• No Authentication
• Simple Password
• Hotspot (Local User / Voucher / SMS / Radius)
• External Radius Server
• External Portal Server
• Facebook

Service

• Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)

Management

• Web Management Interface: Web Management Interface, Remote Management, Export & Import Configuration, SNMP v1/v2c/v3
• Maintenance: Diagnostics (Ping & Traceroute), NTP Synchronize, Syslog Support

Certification

CE, FCC, RoHS

Package Contents

ER605 (TL-R605), Power Adapter, RJ-45 Ethernet Cable, Quick Installation Guide

Others

• System Requirements: Microsoft Windows 98SE, NT, 2000, XP, Vista™, Windows 7/8/8.1/10, MAC OS, NetWare, UNIX or Linux
• Environment: Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F), Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F), Operating Humidity: 10% to 90% non-condensing, Storage Humidity: 5% to 90% non-condensing