The TP-Link Omada ER7206 is a gigabit VPN router designed for secure and scalable business networks. Equipped with 5 Gigabit ports (1 SFP WAN, 1 WAN, 3 WAN/LAN) , it supports Multi-WAN Load Balancing and advanced VPN (IPSec, OpenVPN, PPTP, L2TP) . Integrated with Omada SDN , it offers centralized management via cloud and Omada app for optimal remote control.
CLEARANCE SALE ×
CLEARANCE SALE!
Take advantage of our must-see outing offers.
Discover the promo >>

MULTI-WAN GIGABIT VPN GATWAY ROUTER - TPLINK OMADA
The TP-Link Omada ER7206 is a gigabit VPN router designed for secure, scalable and easy-to-manage enterprise networks. Integrated with Omada SDN, it supports Zero-Touch Provisioning (ZTP) and centralized cloud management, allowing intelligent network monitoring via web or Omada app.
With its 6 Gigabit ports – 1 SFP Gigabit and 5 RJ45 Gigabit – and up to 4 WAN ports (1 SFP WAN port, 1 RJ45 WAN port and 2 WAN/LAN ports), it guarantees high speed and load balancing, optimizing bandwidth for smooth and stable network traffic.
For business security, the TP-Link Omada ER7206 supports up to 100 IPsec LAN-to-LAN connections, 50 OpenVPN connections, 50 L2TP and 50 PPTP connections, providing enterprise-grade VPN for secure branch office and remote working connections. It also features an advanced firewall, DoS protection, IP/MAC/URL filtering and other security features to protect your network and sensitive data.

Main features:
- Smart and centralized management: Integrated into Omada SDN for simplified configuration and monitoring, zero-touch provisioning (ZTP) for quick, hands-free installation, and cloud management with remote access via web and Omada app.
- Fast and stable Gigabit connectivity : 1 Gigabit WAN SFP port for optimized fiber connections, 5 Gigabit RJ45 ports for high-speed wired networking & up to 4 WAN ports for load balancing and bandwidth optimization.
- Enterprise-grade VPN : 100 IPsec LAN-to-LAN connections for secure business connections, 50 OpenVPN, 50 L2TP and 50 PPTP connections for smart working and remote access and VPN with advanced encryption for data protection and privacy
- Maximum security and data protection : Advanced firewall to protect your network from intrusions, DoS protection, IP/MAC/URL filtering and customizable security policies and traffic monitoring to prevent attacks and unauthorized access
- Ideal for businesses and professionals : Perfect for offices, hotels, schools and high traffic environments, high scalability and stability for a network that is always efficient
Technical data sheet
| Model | ER7206 |
| SAFETY | |
| Access Control | Source/Destination IP Based Access Control |
| Filtering | WEB Group Filtering§ URL Filtering Web Security§ |
| ARP inspection | Sending GARP Packets§ ARP Scanning§ IP-MAC Binding§ |
| Attack defense | TCP/UDP/ICMP Flood Defense Block TCP Scan (Stealth FIN/Xmas/Null) Block Ping from WAN |
| HARDWARE FEATURES | |
| Standards and protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP |
| Interface | 1 Gigabit SFP WAN ports 1 Gigabit WAN port 2 Gigabit LAN/WAN ports 2 Gigabit LAN ports |
| Average | 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m)) 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m) |
| Number of fans | Fanless |
| Key | Reset Button |
| Diet | 100–240V~50/60Hz |
| PoE Budget | - |
| Flash | SPI 4MB + NAND 128MB |
| DRAM | 512MB |
| LED | PWR, SYS, SFP WAN, WAN (Speed, Link/Act), LAN (Speed, Link/Act) |
| Dimensions (L x W x H) | 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm) |
| Safety | 4kV surge protection |
| Enclosure | Steel |
| Mounting type | Desktop |
| Max Power Consumption | 8.95W |
| PERFORMANCES | |
| IPS Throughput | TCP: 200 Mbps; UDP: 150Mbps |
| DPI Throughput | TCP: 931 Mbps; UDP: 902Mbps |
| WireGuard VPN | 177.2 Mbps |
| Concurrent sessions | 150,000 |
| New Sessions /Second | 4,500 |
| NAT (Static IP) | 930.5Mbps / 937.3Mbps |
| NAT(DHCP) | 932.5Mbps / 936.7Mbps |
| NAT(PPPoE) | 913.2Mbps / 937.4Mbps |
| NAT (L2TP) | 876.4Mbps / 917.7Mbps |
| NAT (PPTP) | 859.7Mbps / 915.5Mbps |
| 64 Byte Packet Forwarding Rate | - |
| IPsec VPN Throughput | AES128: 217.0Mbps |
| OpenVPN | 34.2 Mbps |
| L2TP VPN Throughput | Unencrypted: 1461.5 Mbps Encrypted: 248.5 Mbps |
| PPTP VPN Throughput | Unencrypted: 1645.5 Mbps Encrypted: 139.6 Mbps |
| SSL VPN Throughput | - |
| 66 Byte Packet forwarding rate | 268,895 pps / 268,895 pps |
| 1,518 Byte Packet forwarding rate | 81,274 pps / 81,274 pps |
| BASIC FUNCTIONS | |
| WAN Connection Type | Static IP Dynamic IP PPPoE (supports MRU Configuration) PPTP L2TP |
| MAC clone |
Modify WAN/LAN MAC Address† |
| DHCP | DHCP Server DHCPv6 PD Server (only in Standalone Mode) DHCP Options Customization DHCP Address Reservation Multi-net DHCP Multi-IP Interfaces |
| IPv6 | StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode |
| VLAN | 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
| ADVANCED FEATURES | |
| ACL |
IP/Port/Protocol/Domain Name Filtering |
| Advanced Routing |
Static Routing |
| Bandwidth control | IP/Port-based Bandwidth Control |
| Load balance | Intelligent Load Balance Application Optimized Routing Link Backup (Timing, Failover) Online Detection |
| NAT | One to One NAT Multi-Net NAT Port Forwarding Port Triggering§ NAT-DMZ FTP/H.323/SIP/IPSec/PPTP ALG UPnP |
| Session Limit | IP-based Session Limit |
| VPN | |
| SSL VPN | - |
| IPsec VPN |
100 IPSec VPN Tunnels |
| PPTP VPN | PPTP VPN Server PPTP VPN Client (10) 50 Tunnels PPTP with MPPE Encryption |
| L2TP VPN | L2TP VPN Server L2TP VPN Clients (10) 50 Tunnels L2TP over IPSec |
| OpenVPN | OpenVPN Server OpenVPN Clients (10) 50 OpenVPN Tunnels "Certificate + Account" Mode Full Mode |
| WireGuard VPN | 20 Tunnels |
| AUTHENTICATION | |
| Web Authentication | No Authentication Simple Password*2 Hotspot(Local User / Voucher* / SMS* / Radius*) External Radius Server External Portal Server* LDAP§ |
| MANAGEMENT | |
| Omada App | Yes, Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Centralized Management |
Omada Cloud-Based Controller |
| Cloud Access | Yes, Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) |
| Maintenance | Web Management Interface Remote Management Export & Import Configuration SNMP v1/v2c/v3 Diagnostics (Ping & Traceroute)§ NTP Synchronize§ Port Mirroring CLI (Standalone Mode only) Syslog Support |
| Zero Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
| Management Features | Automatic Device Discovery Intelligent Network Monitoring Abnormal Event Warnings Unified Configuration Reboot Schedule Captive Portal Configuration |
| OTHER | |
| Certification | CE, FCC, RoHS |
| Package Contents |
ER7206(TL-ER7206) |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10, MAC OS, NetWare, UNIX or Linux |
| Environment | Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F) Storage Temperature: -40–70℃ (-40–158℉) Operating Humidity: 10–90% RH non-condensing Storage Humidity: 5–90% RH non-condensing |
|
Omada SDN: The Smartest Cloud Solution for Enterprise Networking
|
|
|
Up to four Gigabit WAN ports to optimize bandwidth utilization One gigabit SFP WAN port, one gigabit RJ45 WAN port and two freely interchangeable WAN/LAN ports enable the router to support up to four WAN ports to meet various Internet access requirements through one device. The multi-WAN load balancing function distributes data flows based on the bandwidth proportion of each WAN port to increase the multi-line broadband utilization rate.
|
|
|
Highly Secure VPN
|
|
| Numerous security features
|
|
|
Internet Access Management Strategy
|
|
|
3 year warranty The following product is covered by a 3 year warranty |
|







