ER605 V2.20

Omada Gigabit VPN Gateway

Integrated into Omada SDN: Zero-Touch Provisioning***, Centralized Cloud Management, and Intelligent Monitoring.
Centralized Management: Cloud access and Omada app for convenience and easy management.
Five Gigabit Ports: High-speed wired connectivity.
Up to 3 WAN Ethernet Ports: 1 gigabit WAN port and 2 gigabit WAN/LAN ports with load balance raise the utilization rate of multi-line broadband.
One USB WAN Port for Mobile Broadband: Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port.^‡
Highly Secure VPN: Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN*, 16× L2TP, and 16× PPTP VPN connections.
Abundant Security Features: Advanced firewall policies, DoS defense, IP/MAC/URL filtering, and more security functions protect your network and data.

Learn more about Omada Cloud SDN>

Centralized
Management
Gigabit
Ports
1 USB + 1 WAN
+ 2 WAN/LAN
Load
Balance

IPSec/OpenVPN/
PPTP/L2TP
Powerful
Firewall
VLAN
Omada
App

Software Defined Networking (SDN) with Cloud Access

Remotely manage your access points, switches, and gateways across multiple sites all from a single interface.

Learn More >

Ceiling Mount AP

Wall Plate AP

Outdoor AP

Omada PoE Switch

Omada Gateway

Cloud Access

On-premises Controllers

Omada Hardware
Controller

Omada Software
Controller

Omada Cloud-Based
Controller

Internet

Web Browser

Omada App

Easy to Use
Hardware, Software, or Cloud-Based Controllers
Centralized Management via Web or Omada App
Zero-Touch Provisioning (ZTP)*

Up to Three WAN Gigabit Ports & One USB WAN
for Mobile Broadband

1× USB 2.0 Port (supports a USB
LTE dongle for connecting a
4G/3G Modem as WAN Backup)

1× Gigabit
WAN Port

2× Gigabit
WAN/LAN Ports

2× Gigabit
LAN Ports

Load Balancing on up to 3 WAN ports Distributes data streams according to the bandwidth proportion of every
WAN port to raise the utilization rate of multi-line broadband.

High-Security and High-Performance VPN

SSL/ IPSec / GRE / WireGuard / PPTP / L2TP VPN & OpenVPN easily build secure VPN tunnels for secure Internet browsing, communication between different branches, or enabling remote work or study from home.

Headquarters

Subsidiary

Omada Controller

One-click Auto

IPSec VPN

Abundant Security Features

Powerful Firewall Advanced firewall policies
protect your network and data.

DPI (Deep Packet Inspection) Easily specify internet access rights
and strategies via DPI (Deep Packet
Inspection), IP/MAC/URL Filtering
and Access Control List (ACL)

DoS Defense Automatically detects and blocks Denial
of Service (DoS) attacks such as
TCP/UDP/ICMP Flooding, Ping of Death,
and other related threats.

IP/MAC/URL Filtering Forcefully prevent viruses
and attacks from intruders.

IP-MAC Binding Reserves static IP assignment
for clients to defend against ARP
attacks and spoofing.

One-Click ALG Activation One-Click ALG Activation for
applications such as FTP, H323, SIP,
IPsec and PPTP.

Easy Management with the Omada App

Follow configuration instructions on the free Omada app to get set up in minutes. Omada lets you configure settings,
monitor the network status, and manage clients, all from the convenience of a mobile device.

Click here to see Omada app compatible devices >

SECURITY
Access Control	Source/Destination IP Based Access Control
Filtering	• WEB Group Filtering^§ • URL Filtering • Web Security^§
ARP Inspection	• Sending GARP Packets^§ • ARP Scanning^§ • IP-MAC Binding
Attack Defense	• TCP/UDP/ICMP Flood Defense • Block TCP Scan (Stealth FIN/Xmas/Null) • Block Ping from WAN

HARDWARE FEATURES
Standards and Protocols	• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3x, IEEE 802.1q • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN
Interface	• 1 Gigabit WAN port • 2 Gigabit LAN/WAN ports • 2 Gigabit LAN ports • 1 USB2.0(supports USB LTE dongle^‡)
Network Media	• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 1000BASE-T: UTP category 5e, 6 cable (Max 100 m)
Fan Quantity	Fanless
Button	Reset Button
Power Supply	External 12V/1A DC Adapter
PoE Budget	-
Flash	128 MB NAND
DRAM	256 MB DDR
LED	PWR, SYS, WAN (Link/Act), LAN (Link/Act), USB
Dimensions ( W x D x H )	6.2 × 4.0 × 1.0 in (158 × 101 × 25mm)
Protection	4 kV surge protection
Enclosure	Steel
Mounting	Desktop/Wall-mount
Max Power Consumption	7.94 W

PERFORMANCE
DPI Throughput	TCP: 905 Mbps; UDP: 788 Mbps
WireGuard VPN Throughput	• 123.4 Mbps
Concurrent Session	150,000
New Sessions /Second	2,600
NAT (Static IP)	• Upload: 945.77 Mbps • Download: 938.79 Mbps • Bi-Directional: 1808.29 Mbps
NAT(DHCP)	• Upload: 945.54 Mbps • Download: 945.66 Mbps • Bi-Directional: 1802.77 Mbps
NAT(PPPoE)	• Upload: 939.71Mbps • Download: 939.43 Mbps • Bi-Directional: 1788.54 Mbps
NAT (L2TP)	• Upload: 815.55 Mbps • Download: 835.59 Mbps • Bi-Directional: 903.13 Mbps
NAT (PPTP)	• Upload: 813.23 Mbps • Download: 850.91 Mbps • Bi-Directional: 894.41 Mbps
IPsec VPN Throughput	• ESP-SHA1-AES256: 259.78 Mbps • ESP-SHA256-AES256: 260.81 Mbps • ESP-SHA384-AES256: 37.65 Mbps • ESP-SHA512-AES256: 38.32 Mbps
OpenVPN	• 21.70 Mbps
L2TP VPN Throughput	• Unencrypted: 640.99 Mbps • Encrypted: 77.31 Mbps
PPTP VPN Throughput	• Unencrypted: 759.55 Mbps • Encrypted: 75.80 Mbps
SSL VPN Throughput	-
66 Byte Packet forwarding rate	• Upload/Download: 954.50 Mbps • Bi-Directional: 1130.00 Mbps
1,518 Byte Packet forwarding rate	• Upload/Download: 997.50 Mbps • Bi-Directional: 1965.00 Mbps

BASIC FUNCTIONS
WAN Connection Type	• Static • Dynamic IP • PPPoE(supports MRU Configuration) • PPTP • L2TP
MAC Clone	Modify WAN/LAN MAC Address^†
DHCP	• DHCP Server • DHCPv6 PD Server (only in Standalone Mode) • DHCP Options Customization • DHCP Address Reservation • Multi-IP Interfaces • Multi-Net DHCP
IPv6	StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode
VLAN	802.1Q VLAN
IPTV	IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

ADVANCED FUNCTIONS
Advanced Routing	• Static Routing • Policy Routing • RIP^§ • OSPF^§
Bandwidth Control	IP-based Bandwidth Control
Load Balance	• Intelligent Load Balance • Application Optimized Routing • Link Backup (Timing, Failover) • Online Detection
NAT	• One-to-One NAT • Multi-Net NAT • Port Forwarding • Port Triggering^§ • NAT-DMZ • FTP/H.323/SIP/IPSec/PPTP ALG • UPnP
Session Limit	IP-based Session Limit

VPN
IPsec VPN	• 20 IPSec VPN Tunnels • LAN-to-LAN, Client-to-LAN • Main, Aggressive Negotiation Mode • DES, 3DES, AES128, AES192, AES256, SHA2-384 and SHA2-512 • Encryption Algorithm • IPsec Failover • IKE v1/v2 • MD5, SHA1 Authentication Algorithm, SHA2 Authentication Algorithm • NAT Traversal (NAT-T) • Dead Peer Detection (DPD) • Perfect Forward Secrecy (PFS)
PPTP VPN	• PPTP VPN Server • PPTP VPN Client (10) ^** • 16 Tunnels • PPTP with MPPE Encryption
L2TP VPN	• L2TP VPN Server • L2TP VPN Client (10) ^** • 16 Tunnels • L2TP over IPSec
OpenVPN	• OpenVPN Server • OpenVPN Client (10)^§ • 16 OpenVPN Tunnels • "Certificate + Account" Mode • Full Mode
WireGuard VPN	• 20 Tunnels

AUTHENTICATION
Web Authentication	• No Authentication • Simple Password^* • Hotspot（Local User / Voucher^/ SMS^/ Radius^） • External Radius Sever • External Portal Sever^ • LDAP^§

MANAGEMENT
Omada App	Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management	• Omada Cloud-Based Controller • Omada Hardware Controller (OC300) • Omada Hardware Controller (OC200) • Omada Software Controller
Cloud Access	Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller.
Service	Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)
Maintenance	• Web Management Interface • Remote Management • Export & Import Configuration • SNMP v1/v2c/v3 • Diagnostics (Ping & Traceroute)^§ • NTP Synchronize^§ • Port Mirroring • CLI (only in Standalone Mode) • Syslog Support
Zero-Touch Provisioning	Yes. Requiring the use of Omada Cloud-Based Controller.
Management Features	• Automatic Device Discovery • Intelligent Network Monitoring • Abnormal Event Warnings • Unified Configuration • Reboot Schedule • Captive Portal Configuration

OTHERS
Certification	CE, FCC, RoHS
Package Contents	• ER605 • Power Adapter • RJ-45 Ethernet Cable • Quick Installation Guide
System Requirements	Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX or Linux
Environment	• Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F) • Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) • Operating Humidity: 10% to 90% non-condensing • Storage Humidity: 5% to 90% non-condensing

For additional version information, please go to the support page.

^‡For the complete compatibility list of 4G/3G modem, go to https://www.tp-link.com/en/er605/compatibility/

*These functions requires the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller.

^† LAN MAC Address can be modified only in Standalone Mode.

^§ These functions are supported only in Standalone Mode.

^△For OpenVPN: When set up as a VPN server, each WAN port can connect with up to 10 VPN clients. At the same time, the ER605 can work as a VPN client to connect with up to 10 VPN servers. The total number of OpenVPN tunnels is limited to 16.

**For PPTP and L2TP VPN: ER605 can work as a VPN client and can connect with up to 10 VPN servers.

***Zero-Touch Provisioning requires the use of Omada Cloud-Based Controller. Go to https://www.tp-link.com/en/omada-cloud-based-controller/product-list/ to confirm which models are compatible with Omada Cloud-Based Controller.