TP-Link / Enterprise Router

TP-Link ER7406

Manufacturer P/N: ER7406

TP-Link ER7406 enterprise router. IDS/IPS: Signature-based IPS/IDS threat detection; Access Control: • Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL• FQDN; DPI: • Deep Packet Inspection • Support 2421 type Applications. Compare configuration and request a hardware quote.

Documented hardware version: V1.20; match the hardware revision before ordering
IDS/IPS: Signature-based IPS/IDS threat detection
Access Control: • Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL• FQDN
DPI: • Deep Packet Inspection • Support 2421 type Applications

Price on request

Pricing, availability, condition, included options and warranty are confirmed in your quotation.

Help choosing compatible hardwareWorldwide delivery

CONNECTIONS & COMPATIBILITY

Network connections and supported equipment

Check the protocol and port requirements of the equipment you intend to connect. Ethernet, Fibre Channel, InfiniBand and carrier interfaces are not interchangeable.

CONNECTS TOClients, servers or access links

ER7406Enterprise Router

USED FORConnected network equipment

Connection and installation requirements

Port type, line rate, optics, reach and software license
Peer platform support, resiliency and management design

Storage connection examples ↗Servers & appliances ↗

Browse the product categories above for related equipment. Confirm compatibility with your full configuration before ordering.

Technical overview

Technical specifications

Use the complete part number when reviewing options and system requirements.

ER7406 specifications
Manufacturer	TP-Link
Manufacturer part number	ER7406
Product family	Business enterprise routers
Documented hardware version	V1.20; match the hardware revision before ordering
IDS/IPS	Signature-based IPS/IDS threat detection
Access Control	• Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL• FQDN
DPI	• Deep Packet Inspection • Support 2421 type Applications
DNS Proxy	DNSSEC, DoH, DoT, DNS Override, and DNS Cache
Attack Defense	• TCP/UDP/ICMP Flood Defense • Block TCP Scan (Stealth FIN/Xmas/Null) • Block Ping from WAN
GRE	√ (Only in Standalone Mode)
SSL VPN	50 Tunnels
PPTP VPN	• PPTP VPN Server • PPTP VPN Client (10) ※ • 50 Tunnels • PPTP with MPPE Encryption
L2TP VPN	• L2TP VPN Server • L2TP VPN Client (10) ※ • 50 Tunnels • L2TP over IPSec
OpenVPN	• OpenVPN Server • OpenVPN Client (5) ※ • 55 OpenVPN Tunnels • "Certificate + Account" Mode • Full Mode
WireGuard VPN	√
SD-WAN	√
Interface	• 1 Gigabit SFP WAN/LAN Port • 1 Gigabit WAN Port • 4 Gigabit LAN/WAN Ports • 1 USB 3.0 Port (supports USB LTE dongle and USB storage)
Fan Quantity	Fanless
Button	Reset button
Power Supply	100-240VAC, 50/60Hz
Flash	128 MB NAND
DRAM	512 MB DDR4
LED	PWR, SYS, SFP, USB, WAN(1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act)
Dimensions ( W x D x H )	11.6 × 5.5 × 1.7 in (294 × 140 × 44 mm)
Protection	4 kV surge protection
Mounting	• Desktop • Rackmount
Max. Power Consumption	• 7.5 W (with USB 3.0 connected) • 4.5 W (without USB 3.0 connected)
Concurrent Session	150,000
New Sessions /Second	4,600
NAT (Static IP)	945.3 Mbps / 940.5 Mbps
NAT(DHCP)	939.6 Mbps / 940.9 Mbps
NAT(PPPoE)	943.6 Mbps / 940.9 Mbps
NAT (L2TP)	908.6 Mbps / 918.4 Mbps
NAT (PPTP)	906.2 Mbps / 915.9 Mbps
66 Byte Packet Forwarding Rate	1,453,489 pps / 1,453,488 pps
1,518 Byte Packet forwarding rate	81,279 pps / 81,275 pps
IPsec VPN Throughput	• ESP-SHA1-AES256: 885.3Mbps • ESP-SHA256-AES256: 844.8 Mbps • ESP-SHA384-AES256: 868.5 Mbps • ESP-SHA512-AES256: 849.5 Mbps
GRE	• Unencrypted: 1094.2 Mbps • Encrypted: 702.2 Mbps
WireGuard VPN	341.3 Mbps
OpenVPN	139.1 Mbps
L2TP VPN Throughput	• Unencrypted: 1422.4 Mbps • Encrypted: 686.2 Mbps
PPTP VPN Throughput	• Unencrypted: 1356.1 Mbps • Encrypted: 205.1 Mbps
SSL VPN Throughput	131.6 Mbps
DPI Throughput	TCP: 933 Mbps UDP: 927 Mbps
IPS Throughput	TCP: 918 Mbps UDP: 920 Mbps
Omada App	Yes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management	• Omada Cloud-Based Controller • Omada Hardware Controller • Omada Software Controller
Cloud Access	Yes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
Service	Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)
Zero-Touch Provisioning	Yes. Requires the use of Omada Cloud-Based Controller.
LAN DNS	√
WAN Connection Type	• Static IP • Dynamic IP • PPPoE(supports MRU Configuration) • PPTP • L2TP
Stateful ACL	√
Quality of Service	√
Bridge VLAN	√
mDNS Repeater	√
IPv6	StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode
VLAN	802.1Q VLAN
IPTV	IGMP v2/v3 Proxy, Custom Mode, Bridge Mode
Bandwidth Control	IP-based Bandwidth Control
Load Balance	• Intelligent Load Balance • Application Optimized Routing • Link Backup (Timing, Failover) • Online Detection
Session Limit	IP-based Session Limit
System Requirements	• Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 • MAC OS, NetWare, UNIX or Linux
IPsec VPN	• 100 IPSec VPN Tunnels • LAN-to-LAN, Client-to-LAN • Main, Aggressive Negotiation Mode • DES, 3DES, AES128, AES192, AES256 Encryption Algorithm • IPsec Failover • IKE v1/v2 • MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm • NAT Traversal (NAT-T) • Dead Peer Detection (DPD) • Perfect Forward Secrecy (PFS)
Standards and Protocols	• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP
Network Media	• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m) • 100BASE-TX: UTP category 5, 5e cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m) • 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
Management Features	• Automatic Device Discovery • Intelligent Network Monitoring • Abnormal Event Warnings • Unified Configuration • Reboot Schedule • Captive Portal Configuration
Environment	• Operating Temperature: 0 °C to 50 °C (32 °F to 122°F) • Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) • Operating Humidity: 10% to 90% non-condensing • Storage Humidity: 5% to 90% non-condensing

PRODUCT DETAILS

Features and applications

ER7406 at a glance

TP-Link ER7406 is an enterprise router in the Business enterprise routers range. Use the model code when matching your deployment or replacement requirement.

IDS/IPS: Signature-based IPS/IDS threat detection
Access Control: • Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL• FQDN
DPI: • Deep Packet Inspection • Support 2421 type Applications

Configuration and installation

Match the WAN handoff, interface speeds and routing requirements to this model. Throughput varies with packet size, enabled services and software configuration.

Confirm hardware revision and included items in the quotation. A firmware-dependent feature or licensed capability must be checked against the actual configuration.

Related Business enterprise routers models

Ordering questions

What should I include in an enquiry?

Send ER7406 with quantity, destination, required condition and any installation constraints. List power, optics or mounting accessories separately when required.

Are accessories and support included?

Inclusions depend on the exact ordering configuration. We confirm the supplied hardware, accessories and applicable commercial terms in writing.

Browse TP-Link equipment · Network equipment · Request a matched quotation

Prepare your enquiry

Ordering and delivery

Model and quantity

Include the full model, manufacturer P/N, revision and quantity.

Your existing equipment

Tell us the host model, generation, installed configuration and required supporting hardware.

Delivery requirements

Specify condition, testing requirements, destination and requested delivery date.