TP-Link / Enterprise Router

TP-Link ER8411

Manufacturer P/N: ER8411

TP-Link ER8411 enterprise router. IDS/IPS: Signature-based IPS/IDS threat detection; Access Control: • Source/Destination IP Based ACL • Stateful ACL• IPv4/IPv6 ACL• National Based ACL• FQDN; DPI: • Deep Packet Inspection• Support 2421 type Applications. Compare configuration and request a hardware quote.

Documented hardware version: V1.20; match the hardware revision before ordering
IDS/IPS: Signature-based IPS/IDS threat detection
Access Control: • Source/Destination IP Based ACL • Stateful ACL• IPv4/IPv6 ACL• National Based ACL• FQDN
DPI: • Deep Packet Inspection• Support 2421 type Applications

Price on request

Pricing, availability, condition, included options and warranty are confirmed in your quotation.

Help choosing compatible hardwareWorldwide delivery

CONNECTIONS & COMPATIBILITY

Network connections and supported equipment

Check the protocol and port requirements of the equipment you intend to connect. Ethernet, Fibre Channel, InfiniBand and carrier interfaces are not interchangeable.

CONNECTS TOClients, servers or access links

ER8411Enterprise Router

USED FORConnected network equipment

Connection and installation requirements

Port type, line rate, optics, reach and software license
Peer platform support, resiliency and management design

Storage connection examples ↗Servers & appliances ↗

Browse the product categories above for related equipment. Confirm compatibility with your full configuration before ordering.

Technical overview

Technical specifications

Use the complete part number when reviewing options and system requirements.

ER8411 specifications
Manufacturer	TP-Link
Manufacturer part number	ER8411
Product family	Business enterprise routers
Documented hardware version	V1.20; match the hardware revision before ordering
IDS/IPS	Signature-based IPS/IDS threat detection
Access Control	• Source/Destination IP Based ACL • Stateful ACL• IPv4/IPv6 ACL• National Based ACL• FQDN
DPI	• Deep Packet Inspection• Support 2421 type Applications
DNS Proxy	DNSSEC, DoH, DoT, and DNS Override
Filtering	• WEB Group Filtering △ • URL Categories and URLs Filtering• Web Security △
Attack Defense	• TCP/UDP/ICMP Flood Defense • Block TCP Scan (Stealth FIN/Xmas/Null) • Block Ping from WAN
ARP Inspection	• Sending GARP Packets • ARP Scanning • IP-MAC Binding • ARP Detection
GRE	√ (Only in Standalone Mode)
SSL VPN	• SSL VPN Server • 500 SSL VPN Tunnels
WireGuard VPN	√
SD-WAN	√ (Only in Controller Mode)
Standards and Protocols	LLDP
Fan Quantity	2
Button	Reset Button
Power Supply	Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz)
Flash	4MB SPI NOR + 256 MB NAND
DRAM	4 GB DDR4
LED	PWR, SYS, WAN, LAN, USB, FAN
Dimensions ( W x D x H )	17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm)
Protection	4 kV surge protection
Enclosure	Steel
Mounting	Rack Mountable
Max. Power Consumption	• 26.36 W (with USB 3.0 connected) • 19.12 W (without USB 3.0 connected)
Concurrent Session	2,300,000
New Sessions /Second	20,000
NAT (Static IP)	• Upload: 9445.82 Mbps • Download: 9449.26 Mbps
NAT(DHCP)	• Upload: 9426.83 Mbps • Download: 9426.20 Mbps
NAT(PPPoE)	• Upload: 9413.96 Mbps • Download: 9102.01 Mbps
NAT (L2TP)	• Upload: 9064.66 Mbps • Download: 8587.57 Mbps
NAT (PPTP)	• Upload: 8712.11 Mbps • Download: 8505.61 Mbps
1,518 Byte Packet forwarding rate	• Upload: 820,982 pps • Download: 820,982 pps
IPsec VPN Throughput	• ESP-SHA1-AES256: 3099.4 Mbps • ESP-SHA256-AES256: 2928.4 Mbps • ESP-SHA384-AES256: 2935.7 Mbps • ESP-SHA512-AES256: 2878 Mbps
GRE	• Unencrypted: 8437 Mbps • Encrypted: 2775 Mbps
WireGuard VPN	1411 Mbps
OpenVPN	1043 Mbps
L2TP VPN Throughput	• Unencrypted: 10497 Mbp • Encrypted: 3178.5 Mbps
SSL VPN Throughput	1006 Mbps
DPI Throughput	• TCP: 9067 Mbps • UDP: 5873 Mbps
64 Byte Packet Forwarding Rate	• Upload: 2,109,375 pps • Download: 2,011,719 pps
IPS Throughput	• TCP: 9388 Mbps; • UDP: 7538 Mbps
Omada App	Yes. Requiring the use of an Omada Controller.
Centralized Management	• Omada Hardware Controller • Omada Software Controller • Omada Central (Cloud-Based)
Cloud Access	Yes. Requiring the use of an Omada Controller.
Service	Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)
LAN DNS	√
WAN Connection Type	• Static/Dynamic IP • PPPoE • PPTP • L2TP • 6to4 Tunnel • Pass-Through • Mobile Broadband: 4G/3G modem for backup via USB port
MAC Clone	Modify WAN/LAN MAC Address △
DHCP	• DHCP Server/Client • DHCP Address Reservation • Multi-net DHCP • Multi-IP Interfaces • WAN DHCP 60
IPv6	WAN Connection
VLAN	802.1Q VLAN
IPTV	IGMP v2/v3 Proxy
Advanced Routing	• Static Routing • Policy Routing • RIP △ • OSPF △
Bandwidth Control	• IP/Port-based Bandwidth Control • Guarantee & Limited Bandwidth
Load Balance	• Intelligent Load Balance • Application Optimized Routing • Link Backup (Timing △ , Failover) • Online Detection
Session Limit	IP-based Session Limit
Web Authentication	• No Authentication • Simple Password • Hotspot（Local User / Voucher ‡ / SMS ‡ / Radius ‡ ） • External Radius Sever • External Portal Sever ‡
System Requirements	Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux
IPsec VPN	• 300 IPSec VPN Tunnels • LAN-to-LAN, Client-to-LAN • Main, Aggressive Negotiation Mode • DES, 3DES, SHA1, SHA256, SHA384, SHA512, AES128, AES192, AES256 Encryption Algorithm • IKE v1/v2 • MD5, SHA1 Authentication Algorithm • NAT Traversal (NAT-T) • Dead Peer Detection (DPD) • Perfect Forward Secrecy (PFS)
Interface	• 2× 10GE SFP+ Ports (1× WAN, 1× WAN/LAN) • 1× 1GE SFP WAN/LAN Ports • 8× 1GE RJ45 WAN/LAN Ports • 1× RJ45 Console Port • 2× USB 3.0 Ports (One supports LTE backup with LTE dongle)
Network Media	• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m) • 100BASE-TX: UTP category 5, 5e cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m) • 1000BASE-T: UTP category 5e, 6 cable (Max 100 m)
Maintenance	• Web Management Interface • Remote Management • Export & Import Configuration • SNMP v1/v2c/v3 • Diagnostics (Ping & Traceroute) • NTP Synchronize △ • Port Mirroring • Syslog Support
Environment	• Operating Temperature: 0–40 ℃ (32–104 ℉); • Storage Temperature: -40–70 ℃ (-40–158 ℉) • Operating Humidity: 10–90% RH non-condensing • Storage Humidity: 5–90% RH non-condensing

PRODUCT DETAILS

Features and applications

ER8411 at a glance

TP-Link ER8411 is an enterprise router in the Business enterprise routers range. Use the model code when matching your deployment or replacement requirement.

IDS/IPS: Signature-based IPS/IDS threat detection
Access Control: • Source/Destination IP Based ACL • Stateful ACL• IPv4/IPv6 ACL• National Based ACL• FQDN
DPI: • Deep Packet Inspection• Support 2421 type Applications

Configuration and installation

Match the WAN handoff, interface speeds and routing requirements to this model. Throughput varies with packet size, enabled services and software configuration.

Confirm hardware revision and included items in the quotation. A firmware-dependent feature or licensed capability must be checked against the actual configuration.

Related Business enterprise routers models

Ordering questions

What should I include in an enquiry?

Send ER8411 with quantity, destination, required condition and any installation constraints. List power, optics or mounting accessories separately when required.

Are accessories and support included?

Inclusions depend on the exact ordering configuration. We confirm the supplied hardware, accessories and applicable commercial terms in writing.

Browse TP-Link equipment · Network equipment · Request a matched quotation

Prepare your enquiry

Ordering and delivery

Model and quantity

Include the full model, manufacturer P/N, revision and quantity.

Your existing equipment

Tell us the host model, generation, installed configuration and required supporting hardware.

Delivery requirements

Specify condition, testing requirements, destination and requested delivery date.