Omada Gigabit AX3000 Wi-Fi 6 VPN Gateway 1

Omada Gigabit AX3000 Wi-Fi 6 VPN Gateway 2

Omada Gigabit AX3000 Wi-Fi 6 VPN Gateway 3

Omada Gigabit AX3000 Wi-Fi 6 VPN Gateway 4

ER706W

Omada Gigabit AX3000 Wi-Fi 6 VPN Gateway

AX3000 Wi-Fi 6 with 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz*
1× Gigabit SFP slot and 5 Gigabit RJ45 ports
1× USB 3.0 port (Supports USB storage, and LTE backup with LTE dongle)
Load Balancing on up to 5 WAN ports raises the utilization rate of multi-line broadband
Mesh with Omada access points to extend WiFi without extra cabling and switch**
Centralized cloud management via the web or the Omada app^§
High-security SSL/IPSec/GRE^†/WireGuard/PPTP^△/L2TP VPN^△/OpenVPN^△
DoS/DDoS defense, IP/MAC/URL filtering, DPI, and IPS/IDS for enhanced security

SECURITY
DPI	Deep Packet Inspection Support 2421 type Applications
IDS/IPS	Signature-based IPS/IDS threat detection
Access Control	Source/Destination IP Based Access Control
DNS Proxy	DNSSEC, DoH, DoT, DNS Override
Filtering	• Web Group Filtering^† • URL Filtering • Web Security^†
ARP Inspection	• Sending GARP Packets • ARP Scanning^† • IP-MAC Binding • ARP Detection
Attack Defense	• TCP/UDP/ICMP Flood Defense • Block TCP Scan (Stealth FIN/Xmas/Null) • Block Ping from WAN

HARDWARE FEATURES
Standards and Protocols	IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP, 802.11a/b/g/n/ac/ax
Interface	• 1 Gigabit SFP WAN/LAN Port • 1 Gigabit WAN Port • 4 Gigabit LAN/WAN Ports • 1 USB3.0 (supports USB LTE dongle and USB Storage)
Button	Reset Button
Power Supply	12VDC / 2A Power Adapter
Wi-Fi Frequency & Signal Rate	• 2.4 GHz: 574 Mbps • 5 GHz: 2402 Mbps (HE160)
Flash	128 MB NAND
DRAM	512 MB DDR4
LED	SYS, WLAN, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act)
Dimensions ( W x D x H )	8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm) (Antenna dimensions are not included)
Antenna	• 2.4 GHz: 2x 3 dBi dual-band detachable antennas • 5 GHz: 3x 4.5 dBi dual-band detachable antennas
Surge Protection	4 kV surge protection
Mounting	Desktop/ Wall-mounting/Rackmount (rackmount kit not provided)
Max. Power Consumption	• EU: 16.8W (with USB 3.0 connected), 11.8W (without USB 3.0 connected) • US: 22.7W (with USB 3.0 connected) 18.2W (without USB 3.0 connected)

PERFORMANCE
IPS Throughput	• TCP: 939 Mbps • UDP: 937 Mbps
DPI Throughput	• TCP: 933 Mbps • UDP: 927 Mbps
GRE	• Unencrypted: 624.2Mbps • Encrypted: 301.5Mbps
WireGuard VPN	393.5Mbps
Concurrent Session	150,000
New Sessions /Second	5,100
NAT (Static IP)	937.2 Mbps / 936.1Mbps
NAT(DHCP)	945.8 Mbps / 940.6Mbps
NAT(PPPoE)	942.9 Mbps / 942.9Mbps
NAT (L2TP)	837.4 Mbps / 881.5Mbps
NAT (PPTP)	803.0 Mbps / 910.5 Mbps
IPsec VPN Throughput	• ESP-SHA1-AES256: 646.9Mbps • ESP-SHA256-AES256: 642.8Mbps • ESP-SHA384-AES256: 648.9Mbps • ESP-SHA512-AES256: 658.4 Mbps
OpenVPN	129.3Mbps
L2TP VPN Throughput	• Unencrypted: 1034.0 Mbps • Encrypted: 570.0 Mbps
PPTP VPN Throughput	• Unencrypted: 1165.0 Mbps • Encrypted: 209.0 Mbps
SSL VPN Throughput	126.7Mbps
66 Byte Packet Forwarding Rate	1,453,489 pps / 1,453,488 pps
1,518 Byte Packet forwarding rate	81,274 pps / 91,275 pps

WIRELESS FEATURES
Advanced Features	• Enable/Disable Wireless Radio & SSID Broadcast • Automatic Channel Selection Algorithm • Transmit Power Control (Adjust transmit Power on dBm ) • Seamless Roaming • Mesh (with EAP that supports Mesh) • OFDMA • Beamforming • MU-MIMO • Wireless Encryption: WPA/WPA2/WPA3 Personal, WPA/WPA2/WPA3 Enterprise
Guest Network	Support

BASIC FUNCTIONS
LAN DNS	√
WAN Connection Type	• Static IP • Dynamic IP • PPPoE (supports MRU Configuration) • PPTP • L2TP
MAC Clone	Modify WAN Address
DHCP	• DHCP Server • DHCPv6 PD Server (only in Standalone Mode) • DHCP Options Customization • DHCP Address Reservation • Multi-IP Interfaces • Multi-Net DHCP • WAN DHCP 60
Stateful ACL	√
Quality of Service	√
Bridge VLAN	√
mDNS Repeater	√
IPv6	StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode
VLAN	802.1Q VLAN
IPTV	IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

Advanced Features
Access Control	• Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL • FQDN
Advanced Routing	• Static Routing • Policy Routing • RIP^† • OSPF^†
Bandwidth Control	IP-Based Bandwidth Control
Load Balance	• Intelligent Load Balance • Application Optimized Routing • Link Backup(Timing, Failover) • Online Detection
NAT	One-to-One NAT Multi-Net NAT Virtual Server Port Triggering^† NAT-DMZ FTP/H.323/SIP/IPSec/PPTP ALG UPnP Disable NAT
Session Limit	IP-Based Session Limit

VPN
GRE	√ (Only in Standalone Mode)
SD-WAN	√ (Only in Controller Mode)
SSL VPN	50 Tunnels
IPsec VPN	• 100 IPSec VPN Tunnels • LAN-to-LAN, Client-to-LAN • Main, Aggressive Negotiation Mode • DES, 3DES, AES128, AES192, AES256 Encryption Algorithm • IPsec Failover • IKE v1/v2 • MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm • NAT Traversal (NAT-T) • Dead Peer Detection (DPD) • Perfect Forward Secrecy (PFS)
PPTP VPN	• PPTP VPN Server • PPTP VPN Client (10)^△ • 50 Tunnels • PPTP with MPPE Encryption
L2TP VPN	• L2TP VPN Server • L2TP VPN Client (10)^△ • 50 Tunnels • L2TP over IPSec
OpenVPN	• OpenVPN Server • OpenVPN Client (5)^△ • 55 OpenVPN Tunnels • "Certificate + Account" Mode • Full Mode
WireGuard VPN	√

AUTHENTICATION
Web Authentication	• No Authentication • Simple Password^§ • Hotspot (Local User / Voucher^§ / SMS^§ / Radius^§) • External Radius Sever • External Portal Sever^§ • LDAP^†

Management Features
Omada App	Yes
Centralized Management	• Omada Cloud-Based Controller • Omada Hardware Controller • Omada Software Controller
Cloud Access	Yes. Require the use of Omada Cloud-Based Controller.
Service	Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)
Maintenance	• Web Management Interface • Remote Management • Export & Import Configuration • SNMP v1/v2c/v3 • Diagnostics (Ping & Traceroute) • NTP Synchronize^† • Port Mirroring • CLI (only in Standalone Mode) • Syslog Support
Zero-Touch Provisioning	Yes. Require the use of Omada Cloud-Based Controller.
Management Features	• Automatic Device Discovery^§ • Intelligent Network Monitoring^§ • Abnormal Event Warnings^§ • Unified Configuration^§ • Reboot Schedule • Captive Portal Configuration^§ • ZTP (Zero-Touch Provisioning)

OTHER
Network Services Enabled by Default	Web Server Manage and configure device through web (HTTP/HTTPS) • Port: 80/443 Protocol: TCP _____________________________________________________ TDP Server Device discovery • Port: 20003 Protocol: UDP _____________________________________________________ DHCP Server Handle DHCP packets • Port: 67 Protocol: UDP _____________________________________________________ DNS Handle DNS packets • Port: 53 Protocol: TCP/UDP

OTHER

Network Services Enabled by Default

Web Server
Manage and configure device through web (HTTP/HTTPS)
• Port: 80/443 Protocol: TCP
_____________________________________________________
TDP Server
Device discovery
• Port: 20003 Protocol: UDP
_____________________________________________________
DHCP Server
Handle DHCP packets
• Port: 67 Protocol: UDP
_____________________________________________________
DNS
Handle DNS packets
• Port: 53 Protocol: TCP/UDP

OTHERS
Certification	CE, FCC, RoHS
Package Content	• ER706W • Power Adapter • Quick Installation Guide
System Requirements	• Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11 • MAC OS, NetWare, UNIX or Linux
Environment	• Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F) • Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) • Operating Humidity: 10% to 90% non-condensing • Storage Humidity: 5% to 90% non-condensing

For additional version information, please go to the support page.

^†These functions are supported only in Standalone Mode.

^§These functions are supported only in Controller Mode.

^※At least one WAN/LAN port needs to function as a LAN port.

^△For PPTP VPN and L2TP VPN, ER706W can connect with up to 10 VPN servers. For OpenVPN, ER706W can connect withup to 5 VPN servers.

*Maximum wireless signal rates are the physical rates derived from IEEE Standard 802.11 specifications. Actual wireless data throughput and coverage are not guaranteed and will vary.

**Omada Mesh Technology requires the use of EAPs that support mesh functionality. Please refer to https://www.omadanetworks.com/en/omada-mesh/product-list/ to confirm which Omada EAPs are compatible with Omada Mesh. Additionally, ER706W also supports standalone Mesh. Please refer to https://www.tp-link.com/en/standalonemesh/product-list/ to confirm the models that support standalone Mesh.

^‡Use of WiFi 6 (802.11ax) and its features, including OFDMA, HE160, and 1024-QAM, require clients to support the corresponding features. The 160 MHz bandwidth is only available on the 5 GHz band. It may be unavailable in some regions/countries due to regulatory restrictions.