ER7406

Omada Gigabit Rackmount/Desktop VPN Gateway

1× Gigabit SFP WAN/LAN port
5× Gigabit RJ45 ports (1× WAN, 4× WAN/LAN)
1× USB 3.0 port (Supports USB storage, and LTE backup with LTE dongle)
Load Balancing on up to 5 WAN ports raises the utilization rate of multi-line broadband
High-security SSL/ IPSec / GRE^§ / WireGuard / PPTP / L2TP VPN & OpenVPN
Centralized cloud management via the web or the Omada app*
DoS/DDoS protection, IP/MAC/URL filtering, DPI, and IPS/IDS for enhanced security.
Rackmount/Desktop

SECURITY
DPI	• Deep Packet Inspection • Support 2421 type Applications • Max Throughput (Upload / Download) 942.7Mbps/937.3Mbps
Access Control	• Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL • FQDN
DNS Proxy	DNSSEC, DoH, and DoT
Filtering	• Web Group Filtering^§ • URL Categories and URLs Filtering • Web Security^§
ARP Inspection	• Sending GARP Packets • ARP Scanning^§ • IP-MAC Binding • ARP Detection
Attack Defense	• TCP/UDP/ICMP Flood Defense • Block TCP Scan (Stealth FIN/Xmas/Null) • Block Ping from WAN

HARDWARE FEATURES
Standards and Protocols	• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP
Interface	• 1 Gigabit SFP WAN/LAN Port • 1 Gigabit WAN Port • 4 Gigabit LAN/WAN Ports • 1 USB 3.0 Port (supports USB LTE dongle and USB storage)
Network Media	• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
Fan Quantity	Fanless
Button	Reset button
Power Supply	100-240VAC, 50/60Hz
Flash	128 MB NAND
DRAM	512 MB DDR4
LED	PWR, SYS, SFP, USB, WAN(1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act)
Dimensions ( W x D x H )	11.6 × 5.5 × 1.7 in (294 × 140 × 44 mm)
Protection	4 kV surge protection
Mounting	• Desktop • Rackmount
Max. Power Consumption	• 7.5 W (with USB 3.0 connected) • 4.5 W (without USB 3.0 connected)

PERFORMANCE
IPS Throughput	TCP: 918 Mbps UDP: 920 Mbps
DPI Throughput	TCP: 933 Mbps UDP: 927 Mbps
GRE	• Unencrypted: 1094.2 Mbps • Encrypted: 702.2 Mbps
WireGuard VPN	341.3 Mbps
Concurrent Session	150,000
New Sessions /Second	4,600
NAT (Static IP)	945.3 Mbps / 940.5 Mbps
NAT(DHCP)	939.6 Mbps / 940.9 Mbps
NAT(PPPoE)	943.6 Mbps / 940.9 Mbps
NAT (L2TP)	908.6 Mbps / 918.4 Mbps
NAT (PPTP)	906.2 Mbps / 915.9 Mbps
IPsec VPN Throughput	• ESP-SHA1-AES256: 885.3Mbps • ESP-SHA256-AES256: 844.8 Mbps • ESP-SHA384-AES256: 868.5 Mbps • ESP-SHA512-AES256: 8495 Mbps
OpenVPN	139.1 Mbps
L2TP VPN Throughput	• Unencrypted: 1422.4 Mbps • Encrypted: 686.2 Mbps
PPTP VPN Throughput	• Unencrypted: 1356.1 Mbps • Encrypted: 205.1 Mbps
SSL VPN Throughput	131.6 Mbps
66 Byte Packet Forwarding Rate	1,453,489 pps / 1,453,488 pps
1,518 Byte Packet forwarding rate	81,279 pps / 81,275 pps

BASIC FUNCTIONS
WAN Connection Type	• Static IP • Dynamic IP • PPPoE(supports MRU Configuration) • PPTP • L2TP
MAC Clone	Modify WAN/LAN MAC Address^†
DHCP	• DHCP Server • DHCPv6 PD Server^§ • DHCP Options Customization • DHCP Address Reservation • Multi-IP Interfaces • Multi-Net DHCP • WAN DHCP 60
Stateful ACL	√
Quality of Service	√
Bridge VLAN	√
mDNS Repeater	√
IPv6	StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode
VLAN	802.1Q VLAN
IPTV	IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

Advanced Features
Advanced Routing	• Static Routing • Policy Routing • RIP^§ • OSPF^§
Bandwidth Control	IP-based Bandwidth Control
Load Balance	• Intelligent Load Balance • Application Optimized Routing • Link Backup (Timing, Failover) • Online Detection
NAT	• One-to-One NAT • Multi-Net NAT • Port Forwarding • Port Triggering^§ • NAT-DMZ • FTP/H.323/SIP/IPSec/PPTP ALG • UPnP • Disable NAT
Session Limit	IP-based Session Limit

VPN
GRE	√ (Only in Standalone Mode)
SD-WAN	√ (Only in Controller Mode)
SSL VPN	50 Tunnels
IPsec VPN	• 100 IPSec VPN Tunnels • LAN-to-LAN, Client-to-LAN • Main, Aggressive Negotiation Mode • DES, 3DES, AES128, AES192, AES256 Encryption Algorithm • IPsec Failover • IKE v1/v2 • MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm • NAT Traversal (NAT-T) • Dead Peer Detection (DPD) • Perfect Forward Secrecy (PFS)
PPTP VPN	• PPTP VPN Server • PPTP VPN Client (10)^※ • 50 Tunnels • PPTP with MPPE Encryption
L2TP VPN	• L2TP VPN Server • L2TP VPN Client (10)^※ • 50 Tunnels • L2TP over IPSec
OpenVPN	• OpenVPN Server • OpenVPN Client (5)^※ • 55 OpenVPN Tunnels • "Certificate + Account" Mode • Full Mode
WireGuard VPN	√

AUTHENTICATION
Web Authentication	• No Authentication • Simple Password^‡ • Hotspot (Local User /Voucher^‡/ SMS^‡/Radius^‡) • External Radius Server • External Portal Server^‡ • LDAP^§

Management Features
Omada App	Yes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management	• Omada Cloud-Based Controller • Omada Hardware Controller • Omada Software Controller
Cloud Access	Yes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
Service	Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)
Maintenance	• Web Management Interface • Remote Management • Export & Import Configuration • SNMP v1/v2c/v3 • Diagnostics (Ping & Traceroute) • NTP Synchronize^§ • Port Mirroring • CLI^§ • Syslog Support
Zero-Touch Provisioning	Yes. Requires the use of Omada Cloud-Based Controller.
Management Features	• Automatic Device Discovery • Intelligent Network Monitoring • Abnormal Event Warnings • Unified Configuration • Reboot Schedule • Captive Portal Configuration

OTHERS
Certification	CE, FCC, RoHS
Package Content	• ER7406 • Power Cord • Quick Installation Guide • Rackmount Kit
System Requirements	• Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 • MAC OS, NetWare, UNIX or Linux
Environment	• Operating Temperature: 0 °C to 50 °C (32 °F to 122°F) • Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) • Operating Humidity: 10% to 90% non-condensing • Storage Humidity: 5% to 90% non-condensing

^*These functions require the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller.

^**At least one WAN/LAN port needs to function as a LAN port.

^§These functions are supported only in Standalone Mode.

^△SD-WAN function is supported only in Controller Mode.

^†LAN MAC Address can be modified only in Standalone Mode.

^‡The following web authentication methods are supported only in Controller Mode: Simple Password, Voucher, SMS, Radius, and External Portal Sever.

^※For PPTP VPN and L2TP VPN, ER7406 can connect with up to 10 VPN servers. For OpenVPN, ER7406 can connect with up to 5 VPN servers.