Page 1
SafeStream Gigabit
Multi-WAN VPN Router
MODEL: TL -ER6120
Highlights
64-bit dedicated processor and 512MB DDRIII high-speed memory for outstanding performance
Equipped with 1 Gigabit WAN port, 3 Gigabit WAN/LAN ports and 1 Gigabit LAN port
Supports multiple VPN protocols including IPsec/PPTP/L2TP, helping users to establish VPN
connections more exibly
Supports up to 100 IPsec VPN tunnels with a hardware-based VPN engine
Captive portal provides a convenient method for guest authentication
Abundant features including load balance, bandwidth control and access control
Professional 4KV lightning protection keeps your investments as safe as possible
Overview
The TL-ER6120 SafeStream Gigabit Multi-WAN VPN Router from TP-Link boasts excellent data
processing capabilities and an array of powerful functions, including IPsec/PPTP/L2TP VPN, Load Balance,
Access Control, DoS Defense and Bandwidth Control. The TL-ER6120 is ideal for small and medium
businesses, along with hotels and other settings where a large number of users require a stable, secure
connection.
Page 2
Enterprise-Standard VPN
The TL-ER6120 supports pass-through trac together with multiple VPN protocols including IPsec, PPTP
and L2TP in Client/Server mode. It also features built-in VPN engine hardware, allowing the router to
support and manage up to 100 LAN-to-LAN/Client-to-LAN IPsec VPN connections. Advanced VPN
features include DES/3DES/AES128/AES192/AES256 encryption, MD5/SHA1 authentication, and Main/-
Aggressive negotiation modes.
Superior Hardware
With a 64-bit network processor and 512MB DDR3 memory, TL-ER6120 is able to handle multiple tasks
while maintaining excellent performance and greater reliability.
Intelligent Bandwidth Allocation
The TL-ER6120 features 1 WAN port and 3 WAN/LAN ports, allowing one device to meet multiple require-
ments. Intelligent Load Balancing distributes data streams according to the bandwidth proportion of each
WAN port to make the most of multi-line broadband. IP-based Bandwidth Control and Session Limit func-
tions give network administrators the power to exibly manage how their bandwidth is used.
Peace of Mind Whatever the Weather
Professional-standard lightning protection prevents electrical surges from penetrating your network
equipment, instead discharging them harmlessly into the Earth. Designed to withstand 4KV of electricity
when well-grounded, this router ensures your network investments remain as safe as possible from the
wrath of Mother Nature.
Page 3
Specications
HardWare
Standards and Protocols
Interface
Network Media
Button Reset Button
Power Supply
Flash 32MB
DRAM DDRIII 512MB
LED PWR, SYS, Link/Act, Speed
IEEE 802.3, IEEE802.3u, IEEE802.3ab
TCP/IP, DHCP, ICMP, NAT, PPPoE, SNTP, HTTP, DNS, IPsec, PPTP, L2TP
1 Gigabit WAN port
3 Gigabit LAN/WAN ports
1 Gigabit LAN port
10BASE-T: UTP category 3, 4, 5 cable (Max 100m)
EIA/TIA-568 100Ω STP (Max 100m)
100BASE-TX: UTP category 5, 5e cable (Max 100m)
EIA/TIA-568 100Ω STP (Max 100m)
1000BASE-T: UTP category 5, 5e, 6 cable (Max 100m)
Internal Universal Power Supply
AC100-240V~ 50/60Hz Input
Dimensions ( W x D x H ) 17.3x7.1x1.7 in.(440x180x44 mm)
Performance
Concurrent Session 150000
NAT (iMIX) 936Mbps
NAT (DHCP) 878Mbps
NAT (PPPoE) 665Mbps
IPsec VPN Throughput
(AES256)
373Mbps
Page 4
Basic Functions
WAN Connection Type
Static/Dynamic IP,
PPPoE/Russian PPPoE,
PPTP/Russian PPTP,
L2TP/Russian L2TP,
Bigpond Cable
DHCP
MAC Clone Modify WAN MAC Address
IPTV Bridge, Custom
IPv6 IPv6 Support
VLAN 802.1Q VLAN, Port VLAN
DHCP Server/Client
DHCP Address Reservation
Transmission
Intelligent Load Balance
Load Balance
NAT
Routing
Session Limit IP-based Session Limit
Link Backup (Timing, Failover)
Online Detection
One-to-One NAT, Multi-nets NAT, Virtual Server, Port Triggering
FTP/H.323/SIP/IPsec/PPTP ALG, UPnP
Static Routing
Policy Routing
Bandwidth Control IP-based Bandwidth Control
Page 5
VPN
100 IPsec VPN Tunnels
LAN-to-LAN, Client-to-LAN
Main, Aggressive Negotiation Mode
IPsec VPN
PPTP VPN
L2TP VPN
VPN Pass-through IPsec (ESP), PPTP, L2TP
DES, 3DES, AES128, AES192, AES256 Encryption Algorithm
MD5, SHA1 Authentication Algorithm IPsec
NAT Traversal (NAT-T)
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)
50 PPTP VPN Tunnels
PPTP VPN Server/Client
PPTP with MPPE Encryption
50 L2TP VPN Tunnels
L2TP VPN Server/Client
L2TP over IPsec
Security
TCP/UDP/ICMP Flood Defense
Attack Defense
Filtering
ARP Inspection
Access Control Source/Destination IP Based Access Control
Block TCP Scan (Stealth FIN/Xmas/Null)
Block Ping from WAN
MAC Filtering
URL/Keywords Filtering
Sending GARP Packets
ARP Scanning by WAN/LAN
IP-MAC Binding
Page 6
Authentication
Local User Authentication,
Web Authentication
Radius Sever Authentication,
Onekey Online
Management
Service Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Web Management Interface, Remote Management
Maintenance
Diagnostics (Ping & Traceroute), NTP Synchronize
Syslog Support
Others
CE, FCC, RoHS
Package Contents TL-ER6120, Power Cord, Rack-mount Kit, Installation Guide
System Requirements
Environment
Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10
MAC OS, NetWare, UNIX or Linux
Operating Temperature: 0°Cto 40°C (32°F to104°F)
Storage Temperature: -40°Cto 70°C (-40°F to 158°F)
Operating Humidity: 10% to 90% non-condensing
Storage Humidity: 5% to 90% non-condensing
www.tp-link.com
Specications are subject to change without notice. TP-Link is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are trademarks or
registered trademarks of their respective holders. Copyright © 2019 TP-Link Technologies Co., Ltd. All rights reserved.