TP-LINK TL-ER7206 Datasheet

SafeStream Gigabit
Multi-WAN VPN Router

MODEL: TL-ER7206

Highlights

• 64-bit dedicated dual-core processor and 512MB DDR3 high-speed memory for outstanding performance

• Equipped with 1 Gigabit SFP WAN port, 1 Gigabit RJ45 WAN port, 2 Gigabit RJ45 WAN/LAN ports and 2
Gigabit LAN ports

• Supports multiple VPN protocols including OpenVPN/ IPSec/ PPTP/ L2TP/ L2TP over IPSec, helping users

to establish VPN connections more exibly

• Supports up to 100 IPsec VPN tunnels with VPN engine

• Captive portal provides a convenient method for guest authentication

• Abundant features including load balance, bandwidth control and access control

• Professional 4 kV lightning protection keeps your investments as safe as possible

Omada Solution

Software Dened Networking (SDN) with Cloud Access

Omada Software Dened Networking (SDN) platform integrates network devices, including access points,

switches and gateways, providing 100% centralized cloud management. Omada creates a highly scalable
network——all controlled from a single interface. Seamless wireless and wired connections are provided, ideal

for use in hospitality, education, retail, oces, and more.

Hassle-Free Centralized Cloud Management

100% centralized cloud management of the whole network from dierent sites——all controlled from a single

interface anywhere, anytime.

1

Zero-Touch Provisioning for Ecient Deplyment

Omada zero-touch provisioning allows remotely deployment and conguration of multi-site networks, so there's
no need to send out an engineer for on-site conguration. The Omada Cloud ensures ecient deployment with

lower costs.

1. Zero-Touch Provisioning is supported when using Omada Cloud-Based Controller

AI-Driven Technology for Stronger Performance and Easy Network Maintenance

Assign Dierent Management Roles

Multi-user privilege assignment is available to increase management eciency and security. Multi-person
management, multi-level permissions, and the ability to add admins as needed, enable exible network

operation and maintenance.

Easy and Intelligent Network Monitoring

The easy-to-use dashboard makes it easy to see your real-time network status; check network usage and

trac distribution; receive network condition logs, abnormal event warnings, and notications; or even track key

data for better business results. Network topology helps IP admins quickly see and troubleshoot connection at
a glance.

Comprehensive Protection for the Whole Network

Multiple Factors Guarantee Higher Reliability

Higher reliability of cloud service is guaranteed with 99.99% SLA availability, 24/7 automated fault detection,
geographically isolated backup servers, and reliable product quality. Your network functions even if

management trac is interrupted.

Reliable Connections Even with High-Density Clients

Equipped with enterprise chipsets, dedicated antennas, advanced RF functions, auto channel selection,
and power adjustment, Omada Wi-Fi 6 and Wi-Fi 5 APs have high concurrency capacities for remarkable
performance in high-density environments.

Product Features

Superior Hardware

With a 64-bit dual-core network processor and 512MB DDR3 memory, TL-ER7206 is able to handle multiple

tasks while maintaining excellent performance and greater reliability.

Intelligent Bandwidth Allocation

The TL-ER7206 features 1 SFP WAN port, 1 Gigabit WAN port, and 2 WAN/LAN ports, allowing one device to
meet multiple requirements. Intelligent Load Balancing distributes data streams according to the bandwidth
proportion of each WAN port to make the most of multi-line broadband. IP-based Bandwidth Control and

Session Limit functions give network administrators the power to exibly manage how their bandwidth is used.

Peace of Mind Whatever the Weather

Professional-standard lightning protection prevents electrical surges from penetrating your network
equipment, instead discharging them harmlessly into the Earth. Designed to withstand 4 kV of electricity when
well-grounded, this router ensures your network investments remain as safe as possible from the wrath of
Mother Nature.

Specications

Model TL-ER7206

Product Picture

Product Description Gigabit Multi-WAN VPN Router

IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE

Standards and Protocols

Interface

Network Media

Hardware

Button Reset button

802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS,
IPSec, PPTP, L2TP, SNMP

1 Gigabit SFP Port
1 Gigabit WAN port
2 Gigabit LAN/WAN ports
2 Gigabit LAN port

10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)
EIA/TIA-568 100Ω STP (Max 100 m)
100BASE-TX: UTP category 5, 5e cable (Max 100 m)
EIA/TIA-568 100Ω STP (Max 100 m)
1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)

Power Supply 100–240 VAC, 50/60 Hz

Flash 4MB SPI + 128 MB NAND

DRAM 512 MB

LED PWR, SYS, SFP WAN, WAN (Speed, Link/Act), LAN (Speed, Link/Act)

Surge Protection 4 kV surge protection

Dimensions ( W x D x H ) 8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm)

Model TL-ER7206

Automatic Device Discovery
Intelligent Network Monitoring
Abnormal Event Warnings

Unied Conguration

Reboot Schedule

Captive Portal Conguration
ZTP (Zero-Touch Provisioning)

SDN Support

Hardware Controller (OC200/OC300)

Software Controller

Cloud-Based Controller

Concurrent Session 150,000

New Sessions /Second 5,500

1

Performance

Basic Functions

Static IP NAT Throughput (Upload /
Download)

DHCP NAT Throughput (Upload /
Download)

PPPoE NAT Throughput (Upload /
Download)

L2TP NAT Throughput (Upload /
Download)

PPTP NAT Throughput (Upload /
Download)

66 Byte Packet forwarding rate

(Upload / Download)

1,518 Byte Packet forwarding rate

(Upload / Download)

940.3 Mbps / 940.2 Mbps

940.3 Mbps / 940.4 Mbps

939.7 Mbps / 937.9 Mbps

918.0 Mbps / 917.9 Mbps

918.9 Mbps / 914.7 Mbps

486,918 pps / 488,372 pps

81,274 pps / 81,274 pps

IPSec VPN Throughput (AES256) 291.6 Mbps

L2TP VPN Throughput

PPTP VPN Throughput

Unencrypted: 1360.3 Mbps
Encrypted: 202.3 Mbps

Unencrypted: 1379.3 Mbps
Encrypted: 115.6 Mbps

Static IP
Dynamic IP

WAN Connection Type

PPPoE
PPTP
L2TP

DHCP Server

DHCP

DHCP Address Reservation
Multi-IP Interfaces
Multi-Net DHCP

2

1

MAC Clone Modify WAN/LAN MAC Address

3

IPTV IGMP v2/v3 Proxy

IPv6 Developing

4

VLAN 802.1Q VLAN

1. Zero-Touch Provisioning is supported only when using Omada Cloud-Based Controller.

2. Multi-IP Interfaces and Multi-Net DHCP are supported only in Controller Mode.

3. LAN MAC Address can be modied only in Standalone Mode.

4. IPv6 is being developed and will be updated in the following software versions.

Model TL-ER7206

Intelligent Load Balance
Application Optimized Routing

Link Backup (Timing

Online Detection

One-to-One NAT
Multi-Net NAT
Virtual Server
Port Triggering
NAT-DMZ
FTP/H.323/SIP/IPSec/PPTP ALG,
UPnP

Static Routing
Policy Routing

100 IPSec VPN Tunnels
LAN-to-LAN, Client-to-LAN
Main, Aggressive Negotiation Mode
DES, 3DES, AES128, AES192, AES256 Encryption Algorithm
IKE v1/v2

3

MD5, SHA1 Authentication Algorithm

NAT Traversal (NAT-T)
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)

PPTP VPN Server
10 PPTP VPN Clients
50 Tunnels
PPTP with MPPE Encryption

L2TP VPN Server
10 L2TP VPN Clients
50 Tunnels
L2TP over IPSec

OpenVPN Server
10 OpenVPN Clients
50 OpenVPN Tunnels

TCP/UDP/ICMP Flood Defense

Block TCP Scan (Stealth FIN/Xmas/Null)

Block Ping from WAN

Web Group Filtering
URL Filtering
Web Security

Sending GARP Packets
ARP Scanning
IP-MAC Binding

Transmission

VPN

Security

Load Balance

NAT

Routing

Session Limit IP-based Session Limit

Bandwidth Control IP-based Bandwidth Control

IPSec VPN

PPTP VPN

L2TP VPN

OpenVPN

4

Attack Defense

Filtering

ARP Inspection

6

1

, Failover)

2

2

5

5

Access Control Source/Destination IP Based Access Control

1. The Timing mode in Link Backup is supported only in Standalone Mode.

2. One-to-One NAT and Port Triggering are only supported only in Standalone Mode.

3. IKE v2 is supported only in Controller Mode.

4. OpenVPN is supported only in Controller Mode.

5. Web Group Filtering and Web Security are only supported only in Standalone Mode.

6. ARP Inspection is supported only in Standalone Mode.

Model TL-ER7206

No Authentication
Simple Password

Authentication Web Authentication

Service Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)

Management

Maintenance

Certication CE, FCC, RoHS

Package Contents TL-ER7206, Power Cord, Quick Installation Guide

Hotspot (Local User / Voucher1 / SMS1 / Radius1)
External Radius Sever
External Portal Sever

Facebook

1

Web Management Interface
Remote Management

Export & Import Conguration

SNMP v1/v2c/v3

Diagnostics (Ping & Traceroute)

NTP Synchronize
Syslog Support

1

1

2

3

3

Others

System Requirements

Environment

Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10

MAC OS, NetWare, UNIX or Linux

Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F)
Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F)

Operating Humidity: 10% to 90% non-condensing
Storage Humidity: 5% to 90% non-condensing

1. The following web authentication methods are supported only in Controller Mode: Simple Password, Voucher, SMS, Radius, External
Portal Sever, and Facebook.

2. SNMP v3 is supported only in Controller Mode.

3. Diagnostics (Ping & Traceroute) and NTP Synchronize are supported only in Standalone Mode

Ordering Information

Host Router

Model Description

TL-ER7206 Gigabit Multi-WAN VPN Router

SFP/SFP+ Modules

Model Description

TL-SM311LS Gigabit SFP module, Single-mode, LC interface, Up to 20km distance

TL-SM311LM Gigabit SFP module, Multi-mode, LC interface, Up to 550m distance

TL-SM321A Gigabit WDM Bi-Directional SFP Module, single-mode, LC connector, TX: 1550 nm/RX: 1310 nm, 20 km

TL-SM321A-2 Gigabit WDM Bi-Directional SFP Module, single-mode, LC connector, TX: 1550 nm/RX: 1310 nm, 2 km

TL-SM321B Gigabit WDM Bi-Directional SFP Module, single-mode, LC connector, TX: 1310 nm/RX: 1550 nm, 20 km

TL-SM321B-2 Gigabit WDM Bi-Directional SFP Module, single-mode, LC connector, TX: 1310 nm/RX: 1550 nm, 2 km

Some models featured in this guide may be unavailable in your country or region. Visit TP-Link website for local sales information:

*

www.tp-link.com.

Specications are subject to change without notice.

*
© 2021 TP-Link