SECURITY |
Access Control | Source/Destination IP Based Access Control |
Filtering | WEB Group Filtering |
URL Filtering |
Web Security |
ARP Inspection | Sending GARP Packets |
ARP Scanning |
IP-MAC Binding |
Attack Defense | TCP/UDP/ICMP Flood Defense |
Block TCP Scan (Stealth FIN/Xmas/Null) |
Block Ping from WAN |
HARDWARE FEATURES |
Standards and Protocols | IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q |
TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, WireGuard VPN |
Interface | 2× 10GE SFP+ Ports (1 WAN, 1 WAN/LAN) |
1× 1GE SFP WAN/LAN Ports |
8× 1GE RJ45 WAN/LAN Ports |
1× RJ45 Console Ports |
2× USB Ports (Connecting 4G/3G Modem as WAN Backup) |
Network Media | 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) |
EIA/TIA-568 100Ω STP (Max 100 m) |
100BASE-TX: UTP category 5, 5e cable (Max 100 m) |
EIA/TIA-568 100Ω STP (Max 100 m) |
1000BASE-T: UTP category 5e, 6 cable (Max 100 m) |
Fan Quantity | 2 |
Button | Reset Button |
Power Supply | Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz) |
PoE Budget | - |
Flash | 4MB SPI NOR + 256 MB NAND |
DRAM | 4 GB DDR4 |
LED | PWR, SYS, WAN, LAN, USB, FAN |
Dimensions (W x D x H) | 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm) |
Protection | 4 kV surge protection |
Enclosure | Steel |
Mounting | Rack Mountable |
Max Power Consumption | 26.36 W (with USB 3.0 connected) |
19.12 W (without USB 3.0 connected) |
PERFORMANCE |
WireGuard VPN | 1411 Mbps |
Concurrent Session | 2,300,000 |
New Sessions /Second | 20,000 |
NAT (Static IP) | Upload: 9445.82 Mbps |
Download: 9449.26 Mbps |
NAT (DHCP) | Upload: 9426.83 Mbps |
Download: 9426.20 Mbps |
NAT (PPPoE) | Upload: 9413.96 Mbps |
Download: 9102.01 Mbps |
NAT (L2TP) | Upload: 4230.62 Mbps |
Download: 4169.53 Mbps |
NAT (PPTP) | Upload: 3933.86 Mbps |
Download: 3821.97 Mbps |
64 Byte Packet Forwarding Rate | Upload: 1080 Mbps |
Download: 1030 Mbps |
IPsec VPN Throughput | SHA1-AES256: 2140.45 Mbps |
SHA2-AES256: 2080.20 Mbps |
OpenVPN | 1665.64 Mbps |
L2TP VPN Throughput | Unencrypted: 5013.50 Mbps |
Encrypted: 2274.74 Mbps |
PPTP VPN Throughput | Unencrypted: 10143 Mbps |
Encrypted: 952 Mbps |
SSL VPN Throughput | 1511.10 Mbps |
1,518 Byte Packet forwarding rate | Upload: 9970 Mbps |
Download: 9970 Mbps |
BASIC FUNCTIONS |
WAN Connection Type | Static/Dynamic IP |
PPPoE |
PPTP |
L2TP |
6to4 Tunnel |
Pass-Through |
Mobile Broadband: 4G/3G modem for backup via USB port |
MAC Clone | Modify WAN/LAN MAC Address*4 |
DHCP | DHCP Server/Client |
DHCP Address Reservation |
Multi-net DHCP |
Multi-IP Interfaces |
IPv6 | WAN Connection |
VLAN | 802.1Q VLAN |
IPTV | IGMP v2/v3 Proxy |
ADVANCED FUNCTIONS |
ACL | IP/Port/Protocol/Domain Name Filtering |
Advanced Routing | Static Routing |
Policy Routing |
Bandwidth Control | IP/Port-based Bandwidth Control |
Guarantee & Limited Bandwidth |
Load Balance | Intelligent Load Balance |
Application Optimized Routing |
Link Backup (Timing, Failover) |
Online Detection |
NAT | One-to-One NAT |
Multi-Net NAT |
Virtual Server |
Port Triggering |
NAT-DMZ |
FTP/H.323/SIP/IPSec/PPTP ALG |
UPnP |
Security | SPI Firewall |
VPN Passthrough |
FTP/H.323/PPTP/SIP/IPsec ALG |
DoS Defence, Ping of Death |
Local Management |
Session Limit | IP-based Session Limit |
VPN |
SSL VPN | SSL VPN Server |
SSL VPN Client |
500 OpenVPN Tunnels |
IPsec VPN | 300 IPSec VPN Tunnels |
LAN-to-LAN, Client-to-LAN |
Main, Aggressive Negotiation Mode |
DES, 3DES, SHA1, SHA2, AES128, AES192, AES256 Encryption Algorithm |
IKE v1/v2 |
MD5, SHA1 Authentication Algorithm |
NAT Traversal (NAT-T) |
Dead Peer Detection (DPD) |
Perfect Forward Secrecy (PFS) |
PPTP VPN | PPTP VPN Server |
PPTP VPN Client (32) |
300 Tunnels (Shared with L2TP) |
PPTP with MPPE Encryption |
L2TP VPN | L2TP VPN Server |
L2TP VPN Client (32) |
300 Tunnels (Shared with PPTP) |
L2TP over IPSec |
OpenVPN | OpenVPN Server |
OpenVPN Client (10) |
110 OpenVPN Tunnels |
AUTHENTICATION |
Web Authentication | No Authentication |
Simple Password |
Hotspot(Local User / Voucher / SMS / Radius) |
External Radius Sever |
External Portal Sever |
Facebook Check-In |
Instagram Follow |
MANAGEMENT |
Omada App | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
Centralized Management | Omada Hardware Controller (OC300) |
Omada Hardware Controller (OC200) |
Omada Software Controller |
Omada Cloud-Based Controller |
Cloud Access | Yes. Requiring the use of OC300, OC200, Omada Cloud-Based Controller, or Omada Software Controller. |
Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe) |
Maintenance | Web Management Interface |
Remote Management |
Export & Import Configuration |
SNMP v1/v2c/v3 |
Diagnostics (Ping & Traceroute) |
NTP Synchronize |
Syslog Support |
Zero-Touch Provisioning | Yes. Requiring the use of Omada Cloud-Based Controller. |
Management Features | Automatic Device Discovery |
Intelligent Network Monitoring |
Abnormal Event Warnings |
Unified Configuration |
Reboot Schedule |
Captive Portal Configuration |
OTHERS |
Certification | CE, FCC, RoHS |
Package Contents | Omada 10G Multi-WAN Security Gateway ER8411 |
Power Cord |
Rack-Mount Kit |
Quick Installation Guide |
System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux |
Environment | Operating Temperature: 0–40 ℃ (32–104 ℉); |
Storage Temperature: -40–70 ℃ (-40–158 ℉) |
Operating Humidity: 10–90% RH non-condensing |
Storage Humidity: 5–90% RH non-condensing |