
TP-Link Omada Gigabit VPN Router (Gateway), Multi-WAN with SFP | ER7206
The TP-Link Omada ER7206 is a Gigabit wired VPN gateway for business networks. It has 1× Gigabit SFP WAN/LAN port, 5× Gigabit RJ45 ports (1× WAN, 4× WAN/LAN) and a USB 3.0 port, load-balances up to 5 WAN connections, and supports SSL, IPsec, GRE, WireGuard, PPTP, L2TP and OpenVPN.

Multi-WAN Load Balancing: Up to 5 WAN ports, using the SFP port, the RJ45 ports and USB with an LTE dongle for backup, increase the use of several broadband lines. Intelligent load balancing distributes traffic by each port's bandwidth, with link backup and online detection. NAT throughput is about 940 Mbps.
Secure VPN for Branches and Remote Work: 100 IPsec tunnels (about 845–885 Mbps), 50 SSL VPN tunnels, 50 PPTP and 50 L2TP tunnels, 55 OpenVPN tunnels, plus WireGuard and GRE, with one-click auto IPsec VPN between Omada sites.
Security: DPI, IPS/IDS and DoS Defense: DPI recognises 2421 application types, the IDS/IPS engine uses an attack signature database, content filtering supports category- and time-based rules, and DoS protection blocks TCP/UDP/ICMP flooding and scans.
Omada SDN and Flexible Mounting: Manage it standalone through the web interface or centrally with an Omada hardware, software or cloud controller for cloud access, the Omada app, zero-touch provisioning and SD-WAN. The fanless steel enclosure fits on a desk, wall or rack (rackmount kit included).
Who it's for / Works with: Offices and businesses that need several internet lines, secure VPN between branches, or remote work and study access, managed alone or as part of an Omada network.
Good to know: This is a wired gateway with no built-in Wi-Fi; add Omada access points for wireless. The Omada app and cloud access require an Omada controller. GRE works only in standalone mode and SD-WAN only in controller mode. At least one WAN/LAN port must work as a LAN port.
What's in the Box
◆ ER7206
◆ Power adapter
◆ Rackmount kit
◆ Quick installation guide
Technical Specifications
| Specification | TP-Link ER7206 |
|---|---|
| Interfaces | 1× Gigabit SFP WAN/LAN, 1× Gigabit WAN, 4× Gigabit LAN/WAN, 1× USB 3.0 (LTE dongle / USB storage) |
| Max. WAN ports | Up to 5 (load balancing) |
| Memory | 512 MB DDR4 DRAM, 128 MB NAND flash |
| NAT throughput | About 940 Mbps |
| Concurrent sessions | 150,000 (4,600 new sessions/s) |
| VPN | IPsec 100 tunnels; SSL VPN 50; PPTP 50; L2TP 50; OpenVPN 55; WireGuard; GRE (standalone mode) |
| IPsec VPN throughput | About 845–885 Mbps (AES256) |
| WireGuard throughput | 341.3 Mbps |
| DPI / IPS throughput | DPI TCP 933 Mbps; IPS TCP 918 Mbps |
| Security | IDS/IPS, stateful ACL, DPI (2421 applications), URL filtering, DNS proxy (DNSSEC, DoH, DoT), flood defense, ARP inspection |
| WAN connection types | Static IP, Dynamic IP, PPPoE, PPTP, L2TP |
| Management | Web UI, CLI (standalone), SNMP v1/v2c/v3; Omada hardware/software/cloud controller; zero-touch provisioning |
| Power supply | 12V/1A DC adapter |
| Max. power consumption | 7.5 W (with USB 3.0), 4.5 W (without) |
| Cooling | Fanless |
| Enclosure | Steel |
| Mounting | Desktop / wall / rackmount |
| Protection | 4 kV surge protection |
| Dimensions (W×D×H) | 226 × 131 × 35 mm |
| Operating temperature | 0 °C to 40 °C |
| Certification | CE, FCC |
📄 Datasheet: Download the official TP-Link ER7206 datasheet (PDF)