TP-LINK Multi-WAN VPN router with 2,5 Gigabit ports for businesses OMADA ER707-M2 DSP0000043109

Features of the TP-Link Omada ER707-M2 Multi-Gigabit VPN Router
The TP-Link Omada ER707-M2 is a Multi-Gigabit VPN router designed for professional networks that need high performance, redundant WAN connections, centralized management and advanced security features. Thanks to its two 2,5 Gbps RJ45 ports, its Gigabit WAN/LAN connections and its ability to manage up to 6 WAN links, it is particularly suitable for offices, businesses, retail stores and Omada network deployments with multiple Internet connections.
Multi-Gigabit connectivity up to 2,5 Gbps
The ER707-M2 features two 2,5 Gbps RJ45 ports, one dedicated to WAN and the other configurable as WAN/LAN, allowing you to take advantage of broadband connections faster than Gigabit. They are complemented by Gigabit RJ45 and SFP ports to adapt the infrastructure to different connectivity needs.

1× port RJ45 2,5G WAN
1× port RJ45 2,5G WAN/LAN
4× Gigabit WAN/LAN RJ45 ports
1× Gigabit WAN/LAN SFP port
1× port USB 2.0

Up to 6 WAN connections and load balancing
Its support for up to 6 WAN ports allows data flows to be distributed across different Internet connections. Intelligent load balancing makes use of the available bandwidth on each line and enables an infrastructure with greater capacity and redundancy.

Intelligent load balancing
Application Optimized Routing
Link Backup with failover
Online connection status detection
IP- and port-based bandwidth control
Guaranteed and limited bandwidth configuration

USB port with storage and LTE backup
The USB 2.0 port expands the router’s capabilities by allowing USB storage to be used or a mobile backup connection to be established via a compatible LTE dongle. This provides an alternative Internet access option when the main connection is unavailable.

1× USB 2.0
USB storage support
LTE backup via LTE dongle
4G/3G modem support for backup WAN connection

High-security VPN for remote connections
The TP-Link Omada ER707-M2 integrates multiple VPN technologies to connect branch offices, provide remote access to the corporate network or protect communications between different locations. It supports SSL VPN, IPSec, GRE, WireGuard, PPTP, L2TP and OpenVPN.

Up to 100 IPSec VPN tunnels
Up to 60 SSL VPN tunnels
Up to 66 OpenVPN tunnels
Up to 20 WireGuard tunnels
Up to 60 shared tunnels PPTP/L2TP
6 OpenVPN clients
12 PPTP clients
12 clients L2TP
GRE available in Standalone mode

Advanced IPSec features
The IPSec implementation offers multiple encryption, authentication and negotiation algorithms, facilitating the creation of VPN connections between networks or from remote clients.

LAN-to-LAN and Client-to-LAN VPN
Main and Aggressive negotiation modes
DES, 3DES, AES128, AES192 and encryption AES256
IKEv1 and IKEv2
MD5, SHA1, SHA2-384 and authentication SHA2-512
NAT Traversal NAT-T
Dead Peer Detection DPD
Perfect Forward Secrecy PFS

Performance designed for demanding networks
The ER707-M2 hardware is designed to handle up to 500,000 concurrent sessions and 6,000 new sessions per second. Its NAT throughput exceeds 2.3 Gbps across different connection types, allowing Multi-Gigabit interfaces to be fully utilised in high-traffic environments.

Concurrent sessions: 500.000
New sessions per second: 6.000
Static IP NAT: 2365,17 Mbps / 2364,45 Mbps
DHCP NAT: 2364,45 Mbps / 2366,04 Mbps
PPPoE NAT: 2347,14 Mbps / 2348,29 Mbps
L2TP NAT: 1308,86 Mbps / 974,10 Mbps
PPTP NAT: 1236,27 Mbps / 1280,99 Mbps
66-byte packet forwarding: 3.471.004 pps upstream and 3.298.939 pps downstream
1,518-byte packet forwarding: 202.666 pps upstream and 202.348 pps downstream

High VPN performance
The router provides sufficient acceleration to maintain high-performance VPN connections, with different figures depending on the protocol and encryption system used.

IPSec ESP-SHA1-AES256: 673,3 Mbps
IPSec ESP-SHA256-AES256: 650,2 Mbps
IPSec ESP-SHA384-AES256: 629,3 Mbps
IPSec ESP-SHA512-AES256: 633,8 Mbps
Unencrypted L2TP: 1243,7 Mbps
Encrypted L2TP: 561,0 Mbps
SSL VPN: 132,24 Mbps
WireGuard VPN: 343 Mbps

Security with DPI and IDS/IPS
The ER707-M2 incorporates deep packet inspection (DPI) and IDS/IPS systems to increase control over network traffic. These features allow you to set access policies, identify specific types of traffic, and strengthen protection against threats.

DPI TCP: 1823 Mbps
DPI UDP: 1272 Mbps
IPS TCP: 208 Mbps
IPS UDP: 161 Mbps
IP, MAC, and URL filtering
Access control based on source IP, destination IP, and FQDN
Stateful ACL
DNSSEC, DoH, and DoT via DNS Proxy

Protection against DoS attacks and network threats
The integrated security features can detect and block various attack patterns, including traffic floods and certain TCP scans, strengthening network perimeter protection.

Protection against TCP Flood
Protection against UDP Flood
Protection against ICMP Flood
Blocking TCP Stealth FIN/Xmas/Null scans
Blocking pings from WAN
ARP inspection
ARP Detection
IP-MAC Binding

Centralized management with Omada SDN
Integration with Omada Software Defined Networking allows routers, switches and access points to be managed from a centralized infrastructure. The ER707-M2 can be managed through Omada controllers and accessed remotely via the cloud.

Omada Cloud-Based Controller
Omada Hardware Controller
Omada Software Controller
Access via web browser
Compatibility with the Omada app via controller
Zero-touch provisioning via Omada Cloud-Based Controller
Automatic device discovery
Batch configuration and firmware updates
Intelligent network monitoring
Alerts for abnormal events
Unified configuration
Reboot scheduling

Advanced routing and networking features
To meet the needs of professional infrastructures, the router features advanced routing, VLAN, NAT, QoS and DHCP functions, making it easier to segment and manage networks with different devices, services and subnets.

Static routing
Policy Routing
RIP in Standalone mode
OSPF in Standalone mode
SD-WAN in Controller mode
QoS
Bridge VLAN
VLAN 802.1Q
mDNS Repeater
IP-based Session Limit
IGMP v2/v3 Proxy for IPTV
Custom and Bridge IPTV Modes

NAT and compatibility with different WAN connections
The ER707-M2 offers broad compatibility with IPv4 and IPv6 connections and various NAT functions to facilitate service publishing, communication between networks, and application configuration.

IPv4 Static IP, Dynamic IP, PPPoE, L2TP, and PPTP
IPv6 PPP, DHCPv6, Static IP, 6to4, and Pass-Through
IPv6 Static IP, SLAAC, DHCPv6, PPPoE, 6to4 Tunnel, PassThrough, and Non-Address mode
One-to-One NAT
Multi-Net NAT
Port Forwarding
Port Triggering
NAT-DMZ
FTP, H.323, SIP, IPSec and PPTP ALG
UPnP
Option to disable NAT

DHCP and user authentication
DHCP and authentication tools let you manage address allocation and control user access to the network, including options for portals, RADIUS and LDAP.

DHCP server
DHCPv6 PD server in Standalone mode
DHCP option customization
DHCP address reservation
Multi-IP interfaces
Multi-Net DHCP
WAN DHCP 60
Credential-free authentication
Simple password authentication
Hotspot via local user, voucher, SMS or RADIUS
External RADIUS server
External portal server
LDAP

Rugged hardware and fanless operation
Its steel enclosure and fanless design allow the router to be installed in professional environments without relying on mechanical fans. It can be placed on a desk, mounted on a wall or installed in a rack using the included kit.

Steel enclosure
Fanless design
Desktop, wall or rack mounting
Dimensions: 226 × 131 × 35 mm
MEMORY DRAM: 1 GB DDR4
Flash Memory : 128 MB NAND
4 kV surge protection
Reset button
PWR, SYS, SFP, USB, WAN and LAN LEDs

Power supply and consumption
The router uses a 12 V, 1.5 A power adapter and keeps maximum power consumption low even when the USB port is in use.

Power supply: adapter 12 V / 1,5 A
Maximum power consumption with USB 2.0 connected : 14,2 W
Maximum power consumption without USB 2.0 connected : 7,1 W
PoE: not available

Network standards, protocols and media
The TP-Link Omada ER707-M2 is compatible with numerous Ethernet standards and network protocols, making it easy to integrate into existing business infrastructures.

IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3z, IEEE 802.3x, IEEE 802.1Q and IEEE 802.3bz
TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS and DNS
IPSec, PPTP, L2TP, OpenVPN, SNMP and WireGuard VPN
10BASE-T: category 3, 4 or 5 UTP cable up to 100 m
100BASE-TX: category 5 or 5e UTP cable up to 100 m
1000BASE-T: category 5, 5e or 6 UTP cable up to 100 m
2500BASE-T: category 5, 5e or 6 UTP cable up to 100 m

Management and maintenance
The device provides local and remote management tools to facilitate the configuration, monitoring, diagnostics and maintenance of the infrastructure.

Web management interface
Remote management
Configuration export and import
SNMP v1/v2c/v3
Diagnostics using Ping and Traceroute
NTP synchronization
Port Mirroring
CLI in Standalone mode
Syslog compatibility
Dynamic DNS via Dyndns, No-IP, Peanuthull and Comexe

Environmental conditions and contents
The ER707-M2 is designed to operate in professional environments with varying temperature and humidity conditions and includes the accessories required for setup and rack mounting.

Operating temperature : 0–40 °C
Storage temperature : -40–70 °C
Operating humidity: 10–90 % RH, non-condensing
Storage humidity: 5–90 % RH, non-condensing
Certifications: CE and FCC
Contents: ER707-M2, power adapter, quick installation guide and rack mounting kit
System compatibility indicated: Microsoft Windows 98SE, NT, 2000, XP, Vista, Windows 7/8/8.1/10, Mac OS, NetWare, UNIX and Linux
Volume (m ³): 0.0044