TP-Link ER7206 Omada Gigabit VPN Gateway

A fanless gigabit VPN gateway with an SFP port and USB 3.0

The ER7206 is an Omada gigabit VPN gateway with a dual-core ARM Cortex-A53 processor and 512 MB DDR4. It has one gigabit SFP WAN/LAN port, one gigabit RJ45 WAN port, four gigabit RJ45 WAN/LAN ports and a USB 3.0 port for an LTE dongle or storage.

TP-Link lists a broad VPN set: SSL, WireGuard, OpenVPN, GRE, IPsec, PPTP, L2TP and L2TP over IPsec. A captive portal handles guest authentication, and the case offers 4 kV surge protection. It is fanless, 226 x 131 x 35 mm, and can sit on a desk, a wall or a rack.

Technical specifications

Hardware, performance and capacity data for ER7206 as published by TP-Link:

Reading the numbers: NAT throughput of about 940 Mbps in both directions fits a gigabit internet line, and IPsec at 844.8 to 885.3 Mbps means a site-to-site tunnel can nearly fill a gigabit link, unlike smaller gateways. The same datasheet shows WireGuard at 341.3 Mbps and OpenVPN at 139.1 Mbps, so protocol choice changes capacity by several times. With 150,000 sessions and 4,600 new sessions per second the gateway handles a mid-sized office, and 7.5 W maximum consumption makes it cheap to run around the clock.

VPN, SD-WAN and security features

• 6 gigabit ports with flexible WAN/LAN assignment, including a fibre SFP option.
• 100 IPsec tunnels, 55 OpenVPN, 50 each of PPTP, L2TP and SSL VPN; WireGuard and GRE supported.
• IPS throughput 918 Mbps (TCP) and DPI throughput 933 Mbps, with 4,600 new sessions per second.
• SD-WAN (controller mode only), load balance, link backup, bandwidth control and access control.
• Mounting options include desktop, wall and rack; fanless operation.

Ordering notes

Order code ER7206 (hardware 2.30, UN). The 12 V / 1 A adapter powers it; consult the datasheet package list when quoting. The SFP port is not populated: pick a gigabit SFP module separately. Compared with the ER605, the ER7206 offers more than three times the IPsec throughput (885.3 Mbps against 239.39 Mbps with ESP-SHA1-AES256), five times as many IPsec tunnels and a faster processor.

Mounting, power and operating notes

Operating range is 0 to 40 degrees C with MTBF 981,089 hours at 25 degrees C falling to 557,441 hours at 40 degrees C, which shows the effect of heat on a fanless unit; keep it ventilated. Some functions are standalone-only (RIP, OSPF, CLI, ARP scanning) and others need controller mode (SD-WAN, SMS and voucher portal methods). Zero-touch provisioning needs the cloud-based controller.

Multi-site and guest-access deployments

The gateway suits head-office or mid-sized branch sites that need gigabit routing, a fibre or dual-ISP uplink and site-to-site tunnels, as well as guest Wi-Fi with a captive portal. The 4 kV surge protection is a datasheet feature and helps on long outdoor cable runs, but it is not a substitute for proper earthing.

Information to send with an RFQ for the TP-Link ER7206 Omada Gigabit VPN Gateway

Network hardware is easier to quote correctly when the application is clear. For the TP-Link ER7206 Omada Gigabit VPN Gateway, tell us how many sites or users it will serve, the WAN connections at each site (fibre, DSL, LTE or microwave) and the throughput you expect with firewall and VPN rules active, because encrypted throughput is usually well below the headline routing figure.

• Quantity, and whether spare units are needed for critical sites.
• Power arrangement: included adapter, PoE input or DC supply from a site battery.
• Optics: the SFP or SFP+ modules and fibre type, single-mode or multimode, if fibre ports will be used.
• Mounting: desk, wall, DIN rail, pole or 19-inch rack, and any enclosure needed outdoors.

If the device is replacing existing equipment, the current configuration or a short description of the network layout helps confirm that the replacement supports the same features.

Each quotation for the TP-Link ER7206 Omada Gigabit VPN Gateway states the exact manufacturer part number, the documents that will accompany the shipment, the expected lead time from the factory and the delivery terms to your site. If the part number on an existing nameplate is incomplete or worn, send a clear photograph of the label and of the installed unit, and the correct ordering code can be confirmed with the manufacturer before the offer is issued.

Related items and documents

The ER8411 handles 10G links; the ER605 is the smaller option. Combine with the SG3452P and EAP773. See the industrial communications category.

Datasheet included. Ask Seven Star LLC for availability of ER7206, stating the quantity and site.