Description
TP-Link Omada ER7406 Multi-WAN Gigabit VPN Router
Overview
The TP-Link Omada ER7406 is a rack-mountable multi-WAN VPN router built for small to medium businesses that demand reliable, high-performance internet connectivity and secure remote access. With up to five WAN ports (including a 1 Gbps SFP slot), hardware-accelerated VPN, advanced firewall, and full Omada SDN integration, the ER7406 delivers enterprise-grade routing at a practical price point. Whether you’re managing a multi-site business, supporting remote workers, or simply need a resilient internet connection with automatic failover, the ER7406 is a capable and scalable foundation for your network.
Key Features
-
Multi-WAN with Load Balancing & Failover: Up to 5 WAN ports (4 × Gigabit RJ45 + 1 × Gigabit SFP) for link aggregation, load balancing, and automatic failover to keep your business online.
-
High-Performance VPN: Supports IPsec, OpenVPN, L2TP, and PPTP VPN protocols with hardware acceleration for secure site-to-site and remote-access VPN tunnels.
-
Advanced Firewall: Stateful packet inspection (SPI), DoS protection, IP/MAC/URL filtering, and access control lists (ACL) for comprehensive network security.
-
Omada SDN Integration: Centralised management via Omada Controller (hardware, software, or cloud) alongside Omada switches and access points for a unified network.
-
Flexible Port Configuration: WAN/LAN ports are configurable, allowing the router to adapt to different network topologies and bandwidth requirements.
-
VLAN & QoS: 802.1Q VLAN support and bandwidth control for traffic segmentation and prioritisation across departments or tenants.
-
1U Rack-Mount Design: Standard 1U rack-mountable form factor for clean installation in server rooms and network cabinets.
-
Omada App & Cloud Management: Zero-touch provisioning and remote management via the Omada app or cloud controller without requiring on-site access.
Ideal Use Cases
-
Small to Medium Businesses: Reliable multi-WAN routing with load balancing and failover for offices that cannot afford internet downtime.
-
Multi-Site Businesses: Site-to-site IPsec VPN tunnels connecting branch offices, warehouses, and retail locations over secure encrypted links.
-
Remote Workforce: OpenVPN and L2TP remote-access VPN for staff working from home or on the road to securely access internal resources.
-
Hospitality & Retail: VLAN segmentation to isolate guest Wi-Fi, POS systems, and staff networks on a single physical infrastructure.
-
ISPs & Managed Service Providers: Scalable, centrally managed routing for multi-tenant deployments and managed network services.
Technical Specifications
| Specification |
Detail |
| WAN Ports |
4 × Gigabit RJ45 WAN + 1 × Gigabit SFP WAN (configurable WAN/LAN) |
| LAN Ports |
4 × Gigabit RJ45 LAN (configurable) |
| Max WAN Connections |
Up to 5 simultaneous WAN links |
| VPN Protocols |
IPsec, OpenVPN, L2TP, PPTP, WireGuard |
| Max VPN Throughput |
IPsec: up to 1 Gbps |
| Max Concurrent Sessions |
150,000 |
| NAT Throughput |
Up to 2 Gbps |
| Firewall |
SPI, DoS protection, IP/MAC/URL filtering, ACL |
| Load Balancing |
Yes — intelligent load balancing across multiple WAN links |
| WAN Failover |
Yes — automatic failover with configurable health check |
| VLAN |
802.1Q VLAN |
| QoS |
Bandwidth control, traffic prioritisation |
| Management |
Omada App, Omada Software Controller, Omada Hardware Controller, Omada Cloud |
| Form Factor |
1U Rack-Mount |
| Power Input |
100–240 V AC, 50/60 Hz |
| Operating Temperature |
0 °C to 40 °C |
| Certifications |
CE, RoHS, FCC |
| Warranty |
3 Years |
Official Product Video
See how the Omada ER7406 fits into a complete Omada SDN business network deployment:
Search TP-Link Omada ER7406 on YouTube →
Recommended Accessories & Compatible Products
-
Omada PoE Switches (e.g. TL-SG2210P, TL-SG3428XPP) — managed PoE switching to complete the Omada SDN stack alongside the ER7406.
-
Omada Access Points (e.g. EAP670, EAP772) — Wi-Fi 6/7 ceiling-mount APs managed centrally with the ER7406 via Omada Controller.
-
Omada Hardware Controller OC300 — on-premises SDN management for the full Omada stack without a dedicated server.
-
1G SFP Fibre Modules (e.g. TL-SM311LS) — for fibre WAN or uplink connections via the ER7406’s SFP port.
-
1U Rack & Patch Panel — for clean, professional rack installation alongside other network equipment.
Downloads
Frequently Asked Questions
How many WAN connections can the ER7406 support simultaneously?
The ER7406 supports up to five simultaneous WAN connections — four via Gigabit RJ45 ports and one via the Gigabit SFP port. Ports are configurable as WAN or LAN to suit your network topology. This makes it ideal for businesses with multiple ISP connections for load balancing or failover redundancy.
Does it support WireGuard VPN?
Yes — the ER7406 supports WireGuard in addition to IPsec, OpenVPN, L2TP, and PPTP. WireGuard offers a modern, lightweight VPN protocol with strong security and lower overhead compared to traditional VPN protocols, making it a good choice for remote-access deployments.
Can I manage the ER7406 without an Omada Controller?
Yes — the ER7406 can be configured via its local web interface without an Omada Controller. However, for multi-device Omada SDN deployments (combining the router with Omada switches and access points), an Omada Controller (hardware, software, or cloud-based) is required for centralised management, zero-touch provisioning, and unified policy control.
What is the difference between the ER7406 and the ER7206?
The ER7406 offers more WAN port flexibility with its additional SFP WAN port and higher NAT throughput compared to the ER7206, making it better suited to larger or more demanding multi-WAN deployments. The ER7206 is a strong choice for smaller businesses with simpler WAN requirements, while the ER7406 suits growing businesses needing greater throughput and port flexibility.
Does it support automatic WAN failover?
Yes. The ER7406 continuously monitors the health of each WAN link and automatically switches traffic to an available connection if a primary link fails. Failover and recovery behaviour is fully configurable, including health check intervals and failback settings.
Is the ER7406 suitable for NBN connections in Australia?
Yes. The ER7406 is compatible with all NBN connection types (FTTP, FTTN, FTTC, HFC, Fixed Wireless) via its Gigabit WAN ports. For NBN connections that require a modem (e.g. FTTN/FTTC), connect the modem to one of the ER7406’s WAN ports. For FTTP or HFC with a supplied NTD, connect directly to the WAN port.
