Omada VPN Gateway with 10G Ports
- 2× 10G SFP+ Slots (1× WAN, 1× WAN/LAN) & 9× Gigabit Ports (1× SFP WAN/LAN, 8× RJ45 WAN/LAN)
- 2× USB 3.0 Ports (One Supports LTE Backup with LTE Dongle), 1× RJ45 Console Port
- Load Balancing on up to 10 WAN Ports
- 1 + 1 Redundant Power Supply
- IPSec/PPTP/L2TP/OpenVPN/GRE△/ WireGuard/SSL VPN
- DPI, IPS/IDS, DoS/DDoS Protection, IP/MAC/URL/Content Filtering
- SD-WAN for Multi-Site Connectivity‡
- Centralized Cloud Management via Omada App or Web†
-

Quad-Core
2.2 GHz CPU -

2× 10G SFP+ &
1× Gigabit SFP Slots -

Up to
10× WAN Ports -

2× USB 3.0
Ports -

Centralized Cloud
Management† -

High-Capacity
Performance -

IPSec/PPTP/L2TP/
OpenVPN/WireGuard
/GRE△ /SSL VPN -

Enhanced
Security
High-Capacity Performance with Quad-Core 2.2 GHz CPU
Manage your entire business network with the right amount of processing power. Dual redundant power supplies further ensure carrier-class reliability for enterprise networking.
Dual Redundant Power Supplies
Quad-Core 2.2 GHz CPU
NAT Throughput up to 10 Gbps
Maximize the 10G Broadband with Omada Enterprise Gateway
Maximized 10G Broadband with the Omada Enterprise Gateway. Build your lightning-fast network with Omada ER8411 — an enterprise VPN gateway with 10G ports. It surpasses the need for high-speed, reliable, and safe enterprise networks, ideal for large-scale deployments such as offices, schools, and hotels.
1× 10G SFP+ WAN/LAN Port
1× 10G SFP+ WAN Port
10G speed
Easily Build a Whole 10G Multi-gigabit Network
10G Gateway
Ensures the fast way
Full 10G Fiber Switch
Lightning-fast aggregation switching
Switch with
10G Uplink
PoE Switch
with 10G Uplink
Wi-Fi 7/6 APs
with 10G/2.5G Ports
10× WAN Ports & One USB WAN for Mobile Broadband
Load Balancing up to
10× WAN Ports
2× WAN Ports up to
10G
1× USB 3.0 Ports for
LTE WAN Backup

High-Security and High-Performance VPN
IPSec/PPTP/L2TP/OpenVPN/WireGuard/GRE△ /SSL VPN easily build secure VPN tunnels for secure Internet browsing, communication between different branches, or enabling remote work or study from home.
Headquarters
One-click Auto
Subsidiary
Omada Controller
IPSec VPN
Smart Connectivity & Intelligent Protection Optimize Your Network with Ease
Intelligent DPI & Content Filtering
DPI delivers precise application identification and intelligent traffic control to keep your network at peak performance, and Content Filtering offers flexible category- and time-based rules, simplifying internet management and facilitating the enforcement of policies for employees or families.
SD-WAN for Multi-Site Connectivity
Connect branch offices to headquarters in just a few clicks—no complex VPN setup required. Centralized management delivers reliable site-to-site connectivity and seamless scalability as the network grows.‡
Always-On DoS/DDoS Protection
Automatically detects and blocks Denial of Service (DoS) attacks such as TCP/UDP/ICMP Flooding, Ping of Death, and other related threats.
Empowering Businesses with Reliable Omada SDN Solutions
Omada’s Software-Defined Networking (SDN) solution seamlessly integrates access points (APs), managed switches, and gateways, enabling 100% centralized cloud management for a highly scalable network.
On-Premises Controllers
Or
Or
Omada Central
Hardware
Software
Ceiling Mount
AccessPoint
Wall
Plate AP
Omada
Outdoor AP
Omada
POE Switch
Internet
Cloud Access
Omada App
Web Browser


| SECURITY | |
|---|---|
| DPI | • Deep Packet Inspection• Support 2421 type Applications• Max Throughput (Upload / Download) 942.7Mbps/937.3Mbps |
| IDS/IPS | Signature-based IPS/IDS threat detection |
| Access Control | • Source/Destination IP Based ACL • Stateful ACL• IPv4/IPv6 ACL• National Based ACL• FQDN |
| DNS Proxy | DNSSEC, DoH, DoT, and DNS Override |
| Filtering | • WEB Group Filtering△• URL Categories and URLs Filtering• Web Security△ |
| ARP Inspection | • Sending GARP Packets• ARP Scanning• IP-MAC Binding• ARP Detection |
| Attack Defense | • TCP/UDP/ICMP Flood Defense• Block TCP Scan (Stealth FIN/Xmas/Null)• Block Ping from WAN |
| HARDWARE FEATURES | |
|---|---|
| Standards and Protocols | LLDP |
| Interface | • 2× 10GE SFP+ Ports (1× WAN, 1× WAN/LAN)• 1× 1GE SFP WAN/LAN Ports• 8× 1GE RJ45 WAN/LAN Ports• 1× RJ45 Console Port• 2× USB 3.0 Ports (One supports LTE backup with LTE dongle) |
| Network Media | • 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 100BASE-TX: UTP category 5, 5e cable (Max 100 m)EIA/TIA-568 100Ω STP (Max 100 m)• 1000BASE-T: UTP category 5e, 6 cable (Max 100 m) |
| Fan Quantity | 2 |
| Button | Reset Button |
| Power Supply | Redundant Dual Power Supplies (100–240 VAC, 50/60 Hz) |
| Flash | 4MB SPI NOR + 256 MB NAND |
| DRAM | 4 GB DDR4 |
| LED | PWR, SYS, WAN, LAN, USB, FAN |
| Dimensions ( W x D x H ) | 17.3 × 8.7 × 1.7 in (440 × 220 × 44 mm) |
| Protection | 4 kV surge protection |
| Enclosure | Steel |
| Mounting | Rack Mountable |
| Max. Power Consumption | • 26.36 W (with USB 3.0 connected)• 19.12 W (without USB 3.0 connected) |
| PERFORMANCE | |
|---|---|
| IPS Throughput | TCP: 4924 Mbps;UDP: 4521 Mbps |
| DPI Throughput | TCP: 5524 Mbps; UDP: 3547 Mbps |
| WireGuard VPN | 1411 Mbps |
| Concurrent Session | 2,300,000 |
| New Sessions /Second | 20,000 |
| NAT (Static IP) | • Upload: 9445.82 Mbps• Download: 9449.26 Mbps |
| NAT(DHCP) | • Upload: 9426.83 Mbps• Download: 9426.20 Mbps |
| NAT(PPPoE) | • Upload: 9413.96 Mbps• Download: 9102.01 Mbps |
| NAT (L2TP) | • Upload: 9064.66 Mbps• Download: 8587.57 Mbps |
| NAT (PPTP) | • Upload: 8712.11 Mbps• Download: 8505.61 Mbps |
| 64 Byte Packet Forwarding Rate | • Upload: 2,109,375 pps• Download: 2,011,719 pps |
| IPsec VPN Throughput | • ESP-SHA1-AES256: 3099.4 Mbps• ESP-SHA256-AES256: 2928.4 Mbps• ESP-SHA384-AES256: 2935.7 Mbps• ESP-SHA512-AES256: 2878 Mbps |
| OpenVPN | 1043 Mbps |
| L2TP VPN Throughput | • Unencrypted: 10497 Mbp• Encrypted: 3178.5 Mbps |
| SSL VPN Throughput | 1006 Mbps |
| 1,518 Byte Packet forwarding rate | • Upload: 820,982 pps• Download: 820,982 pps |
| BASIC FUNCTIONS | |
|---|---|
| LAN DNS | √ |
| WAN Connection Type | • Static/Dynamic IP• PPPoE• PPTP• L2TP• 6to4 Tunnel• Pass-Through• Mobile Broadband: 4G/3G modem for backup via USB port |
| MAC Clone | Modify WAN/LAN MAC Address△ |
| DHCP | • DHCP Server/Client• DHCP Address Reservation• Multi-net DHCP• Multi-IP Interfaces• WAN DHCP 60 |
| IPv6 | WAN Connection |
| VLAN | 802.1Q VLAN |
| IPTV | IGMP v2/v3 Proxy |
| Advanced Features | |
|---|---|
| Advanced Routing | • Static Routing• Policy Routing• RIP△• OSPF△ |
| Bandwidth Control | • IP/Port-based Bandwidth Control• Guarantee & Limited Bandwidth |
| Load Balance | • Intelligent Load Balance• Application Optimized Routing• Link Backup (Timing△, Failover)• Online Detection |
| Session Limit | IP-based Session Limit |
| VPN | |
|---|---|
| GRE | √ (Only in Standalone mode) |
| SD-WAN | √ (Only in Controller mode) |
| SSL VPN | • SSL VPN Server• 500 SSL VPN Tunnels |
| IPsec VPN | • 300 IPSec VPN Tunnels• LAN-to-LAN, Client-to-LAN• Main, Aggressive Negotiation Mode• DES, 3DES, SHA1, SHA256, SHA384, SHA512, AES128, AES192, AES256 Encryption Algorithm• IKE v1/v2• MD5, SHA1 Authentication Algorithm• NAT Traversal (NAT-T)• Dead Peer Detection (DPD)• Perfect Forward Secrecy (PFS) |
| PPTP VPN | • PPTP VPN Server• PPTP VPN Client (32)*• 300 Tunnels (Shared with L2TP)• PPTP with MPPE Encryption |
| L2TP VPN | • L2TP VPN Server• L2TP VPN Client (32)*• 300 Tunnels (Shared with PPTP)• L2TP over IPSec |
| OpenVPN | • OpenVPN Server• OpenVPN Client (10)*• 110 OpenVPN Tunnels |
| WireGuard VPN | √ |
| AUTHENTICATION | |
|---|---|
| Web Authentication | • No Authentication• Simple Password‡• Hotspot(Local User / Voucher‡ / SMS‡ / Radius‡)• External Radius Sever• External Portal Sever‡ |
| Management Features | |
|---|---|
| Omada App | Yes. Requiring the use of an Omada Controller. |
| Centralized Management | • Omada Hardware Controller• Omada Software Controller• Omada Central (Cloud-Based) |
| Cloud Access | Yes. Requiring the use of an Omada Controller. |
| Service | Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization) |
| Maintenance | • Web Management Interface• Remote Management• Export & Import Configuration• SNMP v1/v2c/v3• Diagnostics (Ping & Traceroute)• NTP Synchronize△• Port Mirroring• Syslog Support |
| Management Features | • Automatic Device Discovery• Intelligent Network Monitoring• Abnormal Event Warnings• Unified Configuration• Reboot Schedule• Captive Portal Configuration• ZTP (Zero-Touch Provisioning)† |
| OTHERS | |
|---|---|
| Certification | CE, FCC, RoHS |
| Package Content | • Omada VPN Gateway with 10G Ports ER8411• Power Cord• Rackmount Kit• RJ45 Console Cord• Quick Installation Guide |
| System Requirements | Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux |
| Environment | • Operating Temperature: 0–40 ℃ (32–104 ℉);• Storage Temperature: -40–70 ℃ (-40–158 ℉)• Operating Humidity: 10–90% RH non-condensing• Storage Humidity: 5–90% RH non-condensing |
†These features require the use of an Omada controller.
△These features are supported only in Standalone Mode
‡These features are supported only in Controller Mode
*ER8411 can work as a VPN client and can connect with up to 32 PPTP/L2TP VPN servers and 10 OpenVPN servers.