TP-Link ER605 SafeStream Gigabit Multi WAN VPN Router

The TL-R605 is integrated into the Omada SDN for seamless management and can be managed centrally from anywhere at any time. The entire network is set up, managed and monitored from a single platform. Standalone management via the web interface or app is also possible for maximum flexibility.
Two freely interchangeable ports allow the router to support up to three WAN ports for different Internet access requirements. The multi-WAN load balancing function distributes data streams according to the bandwidth share of each WAN port to increase the utilisation rate for multiple Internet lines.
Mobile Internet via a 4G/3G modem connected to the USB port is also supported for WAN backup.
TL-ER605 supports IPSec/PPTP/L2TP VPN over IPSec/SSL protocols. The powerful hardware design is capable of up to 20× LAN-to-LAN IPsec, 16× OpenVPN*, 16× L2TP, and 16× PPTP VPN connections. One-click auto IPSec VPN* simplifies VPN configuration and enables simultaneous network management, securing and encryption of private site-to-site data communications over the Internet.
Set standardised profiles for Internet usage and access rights for different user groups such as employees and guests with IP/MAC/URL filtering and access control (ACL). Captive portal authentication provides control over network resources by capturing, authenticating and classifying users. This allows different network resources to be allocated to specific users or guests.
Follow the intuitive, guided configuration in the free Omada app to get set up in minutes. Omada enables configuration, management and monitoring of the network and end devices, all conveniently from a mobile device.

SECURITY
- Access control: Source/destination IP-based access control
- Filtering: WEB group filtering, URL filtering, web security
- ARP inspection: Sending GARP packets, ARP scanning, IP-MAC binding
- Attack protection: TCP/UDP/ICMP flood defence, block TCP scan (stealth FIN/Xmas/Null), block ping from WAN
HARDWARE FUNCTIONS
- Standards and protocols: IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP
- Interface: 1 fixed Gigabit WAN port, 2 fixed Gigabit LAN ports, 2 switchable Gigabit WAN/LAN ports
1 USB 2.0 port (connection of 4G/3G modem as WAN backup‡)
- Cable: 10BASE-T: UTP category 3, 4, 5 cable (max 100m), EIA/TIA-568 100Ω STP (max 100m); 100BASE-TX: UTP category 5, 5e cable (max. 100m), EIA/TIA-568 100Ω STP (Max. 100m); 1000BASE-T: UTP cable of categories 5, 5e, 6 (Max. 100 m)
- Number of fans: Fanless
- Button: Reset button
- Power supply: External 12V/1A DC adapter
- PoE household appliance
- Flash: 128 MB NAND
- DRAM: 256 MB DDR
- LED: PWR, SYS, WAN (connection/act), LAN (connection/act), USB
- Dimensions (W*D*H): 6.2 × 4.0 × 1.0 inches (158 × 101 × 25mm)
- Protection: 4 kV surge protection
- Cover: Steel
- Mounting: Desktop/wall mounting
- Maximum power consumption: 7.94 W
PERFORMANCE
- Simultaneous connections: 150,000
- New sessions /second: 2.600
- NAT (Static IP): Upload: 945.77 Mbps; Download: 945.56 Mbps, bidirectional: 1808.29 Mbps
- NAT (DHCP): Upload: 945.93 Mbps; Download: 945.43 Mbps; bidirectional: 1808.11 Mbps
- NAT(PPPoE): Upload: 940.44 Mbps; Download: 940.52 Mbps; bidirectional: 1804.27 Mbps
- NAT (L2TP): Upload: 845.64 Mbps; Download: 802.65 Mbps; bidirectional: 931.96 Mbps
- NAT (PPTP): Upload: 771.66 Mbps: Download: 874.81 Mbps; bidirectional: 999.54 Mbps
- 64-byte packet forwarding rate: upload/download: 1,402,238 pps; Bidirectional: 1,681,548 pps
- IPsec VPN throughput: ESP-MD5-AES256: 171.26 Mbps; ESP-SHA1-AES256: 224.86 Mbps; ESP-SHA2-AES256: 248.04 Mbps
- OpenVPN: 21.70 Mbps
- L2TP VPN throughput: Unencrypted: 864.65 Mbps; Encrypted: 47.11 Mbps
- PPTP VPN throughput: Unencrypted: 703.20 Mbps; Encrypted: 76.65 Mbps
- SSL VPN throughput: -
- 66 Byte Packet forwarding rate: Upload/Download: 954.50 Mbps; Bidirectional: 1130.00 Mbps
- 1,518 bytes Packet forwarding rate: upload/download: 997.50 Mbps; Bidirectional: 1965.00 Mbps
BASIC FUNCTIONS
- WAN connection type: Static/Dynamic IP; PPPoE; PPTP; L2TP; Mobile broadband: 4G/3G modem for backup via USB port
- MAC address cloning: Changing the WAN/LAN MAC address
- DHCP: DHCP server/client; DHCP address reservation; Multi-network DHCP; Multi-IP interfaces
- IPv6: StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough
- VLAN: 802.1Q VLAN
- IPTV: IGMP v2/v3 Proxy, Custom Mode, Bridge Mode
ADVANCED FUNCTIONS
ACL: IP/Port/Protocol/Domain Name Filtering
Advanced Routing: Static Routing; Policy Routing
Data Rate Control: IP-based Bandwidth Control
Load Balancing: Intelligent load balancing; application-optimised routing; link backup (timing§, failover); online detection
NAT: one-to-one NAT; multi-net NAT; virtual server; port triggering; NAT DMZ; FTP/H.323/SIP/IPSec/PPTP ALG, UPnP
Security: SPI Firewall; VPN Passthrough; FTP/H.323/PPTP/SIP/IPsec ALG; DoS defence, Ping of Death; Local administration
Session limitation: IP-based session limitation
VPN
- IPsec VPN: 20 IPsec VPN tunnels: LAN-to-LAN, client-to-LAN; main, aggressive negotiation mode; DES, 3DES, AES128, AES192, AES256 encryption algorithm; IKEv1/v2; MD5, SHA1 authentication algorithm; NAT Traversal (NAT-T); Dead Peer Detection (DPD); Perfect Forward Secrecy (PFS)
- PPTP VPN: PPTP VPN server; 10 PPTP VPN clients; 16 tunnels; PPTP with MPPE encryption
- L2TP VPN: L2TP VPN server; 10 L2TP VPN clients; 16 tunnels; L2TP via IPSec
- OpenVPN: OpenVPN server: 10 OpenVPN clients; 16 OpenVPN tunnels
AUTHENTICATION
Web authentication: No authentication; Simple password; Hotspot（Local user / Voucher / SMS / Radius）; External Radius server; External portal server; Facebook
MANAGEMENT
Omada App: Yes. Requires the use of OC300, OC200, Omada Cloud-Based Controller or Omada Software Controller.
Centralised management: Omada Hardware Controller (OC300); Omada Hardware Controller (OC200); Omada Software Controller; Omada Cloud-Based Controller
Cloud access: Yes. Requires the use of OC300, OC200, Omada Cloud-Based Controller or Omada Software Controller.
Service: Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
Maintenance: Web Management Interface; Remote Management; Configuration Export & Import; SNMP v1/v2c/v3; Diagnostics (Ping & Traceroute); NTP Synchronisation; Syslog Support
Zero-Touch Deployment: Yes. Requires the use of the Omada Cloud-Based Controller.
Management functions: Automatic Device Discovery; Intelligent Network Monitoring; Abnormal Event Alerts; Unified Configuration; Reboot Schedule; Captive Portal Configuration
OTHER
- Certification: CE, FCC, RoHS
- Package Contents: Gigabti VPN Router ER605; Power Adapter; RJ45 Ethernet Cable: Quick Installation Guide
- System Requirements: Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10/11, MAC OS, NetWare, UNIX or Linux
- Environment: Operating temperature: 0-40 ℃ (32-104 ℉); Storage temperature: -40-70 ℃ (-40-158 ℉); Humidity during operation: 10-90% RH non-condensing; Humidity during storage: 5-90% RH non-condensing