Omada Gigabit Rackmount/Desktop VPN Gateway 1

Omada Gigabit Rackmount/Desktop VPN Gateway 2

Omada Gigabit Rackmount/Desktop VPN Gateway 3

Omada Gigabit Rackmount/Desktop VPN Gateway 4

ER7406 V1.20

Omada Gigabit Rackmount/Desktop VPN Gateway

1× Gigabit SFP WAN/LAN port
5× Gigabit RJ45 ports (1× WAN, 4× WAN/LAN)
1× USB 3.0 port (Supports USB storage, and LTE backup with LTE dongle)
Load Balancing on up to 5 WAN ports raises the utilization rate of multi-line broadband
High-security SSL/ IPSec / GRE^§ / WireGuard / PPTP / L2TP VPN & OpenVPN
Centralized cloud management via the web or the Omada app*
DoS/DDoS protection, IP/MAC/URL filtering, DPI, and IPS/IDS for enhanced security.
Rackmount/Desktop

Learn more about Omada Cloud SDN>

6× Gigabit Ports
(1× SFP, 5× RJ45)
Load Balancing on
up to 5 WAN Ports
1× USB 3.0 Port
(Supports USB
LTE Dongle)
Desktop/Rackmount

Centralized Cloud
Management^†
SSL/ IPSec / GRE^§ /
WireGuard / PPTP /
L2TP VPN & OpenVPN
SD-WAN^△ for
Multi-Site
Connectivity
Enhanced Security

Advanced Hardware to Power Reliable, Scalable Networks

Up to 5× WAN ports with USB and SFP deliver versatile internet access. Multi-WAN Load Balancing intelligently distributes data streams according to each port’s bandwidth, maximizing multi-line broadband efficiency for faster, more reliable connectivity.**

1× USB 3.0 Port

USB LTE Dongle

Supported
1× Gigabit

SFP

WAN/LAN Port
Up to

5 WAN

Ports

High-Security and High-Performance VPN

IPSec/PPTP/L2TP/OpenVPN/WireGuard/GRE^§ /SSL VPN easily build secure VPN tunnels for secure Internet browsing, communication between different branches, or enabling remote work or study in distributed environments.

Headquarters

Subsidiary

Omada Controller

One-click Auto

IPSec VPN

SD-WAN for Multi-Site Connectivity

Connect branch offices to headquarters in just a few clicks-no complex VPN setup required. Centralized management delivers reliable site-to-site connectivity and seamless scalability as the network grows.^△

Main Site

Site A

Site B

Site C

Intelligent Protection and Performance Secure Your
Network with Ease

Intelligent DPI & Content Filtering

DPI delivers precise application identification and intelligent traffic control to keep your network at peak performance, and Content Filtering offers flexible category- and time-based rules, simplifying internet management and facilitating the enforcement of policies for employees or families.
Proactive Threat Defense

Enhance threat detection and defense with the integrated IDS/IPS engine. Benefit from continuous protection with an extensive attack prevention signature database, featuring over 4,000 regularly updated signature rules.
Always-On DoS/DDoS Protection

Automatically detect and block Denial of Service (DoS) attacks, including TCP/UDP/ICMP Flooding, Ping of Death, and related threats, ensuring uninterrupted network performance.

Empowering Businesses with Reliable Omada SDN Solutions

Omada’s Software-Defined Networking (SDN) solution seamlessly integrates access points (APs), managed switches, and gateways, enabling 100% centralized cloud management for a highly scalable network.

Internet

Cloud Access

Web Browser

Omada App

Omada Central
(Cloud-Based)

Standard version
or Essentials
version

On-Premises Controllers

Hardware

Software

Omada
VPN Gateway

ER7406

Omada
PoE Switch

Omada Ceiling
Mount AP

Omada
Wall Plate AP

Omada
Outdoor AP

SECURITY
IDS/IPS	Signature-based IPS/IDS threat detection
Access Control	• Source/Destination IP Based ACL • Stateful ACL • IPv4/IPv6 ACL • National Based ACL • FQDN
DPI	• Deep Packet Inspection • Support 2421 type Applications
DNS Proxy	DNSSEC, DoH, DoT, DNS Override, and DNS Cache
Filtering	• Web Group Filtering^§ • URL Categories and URLs Filtering • Web Security^§
Attack Defense	• TCP/UDP/ICMP Flood Defense • Block TCP Scan (Stealth FIN/Xmas/Null) • Block Ping from WAN
ARP Inspection	• Sending GARP Packets • ARP Scanning^§ • IP-MAC Binding • ARP Detection

VPN
GRE	√ (Only in Standalone Mode)
SSL VPN	50 Tunnels
IPsec VPN	• 100 IPSec VPN Tunnels • LAN-to-LAN, Client-to-LAN • Main, Aggressive Negotiation Mode • DES, 3DES, AES128, AES192, AES256 Encryption Algorithm • IPsec Failover • IKE v1/v2 • MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm • NAT Traversal (NAT-T) • Dead Peer Detection (DPD) • Perfect Forward Secrecy (PFS)
PPTP VPN	• PPTP VPN Server • PPTP VPN Client (10)^※ • 50 Tunnels • PPTP with MPPE Encryption
L2TP VPN	• L2TP VPN Server • L2TP VPN Client (10)^※ • 50 Tunnels • L2TP over IPSec
OpenVPN	• OpenVPN Server • OpenVPN Client (5)^※ • 55 OpenVPN Tunnels • "Certificate + Account" Mode • Full Mode
WireGuard VPN	√
SD-WAN	√

HARDWARE FEATURES
Standards and Protocols	• IEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q • TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP
Interface	• 1 Gigabit SFP WAN/LAN Port • 1 Gigabit WAN Port • 4 Gigabit LAN/WAN Ports • 1 USB 3.0 Port (supports USB LTE dongle and USB storage)
Network Media	• 10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m) • 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
Fan Quantity	Fanless
Button	Reset button
Power Supply	100-240VAC, 50/60Hz
Flash	128 MB NAND
DRAM	512 MB DDR4
LED	PWR, SYS, SFP, USB, WAN(1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act)
Dimensions ( W x D x H )	11.6 × 5.5 × 1.7 in (294 × 140 × 44 mm)
Protection	4 kV surge protection
Mounting	• Desktop • Rackmount
Max. Power Consumption	• 7.5 W (with USB 3.0 connected) • 4.5 W (without USB 3.0 connected)

PERFORMANCE
Concurrent Session	150,000
New Sessions /Second	4,600
NAT (Static IP)	945.3 Mbps / 940.5 Mbps
NAT(DHCP)	939.6 Mbps / 940.9 Mbps
NAT(PPPoE)	943.6 Mbps / 940.9 Mbps
NAT (L2TP)	908.6 Mbps / 918.4 Mbps
NAT (PPTP)	906.2 Mbps / 915.9 Mbps
66 Byte Packet Forwarding Rate	1,453,489 pps / 1,453,488 pps
1,518 Byte Packet forwarding rate	81,279 pps / 81,275 pps
IPsec VPN Throughput	• ESP-SHA1-AES256: 885.3Mbps • ESP-SHA256-AES256: 844.8 Mbps • ESP-SHA384-AES256: 868.5 Mbps • ESP-SHA512-AES256: 849.5 Mbps
GRE	• Unencrypted: 1094.2 Mbps • Encrypted: 702.2 Mbps
WireGuard VPN	341.3 Mbps
OpenVPN	139.1 Mbps
L2TP VPN Throughput	• Unencrypted: 1422.4 Mbps • Encrypted: 686.2 Mbps
PPTP VPN Throughput	• Unencrypted: 1356.1 Mbps • Encrypted: 205.1 Mbps
SSL VPN Throughput	131.6 Mbps
DPI Throughput	TCP: 933 Mbps UDP: 927 Mbps
IPS Throughput	TCP: 918 Mbps UDP: 920 Mbps

Management Features
Omada App	Yes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
Centralized Management	• Omada Cloud-Based Controller • Omada Hardware Controller • Omada Software Controller
Cloud Access	Yes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
Service	Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)
Maintenance	• Web Management Interface • Remote Management • Export & Import Configuration • SNMP v1/v2c/v3 • Diagnostics (Ping & Traceroute) • NTP Synchronize^§ • Port Mirroring • CLI^§ • Syslog Support • Speedtest
Zero-Touch Provisioning	Yes. Requires the use of Omada Cloud-Based Controller.
Management Features	• Automatic Device Discovery • Intelligent Network Monitoring • Abnormal Event Warnings • Unified Configuration • Reboot Schedule • Captive Portal Configuration

BASIC FUNCTIONS
LAN DNS	√
WAN Connection Type	• Static IP • Dynamic IP • PPPoE(supports MRU Configuration) • PPTP • L2TP
MAC Clone	Modify WAN/LAN MAC Address^†
DHCP	• DHCP Server • DHCPv6 PD Server^§ • DHCP Options Customization • DHCP Address Reservation • Multi-IP Interfaces • Multi-Net DHCP • WAN DHCP 60
Stateful ACL	√
Quality of Service	√
Bridge VLAN	√
mDNS Repeater	√
IPv6	StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode
VLAN	802.1Q VLAN
IPTV	IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

Advanced Features
Advanced Routing	• Static Routing • Policy Routing • RIP^§ • OSPF^§
Bandwidth Control	IP-based Bandwidth Control
Load Balance	• Intelligent Load Balance • Application Optimized Routing • Link Backup (Timing, Failover) • Online Detection
NAT	• One-to-One NAT • Multi-Net NAT • Port Forwarding • Port Triggering^§ • NAT-DMZ • FTP/H.323/SIP/IPSec/PPTP ALG • UPnP • Disable NAT
Session Limit	IP-based Session Limit

AUTHENTICATION
Web Authentication	• No Authentication • Simple Password • Hotspot (Local User /Voucher^‡/ SMS^‡/Radius^‡) • External Radius Server • External Portal Server^‡ • LDAP^§

OTHERS
Certification	CE, FCC, RoHS
Package Content	• ER7406 • Power Cord • Quick Installation Guide • Rackmount Kit
System Requirements	• Microsoft Windows 98SE, NT, 2000, XP, Vista™ or Windows 7/8/8.1/10 • MAC OS, NetWare, UNIX or Linux
Environment	• Operating Temperature: 0 °C to 50 °C (32 °F to 122°F) • Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F) • Operating Humidity: 10% to 90% non-condensing • Storage Humidity: 5% to 90% non-condensing

For additional version information, please go to the support page.

*These functions require the use of Omada Hardware Controller, Software Controller, or Cloud-Based Controller.
**At least one WAN/LAN port needs to function as a LAN port.
^§These functions are supported only in Standalone Mode.
^△SD-WAN function is supported only in Controller Mode.
^†LAN MAC Address can be modified only in Standalone Mode.
^‡The following web authentication methods are supported only in Controller Mode: Voucher, SMS, Radius, and External Portal Sever.
^※For PPTP VPN and L2TP VPN, ER7406 can connect with up to 10 VPN servers. For OpenVPN, ER7406 can connect with up to 5 VPN servers.

Omada Gigabit Rackmount/Desktop VPN Gateway

Intelligent Security
and High-Speed Performance