How to set up an Enterprise VPN using tp-link products
T1600G-28TS , TL-SG108E , T1700G-28TQ , TL-ER6120 , TL-ER6020 , T3700G-28TQ
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device and check either the Datasheet or the firmware section for the latest improvements added to your product.
For SMEs, different branches and HQ need virtual private network to share resources, at the same time, when employees travel around, they need a safe remote access to internal network servers.TP-LINK can provide LAN to LAN and client to LAN VPN solutions to meet the Enterprise VPN requirement.
What are the basic needs of Enterprise VPN?
Normally, an Enterprise VPN should meet the following needs:
- High-speed internet access and line redundancy to achieve employee’s effective work.
- Safety, reliability. Defend basic network attacks. Restrict different employee’s Internet bandwidth and server access to make full and proper use of network resources.
- Provide safe tunnels between branches, traveling employees and headquarters, so they can share internal resources like servers conveniently and safely.
What kind of solution can meet the needs of Enterprise VPN?
Topology
What are the highlights of this solution?
- Headquarters and branch can share servers through safe tunnels, and employee can telecommute safely.
By establishing safe tunnels between headquarters and branches, we can share resources like server safely and conveniently. Travelling employee can access company’s server safely and easily through tunnels too.
- High-speed and stable wired LAN network, line redundancy.
Excellent performance Core switch with multiple functions, stable and reliable. Both access switch and core switch have Gigabit Ethernet ports, and can forward packets linearly. And they support LAG which can aggregate uplink port’s bandwidth and achieve redundancy at the same time. If server supports, you can expand bandwidth between server and core switch too. Core switch also supports advanced features like stacks, which makes it easy to expand and upgrade enterprise network.
- Multi-WAN port router, achieve link backup and link aggregation easily.
When multiple ISP lines are available, we can set up link backup or link aggregation function according to our actual requirement to backup and expand our network. Meanwhile, we can restrict bandwidth usage of different users to distribute limited bandwidth properly.
- Abundant features like static routing, VLAN, divides apartment’s authority clearly.
All switches supports VLAN. Core switch can control different apartment’s access to server by setting ACL, layer 3 routing entries.
Which products should I choose to set up the enterprise VPN?
Here is a list which includes the TP-LINK devices for reference:
Headquarters solution:
Type |
Model |
Brief Introduction |
Headquarters solution |
TL-ER6120 |
IPSec/PPTP/L2TP VPN User bandwidth/behavior control Line aggregation/line backup NAT throughput:350Mbps |
T3700G-28TQ
|
Layer 3 switch with powerful configuration Support VLAN, isolate broadcast domain Support utility functions like ACL, static routing, QoS. Support advanced function like stacking, upgrade network conveniently. |
|
T1600G-28TS
|
High-speed and abundant interfaces, forward packets linearly Support VLAN, IP/MAC/PORT binding Support LAG, expand uplink port’s bandwidth |
Type |
Model |
Brief Introduction |
Branch solution
|
TL-ER6020 |
IPSec/PPTP/L2TP VPN User bandwidth/behavior control Line aggregation/line backup NAT throughput:180Mbps |
T1700G-28TQ |
High-speed and abundant interfaces, forward packets linearly Support VLAN, isolate broadcast domain Support utility functions like ACL, static routing. Advanced function like stacking, upgrade network conveniently |
|
TL-SG108E |
High-speed and abundant interfaces, forward packets linearly Support VLAN, IP/MAC binding Support LAG, expand uplink port’s bandwidth |
Looking for More
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
We'd love to get your feedback, please let us know how we can improve this content.
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.
Recommend Products
TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.
We have updated our Policies. Read Privacy Policy and Terms of Use here.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
We have updated our Policies. Read Privacy Policy and Terms of Use here.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Livechat
__livechat, __lc2_cid, __lc2_cst, __lc_cid, __lc_cst, CASID
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au
Meta Pixel
_fbp
Crazy Egg
cebsp_, _ce.s, _ce.clock_data, _ce.clock_event, cebs
Hotjar
OptanonConsent, _sctr, _cs_s, _hjFirstSeen, _hjAbsoluteSessionInProgress, _hjSessionUser_14, _fbp, ajs_anonymous_id, _hjSessionUser_<hotjar-id>, _uetsid, _schn, _uetvid, NEXT_LOCALE, _hjSession_14, _hjid, _cs_c, _scid, _hjAbsoluteSessionInProgress, _cs_id, _gcl_au, _ga, _gid, _hjIncludedInPageviewSample, _hjSession_<hotjar-id>, _hjIncludedInSessionSample_<hotjar-id>
lidc, AnalyticsSyncHistory, UserMatchHistory, bcookie, li_sugr, ln_or