TP-Link Omada ER605 (TL-R605) Omada Gigabit VPN Router

Omada Gigabit VPN Router ER605

The Omada Gigabit VPN Router ER605 is designed for secure, high‑performance business networking and seamless integration with the Omada Software Defined Networking (SDN) platform.

---

Key Features

Seamless Omada SDN Integration

• Integrated into Omada SDN for centralized cloud management and intelligent monitoring
• Remote and centralized management anytime, anywhere via:
• Omada Cloud access
• Omada app
• Standalone Web UI management

High-Speed Wired Connectivity

• Five Gigabit Ethernet ports for fast, reliable wired connections
• Up to 3 Gigabit WAN Ethernet ports:
• 1 fixed Gigabit WAN port
• 2 changeable Gigabit WAN/LAN ports
• Multi-WAN load balancing distributes traffic based on bandwidth to optimize multi-line broadband usage
• One USB 2.0 WAN port supporting 4G/3G mobile broadband for WAN backup

High-Security, High-Performance VPN

• Supports IPSec/PPTP/L2TP VPN over IPSec/SSL protocols
• Up to:
• 20 LAN-to-LAN IPsec VPN tunnels
• 16 OpenVPN tunnels
• 16 L2TP VPN connections
• 16 PPTP VPN connections
• One-click auto IPSec VPN* simplifies setup and deployment
• Secures and encrypts site-to-site data communication over the internet
• Improved VPN performance (4–5x) through continuous optimization based on Omada user feedback

*One-click auto IPSec VPN feature as stated.

Abundant Security Features

• Advanced firewall policies to protect network and data
• DoS defense against attacks such as:
• TCP/UDP/ICMP flooding
• Ping of Death and related threats
• IP/MAC/URL filtering to help prevent viruses and intrusions
• IP-MAC binding to reserve static IP assignments and defend against ARP attacks and spoofing
• One-click ALG activation for:
• FTP, H323, SIP, IPSec, PPTP

Network Segmentation & Access Control

• Convenient VLAN support to create virtual network segments for enhanced security and simplified management
• Internet access management strategy:
• Configure user internet access rights via IP/MAC/URL filtering and Access Control Lists (ACL)
• Captive Portal authentication for user access control and classification
• Allocate appropriate network resources for specific users or guests

Easy App-Based Management

• Free Omada app with guided configuration for quick setup
• Configure settings, monitor network status, and manage clients from a mobile device

---

Specifications

Hardware Features

Item	Details
Standards & Protocols	IEEE 802.3, 802.3u, 802.3ab, 802.3x, 802.1q; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP
Interfaces	1 × Fixed Gigabit WAN; 2 × Fixed Gigabit LAN; 2 × Changeable Gigabit WAN/LAN; 1 × USB 2.0 (4G/3G modem for WAN backup)
Network Media	10BASE-T: UTP Cat3/4/5 or STP (Max 100 m); 100BASE-TX: UTP Cat5/5e or STP (Max 100 m); 1000BASE-T: UTP Cat5/5e/6 (Max 100 m)
Fan Quantity	Fanless
Button	Reset button
Power Supply	External 12V/1A DC adapter
PoE Budget	–
Flash	128 MB NAND
DRAM	256 MB DDR
LED Indicators	PWR, SYS, WAN (Link/Act), LAN (Link/Act), USB
Dimensions (W × D × H)	6.2 × 4.0 × 1.0 in (158 × 101 × 25 mm)
Protection	4 kV surge protection
Enclosure	Steel
Mounting	Desktop / Wall-mount
Max Power Consumption	7.94 W

---

Performance

Metric	Value
Concurrent Sessions	150,000
New Sessions / Second	2,600
NAT (Static IP)	Up: 945.77 Mbps; Down: 945.56 Mbps; Bi-dir: 1808.29 Mbps
NAT (DHCP)	Up: 945.93 Mbps; Down: 945.43 Mbps; Bi-dir: 1808.11 Mbps
NAT (PPPoE)	Up: 940.44 Mbps; Down: 940.52 Mbps; Bi-dir: 1804.27 Mbps
NAT (L2TP)	Up: 845.64 Mbps; Down: 802.65 Mbps; Bi-dir: 931.96 Mbps
NAT (PPTP)	Up: 771.66 Mbps; Down: 874.81 Mbps; Bi-dir: 999.54 Mbps
64-Byte Packet Forwarding Rate	Up/Down: 1,402,238 pps; Bi-dir: 1,681,548 pps
IPsec VPN Throughput (ESP-MD5-AES256)	171.26 Mbps
IPsec VPN Throughput (ESP-SHA1-AES256)	224.86 Mbps
IPsec VPN Throughput (ESP-SHA2-AES256)	248.04 Mbps
OpenVPN Throughput	21.70 Mbps
L2TP VPN Throughput (Unencrypted)	864.65 Mbps
L2TP VPN Throughput (Encrypted)	47.11 Mbps
PPTP VPN Throughput (Unencrypted)	703.20 Mbps
PPTP VPN Throughput (Encrypted)	76.65 Mbps
SSL VPN Throughput	–
66-Byte Packet Forwarding Rate	Up/Down: 954.50 Mbps; Bi-dir: 1130.00 Mbps
1,518-Byte Packet Forwarding Rate	Up/Down: 997.50 Mbps; Bi-dir: 1965.00 Mbps

---

Basic Functions

• WAN Connection Types
• Static/Dynamic IP
• PPPoE
• PPTP
• L2TP

• Mobile broadband via 4G/3G modem (USB backup)

• MAC Clone

• Modify WAN/LAN MAC address

• DHCP

• DHCP Server/Client
• DHCP Address Reservation
• Multi-net DHCP*

• Multi-IP Interfaces*

• IPv6

• Static IP / SLAAC / DHCPv6 / PPPoE / 6to4 Tunnel / PassThrough

• VLAN

• 802.1Q VLAN

• IPTV

• IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

*As listed in original specifications.

---

Advanced Functions

• ACL

• IP/Port/Protocol/Domain name filtering

• Advanced Routing

• Static routing

• Policy routing

• Bandwidth Control

• IP-based bandwidth control

• Load Balance

• Intelligent load balance
• Application optimized routing
• Link backup (timing, failover)

• Online detection

• NAT

• One-to-One NAT
• Multi-Net NAT
• Virtual server
• Port triggering
• NAT-DMZ

• FTP/H.323/SIP/IPSec/PPTP ALG, UPnP

• Security

• SPI firewall
• VPN passthrough
• FTP/H.323/PPTP/SIP/IPsec ALG
• DoS defense, Ping of Death protection

• Local management

• Session Limit

• IP-based session limit

---

VPN Capabilities

IPsec VPN

• 20 IPsec VPN tunnels
• LAN-to-LAN and Client-to-LAN
• Main and Aggressive negotiation modes
• Encryption: DES, 3DES, AES128, AES192, AES256
• IKEv1/v2
• Authentication: MD5, SHA1
• NAT Traversal (NAT-T)
• Dead Peer Detection (DPD)
• Perfect Forward Secrecy (PFS)

PPTP VPN

• PPTP VPN server
• 10 PPTP VPN clients
• 16 PPTP tunnels
• PPTP with MPPE encryption

L2TP VPN

• L2TP VPN server
• 10 L2TP VPN clients
• 16 L2TP tunnels
• L2TP over IPSec

OpenVPN

• OpenVPN server
• 10 OpenVPN clients
• 16 OpenVPN tunnels

---

Security

Filtering

• WEB group filtering
• URL filtering
• Web security

ARP Inspection

• Sending GARP packets
• ARP scanning
• IP-MAC binding

Attack Defense

• TCP/UDP/ICMP flood defense
• Block TCP scan (Stealth FIN/Xmas/Null)
• Block Ping from WAN

Access Control

• Source/destination IP-based access control

---

Authentication & Captive Portal

• Web authentication options:
• No authentication
• Simple password
• Hotspot (Local User / Voucher / SMS / Radius)
• External Radius server
• External portal server
• Facebook

---

Management

• Omada App Support: Yes

• Centralized Management

• Omada Hardware Controller (OC300)
• Omada Hardware Controller (OC200)
• Omada Software Controller

• Omada Cloud-Based Controller

• Cloud Access

• Via OC300, OC200, Omada Software Controller, or Omada Cloud-Based Controller

• Services

• Dynamic DNS: Dyndns, No-IP, Peanuthull, Comexe

• Maintenance & Tools

• Web management interface
• Remote management
• Export & import configuration
• SNMP v1/v2c/v3
• Diagnostics (Ping & Traceroute)
• NTP synchronization

• Syslog support

• Zero-Touch Provisioning

• Supported with Omada Cloud-Based Controller

• Management Features

• Automatic device discovery
• Intelligent network monitoring
• Abnormal event warnings
• Unified configuration
• Reboot schedule
• Captive portal configuration

---

Others

Certification

• CE, FCC, RoHS

Package Contents

• Gigabit VPN Router ER605
• Power adapter
• RJ45 Ethernet cable
• Quick Installation Guide

System Requirements

• Microsoft Windows 98SE, NT, 2000, XP, Vista, 7/8/8.1/10
• MAC OS, NetWare, UNIX, or Linux

Environment

Condition	Range
Operating Temperature	0–40°C (32–104°F)
Storage Temperature	-40–70°C (-40–158°F)
Operating Humidity	10–90% RH, non-condensing
Storage Humidity	5–90% RH, non-condensing