Skip to Content
TP-Link ER605 Omada Gigabit VPN Gateway

Price:

$ 114.00


TP-Link EAP787 Omada BE12000 Wi-Fi 7 Tri-Band Ceiling Access Point with 10G Port
TP-Link EAP787 Omada BE12000 Wi-Fi 7 Tri-Band Ceiling Access Point with 10G Port
$ 681.37
$ 876.37 (22% OFF)
TP-Link ER703WP-4G-Outdoor Omada 4G+ Cat6 AX3000 Wi-Fi 6 Outdoor/Indoor Gateway
TP-Link ER703WP-4G-Outdoor Omada 4G+ Cat6 AX3000 Wi-Fi 6 Outdoor/Indoor Gateway
$ 535.08
$ 688.22 (22% OFF)

TP-Link ER605 Omada Gigabit VPN Gateway

https://arcip.com.au/web/image/product.template/8083/image_1920?unique=ae1d99b

The TP-Link ER605 is an Omada Gigabit VPN gateway with five Gigabit Ethernet ports: 1 WAN port, 2 WAN/LAN ports and 2 LAN ports, plus a USB 2.0 port that accepts a compatible USB LTE dongle for mobile broadband WAN backup. Its specifications list 20 IPsec, 50 OpenVPN, 16 L2TP and 16 PPTP VPN tunnels, WireGuard VPN, load balancing with link backup, DPI and flood defence. It handles 150,000 concurrent sessions and can be managed through Omada controllers, which also enable cloud access and the Omada app. Desktop or wall mount. Supplied by ARC IP Networks from Australian stock with the full manufacturer's warranty.

$ 114.00 114.0 AUD $ 132.74 incl. GST

Not Available For Sale


  • Brand

This combination does not exist.

In stock online
VPN Router TP-Link Omada
  • Stock

    Authorised Australian Reseller | Australian Stock | Genuine Local Warranty

  • Instalment
    Buy Now, Pay Later 
  • [Warranty Information] Warranty
    Manufacturer Warranty 
Estimate delivery
Shipping calculated at checkout
Estimate delivery times: 3-7 business days 
Guaranteed Safe Checkout
Guaranteed Safe Checkout
Accepted payments: Google Pay, Apple Pay, Visa, Mastercard and PayPal
SKU
ER605
Barcode
1210002611206
Tags

The TP-Link ER605 is a compact Omada gigabit VPN gateway for small offices and homes: five gigabit ports with up to three WAN links for load balancing and failover, a USB port for 4G backup, IPsec, OpenVPN, L2TP, PPTP and WireGuard VPN, and full management from an Omada controller, the Omada app or its own web interface.

ER605 overview

The ER605 is the entry gateway in TP-Link's Omada business range. It is the router that sits between your internet connections and your local network, and it is built for the size of network most small businesses actually run: one or two internet services, a few dozen users, a handful of switches and access points, and a need to reach the office securely from home or from another site. TP-Link rates it for 150,000 concurrent sessions and 1,800 new sessions per second, with NAT throughput of about 940 Mbps in each direction on static IP, DHCP and PPPoE connections, so a gigabit NBN or fibre service is not held back by the gateway.

Its five gigabit Ethernet ports are flexible. One is a dedicated WAN port, two can be set as either WAN or LAN, and two are LAN ports, so the ER605 can run up to three wired internet services at once. TP-Link's intelligent load balancing, application-optimised routing and link backup (timed or on failure) spread traffic across those links or keep a spare service waiting for an outage. The USB 2.0 port accepts a supported USB LTE dongle as a further mobile-broadband WAN for backup, which is useful for retail, clinics and offices where the payment terminal or phone system cannot go down when the fixed line does.

Security and remote access are where the ER605 earns its place over a consumer router. It supports up to 20 LAN-to-LAN or client-to-LAN IPsec tunnels, 50 OpenVPN tunnels, 16 L2TP and 16 PPTP tunnels, plus WireGuard, and it can act as a VPN client to up to ten VPN servers. The firewall adds stateful and IPv4/IPv6 access control lists, country-based and FQDN rules, TCP/UDP/ICMP flood defence, stealth-scan blocking, ARP inspection, URL filtering and deep packet inspection that recognises 2,421 application types. DNS proxy features include DNSSEC, DNS over HTTPS and DNS over TLS.

Management is where the Omada ecosystem pays off. The ER605 can be run on its own through its web interface, or adopted into Omada SDN through the Omada Cloud-Based Controller, an Omada hardware controller such as the OC200, or the free Omada Software Controller. Once adopted it is configured alongside Omada switches and access points from one dashboard and the Omada app, with automatic device discovery, network monitoring, abnormal-event alerts, scheduled reboots and captive-portal setup. Zero-touch provisioning is available when the Omada Cloud-Based Controller is used, which lets an installer pre-configure a site before the gateway is even plugged in. Note that some features, such as GRE, RIP and OSPF, run only in Standalone Mode, while SD-WAN runs only under a controller.

Key features

Up to three wired WAN links

One gigabit WAN port plus two gigabit WAN/LAN ports let the ER605 combine or back up to three internet services with intelligent load balancing and link backup.

USB 4G backup

The USB 2.0 port supports a compatible USB LTE dongle as a mobile-broadband WAN, so the site stays online when the fixed service drops.

IPsec, OpenVPN and WireGuard VPN

Up to 20 IPsec tunnels, 50 OpenVPN tunnels, 16 L2TP and 16 PPTP tunnels, plus WireGuard, for site-to-site links and remote staff.

Gigabit NAT performance

TP-Link measures about 940 Mbps upload and download NAT throughput on static IP, DHCP and PPPoE, with 150,000 concurrent sessions.

Business firewall and DPI

Stateful and IPv6 ACLs, flood defence, ARP inspection, URL filtering and deep packet inspection covering 2,421 application types.

Omada SDN management

Adopt it into the Omada Cloud-Based Controller, an OC200/OC300 hardware controller or the software controller and manage it with your Omada switches and APs.

Zero-touch provisioning

With the Omada Cloud-Based Controller the gateway can be configured remotely before it reaches site, then comes online with its settings.

Hotspot and captive portal

Web authentication options include simple password, local users, vouchers, SMS and RADIUS, plus external RADIUS and portal servers.

Compact desktop or wall mount

A 158 x 101 x 25 mm footprint that sits on a desk or mounts on a wall, drawing a maximum of 7.94 W from its 12 V adapter.

ER605 specifications

At a glance

5 x Gigabit Ethernet ports
Up to 3 WAN ports
USB 2.0 for 4G backup
20 IPsec / 50 OpenVPN tunnels
WireGuard VPN
150,000 concurrent sessions
~940 Mbps NAT throughput
Omada SDN managed
ER605 full specifications
Security
Access ControlSource/Destination IP Based ACL; Stateful ACL; IPv4/IPv6 ACL; National Based ACL; FQDN
DPIDeep Packet Inspection Support 2421 type Applications
DNS ProxyDNSSEC, DoH, DoT, DNS Override
FilteringWeb Group Filtering; URL Filtering; Web Security
Attack DefenseTCP/UDP/ICMP Flood Defense; Block TCP Scan (Stealth FIN/Xmas/Null); Block Ping from WAN
ARP InspectionSending GARP Packets; ARP Scanning; IP-MAC Binding; ARP Detection
Vpn
GRE√ (Only in Standalone Mode)
IPsec VPN20 IPSec VPN Tunnels; LAN-to-LAN, Client-to-LAN; Main, Aggressive Negotiation Mode; DES, 3DES, AES128, AES192, AES256, SHA2-384 and SHA2-512 Encryption Algorithm; IPsec Failover; IKE v1/v2; MD5, SHA1 Authentication Algorithm, SHA2 Authentication Algorithm; NAT Traversal (NAT-T); Dead Peer Detection (DPD); Perfect Forward Secrecy (PFS)
PPTP VPNPPTP VPN Server; PPTP VPN Client (10); 16 Tunnels; PPTP with MPPE Encryption
L2TP VPNL2TP VPN Server; L2TP VPN Client (10); 16 Tunnels; L2TP over IPSec
OpenVPNOpenVPN Server; OpenVPN Client (10); 50 OpenVPN Tunnels; "Certificate + Account" Mode; Full Mode
WireGuard VPN√
SD-WAN√ (Only in Controller Mode)
Hardware Features
Standards and ProtocolsIEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3x, IEEE 802.1q; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP, LLDP
Interface1 Gigabit WAN port; 2 Gigabit WAN/LAN ports; 2 Gigabit LAN ports; 1 USB2.0(supports USB LTE dongle )
Network Media10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m); 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m); 1000BASE-T: UTP category 5e, 6 cable (Max 100 m)
ButtonReset Button
Power SupplyExternal 12V/1A DC Adapter
Flash128 MB NAND
DRAM256 MB DDR
LEDPWR, SYS, WAN (Link/Act), LAN (Link/Act), USB
Dimensions ( W x D x H )6.2 × 4.0 × 1.0 in (158 × 101 × 25mm)
MountingDesktop/Wall-mount
Max. Power Consumption7.94 W
Performance
Concurrent Session150,000
New Sessions /Second1,800
NAT (Static IP)Upload: 941.64 Mbps; Download: 944.35 Mbps; Bi-Directional: 1775.32 Mbps
NAT(DHCP)Upload: 941.23 Mbps; Download: 943.85 Mbps; Bi-Directional: 1782.27 Mbps
NAT(PPPoE)Upload: 938.83 Mbps; Download: 940.27 Mbps; Bi-Directional: 1781.77 Mbps
NAT (L2TP)Upload: 637.66 Mbps; Download: 502.34 Mbps; Bi-Directional: 657.92 Mbps
NAT (PPTP)Upload: 655.36 Mbps; Download: 511.95 Mbps; Bi-Directional: 665.43 Mbps
66 Byte Packet Forwarding RateUpload: 1,388,815 pps Download: 1,388,806 pps
1,518 Byte Packet forwarding rateUpload: 81,067 pps Download: 81,069 pps
IPsec VPN ThroughputESP-SHA1-AES256: 239.39 Mbps; ESP-SHA256-AES256: 250.94 Mbps; ESP-SHA384-AES256: 31.44 Mbps; ESP-SHA512-AES256: 53.57 Mbps
GREUnencrypted: 460.97 Mbps Encrypted: 161.83 Mbps
OpenVPN15.90 Mbps
L2TP VPN ThroughputUnencrypted: 558.60 Mbps; Encrypted: 143.60 Mbps
PPTP VPN ThroughputUnencrypted: 616.33 Mbps; Encrypted: 49.83 Mbps
WireGuard VPN Throughput82.62 Mbps
DPI ThroughputTCP: 944 Mbps; UDP: 940 Mbps
Management Features
Omada AppYes. Requiring the use of Omada Controllers.
Centralised ManagementOmada Cloud-Based Controller; Omada Hardware Controller; Omada Software Controller
Cloud AccessYes. Requiring the use of Omada Controllers.
ServiceDynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customisation)
MaintenanceWeb Management Interface; Remote Management; Export & Import Configuration; SNMP v1/v2c/v3; Diagnostics (Ping & Traceroute); NTP Synchronize; Port Mirroring; CLI (only in Standalone Mode); Syslog Support
Zero-Touch ProvisioningYes. Requiring the use of Omada Cloud-Based Controller.
Management FeaturesAutomatic Device Discovery; Intelligent Network Monitoring; Abnormal Event Warnings; Unified Configuration; Reboot Schedule; Captive Portal Configuration
Basic Functions
LAN DNS√
WAN Connection TypeStatic; Dynamic IP; PPPoE (supports MRU Configuration); PPTP; L2TP
MAC CloneModify WAN/LAN MAC Address
DHCPDHCP Server; DHCPv6 PD Server (only in Standalone Mode); DHCP Options Customisation; DHCP Address Reservation; Multi-IP Interfaces; Multi-Net DHCP; WAN DHCP 60
Stateful ACL√
Quality of Service√
Bridge VLAN√
mDNS Repeater√
IPv6StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode
VLAN802.1Q VLAN
IPTVIGMP v2/v3 Proxy, Custom Mode, Bridge Mode
Advanced Features
Advanced RoutingStatic Routing; Policy Routing; RIP; OSPF
Bandwidth ControlIP-based Bandwidth Control
Load BalanceIntelligent Load Balance; Application Optimised Routing; Link Backup (Timing, Failover); Online Detection
NATOne-to-One NAT; Multi-Net NAT; Port Forwarding; Port Triggering; NAT-DMZ; FTP/H.323/SIP/IPSec/PPTP ALG; UPnP; Disable NAT
Session LimitIP-based Session Limit
Authentication
Web AuthenticationNo Authentication; Simple Password; Hotspot(Local User / Voucher / SMS / Radius ); External Radius Server; External Portal Server; LDAP
Others
CertificationCE, FCC
System RequirementsMicrosoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX or Linux
EnvironmentOperating Temperature: 0 °C to 40 °C (32 °F to 104 °F); Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F); Operating Humidity: 10% to 90% non-condensing; Storage Humidity: 5% to 90% non-condensing

Source: TP-Link's published specifications for this model (TP-Link Australia product page and datasheet). Some features run only in Standalone Mode or only under an Omada Controller; throughput figures are TP-Link's lab results. TP-Link may change specifications without notice.

What's in the box

  • ER605
  • Power Adapter
  • RJ-45 Ethernet Cable
  • Quick Installation Guide

Source: TP-Link's published package contents.

Who the ER605 is for

Small offices

  • One or two NBN or fibre services with automatic failover
  • Staff working from home over IPsec, OpenVPN or WireGuard
  • Guest Wi-Fi with a captive portal when paired with Omada APs

Multi-site businesses

  • Site-to-site IPsec between a head office and branches
  • Every site visible in one Omada cloud dashboard
  • Zero-touch setup of new branches by an installer

Installers and MSPs

  • A low-cost Omada gateway to anchor an Omada switch and AP rollout
  • Remote management and alerts through the Omada controller
  • Standalone mode when a client does not want a controller

ER605 compared

The ER605 and ER7212PC are both Omada gigabit VPN gateways. The ER605 is the compact router-only choice; the ER7212PC adds eight PoE+ ports and a built-in controller for sites that want gateway, PoE switch and controller in one box.

FeatureER605ER7212PC
Gigabit ports5 (1 WAN, 2 WAN/LAN, 2 LAN)12 (2 SFP WAN/LAN, 1 WAN, 1 WAN/LAN, 8 LAN)
PoE outputNone8 x PoE+, 110 W budget
Built-in Omada controllerNoYes
USB 4G backupYesNo
IPsec VPN tunnels2020
OpenVPN tunnels5016
Concurrent sessions150,00050,000
IPsec throughput (ESP-SHA256-AES256)250.94 Mbps990.5 Mbps

Source: TP-Link Australia product pages for each model.

Buy the ER605 from ARC IP Networks

ARC IP Networks supplies TP-Link Omada products from Australian stock at competitive prices, with the full manufacturer's warranty, Australia-wide delivery and trade pricing for installers and MSPs.

  • New TP-Link Omada product from Australian stock.
  • Manufacturer warranty: the full TP-Link manufacturer's warranty for this model.
  • Australia-wide delivery to every state and territory.
  • Trade and project pricing: call 1300 100 440 or email info@arcip.com.au.

Frequently asked questions

Straight answers about the ER605 from the ARC IP Networks team.

Last reviewed October 2026.

Up to three wired connections: it has one dedicated gigabit WAN port and two gigabit ports that can be set as WAN or LAN. A supported USB LTE dongle in its USB 2.0 port can add a mobile-broadband WAN for backup.

No. It works on its own through its web interface in Standalone Mode. Adding it to an Omada controller (cloud-based, an OC200 or OC300 hardware controller, or the software controller) gives you central management with Omada switches and APs, the Omada app and zero-touch provisioning with the cloud controller.

IPsec (up to 20 tunnels), OpenVPN (up to 50 tunnels), L2TP and PPTP (16 tunnels each) and WireGuard. It can also act as a VPN client to up to ten VPN servers. GRE is available in Standalone Mode and SD-WAN under an Omada controller.

TP-Link's measured NAT throughput is about 941 Mbps upload and 944 Mbps download on a static IP connection, with similar figures on DHCP and PPPoE, so it can route a gigabit wired service. VPN throughput is lower, for example about 251 Mbps for IPsec ESP-SHA256-AES256.

Yes. The USB 2.0 port supports compatible USB LTE dongles as a backup WAN. TP-Link publishes a compatibility list for supported modems, so check your dongle against it before relying on it.

No. The ER605 is a wired gateway. For Wi-Fi, pair it with Omada access points such as the EAP610 or EAP670 and manage them together from the same Omada controller.

No, its ports do not output PoE. Use an Omada PoE switch to power access points and cameras, or choose the ER7212PC, which has eight PoE+ ports and a built-in controller.

The ER605, a power adapter, an RJ-45 Ethernet cable and a quick installation guide, according to TP-Link's published package contents.

Yes. TP-Link lists desktop and wall-mount installation. It measures 158 x 101 x 25 mm and draws a maximum of 7.94 W from its external 12 V / 1 A adapter.

Yes. ARC IP Networks supplies TP-Link ER605 gateways with the full TP-Link manufacturer's warranty.

Need more than one ER605 for a multi-site or MSP rollout?

Ask ARC IP Networks for volume and project pricing on TP-Link Omada products.

Brand TP-Link

Accurate Shipping Costs

Our online shipping calculator is designed to provide a final, accurate shipping cost based on the items in your cart and your delivery postcode. Shipping costs are calculated at checkout based on your order and delivery postcode. The final cost is calculated based on several factors which are automatically accounted for by our system, including:

  • The stock location of the item(s) across our warehouses.
  • Orders with multiple items that may require special packaging.
  • The weight and dimensions of the order (including heavy or oversized items).
  • The delivery courier servicing your specific region.

Delivery Times


 

Standard Processing


Most orders placed by 2pm AEDT are dispatched for next working day delivery. Larger orders may require 1-2 additional business days for processing. If timing is critical, please contact us to discuss expedited options (additional charges may apply).


Delivery Timeframes


Region

Processing Time

Express Delivery

Standard Delivery

VIC, NSW, SA, QLD Metro, TAS

1-2 business days

1-2 business days

2-4 business days

NT, WA, QLD Rural

1-2 business days

1-2 business days

3-5 business days

New Zealand

1-2 business days

2-3 business days

4-10 business days

Please note: Processing times may extend during peak periods such as Christmas and end of financial year.

Free Warehouse Pickup



Save on shipping costs with free pickup from our ARC IP Networks Blackburn warehouse. Simply place your order online or by phone, and collect during business hours (Monday to Friday). Please allow time for picking and packing. For urgent orders, call 1300 100 440 to confirm your order is ready.

ARC IP Networks Pickup Address: 6 George Street, Blackburn, VIC 3130


Insurance & Tracking



All ARC IP Networks shipments are fully insured and trackable. Once dispatched, you'll receive an email with your tracking number and courier website details. If your item is confirmed lost or damaged by our courier, we'll arrange a replacement in consultation with you.


International Shipping



ARC IP Networks ships to New Zealand. Please note:


  • Import duties and taxes vary by country
  • Buyers are responsible for all customs charges
  • Contact your local customs authority before ordering
  • We'll provide required documentation for smooth customs clearance
  • Buyers cover all shipping costs for returns due to refused duties/taxes


Delivery Requirements


Signature Required


All deliveries must be signed for. If you won't be home, contact our Sales Support team to arrange Authority to Leave. Important: Authority to Leave voids shipping insurance if parcels are lost or stolen.


Delivery Restrictions


We do not deliver to PO Boxes or Parcel Lockers as our couriers cannot access them. Orders sent to these addresses will be returned, incurring redelivery fees.


Shipping Issue Resolution


ARC IP Networks works closely with our shipping partners to resolve any delivery issues quickly and fairly:


  1. Confirmation: We verify expected delivery dates with our shipping partners
  2. Investigation: Issues outside normal timeframes trigger formal investigations
  3. Communication: We keep you updated throughout the resolution process
  4. Resolution: Confirmed lost items are replaced or refunded after investigation completion


Please note: Refunds for lost, missing, or delayed orders cannot be processed until shipping partner investigations are complete. This does not affect your rights under the Australian Consumer Law, and refunds or replacements will be provided where required once loss or damage is confirmed.

Warranty & Faulty Products

ARC IP Networks complies with the Australian Consumer Law (ACL).

If a product is faulty, damaged, not of acceptable quality, or does not perform as advertised, you are entitled to a repair, replacement, or refund in accordance with ACL.

Manufacturer Warranty Returns

For faults developing after 14 days within the warranty period:

  • Contact ARC IP Networks first at info@arcip.com.au or 1300 100 440
  • We will assess the issue and coordinate with manufacturers, authorised service centres, or distributors on your behalf
  • Where required, a manufacturer RMA may be arranged
  • ARC IP Networks manages the return process and next steps

Dead on Arrival (DOA)

Products that arrive faulty or damaged must be reported within 14 days of delivery.

ARC IP Networks will arrange assessment, replacement, or refund as appropriate.

Change of Mind & Non-Faulty Returns

Change-of-mind returns must be requested within 14 days of delivery. For change-of-mind returns, the product must be unused, unopened, in its original packaging, and returned with all accessories and documentation. These conditions apply only to change-of-mind returns and do not limit or exclude your rights under the Australian Consumer Law. Some products are not eligible for change-of-mind returns, including:

  • Ex-demo products
  • Clearance or markdown items
  • Special-order items
  • Products clearly marked “No Change-of-Mind Returns”

Important

This does not affect your rights under Australian Consumer Law.

If a product is faulty, not of acceptable quality, or does not meet advertised specifications, it remains eligible for return regardless of category.

Refunds & Processing Timeframes

  • Approved refunds are processed within 7 business days of receiving returned goods
  • Refunds are issued to the original payment method, unless otherwise agreed
  • Replacement or repair may be offered where appropriate
  • Store credit may be offered only with customer consent

Handling fees and non-returnable service charges may not be refundable where permitted by law.


Restocking Fees

For approved change-of-mind or non-faulty returns, a 15% restocking fee applies.

  • Any applicable restocking fee will be clearly communicated prior to return approval
  • The fee will be deducted from the refund amount
  • Restocking fees do not apply to returns made under the Australian Consumer Law, including faulty, damaged, or misrepresented goods.

Return Shipping Costs

  • Change-of-mind returns: The customer is responsible for return shipping costs.
  • Faulty or defective products: ARC IP Networks covers return shipping under Australian Consumer Law.

Non-Warranty Repairs

For issues not covered by warranty:

  • ARC IP Networks will provide a quote before proceeding
  • Customers are responsible for all shipping and service costs
  • No repairs are undertaken without customer approval

Return Methods

Returns may be made:

  • In-store at ARC IP Networks – 6 George Street, Blackburn VIC 3130
  • Or by shipment as instructed by our support team

Proof of purchase is required for all returns.

Enquire About this Product


Any questions about this product? Fill out the form below, and we'll get back to you soon!