Skip to Content
TP-Link ER7206 Omada Gigabit VPN Gateway, SFP + 5 Gigabit Ports, USB 3.0

Price:

$ 266.78


TP-Link ER706WP-4G Omada 4G+ Cat6 AX3000 Wi-Fi 6 Gigabit VPN Gateway with 4-Port PoE+
TP-Link ER706WP-4G Omada 4G+ Cat6 AX3000 Wi-Fi 6 Gigabit VPN Gateway with 4-Port PoE+
$ 668.48
$ 668.48
TP-Link ER7412-M2 Omada Multi-Gigabit VPN Gateway, 2 x 2.5G + 10 Gigabit Ports
TP-Link ER7412-M2 Omada Multi-Gigabit VPN Gateway, 2 x 2.5G + 10 Gigabit Ports
$ 445.17
$ 445.17

TP-Link ER7206 Omada Gigabit VPN Gateway, SFP + 5 Gigabit Ports, USB 3.0

https://arcip.com.au/web/image/product.template/8088/image_1920?unique=3cc9c87

The TP-Link ER7206 is an Omada Gigabit VPN gateway for small and medium businesses. It has one Gigabit SFP WAN/LAN port, one Gigabit WAN port and four Gigabit LAN/WAN ports for multi-WAN load balancing and failover, and a USB 3.0 port that supports an LTE dongle for backup or USB storage. TP-Link lists 150,000 concurrent sessions, around 940 Mbps NAT, 844.8 to 885.3 Mbps IPsec VPN, 933 Mbps DPI and 918 Mbps IPS throughput (TCP). It supports IPsec, SSL, WireGuard, OpenVPN, L2TP, PPTP and GRE VPN, signature-based IPS/IDS and DPI, and is managed through Omada Central, hardware or software controllers. The fanless steel case mounts on a desktop, wall or rack.

$ 266.78 266.78 AUD $ 266.78 incl. GST

Not Available For Sale


  • Brand
  • Form Factor
  • PoE Specification

This combination does not exist.

In stock online
VPN Router TP-Link Omada
  • Stock

    Authorised Australian Reseller | Australian Stock | Genuine Local Warranty

  • Instalment
    Buy Now, Pay Later 
  • [Warranty Information] Warranty
    Manufacturer Warranty 
Estimate delivery
Shipping calculated at checkout
Estimate delivery times: 3-7 business days 
Guaranteed Safe Checkout
Guaranteed Safe Checkout
Accepted payments: Google Pay, Apple Pay, Visa, Mastercard and PayPal
SKU
ER7206
Barcode
1210002611220
Tags

The TP-Link ER7206 is an Omada Gigabit VPN gateway with one Gigabit SFP WAN/LAN port, one Gigabit WAN port and four Gigabit LAN/WAN ports, plus a USB 3.0 port for LTE dongle backup. It handles 150,000 concurrent sessions with around 940 Mbps NAT, 845 to 885 Mbps IPsec VPN and 918 Mbps TCP IPS throughput, in a fanless steel case with Omada SDN cloud management.

ER7206 overview

The ER7206 is TP-Link's Omada Gigabit VPN gateway, a wired router for small and medium business networks that need several internet connections, site-to-site VPN and security inspection without stepping up to multi-gigabit hardware. Its port layout is one Gigabit SFP WAN/LAN port for fibre or SFP modules, one dedicated Gigabit WAN port and four Gigabit LAN/WAN ports, so up to six links can be configured for WAN with load balancing. A USB 3.0 port supports a USB LTE dongle for mobile broadband backup and USB storage. There is no built-in Wi-Fi or PoE output, so it pairs with Omada access points and PoE switches.

Performance is matched to Gigabit internet. TP-Link lists 150,000 concurrent sessions and 4,600 new sessions per second, NAT throughput of about 940 to 945 Mbps on static IP, DHCP and PPPoE, and about 906 to 918 Mbps on L2TP and PPTP. Security processing runs at near line rate: DPI throughput is 933 Mbps TCP and IPS throughput is 918 Mbps TCP and 920 Mbps UDP, with signature-based IPS/IDS threat detection, DPI for 2421 application types, URL category and web group filtering, DNSSEC, DoH and DoT DNS proxy, ARP detection, IP-MAC binding and flood and scan defence.

For VPN the ER7206 supports 100 IPsec tunnels, 50 PPTP, 50 L2TP, 55 OpenVPN and 50 SSL VPN tunnels, plus WireGuard, GRE in Standalone Mode and SD-WAN in Controller Mode. IPsec AES256 throughput is listed at 844.8 to 885.3 Mbps depending on the hash, GRE at 1094.2 Mbps unencrypted and 702.2 Mbps encrypted, WireGuard at 341.3 Mbps, OpenVPN at 139.1 Mbps and SSL VPN at 131.6 Mbps. Routing features include static and policy routing, RIP and OSPF, intelligent load balancing, application optimised routing, link backup by timing or failover, online detection, IP-based bandwidth control and session limits, one-to-one and multi-net NAT, and IPTV with IGMP proxy.

Management goes through Omada SDN. Cloud access and the Omada app require an Omada hardware controller, Omada Central (cloud-based) or the Omada Software Controller, and zero-touch provisioning is supported, along with automatic device discovery, intelligent network monitoring, abnormal event warnings and unified configuration. Standalone, it offers a web management interface, remote management, SNMP v1/v2c/v3, port mirroring, CLI and syslog. Hotspot authentication supports local users, vouchers, SMS and RADIUS, external RADIUS and portal servers, and LDAP.

The ER7206 is fanless in a steel enclosure measuring 226 x 131 x 35 mm and mounts on a desktop, wall or rack; the rackmount kit is included with the power adapter and quick installation guide. It runs from a 12 V / 1 A DC adapter and is very frugal, drawing 7.5 W with USB 3.0 in use and 4.5 W without. Surge protection is 4 kV, the operating range is 0 to 40 °C, and it carries CE and FCC certification. It has 512 MB DDR4 and 128 MB NAND flash.

Key features

Six Gigabit ports

1 x Gigabit SFP WAN/LAN, 1 x Gigabit WAN and 4 x Gigabit LAN/WAN.

Multi-WAN load balancing

Intelligent load balance, application optimised routing, link backup and online detection.

USB 3.0 LTE backup

Supports a USB LTE dongle for mobile broadband backup, or USB storage.

Gigabit-class VPN

Up to 885.3 Mbps IPsec; 100 IPsec tunnels plus SSL, WireGuard, OpenVPN, L2TP, PPTP and GRE.

IPS/IDS and DPI

918 Mbps TCP IPS and 933 Mbps TCP DPI, 2421 application types.

150,000 sessions

4,600 new sessions per second and about 940 Mbps NAT throughput.

Fanless steel case

Silent, 4.5 W without USB in use, desktop, wall or rack mount (kit included).

Omada SDN

Omada Central, hardware or software controllers with zero-touch provisioning.

ER7206 specifications

At a glance

1 x Gigabit SFP WAN/LAN
1 x Gigabit WAN
4 x Gigabit LAN/WAN
1 x USB 3.0
150,000 sessions
IPsec up to 885 Mbps
Fanless steel
Omada SDN
ER7206 full specifications
Security
IDS/IPSSignature-based IPS/IDS threat detection
Access ControlSource/Destination IP Based ACL; Stateful ACL; IPv4/IPv6 ACL; National Based ACL; FQDN
DPIDeep Packet Inspection; Support 2421 type Applications
DNS ProxyDNSSEC, DoH, DoT, and DNS Override
FilteringWeb Group Filtering; URL Categoroies and URLs Filtering; Web Security
Attack DefenseTCP/UDP/ICMP Flood Defense; Block TCP Scan (Stealth FIN/Xmas/Null); Block Ping from WAN
ARP InspectionSending GARP Packets; ARP Scanning; IP-MAC Binding; ARP Detection
Vpn
GRE√ (Only in Standalone Mode)
SSL VPN50 Tunnels
IPsec VPN100 IPSec VPN Tunnels; LAN-to-LAN, Client-to-LAN; Main, Aggressive Negotiation Mode; DES, 3DES, AES128, AES192, AES256 Encryption Algorithm; IPsec Failover; IKE v1/v2; MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm; NAT Traversal (NAT-T); Dead Peer Detection (DPD); Perfect Forward Secrecy (PFS)
PPTP VPNPPTP VPN Server; PPTP VPN Client (10) ※; 50 Tunnels; PPTP with MPPE Encryption
L2TP VPNL2TP VPN Server; L2TP VPN Client (10) ※; 50 Tunnels; L2TP over IPSec
OpenVPNOpenVPN Server; OpenVPN Client (5) ※; 55 OpenVPN Tunnels; "Certificate + Account" Mode; Full Mode
WireGuard VPN√
SD-WAN√ (Only in Controller Mode)
Hardware Features
Standards and ProtocolsIEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP
Interface1 Gigabit SFP WAN/LAN Port; 1 Gigabit WAN Port; 4 Gigabit LAN/WAN Ports; 1 USB 3.0 Port (supports USB LTE dongle and USB storage)
Network Media10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m); 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m); 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
Fan QuantityFanless
ButtonReset Button
Power Supply12V/1A DC Power Adapter
PoE Budget-
Flash128 MB NAND
DRAM512 MB DDR4
LEDPWR, SYS, SFP, USB, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act)
Dimensions ( W x D x H )8.9 × 5.2 × 1.4 in (226 × 131 × 35 mm)
Protection4 kV surge protection
EnclosureSteel
MountingDesktop/Wall/Rackmount
Max. Power Consumption7.5 W (with USB 3.0 connected) 4.5 W (without USB 3.0 connected)
Performance
Concurrent Session150,000
New Sessions /Second4,600
NAT (Static IP)945.3 Mbps / 940.5 Mbps
NAT(DHCP)939.6 Mbps / 940.9 Mbps
NAT(PPPoE)943.6 Mbps / 940.9 Mbps
NAT (L2TP)908.6 Mbps / 918.4 Mbps
NAT (PPTP)906.2 Mbps / 915.9 Mbps
66 Byte Packet Forwarding Rate1,453,489 pps / 1,453,488 pps
1,518 Byte Packet forwarding rate81,279 pps / 81,275 pps
IPsec VPN ThroughputESP-SHA1-AES256: 885.3Mbps; ESP-SHA256-AES256: 844.8 Mbps; ESP-SHA384-AES256: 868.5 Mbps; ESP-SHA512-AES256: 849.5 Mbps
GREUnencrypted: 1094.2 Mbps Encrypted: 702.2 Mbps
WireGuard VPN341.3 Mbps
OpenVPN139.1 Mbps
L2TP VPN ThroughputUnencrypted: 1422.4 Mbps Encrypted: 686.2 Mbps
PPTP VPN ThroughputUnencrypted: 1356.1 Mbps Encrypted: 205.1 Mbps
SSL VPN Throughput131.6 Mbps
DPI ThroughputTCP: 933 Mbps UDP: 927 Mbps
IPS ThroughputTCP: 918 Mbps UDP: 920 Mbps
Management Features
Omada AppYes. Requires the use of Omada Hardware Controller, Omada Central (Cloud-Based), or Omada Software Controller.
Centralised ManagementOmada Central (Cloud-Based); Omada Hardware Controller; Omada Software Controller
Cloud AccessYes. Requires the use of Omada Hardware Controller, Omada Central (Cloud-Based), or Omada Software Controller.
ServiceDynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customisation)
MaintenanceWeb Management Interface; Remote Management; Export & Import Configuration; SNMP v1/v2c/v3; Diagnostics (Ping & Traceroute); NTP Synchronize; Port Mirroring; CLI (only in Standalone Mode); Syslog Support
Zero-Touch Provisioning√
Management FeaturesAutomatic Device Discovery; Intelligent Network Monitoring; Abnormal Event Warnings; Unified Configuration; Reboot Schedule; Captive Portal Configuration
Basic Functions
LAN DNS√
WAN Connection TypeStatic IP; Dynamic IP; PPPoE(supports MRU Configuration); PPTP; L2TP
MAC CloneModify WAN/LAN MAC Address
DHCPDHCP Server; DHCPv6 PD Server (only in Standalone Mode); DHCP Options Customisation; DHCP Address Reservation; Multi-IP Interfaces; Multi-Net DHCP; WAN DHCP 60
Stateful ACL√
Quality of Service√
Bridge VLAN√
IPv6StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode
VLAN802.1Q VLAN
IPTVIGMP v2/v3 Proxy, Custom Mode, Bridge Mode
Advanced Features
Advanced RoutingStatic Routing; Policy Routing; RIP; OSPF
Bandwidth ControlIP-based Bandwidth Control
Load BalanceIntelligent Load Balance; Application Optimised Routing; Link Backup (Timing, Failover); Online Detection
NATOne-to-One NAT; Multi-Net NAT; Port Forwarding; Port Triggering; NAT-DMZ; FTP/H.323/SIP/IPSec/PPTP ALG; UPnP; Disable NAT
Session LimitIP-based Session Limit
Authentication
Web AuthenticationNo Authentication; Simple Password; Hotspot (Local User /Voucher / SMS /Radius ); External Radius Server; External Portal Server; LDAP
Others
CertificationCE, FCC
System RequirementsMicrosoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/8.1/10 MAC OS, NetWare, UNIX or Linux
EnvironmentOperating Temperature: 0 °C to 40 °C (32 °F to 104 °F); Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F); Operating Humidity: 10% to 90% non-condensing; Storage Humidity: 5% to 90% non-condensing

Source: TP-Link's published specifications for this model (TP-Link Australia product page). Some features run only in Standalone Mode or only under an Omada Controller; throughput figures are TP-Link's lab results. TP-Link may change specifications without notice.

What's in the box

  • ER7206
  • Power Adapter
  • Quick Installation Guide
  • Rackmount Kit

Source: TP-Link's published package contents.

Who the ER7206 is for

Small and medium businesses

  • Gigabit internet with several ISPs
  • Fanless for quiet offices
  • Desktop, wall or rack

Branch VPN

  • 100 IPsec tunnels
  • WireGuard and OpenVPN for remote staff
  • SD-WAN in Controller Mode

Inspected internet access

  • IPS/IDS at 918 Mbps TCP
  • DPI application control
  • URL category filtering

Buy the ER7206 from ARC IP Networks

ARC IP Networks supplies TP-Link Omada products from Australian stock at competitive prices, with the full manufacturer's warranty, Australia-wide delivery and trade pricing for installers and MSPs.

  • New TP-Link Omada product from Australian stock.
  • Manufacturer warranty: the full TP-Link manufacturer's warranty for this model.
  • Australia-wide delivery to every state and territory.
  • Trade and project pricing: call 1300 100 440 or email info@arcip.com.au.

Frequently asked questions

Straight answers about the ER7206 from the ARC IP Networks team.

Last reviewed October 2026.

One Gigabit SFP WAN/LAN port, one Gigabit WAN port, four Gigabit LAN/WAN ports and one USB 3.0 port.

No. It is a wired gateway with no built-in Wi-Fi or PoE output; use Omada access points and an Omada PoE switch alongside it.

Yes. Several ports can be set as WAN, with intelligent load balancing, application optimised routing, link backup and online detection.

Yes. The USB 3.0 port supports a USB LTE dongle for mobile broadband backup.

TP-Link lists IPsec AES256 throughput of 844.8 to 885.3 Mbps, WireGuard at 341.3 Mbps, OpenVPN at 139.1 Mbps and SSL VPN at 131.6 Mbps.

Yes. Signature-based IPS/IDS runs at 918 Mbps TCP and DPI at 933 Mbps TCP, recognising 2421 application types.

150,000 concurrent sessions and 4,600 new sessions per second.

Yes, it is fanless in a steel enclosure, and draws 4.5 W without USB in use.

Cloud access and the Omada app need an Omada hardware controller, Omada Central or the Software Controller. It can also be managed standalone through its web interface.

The ER7206, a power adapter, a quick installation guide and a rackmount kit.

Need more than one ER7206 for a multi-branch VPN rollout?

Ask ARC IP Networks for volume and project pricing on TP-Link Omada products.

Brand TP-Link
Form Factor Steel
PoE Specification -

Accurate Shipping Costs

Our online shipping calculator is designed to provide a final, accurate shipping cost based on the items in your cart and your delivery postcode. Shipping costs are calculated at checkout based on your order and delivery postcode. The final cost is calculated based on several factors which are automatically accounted for by our system, including:

  • The stock location of the item(s) across our warehouses.
  • Orders with multiple items that may require special packaging.
  • The weight and dimensions of the order (including heavy or oversized items).
  • The delivery courier servicing your specific region.

Delivery Times


 

Standard Processing


Most orders placed by 2pm AEDT are dispatched for next working day delivery. Larger orders may require 1-2 additional business days for processing. If timing is critical, please contact us to discuss expedited options (additional charges may apply).


Delivery Timeframes


Region

Processing Time

Express Delivery

Standard Delivery

VIC, NSW, SA, QLD Metro, TAS

1-2 business days

1-2 business days

2-4 business days

NT, WA, QLD Rural

1-2 business days

1-2 business days

3-5 business days

New Zealand

1-2 business days

2-3 business days

4-10 business days

Please note: Processing times may extend during peak periods such as Christmas and end of financial year.

Free Warehouse Pickup



Save on shipping costs with free pickup from our ARC IP Networks Blackburn warehouse. Simply place your order online or by phone, and collect during business hours (Monday to Friday). Please allow time for picking and packing. For urgent orders, call 1300 100 440 to confirm your order is ready.

ARC IP Networks Pickup Address: 6 George Street, Blackburn, VIC 3130


Insurance & Tracking



All ARC IP Networks shipments are fully insured and trackable. Once dispatched, you'll receive an email with your tracking number and courier website details. If your item is confirmed lost or damaged by our courier, we'll arrange a replacement in consultation with you.


International Shipping



ARC IP Networks ships to New Zealand. Please note:


  • Import duties and taxes vary by country
  • Buyers are responsible for all customs charges
  • Contact your local customs authority before ordering
  • We'll provide required documentation for smooth customs clearance
  • Buyers cover all shipping costs for returns due to refused duties/taxes


Delivery Requirements


Signature Required


All deliveries must be signed for. If you won't be home, contact our Sales Support team to arrange Authority to Leave. Important: Authority to Leave voids shipping insurance if parcels are lost or stolen.


Delivery Restrictions


We do not deliver to PO Boxes or Parcel Lockers as our couriers cannot access them. Orders sent to these addresses will be returned, incurring redelivery fees.


Shipping Issue Resolution


ARC IP Networks works closely with our shipping partners to resolve any delivery issues quickly and fairly:


  1. Confirmation: We verify expected delivery dates with our shipping partners
  2. Investigation: Issues outside normal timeframes trigger formal investigations
  3. Communication: We keep you updated throughout the resolution process
  4. Resolution: Confirmed lost items are replaced or refunded after investigation completion


Please note: Refunds for lost, missing, or delayed orders cannot be processed until shipping partner investigations are complete. This does not affect your rights under the Australian Consumer Law, and refunds or replacements will be provided where required once loss or damage is confirmed.

Warranty & Faulty Products

ARC IP Networks complies with the Australian Consumer Law (ACL).

If a product is faulty, damaged, not of acceptable quality, or does not perform as advertised, you are entitled to a repair, replacement, or refund in accordance with ACL.

Manufacturer Warranty Returns

For faults developing after 14 days within the warranty period:

  • Contact ARC IP Networks first at info@arcip.com.au or 1300 100 440
  • We will assess the issue and coordinate with manufacturers, authorised service centres, or distributors on your behalf
  • Where required, a manufacturer RMA may be arranged
  • ARC IP Networks manages the return process and next steps

Dead on Arrival (DOA)

Products that arrive faulty or damaged must be reported within 14 days of delivery.

ARC IP Networks will arrange assessment, replacement, or refund as appropriate.

Change of Mind & Non-Faulty Returns

Change-of-mind returns must be requested within 14 days of delivery. For change-of-mind returns, the product must be unused, unopened, in its original packaging, and returned with all accessories and documentation. These conditions apply only to change-of-mind returns and do not limit or exclude your rights under the Australian Consumer Law. Some products are not eligible for change-of-mind returns, including:

  • Ex-demo products
  • Clearance or markdown items
  • Special-order items
  • Products clearly marked “No Change-of-Mind Returns”

Important

This does not affect your rights under Australian Consumer Law.

If a product is faulty, not of acceptable quality, or does not meet advertised specifications, it remains eligible for return regardless of category.

Refunds & Processing Timeframes

  • Approved refunds are processed within 7 business days of receiving returned goods
  • Refunds are issued to the original payment method, unless otherwise agreed
  • Replacement or repair may be offered where appropriate
  • Store credit may be offered only with customer consent

Handling fees and non-returnable service charges may not be refundable where permitted by law.


Restocking Fees

For approved change-of-mind or non-faulty returns, a 15% restocking fee applies.

  • Any applicable restocking fee will be clearly communicated prior to return approval
  • The fee will be deducted from the refund amount
  • Restocking fees do not apply to returns made under the Australian Consumer Law, including faulty, damaged, or misrepresented goods.

Return Shipping Costs

  • Change-of-mind returns: The customer is responsible for return shipping costs.
  • Faulty or defective products: ARC IP Networks covers return shipping under Australian Consumer Law.

Non-Warranty Repairs

For issues not covered by warranty:

  • ARC IP Networks will provide a quote before proceeding
  • Customers are responsible for all shipping and service costs
  • No repairs are undertaken without customer approval

Return Methods

Returns may be made:

  • In-store at ARC IP Networks – 6 George Street, Blackburn VIC 3130
  • Or by shipment as instructed by our support team

Proof of purchase is required for all returns.

Enquire About this Product


Any questions about this product? Fill out the form below, and we'll get back to you soon!