Skip to Content
TP-Link ER7412-M2 Omada Multi-Gigabit VPN Gateway, 2 x 2.5G + 10 Gigabit Ports

Price:

$ 445.17


TP-Link ER7206 Omada Gigabit VPN Gateway, SFP + 5 Gigabit Ports, USB 3.0
TP-Link ER7206 Omada Gigabit VPN Gateway, SFP + 5 Gigabit Ports, USB 3.0
$ 266.78
$ 266.78
TP-Link ES205G Omada 5-Port Gigabit Easy Managed Switch
TP-Link ES205G Omada 5-Port Gigabit Easy Managed Switch
$ 54.70
$ 54.70

TP-Link ER7412-M2 Omada Multi-Gigabit VPN Gateway, 2 x 2.5G + 10 Gigabit Ports

https://arcip.com.au/web/image/product.template/8089/image_1920?unique=19927f5

The TP-Link ER7412-M2 is a rackmount Omada multi-gigabit VPN gateway for larger offices and multi-site businesses. Its quad-core 2.0 GHz ARMv8 CPU and 1 GB DDR4 drive two 2.5G RJ45 WAN/LAN ports, two Gigabit SFP WAN/LAN ports and eight Gigabit RJ45 WAN/LAN ports, with load balancing on up to 11 WAN ports, plus an RJ45 console port and a USB 3.0 port for LTE dongle backup or storage. TP-Link lists 1,000,000 concurrent sessions, around 2.35 Gbps NAT, 1133 Mbps IPsec, 771.6 Mbps WireGuard and 2.2 Gbps DPI throughput. It supports SSL, IPsec, GRE, WireGuard, PPTP, L2TP and OpenVPN, IPS/IDS and DPI, and runs from an internal 100-240 V AC supply.

$ 445.17 445.17 AUD $ 445.17 incl. GST

Not Available For Sale


  • Brand
  • CPU

This combination does not exist.

In stock online
VPN Router 5G TP-Link Omada
  • Stock

    Authorised Australian Reseller | Australian Stock | Genuine Local Warranty

  • Instalment
    Buy Now, Pay Later 
  • [Warranty Information] Warranty
    Manufacturer Warranty 
Estimate delivery
Shipping calculated at checkout
Estimate delivery times: 3-7 business days 
Guaranteed Safe Checkout
Guaranteed Safe Checkout
Accepted payments: Google Pay, Apple Pay, Visa, Mastercard and PayPal
SKU
ER7412-M2
Barcode
4895252505184
Tags

The TP-Link ER7412-M2 is an Omada multi-gigabit VPN gateway with a quad-core 2.0 GHz CPU, two 2.5G RJ45 WAN/LAN ports, two Gigabit SFP WAN/LAN ports, eight Gigabit RJ45 WAN/LAN ports, an RJ45 console port and USB 3.0 for LTE backup. It load-balances up to 11 WAN ports, handles 1,000,000 concurrent sessions and around 1.13 Gbps IPsec VPN, with IPS/IDS, DPI and Omada SDN cloud management.

ER7412-M2 overview

The ER7412-M2 is TP-Link's Omada multi-gigabit VPN gateway in a 1U-height desktop or rackmount chassis. It is built around a quad-core ARMv8 CPU running at 2.0 GHz with 1 GB DDR4 memory, and it has twelve Ethernet ports: two 2.5G RJ45 WAN/LAN ports, two Gigabit SFP WAN/LAN ports and eight Gigabit RJ45 WAN/LAN ports. TP-Link highlights load balancing on up to 11 WAN ports, which increases the utilisation rate of multi-line broadband. An RJ45 console port provides out-of-band CLI access, and a USB 3.0 port supports USB storage and LTE backup with an LTE dongle; TP-Link publishes a compatibility list for 4G/3G modems.

Performance is the main step up from smaller Omada gateways. TP-Link lists 1,000,000 concurrent sessions, 7,000 new sessions per second and NAT throughput of around 2345 to 2353 Mbps on static IP, DHCP and PPPoE. VPN throughput reaches 1125.6 to 1133.1 Mbps for IPsec AES256 depending on the hash, 771.6 Mbps for WireGuard, 2274 Mbps for unencrypted GRE (1192 Mbps encrypted), 266.2 Mbps for OpenVPN over UDP and 263.1 Mbps for SSL VPN. Tunnel capacity is 150 IPsec, 150 PPTP, 150 L2TP, 121 OpenVPN and 80 SSL VPN tunnels, plus WireGuard, GRE in Standalone Mode and SD-WAN in Controller Mode.

Security throughput is equally high, with DPI throughput of 2.2 Gbps and IPS throughput of 2248 Mbps TCP and 2140 Mbps UDP. Intrusion detection and prevention, DPI for 2421 application types, source and destination IP ACLs, stateful ACL, IPv4/IPv6 ACLs, location-based ACLs, FQDN rules, URL category filtering, web security, DNSSEC, DoH and DoT DNS proxy, ARP detection, IP-MAC binding and TCP/UDP/ICMP flood defence are all listed. Hotspot authentication supports local users, vouchers, SMS and RADIUS, external RADIUS and portal servers and LDAP.

Routing features include static and policy routing, RIP and OSPF, intelligent load balancing, application optimised routing, link backup and online detection, IP and port-based bandwidth control, one-to-one and multi-net NAT, IPTV with IGMP proxy, 802.1Q VLAN and a full IPv6 stack. For management, the Omada app and cloud access require an Omada controller: the Omada Cloud-Based Controller, an Omada hardware controller or the Omada Software Controller, with zero-touch provisioning through the Cloud-Based Controller. Standalone, it has a web interface, CLI, SNMP v1/v2c/v3, port mirroring and syslog.

Unlike the adapter-powered ER707-M2, the ER7412-M2 has an internal 100-240 V AC, 50/60 Hz power supply and draws up to 18.5 W with USB 3.0 in use. It measures 294 x 180 x 44 mm, weighs 1.168 kg and mounts on a desktop or in a rack, with the rackmount kit, power cord, RJ45 console cord and quick installation guide in the box. Surge protection is 4 kV, the operating range is 0 to 45 °C, the listed MTBF is 1,192,088 hours at 25 °C, and it is CE and FCC certified.

Key features

Quad-core 2.0 GHz CPU

ARMv8 with 1 GB DDR4 for 1,000,000 concurrent sessions and 7,000 new sessions per second.

Twelve Ethernet ports

2 x 2.5G RJ45, 2 x Gigabit SFP and 8 x Gigabit RJ45, all WAN/LAN.

Up to 11 WAN links

Load balancing, application optimised routing and failover across multiple lines.

Gigabit-class VPN

Around 1133 Mbps IPsec and 771.6 Mbps WireGuard; 150 IPsec tunnels.

IPS/IDS and DPI

2248 Mbps TCP IPS and 2.2 Gbps DPI throughput, 2421 application types.

Console and USB 3.0

RJ45 console port for CLI, USB 3.0 for LTE dongle backup or storage.

Internal AC power

100-240 V AC supply, rackmount kit included.

Omada SDN

Cloud, hardware or software controllers, zero-touch provisioning and SD-WAN.

ER7412-M2 specifications

At a glance

Quad-core 2.0 GHz
2 x 2.5G WAN/LAN
2 x Gigabit SFP
8 x Gigabit RJ45
Up to 11 WANs
1,000,000 sessions
IPsec ~1.13 Gbps
Rackmount
ER7412-M2 full specifications
Security
IDS/IPSIntrusion Detection/Prevention
Access ControlSource/Destination IP-Based ACL; Stateful ACL; IPv4/IPv6 ACL; Location Based ACL; FQDN
DPIDeep Packet Inspection Support 2421 type Applications
DNS ProxyDNSSEC, DoH, DoT, DNS Override
FilteringWeb Group Filtering; URL Categories and URLs Filtering; Web Security
Attack DefenseTCP/UDP/ICMP Flood Defense; Block TCP Scan (Stealth FIN/Xmas/Null); Block Ping from WAN
ARP InspectionSending GARP Packets; ARP Scanning; IP-MAC Binding; ARP Detection
Vpn
GRE√ (Only in Standalone Mode)
SSL VPN80 Tunnels
IPsec VPN150 IPSec VPN Tunnels; LAN-to-LAN, Client-to-LAN; Main, Aggressive Negotiation Mode; DES, 3DES, AES128, AES192, AES256 Encryption Algorithm; IPsec Failover; IKE v1/v2; MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm; NAT Traversal (NAT-T); Dead Peer Detection (DPD); Perfect Forward Secrecy (PFS)
PPTP VPNPPTP VPN Server; PPTP VPN Client (15); 150 Tunnels; PPTP with MPPE Encryption
L2TP VPNL2TP VPN Server; L2TP VPN Client (15); 150 Tunnels; L2TP over IPSec
OpenVPNOpenVPN Server; OpenVPN Client (11); 121 OpenVPN Tunnels; "Certificate + Account" Mode; Full Mode
WireGuard VPN√
SD-WAN√ (Only in Controller Mode)
Hardware Features
CPUQuad-core ARMv8
Standards and ProtocolsIEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP
Interface2× 2.5G RJ45 WAN/LAN Port; 2× Gigabit SFP WAN/LAN Ports; 8× Gigabit RJ45 WAN/LAN Ports; 1× RJ45 Console Port; 1× USB 3.0 Port (USB LTE dongle and USB Storage) #
Network Media10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m); 100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100Ω STP (Max 100 m); 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m); 2500BASE-T: UTP category 5e, 6 cable (Max 100 m)
ButtonReset Button
Power Supply100–240 VAC, 50/60 Hz
Flash128 MB NAND
DRAM1 GB DDR4
Weight1.168 kg
Dimensions ( W x D x H )11.6 × 7.1 × 1.7 in (294 × 180 × 44 mm)
Protection4 kV surge protection
MountingDesktop; Rack Mount
Max. Power Consumption18.5 W (With USB 3.0 connected)
Performance
Concurrent Session1,000,000
New Sessions /Second7,000
NAT (Static IP)2345.71 Mbps / 2351.22 Mbps
NAT(DHCP)2353.41 Mbps / 2353.40 Mbps
NAT(PPPoE)2336.52 Mbps / 2336.08 Mbps
NAT (L2TP)1937.53 Mbps / 1761.82 Mbps
NAT (PPTP)1757.54 Mbps / 2011.33 Mbps
66 Byte Packet Forwarding RateUpload: 3,471,591 pps Download: 3,475,379 pps
1,518 Byte Packet forwarding rateUpload: 202,652 pps Download: 202,652 pps
IPsec VPN ThroughputESP-SHA1-AES256: 1125.60 Mbps; ESP-SHA256-AES256: 1133.1 Mbps; ESP-SHA384-AES256: 1126.6 Mbps; ESP-SHA512-AES256: 1132.8 Mbps
GREUnencrypted: 2274 Mbps; Encrypted: 1192 Mbps
WireGuard VPN771.6 Mbps
OpenVPNUDP: 266.2 Mbps
L2TP VPN ThroughputUnencrypted: 2724.5 Mbps; Encrypted: 1018.4 Mbps
PPTP VPN ThroughputUnencrypted: 3035 Mbps; Encrypted: 534.6 Mbps
SSL VPN Throughput263.1 Mbps
WireGuard VPN Throughput771.6 Mbps
DPI Throughput2.2 Gbps
IPS ThroughputTCP: 2248 Mbps UDP: 2140 Mbps
Management Features
Omada AppYes. Requiring the use of an Omada Controller.
Centralised ManagementOmada Cloud-Based Controller; Omada Hardware Controller; Omada Software Controller
Cloud AccessYes. Requiring the use of an Omada Controller.
ServiceDynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customisation)
MaintenanceWeb Management Interface; Remote Management; Export & Import Configuration; SNMP v1/v2c/v3; Diagnostics (Ping & Traceroute); NTP Synchronize; Port Mirroring; CLI (only in Standalone Mode); Syslog Support
Zero-Touch ProvisioningYes. Requiring the use of Omada Cloud-Based Controller.
Management FeaturesAutomatic Device Discovery; Intelligent Network Monitoring; Abnormal Event Warnings; Unified Configuration; Reboot Schedule; Captive Portal
Basic Functions
LAN DNS√
WAN Connection TypeStatic IP/Dynamic IP; PPPoE (supports MRU Configuration); PPTP; L2TP; Mobile Broadband: 4G/3G modem for backup via USB port
MAC CloneModify WAN/LAN MAC Address
DHCPDHCP Server; DHCPv6 PD Server (only in Standalone Mode); DHCP Options Customisation; DHCP Address Reservation; Multi-IP Interfaces; Multi-Net DHCP; WAN DHCP 60
Stateful ACL√
Quality of Service√
Bridge VLAN√
mDNS Repeater√
IPv6StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode
VLAN802.1Q VLAN
IPTVIGMP v2/v3 Proxy, Custom Mode, Bridge Mode
Advanced Features
Advanced RoutingStatic Routing; Policy Routing; RIP; OSPF
Bandwidth ControlIP/Port-based Bandwidth Control
Load BalanceIntelligent Load Balance; Application Optimised Routing; Link Backup (Timing , Failover); Online Detection
NATOne-to-One NAT; Multi-Net NAT; Virtual Server; Port Triggering; NAT-DMZ; FTP/H.323/SIP/IPSec/PPTP ALG; UPnP; Disable NAT
Session LimitIP-based Session Limit
Authentication
Web AuthenticationNo Authentication; Simple Password; Hotspot (Local User/Voucher /SMS /Radius ); External Radius Server; External Portal Server; LDAP
Others
CertificationCE, FCC
System RequirementsMicrosoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/8.1/10/11; MAC OS, NetWare, UNIX or Linux
EnvironmentOperating Temperature: 0–45 ℃ (32–113 ℉);; Storage Temperature: -40–70 ℃ (-40–158 ℉); Operating Humidity: 10–90% RH non-condensing; Storage Humidity: 5–90% non-condensing

Source: TP-Link's published specifications for this model (TP-Link Australia product page and datasheet). Some features run only in Standalone Mode or only under an Omada Controller; throughput figures are TP-Link's lab results. TP-Link may change specifications without notice.

What's in the box

  • ER7412-M2
  • Power Cord
  • Quick Installation Guide
  • Rackmount Kit
  • RJ45 Console Cord

Source: TP-Link's published package contents.

Who the ER7412-M2 is for

Larger offices and head sites

  • 1,000,000 concurrent sessions
  • Twelve Ethernet ports
  • Rackmount with internal AC power

VPN hub for many branches

  • 150 IPsec tunnels at about 1.13 Gbps
  • WireGuard at 771.6 Mbps
  • SD-WAN in Controller Mode

Multi-line internet

  • Load balancing on up to 11 WANs
  • Two 2.5G and two SFP ports
  • USB 3.0 LTE dongle backup

ER7412-M2 compared

The ER7412-M2 and ER707-M2 are both Omada multi-gigabit VPN gateways with two 2.5G RJ45 ports. The ER7412-M2 adds a quad-core CPU, a second SFP port, four more Gigabit RJ45 ports, USB 3.0, a console port and internal AC power, with roughly double the sessions and IPsec throughput.

SpecificationER7412-M2ER707-M2
CPUQuad-core ARMv8Dual-core ARMv8
2.5G RJ45 ports2 x WAN/LAN1 x WAN + 1 x WAN/LAN
Gigabit SFP ports2 x WAN/LAN1 x WAN/LAN
Gigabit RJ45 ports8 x WAN/LAN4 x WAN/LAN
Console / USBRJ45 console + USB 3.0USB 2.0
Concurrent sessions1,000,000500,000
IPsec VPN (SHA256-AES256)1133.1 Mbps650.2 Mbps
IPS throughput (TCP)2248 Mbps1552 Mbps
Power100-240 V AC internal12 V / 1.5 A adapter
Dimensions294 x 180 x 44 mm226 x 131 x 35 mm

Source: TP-Link Australia product pages for each model.

Buy the ER7412-M2 from ARC IP Networks

ARC IP Networks supplies TP-Link Omada products from Australian stock at competitive prices, with the full manufacturer's warranty, Australia-wide delivery and trade pricing for installers and MSPs.

  • New TP-Link Omada product from Australian stock.
  • Manufacturer warranty: the full TP-Link manufacturer's warranty for this model.
  • Australia-wide delivery to every state and territory.
  • Trade and project pricing: call 1300 100 440 or email info@arcip.com.au.

Frequently asked questions

Straight answers about the ER7412-M2 from the ARC IP Networks team.

Last reviewed October 2026.

Twelve Ethernet ports: two 2.5G RJ45 WAN/LAN, two Gigabit SFP WAN/LAN and eight Gigabit RJ45 WAN/LAN, plus an RJ45 console port and a USB 3.0 port.

TP-Link lists load balancing on up to 11 WAN ports, with application optimised routing, link backup and online detection.

IPsec AES256 throughput is listed at around 1125 to 1133 Mbps, WireGuard at 771.6 Mbps, GRE at 2274 Mbps unencrypted and SSL VPN at 263.1 Mbps.

1,000,000 concurrent sessions and 7,000 new sessions per second.

Yes: intrusion detection and prevention at 2248 Mbps TCP and DPI at 2.2 Gbps, recognising 2421 application types.

Yes. The USB 3.0 port supports LTE backup with a compatible LTE dongle; TP-Link publishes the 4G/3G modem compatibility list.

By an internal 100-240 V AC, 50/60 Hz power supply. Maximum consumption is 18.5 W with USB 3.0 connected.

Yes. It mounts on a desktop or in a rack, and the rackmount kit is included.

The ER7412-M2 has a quad-core CPU, twelve ports including two SFP, a console port, USB 3.0 and internal AC power, with 1,000,000 sessions against 500,000 and about 1.13 Gbps IPsec against 650 Mbps.

The ER7412-M2, a power cord, a quick installation guide, a rackmount kit and an RJ45 console cord.

Need more than one ER7412-M2 for a head office or multi-branch VPN hub?

Ask ARC IP Networks for volume and project pricing on TP-Link Omada products.

Brand TP-Link
CPU Quad-core ARMv8

Accurate Shipping Costs

Our online shipping calculator is designed to provide a final, accurate shipping cost based on the items in your cart and your delivery postcode. Shipping costs are calculated at checkout based on your order and delivery postcode. The final cost is calculated based on several factors which are automatically accounted for by our system, including:

  • The stock location of the item(s) across our warehouses.
  • Orders with multiple items that may require special packaging.
  • The weight and dimensions of the order (including heavy or oversized items).
  • The delivery courier servicing your specific region.

Delivery Times


 

Standard Processing


Most orders placed by 2pm AEDT are dispatched for next working day delivery. Larger orders may require 1-2 additional business days for processing. If timing is critical, please contact us to discuss expedited options (additional charges may apply).


Delivery Timeframes


Region

Processing Time

Express Delivery

Standard Delivery

VIC, NSW, SA, QLD Metro, TAS

1-2 business days

1-2 business days

2-4 business days

NT, WA, QLD Rural

1-2 business days

1-2 business days

3-5 business days

New Zealand

1-2 business days

2-3 business days

4-10 business days

Please note: Processing times may extend during peak periods such as Christmas and end of financial year.

Free Warehouse Pickup



Save on shipping costs with free pickup from our ARC IP Networks Blackburn warehouse. Simply place your order online or by phone, and collect during business hours (Monday to Friday). Please allow time for picking and packing. For urgent orders, call 1300 100 440 to confirm your order is ready.

ARC IP Networks Pickup Address: 6 George Street, Blackburn, VIC 3130


Insurance & Tracking



All ARC IP Networks shipments are fully insured and trackable. Once dispatched, you'll receive an email with your tracking number and courier website details. If your item is confirmed lost or damaged by our courier, we'll arrange a replacement in consultation with you.


International Shipping



ARC IP Networks ships to New Zealand. Please note:


  • Import duties and taxes vary by country
  • Buyers are responsible for all customs charges
  • Contact your local customs authority before ordering
  • We'll provide required documentation for smooth customs clearance
  • Buyers cover all shipping costs for returns due to refused duties/taxes


Delivery Requirements


Signature Required


All deliveries must be signed for. If you won't be home, contact our Sales Support team to arrange Authority to Leave. Important: Authority to Leave voids shipping insurance if parcels are lost or stolen.


Delivery Restrictions


We do not deliver to PO Boxes or Parcel Lockers as our couriers cannot access them. Orders sent to these addresses will be returned, incurring redelivery fees.


Shipping Issue Resolution


ARC IP Networks works closely with our shipping partners to resolve any delivery issues quickly and fairly:


  1. Confirmation: We verify expected delivery dates with our shipping partners
  2. Investigation: Issues outside normal timeframes trigger formal investigations
  3. Communication: We keep you updated throughout the resolution process
  4. Resolution: Confirmed lost items are replaced or refunded after investigation completion


Please note: Refunds for lost, missing, or delayed orders cannot be processed until shipping partner investigations are complete. This does not affect your rights under the Australian Consumer Law, and refunds or replacements will be provided where required once loss or damage is confirmed.

Warranty & Faulty Products

ARC IP Networks complies with the Australian Consumer Law (ACL).

If a product is faulty, damaged, not of acceptable quality, or does not perform as advertised, you are entitled to a repair, replacement, or refund in accordance with ACL.

Manufacturer Warranty Returns

For faults developing after 14 days within the warranty period:

  • Contact ARC IP Networks first at info@arcip.com.au or 1300 100 440
  • We will assess the issue and coordinate with manufacturers, authorised service centres, or distributors on your behalf
  • Where required, a manufacturer RMA may be arranged
  • ARC IP Networks manages the return process and next steps

Dead on Arrival (DOA)

Products that arrive faulty or damaged must be reported within 14 days of delivery.

ARC IP Networks will arrange assessment, replacement, or refund as appropriate.

Change of Mind & Non-Faulty Returns

Change-of-mind returns must be requested within 14 days of delivery. For change-of-mind returns, the product must be unused, unopened, in its original packaging, and returned with all accessories and documentation. These conditions apply only to change-of-mind returns and do not limit or exclude your rights under the Australian Consumer Law. Some products are not eligible for change-of-mind returns, including:

  • Ex-demo products
  • Clearance or markdown items
  • Special-order items
  • Products clearly marked “No Change-of-Mind Returns”

Important

This does not affect your rights under Australian Consumer Law.

If a product is faulty, not of acceptable quality, or does not meet advertised specifications, it remains eligible for return regardless of category.

Refunds & Processing Timeframes

  • Approved refunds are processed within 7 business days of receiving returned goods
  • Refunds are issued to the original payment method, unless otherwise agreed
  • Replacement or repair may be offered where appropriate
  • Store credit may be offered only with customer consent

Handling fees and non-returnable service charges may not be refundable where permitted by law.


Restocking Fees

For approved change-of-mind or non-faulty returns, a 15% restocking fee applies.

  • Any applicable restocking fee will be clearly communicated prior to return approval
  • The fee will be deducted from the refund amount
  • Restocking fees do not apply to returns made under the Australian Consumer Law, including faulty, damaged, or misrepresented goods.

Return Shipping Costs

  • Change-of-mind returns: The customer is responsible for return shipping costs.
  • Faulty or defective products: ARC IP Networks covers return shipping under Australian Consumer Law.

Non-Warranty Repairs

For issues not covered by warranty:

  • ARC IP Networks will provide a quote before proceeding
  • Customers are responsible for all shipping and service costs
  • No repairs are undertaken without customer approval

Return Methods

Returns may be made:

  • In-store at ARC IP Networks – 6 George Street, Blackburn VIC 3130
  • Or by shipment as instructed by our support team

Proof of purchase is required for all returns.

Enquire About this Product


Any questions about this product? Fill out the form below, and we'll get back to you soon!