Skip to Content
TP-Link ER7406 Omada Gigabit Rackmount/Desktop VPN Gateway

Price:

$ 244.65


TP-Link ER706W-4G Omada 4G+ Cat6 AX3000 Gigabit VPN Router
TP-Link ER706W-4G Omada 4G+ Cat6 AX3000 Gigabit VPN Router
$ 468.34
$ 590.29 (21% OFF)
TP-Link ES210X-M2 Omada 8-Port 2.5G Easy Managed Switch with 2 10GE SFP+ Slots
TP-Link ES210X-M2 Omada 8-Port 2.5G Easy Managed Switch with 2 10GE SFP+ Slots
$ 149.24
$ 191.95 (22% OFF)

TP-Link ER7406 Omada Gigabit Rackmount/Desktop VPN Gateway

https://arcip.com.au/web/image/product.template/9295/image_1920?unique=b0260d9

The TP-Link ER7406 is a fanless Omada Gigabit VPN gateway in a 294 mm rackmount/desktop chassis. Ports are one Gigabit SFP WAN/LAN, one Gigabit WAN, four Gigabit WAN/LAN and one USB 3.0 for an LTE dongle or storage, giving multi-WAN load balancing and failover. A dual-core Cortex-A53 CPU and 512 MB DDR4 deliver 150,000 sessions, IPsec up to 885.3 Mbps across 100 tunnels, 50 SSL VPN tunnels, WireGuard, OpenVPN and SD-WAN, with IDS/IPS (918 Mbps), DPI and Omada cloud management. Rackmount kit included.

$ 244.65 244.65 AUD $ 311.27 incl. GST

Not Available For Sale


  • Brand

This combination does not exist.

In stock online
  • Stock

    Authorised Australian Reseller | Australian Stock | Genuine Local Warranty

  • Instalment
    Buy Now, Pay Later 
  • [Warranty Information] Warranty
    Manufacturer Warranty 
Estimate delivery
Shipping calculated at checkout
Estimate delivery times: 3-7 business days 
Guaranteed Safe Checkout
Guaranteed Safe Checkout
Accepted payments: Google Pay, Apple Pay, Visa, Mastercard and PayPal
SKU
TL-ER7406
Barcode
8885020622300

The TP-Link ER7406 is an Omada Gigabit rackmount/desktop VPN gateway for small and mid-sized business networks. It has one Gigabit SFP WAN/LAN port, one Gigabit WAN port, four Gigabit WAN/LAN ports and a USB 3.0 port that accepts a USB LTE dongle, handles 150,000 concurrent sessions and up to 100 IPsec tunnels at up to 885.3 Mbps, and adds signature-based IDS/IPS, DPI and content filtering. It is fanless, runs from 100-240 V AC and is managed through Omada SDN.

ER7406 overview

The ER7406 is TP-Link's Omada Gigabit Rackmount/Desktop VPN Gateway; the AU page shows hardware version 1.20. It is a wired gateway with no built-in Wi-Fi, intended to sit in a comms rack or on a shelf as the router and firewall of an Omada network, with access points, PoE switches and an Omada controller around it. TP-Link's datasheet highlights a dual-core ARM Cortex-A53 processor with 512 MB DDR4 memory for outstanding performance, plus 128 MB NAND flash, in a fanless 294 x 140 x 44 mm metal chassis that weighs 1.09 kg. Power comes from an internal 100-240 V AC, 50/60 Hz supply via a power cord, and maximum consumption is just 4.5 W, or 7.5 W with a USB 3.0 device connected.

Interfaces are one Gigabit SFP WAN/LAN port for a fibre uplink, one Gigabit RJ45 WAN port, four Gigabit RJ45 WAN/LAN ports and one USB 3.0 port that supports a USB LTE dongle and USB storage. Because five of the ports can act as WAN, the ER7406 can terminate several internet services at once, using intelligent load balance, application optimised routing and link backup by timing or failover with online detection; a USB LTE dongle can be added as a cellular backup. WAN types include static and dynamic IP, PPPoE with MRU configuration, PPTP and L2TP, with a full IPv6 stack and IPTV support through IGMP v2/v3 proxy, custom mode and bridge mode.

Throughput figures are listed at 150,000 concurrent sessions and 4,600 new sessions per second, with static IP NAT of 945.3 Mbps upload and 940.5 Mbps download. VPN is a strength: 100 IPsec tunnels with IKE v1/v2, AES up to 256-bit, failover, NAT-T, DPD and PFS, measured at 885.3 Mbps with ESP-SHA1-AES256 and 844.8 Mbps with ESP-SHA256-AES256; 50 SSL VPN tunnels at 131.6 Mbps; 55 OpenVPN tunnels at 139.1 Mbps; WireGuard at 341.3 Mbps; L2TP over IPsec; PPTP; and GRE in standalone mode at up to 1094.2 Mbps unencrypted. SD-WAN, available in controller mode, connects branch offices to headquarters in a few clicks without complex VPN setup, according to TP-Link.

Security goes beyond a basic firewall. The integrated IDS/IPS engine uses signature-based threat detection with what TP-Link describes as over 4,000 regularly updated signature rules, at 918 Mbps TCP and 920 Mbps UDP IPS throughput. Deep packet inspection identifies 2421 application types at 933 Mbps TCP, and content filtering provides category- and time-based URL rules. Other features include stateful, IPv4/IPv6, national-based and FQDN ACLs, DNSSEC, DoH, DoT and DNS override, TCP/UDP/ICMP flood and DoS defence, TCP scan blocking, ARP detection and IP-MAC binding, with 4 kV surge protection on the hardware. Captive portal web authentication supports local user, voucher, SMS and RADIUS hotspots, external RADIUS and portal servers and LDAP.

Management is through Omada SDN: Omada hardware, software and cloud-based controllers provide automatic device discovery, intelligent network monitoring, abnormal event warnings, unified configuration and captive portal configuration, and the Omada app and cloud access require one of those controllers. Zero-touch provisioning requires the Omada Cloud-Based Controller. Standalone management includes the web interface, remote management, SNMP v1/v2c/v3, CLI, port mirroring, syslog and configuration export/import. The ER7406 is rated for 0 to 50 degrees C operation and carries CE and FCC certification. In the box are the ER7406, a power cord, a quick installation guide and a rackmount kit.

Key features

SFP plus five Gigabit ports

1 Gigabit SFP WAN/LAN, 1 Gigabit WAN and 4 Gigabit WAN/LAN ports.

USB 3.0 for LTE backup

Supports a USB LTE dongle or USB storage.

100 IPsec VPN tunnels

Up to 885.3 Mbps IPsec, plus 50 SSL VPN, 55 OpenVPN, WireGuard, L2TP, PPTP and GRE.

IDS/IPS threat defence

Signature-based IPS/IDS at 918 Mbps TCP, with DoS/DDoS protection.

DPI and content filtering

Identifies 2421 application types; category- and time-based URL rules.

SD-WAN

Site-to-site connectivity to headquarters in a few clicks in controller mode.

Fanless rackmount design

Silent 294 mm metal chassis, 4.5 W draw, rackmount kit included.

Omada SDN management

Hardware, software or cloud-based controller, with zero-touch provisioning.

ER7406 specifications

At a glance

1 x Gigabit SFP
5 x Gigabit RJ45
USB 3.0 (LTE dongle)
150,000 sessions
100 IPsec tunnels
IDS/IPS + DPI
Fanless, 100-240 V AC
Rackmount kit incl.
ER7406 full specifications
Security
IDS/IPSSignature-based IPS/IDS threat detection
Access ControlSource/Destination IP Based ACL; Stateful ACL; IPv4/IPv6 ACL; National Based ACL; FQDN
DPIDeep Packet Inspection; Support 2421 type Applications
DNS ProxyDNSSEC, DoH, DoT, and DNS Override
FilteringWeb Group Filtering; URL Categories and URLs Filtering; Web Security
Attack DefenseTCP/UDP/ICMP Flood Defense; Block TCP Scan (Stealth FIN/Xmas/Null); Block Ping from WAN
ARP InspectionSending GARP Packets; ARP Scanning; IP-MAC Binding; ARP Detection
Vpn
GRE√ (Only in Standalone Mode)
SSL VPN50 Tunnels
IPsec VPN100 IPSec VPN Tunnels; LAN-to-LAN, Client-to-LAN; Main, Aggressive Negotiation Mode; DES, 3DES, AES128, AES192, AES256 Encryption Algorithm; IPsec Failover; IKE v1/v2; MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm; NAT Traversal (NAT-T); Dead Peer Detection (DPD); Perfect Forward Secrecy (PFS)
PPTP VPNPPTP VPN Server; PPTP VPN Client (10) ※; 50 Tunnels; PPTP with MPPE Encryption
L2TP VPNL2TP VPN Server; L2TP VPN Client (10) ※; 50 Tunnels; L2TP over IPSec
OpenVPNOpenVPN Server; OpenVPN Client (5) ※; 55 OpenVPN Tunnels; "Certificate + Account" Mode; Full Mode
WireGuard VPN√
SD-WAN√ (Only in Controller Mode)
Hardware Features
Standards and ProtocolsIEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE802.3z, IEEE 802.3x, IEEE 802.1q; TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, WireGuard VPN, GRE VPN, SNMP, LLDP
Interface1 Gigabit SFP WAN/LAN Port; 1 Gigabit WAN Port; 4 Gigabit LAN/WAN Ports; 1 USB 3.0 Port (supports USB LTE dongle and USB storage)
Network Media10BASE-T: UTP category 3, 4, 5 cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m); 100BASE-TX: UTP category 5, 5e cable (Max 100 m); EIA/TIA-568 100Ω STP (Max 100 m); 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)
Fan QuantityFanless
ButtonReset button
Power Supply100-240VAC, 50/60Hz
Flash128 MB NAND
DRAM512 MB DDR4
LEDPWR, SYS, SFP, USB, WAN(1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act)
Dimensions ( W x D x H )11.6 × 5.5 × 1.7 in (294 × 140 × 44 mm)
Protection4 kV surge protection
MountingDesktop; Rackmount
Max. Power Consumption7.5 W (with USB 3.0 connected); 4.5 W (without USB 3.0 connected)
Performance
Concurrent Session150,000
New Sessions /Second4,600
NAT (Static IP)945.3 Mbps / 940.5 Mbps
NAT(DHCP)939.6 Mbps / 940.9 Mbps
NAT(PPPoE)943.6 Mbps / 940.9 Mbps
NAT (L2TP)908.6 Mbps / 918.4 Mbps
NAT (PPTP)906.2 Mbps / 915.9 Mbps
66 Byte Packet Forwarding Rate1,453,489 pps / 1,453,488 pps
1,518 Byte Packet forwarding rate81,279 pps / 81,275 pps
IPsec VPN ThroughputESP-SHA1-AES256: 885.3Mbps; ESP-SHA256-AES256: 844.8 Mbps; ESP-SHA384-AES256: 868.5 Mbps; ESP-SHA512-AES256: 849.5 Mbps
GREUnencrypted: 1094.2 Mbps; Encrypted: 702.2 Mbps
WireGuard VPN341.3 Mbps
OpenVPN139.1 Mbps
L2TP VPN ThroughputUnencrypted: 1422.4 Mbps; Encrypted: 686.2 Mbps
PPTP VPN ThroughputUnencrypted: 1356.1 Mbps; Encrypted: 205.1 Mbps
SSL VPN Throughput131.6 Mbps
DPI ThroughputTCP: 933 Mbps UDP: 927 Mbps
IPS ThroughputTCP: 918 Mbps UDP: 920 Mbps
Management Features
Omada AppYes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
Centralised ManagementOmada Cloud-Based Controller; Omada Hardware Controller; Omada Software Controller
Cloud AccessYes. Requires the use of Omada Hardware Controller, Omada Cloud-Based Controller, or Omada Software Controller.
ServiceDynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customisation)
MaintenanceWeb Management Interface; Remote Management; Export & Import Configuration; SNMP v1/v2c/v3; Diagnostics (Ping & Traceroute); NTP Synchronize; Port Mirroring; CLI; Syslog Support
Zero-Touch ProvisioningYes. Requires the use of Omada Cloud-Based Controller.
Management FeaturesAutomatic Device Discovery; Intelligent Network Monitoring; Abnormal Event Warnings; Unified Configuration; Reboot Schedule; Captive Portal Configuration
Basic Functions
LAN DNS√
WAN Connection TypeStatic IP; Dynamic IP; PPPoE(supports MRU Configuration); PPTP; L2TP
MAC CloneModify WAN/LAN MAC Address
DHCPDHCP Server; DHCPv6 PD Server; DHCP Options Customisation; DHCP Address Reservation; Multi-IP Interfaces; Multi-Net DHCP; WAN DHCP 60
Stateful ACL√
Quality of Service√
Bridge VLAN√
mDNS Repeater√
IPv6StaticIP/SLAAC/DHCPv6/PPPoE/6to4Tunnel/PassThrough/Non-Address mode
VLAN802.1Q VLAN
IPTVIGMP v2/v3 Proxy, Custom Mode, Bridge Mode
Advanced Features
Advanced RoutingStatic Routing; Policy Routing; RIP; OSPF
Bandwidth ControlIP-based Bandwidth Control
Load BalanceIntelligent Load Balance; Application Optimised Routing; Link Backup (Timing, Failover); Online Detection
NATOne-to-One NAT; Multi-Net NAT; Port Forwarding; Port Triggering; NAT-DMZ; FTP/H.323/SIP/IPSec/PPTP ALG; UPnP; Disable NAT
Session LimitIP-based Session Limit
Authentication
Web AuthenticationNo Authentication; Simple Password; Hotspot (Local User /Voucher / SMS /Radius ); External Radius Server; External Portal Server; LDAP
Others
CertificationCE, FCC
System RequirementsMicrosoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/8.1/10; MAC OS, NetWare, UNIX or Linux
EnvironmentOperating Temperature: 0 °C to 50 °C (32 °F to 122°F); Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F); Operating Humidity: 10% to 90% non-condensing; Storage Humidity: 5% to 90% non-condensing

Source: TP-Link's published specifications for this model (TP-Link Australia product page and datasheet). Some features run only in Standalone Mode or only under an Omada Controller; throughput figures are TP-Link's lab results. TP-Link may change specifications without notice.

What's in the box

  • ER7406
  • Power Cord
  • Quick Installation Guide
  • Rackmount Kit

Source: TP-Link's published package contents.

Who the ER7406 is for

Multi-WAN business sites

  • Up to five WAN-capable ports
  • Fibre via the SFP port
  • USB LTE dongle as backup

Multi-site VPN

  • 100 IPsec and 50 SSL VPN tunnels
  • SD-WAN in controller mode
  • WireGuard and OpenVPN

Security-conscious offices

  • Signature-based IDS/IPS
  • DPI of 2421 application types
  • Category and time-based filtering

ER7406 compared

The ER7406 and the ER706W-4G share the same port layout (one SFP, one WAN and four WAN/LAN Gigabit ports) and the same 100 IPsec tunnel capacity. The ER7406 is a fanless wired gateway with a USB 3.0 port, IDS/IPS and a built-in AC supply; the ER706W-4G adds a dual-SIM 4G+ Cat6 modem and AX3000 Wi-Fi 6 but has no USB port.

SpecificationER7406ER706W-4G
Ports1 SFP, 1 WAN, 4 WAN/LAN (Gigabit)1 SFP, 1 WAN, 4 WAN/LAN (Gigabit)
USB1 x USB 3.0 (LTE dongle, storage)Not listed
Built-in cellularNo4G+ Cat6, 2 x Nano SIM
Wi-FiNoAX3000 Wi-Fi 6
Concurrent sessions150,000150,000
IPsec (ESP-SHA1-AES256)885.3 Mbps627.5 Mbps
IDS/IPSSignature-based IPS/IDSNot listed
Power100-240 V AC internal12 V / 2 A adapter
Max. power consumption4.5 W (7.5 W with USB)15.4 W

Source: TP-Link Australia product pages for each model.

Buy the ER7406 from ARC IP Networks

ARC IP Networks supplies TP-Link Omada products from Australian stock at competitive prices, with the full manufacturer's warranty, Australia-wide delivery and trade pricing for installers and MSPs.

  • New TP-Link Omada product from Australian stock.
  • Manufacturer warranty: the full TP-Link manufacturer's warranty for this model.
  • Australia-wide delivery to every state and territory.
  • Trade and project pricing: call 1300 100 440 or email info@arcip.com.au.

Frequently asked questions

Straight answers about the ER7406 from the ARC IP Networks team.

Last reviewed October 2026.

An Omada Gigabit rackmount/desktop VPN gateway: a fanless wired router and firewall with multi-WAN, VPN, IDS/IPS and Omada SDN management.

One Gigabit SFP WAN/LAN port, one Gigabit RJ45 WAN port, four Gigabit RJ45 WAN/LAN ports and one USB 3.0 port.

Yes. The USB 3.0 port supports a USB LTE dongle as well as USB storage.

100 IPsec, 50 SSL VPN and 55 OpenVPN tunnels, plus WireGuard, L2TP, PPTP and GRE (standalone mode). SD-WAN is available in controller mode.

TP-Link lists 885.3 Mbps with ESP-SHA1-AES256 and 844.8 Mbps with ESP-SHA256-AES256. These are lab results.

Yes. It has signature-based IPS/IDS threat detection with 918 Mbps TCP and 920 Mbps UDP IPS throughput, alongside DPI and DoS defence.

No. It is a wired gateway; Wi-Fi comes from Omada access points managed alongside it.

Yes. TP-Link lists it as fanless, with 4.5 W maximum consumption, or 7.5 W with a USB 3.0 device connected.

No, it can be managed standalone. Omada app and cloud access require an Omada hardware, software or cloud-based controller, and zero-touch provisioning requires the cloud-based controller.

The ER7406, a power cord, a quick installation guide and a rackmount kit.

Need more than one ER7406 for a multi-site business network?

Ask ARC IP Networks for volume and project pricing on TP-Link Omada products.

Brand TP-Link

Accurate Shipping Costs

Our online shipping calculator is designed to provide a final, accurate shipping cost based on the items in your cart and your delivery postcode. Shipping costs are calculated at checkout based on your order and delivery postcode. The final cost is calculated based on several factors which are automatically accounted for by our system, including:

  • The stock location of the item(s) across our warehouses.
  • Orders with multiple items that may require special packaging.
  • The weight and dimensions of the order (including heavy or oversized items).
  • The delivery courier servicing your specific region.

Delivery Times


 

Standard Processing


Most orders placed by 2pm AEDT are dispatched for next working day delivery. Larger orders may require 1-2 additional business days for processing. If timing is critical, please contact us to discuss expedited options (additional charges may apply).


Delivery Timeframes


Region

Processing Time

Express Delivery

Standard Delivery

VIC, NSW, SA, QLD Metro, TAS

1-2 business days

1-2 business days

2-4 business days

NT, WA, QLD Rural

1-2 business days

1-2 business days

3-5 business days

New Zealand

1-2 business days

2-3 business days

4-10 business days

Please note: Processing times may extend during peak periods such as Christmas and end of financial year.

Free Warehouse Pickup



Save on shipping costs with free pickup from our ARC IP Networks Blackburn warehouse. Simply place your order online or by phone, and collect during business hours (Monday to Friday). Please allow time for picking and packing. For urgent orders, call 1300 100 440 to confirm your order is ready.

ARC IP Networks Pickup Address: 6 George Street, Blackburn, VIC 3130


Insurance & Tracking



All ARC IP Networks shipments are fully insured and trackable. Once dispatched, you'll receive an email with your tracking number and courier website details. If your item is confirmed lost or damaged by our courier, we'll arrange a replacement in consultation with you.


International Shipping



ARC IP Networks ships to New Zealand. Please note:


  • Import duties and taxes vary by country
  • Buyers are responsible for all customs charges
  • Contact your local customs authority before ordering
  • We'll provide required documentation for smooth customs clearance
  • Buyers cover all shipping costs for returns due to refused duties/taxes


Delivery Requirements


Signature Required


All deliveries must be signed for. If you won't be home, contact our Sales Support team to arrange Authority to Leave. Important: Authority to Leave voids shipping insurance if parcels are lost or stolen.


Delivery Restrictions


We do not deliver to PO Boxes or Parcel Lockers as our couriers cannot access them. Orders sent to these addresses will be returned, incurring redelivery fees.


Shipping Issue Resolution


ARC IP Networks works closely with our shipping partners to resolve any delivery issues quickly and fairly:


  1. Confirmation: We verify expected delivery dates with our shipping partners
  2. Investigation: Issues outside normal timeframes trigger formal investigations
  3. Communication: We keep you updated throughout the resolution process
  4. Resolution: Confirmed lost items are replaced or refunded after investigation completion


Please note: Refunds for lost, missing, or delayed orders cannot be processed until shipping partner investigations are complete. This does not affect your rights under the Australian Consumer Law, and refunds or replacements will be provided where required once loss or damage is confirmed.

Warranty & Faulty Products

ARC IP Networks complies with the Australian Consumer Law (ACL).

If a product is faulty, damaged, not of acceptable quality, or does not perform as advertised, you are entitled to a repair, replacement, or refund in accordance with ACL.

Manufacturer Warranty Returns

For faults developing after 14 days within the warranty period:

  • Contact ARC IP Networks first at info@arcip.com.au or 1300 100 440
  • We will assess the issue and coordinate with manufacturers, authorised service centres, or distributors on your behalf
  • Where required, a manufacturer RMA may be arranged
  • ARC IP Networks manages the return process and next steps

Dead on Arrival (DOA)

Products that arrive faulty or damaged must be reported within 14 days of delivery.

ARC IP Networks will arrange assessment, replacement, or refund as appropriate.

Change of Mind & Non-Faulty Returns

Change-of-mind returns must be requested within 14 days of delivery. For change-of-mind returns, the product must be unused, unopened, in its original packaging, and returned with all accessories and documentation. These conditions apply only to change-of-mind returns and do not limit or exclude your rights under the Australian Consumer Law. Some products are not eligible for change-of-mind returns, including:

  • Ex-demo products
  • Clearance or markdown items
  • Special-order items
  • Products clearly marked “No Change-of-Mind Returns”

Important

This does not affect your rights under Australian Consumer Law.

If a product is faulty, not of acceptable quality, or does not meet advertised specifications, it remains eligible for return regardless of category.

Refunds & Processing Timeframes

  • Approved refunds are processed within 7 business days of receiving returned goods
  • Refunds are issued to the original payment method, unless otherwise agreed
  • Replacement or repair may be offered where appropriate
  • Store credit may be offered only with customer consent

Handling fees and non-returnable service charges may not be refundable where permitted by law.


Restocking Fees

For approved change-of-mind or non-faulty returns, a 15% restocking fee applies.

  • Any applicable restocking fee will be clearly communicated prior to return approval
  • The fee will be deducted from the refund amount
  • Restocking fees do not apply to returns made under the Australian Consumer Law, including faulty, damaged, or misrepresented goods.

Return Shipping Costs

  • Change-of-mind returns: The customer is responsible for return shipping costs.
  • Faulty or defective products: ARC IP Networks covers return shipping under Australian Consumer Law.

Non-Warranty Repairs

For issues not covered by warranty:

  • ARC IP Networks will provide a quote before proceeding
  • Customers are responsible for all shipping and service costs
  • No repairs are undertaken without customer approval

Return Methods

Returns may be made:

  • In-store at ARC IP Networks – 6 George Street, Blackburn VIC 3130
  • Or by shipment as instructed by our support team

Proof of purchase is required for all returns.

Enquire About this Product


Any questions about this product? Fill out the form below, and we'll get back to you soon!