TP-Link Omada ER605 Gigabit VPN Router - Multi-WAN, IPsec
TP-Link
TP-Link Omada ER605 Gigabit VPN Router - Multi-WAN, IPsec
The TP-Link Omada ER605 Gigabit VPN Router is built for small and medium businesses that need reliable multi-WAN connectivity, robust VPN support, and centralised network management without complex infrastructure. It solves the problem of juggling multiple internet lines and remote access requirements by combining up to three Gigabit WAN ports, a USB 4G/3G failover port, and a full suite of VPN protocols under TP-Link's Omada SDN platform.
Why this product
Up to 3 WAN ports plus USB failover
One dedicated Gigabit WAN port and two Gigabit WAN/LAN ports combine with a USB port for 4G/3G modem backup, so internet access keeps running even if a primary line drops.
Multi-WAN load balancing built in
Intelligent load balancing distributes traffic across active WAN connections according to each port's bandwidth, maximising the efficiency of multi-line broadband subscriptions.
Comprehensive VPN protocol support
It supports up to 20 LAN-to-LAN IPsec, 50 OpenVPN, 16 L2TP, and 16 PPTP connections simultaneously, covering the most common remote-access and site-to-site VPN scenarios.
Omada SDN with Zero-Touch Provisioning
Full integration with the Omada Software Defined Network platform enables centralised cloud management, intelligent monitoring, and zero-touch provisioning via the Omada app.
Advanced firewall and DoS defence
SPI firewall, DoS defence against TCP/UDP/ICMP flooding and Ping of Death, plus IP, MAC and domain-name filtering protect the network without requiring a separate security appliance.
Near wire-speed NAT throughput
Static IP NAT throughput reaches 945.77 Mbps upload and 945.56 Mbps download, making it capable of saturating most gigabit internet connections.
- Total Gigabit Ports5
- WAN Ports1 Gigabit WAN + 2 Gigabit WAN/LAN + 1 USB (4G/3G)
- Max VPN Tunnels20× IPSec, 50× OpenVPN, 16× L2TP, 16× PPTP
- NAT Throughput (Bi-Dir.)Up to 1808.29 Mbps (Static IP)
- Concurrent Sessions150,000
- Power Consumption (max.)7.94 W
- Dimensions (W × D × H)158 × 101 × 25 mm (6.2 × 4.0 × 1.0 in.)
- SKUTPL-1101
- EAN6935364089597
- Works with TP-Link Omada Hardware Controllers OC200 and OC300 (sold separately) for controller-mode management.
- Compatible with TP-Link Omada Software Controller for cloud or on-premises centralised management without dedicated hardware.
- Supports IEEE 802.3, 802.3u, 802.3ab, 802.3x, and 802.1Q standards, making it interoperable with standard Ethernet switches and access points.
- IPv6 is supported via Static IP, SLAAC, DHCPv6, PPPoE, 6to4 Tunnel, and PassThrough, making it suitable for networks transitioning to or running IPv6.
- USB WAN port supports 4G/3G modem backup — compatibility varies by modem model; check TP-Link's official compatibility list before purchasing.
- Some features (e.g. LAN MAC Address modification) are available only in Standalone Mode; others require Controller Mode — check the vendor documentation for the full feature matrix.
Best for
- Multi-WAN businesses: organisations with two or three separate internet lines that want load balancing and automatic failover to maximise uptime.
- Remote-access deployments: teams needing simultaneous IPsec, OpenVPN, L2TP, or PPTP tunnels for staff working from home or connecting branch offices.
- Omada SDN users: businesses already running Omada access points or switches who want a router that slots into the same centralised management platform.
- Power-conscious deployments: with a maximum power draw of 7.94 W, it is well suited to always-on installations where electricity cost and heat matter.
- Space-constrained installs: at 158 × 101 × 25 mm it fits in a small cabinet or desk-side location where rack-mounted hardware would be impractical.
Trade-offs
- High-session-count environments: the 150,000 concurrent session limit and 2,600 new sessions per second ceiling may be insufficient for large enterprise or heavy peer-to-peer workloads.
- Encrypted PPTP throughput-sensitive workloads: encrypted PPTP throughput is rated at 76.65 Mbps, which is significantly lower than the unencrypted figure of 703.20 Mbps.
- Category-based URL filtering needs: this model supports manual URL entry only and does not support category-based URL filtering, so it cannot replace a dedicated web-filtering appliance.
- PoE-powered devices: none of the ports deliver Power over Ethernet, so IP phones, cameras or access points requiring PoE will need a separate PoE switch.
Integrated into Omada SDN: Zero-Touch Provisioning, Centralized Cloud Management, and Intelligent Monitoring.
Centralized Management: Cloud access and Omada app for convenience and easy management.
Up to 3× WAN ports with USB deliver versatile internet access. Multi-WAN Load Balancing intelligently distributes data streams according to each port's bandwidth, maximizing multi-line broadband efficiency for faster, more reliable connectivity.
Up to 3 WAN Ethernet Ports: 1 Gigabit WAN port and 2 Gigabit WAN/LAN ports with load balance raise the utilization rate of multi-line broadband.
One USB WAN Port for Mobile Broadband: Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port.‡
Highly Secure VPN: Supports up to 20× LAN-to-LAN IPsec, 50× OpenVPN**, 16× L2TP***, and 16× PPTP VPN*** connections.
Abundant Security Features: Advanced firewall policies, DoS defense, IP/MAC/URL filtering, and more security functions protect your network and data.
**For OpenVPN: Each WAN port can connect with up to 10 VPN clients when set up as a VPN server. At the same time, the ER605 can work as a VPN client to connect with up to 10 VPN servers. The total number of OpenVPN tunnels is limited to 50.
***For PPTP and L2TP VPN: ER605 can work as a VPN client and can connect with up to 10 VPN servers.
†LAN MAC Address can be modified only in Standalone Mode.
‡For the complete compatibility list of 4G/3G modem, go to https://www.omadanetworks.com/en/omada-router/compatibility/
§These functions are supported only in Standalone Mode.
△These functions are supported only in Controller Mode.
#This model supports manual URL entry only and does not support category-based URL filtering.
*These functions requires the use of an Omada Controller.
Rated specifications are based on test results using the specific software.
General
| Brand | TP-Link |
|---|---|
| Standards | IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3x, IEEE 802.1Q, TCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP |
| IPv6 Support | Static IP / SLAAC / DHCPv6 / PPPoE / 6to4 Tunnel / PassThrough |
| Omada SDN Support | Hardware Controller (OC200/OC300) / Software Controller; Zero-Touch Provisioning, Centralized Cloud Management, Intelligent Monitoring, Abnormal Event Warnings, Unified Configuration, Reboot Schedule, Captive Portal Configuration |
| WAN Connection Types | Static/Dynamic IP, PPPoE, PPTP, L2TP |
| VLAN | 802.1Q VLAN |
| Routing | Static Routing, Policy Routing |
| IPTV | IGMP v2/v3 Proxy, Custom Mode, Bridge Mode |
Performance
| Concurrent Sessions | 150,000 |
|---|---|
| New Sessions/Second | 2,600 |
| Static IP NAT Throughput | Upload: 945.77 Mbps; Download: 945.56 Mbps; Bi-Directional: 1808.29 Mbps |
| DHCP NAT Throughput | Upload: 945.93 Mbps; Download: 945.43 Mbps; Bi-Directional: 1808.11 Mbps |
| PPPoE NAT Throughput | Upload: 940.44 Mbps; Download: 940.52 Mbps; Bi-Directional: 1804.27 Mbps |
| L2TP NAT Throughput | Upload: 845.64 Mbps; Download: 802.65 Mbps |
| PPTP VPN Throughput | Unencrypted: 703.20 Mbps; Encrypted: 76.65 Mbps |
| Load Balance | Intelligent Load Balance, Application Optimised Routing, Link Backup (Timing, Failover), Online Detection |
Ports & Power
| WAN Ports | 1 Gigabit WAN port, 2 Gigabit WAN/LAN ports, 1 USB WAN port (4G/3G modem) |
|---|---|
| LAN Ports | 2 Gigabit LAN ports |
| Total Gigabit Ports | 5 |
| USB Port | 1× USB 2.0 (for 4G/3G modem WAN backup) |
| LED Indicators | PWR, SYS, WAN (Link/Act), LAN (Link/Act), USB |
| Power Consumption (max.) | 7.94 W |
| VPN Protocols | IPSec, L2TP, PPTP, OpenVPN; IPSec/PPTP/L2TP/OpenVPN pass-through |
| VPN Connections | Up to 20× LAN-to-LAN IPSec, 50× OpenVPN, 16× L2TP, 16× PPTP |
| VPN Encryption | DES/3DES/AES128/AES192/AES256; MD5/SHA1 authentication; Manual/IKE v1/v2 key management; Main/Aggressive negotiation modes |
| Firewall | SPI Firewall; DoS defence (TCP/UDP/ICMP Flooding, Ping of Death); IP/MAC/Domain name filtering; ALG (FTP, TFTP, H.323, RTSP) |
| NAT | One-to-One NAT, Multi-Net NAT, Virtual Server, Port Triggering, NAT-DMZ, FTP/H.323/SIP/IPSec/PPTP ALG, UPnP |
Physical
| Dimensions (W × D × H) | 158 × 101 × 25 mm (6.2 × 4.0 × 1.0 in.) |
|---|---|
| Lightning Protection | Up to 4 KV (in well-grounded connection conditions) |
Shipping
All our products are shipped from the United Kingdom within 24 to 48 hours of purchase. See our Shipping and Returns page for full details.
Returns
- Tech Syndicate offers a full money-back guarantee on all purchases made in our store. If you are not satisfied with your purchase, we will provide a full refund, no questions asked.
- Refunds are available within 45 days of delivery.
- After the 45-day period you are no longer eligible for a refund, so we encourage you to try the product within the first few weeks to make sure it fits your needs.