TP-Link Omada 4G+ Cat6 AX3000 Gigabit VPN Gateway with 4-Port PoE+

Features

Support 4G+ Cat6*: Insert a Nano SIM card to enjoy up to 300 Mbps (Not compatible with AT&T’s Text & Data plans** in the US).
AX3000 Dual-Band WiFi 6: Supports 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz***
5 Gigabit Ethernet Ports: Provide high-speed wired connectivity.
5 High-Gain Detachable Antennas: Extend and concentrate the Wi-Fi signals.
Centralized Management: Cloud access and the Omada app for easy management.
Omada Mesh: Seamlessly connects to EAPs that support mesh technology.*
High-Security VPN: Supports IPSec / SSL / WireGuard / OpenVPN / PPTP / L2TP VPN.

4G

Network Type
LTE Band of EU:
4G LTE-FDD: B1/B3/B5/B7/B8/B20/B28/B32 (2100/1800/850/2600/
900/800/700/1450 MHz)
4G LTE-TDD: B38/B40/B41 (2600/2300/2500 MHz)
3G DC-HSDPA/HSPA+/HSDPA/HSUPA/WCDMA: B1/B3/B5/B8
(2100/1800/850/900 MHz)

Carrier Aggregation of EU
B1+B1/B3/B5/B7/B8/B20/B28/B38/B40/B41
B3+B3/B5/B7/B8/B20/B28/B38/B40/B41
B5+B5/B7/B38/B40/B41
B7+B7/B8/B20/B28/B32
B8+B32/B38/B40/B41
B20+B32/B38/B40
B28+B32/B38/B40/B41
B38+B38
B40+B40
B41+B41

SIM Type
2x Nano SIM Card( (4G+ Cat6)

Frequency
Downlink: 300 Mbps;
Uplink: 50 Mbps

Security
DPI – Application control via DPI / Updated app library
IDS/IPS – Signature-based IPS/IDS threat detection
Access Control – Source/Destination IP Based Access Control

Filtering
Web Group Filtering
URL Filtering
Web Security

ARP Inspection
Sending GARP Packets
ARP Scanning
IP-MAC Binding

Attack Defense
TCP/UDP/ICMP Flood Defense
Block TCP Scan (Stealth FIN/Xmas/Null)
Block Ping from WAN

Hardware Features

Interface
1 Gigabit SFP WAN/LAN Port
1 Gigabit WAN Port
4 Gigabit LAN/WAN Ports

Network Media
10BASE-T: UTP category 3, 4, 5 cable (Max 100 m) EIA/TIA-568 100O STP (Max 100 m)
100BASE-TX: UTP category 5, 5e cable (Max 100 m) EIA/TIA-568 100O STP (Max 100 m)
1000BASE-T: UTP category 5, 5e, 6 cable (Max 100 m)

Button
Reset Button

Power Supply
4 Ports PoE+ Output, 45 W PoE Budget

Wi-Fi Frequency & Signal Rate
2.4 GHz: 574 Mbps
5 GHz: 2402 Mbps (HE160)

Flash
256 MB NAND

DRAM
512 MB DDR4

LED
SYS, WLAN, SFP, LTE1, LTE2, PoE Max, LTE Signal, WAN (1000M Link/Act, 100/10M Link/Act), WAN/LAN (1000M Link/Act, 100/10M Link/Act, PoE)

Dimensions ( W x D x H )
8.9 x 5.2 x 1.4 in (226 x 131 x 35 mm) (Antenna dimensions are not included)

Antenna
Wi-Fi: Three 5GHz 5.5dBi & 2.4GHz 4.5dBi dual-band detachable antennas
LTE: Two 4.0dBi omnidirectional detachable antennas

Mounting
Desktop/Wall-Mounting/Rackmount

Max. Power Consumption
64.9W with PoE Max; 19.8W without PoE

Performance

IPS Throughput
TCP: 229 Mbps
UDP: 188 Mbps

DPI Throughput
TCP: 933 Mbps
UDP: 927 Mbps

GRE
Unencrypted: 545.3Mbps
Encrypted: 282.6Mbps

WireGuard VPN
387.7Mbps

Concurrent Session
150,000

New Sessions /Second
5,100

NAT
NAT (Static IP) – 947.1Mbps / 940.1Mbps
NAT(DHCP) – 949.2Mbps / 941.1Mbps
NAT(PPPoE) – 942.6Mbps / 941.1Mbps
NAT (L2TP) – 875.4Mbps / 892.0Mbps
NAT (PPTP) – 881.2Mbps / 895.8Mbps

IPsec VPN Throughput
ESP-SHA1-AES256: 652.2Mbps
ESP-SHA256-AES256: 654.4Mbps
ESP-SHA384-AES256: 646.5Mbps
ESP-SHA512-AES256: 670.5 Mbps

OpenVPN
115.5Mbps

L2TP VPN Throughput
Unencrypted: 990.0Mbps
Encrypted: 475.0Mbps

PPTP VPN Throughput
Unencrypted: 1177.9Mbps
Encrypted: 177.4Mbps

SSL VPN Throughput
122.5Mbps

66 Byte Packet Forwarding Rate
1,453,489 pps / 1,453,488 pps
1,518 Byte Packet forwarding rate – 81274 pps / 91275 pps

Wireless Features

Advanced Features
Seamless Roaming
Mesh (with EAP that supports Mesh)
OFDMA
Beamforming
MU-MIMO
Rate Limit: Based on SSID/Client
Airtime Fairness
Wireless Encryption: WPA/WPA2/WPA3 Personal, WPA/WPA2/WPA3 Enterprise
Multiple SSIDs: 16 in total (8 per radio)

Guest Network
Support

Basic Functions
WAN Connection Type
Static IP
Dynamic IP
PPPoE (supports MRU Configuration)
PPTP
L2TP

MAC Clone
Modify WAN Address

DHCP
DHCP Server
DHCPv6 PD Server (only in Standalone Mode)
DHCP Options Customization
DHCP Address Reservation
Multi-IP Interfaces
Multi-Net DHCP

SMS
Receive / Send SMS

IPv6
StaticIP / SLAAC / DHCPv6 / PPPoE / 6to4Tunnel / PassThrough / Non-Address mode
VLAN – 802.1Q VLAN
IPTV – IGMP v2/v3 Proxy, Custom Mode, Bridge Mode

<Advanced Features

Access Control
IP/Port/Protocol/Domain Name Filtering

Advanced Routing
Static Routing
Policy Routing
RIP
OSPF

Bandwidth Control
IP-Based Bandwidth Control

Load Balance
Intelligent Load Balance
Application Optimized Routing
Link Backup(Timing, Failover)
Online Detection

NAT
One-to-One NAT
Multi-Net NAT
Virtual Server
Port Triggering
NAT-DMZ
FTP/H.323/SIP/IPSec/PPTP ALG
UPnP

Session Limit
IP-Based Session Limit

VPN

GRE
Only in Standalone Mode

SSL VPN
50 Tunnels

IPsec VPN
100 IPSec VPN Tunnels
LAN-to-LAN, Client-to-LAN
Main, Aggressive Negotiation Mode
DES, 3DES, AES128, AES192, AES256 Encryption Algorithm
IPsec Failover
IKE v1/v2
MD5, SHA1, SHA2-384 and SHA2-512 Authentication Algorithm
NAT Traversal (NAT-T)
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)

PPTP VPN
PPTP VPN Server
PPTP VPN Client (10)
50 Tunnels
PPTP with MPPE Encryption

L2TP VPN
L2TP VPN Server
L2TP VPN Client (10)
50 Tunnels
L2TP over IPSec

OpenVPN
OpenVPN Server
OpenVPN Client (5)
55 OpenVPN Tunnels
“Certificate + Account” Mode
Full Mode

WireGuard VPN
20 Tunnels

Authentication

Web Authentication
No Authentication
Simple Password
Hotspot (Local User / Voucher / SMS / Radius)
External Radius Sever
External Portal Sever
LDAP

Management Features

Omada App
Yes.

Centralized Management
Omada Cloud-Based Controller
Omada Hardware Controller (OC300)
Omada Hardware Controller (OC200)
Omada Software Controller

Cloud Access
Yes.

Service
Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe, DDNS Customization)

Maintenance
Web Management Interface
Remote Management
Export & Import Configuration
SNMP v1/v2c/v3
Diagnostics (Ping & Traceroute)
NTP Synchronize
Port Mirroring
CLI (only in Standalone Mode)
Syslog Support

Zero-Touch Provisioning
Yes. Require the use of Omada Cloud-Based Controller.

Management Features
Automatic Device Discovery
Intelligent Network Monitoring
Abnormal Event Warnings
Unified Configuration
Reboot Schedule
Captive Portal Configuration

Other

Network Services Enabled by Default – Web Server
Manage and configure device through web (HTTP/HTTPS)
Port: 80/443 Protocol: TCP

TDP Server
Device discovery
Port: 20003 Protocol: UDP

DHCP Server
Handle DHCP packets
Port: 67 Protocol: UDP

DNS
Handle DNS packets
Port: 53 Protocol: TCP/UDP

Others

Certification
CE, FCC, RoHS

Package Content
ER706WP-4G
Power Adapter
Quick Installation Guide

System Requirements
Microsoft Windows 98SE, NT, 2000, XP, Vista or Windows 7/8/8.1/10/11
MAC OS, NetWare, UNIX or Linux

Environment
Operating Temperature: 0 °C to 40 °C (32 °F to 104 °F)
Storage Temperature: -40 °C to 70 °C (-40 °F to 158 °F)
Operating Humidity: 10% to 90% non-condensing
Storage Humidity: 5% to 90% non-condensing