TP-Link TL-ER6120 SafeStream Gigabit Dual-WAN VPN Router

The TL-ER6120 SafeStream Gigabit Dual-WAN VPN Router from TP-LINK possesses excellent data processing capabilities and multiple powerful functions including IPsec/PPTP/L2TP VPN, Load Balance, Access Control, IM/P2P Blocking, DoS Defense, Bandwidth Control, Session Limit, PPPoE Server and so on, which consumedly meet the needs of small and medium enterprises, hotels and communities with large volumes of users demanding an efficient and easy-to-manage network with high security.

High VPN Performance:
The TL-ER6120 supports multiple VPN protocols including IPsec, PPTP and L2TP in Client/Server mode and can handle pass-through traffic as well. It also features a built-in hardware-based VPN engine allowing the router to support and manage up to 100 LAN-to-LAN/Client-to-LAN IPsec VPN connections.

Abundant Security Features:
For defense against external threats, TL-ER6120 features an automatic protection to detect and block Denial of service (DoS) attacks such as TCP/UDP/ICMP Flooding, TCP Scanning, Ping of Death and other related threats. Moreover, this router offers a hardware DMZ port, which allows you to setup public servers without exposing your internal network, to avoid attacks from external threats. For better management of the internal network, TL-ER6120 allows administrators to set rules to block specific web sites and IM/P2P applications with just one-click, and restrict staff to use specific services such as FTP, HTTP and SMTP.

Optimizing Bandwidth Usage:
The TL-ER6120 features two WAN ports, allowing the router to satisfy various Internet access requirements through one device. The Intelligent Load Balancing function can distribute data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. With IP-based Bandwidth Control and Session Limit functions, network administrators can flexibly manage network bandwidth to optimize bandwidth usage.

Safety Minded Enterprise Investments:
Professional lightning protection technology is designed to prevent electrical surges from penetrating the interior of the electrical equipment and is discharged harmlessly into the Earth. This router is designed to prevent lightning up to 4Kv in the well-grounded connection conditions. This feature ensures that networking infrastructure investments remain as safe as possible from one of mother nature's more violent situations.

Hardware:
• Standards and Protocols: IEEE 802.3, IEEE802.3u, IEEE802.3ab, TCP/IP, DHCP, ICMP, NAT, PPPoE, SNTP, HTTP, DNS, IPsec, PPTP, L2TP
• Interface: 2x Gigabit WAN ports, 2x Gigabit LAN ports, 1x Gigabit LAN/DMZ port, 1x Console Port (RJ-45 On RS232)
• Network Media: 10BASE-T: UTP category 3, 4, 5 cable (Max 100m), EIA/TIA-568 100 Ohms STP (Max 100m), 100BASE-TX: UTP category 5, 5e cable (Max 100m), EIA/TIA-568 100 Ohms STP (Max 100m), 1000BASE-T: UTP category 5, 5e, 6 cable (Max 100m)
• Button: Reset Button
• Power Supply: Internal Universal Power Supply AC100-240V~ 50/60Hz Input
• Flash: 8MB
• DRAM: DDRII 128MB
• LED: PWR, SYS, Link/Act, Speed, DMZ
• Dimensions ( W x D x H ): 440x220x44 mm 19-inch Standard Rack-Mount Width, 1U Height

Performance:
• Concurrent Session: 60000
• NAT Throughput: 350Mbps
• NAT(iMIX): 936Mbps
• NAT(DHCP): 878Mbps
• NAT(PPPoE): 665Mbps
• IPsec VPN Throughput (AES256): 373Mbps
• IPsec VPN Throughput (3DES): 130Mbps

Basic Functions:
• WAN Connection Type: Dynamic IP, Static IP, PPPoE, PPTP, L2TP, Dual Access, BigPond
• DHCP: DHCP Server/Client, DHCP Reservation
• MAC Clone: Modify WAN/LAN/DMZ MAC Address
• Switch Setting: Port Mirror, Rate Control, Port Config, Port VLAN
• IPTV: Bridge, Custom
• IPv6: IPv6 Support
• VLAN: 802.1Q VLAN, Port VLAN

Advanced Functions:
• Load Balance: Intelligent Load Balance, Policy Routing, Protocol Binding, Link Backup (Timing, Failover), Online Detection
• NAT: One-to-One NAT, Multi-nets NAT, Virtual Server, DMZ Host, Port Triggering, UPnP, FTP/H.323/SIP/IPsec/PPTP ALG
• Routing: Static Routing, Dynamic Routing (RIP v1/v2)
• System Mode: NAT, Non-NAT, Classical Routing
• Traffic Control: IP-based Bandwidth Control, Guarantee & Limited Bandwidth, Time-scheduled Policy, IP-based Session Limit

VPN:
• IPsec VPN: 100 IPsec VPN Tunnels, LAN-to-LAN, Client-to-LAN, Main, Aggressive Negotiation Mode, DES, 3DES, AES128, AES192, AES256 Encryption Algorithm, MD5, SHA1 Authentication Algorithm, Manual, IKE Key Management Mode, IPsec NAT Traversal (NAT-T), Dead Peer Detection (DPD), Perfect Forward Secrecy (PFS)
• PPTP VPN: 32 PPTP VPN Tunnels, PPTP VPN Server/Client, PPTP with MPPE Encryption
• L2TP VPN: 32 L2TP VPN Tunnels, L2TP VPN Server/Client, L2TP over IPsec
• VPN Pass-through: IPsec (ESP), PPTP, L2TP

Security:
• DMZ Port: 1 Hardware DMZ Port
• Application Control: IM, P2P, Web IM, Web SNS, Web Media, Protocol, Proxy Blocking
• Attack Defense: TCP/UDP/ICMP Flood Defense, Block TCP Scan (Stealth FIN/Xmas/Null), Block Ping from WAN
• Filtering: MAC Filtering, URL/Keywords Filtering, Web Content Filtering (Java, ActiveX, Cookies)
• ARP Inspection: Sending GARP Packets, ARP Scanning by WAN/LAN, IP-MAC Binding
• Access Control: Source/Destination IP Based Access Control

Management:
• Service: PPPoE Server, E-Bulletin, Dynamic DNS (Dyndns, No-IP, Peanuthull, Comexe)
• Maintenance: Web/CLI/Telnet Management Interface, Remote Management, Export & Import Configuration, NTP Synchronize, Syslog Support
• Web-based Management: Local User Authentication, Radius Sever Authentication, Onekey Online

Environment:
• Operating Temperature: 0–40 °C
• Storage Temperature: -40–70 °C
• Operating Humidity: 10–90% RH non-condensing
• Storage Humidity: 5–90% RH non-condensing

• Microsoft Windows 98SE, NT, 2000, XP, Vista or Windows 7, MAC OS, NetWare, UNIX or Linux