Several internet lines combined, with automatic failover if one drops. Up to 100 IPSec tunnels, a captive portal for guests and monitoring through the Omada platform, in the cloud or on site.
1 SFP fibre WAN port, 1 RJ45 WAN port, 2 configurable WAN/LAN ports and 2 LAN ports
Load balancing across several internet lines and automatic failover
Up to 100 IPSec VPN tunnels
OpenVPN, PPTP, L2TP and L2TP over IPSec servers
150,000 concurrent sessions
NAT throughput measured at 940 Mbps
Captive portal for guest authentication
Bandwidth control and session limit per IP address
Flood attack defence, URL filtering and access control
Centralised Omada management, in the cloud or on site
TP-Link ER7206 SafeStream Gigabit Multi-WAN VPN router: make your business Internet access more secure and more reliable. Ports:Gigabit ports, Multi-WAN to combine bandwidth or fail over automatically when a line goes down. VPN: numerous IPSec, PPTP, L2TP and OpenVPN tunnels to link sites and remote workers. Security: firewall, DoS defence, filtering and access control. Management: centralised via Omada SDN, cloud or on-premises. Use cases: SMEs, shops, multi-site branches. A robust VPN gateway for a business network that never stops.
Be the first to review this product and help other customers.
Write a review
Frequently asked questions about this product
How many Internet connections can this TP-Link router aggregate?
Up to four: 1 SFP fibre WAN port, 1 RJ45 WAN port and 2 configurable WAN/LAN ports, plus 2 LAN ports. Load balancing spreads the traffic and failover is automatic if a line goes down.
How many VPN tunnels does this SafeStream router support?
Up to 100 IPSec tunnels. It also includes OpenVPN, PPTP, L2TP and L2TP over IPSec servers — enough to connect remote sites as well as mobile workers.
How many users can this router serve?
It handles 150,000 concurrent sessions and has a measured NAT throughput of 940 Mbps. These are the two figures that determine the size of network it can serve, more than the number of ports.
Can this router manage a guest network?
Yes: a captive portal handles guest authentication, with bandwidth control and a limit on the number of sessions per IP address. This is what prevents a single device from saturating the line.
What protections does this router include?
Defence against flood attacks, URL filtering and access control. On the hardware side, lightning protection up to 4 kV protects the input ports.
Can this router be managed remotely?
Yes: through Omada centralised management, in the cloud or on-premises. This is what lets you manage several sites from a single console.
Is this TP-Link ER7206 router new and under warranty?
Yes, it is a new TP-Link product, reference ER7206, a Gigabit multi-WAN VPN router from the SafeStream range. The invoice serves as the warranty document, for a period of 1 year. Datasheet: TP-Link ER7206.
Three ways to power it — incoming PoE, a jack socket or a two-pin terminal block — so it fits anywhere, and four units fit into a single rack U. Quad-core ARM processor at 1.4 GHz, 1 GB of DDR4 and RouterOS v7 for demanding routing.
•64-bit quad-core ARM processor up to 1.4 GHz
•1 GB of DDR4 RAM and 1 GB of NAND storage
•1 Ethernet port at 2.5 Gbps in addition to the 7 Gigabit ports
The LAN/WAN switchable SFP slot takes fibre, and up to four WAN links share the load with automatic failover. Bandwidth is allocated by application or by user group, for 200 recommended clients.
IP cameras, phones and access points plug in and draw power from the 8 PoE/PoE+ outputs, with a 110 W budget. 1.5 Gbps throughput, 300 simultaneous users and 64 encrypted tunnels to link remote sites.
Designed for a head office or a branch, it brings routing, switching, VPN and firewall together in a 1U chassis. Eight Gigabit sockets switchable to WAN, MPLS, IPS and URL filtering, with Wi-Fi access point management built in.
•8 Gigabit LAN ports, switchable to WAN ports
•64-bit ARM processor with 4 cores and a non-blocking switching architecture
The heart of an SME UniFi network: it routes, filters and supervises more than 300 clients and more than 30 UniFi devices. Its 2.5 Gbps WAN port is faster than the four Gigabit ports, and everything is driven from the app or the cloud.
Four cores at 1.4 GHz and IPsec hardware acceleration that pushes an encrypted tunnel beyond a gigabit. Metal housing cooled without a fan, supplied with the brackets for a 1U rack.
•SFP+ slot for a 10 Gbps fibre link, module not included
Internet gateway for an SMB with up to 700 users, in a fanless 1U rack: 3 Gbps throughput, up to 9 combined Internet connections, WireGuard and IPsec VPN to 300 sites, guest Wi-Fi portal and management of 750 Reyee access points and switches.
Up to 1,500 concurrent users behind a single fanless 1U rack unit: 4 Gbps throughput, up to 9 WANs, VPN and SD-WAN to 1,000 sites, and an internal SATA drive bay to keep the logs.
Multi-Gig in a silent desktop unit: every RJ45 socket handles 2.5 Gbps and the SFP+ fibre port reaches 10G. Designed for an SME or a shop with up to 400 users, with multi-WAN load balancing and VPN to 100 sites.
Powers up to four cameras or Wi-Fi access points while handling 100 users: dual WAN with failover, IPsec, OpenVPN, L2TP and PPTP VPN, customisable captive portal. Remote management via Ruijie Cloud, fanless.