TP-Link
ER8411TP-Link Omada ER8411 Wired Router
The Omada ER8411 is the head-end router for networks that have outgrown gigabit. A dedicated quad-core Cortex-A72 CPU at 2.2 GHz and 4 GB of DDR4 give it the muscle for up to 2,300,000 concurrent connections, making it a natural fit for campus LANs, multi-tenant buildings and busy offices with heavy VPN use.
Connectivity is genuinely 10G-ready: a 10G SFP+ WAN port and a second 10G SFP+ WAN/LAN port sit alongside a Gigabit SFP WAN/LAN port and eight Gigabit RJ45 WAN/LAN ports, with load balancing across links. Downstream, pair it with a 10G-uplink switch such as the Omada SG3428X or the PoE-equipped SG3428XMP so the backbone keeps pace.
It ships rack-ready with a rackmount kit and RJ45 console cord in the box. For smaller sites that do not need 10G, the ER7206 covers the same VPN duties at gigabit speeds.
Key features
- 10G at the edge — 1 × 10G SFP+ WAN and 1 × 10G SFP+ WAN/LAN for full-fat fibre and backbone links.
- Serious processing power — quad-core Cortex-A72 at 2.2 GHz with 4 GB DDR4 for high concurrent session counts.
- Comprehensive VPN — SSL VPN, OpenVPN, IPSec, PPTP, L2TP and L2TP over IPSec for flexible site-to-site and remote access.
- Up to 2.3 million concurrent connections keeps busy, device-dense networks flowing.
- Multi-WAN load balancing plus bandwidth control and access control.
- 4 kV lightning protection to safeguard the installation.
- Rack-ready — rackmount kit and console cord included.
Works with
- TP-Link Omada SG3428X — L2+ switch with 4 × 10G SFP+ uplinks
- TP-Link Omada SG3428XMP — 10G-uplink PoE switch for AP estates
- TP-Link Omada OC300 — hardware controller for larger Omada deployments
- All routers
- All networking
Frequently asked questions
Does it need an Omada controller?
No — it routes perfectly well on its own. Adding an Omada controller such as the OC300 brings the router, switches and access points under one management console, which pays off on multi-device and multi-site estates.
Which VPN protocols are supported?
SSL VPN, OpenVPN, IPSec, PPTP, L2TP and L2TP over IPSec, so it can terminate tunnels for practically any mix of remote workers and branch sites.
Is it rack-mountable?
Yes. A rackmount kit is included, along with a power cord, RJ45 console cord and quick installation guide.
Does it provide PoE?
No — this is a wired router without PoE output. Power access points from a PoE switch such as the SG3428XMP, or choose the ER7212PC if you want routing and PoE in a single box.
Specifying a 10G head-end? Call 0333 242 1314 or email sales@clisecure.com and we will size the switches, access points and PoE budget before you order.
Interfaces
| 10G ports | 1 × 10G SFP+ WAN, 1 × 10G SFP+ WAN/LAN |
|---|---|
| Gigabit ports | 1 × Gigabit SFP WAN/LAN, 8 × Gigabit RJ45 WAN/LAN |
Performance
| CPU | Quad-core Cortex-A72 @ 2.2 GHz |
|---|---|
| Memory | 4 GB DDR4 |
| Concurrent connections | Up to 2,300,000 |
Management & features
| VPN | SSL VPN, OpenVPN, IPSec, PPTP, L2TP, L2TP over IPSec |
|---|---|
| Traffic features | Load balance, bandwidth control, access control |
| Protection | 4 kV lightning protection |
In the box
| Contents | ER8411, power cord, quick installation guide, rackmount kit, RJ45 console cord |
|---|
Product details
| Brand | TP-Link |
|---|---|
| Part number | ER8411 |
UK shipping options are shown at checkout. For timed delivery, project fulfilment or larger trade orders, contact CLI Secure before placing your order.
Customer reviews
Built for B2B buying
From product selection to deployment, this is made for real projects.
Get the hardware, licences and supporting kit you need without chasing multiple suppliers. CLI Secure helps trade buyers confirm fit, stock, delivery and project pricing before checkout.
Complete the basket
Related products for this project
Why choose us
Procurement that feels fast, clear and trade-ready.
Every product page is designed to help you move from shortlist to checkout with fewer unknowns.
Common questions
Product and order FAQs
Can I request trade or bulk pricing?
Yes. For multi-unit, reseller or project orders, contact CLI Secure and our team can review the basket for trade pricing.
How quickly can this be delivered?
Available delivery options are shown at checkout. Many in-stock products support next-day or timed UK delivery.
Can you help confirm compatibility?
Yes. Share the existing setup, model numbers or project requirement and we can help confirm suitable hardware, licences or accessories.
Do you supply renewals and supporting accessories?
CLI Secure supplies hardware, renewals, licences and related accessories across networking, CCTV, VoIP and IT support categories.