We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Small black metal box with five RJ45 ports and one SFP cage on the front

TP-Link

TP-Link ER7206 firewall appliance 1 SFP WAN 1 RJ45 WAN 2 LAN 2 changeable 100 IPsec tunnels 291.6 Mbps

SKU CH-1GK6-YD0H8 MPN ER7206

Gigabit multi-WAN router with two configurable ports and 100 IPsec tunnels at 291.6 Mbps throughput

  • Rated speed10/100/1000 Mbit/s
  • WAN interfaces1 x Fixed Gigabit SFP WAN Port 1 x Fixed Gigabit RJ45 WAN Po
  • Supported standardsIEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3z, IEEE 802.3
  • Supported protocolsTCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec
  • Security featuresSPI Firewall VPN Passthrough FTP/H.323/PPTP/SIP/IPsec ALG Do
  • Network ports2 x Fixed Gigabit RJ45 LAN Ports 2 x Changeable Gigabit RJ45
  • Connect two ISPs for failover with one SFP and one RJ45 WAN port
  • Reconfigure two ports as extra WAN or LAN to match site layout
  • Encrypt site-to-site traffic through up to 100 IPsec tunnels
  • Push 291.6 Mbps through the IPsec engine for fast encrypted throughput
  • Run fanless from 0 to 40 °C for silent rack or desk mounting

Network appliance for multi-WAN VPN

The TP-Link ER7206 is a Gigabit multi-WAN VPN router with one fixed SFP WAN port, one fixed RJ45 WAN port, two fixed RJ45 LAN ports and two changeable RJ45 WAN/LAN ports. It supports up to 100 IPsec VPN tunnels and delivers 291.6 Mbps IPsec VPN throughput. The unit operates from 0 to 40 °C and stores from -40 to 70 °C.

Verify SFP module and port roles

Confirm that a compatible SFP transceiver is available for the fixed SFP WAN port if fibre connectivity is required. Ensure the two changeable ports are configured for the intended WAN or LAN roles before deployment. Check that existing cabling matches the 10/100/1000 Mbps RJ45 interfaces and that the rack or desktop space accommodates the 8.90" x 5.20" x 1.40" chassis.

Fits standard desktop or rack setups

The appliance connects directly to ISP circuits via the fixed WAN ports and distributes traffic through the fixed and changeable LAN ports. Its SPI firewall, DoS defence and ALG support handle security without extra licences. The 100 IPsec tunnels and 50 PPTP tunnels provide site-to-site and remote access capacity, while local management keeps configuration on-premise.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $109.99
Cheaper than about 94% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameTP-Link
Model nameER7206
Performance
Rated speed10/100/1000 Mbit/s
Data throughput291.6 Mbit/s IPsec VPN Throughput
Connectivity
Supported standardsIEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3z, IEEE 802.3x, IEEE 802.1q
Supported protocolsTCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP
Ports & slots
WAN interfaces1 x Fixed Gigabit SFP WAN Port
1 x Fixed Gigabit RJ45 WAN Port
Network ports2 x Fixed Gigabit RJ45 LAN Ports
2 x Changeable Gigabit RJ45 WAN/LAN Ports
Size & build
Product dimensions8.9 in × 5.2 in × 1.4 in
Shipping weight1.81 kg
Package size279 × 203 × 127 mm
Environment & compliance
Temperature rangeOperating Temperature: 0–40 ? (32–104 ?);
Storage Temperature: -40–70 ? (-40–158 ?)
Humidity rangeOperating Humidity: 10–90% RH non-condensing
Storage Humidity: 5–90% RH non-condensing
More details
Security featuresSPI Firewall
VPN Passthrough
FTP/H.323/PPTP/SIP/IPsec ALG
DoS Defence, Ping of Death
Local Management
Indicator lightsPWR, SYS, SFP WAN, WAN (Speed, Link/Act), LAN (Speed, Link/Act)

Questions about this item

Does the ER7206 include an SFP transceiver for the SFP WAN port, or must I buy one separately?

The unit ships with the fixed SFP WAN port, two fixed RJ45 WAN/LAN ports and two changeable RJ45 ports; an SFP transceiver is not included and must be purchased separately.

How do I decide between using the two changeable ports as extra WAN links or as additional LAN ports?

Each changeable port can be configured independently as WAN or LAN in the management interface, so you can mix one WAN and one LAN or set both to the same role depending on your multi-WAN or port-density needs.

What does the 291.6 Mbps IPsec VPN throughput figure mean for real-world encrypted traffic?

It is the maximum sustained IPsec throughput the appliance can process under test conditions; actual performance will vary with encryption algorithm, packet size and concurrent tunnel count.

More in Firewall Appliances & VPN Gateways

Similar items