We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Small black metal box with five RJ45 ports and one SFP cage on the front

TP-Link

TP-Link ER7206 firewall appliance 1 SFP WAN 1 RJ45 WAN 2 LAN 2 changeable 100 IPsec tunnels 291.6 Mbps

SKU CH-1GK6-YD0H8 MPN ER7206

Gigabit multi-WAN router with two configurable ports and 100 IPsec tunnels at 291.6 Mbps throughput

  • StandardsIEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3z, IEEE 802.3
  • ProtocolsTCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec
  • Speed10/100/1000Mbps
  • SecuritySPI Firewall VPN Passthrough FTP/H.323/PPTP/SIP/IPsec ALG Do
  • WAN Ports1 x Fixed Gigabit SFP WAN Port 1 x Fixed Gigabit RJ45 WAN Po
  • LAN Ports2 x Fixed Gigabit RJ45 LAN Ports 2 x Changeable Gigabit RJ45
  • Connect two ISPs for failover with one SFP and one RJ45 WAN port
  • Reconfigure two ports as extra WAN or LAN to match site layout
  • Encrypt site-to-site traffic through up to 100 IPsec tunnels
  • Push 291.6 Mbps through the IPsec engine for fast encrypted throughput
  • Run fanless from 0 to 40 °C for silent rack or desk mounting

Network appliance for multi-WAN VPN

The TP-Link ER7206 is a Gigabit multi-WAN VPN router with one fixed SFP WAN port, one fixed RJ45 WAN port, two fixed RJ45 LAN ports and two changeable RJ45 WAN/LAN ports. It supports up to 100 IPsec VPN tunnels and delivers 291.6 Mbps IPsec VPN throughput. The unit operates from 0 to 40 °C and stores from -40 to 70 °C.

Verify SFP module and port roles

Confirm that a compatible SFP transceiver is available for the fixed SFP WAN port if fibre connectivity is required. Ensure the two changeable ports are configured for the intended WAN or LAN roles before deployment. Check that existing cabling matches the 10/100/1000 Mbps RJ45 interfaces and that the rack or desktop space accommodates the 8.90" x 5.20" x 1.40" chassis.

Fits standard desktop or rack setups

The appliance connects directly to ISP circuits via the fixed WAN ports and distributes traffic through the fixed and changeable LAN ports. Its SPI firewall, DoS defence and ALG support handle security without extra licences. The 100 IPsec tunnels and 50 PPTP tunnels provide site-to-site and remote access capacity, while local management keeps configuration on-premise.

Highlights

  • Connect two ISPs for failover with one SFP and one RJ45 WAN port
  • Reconfigure two ports as extra WAN or LAN to match site layout
  • Encrypt site-to-site traffic through up to 100 IPsec tunnels
  • Push 291.6 Mbps through the IPsec engine for fast encrypted throughput
  • Run fanless from 0 to 40 °C for silent rack or desk mounting

Specifications

BrandTP-Link
ModelER7206
StandardsIEEE 802.3, IEEE802.3u, IEEE802.3ab, IEEE 802.3z, IEEE 802.3x, IEEE 802.1q
ProtocolsTCP/IP, DHCP, ICMP, NAT, PPPoE, NTP, HTTP, HTTPS, DNS, IPSec, PPTP, L2TP, OpenVPN, SNMP
Speed10/100/1000Mbps
SecuritySPI Firewall
VPN Passthrough
FTP/H.323/PPTP/SIP/IPsec ALG
DoS Defence, Ping of Death
Local Management
WAN Ports1 x Fixed Gigabit SFP WAN Port
1 x Fixed Gigabit RJ45 WAN Port
LAN Ports2 x Fixed Gigabit RJ45 LAN Ports
2 x Changeable Gigabit RJ45 WAN/LAN Ports
LEDsPWR, SYS, SFP WAN, WAN (Speed, Link/Act), LAN (Speed, Link/Act)
VPNIPsec VPN
- 100 IPSec VPN Tunnels
- LAN-to-LAN, Client-to-LAN
- Main, Aggressive Negotiation Mode
- DES, 3DES, AES128, AES192, AES256 Encryption Algorithm
- IKEv1/v2*
- MD5, SHA1 Authentication Algorithm
- NAT Traversal (NAT-T)
- Dead Peer Detection (DPD)
- Perfect Forward Secrecy (PFS)
PPTP VPN
- PPTP VPN Server
- 10 PPTP VPN Clients
- 50 Tunnels
- PPTP with MPPE Encryption
L2TP VPN
- L2TP VPN Server
- 10 L2TP VPN Clients
- 50 Tunnels
- L2TP over IPSec
OpenVPN
- OpenVPN Server
- 10 OpenVPN Clients
- 50 OpenVPN Tunnels
Throughput291.6 Mbps IPsec VPN Throughput
TemperatureOperating Temperature: 0 - 40 ? (32 - 104 ?);
Storage Temperature: -40 - 70 ? (-40 - 158 ?)
HumidityOperating Humidity: 10 - 90% RH non-condensing
Storage Humidity: 5 - 90% RH non-condensing
Dimensions8.90" x 5.20" x 1.40"
Shipping weight1.81 kg
Package size279 × 203 × 127 mm

Questions about this item

Does the ER7206 include an SFP transceiver for the SFP WAN port, or must I buy one separately?

The unit ships with the fixed SFP WAN port, two fixed RJ45 WAN/LAN ports and two changeable RJ45 ports; an SFP transceiver is not included and must be purchased separately.

How do I decide between using the two changeable ports as extra WAN links or as additional LAN ports?

Each changeable port can be configured independently as WAN or LAN in the management interface, so you can mix one WAN and one LAN or set both to the same role depending on your multi-WAN or port-density needs.

What does the 291.6 Mbps IPsec VPN throughput figure mean for real-world encrypted traffic?

It is the maximum sustained IPsec throughput the appliance can process under test conditions; actual performance will vary with encryption algorithm, packet size and concurrent tunnel count.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.