Dual-core multi-WAN port gigabit enterprise VPN router

TL-ER2220G
 
Dual-core CPU, 256MB DDRIII high-speed memory, strong performance 
5 Gigabit Ethernet ports and 1 Gigabit SFP port, 1WAN+3WAN/LAN+2LAN 
IPSec/PPTP/L2TP VPN, remote communication is more secure 
Web authentication, SMS authentication, PPPoE server 
Internet behavior management（Mobile APP control/desktop application control/website filtering/behavior audit） 
Built-in AC function, unified management of TP-LINK enterprise AP 
Load balancing and line backup 
ARP protection for internal and external networks and common attack protection 
Intelligent IP bandwidth management and connection limit 

New hardware architecture, high-speed data forwarding 

Using a brand-new hardware architecture, professional dual-core ARM processor, single-core frequency up to 1GHz, with 256MB DDRIII high-speed memory, data packet processing capabilities have been greatly improved. The typical belt machine volume is 150 to 300 units.  

Multiple VPNs to ensure the security of remote communication 

Support IPSec VPN, allow up to 50 tunnels to be established, encrypt confidential data of enterprises and branches, and ensure data security; 

Support PPTP VPN and L2TP VPN server/client mode, allowing up to 32 tunnels to be established（Share）, It is convenient for traveling employees and mobile office workers to remotely access the internal server of the enterprise and realize remote office easily.  

Online behavior management, regulate employee network usage 

Built-in common Internet application database, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news software/P2P software/financial software/online games/application stores/ Basic applications and other categories; 

Built-in dozens of categories and hundreds of URL databases, which can restrict employees'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' access to corresponding websites with one click; 

Support prohibiting webpage submission, restrict employees from logging in to various web-based forums, Weibo, emails, etc. to post information, to avoid leakage of sensitive corporate data; 

Support the expanded type of filtering files, which can easily filter all kinds of small files embedded in the webpage, to prevent viruses, Trojan horses, etc. from invading the corporate network through these small files and endangering network security; 

Support behavior audit function, comprehensively record online behavior, and report audit results.  

VLAN（Multiple LAN） 

Support IEEE 802.1Q VLAN, enterprises can divide the internal network into different network segments isolated from each other according to their needs, reducing the impact of broadcast storms and viruses; 

Support VLAN layer three interface, can realize the IP message forwarding across VLAN, and can set DHCP Server, firewall rules, access authentication strategy and other functions based on VLAN.  

A variety of authentication methods, control the Internet access rights, realize advertising and marketing 

Support Web authentication, and push business advertisement information through the authentication page; 

Support SMS authentication, meet real-name authentication requirements, and perform secondary marketing based on mobile phone numbers; 

Support PPPoE server, which can realize unified dial-up Internet access for intranet users.  

Built-in AC function, can manage TP-LINK enterprise AP 

Built-in AC function, which is both a router and a wireless controller, can uniformly control up to 50 TP-LINK enterprise APs, and easily expand the enterprise wireless network; 

It can automatically discover TP-LINK APs in the network, and perform unified configuration and management of APs, realize AP zero-configuration access, plug-and-play, and support AP status monitoring and upgrades, and easy maintenance.  

Efficient firewall to ensure the safety of internal and external networks 

Support IP and MAC address binding, effectively prevent internal/external network ARP spoofing; in case of ARP spoofing, it can actively send ARP correction information according to the specified frequency to restore the normal state of the network in time; 

Support internal/external network attack protection function, which can effectively prevent various common DoS attacks, scanning attacks, suspicious packet attacks; 

Support MAC address-based filtering function, effectively blocking the access of illegal hosts; 

It can assign router permissions to various network services to ensure the security of internal and external networks, support access control rules based on user groups and time periods, and achieve more refined management.  

Flexible bandwidth control to ensure reasonable use of bandwidth 

Supports flexible strategies that enable bandwidth control based on bandwidth utilization, which can target each host in the network（IP）Carry out two-way bandwidth control to effectively suppress excessive bandwidth usage by P2P applications such as BT and Xunlei, and ensure the smooth flow of the network at all times; 

Provides IP-based connection limit function, which can limit the number of connections occupied by each computer, prevent a few users from occupying a large number of connections, and ensure the smooth progress of games, Internet, chat, video and voice.  

Multi-WAN port load balancing and line backup 

Provides 1 fixed WAN port, 2 fixed LAN ports and 3 WAN/LAN configurable ports. Users can flexibly configure the number of WAN ports according to actual network requirements to meet the networking requirements of multiple line access; 

Supports rich traffic balancing functions such as intelligent routing, routing for special applications, routing for ISPs, etc., which can achieve bandwidth overlay, make full use of bandwidth resources, and protect user investment; 

Support WAN port backup function, can automatically switch to the backup line when the main line fails to ensure the normal operation of the network.  

More useful functions

Internal/external network two-way port monitoring to meet the data monitoring needs of the public security department; 

Support DDNS and virtual server function, easily build intranet server and private website; 

Support UPnP and ALG service functions to ensure smooth penetration of NAT by special network applications; 

The new all-Chinese WEB management interface makes management and maintenance more convenient and faster; 

Provide log list function to record network operation status in detail; 

Support multiple fault detection tools such as Ping and Tracert to help quickly find and eliminate network faults

Hardware specifications

Port • 1 100/1000M SFP WAN port
•3 10/100/1000M RJ45 WAN/LAN configurable ports
• 2 10/100/1000M RJ45 LAN ports
 
Processor • Dual-core ARM processor, single-core clocked at 1GHz
 
RAM •DDRIII 256MB
 
FLASH •32MB
 
Indicator •Each port: Link/Act
•Per device: SYS
 
Dimensions •294mm * 179mm * 44mm
 
Input power •100-240V～ 50/60Hz
 
Cooling method • natural cooling
 
Use environment • working temperature: 0℃～40℃, working humidity: 10%～90%RH non-condensing
• Storage temperature: -40℃～70℃, storage humidity: 5%～90%RH non-condensing
 
Typical belt machine volume •150～300 sets
 

Software function

Network protocol • TCP/IP, DHCP, ICMP, NAT, PPPoE, SNTP, HTTP, DNS, H.323, SIP, DDNS
 
Basic Settings •Interface Settings
•DHCP server
•MAC address settings
•VLAN（Multiple LAN）
•Switch settings
•DNS proxy
 
AP management •AP settings, up to 50 TP-LINK APs can be managed
• Wireless network settings
•Wireless client status
 
Transmission control • one-to-one NAT, NAPT, virtual server, ALG, NAT-DMZ
• IP bandwidth control, connection number control, flow/connection number monitoring
•Maximum number of concurrent connections: 100000
• Smart balance, ISP routing, special application routing, online detection, line backup
•Policy routing, static routing
 
Security management • support ARP scanning, ARP list, GARP
• Support IP/MAC binding
• Anti-DoS, scanning, suspicious packet and other common attacks
• Support setting MAC address filtering black and white list
•Access Control List
 
Behavior control • social software / video software / music software / shopping and leisure software / news software / P2P software / financial software / online games / application stores / basic applications and other common application restrictions
•QQ Black and White List
• URL group filtering, URL filtering
•Web Security（Prohibit web page submission, filter various file types in web pages）
• Behavior Audit
• Application feature library update
 
VPN •IPSec VPN（50 tunnels）
•PPTP/L2TP VPN（32 tunnels）
 
Access authentication •Web authentication, supports local authentication, Radius authentication, and one-click Internet access to meet multiple authentication requirements
•SMS authentication, meeting real-name authentication requirements, and secondary marketing based on mobile phone number
• Authentication-free policy
 
System service •PPPoE server, with 128 machines
•Dynamic DNS（Peanut shell, Kemai, 3322)
•UPnP service
 
Management and maintenance • Chinese Web network management, remote management
•Configuration backup and import configuration
•System software upgrade
•Interface traffic statistics, IP traffic statistics
•ping, tracert diagnostic tool
•Time setting
•System log
 
.