The TL-ER6020 SafeStream Gigabit Dual-WAN VPN router from TP-LINK possesses excellent data processing capabilities and multiple powerful functions including IPsec/PPTP/L2TP VPN, load balance, access control, IM/P2P Blocking, Dos defense, bandwidth control, session limit, PPPoE server and so on, which consumedly meet the needs of small and medium enterprises, hotels and communities with large volumes of users demanding an efficient and easy-to-manage network with high security.

• Up to 50 IPsec VPN tunnels, 50 Mbps IPsec VPN throughput
• IPsec, PPTP, L2TP, L2TP over IPsec
• IPsec NAT Traversal (NAT-T)
• DES, 3DES, AES128, AES192, AES256 encryption
• MD5, SHA1 authentication
• Manual, IKE key management mode
• LAN-to-LAN, client-to-LAN IPsec VPN
• PPTP/L2TP VPN server/client
• Hardware DMZ port
• One-to-one NAT
• FTP/H. 323/SIP/IPsec/PPTP ALG
• IM/P2P application blocking
• URL/keywords filtering
• Web content filtering (Java, ActiveX, cookies)
• ARP inspection
• DoS/DDoS defense
• Intelligent load balance
• Policy routing
• Link backup (timing, failover)
• IP-based bandwidth control
• IP-based session limit
• Port VLAN, port mirror
• Static routing, RIP v1/v2
• PPPoE server

• High VPN performance
  The TL-ER6020 supports multiple VPN protocols including IPsec, PPTP and L2TP in Client/Server mode and can handle pass-through traffic as well. It also features a built-in hardware-based VPN engine allowing the router to support and manage up to 50 LAN-to-LAN/Client-to-LAN IPsec VPN connections. Advanced VPN features include: DES/3DES/AES128/AES192/AES256 encryption, MD5/SHA1 authentication, manual/IKE key management, and main/aggressive negotiation modes.
• Abundant security features
  For defense against external threats, TL-ER6020 features an automatic protection to detect and block Denial of service (Dos) attacks such as TCP/UDP/ICMP Flooding, TCP scanning, ping of death and other related threats. Moreover, this router offers a hardware DMZ port, which allows you to setup public servers without exposing your internal network, to avoid attacks from external threats. For better management of the internal network, TL-ER6020 allows administrators to set rules to block specific web sites and IM/P2P applications with just one-click, and restrict staff to use specific services such as FTP, HTTP and SMTP.
• Optimizing bandwidth usage
  The TL-ER6020 features two WAN ports, allowing the router to satisfy various Internet access requirements through one device. The intelligent load balancing function can distribute data streams according to the bandwidth proportion of every WAN port to raise the utilization rate of multi-line broadband. With IP-based bandwidth control and session limit functions, network administrators can flexibly manage network bandwidth to optimize bandwidth usage.
• Safety minded enterprise investments
  Professional lightning protection technology is designed to prevent electrical surges from penetrating the interior of the electrical equipment and is discharged harmlessly into the Earth. This router is designed to prevent lightning up to 4Kv in the well-grounded connection conditions. This feature ensures that networking infrastructure investments remain as safe as possible from one of mother nature's more violent situations.

Main Specifications

Product Description	TP-Link SafeStream TL-ER6020 - router - desktop, rack-mountable
Features	DMZ port, NAT support, ARP support, load balancing, Syslog support, DoS attack prevention, content filtering, ALG support, port mirroring, MAC address filtering, VPN passthrough, URL filtering, DDos attack prevention, Access Control List (ACL) support, IPSec NAT-Traversal (NAT-T), DHCP server, bandwidth control, port triggering, DHCP client
Dimensions (WxDxH)	29.4 cm x 18 cm x 4.4 cm
Power	AC 120/230 V (50/60 Hz)
System Requirements	UNIX, Apple MacOS, Novell NetWare, Linux, Microsoft Windows 98SE/2000/NT/ME/XP/Vista/7
Device Type	Router - 2-port switch (integrated)
Enclosure Type	Desktop, rack-mountable - 1U
Compliant Standards	IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, UPnP
Data Link Protocol	Ethernet, Fast Ethernet, Gigabit Ethernet
Capacity	IPSec VPN tunnels: 50 Concurrent sessions: 30000 PPTP VPN tunnels: 16 Concurrent L2TP VPN tunnels: 16
Network / Transport Protocol	TCP/IP, PPTP, UDP/IP, L2TP, NTP, ICMP/IP, IPSec, PPPoE, SMTP, FTP, DHCP
Remote Management Protocol	Telnet, HTTP, CLI
Routing Protocol	RIP-1, RIP-2, static IP routing, policy-based routing (PBR)
VoIP Protocols	H.323, SIP
Performance	VPN throughput (IPSec): 50 Mbps NAT throughput: 180 Kpps VPN throughput (3DES IPSec): 80 Mbps
WAN Ports Qty	2

Extended Specifications