TL-ER8920T is a new generation of high-performance 10 Gigabit enterprise router products launched by TP-LINK, which is mainly positioned in enterprises, government agencies, parks, chain hotels and other network environments that require high-speed Internet access, Internet authentication, VPN remote secure communication and Internet behavior management.

TL-ER8920T uses a 16-core 64-bit network-specific processor, with a single-core frequency of up to 1.5GHz, with 8GB DDRIV high-speed memory, with powerful network data forwarding capabilities, and supports Web authentication, IPSec/PPTP/L2TP VPN, Internet behavior management, firewall, traffic control and other rich features, suitable for building a secure, efficient and easy-to-manage full gigabit enterprise network.

• 16-core 64-bit network-specific processor, single-core frequency 1.5GHz
• 8GB DDRIV high-speed memory
• 2 10 Gigabit SFP+ fiber expansion ports, 8 10/100/1000M RJ45 electrical ports, and the port type can be customized
• Access Authentication (Web Authentication, SMS Authentication, PPPoE Server)
• Multiple VPNs (IPSec/PPTP/L2TP VPN)
• Online behavior management (app restrictions/website filtering/web security)
• Intranet and intranet ARP protection and common attack protection
• Intelligent IP bandwidth management and limit the number of connections

New hardware architecture, high-speed data forwarding

It adopts a new hardware architecture, a professional 16-core 64-bit network-specific processor, 8GB DDRIV high-speed memory, and greatly improves the packet processing ability, effectively meeting the data forwarding requirements in high-bandwidth environments. In the actual environment, the maximum number of units is about 8,000 units.

It provides 2 10 Gigabit SFP+ fiber module expansion ports and 8 10/100/1000M RJ45 ports, which can freely customize the port type according to needs, and can be bound to a variety of logical interfaces to adapt to more complex networking environments.

The built-in AC function can be used to manage TP-LINK enterprise APs in a unified manner

The built-in AC function is both a router and a wireless controller, which can control up to 1,000 TP-LINK enterprise APs in a unified manner, making it easy to expand enterprise wireless networks.

It can automatically discover the TP-LINK AP in the network, and perform unified configuration and management of the AP, realize zero-configuration AP access, plug and play, and support AP status monitoring and upgrade, which is easy to maintain.

A variety of authentication methods, control the Internet access, and realize advertising and marketing

Support web authentication, and push merchant advertising information through the authentication page;

Support SMS authentication, meet the requirements of real-name authentication, and can carry out secondary marketing based on mobile phone number;

It supports PPPoE servers, which can realize unified dial-up Internet access for intranet users.

Secure and reliable IPSec/PPTP/L2TP VPN

It provides standard IPSec VPN functions, supporting data integrity verification, data source authentication, anti-packet replay, and data encryption functions (DES, 3DES, AES128, AES192, AES256 and other encryption algorithms). It supports IKE and manual mode to establish VPN connections, and allows domestic users to access the network by dynamic IP, PPPoE dial-up, etc., and allows VPN connections to be configured through domain names. A maximum of 400 IPSec VPN tunnels can be established to meet the needs of remote and secure communication between the enterprise headquarters and branches, and between the enterprise and business partners/suppliers.

PPTP/L2TP server and client functions are supported, and up to 400 PPTP/L2TP VPN tunnels can be established. Users can flexibly choose to use server and client functions according to actual needs: when deployed in the enterprise headquarters, the PPTP/L2TP server function is generally used to meet the needs of employees on business trips or branches to remotely and securely access the company's network; If you want to establish a VPN connection with a remote PPTP/L2TP server, you need to use the PPTP/L2TP client function.

Comprehensive and effective online behavior management

Built-in database of common Internet applications, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news and information software/P2P software/financial software/online games/app stores/basic applications, etc.;

Built-in database of hundreds of URLs in more than a dozen categories, which can restrict employees' access to the corresponding website with one click;

Support prohibiting web submission, restricting employees from logging in to various web-based forums, microblogs, mailboxes, etc. to publish information, and avoid the leakage of sensitive data of enterprises;

It supports the expansion type of filtering files, which can easily filter all kinds of small files embedded in web pages to prevent viruses and Trojan horses from invading the enterprise network and endangering network security through these small files.

It supports the behavior audit function, comprehensively records online behavior, and outputs audit results in reports.

Rich security policies

Support access control policies, and set firewall rules based on network protocol type, port number, source/destination IP address, and time period to control internal and external network communication security;

It provides automatic scanning of IP and MAC addresses and one-click binding functions, which can bind the IP and MAC address information of LAN port (intranet) and WAN port (extranet) hosts at the same time, effectively preventing intranet/extranet ARP spoofing and avoiding network disconnection caused by ARP spoofing. In the event of ARP spoofing, you can send ARP correction messages at a specified frequency to restore the normal state of the network in a timely manner and effectively reduce the degree of harm.

Supports intranet/extranet attack protection and can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks, such as TCP syn floods, UDP floods, ICMP floods, WinNuke attacks, fragment packet attacks, WAN port pings, TCP scan (stealth FIN/Xmas/Null), and IP spoofing.

MAC address-based filtering is supported to effectively block the access of unauthorized hosts.

Flexible flow control

It supports the intelligent IP bandwidth control function, flexibly enables the bandwidth control policy according to the actual bandwidth utilization, and can carry out two-way bandwidth control for each host (IP) in the network, effectively inhibiting the excessive bandwidth occupation of P2P applications such as BT and Thunderbolt, avoiding the problem of online game cards and slow Internet speed, and ensuring that the network is smooth at all times.

It provides an IP-based connection restriction function, which can limit the number of connections occupied by each computer, make reasonable use of the limited NAT connection resources, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth operation of games, Internet access, chat, video and voice, etc.

It supports multiple load balancing strategies, such as intelligent balancing, special application traffic selection, and ISP traffic selection, to effectively improve network service quality, make full use of interface bandwidth, improve network experience, and protect user investment.

Convenient and practical management and maintenance

Adopting the full Chinese web interface operation style, all functions can be configured through the graphical interface, and each configuration provides necessary help and explanation information to facilitate the user to configure the router.

Provide log list and log server functions, detailed log records to supervise network operation, help quickly find network anomalies, locate the source of problems, and eliminate network faults in time. Provides a graphical interface to monitor key router resources such as CPU utilization in real time, and detect potential dangers and attacks in a timely manner.

Support local LAN or Internet remote management router, convenient chain operation and remote assistance; It supports a variety of fault detection tools such as ping detection and traceroute detection, and can back up and import router configuration files for daily maintenance and management.

Hardware specifications

Software Features