10 Gigabit Enterprise Router

TL-ER8820T

TL-ER8820T is a new generation of high-performance 10-Gigabit enterprise router products launched by TP-LINK. It is mainly targeted at enterprises, institutions, parks, chain hotels, etc. that require high-speed Internet access, authenticated Internet access, VPN remote secure communication and Internet behavior management Network environment.

TL-ER8820T uses eight-core 64-bit network dedicated processor, single-core frequency up to 1.2GHz, with 2GB DDRIV high-speed memory, with strong network data forwarding capabilities, and supports Web authentication, WeChat authentication, IPSec/PPTP/L2TP VPN , Internet behavior management, firewall, flow control and other rich features, suitable for building a safe, efficient and easy-to-manage full Gigabit enterprise network.

New hardware architecture, high-speed data forwarding

Using a brand-new hardware architecture, a professional eight-core 64-bit network dedicated processor, and 2GB DDRIV high-speed memory, the data packet processing capability has been greatly improved, effectively meeting the data forwarding requirements in a high-bandwidth environment. In the actual environment, the typical belt machine volume is about 8,000.

Provide 2 10 Gigabit SFP+ optical fiber module expansion ports, 8 10/100/1000M RJ45 ports, you can freely customize the port type according to your needs, and can bind a variety of logical interfaces to adapt to more complex networking environments.

Built-in AC function, unified management of TP-LINK enterprise AP

Built-in AC function, both a router and a wireless controller, can uniformly control up to 500 TP-LINK enterprise APs, and easily expand the enterprise wireless network;

It can automatically discover TP-LINK APs in the network, configure and manage APs uniformly, realize AP zero-configuration access, plug-and-play, and support AP status monitoring and upgrades, which is easy to maintain.

Web authentication

No client software is required to achieve authentication to the network, reducing network maintenance workload;

Support local authentication, Radius authentication and one-click Internet access to meet multiple authentication requirements;

The authentication jump page can be customized to realize advertisement push.

Xinlian Wi-Fi

Customers do not need to enter complex passwords, and can realize one-click networking through the letter client;

Support Portal interface jump, and can push customized pictures to users;

Support the setting of online duration and flexibly control the user authentication period.

Comprehensive and effective online behavior management

Built-in common Internet application database, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news software/P2P software/financial software/online games/application stores Basic applications and other categories;

Built-in dozens of categories and hundreds of web site databases, which can restrict employees'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' access to corresponding websites with one click;

Support prohibiting webpage submission, restrict employees from logging on to various web-based forums, Weibo, emails, etc. to post information, to avoid leakage of sensitive corporate data;

Support the expanded type of filtering files, which can easily filter all kinds of small files embedded in web pages, avoid viruses, Trojan horses, etc. from invading the corporate network through these small files and endangering network security;

Support behavior audit function, comprehensively record online behavior, and report audit results.

Rich security strategy

Support access control strategy, can set firewall rules based on network protocol type, port number, source/destination IP address, time period, and control the security of internal and external network communication;

Provides automatic scanning of IP and MAC addresses and one-key binding functions, which can bind LAN ports at the same time（Intranet）, WAN port（Extranet）The host''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''s IP and MAC address information can effectively prevent internal/external network ARP spoofing and avoid network disconnection problems caused by ARP spoofing; in the event of ARP spoofing, it can actively send ARP correction information according to the specified frequency to restore the normal state of the network in time , Effectively reduce the degree of harm.

Support internal/external network attack protection function, which can effectively prevent various common DoS attacks, scanning attacks, suspicious packet attacks, such as: TCP Syn Flood, UDP Flood, ICMP Flood, WinNuke attack, fragmented packet attack, WAN Ping, TCP Scan（Stealth FIN/Xmas/Null）, IP spoofing, etc.

Support MAC address-based filtering function, effectively blocking the access of illegal hosts.

Flexible flow control

Support intelligent IP bandwidth control function, flexibly enable bandwidth control strategy according to actual bandwidth utilization, which can be targeted at each host in the network（IP）Two-way bandwidth control is implemented to effectively suppress excessive bandwidth usage by P2P applications such as BT and Xunlei, avoiding the problems of network game cards and slow Internet access speeds, and ensuring smooth network at all times.

Provides IP-based connection limit function, which can limit the number of connections occupied by each computer, make reasonable use of limited NAT connection resources, prevent a few users from occupying a large number of connections, and ensure the smoothness of games, Internet, chat, video and voice, etc. get on.

Supports multiple load balancing strategies such as intelligent balancing, routing for special applications, routing for ISPs, and so on. Multi-pronged approach can effectively improve network service quality, while making full use of interface bandwidth to enhance network experience and protect user investment.

Convenient and practical management and maintenance

The operation style of the entire Chinese Web interface is adopted. All functions can be configured through a graphical interface. Each configuration provides necessary help information to facilitate the user to configure the router.

Provide log list and log server functions, detailed log records to monitor network operation, help quickly find network abnormalities, locate the source of the problem and eliminate network faults in time; provide a graphical interface, real-time monitoring of CPU utilization and other key internal router resources, and discover potential in time Of various dangers and attacks.

Support local LAN or Internet remote management router, convenient for chain operation and remote assistance; support Ping detection, route tracking detection and other fault detection tools, and can backup and import router configuration files to facilitate daily maintenance and management.

port	2 10G SFP+ optical fiber module expansion ports 8 10/100/1000M RJ45 ports 1 console port
processor	Eight-core 64-bit MIPS network dedicated processor, single-core clocked at 1.2GHz
RAM	DDRIV 2GB
FLASH	32MB NOR+128MB NAND
Indicator light	Each port: Link/Act, Speed Per device: PWR, SYS, RPS, FAN
Dimensions	440(w)x337(D)x44(H) mm
Input power	100～240V AC,50/60Hz
Cooling method	fan
Use environment	Working temperature: 0℃～40℃, working humidity: 10%～90%RH non-condensing Storage temperature: -40℃～70℃, storage humidity: 5%～90%RH non-condensing
Typical belt capacity	Around 8000

Software function