TP-LINK TL-ER3210G Gigabit Enterprise VPN Router 5 ports with machine capacity 300 manage 50 APs

Brand: TP-LINK
Model: TL-ER3210G
Dimensions: 227mm x 440mm x 44mm

Dual-core CPU, 256MB DDRIII high-speed memory, powerful performance 5 Gigabit Ethernet ports, 1WAN+4LAN IPSec/PPTP/L2TP VPN, remote communication is more secure Web authentication, SMS authentication, PPPoE server Internet behavior management (mobile APP control/desktop application control/website filtering/behavior audit) Built-in AC function, unified management of TP-LINK enterprise AP Internal and external network ARP protection and common attack protection Intelligent IP bandwidth management and connection limit New hardware architecture, high-speed data forwarding Using a brand-new hardware architecture, a professional dual-core 64-bit network dedicated processor, a single-core frequency of up to 1GHz, and 256MB DDR3 high-speed memory, the data packet processing capability has been

Product Features


  • Dual-core CPU, 256MB DDRIII high-speed memory, powerful performance
  • 5 Gigabit Ethernet ports, 1WAN+4LAN
  • IPSec/PPTP/L2TP VPN, remote communication is more secure
  • Web authentication, SMS authentication, PPPoE server
  • Internet behavior management (mobile APP control/desktop application control/website filtering/behavior audit)
  • Built-in AC function, unified management of TP-LINK enterprise AP
  • Internal and external network ARP protection and common attack protection
  • Intelligent IP bandwidth management and connection limit

New hardware architecture, high-speed data forwarding

Using a brand-new hardware architecture, a professional dual-core 64-bit network dedicated processor, a single-core frequency of up to 1GHz, and 256MB DDR3 high-speed memory, the data packet processing capability has been greatly improved. In the actual environment, the typical belt machine volume is about 300 units.

Multiple VPNs to ensure the security of remote communication

Support IPSec VPN, allow up to 50 tunnels to be established, encrypt confidential data of enterprises and branches, and ensure data security;

It supports PPTP VPN and L2TP VPN server/client mode, and allows up to 32 tunnels (shared) to be established, which is convenient for traveling employees and mobile office workers to remotely access the internal server of the enterprise and realize remote office easily.

Internet behavior management, standardize employee network use

Built-in database of common Internet applications, one-key control of various desktop and mobile Internet applications, including social software / video software / music software / shopping and leisure software / news information software / P2P software / financial software / online games / application store / Basic applications and other categories;

Built-in database of hundreds of URLs in dozens of categories, which can limit employees' access to corresponding websites with one click;

Support prohibiting webpage submission, restrict employees from logging in to various web-based forums, Weibo, emails, etc. to post information, to avoid leakage of sensitive corporate data;

Supports file expansion types, which can easily filter various small files embedded in web pages to prevent viruses, Trojans, etc. from intruding into the corporate network through these small files and jeopardizing network security;

Support behavior auditing function, comprehensively record online behaviors, and output audit results in report form.

VLAN (multiple local area network)

Support IEEE 802.1Q VLAN, enterprises can divide the internal network into different network segments isolated from each other according to their needs, reducing the impact of broadcast storms and viruses;

Support VLAN Layer 3 interface, can realize the IP message forwarding across VLAN, and can set DHCP Server, firewall rules, access authentication strategy and other functions based on VLAN.

A variety of authentication methods to control online access and realize advertising and marketing

Support Web authentication, you can push merchant advertising information through the authentication page;

Support SMS authentication, meet real-name authentication requirements, and conduct secondary marketing based on mobile phone number;

Support PPPoE server, which can realize unified dial-up Internet access for intranet users.

Built-in AC function, unified management of TP-LINK enterprise AP

Built-in AC function, both a router and a wireless controller, can uniformly control up to 100 TP-LINK enterprise APs, and easily expand the enterprise wireless network;

It can automatically discover TP-LINK APs in the network, configure and manage APs uniformly, realize AP zero-configuration access, plug-and-play, and support AP status monitoring and upgrades, which is easy to maintain.

Efficient firewall to ensure the security of internal and external networks

ARP double protection

Support IP and MAC address binding to effectively prevent ARP spoofing in the internal/external network; when suffering from ARP spoofing, it can actively send ARP correction information according to the specified frequency to restore the normal state of the network in time.

Attack protection

Supports internal/external network attack protection functions, which can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks.

MAC address filtering

Support the filtering function based on MAC address, effectively block the access of illegal hosts.

Access strategy

It can assign the authority to pass through the router for various network services, ensure the security of the internal and external networks, support access control rules based on user groups and time periods, and achieve more refined management.

Flexible bandwidth control to ensure reasonable utilization of bandwidth

Intelligent two-way IP bandwidth control

It supports the flexible strategy of enabling bandwidth control based on bandwidth utilization, and can perform two-way bandwidth control for each host (IP) in the network, effectively suppressing excessive use of bandwidth by P2P applications such as BT and Thunder, and ensuring smooth network at all times.

Connection limit

Provide IP-based connection number limit function, which can limit the number of connections of each computer, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth progress of games, Internet access, chat, video and voice.

More useful features

Support DDNS and virtual server function, easily build intranet server and private website;

Support UPnP and ALG service functions to ensure that special network applications smoothly penetrate NAT;

The new all-Chinese WEB management interface makes management and maintenance more convenient and quick;

Provide log list function to record the network running status in detail;

Support Ping, Tracert and other fault detection tools to help quickly find and eliminate network faults.






Technical Specifications

Property DescriptionProperty Value
port1 10/100/1000M RJ45 WAN port 4 10/100/1000M RJ45 LAN port 1 Console port
processorDual-core MIPS 64-bit dedicated network processor, single-core clocked at 1GHz
RAMDDRIII 256MB
FLASH32MB
Indicator lightPer port: WAN/LAN, Speed Per device: PWR, SYS
Dimensions440(w)x227(D)x44(H) mm
Input power100~240V AC,50/60Hz
Cooling methodNatural cooling
Use environmentOperating temperature: 0°C~40°C, operating humidity: 10%~90%RH non-condensing Storage temperature: -40°C~70°C, storage humidity: 5%~90%RH non-condensing
Typical belt loadAround 300
Network protocolTCP/IP、DHCP、ICMP、NAT、PPPoE、SNTP、HTTP、DNS、H.323、SIP、DDNS
basic settingsInterface setting DHCP server MAC address setting VLAN (multi-local area network) switch setting DNS proxy
AP managementAP settings, manage up to 50 TP-LINK AP wireless network settings wireless client status
Transmission controlOne-to-one NAT, NAPT, virtual server, ALG, NAT-DMZ IP bandwidth control, connection number control, flow/connection number monitoring Large concurrent connections: 100,000 policy routing, static routing, system routing
Safety managementSupport ARP scanning, ARP list, GARP Support IP/MAC binding Anti-DoS type, scanning type, suspicious packet type and other common attack behaviors Support setting MAC address filtering black and white list Access control list
Behavior controlSocial software/Video software/Music software/Shopping and leisure software/News software/P2P software/Financial software/Online games/App store/Basic applications and other common applications limit QQ black and white list URL group filtering, URL filtering web security (prohibited Web page submission, filtering various file types in the web page) Behavior audit application signature database update
VPNIPSec VPN (50 tunnels) PPTP/L2TP VPN (32 tunnels)
Access authenticationWeb authentication, support local authentication, Radius authentication, one-click Internet access, meet a variety of authentication needs SMS authentication, meet real-name authentication requirements, and can conduct secondary marketing based on mobile phone No authentication strategy
system servicePPPoE server with 128 dynamic DNS (Peanut Shell, Comay, 3322) UPnP service
Management and maintenanceChinese Web network management, remote management configuration backup and import configuration system software upgrade interface traffic statistics, IP traffic statistics ping, tracert diagnostic tool time setting system log