1WAN+3WAN/LAN+5LAN PoE· AC all-in-one Gigabit VPN router

TL-ER6229GPE-AC is a high-performance PoE· AC integrated gigabit router products, using high-performance network-specific processors, large-capacity high-speed DDRIII memory, support IPSec/PPTP/L2TP VPN, Internet behavior management, AP management, Web authentication, PPPoE server, IP/MAC binding, attack protection and bandwidth management and other rich functional features; The built-in AC (wireless controller) and 8-port standard PoE (Power over Ethernet) functions can manage and supply power to TP-LINK AP products in a unified manner, which is suitable for enterprises, campuses, hotels, and other enterprises to build a secure, efficient, and easy-to-manage network.

New hardware architecture, high-speed data forwarding

It adopts a new hardware architecture, a professional dual-core 64-bit network-specific processor, a single-core frequency of up to 1GHz, and 256MB DDRIII high-speed memory, which greatly improves the data processing capability. In the actual environment, the typical number of machines is about 300 units.

A variety of VPNs to ensure the security of long-distance communication

It supports IPSec VPN, allowing up to 50 tunnels to be established to encrypt the confidential data of enterprises and branches and ensure data security.

It supports PPTP VPN and L2TP VPN server/client modes, allowing up to 32 tunnels (shared) to be established, which is convenient for employees on business trips and mobile workers to remotely access internal servers and easily realize remote work.

Manage online behavior and standardize employees' use of the Internet

Built-in database of common Internet applications, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news and information software/P2P software/financial software/online games/app stores/basic applications, etc.;

Built-in database of hundreds of URLs in more than a dozen categories, which can restrict employees' access to the corresponding website with one click;

Support prohibiting web submission, restricting employees from logging in to various web-based forums, microblogs, mailboxes, etc. to publish information, and avoid the leakage of sensitive data of enterprises;

It supports the expansion type of filtering files, which can easily filter all kinds of small files embedded in web pages to prevent viruses and Trojan horses from invading the enterprise network and endangering network security through these small files.

It supports the behavior audit function, comprehensively records online behavior, and outputs audit results in reports.

VLAN (Multi-LAN)

With IEEE 802.1Q VLAN, enterprises can divide the intranet into different network segments that are isolated from each other as needed to reduce the impact of broadcast storms and viruses.

It supports VLAN Layer 3 interfaces, which can forward IP packets across VLANs, and set functions such as DHCP server, firewall rules, and access authentication policies based on VLANs.

A variety of authentication methods, control the Internet access, and realize advertising and marketing

Support web authentication, and push merchant advertising information through the authentication page;

Support SMS authentication, meet the requirements of real-name authentication, and can carry out secondary marketing based on mobile phone number;

It supports PPPoE servers, which can realize unified dial-up Internet access for intranet users.

The built-in AC+PoE function can manage and supply power to TP-LINK enterprise APs

Built-in AC (wireless controller) function, which is both a router and a wireless controller, can manage up to 100 TP-LINK AP products in a unified manner to build a wireless network;

It can automatically discover the TP-LINK AP in the network, configure and manage the AP in a unified manner, realize zero-configuration AP access, plug and play, and support AP status monitoring, AP upgrade, and scheduled restart, which is easy to maintain.

All LAN ports support standard PoE power supply, in line with the IEEE802.3af/at standard, with a maximum output power of 30W for a single port and a maximum output power of up to 240W for the whole machine. It is suitable for enterprises, campuses, and hotels to build secure, efficient, and easy-to-manage networks.

Efficient firewall to ensure internal and external network security

Support IP and MAC address binding, effectively preventing intranet/extranet ARP spoofing; In the event of ARP spoofing, the system can send ARP correction messages at specified frequencies to restore the normal state of the network in a timely manner.

It supports intranet/extranet attack protection and can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks.

It supports MAC address-based filtering to effectively block the access of unauthorized hosts.

It can assign permissions through routers for various network services to ensure internal and external network security, and supports access control rules based on user groups and time periods to achieve more refined management.

Flexible bandwidth control to ensure reasonable bandwidth utilization

It supports elastic policies that enable bandwidth control based on bandwidth utilization, and can perform bidirectional bandwidth control for each host (IP) in the network, effectively inhibiting P2P applications such as BT and Thunderbolt from over-occupying bandwidth and ensuring smooth network at all times.

It provides an IP-based connection limit function, which can limit the number of connections occupied by each computer, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth operation of games, Internet surfing, chatting, video and voice, etc.

Multi-WAN load balancing and line backup

It provides one 10/100/1000M fixed WAN port, five 10/100/1000M fixed LAN ports and three 10/100/1000M WAN/LAN configurable ports.

It supports rich traffic balancing functions such as intelligent traffic steering, special application traffic steering, and ISP traffic steering, which can realize bandwidth superposition, make full use of bandwidth resources, and protect user investment.

It supports the WAN port backup function, and can automatically switch to the standby line when the main line fails, ensuring the normal operation of the network.

More useful features

Intra/extranet two-way port monitoring to meet the data monitoring needs of relevant departments;

Support DDNS and virtual server functions, easy to build intranet servers and private websites;

Support UPnP and ALG service functions to ensure that special network applications can smoothly penetrate NAT;

Brand new Chinese WEB management interface, management and maintenance are more convenient and fast;

Provide log list function to record network operation status in detail;

Multiple fault detection tools, such as Ping and Tracert, are supported to help you quickly find and troubleshoot network faults.

• Dual-core CPU, 256MB DDRIII high-speed memory, powerful performance
• 9 Gigabit Ethernet ports, 1WAN+3WAN/LAN+5LAN
• The 3 WAN/LAN ports and 5 LAN ports all support standard PoE power supply, with a single port output power of 30W and a total output power of up to 240W
• IPSec/PPTP/L2TP VPN makes long-distance communication more secure
• Web authentication, SMS authentication, and PPPoE servers
• Online behavior management (mobile app control/desktop application control/website filtering/behavior audit)
• The built-in AC function can manage 100 TP-LINK enterprise APs in a unified manner
• Load balancing and line backup
• Intranet and intranet ARP protection and common attack protection
• Intelligent IP bandwidth management and limit the number of connections

Hardware specifications

Port	1 x 10/100/1000M RJ45 WAN port 3 x 10/100/1000M RJ45 WAN/LAN configurable ports 5 x 10/100/1000M RJ45 LAN ports 1 console port
Processor	Dual-core MIPS 64-bit network-specific processor, single-core frequency 1GHz
Memory	DDRIII 256MB
FLASH	32MB
Light	Per port: WAN/LAN, Speed Per device: PWR, SYS
Dimensions	440(w)x227(D)x44(H) mm
Enter the power supply	100～240V AC,50/60Hz
Heat dissipation	fan
Use environment	Operating temperature: 0°C~40°C, Working humidity: 10%~90%RH non-condensing Storage temperature: -40°C~70°C, Storage humidity: 5%~90%RH non-condensing
Typical machine size	About 300 units
PoE performance	Compliant with IEEE 802.3af, IEEE 802.3at standards The maximum output of a single port is 30W The maximum output power of the whole machine is 240W

Software Features

Network protocols	TCP/IP、DHCP、ICMP、NAT、PPPoE、SNTP、HTTP、DNS、H.323、SIP、DDNS
Basic settings	Interface settings DHCP server MAC address settings VLAN (Multi-LAN) Switch settings DNS proxy
AP management	AP SETUP TO MANAGE UP TO 100 TP-LINK APS Wi-Fi settings Wireless client status
Transmission control	One-to-one NAT, NAPT, Virtual Server, ALG, NAT-DMZ IP bandwidth control, connection control, traffic/connection monitoring Number of large concurrent connections: 100,000 Intelligent Equalization, ISP Routing, Special Application Routing, Online Detection, and Line Backup Policy-based routing, static routing
Security management	ARP scanning, ARP list, and GARP are supported IP/MAC binding is supported Defend against a variety of common attacks, such as DoS, scanning, and suspicious packets MAC addresses can be filtered into blacklists and whitelists Access Control Lists
Behavior control	Social software, video software, music software, shopping and leisure software, news software, P2P software, financial software, online games, app stores, basic applications, etc QQ blacklist and whitelist URL group filtering, URL filtering Web security (prohibiting web submissions, filtering various file types in web pages) Behavioral audits Apply a signature database update
VPN	IPSec VPN (50 tunnels) PPTP/L2TP VPN (32 tunnels)
Access authentication	Web authentication supports local authentication, Radius authentication, and one-click Internet access to meet various authentication requirements SMS authentication meets the requirements of real-name authentication and can be used for secondary marketing based on mobile phone numbers Authentication-free policy
System services	PPPoE server with 128 servers Dynamic DNS (Peanut Shell, Kemai, 3322) UPnP services
Manage maintenance	Chinese web management, remote management Configure backup and import configurations System software upgrades Interface traffic statistics and IP traffic statistics Ping and tracert diagnostic tools Time setting System logs

TL-ER6229GPE-AC is a high-performance PoE· AC integrated gigabit router products, using high-performance network-specific processors, large-capacity high-speed DDRIII memory, support IPSec/PPTP/L2TP VPN, Internet behavior management, AP management, Web authentication, PPPoE server, IP/MAC binding, attack protection and bandwidth management and other rich functional features; The built-in AC (wireless controller) and 8-port standard PoE (Power over Ethernet) functions can manage and supply power to TP-LINK AP products in a unified manner, which is suitable for enterprises, campuses, hotels, and other enterprises to build a secure, efficient, and easy-to-manage network.
New hardware architecture, high-speed data forwarding
It adopts a new hardware architecture, a professional dual-core 64-bit network-specific processor, a single-core frequency of up to 1GHz, and 256MB DDRIII high-speed memory, which greatly improves the data processing capability. In the actual environment, the typical number of machines is about 300 units.

A variety of VPNs to ensure the security of long-distance communication
It supports IPSec VPN, allowing up to 50 tunnels to be established to encrypt the confidential data of enterprises and branches and ensure data security.
It supports PPTP VPN and L2TP VPN server/client modes, allowing up to 32 tunnels (shared) to be established, which is convenient for employees on business trips and mobile workers to remotely access internal servers and easily realize remote work.

Manage online behavior and standardize employees' use of the Internet
Built-in database of common Internet applications, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news and information software/P2P software/financial software/online games/app stores/basic applications, etc.;
Built-in database of hundreds of URLs in more than a dozen categories, which can restrict employees' access to the corresponding website with one click;
Support prohibiting web submission, restricting employees from logging in to various web-based forums, microblogs, mailboxes, etc. to publish information, and avoid the leakage of sensitive data of enterprises;
It supports the expansion type of filtering files, which can easily filter all kinds of small files embedded in web pages to prevent viruses and Trojan horses from invading the enterprise network and endangering network security through these small files.
It supports the behavior audit function, comprehensively records online behavior, and outputs audit results in reports.

VLAN (Multi-LAN)
With IEEE 802.1Q VLAN, enterprises can divide the intranet into different network segments that are isolated from each other as needed to reduce the impact of broadcast storms and viruses.
It supports VLAN Layer 3 interfaces, which can forward IP packets across VLANs, and set functions such as DHCP server, firewall rules, and access authentication policies based on VLANs.

A variety of authentication methods, control the Internet access, and realize advertising and marketing
Support web authentication, and push merchant advertising information through the authentication page;
Support SMS authentication, meet the requirements of real-name authentication, and can carry out secondary marketing based on mobile phone number;
It supports PPPoE servers, which can realize unified dial-up Internet access for intranet users.

The built-in AC+PoE function can manage and supply power to TP-LINK enterprise APs
Built-in AC (wireless controller) function, which is both a router and a wireless controller, can manage up to 100 TP-LINK AP products in a unified manner to build a wireless network;
It can automatically discover the TP-LINK AP in the network, configure and manage the AP in a unified manner, realize zero-configuration AP access, plug and play, and support AP status monitoring, AP upgrade, and scheduled restart, which is easy to maintain.
All LAN ports support standard PoE power supply, in line with the IEEE802.3af/at standard, with a maximum output power of 30W for a single port and a maximum output power of up to 240W for the whole machine. It is suitable for enterprises, campuses, and hotels to build secure, efficient, and easy-to-manage networks.

Efficient firewall to ensure internal and external network security
Support IP and MAC address binding, effectively preventing intranet/extranet ARP spoofing; In the event of ARP spoofing, the system can send ARP correction messages at specified frequencies to restore the normal state of the network in a timely manner.
It supports intranet/extranet attack protection and can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks.
It supports MAC address-based filtering to effectively block the access of unauthorized hosts.
It can assign permissions through routers for various network services to ensure internal and external network security, and supports access control rules based on user groups and time periods to achieve more refined management.

Flexible bandwidth control to ensure reasonable bandwidth utilization
It supports elastic policies that enable bandwidth control based on bandwidth utilization, and can perform bidirectional bandwidth control for each host (IP) in the network, effectively inhibiting P2P applications such as BT and Thunderbolt from over-occupying bandwidth and ensuring smooth network at all times.
It provides an IP-based connection limit function, which can limit the number of connections occupied by each computer, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth operation of games, Internet surfing, chatting, video and voice, etc.

Multi-WAN load balancing and line backup
It provides one 10/100/1000M fixed WAN port, five 10/100/1000M fixed LAN ports and three 10/100/1000M WAN/LAN configurable ports.
It supports rich traffic balancing functions such as intelligent traffic steering, special application traffic steering, and ISP traffic steering, which can realize bandwidth superposition, make full use of bandwidth resources, and protect user investment.
It supports the WAN port backup function, and can automatically switch to the standby line when the main line fails, ensuring the normal operation of the network.

More useful features

Intra/extranet two-way port monitoring to meet the data monitoring needs of relevant departments;
Support DDNS and virtual server functions, easy to build intranet servers and private websites;
Support UPnP and ALG service functions to ensure that special network applications can smoothly penetrate NAT;
Brand new Chinese WEB management interface, management and maintenance are more convenient and fast;
Provide log list function to record network operation status in detail;
Multiple fault detection tools, such as Ping and Tracert, are supported to help you quickly find and troubleshoot network faults.


Dual-core CPU, 256MB DDRIII high-speed memory, powerful performance
9 Gigabit Ethernet ports, 1WAN+3WAN/LAN+5LAN
The 3 WAN/LAN ports and 5 LAN ports all support standard PoE power supply, with a single port output power of 30W and a total output power of up to 240W
IPSec/PPTP/L2TP VPN makes long-distance communication more secure
Web authentication, SMS authentication, and PPPoE servers
Online behavior management (mobile app control/desktop application control/website filtering/behavior audit)
The built-in AC function can manage 100 TP-LINK enterprise APs in a unified manner
Load balancing and line backup
Intranet and intranet ARP protection and common attack protection
Intelligent IP bandwidth management and limit the number of connections