TL-ER7520T is a high-performance enterprise-class router product developed by TP-LINK for large and medium-sized enterprises, campuses, hotels, wireless coverage and other environments, using 64-bit quad-core ARM processor, large-capacity high-speed DDRIV memory, supporting IPSec/PPTP/L2TP VPN, online behavior management, AP management, web authentication, PPPoE server, IP/MAC binding, attack protection and bandwidth management. The built-in AC (wireless controller) can manage TP-LINK AP products in a unified manner, which is suitable for enterprises, campuses, hotels, and other enterprises to build secure, efficient, and easy-to-manage networks.

• Quad-core CPU, 2GB DDRIV memory
• 8 x GE electrical ports + 2 x 10G SFP+ optical ports, and the port type can be customized
• The built-in AC function allows you to manage 300 APs in a unified manner
• Support IPSec/PPTP/L2TP VPN, remote communication is more secure
• Web authentication, SMS authentication, and PPPoE servers are supported
• The built-in firewall supports ARP protection and common attack protection on internal and external networks
• Supports online behavior management (application restrictions, website filtering, web security) and online auditing
• Support WEB, TUMS, business cloud platform, APP and other management
• Product size: 440×227×44mm
• Typical machine capacity: 3000 units

New hardware architecture, high-speed data forwarding

It adopts a new hardware architecture, a professional quad-core 64-bit ARM processor, a single-core frequency of up to 1.0GHz, and 1GB DDRIV high-speed memory, which greatly improves the packet processing capability. In the actual environment, the typical number of units is about 3,000 units.

A variety of VPNs to ensure the security of long-distance communication

It supports IPSec VPN, allowing up to 200 tunnels to be established to encrypt the confidential data of enterprises and branches to ensure data security.

It supports PPTP VPN and L2TP VPN server/client modes, allowing up to 200 tunnels (shared) to be established, which is convenient for employees on business trips and mobile workers to remotely access internal servers and easily realize remote work.

Manage online behavior and standardize employees' use of the Internet

Built-in database of common Internet applications, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news and information software/P2P software/financial software/online games/app stores/basic applications, etc.;

Built-in database of hundreds of URLs in more than a dozen categories, which can restrict employees' access to the corresponding website with one click;

Support prohibiting web submission, restricting employees from logging in to various web-based forums, microblogs, mailboxes, etc. to publish information, and avoid the leakage of sensitive data of enterprises;

It supports the expansion type of filtering files, which can easily filter all kinds of small files embedded in web pages to prevent viruses and Trojan horses from invading the enterprise network and endangering network security through these small files.

It supports the behavior audit function, comprehensively records online behavior, and outputs audit results in reports.

VLAN (Multi-LAN)

With IEEE 802.1Q VLAN, enterprises can divide the intranet into different network segments that are isolated from each other as needed to reduce the impact of broadcast storms and viruses.

It supports VLAN Layer 3 interfaces, which can forward IP packets across VLANs, and set functions such as DHCP server, firewall rules, and access authentication policies based on VLANs.

A variety of authentication methods, control the Internet access, and realize advertising and marketing

Support web authentication, and push merchant advertising information through the authentication page;

Support SMS authentication, meet the requirements of real-name authentication, and can carry out secondary marketing based on mobile phone number;

It supports PPPoE servers, which can realize unified dial-up Internet access for intranet users.

Wired and wireless application integration

Built-in AC function: AC wireless control, both router and wireless controller, can manage 300 TP-LINK AP products in a unified manner, and build an enterprise-level wireless network.
It can automatically discover the TP-LINK AP in the network, and uniformly configure and manage the AP, so as to realize zero-configuration AP access and plug-and-play. At the same time, it supports AP status monitoring and upgrade, and is easy to maintain.
Support optical fiber access: support gigabit and 10 gigabit optical interfaces, and flexibly match network access.
Copper cable access is supported.

Efficient firewall to ensure internal and external network security

Support IP and MAC address binding, effectively preventing intranet/extranet ARP spoofing; In the event of ARP spoofing, the system can send ARP correction messages at specified frequencies to restore the normal state of the network in a timely manner.

It supports intranet/extranet attack protection and can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks.

It supports MAC address-based filtering to effectively block the access of unauthorized hosts.

It can assign permissions through routers for various network services to ensure internal and external network security, and supports access control rules based on user groups and time periods to achieve more refined management.

Flexible bandwidth control to ensure reasonable bandwidth utilization

It supports the intelligent IP bandwidth control function, flexibly enables the bandwidth control policy according to the actual bandwidth utilization, and can carry out two-way bandwidth control for each host (IP) in the network, effectively inhibiting the excessive bandwidth occupation of P2P applications such as BT and Thunderbolt, avoiding the problem of online game cards and slow Internet speed, and ensuring that the network is smooth at all times.
It provides an IP-based connection restriction function, which can limit the number of connections occupied by each computer, make reasonable use of the limited NAT connection resources, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth operation of games, Internet access, chat, video and voice, etc.
It supports multiple load balancing strategies, such as intelligent balancing, special application traffic selection, and ISP traffic selection, to effectively improve network service quality, make full use of interface bandwidth, improve network experience, and protect user investment.

More useful features

Intra/extranet two-way port monitoring to meet the data monitoring needs of relevant departments;

Support DDNS and virtual server functions, easy to build intranet servers and private websites;

Support UPnP and ALG service functions to ensure that special network applications can smoothly penetrate NAT;

Brand new Chinese WEB management interface, management and maintenance are more convenient and fast;

Provide log list function to record network operation status in detail;

Multiple fault detection tools, such as Ping and Tracert, are supported to help you quickly find and troubleshoot network faults.

Hardware specifications

Software Features

Compatible with Micro SD cards

TL-ER7520T is a high-performance enterprise-class router product developed by TP-LINK for large and medium-sized enterprises, campuses, hotels, wireless coverage and other environments, using 64-bit quad-core ARM processor, large-capacity high-speed DDRIV memory, supporting IPSec/PPTP/L2TP VPN, online behavior management, AP management, web authentication, PPPoE server, IP/MAC binding, attack protection and bandwidth management. The built-in AC (wireless controller) can manage TP-LINK AP products in a unified manner, which is suitable for enterprises, campuses, hotels, and other enterprises to build secure, efficient, and easy-to-manage networks.

• Quad-core CPU, 2GB DDRIV memory
• 8 x GE electrical ports + 2 x 10G SFP+ optical ports, and the port type can be customized
• The built-in AC function allows you to manage 300 APs in a unified manner
• Support IPSec/PPTP/L2TP VPN, remote communication is more secure
• Web authentication, SMS authentication, and PPPoE servers are supported
• The built-in firewall supports ARP protection and common attack protection on internal and external networks
• Supports online behavior management (application restrictions, website filtering, web security) and online auditing
• Support WEB, TUMS, business cloud platform, APP and other management
• Product size: 440×227×44mm
• Typical machine capacity: 3000 units

New hardware architecture, high-speed data forwarding

It adopts a new hardware architecture, a professional quad-core 64-bit ARM processor, a single-core frequency of up to 1.0GHz, and 1GB DDRIV high-speed memory, which greatly improves the packet processing capability. In the actual environment, the typical number of units is about 3,000 units.

A variety of VPNs to ensure the security of long-distance communication

It supports IPSec VPN, allowing up to 200 tunnels to be established to encrypt the confidential data of enterprises and branches to ensure data security.

It supports PPTP VPN and L2TP VPN server/client modes, allowing up to 200 tunnels (shared) to be established, which is convenient for employees on business trips and mobile workers to remotely access internal servers and easily realize remote work.

Manage online behavior and standardize employees' use of the Internet

Built-in database of common Internet applications, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news and information software/P2P software/financial software/online games/app stores/basic applications, etc.;

Built-in database of hundreds of URLs in more than a dozen categories, which can restrict employees' access to the corresponding website with one click;

Support prohibiting web submission, restricting employees from logging in to various web-based forums, microblogs, mailboxes, etc. to publish information, and avoid the leakage of sensitive data of enterprises;

It supports the expansion type of filtering files, which can easily filter all kinds of small files embedded in web pages to prevent viruses and Trojan horses from invading the enterprise network and endangering network security through these small files.

It supports the behavior audit function, comprehensively records online behavior, and outputs audit results in reports.

VLAN (Multi-LAN)

With IEEE 802.1Q VLAN, enterprises can divide the intranet into different network segments that are isolated from each other as needed to reduce the impact of broadcast storms and viruses.

It supports VLAN Layer 3 interfaces, which can forward IP packets across VLANs, and set functions such as DHCP server, firewall rules, and access authentication policies based on VLANs.

A variety of authentication methods, control the Internet access, and realize advertising and marketing

Support web authentication, and push merchant advertising information through the authentication page;

Support SMS authentication, meet the requirements of real-name authentication, and can carry out secondary marketing based on mobile phone number;

It supports PPPoE servers, which can realize unified dial-up Internet access for intranet users.

Wired and wireless application integration

Built-in AC function: AC wireless control, both router and wireless controller, can manage 300 TP-LINK AP products in a unified manner, and build an enterprise-level wireless network.
It can automatically discover the TP-LINK AP in the network, and uniformly configure and manage the AP, so as to realize zero-configuration AP access and plug-and-play. At the same time, it supports AP status monitoring and upgrade, and is easy to maintain.
Support optical fiber access: support gigabit and 10 gigabit optical interfaces, and flexibly match network access.
Copper cable access is supported.

Efficient firewall to ensure internal and external network security

Support IP and MAC address binding, effectively preventing intranet/extranet ARP spoofing; In the event of ARP spoofing, the system can send ARP correction messages at specified frequencies to restore the normal state of the network in a timely manner.

It supports intranet/extranet attack protection and can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks.

It supports MAC address-based filtering to effectively block the access of unauthorized hosts.

It can assign permissions through routers for various network services to ensure internal and external network security, and supports access control rules based on user groups and time periods to achieve more refined management.

Flexible bandwidth control to ensure reasonable bandwidth utilization

It supports the intelligent IP bandwidth control function, flexibly enables the bandwidth control policy according to the actual bandwidth utilization, and can carry out two-way bandwidth control for each host (IP) in the network, effectively inhibiting the excessive bandwidth occupation of P2P applications such as BT and Thunderbolt, avoiding the problem of online game cards and slow Internet speed, and ensuring that the network is smooth at all times.
It provides an IP-based connection restriction function, which can limit the number of connections occupied by each computer, make reasonable use of the limited NAT connection resources, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth operation of games, Internet access, chat, video and voice, etc.
It supports multiple load balancing strategies, such as intelligent balancing, special application traffic selection, and ISP traffic selection, to effectively improve network service quality, make full use of interface bandwidth, improve network experience, and protect user investment.

More useful features

Intra/extranet two-way port monitoring to meet the data monitoring needs of relevant departments;

Support DDNS and virtual server functions, easy to build intranet servers and private websites;

Support UPnP and ALG service functions to ensure that special network applications can smoothly penetrate NAT;

Brand new Chinese WEB management interface, management and maintenance are more convenient and fast;

Provide log list function to record network operation status in detail;

Multiple fault detection tools, such as Ping and Tracert, are supported to help you quickly find and troubleshoot network faults.

Hardware specifications

Software Features

Compatible with Micro SD cards