TL-NR700-4C-5G is a new generation of high-performance all-gigabit enterprise router products launched by TP-LINK, which is mainly positioned in chain hotels, enterprises, government agencies, parks and other network environments that require high-speed Internet access, authenticated Internet access, VPN remote and secure communication, online behavior management and secure and private screen projection applications.

TL-NR700-4C-5G adopts a quad-core 64-bit network-specific processor, with a single-core frequency of up to 1.2GHz, with 2GB DDRIV. high-speed memory, with powerful network data forwarding capabilities, and supports point-to-point projection, Web authentication, IPSec/PPTP/L2TP VPN, Internet behavior management, firewall, traffic control and other rich functional features, suitable for building a secure, efficient and easy-to-manage full gigabit enterprise network.

• Quad-core 64-bit network-specific processor, single-core frequency 1.2GHz
• 2GB DDRIV. HIGH-SPEED MEMORY
• 5 x 10/100/1000M RJ45 ports, customizable port type
• Support point-to-point projection
• Access Authentication (Web Authentication, SMS Authentication, PPPoE Server)
• Multiple VPNs (IPSec/PPTP/L2TP VPN)
• Online behavior management (app restrictions/website filtering/web security)
• Intranet and intranet ARP protection and common attack protection
• Intelligent IP bandwidth management and limit the number of connections

New hardware architecture, high-speed data forwarding

Using a new hardware architecture, a professional quad-core 64-bit network dedicated processor, 2GB DDRIV. high-speed memory, and greatly improved packet processing capabilities, it can realize gigabit wire-speed forwarding, effectively meeting the data forwarding requirements in high-bandwidth environments. In the actual environment, the typical number of units is about 3,000 units.

It provides 5 10/100/1000M RJ45 ports, which can be freely customized according to needs, and can be bound to a variety of logical interfaces to adapt to more complex networking environments.

The built-in AC function can be used to manage TP-LINK enterprise APs in a unified manner

The built-in AC function is both a router and a wireless controller, and up to 300 TP-LINK enterprise APs can be controlled in a unified manner, making it easy to expand the enterprise wireless network.

It can automatically discover the TP-LINK AP in the network, and perform unified configuration and management of the AP, realize zero-configuration AP access, plug and play, and support AP status monitoring and upgrade, which is easy to maintain.

It supports point-to-point screen projection, which can effectively solve the problem of wrong screen projection and malicious screen projection

Built-in point-to-point projection function, scan the code to realize the binding of mobile devices such as mobile phones and projection devices, and lightweight solve the problem of wrong screen projection and malicious screen projection caused by many screen projection devices in the large second-layer network.

A variety of authentication methods, control the Internet access, and realize advertising and marketing

Support web authentication, and push merchant advertising information through the authentication page;

Support SMS authentication, meet the requirements of real-name authentication, and can carry out secondary marketing based on mobile phone number;

It supports PPPoE servers, which can realize unified dial-up Internet access for intranet users.

Secure and reliable IPSec/PPTP/L2TP VPN

It provides standard IPSec VPN functions, supporting data integrity verification, data source authentication, anti-packet replay, and data encryption functions (DES, 3DES, AES128, AES192, AES256 and other encryption algorithms). It supports IKE and manual mode to establish VPN connections, and allows domestic users to access the network by dynamic IP, PPPoE dial-up, etc., and allows VPN connections to be configured through domain names. A maximum of 200 IPSec VPN tunnels can be established to meet the needs of remote and secure communication between the enterprise headquarters and branches, and between the enterprise and business partners/suppliers.

PPTP/L2TP server and client functions are supported, and up to 200 PPTP/L2TP VPN tunnels can be established. Users can flexibly choose to use server and client functions according to actual needs: when deployed in the enterprise headquarters, the PPTP/L2TP server function is generally used to meet the needs of employees on business trips or branches to remotely and securely access the company's network; If you want to establish a VPN connection with a remote PPTP/L2TP server, you need to use the PPTP/L2TP client function.

Comprehensive and effective online behavior management

Built-in database of common Internet applications, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news and information software/P2P software/financial software/online games/app stores/basic applications, etc.;

Built-in database of hundreds of URLs in more than a dozen categories, which can restrict employees' access to the corresponding website with one click;

Support prohibiting web submission, restricting employees from logging in to various web-based forums, microblogs, mailboxes, etc. to publish information, and avoid the leakage of sensitive data of enterprises;

It supports the expansion type of filtering files, which can easily filter all kinds of small files embedded in web pages to prevent viruses and Trojan horses from invading the enterprise network and endangering network security through these small files.

It supports the behavior audit function, comprehensively records online behavior, and outputs audit results in reports.

Rich security policies

Support access control policies, and set firewall rules based on network protocol type, port number, source/destination IP address, and time period to control internal and external network communication security;

It provides automatic scanning of IP and MAC addresses and one-click binding functions, which can bind the IP and MAC address information of LAN port (intranet) and WAN port (extranet) hosts at the same time, effectively preventing intranet/extranet ARP spoofing and avoiding network disconnection caused by ARP spoofing. In the event of ARP spoofing, you can send ARP correction messages at a specified frequency to restore the normal state of the network in a timely manner and effectively reduce the degree of harm.

Supports intranet/extranet attack protection and can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks, such as TCP syn floods, UDP floods, ICMP floods, WinNuke attacks, fragment packet attacks, WAN port pings, TCP scan (stealth FIN/Xmas/Null), and IP spoofing.

MAC address-based filtering is supported to effectively block the access of unauthorized hosts.

Flexible flow control

It supports the intelligent IP bandwidth control function, flexibly enables the bandwidth control policy according to the actual bandwidth utilization, and can carry out two-way bandwidth control for each host (IP) in the network, effectively inhibiting the excessive bandwidth occupation of P2P applications such as BT and Thunderbolt, avoiding the problem of online game cards and slow Internet speed, and ensuring that the network is smooth at all times.

It provides an IP-based connection restriction function, which can limit the number of connections occupied by each computer, make reasonable use of the limited NAT connection resources, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth operation of games, Internet access, chat, video and voice, etc.

It supports multiple load balancing strategies, such as intelligent balancing, special application traffic selection, and ISP traffic selection, to effectively improve network service quality, make full use of interface bandwidth, improve network experience, and protect user investment.

Convenient and practical management and maintenance

Adopting the full Chinese web interface operation style, all functions can be configured through the graphical interface, and each configuration provides necessary help and explanation information to facilitate the user to configure the router.

Provide log list and log server functions, detailed log records to supervise network operation, help quickly find network anomalies, locate the source of problems, and eliminate network faults in time. Provides a graphical interface to monitor key router resources such as CPU utilization in real time, and detect potential dangers and attacks in a timely manner.

Support local LAN or Internet remote management router, convenient chain operation and remote assistance; It supports a variety of fault detection tools such as ping detection and traceroute detection, and can back up and import router configuration files for daily maintenance and management.

Hardware specifications

Software Features

TL-NR700-4C-5G is a new generation of high-performance all-gigabit enterprise router products launched by TP-LINK, which is mainly positioned in chain hotels, enterprises, government agencies, parks and other network environments that require high-speed Internet access, authenticated Internet access, VPN remote and secure communication, online behavior management and secure and private screen projection applications.

TL-NR700-4C-5G adopts a quad-core 64-bit network-specific processor, with a single-core frequency of up to 1.2GHz, with 2GB DDRIV. high-speed memory, with powerful network data forwarding capabilities, and supports point-to-point projection, Web authentication, IPSec/PPTP/L2TP VPN, Internet behavior management, firewall, traffic control and other rich functional features, suitable for building a secure, efficient and easy-to-manage full gigabit enterprise network.

• Quad-core 64-bit network-specific processor, single-core frequency 1.2GHz
• 2GB DDRIV. HIGH-SPEED MEMORY
• 5 x 10/100/1000M RJ45 ports, customizable port type
• Support point-to-point projection
• Access Authentication (Web Authentication, SMS Authentication, PPPoE Server)
• Multiple VPNs (IPSec/PPTP/L2TP VPN)
• Online behavior management (app restrictions/website filtering/web security)
• Intranet and intranet ARP protection and common attack protection
• Intelligent IP bandwidth management and limit the number of connections

New hardware architecture, high-speed data forwarding

Using a new hardware architecture, a professional quad-core 64-bit network dedicated processor, 2GB DDRIV. high-speed memory, and greatly improved packet processing capabilities, it can realize gigabit wire-speed forwarding, effectively meeting the data forwarding requirements in high-bandwidth environments. In the actual environment, the typical number of units is about 3,000 units.

It provides 5 10/100/1000M RJ45 ports, which can be freely customized according to needs, and can be bound to a variety of logical interfaces to adapt to more complex networking environments.

The built-in AC function can be used to manage TP-LINK enterprise APs in a unified manner

The built-in AC function is both a router and a wireless controller, and up to 300 TP-LINK enterprise APs can be controlled in a unified manner, making it easy to expand the enterprise wireless network.

It can automatically discover the TP-LINK AP in the network, and perform unified configuration and management of the AP, realize zero-configuration AP access, plug and play, and support AP status monitoring and upgrade, which is easy to maintain.

It supports point-to-point screen projection, which can effectively solve the problem of wrong screen projection and malicious screen projection

Built-in point-to-point projection function, scan the code to realize the binding of mobile devices such as mobile phones and projection devices, and lightweight solve the problem of wrong screen projection and malicious screen projection caused by many screen projection devices in the large second-layer network.

A variety of authentication methods, control the Internet access, and realize advertising and marketing

Support web authentication, and push merchant advertising information through the authentication page;

Support SMS authentication, meet the requirements of real-name authentication, and can carry out secondary marketing based on mobile phone number;

It supports PPPoE servers, which can realize unified dial-up Internet access for intranet users.

Secure and reliable IPSec/PPTP/L2TP VPN

It provides standard IPSec VPN functions, supporting data integrity verification, data source authentication, anti-packet replay, and data encryption functions (DES, 3DES, AES128, AES192, AES256 and other encryption algorithms). It supports IKE and manual mode to establish VPN connections, and allows domestic users to access the network by dynamic IP, PPPoE dial-up, etc., and allows VPN connections to be configured through domain names. A maximum of 200 IPSec VPN tunnels can be established to meet the needs of remote and secure communication between the enterprise headquarters and branches, and between the enterprise and business partners/suppliers.

PPTP/L2TP server and client functions are supported, and up to 200 PPTP/L2TP VPN tunnels can be established. Users can flexibly choose to use server and client functions according to actual needs: when deployed in the enterprise headquarters, the PPTP/L2TP server function is generally used to meet the needs of employees on business trips or branches to remotely and securely access the company's network; If you want to establish a VPN connection with a remote PPTP/L2TP server, you need to use the PPTP/L2TP client function.

Comprehensive and effective online behavior management

Built-in database of common Internet applications, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news and information software/P2P software/financial software/online games/app stores/basic applications, etc.;

Built-in database of hundreds of URLs in more than a dozen categories, which can restrict employees' access to the corresponding website with one click;

Support prohibiting web submission, restricting employees from logging in to various web-based forums, microblogs, mailboxes, etc. to publish information, and avoid the leakage of sensitive data of enterprises;

It supports the expansion type of filtering files, which can easily filter all kinds of small files embedded in web pages to prevent viruses and Trojan horses from invading the enterprise network and endangering network security through these small files.

It supports the behavior audit function, comprehensively records online behavior, and outputs audit results in reports.

Rich security policies

Support access control policies, and set firewall rules based on network protocol type, port number, source/destination IP address, and time period to control internal and external network communication security;

It provides automatic scanning of IP and MAC addresses and one-click binding functions, which can bind the IP and MAC address information of LAN port (intranet) and WAN port (extranet) hosts at the same time, effectively preventing intranet/extranet ARP spoofing and avoiding network disconnection caused by ARP spoofing. In the event of ARP spoofing, you can send ARP correction messages at a specified frequency to restore the normal state of the network in a timely manner and effectively reduce the degree of harm.

Supports intranet/extranet attack protection and can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks, such as TCP syn floods, UDP floods, ICMP floods, WinNuke attacks, fragment packet attacks, WAN port pings, TCP scan (stealth FIN/Xmas/Null), and IP spoofing.

MAC address-based filtering is supported to effectively block the access of unauthorized hosts.

Flexible flow control

It supports the intelligent IP bandwidth control function, flexibly enables the bandwidth control policy according to the actual bandwidth utilization, and can carry out two-way bandwidth control for each host (IP) in the network, effectively inhibiting the excessive bandwidth occupation of P2P applications such as BT and Thunderbolt, avoiding the problem of online game cards and slow Internet speed, and ensuring that the network is smooth at all times.

It provides an IP-based connection restriction function, which can limit the number of connections occupied by each computer, make reasonable use of the limited NAT connection resources, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth operation of games, Internet access, chat, video and voice, etc.

It supports multiple load balancing strategies, such as intelligent balancing, special application traffic selection, and ISP traffic selection, to effectively improve network service quality, make full use of interface bandwidth, improve network experience, and protect user investment.

Convenient and practical management and maintenance

Adopting the full Chinese web interface operation style, all functions can be configured through the graphical interface, and each configuration provides necessary help and explanation information to facilitate the user to configure the router.

Provide log list and log server functions, detailed log records to supervise network operation, help quickly find network anomalies, locate the source of problems, and eliminate network faults in time. Provides a graphical interface to monitor key router resources such as CPU utilization in real time, and detect potential dangers and attacks in a timely manner.

Support local LAN or Internet remote management router, convenient chain operation and remote assistance; It supports a variety of fault detection tools such as ping detection and traceroute detection, and can back up and import router configuration files for daily maintenance and management.

Hardware specifications

Software Features