TL-NR4914-S is a new generation of multi-service security gateway product launched by TP-LINK, which is mainly positioned in enterprises, government agencies, parks, chain hotels and other network environments that require high-speed Internet access, Internet authentication, VPN remote secure communication and Internet behavior management.

The device adopts a professional multi-core 64-bit network dedicated processor, with a main frequency of 2.2GHz and 4GB DDR4 high-speed memory, providing powerful packet processing capabilities, and supporting Web authentication, IPSec/PPTP/L2TP VPN, Internet behavior management, firewall, traffic control and other rich functional features, which is suitable for building a secure, efficient and easy-to-manage full gigabit enterprise network.

• Routing + AC + Security ALL IN ONE all-in-one device
• Multi-core 64-bit network-specific processor, 2.2GHz, 4GB DDR4 high-speed memory
• 4 x 2.5G RJ45 ports, 8 x Gigabit RJ45 ports, 2 x 10 Gigabit SFP+ ports, 1 x HDD interface (HDD/SSD)
• The built-in AC function supports the management of up to 500 APs
• Access authentication (supports web authentication, SMS authentication, account authentication, PPPoE server, etc.)
• VPN support (IPSec, PPTP, L2TP)
• Expandable all-in-one DPI security (intrusion prevention, anti-virus, file filtering, malicious domain name remote query, application behavior control)
• Online behavior management (application control, traffic limiting, website filtering, web security, etc.)
• CLI command line control is supported for convenient O&M management
• Multi-administrator roles, refined permission management

New hardware architecture, high-speed data forwarding

It adopts a new hardware architecture, a professional multi-core 64-bit network-specific processor, 4GB DDR4 high-speed memory, and greatly improves the data packet processing capacity, effectively meeting the data forwarding requirements in high-bandwidth environments.

It provides 4 2.5G RJ45 ports, 8 Gigabit RJ45 ports, 2 10 Gigabit SFP+ ports, and 1 hard disk interface (HDD/SSD).

The built-in AC function can be used to manage TP-LINK enterprise APs in a unified manner

The built-in AC function is both a router and a wireless controller, and up to 500 TP-LINK enterprise APs can be managed and controlled in a unified manner, making it easy to expand the enterprise wireless network.

It can automatically discover the TP-LINK AP in the network, and perform unified configuration and management of the AP, realize zero-configuration AP access, plug and play, and support AP status monitoring and upgrade, which is easy to maintain.

A variety of authentication methods, control the Internet access, and realize advertising and marketing

Support web authentication, and push merchant advertising information through the authentication page;

Support SMS authentication, meet the requirements of real-name authentication, and can carry out secondary marketing based on mobile phone number;

It supports PPPoE servers, which can realize unified dial-up Internet access for intranet users.

Secure and reliable IPSec/PPTP/L2TP VPN

It provides standard IPSec VPN functions, supporting data integrity verification, data source authentication, anti-packet replay, and data encryption functions (DES, 3DES, AES128, AES192, AES256 and other encryption algorithms). It supports IKE and manual mode to establish VPN connections, and allows domestic users to access the network by dynamic IP, PPPoE dial-up, etc., and allows VPN connections to be configured through domain names. A maximum of 200 IPSec VPN tunnels can be established to meet the needs of remote and secure communication between the enterprise headquarters and branches, and between the enterprise and business partners/suppliers.

PPTP/L2TP server and client functions are supported, and up to 200 PPTP/L2TP VPN tunnels can be established. Users can flexibly choose to use server and client functions according to actual needs: when deployed in the enterprise headquarters, the PPTP/L2TP server function is generally used to meet the needs of employees on business trips or branches to remotely and securely access the company's network; If you want to establish a VPN connection with a remote PPTP/L2TP server, you need to use the PPTP/L2TP client function.

Comprehensive and effective online behavior management

Built-in database of common Internet applications, which can control various desktop and mobile Internet applications with one click, including social software/video software/music software/shopping and leisure software/news and information software/P2P software/financial software/online games/app stores/basic applications, etc.;

Built-in database of hundreds of URLs in more than a dozen categories, which can restrict employees' access to the corresponding website with one click;

Support prohibiting web submission, restricting employees from logging in to various web-based forums, microblogs, mailboxes, etc. to publish information, and avoid the leakage of sensitive data of enterprises;

It supports the expansion type of filtering files, which can easily filter all kinds of small files embedded in web pages to prevent viruses and Trojan horses from invading the enterprise network and endangering network security through these small files.

It supports the behavior audit function, comprehensively records online behavior, and outputs audit results in reports.

Rich security policies

Support access control policies, and set firewall rules based on network protocol type, port number, source/destination IP address, and time period to control internal and external network communication security;

It provides automatic scanning of IP and MAC addresses and one-click binding functions, which can bind the IP and MAC address information of LAN port (intranet) and WAN port (extranet) hosts at the same time, effectively preventing intranet/extranet ARP spoofing and avoiding network disconnection caused by ARP spoofing. In the event of ARP spoofing, you can send ARP correction messages at a specified frequency to restore the normal state of the network in a timely manner and effectively reduce the degree of harm.

Supports intranet/extranet attack protection and can effectively prevent various common DoS attacks, scanning attacks, and suspicious packet attacks, such as TCP syn floods, UDP floods, ICMP floods, WinNuke attacks, fragment packet attacks, WAN port pings, TCP scan (stealth FIN/Xmas/Null), and IP spoofing.

MAC address-based filtering is supported to effectively block the access of unauthorized hosts.

Flexible flow control

It supports the intelligent IP bandwidth control function, flexibly enables the bandwidth control policy according to the actual bandwidth utilization, and can carry out two-way bandwidth control for each host (IP) in the network, effectively inhibiting the excessive bandwidth occupation of P2P applications such as BT and Thunderbolt, avoiding the problem of online game cards and slow Internet speed, and ensuring that the network is smooth at all times.

It provides an IP-based connection restriction function, which can limit the number of connections occupied by each computer, make reasonable use of the limited NAT connection resources, prevent a small number of users from excessively occupying a large number of connections, and ensure the smooth operation of games, Internet access, chat, video and voice, etc.

It supports multiple load balancing strategies, such as intelligent balancing, special application traffic selection, and ISP traffic selection, to effectively improve network service quality, make full use of interface bandwidth, improve network experience, and protect user investment.

Convenient and practical management and maintenance

Adopting the full Chinese web interface operation style, all functions can be configured through the graphical interface, and each configuration provides necessary help and explanation information to facilitate the user to configure the router.

Provide log list and log server functions, detailed log records to supervise network operation, help quickly find network anomalies, locate the source of problems, and eliminate network faults in time. Provides a graphical interface to monitor key router resources such as CPU utilization in real time, and detect potential dangers and attacks in a timely manner.

Support local LAN or Internet remote management router, convenient chain operation and remote assistance; It supports a variety of fault detection tools such as ping detection and traceroute detection, and can back up and import router configuration files for daily maintenance and management.

Hardware specifications

Software Features

Performance parameters

Compatible hard drives