The RB1100AHx4 is powered by an Annapurna Alpine AL21400 CPU with four ARM Cortex-A15 cores clocked at 1.4 GHz each, delivering a maximum throughput of up to 7.5 Gbps. This is the highest throughput figure of any device in MikroTik’s RouterBOARD router lineup — nearly double the RB5009’s routing performance in CPU-heavy configurations, and appropriate for ISP aggregation, large enterprise core routing, or any environment where the hEX and RB5009 family’s limits are a constraint.

Hardware IPsec — 2.2 Gbps with AES128

The RB1100AHx4 supports IPsec hardware acceleration at up to 2.2 Gbps with AES128 — the fastest IPsec throughput of any RouterBOARD device. For site-to-site VPN concentrators, encrypted ISP backbone links, or enterprise VPN aggregation at multi-gigabit speeds, this is the appropriate MikroTik platform. Compare with the RB5009’s hardware IPsec, which is capable but unspecified at this throughput level, or the hEX family’s 470 Mbps limit.

13 Gigabit Ethernet Ports

The unit provides 13 Gigabit Ethernet ports — all 10/100/1000 Mbps — with an RTL8367 switch chip for hardware-accelerated inter-port switching. Thirteen ports gives substantial flexibility for multi-WAN aggregation, multiple LAN segments, dedicated management interfaces, and inter-device links without needing an external switch at the routing layer.

Dual Redundant Power Supplies — AC and −48V DC Telecom

The RB1100AHx4 includes dual redundant power supplies with two IEC AC inputs and −48V DC telecom power support, as well as 802.3at/af PoE input. The −48V DC input is a carrier-grade feature — telco and ISP environments typically run DC power plants at −48V for reliability and battery backup compatibility. Having both AC and −48V DC inputs means the router can be powered from either or both simultaneously, with automatic failover between them. PoE-in on the first Ethernet port provides a third power path for deployments where neither AC nor DC supply is immediately available.

RouterOS Level 6 — The Top Licence

The device runs RouterOS Level 6 — the highest RouterOS licence tier, with no artificial limits on tunnels, BGP peers, OSPF adjacencies, hotspot users, or other features that are capped at lower licence levels. Level 6 is appropriate for ISPs running full BGP routing tables, large-scale OSPF deployments, multi-thousand-client hotspot environments, or any scenario where Level 5’s limits would otherwise become a constraint. Compared to the RB5009 (Level 5) and the hEX family (Level 4), the RB1100AHx4 removes all practical software limitations.

RS232 Console Port and microSD

A dedicated RS232 serial console port is included — essential for out-of-band management and recovery in production environments where network access to the router is unavailable. A microSD slot provides additional storage for logging, configuration backups, and Dude database use.

Key Highlights

• CPU: Annapurna Alpine AL21400 quad-core ARM Cortex-A15 @ 1.4 GHz | 4 threads
• RAM: 1 GB DDR | Storage: 128 MB NAND + microSD slot
• Switch chip: RTL8367
• Architecture: ARM 32-bit
• Max throughput: 7.5 Gbps
• IPsec hardware acceleration: Up to 2.2 Gbps (AES128)
• Ethernet ports: 13× Gigabit (10/100/1000 Mbps)
• RouterOS: Level 6 (pre-installed, lifetime updates) — highest tier, no feature caps
• Power: 2× IEC AC inputs (dual redundant) + −48V DC telecom input + 802.3at/af PoE-in (port 1)
• Console: RS232 serial port
• Storage expansion: microSD slot
• Form factor: 1U rack mount | 444 × 148 × 47 mm
• Operating temp: −40°C to +70°C
• MTBF: ~200,000 hours at 25°C

Proudly sold by the Ringwood Digital Store.

Adding an IP66-rated waterproof enclosure to the RB5009 series creates a compact, cost-effective solution for network tower setups — one of the most capable outdoor networking devices available at this price point. The RB5009UPr+S+OUT has 7× Gigabit Ethernet ports, one 2.5 Gigabit Ethernet port, a 10G SFP+ cage, and a full-size USB 3.0 port, identical to the indoor RB5009UG+S+IN in port layout. The distinction is entirely in the enclosure, PoE capability, and power redundancy stack.

Nine Powering Options — Genuine Power Redundancy

The unit offers nine possible ways of powering: a 2-pin power connector on the front, plus PoE-in and PoE-out on all eight Ethernet ports. If you are using PoE-in, the board will stay on even if eight of your nine power sources suddenly go down. All power options support a wide voltage range of 24–57V. The board powers itself from whichever source presents the highest voltage — so connecting multiple supplies at different voltages within the supported range provides automatic priority-based failover without any configuration.

Voltages cannot be mixed. All connected power sources must be within the same voltage standard — do not connect 24V passive PoE and 48V 802.3af sources simultaneously to the same unit.

PoE-Out — Up to 25W Per Port, 130W Total

Each PoE-out port can supply up to 25W of power, with all ports combined limited to 130W total. You can specify maximum available power from your power sources manually. This means the RB5009UPr+S+OUT can simultaneously power up to eight downstream devices directly — wireless radios, IP cameras, CPE units — without a separate PoE switch or injectors at the tower or mast.

PoE-out is single-voltage — it can be either 802.3at/af compatible or low-voltage PoE-out, determined by the voltage on the 2-pin connector, as no voltage conversion is done on the board. At 48–57V input the PoE-out is 802.3at/af standard; at 24V input it is 24V passive PoE. Plan your power supply voltage based on which PoE standard your downstream devices require.

PoE-out requires 2-pin DC connector power. If you are powering downstream devices via PoE-out, the 2-pin connector must supply power. PoE-in alone is not sufficient to run PoE-out to other devices — the router takes up to 21W for itself, and the remainder of the budget is available for PoE-out only when the 2-pin connector is powered.

RouterOS L5 and ISP-Grade Use Cases

The RB5009 series handles PPPoE termination, DHCP to customers, Local Queuing, MPLS Push/Pop/Swap and MPLS Forwarding, VPLS/VXLAN Termination, and Hardware Bridging — a full ISP-grade feature set in a weatherproof outdoor enclosure. RouterOS Level 5 is pre-installed with lifetime free updates, covering OSPF, BGP, firewall, NAT, VPN (IPsec, OpenVPN, L2TP, WireGuard), CAPsMAN, scripting, and the complete RouterOS v7 stack.

Key Highlights

• Enclosure: IP66 weatherproof | Outdoor — tower/mast/pole mount
• CPU: Marvell Armada 88F7040 quad-core ARMv8 @ 350–1400 MHz (auto)
• RAM: 1 GB DDR4 | Storage: 1 GB NAND
• Gigabit ports: 7× 10/100/1000 Mbps (all PoE-in + PoE-out)
• 2.5G port: 1× 2.5 GbE (PoE-in + PoE-out)
• 10G port: 1× SFP+ cage (module not included)
• USB: 1× USB 3.0 Type-A full-size
• PoE-out: Up to 25W per port | 130W total budget
• PoE standard: 802.3at/af (48–57V input) or passive PoE (24V input) — single voltage, no conversion
• Power inputs: 9 total — 2-pin DC connector + PoE-in on all 8 Ethernet ports | 24–57V range
• Power priority: Highest voltage source auto-selected; fails over to next highest
• Router self-power: Up to 21W
• RouterOS: Level 5 (pre-installed, lifetime updates, v7)
• Switch chip: Marvell Amethyst | 10 Gbps CPU link
• Passive cooling: IP66 enclosure acts as heat sink
• Operating temp: −40°C to +60°C

Proudly sold by the Ringwood Digital Store.

The RB1100AHx4 Dude Edition features several high-speed storage connectors — two SATA and two M.2 slots — for use with a Dude database, proxy cache, or any other storage-intensive feature. It includes a 60 GB M.2 drive already installed. This is the only functional difference between the Dude Edition and the standard RB1100AHx4.

The SATA ports accept standard 2.5″ SSDs or HDDs for additional storage. The second M.2 slot is available for a second NVMe or SATA M.2 module. For large-scale deployments, both the 60 GB M.2 and additional SATA or M.2 drives can be used simultaneously.

What The Dude Is — and Why It Belongs Here

The Dude is MikroTik’s free network monitoring and management application — a server component that maps, monitors, and alerts on your entire network topology in real time. It tracks device uptime, interface utilisation, ping response, service availability, and generates alerts for failures. Running The Dude on a router that is already always-on at the core of your network makes operational sense: no separate monitoring server, no additional hardware, no VM overhead.

The Dude database — device records, historical metrics, maps, and logs — is storage-intensive over time. Running it from the onboard 128 MB NAND (as on the standard RB1100AHx4 or RB5009) is impractical at scale. The Dude Edition’s 60 GB M.2 drive resolves this directly, with SATA expansion available for even larger deployments or proxy cache use alongside Dude.

Everything Else — Identical to the Standard RB1100AHx4

The RB1100AHx4 Dude Edition uses the same Annapurna Alpine AL21400 CPU with four Cortex-A15 cores clocked at 1.4 GHz, for a maximum throughput of up to 7.5 Gbps, with IPsec hardware acceleration up to 2.2 Gbps with AES128, 13× Gigabit Ethernet ports, RS232 serial port, and dual redundant power supplies with −48V DC telecom power and 802.3at/af support. RouterOS Level 6 is pre-installed with lifetime free updates and no feature caps.

Key Highlights

• CPU: Annapurna Alpine AL21400 quad-core ARM Cortex-A15 @ 1.4 GHz
• RAM: 1 GB DDR | Onboard storage: 128 MB NAND
• Added storage: 2× SATA + 2× M.2 slots | 60 GB M.2 drive included
• Architecture: ARM 32-bit | Switch chip: RTL8367
• Max throughput: 7.5 Gbps
• IPsec hardware acceleration: Up to 2.2 Gbps (AES128)
• Ethernet ports: 13× Gigabit (10/100/1000 Mbps)
• RouterOS: Level 6 (pre-installed, lifetime updates) — highest tier, no feature caps
• The Dude: Supported — 60 GB M.2 drive pre-installed for Dude database
• Power: 2× IEC AC inputs (dual redundant) + −48V DC telecom input + 802.3at/af PoE-in (port 1)
• Console: RS232 serial port
• Storage expansion: microSD slot + 2× SATA + 2× M.2
• Form factor: 1U rack mount | 443 × 148 × 44 mm
• Operating temp: −40°C to +70°C
• MTBF: ~200,000 hours at 25°C

Proudly sold by the Ringwood Digital Store.

The UISP-R-Pro is not a general-purpose router — it is an ISP operations tool. It is designed for ISP applications, combining multi-WAN routing, integrated Layer 2 switching, traffic shaping, automated customer suspension, firewall, and OSPF routing in a single rack-unit device. The UISP platform manages it alongside the rest of your UISP fibre, wireless, and switching infrastructure — giving you network topology, customer billing, plan management, advanced analytics, and device provisioning from one interface.

Port Layout — Nine GbE RJ45 and Four 10G SFP+

The UISP-R-Pro provides eight GbE RJ45 LAN ports, one GbE RJ45 WAN port, and four 1/10G SFP+ ports. Ports 1–8 and 10–13 can be configured for line-rate Layer 2 switching, meaning the device can simultaneously act as a Gigabit access switch and a 10G-uplink router — eliminating a separate switch at the ISP headend for smaller deployments. The four SFP+ ports accept both 1G SFP and 10G SFP+ modules for fibre backbone or inter-device links.

NAT Throughput — Up to 9,500 Mbps

NAT throughput reaches up to 9,500 Mbps without additional features enabled; up to 7,500 Mbps with IP Accounting enabled; and up to 2,250 Mbps with QoS enabled. The throughput drop with QoS is significant and worth planning for — if you intend to run per-customer traffic shaping across all ports at full line rate, size your deployment accordingly or use upstream QoS where practical.

220W PoE Output — 27V Passive

The UISP-R-Pro delivers 220W total PoE availability at 27V passive PoE across its RJ45 ports, at up to 15W per port on 2-pair or 30W per port on 4-pair. This powers UISP radios, CPE devices, and other passive PoE equipment directly from the router without a separate PoE switch or injectors at the head end.

27V passive PoE only. The PoE output is 27V passive — not 802.3af/at. Only connect devices explicitly rated for 27V passive PoE. Standard 802.3af/at-only devices must not be connected to passive PoE ports.

Processing Power and Memory

The processor is a quad-core ARM Cortex-A57 running at 1.7 GHz, with 4 GB DDR4 RAM and 16 GB eMMC onboard storage. This is substantially more powerful than anything else in the networking lineup covered so far — the 4 GB RAM and 16 GB eMMC reflect the UISP-R-Pro’s role running a full Linux-based UISP OS stack, handling large routing tables, traffic shaping state for hundreds of clients, and local application logic.

Power Redundancy — TransPort DC Input

Power is supplied via an internal 60W AC/DC supply (100–240V AC, 1.5A max) with a maximum power consumption of 50W, plus an additional Power TransPort DC input at 27V DC/2.2A for DC redundancy. The TransPort DC input allows a secondary 27V DC supply (or battery-backed power via the UISP Power Pro or similar) to maintain router operation if AC power fails — critical for ISP headend uptime.

LCM Touchscreen and Bluetooth Setup

A 1.3″ colour LCM touchscreen provides local status display and basic configuration without needing a laptop or console cable. Bluetooth enables initial setup via the UISP mobile app — the same touchless provisioning experience as the UF-OLT and UISP-FIBER-OLT-XGS.

Key Highlights

• CPU: Quad-core ARM Cortex-A57 @ 1.7 GHz
• RAM: 4 GB DDR4 | Storage: 16 GB eMMC
• RJ45 ports: 8× GbE LAN + 1× GbE WAN
• SFP+ ports: 4× 1/10G
• Layer 2 switching: Ports 1–8 + 10–13 (line-rate, configurable)
• NAT throughput: Up to 9,500 Mbps (bare) | 7,500 Mbps (IP Accounting) | 2,250 Mbps (QoS)
• PoE output: 220W total | 27V passive | 15W/port (2-pair) / 30W/port (4-pair)
• Routing: OSPF, multi-WAN, firewall
• Traffic management: Traffic shaping, automated customer suspension
• Management: UISP platform (v1.4.5+), UISP mobile app, Bluetooth setup
• LCM display: 1.3″ colour touchscreen
• Power: Internal AC/DC 60W (100–240V) + Power TransPort DC input (27V/2.2A) | Max 50W
• ESD protection: Air ±15kV / Contact ±8kV
• Enclosure: SGCC steel + polycarbonate/ABS | 1U rack | 442.4 × 200 × 43.7 mm | 3.3 kg
• Operating temp: −10°C to 50°C
• NDAA Compliant: Yes
• Certifications: CE, FCC, IC

Proudly sold by the Ringwood Digital Store.

The UXG-Lite is a compact and powerful UniFi gateway with a full suite of advanced routing and security features, offering up to 10× the routing performance of the legacy USG when tested with IPS/IDS, QoS, and Smart Queues. A dual-core ARM Cortex-A53 processor at 1GHz with 1GB DDR3L memory handles routing, security inspection, and VPN duties in a chassis that barely takes up any desk space. For businesses already invested in the UniFi ecosystem, or planning to build one, the UXG-Lite is the most cost-effective way to get a modern, capable gateway with full UniFi Network integration.

Key Highlights

• 1× GbE RJ45 WAN port and 1× GbE RJ45 LAN port
• 1GHz dual-core ARM Cortex-A53 processor with 1GB DDR3L memory
• 1 Gbps IDS/IPS throughput
• Compact 98 × 98 × 30 mm polycarbonate enclosure, max 3.83W power consumption
• USB-C powered — adapter included

Next-Generation Security Suite

The UXG-Lite features application-aware firewall rules, signature-based IPS/IDS threat detection, and robust content, country, domain, and ad filtering capabilities. VLAN/subnet-based traffic segmentation and a full stateful firewall provide comprehensive network protection.

• Stateful firewall, application-aware Layer 7 firewall, and DPI with traffic identification
• Signature-based IPS/IDS threat detection with regular signature updates
• Zone-based firewall with advanced filtering by region, domain, and application
• Content filtering and ad blocking
• VLAN and subnet-based traffic segmentation

VPN & SD-WAN

Advanced networking features include license-free SD-WAN, WireGuard, L2TP, and OpenVPN server support, OpenVPN client, OpenVPN and IPsec site-to-site VPN, and one-click Teleport and Identity Enterprise VPN options. This makes it straightforward to connect remote workers securely or link multiple sites without an expensive third-party VPN solution.

• WireGuard, OpenVPN, and L2TP VPN server
• OpenVPN and WireGuard client support
• IPsec and OpenVPN site-to-site VPN
• One-click Teleport zero-configuration VPN for remote access
• License-free SD-WAN for encrypted inter-site connectivity
• Policy-based WAN and VPN routing, DHCP relay, customisable DHCP server, and full IPv6 ISP support

LTE Backup & Additional Reliability

The UXG-Lite is designed to work seamlessly with UniFi APs to provide WiFi QoS and supports additional internet failover with LTE Backup via a compatible UniFi LTE device, ensuring business connectivity is maintained even when the primary WAN link goes down.

• LTE Backup failover support via UniFi LTE hardware
• WiFi QoS integration with UniFi access points
• OSPF dynamic routing support
• Integrated RADIUS server for centralised authentication

Controller Requirements & UniFi Ecosystem

The UXG-Lite does not include a built-in controller — it must be managed via a UniFi CloudKey, Official UniFi Hosting, or a self-hosted UniFi Network Server running UniFi Network 8.0.7 or later. For businesses wanting a standalone all-in-one gateway with a built-in controller, the UCG-Ultra is the recommended alternative. Once connected to a controller, the UXG-Lite integrates fully into the UniFi ecosystem — managed centrally alongside UniFi switches, access points, and other devices from a single interface.

• Managed via UniFi CloudKey, Official UniFi Hosting, or self-hosted UniFi Network Server
• Requires UniFi Network 8.0.7 or later
• Full UniFi ecosystem integration — switches, APs, and gateways managed together
• Accessible via UniFi web interface and UniFi mobile app for iOS and Android

Proudly sold by the Ringwood Digital Store.

The UniFi Cloud Gateway Ultra is a powerful and compact multi-WAN UniFi Cloud Gateway with a full suite of advanced routing and security features. By running the UniFi Network application directly on the gateway itself, the UCG-Ultra eliminates the need for a separate Cloud Key or controller server — making it the most cost-effective entry point into the full UniFi managed networking ecosystem. A 1.5GHz Cortex-A53 Quad-Core processor, 3GB DDR4 memory, and 16GB eMMC storage provide the headroom to handle routing, IDS/IPS, and controller duties simultaneously without compromise.

Key Highlights

• 1× 2.5 GbE RJ45 WAN port and 4× Gigabit RJ45 LAN ports (one re-mappable as a second WAN port)
• 1.5GHz Quad-Core ARM Cortex-A53 CPU, 3GB DDR4, 16GB eMMC
• Manages 30+ UniFi Network devices and 300+ simultaneous clients
• 0.96″ LCM status display for at-a-glance network health monitoring
• USB-C powered — compact, fanless desktop form factor

Multi-WAN & Advanced Routing

Multi-WAN load balancing and automatic failover ensure uninterrupted connectivity across multiple internet connections, with intelligent traffic distribution across available WAN links. Up to 4 ports can be configured as WAN interfaces, providing exceptional redundancy flexibility for a device at this price point.

• Multi-WAN load balancing and automatic failover
• Up to 4 WAN ports (default 1× 2.5 GbE + optional LAN-to-WAN remapping)
• Policy-based WAN and VPN routing for granular traffic control
• DHCP relay, customisable DHCP server, IGMP proxy, and full IPv6 ISP support

Next-Generation Security Suite

Security features include a stateful firewall, application-aware Layer 7 firewall, DPI and traffic identification, zone-based firewall with advanced filtering (regions, domains, apps), content filtering, and intrusion prevention (IPS/IDS) — all at up to 1 Gbps throughput. This is a level of security depth that previously required dedicated security appliances or significantly more expensive gateways.

• 1 Gbps IDS/IPS throughput with signature-based threat detection
• Stateful firewall and application-aware Layer 7 firewall
• DPI and traffic identification for per-application visibility
• Zone-based firewall with region, domain, and app filtering
• Content filtering and ad blocking

VPN & Secure Remote Access

VPN support includes WireGuard, L2TP, and OpenVPN server modes, OpenVPN client, OpenVPN and IPsec site-to-site VPN, and one-click Teleport and Identity VPN — making it straightforward to set up secure remote access for staff without complex configuration. License-free SD-WAN encrypts inter-site data without ongoing subscription fees.

• WireGuard, OpenVPN, and L2TP VPN server and client support
• IPsec and OpenVPN site-to-site VPN
• License-free SD-WAN for encrypted inter-site connectivity
• One-click Teleport VPN for easy remote worker access

UniFi Ecosystem Integration

The UCG-Ultra serves as the central controller for the entire UniFi network stack — managing UniFi switches, access points, and other network devices from the familiar UniFi Network interface, accessible via browser or the UniFi mobile app for iOS and Android. It runs UniFi Network only and does not support UniFi Protect (cameras) or UniFi Access (door control) — deployments requiring those applications should consider the Cloud Gateway Max instead.

• Full UniFi Network controller built in — no separate Cloud Key required
• Managed via UniFi web interface or UniFi mobile app (iOS and Android)
• Supports UniFi switches, access points, and network devices
• 141.8 × 127.6 × 30 mm compact desktop form factor, max 6.2W power consumption

Proudly sold by the Ringwood Digital Store.

The Grandstream GWN7002 is a multi-WAN Gigabit VPN router with a built-in firewall, allowing businesses to build comprehensive wired, wireless, and VPN networks for one or many locations. Its key differentiator over the GWN7001 is the addition of dual SFP fibre ports and built-in PoE output, making it well-suited to environments where fibre uplinks or direct device powering are a requirement.

Key Highlights

• 2.2Gbps NAT throughput and 530Mbps IPsec VPN throughput
• 2× 2.5 Gigabit SFP ports and 4× Gigabit Ethernet RJ45 ports — all WAN/LAN configurable
• 2× 48V passive PoE output RJ45 ports to power connected endpoints
• 1× GbE RJ45 port with IEEE 802.3af/at PoE input — can be powered via Ethernet

Flexible Multi-WAN Connectivity & PoE

All ports on the GWN7002 are freely configurable as WAN or LAN, giving network administrators full flexibility to define the topology that best suits their environment. Traffic load balancing, failover, and bandwidth management capabilities maximise network reliability, ensuring continuous connectivity even when a primary WAN link goes down. The built-in PoE output ports allow the GWN7002 to directly power IP phones, access points, or other 48V passive PoE-compatible devices without a separate injector.

• All ports freely assignable as WAN or LAN
• Multi-WAN load balancing and automatic failover
• 2× PoE output ports for powering endpoints directly
• Bandwidth management for traffic shaping across WAN links
• Advanced QoS with VoIP prioritisation, DSCP, VLAN, and per-IP/port policing

Comprehensive VPN Support

Multiple VPN protocols are supported including IPsec, PPTP, L2TP, OpenVPN, and WireGuard, with support for up to 50 concurrent VPN tunnels — covering both remote worker access and persistent site-to-site inter-branch connectivity. Both client and server modes are supported, providing maximum flexibility for varied deployment scenarios.

• IPsec, OpenVPN, WireGuard, PPTP, L2TP — client and server modes
• Up to 50 concurrent VPN tunnels
• Site-to-site IPsec VPN for secure inter-branch connections
• Secure remote access for employees working off-site

Enterprise-Grade Firewall & Security

The built-in firewall delivers advanced content security, filtering, threat detection, and attack prevention at the network perimeter. Deep Packet Inspection gives administrators visibility into application-level traffic, while content and URL filtering block access to unwanted or malicious destinations.

• Rich firewall features: DDNS, port forwarding, DMZ, UPnP, Anti-DoS, traffic rules, NAT, and ALG
• Deep Packet Inspection (DPI) for application/protocol monitoring and traffic statistics
• Application, URL, DNS, and web content filtering
• Anti-hacking secure boot with unique per-device security certificates and randomised default passwords

Embedded AP Controller & Cloud Management

The GWN7002 includes an embedded controller that can manage itself and up to 150 Grandstream GWN Series Wi-Fi access points via the product’s web user interface. It can also be managed via GWN.Cloud and GWN Manager, Grandstream’s free cloud and on-premise network management tools, making it equally suited to centralised multi-site operations and standalone single-site deployments.

• Embedded AP controller — manages up to 150 GWN Series Wi-Fi APs
• GWN.Cloud — free cloud management for unlimited routers and APs
• GWN Manager — free on-premise management alternative
  GDMS (Grandstream Device Management System) for full fleet management
• Centralised multi-site management from a single interface

Proudly sold by the Ringwood Digital Store.

The Grandstream GWN7001 is a multi-WAN Gigabit VPN router with a built-in firewall that allows businesses to build comprehensive wired, wireless, and VPN networks for one or many locations, offering high-performance routing and switching power along with built-in VPN support for secure in-office and inter-office connectivity.

Key Highlights

• 2.2Gbps NAT throughput and 530Mbps IPsec VPN throughput
• 6× Gigabit Ethernet ports — all ports WAN/LAN configurable
• Handles up to 50 concurrent VPN tunnels
• Ideal for SMBs, retail, education, hospitality, and healthcare deployments

Flexible Multi-WAN Connectivity

The GWN7001 supports any WAN/LAN configuration in order to fit into a variety of network infrastructures, and effectively manages multiple WAN connections simultaneously — distributing traffic across different internet connections and supporting failover to ensure consistent connectivity.

• All 6 Gigabit ports freely assignable as WAN or LAN
• Multi-WAN load balancing and automatic failover
• Bandwidth management for traffic optimisation across links
• Advanced QoS with VoIP prioritisation, DSCP, VLAN, and per-IP/port policing

Built-In VPN for Secure Connectivity

The GWN7001 supports IPsec, OpenVPN, PPTP, and L2TP VPN protocols in both client and server modes, enabling secure remote worker access and persistent site-to-site tunnels between branch offices. Up to 50 concurrent VPN tunnels are supported, making it capable of serving distributed organisations with multiple remote connections running simultaneously.

• IPsec, OpenVPN, PPTP, L2TP — client and server modes
• Up to 50 concurrent VPN tunnels
• Site-to-site IPsec VPN for inter-branch connectivity
• Secure remote employee access to corporate networks

Enterprise-Grade Firewall & Security

The built-in firewall delivers advanced content security, filtering, threat detection, and attack prevention. Rich firewall features include DDNS, port forwarding, DMZ, UPnP, Anti-DoS, traffic rules, NAT, and ALG. Combined with deep packet inspection and content filtering, the GWN7001 provides the security depth typically found in more expensive dedicated appliances.

• Deep Packet Inspection (DPI) for application/protocol monitoring and traffic statistics
• Application, URL, DNS, and web content filtering to block unsecure content
• Anti-DoS, traffic rules, DMZ, NAT, ALG, and UPnP
• Anti-hacking secure boot with critical data lockdown via digital signatures, unique security certificates, and random default passwords per device

Embedded AP Controller & Cloud Management

The GWN7001 includes an embedded controller that can manage not only itself but also up to 150 Grandstream GWN Series Wi-Fi access points. The router can also be managed with GWN.Cloud and GWN Manager, Grandstream’s free cloud and on-premise network management tools, providing flexibility for both centralised multi-site deployments and smaller single-location setups.

• Embedded controller manages up to 150 GWN Series Wi-Fi APs
• GWN.Cloud — free cloud management platform for unlimited routers and APs
• GWN Manager — free on-premise management alternative
• Centralised management across multiple sites from a single interface

Proudly sold by the Ringwood Digital Store.

The TP-Link Omada ER7206 is a professional, secure, and reliable gateway with centralised management capability. Its flexible port layout supports up to four simultaneous WAN connections, making it a solid choice for businesses that depend on consistent uptime and need to spread traffic intelligently across multiple internet links.

Key Highlights

• 1× Gigabit SFP WAN port, 1× Gigabit RJ45 WAN port, and 2× Gigabit RJ45 WAN/LAN ports for multi-WAN flexibility
• Up to 700 concurrent client devices and 150,000 associated sessions
• 291.6 Mb/s IPsec VPN throughput
• Durable metal casing suitable for desktop deployment in office environments

Multi-WAN Load Balancing & Failover

The intelligent load balancing function distributes data streams according to the bandwidth proportion of each WAN port, raising the utilisation rate of multi-line broadband and allowing one device to satisfy various internet access requirements. Failover ensures that if a primary WAN link goes down, traffic automatically shifts to an available backup connection with minimal disruption.

• Up to 4 WAN ports with intelligent load balancing and automatic failover
• Mix of SFP fibre and RJ45 copper WAN interfaces for deployment flexibility
• 2× dedicated Gigabit LAN ports for reliable local network distribution
• Professional 4 kV lightning protection for hardware longevity

Comprehensive VPN Support

The ER7206 supports up to 100× LAN-to-LAN IPsec, 50× OpenVPN, 50× L2TP, and 50× PPTP VPN connections, with one-click auto IPSec VPN (via Omada SDN Controller) simplifying configuration and securing data transmission. This makes it well-suited for businesses with branch offices, remote workers, or partner network connections that require persistent encrypted tunnels.

• IPsec, OpenVPN, L2TP, PPTP — client and server modes
• Up to 100× LAN-to-LAN IPsec, 50× OpenVPN, 50× L2TP, and 50× PPTP VPN connections
• One-click auto IPSec VPN via Omada SDN Controller
• Supports IKEv1/v2 (controller required)

Advanced Security Features

Advanced firewall policies, DoS defence, IP/MAC/URL filtering, and additional security functions protect the network and data at both the perimeter and application level. Access control lists allow granular control over which users and devices can reach specific network resources.

• SPI firewall with DoS/DDoS attack prevention
• IP/MAC/URL filtering and Access Control List (ACL)
• IP-MAC binding to prevent unauthorised device access
• Speed test and traffic monitoring tools built in

Omada SDN Integration & Centralised Management

Full Omada SDN integration supports Zero-Touch Provisioning, centralised cloud management, and intelligent monitoring, allowing the ER7206 to be deployed and managed remotely as part of a broader Omada network infrastructure. Standalone mode is also supported for simpler single-site deployments.

• Full Omada SDN integration with Zero-Touch Provisioning
• Cloud access and Omada app for remote management from any location
• Compatible with Omada hardware, software, and cloud-based controllers
• Standalone web UI for controller-free operation

Proudly sold by the Ringwood Digital Store.

Delivering high-speed transmissions through dual 2.5Gbps ports, the ER707-M2 is designed for multi-person environments such as retail stores, hotels, and offices. Its flexible port configuration means it can adapt to a wide range of network topologies, from simple single-WAN setups to complex multi-link deployments with failover and load balancing across mixed connection types.

Key Highlights

• 1× 2.5G RJ45 WAN port and 1× 2.5G RJ45 WAN/LAN port for high-bandwidth uplink connectivity
• 1× Gigabit SFP WAN/LAN port and 4× Gigabit RJ45 WAN/LAN ports for flexible port assignment
• Up to 6 WAN ports spanning 2.5G RJ45, Gigabit fibre, and Gigabit RJ45
• Compact desktop/rack-mountable form factor suited to office environments

Multi-WAN Load Balancing & LTE Backup

Multi-WAN load balancing distributes data streams based on the bandwidth proportion of every WAN port to increase the utilisation rate of multi-line broadband. A USB port supports 4G/3G modem connectivity for LTE WAN backup, providing an additional safety net when primary connections are disrupted.

• Up to 6 configurable WAN ports with load balancing and failover
• USB WAN backup via 4G/5G LTE modem
• USB storage sharing over the network
• Multi-line broadband aggregation for maximised uplink availability

Comprehensive VPN Support

Multiple VPN protocols are supported including SSL VPN, GRE VPN, OpenVPN, IPSec, PPTP, L2TP, and L2TP over IPSec, giving businesses versatile options for securing remote worker connections and inter-branch site-to-site tunnels. One-click auto IPSec VPN simplifies VPN configuration and deployment for teams without dedicated network engineers.

• Full VPN protocol support: SSL, GRE, OpenVPN, IPSec, PPTP, L2TP, L2TP over IPSec
• Supports up to 100× LAN-to-LAN IPsec, 66× OpenVPN, 60× L2TP, and 60× PPTP VPN connections
• Can operate as a VPN client, connecting to up to 6 OpenVPN servers simultaneously
• One-click auto IPSec VPN for simplified deployment

Advanced Security Features

The ER707-M2 includes a full complement of enterprise-grade security tools to protect both the network perimeter and internal traffic. Advanced firewall policies, DoS defence, IP/MAC/URL filtering, and additional security functions provide layered protection suitable for business-critical environments.

• SPI firewall with DoS/DDoS attack defence
• IP/MAC/URL filtering and Access Control List (ACL)
• IP-MAC binding and One-Click ALG activation
• Captive portal for guest network authentication

Omada SDN Integration & Centralised Management

Full Omada SDN integration supports Zero-Touch Provisioning, centralised cloud management, and intelligent monitoring — enabling the ER707-M2 to be deployed and managed remotely as part of a larger Omada ecosystem alongside switches and access points.

• Full Omada SDN integration with Zero-Touch Provisioning
• Cloud access and Omada app for remote management
• Standalone web UI and CLI management also available
• Real-time network status dashboard and topology view

Proudly sold by the Ringwood Digital Store.