OR-2000
SKU OKT-OR2000 · From $640
A fanless branch gateway that routes 5 Gbps and runs VPN without flinching.
- 5 Gbps firewall and 3.4 Gbps IPsec from a fanless, silent aluminium chassis.
- Powered by an external adapter or 802.3bt PoE-in — one cable to a closet uplink.
- Dual-WAN with SFP+ fiber and 2.5G copper for automatic failover at the branch.
Throughput
5 Gbps firewall · 3.4 Gbps IPsec VPN
Ports
2× SFP+ · 4× RJ45 2.5GbE
Sessions
1,000,000 concurrent / 90k new/s
Management
OSPF/BGP · CLI · REST
Every number, published.
Interfaces
| WAN / LAN ports | 2× SFP+ (10GbE / 1GbE) |
|---|---|
| Copper ports | 4× RJ45 100M/1G/2.5G |
| Console | 1× RJ45 RS-232, 1× USB-C |
| MAC address table | 16,000 entries |
Performance
| Firewall throughput | 5 Gbps (1518-byte), 2.8 Gbps (IMIX) |
|---|---|
| IPsec VPN throughput | 3.4 Gbps (AES-256-GCM, AES-NI) |
| Concurrent sessions | 1,000,000 |
| New sessions/s | 90,000 |
| Routing protocols | Static, OSPFv2, BGP4, VRRP |
| Tunnels | WireGuard, IPsec IKEv2, 500 peers |
Power & Environment
| Power input | External 54W adapter / 802.3bt PoE-in |
|---|---|
| Typical draw | 18 W |
| Cooling | Fanless (passive aluminium chassis) |
| Operating temperature | -10 °C to 50 °C |
| MTBF | 412,000 hours (25 °C) |
| Form factor | Desktop / wall-mount, 220 × 160 × 44 mm |
The front panel, to the octet.
Each interface is octet-numbered and colour-keyed by media. Hover a cell for its role.
- Fiber / SFP
- Copper / RJ45
- Power
- Console
Photographed as hardware.
The OR-2000 is the branch and small-site counterpart to the OR-8000. It is fanless — a passive aluminium chassis with no moving parts — which is the right call for an office ceiling, a retail back room, or an unattended cabinet where a failed fan means a truck roll. The trade-off is honest: 5 Gbps of firewall throughput and 3.4 Gbps of IPsec, which is more than enough for a branch on a gigabit or multi-gig fiber drop, and not pretending to be a data-center router.
Connectivity is built for the dual-WAN reality of a branch. An SFP+ port takes the fiber drop; a 2.5G copper port takes a secondary circuit or a cellular bridge; failover between them is automatic with sub-second detection. The remaining ports serve the local network, and the unit can be powered either by its external adapter or by 802.3bt PoE-in — so a single cable from an OP-1600 in the closet both powers and uplinks the gateway, which is a clean install in a site with no local power at the mount point.
The routing and VPN stack is scoped to the role: OSPFv2 and BGP4 for sites that need dynamic routing back to a hub, VRRP for a redundant pair, and WireGuard or IPsec IKEv2 for up to 500 tunnels. Typical draw is 18 W; rated MTBF is 412,000 hours, the highest in the OKTET router line precisely because there are no fans to age out.
What’s in the box: OR-2000 unit, 54W external power adapter (region-specific cord), RJ45-to-DB9 console adapter, wall-mount plate with screws, and a desk-stand foot set. SFP+ optics or DAC are ordered separately via OF-SFP10. For PoE-in operation no adapter is needed — confirm the upstream switch port can supply 802.3bt Type 3 before relying on it as the sole power source.
Spec it against the rest of the line.
Drop the OR-2000 into the Network Builder, or browse the full catalog.
OKT-OR2000 · OKTET — INFRASTRUCTURE, TO SPEC.