What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
To connect offices with Ethernet over a wide-area network, order a Carrier Ethernet service from a provider, select a topology that matches how the sites must communicate, and configure each site’s customer-edge device to match the provider handoff. Before accepting the circuit, verify VLAN handling, MTU, performance, and failover against agreed requirements.
What does Ethernet over a WAN provide?
Carrier Ethernet carries Layer 2 Ethernet service across a provider WAN. The provider connects customer-facing handoffs, called User-to-Network Interfaces (UNIs), so customer sites can exchange Ethernet traffic without building a separate physical WAN between them. MEF describes these services as technology-agnostic and suitable for enterprise connectivity, backhaul, and cloud access.
The service topology determines which sites can communicate. Choose it based on the actual traffic and security policy, not just the service name.
| Service | Topology | Communication pattern | Best fit |
|---|---|---|---|
| E-Line | Point-to-point between exactly two UNIs, as described in Cisco’s Carrier Ethernet documentation | The two endpoints connect to each other | A private Ethernet connection between two offices or sites |
| E-LAN | Multipoint-to-multipoint between two or more UNIs | Connected endpoints have full-mesh reachability | Several sites that need to communicate with one another |
| E-Tree | Rooted multipoint | Spokes communicate through a root; spokes are not intended to communicate freely with one another | Hub-and-spoke designs where inter-spoke communication should be limited |
MEF and Cisco describe E-Line and E-LAN in these terms; MEF also identifies E-Tree as the rooted-multipoint option. A topology is not a substitute for firewall rules or other security controls: document which traffic should pass between sites and enforce policy at the appropriate network layers.
#1 Best Overall
- 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
- 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
- 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
- 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
- Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q
What to agree with the provider before ordering
Write down the service requirements before requesting a quote or provisioning. The provider needs enough detail to confirm availability and deliver a handoff that matches your equipment and operating needs.
- Endpoints and topology: Give the provider each site address and specify E-Line, E-LAN, or E-Tree. For a cloud connection, name the required cloud regions and ask whether the connection is direct or provider-mediated.
- Bandwidth: Record the committed rate and any permitted burst rate, including how bursts are measured and handled. Ask whether bandwidth can be changed on demand or only through a new order.
- Traffic priorities: Identify the classes of service you need and ask how traffic is marked, mapped, and policed at the UNI.
- Frame size and VLANs: Specify the required MTU and whether the service is port-based or VLAN-based. List the customer VLAN IDs and confirm whether tags are preserved, translated, or stacked. Agree on native VLAN and QinQ behavior explicitly.
- Resilience and service objectives: State whether you require diverse paths, protection switching, or another recovery arrangement. Agree on availability, latency, loss, and restoration objectives in the service terms; do not assume a particular objective from the service label.
- Operations: Identify who monitors each handoff, who receives alarms, how faults are escalated, and when maintenance may occur.
MEF’s Elastic Ethernet Services work describes selected service attributes that can be changed within a short maintenance interval. If you want elastic bandwidth, have the provider define which attributes are changeable, the ordering mechanism, the expected change interval, and billing treatment.
Rank #2
- WiFi 6 Mesh Wi-Fi - Next-gen Wi-Fi 6 AX3000 whole home mesh system to eliminate weak Wi-Fi for good(2×2/HE160 2402 Mbps plus 2×2 574 Mbps)¹²
- More than a WiFi Router - Deco X55 can work as a standalone Wi-Fi Router. All the TP-Link Deco Mesh can work together. Better than traditional WiFi Router and Range Extender
- Whole Home WiFi Coverage - Covers up to 2500 square feet with 1 Deco X55. Simply add more Deco if you need more coverage. Enjoy seamless high-performance Wi-Fi 6 and eliminate dead zones and buffering¹
- Our Cybersecurity Commitment - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement
- More Gigabit Ports - Each Deco X55 has 3 Gigabit Ethernet ports(6 in total for a 2-pack) and supports Wired Ethernet Backhaul for better speeds. Any of them can work as a Wi-Fi Router
What equipment and handoff are needed at each site?
At a minimum, each site needs a customer-edge (CE) Ethernet WAN router or Layer 2 edge device with an interface compatible with the provider’s handoff. Cisco’s ASR 9000 documentation describes provider-edge Layer 2 Ethernet WAN operation; it is an example of the service context, not a recommendation that a customer buy that platform.
Before selecting or configuring the CE, confirm the physical and logical handoff details with the carrier:
Recommended Free Tools
Rank #3
- Tri-Band WiFi 6E Router - Up to 5400 Mbps WiFi for faster browsing, streaming, gaming and downloading, all at the same time(6 GHz: 2402 Mbps;5 GHz: 2402 Mbps;2.4 GHz: 574 Mbps)
- WiFi 6E Unleashed – The 6 GHz band brings more bandwidth, faster speeds, and near-zero latency; Enables more responsive gaming and video chatting
- Connect More Devices—True Tri-Band and OFDMA technology increase capacity by 4 times to enable simultaneous transmission to more devices
- Unique Design, More RAM, Better Processing - A unique housing design provides optimal heat dissipation, combined with a 1.0 GHz dual-core CPU and 512 MB High-Speed Memory, the AXE75 is designed for long-term reliability and performance.
- EasyMesh-compatible - Extend network range even more by adding EasyMesh-compatible routers, extenders, or wireless powerline adapters for a seamless, whole-home connection. Eliminate dead zones, drops, and lag as you move across your home.
- Physical medium and connector, interface speed, and duplex settings.
- Whether the carrier presents a tagged or untagged service, and which VLAN tags it expects.
- Supported frame size, including any VLAN encapsulation overhead relevant to the service.
- Whether the customer device should bridge frames, route between networks, or perform both functions.
- How redundancy is delivered and what customer-side configuration is required.
Document the demarcation point: the UNI, the customer device port, the provider’s equipment or cabling responsibility, and which party owns troubleshooting on each side. MEF UNI specifications include automatic configuration and connectivity verification capabilities, but the exact functions available depend on the provider’s implementation. Confirm them for the ordered service rather than assuming they are enabled.
How to implement the circuit
- Define the service: Record endpoint locations, topology, bandwidth and burst behavior, classes of service, MTU, resilience needs, and target availability.
- Agree the demarcation: Get the UNI details, handoff medium and speed, customer-edge port requirements, and responsibility boundary in writing.
- Map VLANs: Decide whether the circuit carries a whole port or selected VLANs. Specify customer VLAN IDs and document tag preservation, translation, stacking, native VLAN, and QinQ behavior with the carrier.
- Configure the customer edge: Match the interface speed, tagging, MTU, and bridge or routing mode to the provider handoff. Configure redundancy only according to the provider’s design and the device’s supported features.
- Validate before handover: Check link state, VLAN counters, MAC learning, frame size, throughput, latency, loss, and failover. Use Ethernet OAM where both sides support it.
- Put the circuit into operation: Record alarm ownership, escalation contacts, maintenance windows, and baseline performance measurements.
Configuration syntax is device- and provider-specific; a generic router command can put the wrong VLAN or MTU on the handoff. Use the CE vendor’s documentation and the carrier’s UNI specification for exact settings, then compare the live configuration with the agreed service record.
Rank #4
- 𝐍𝐞𝐱𝐭-𝐆𝐞𝐧 𝐁𝐄𝟓𝟎𝟎𝟎 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝟕 - Delivers up to 4324 Mbps on the 5GHz band and 688 Mbps on the 2.4 GHz band with 5 streams for 4K/8K streaming, AR/VR gaming, and more. Performance varies by conditions, distance to devices, & obstacles such as walls.⌂◇
- 𝐔𝐥𝐭𝐫𝐚-𝐅𝐚𝐬𝐭 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐖𝐢𝐫𝐞𝐝 𝐏𝐞𝐫𝐟𝐨𝐫𝐦𝐚𝐧𝐜𝐞 – Features 1x 2.5 Gbps WAN port, 1x 2.5 Gbps LAN port and 3x 1 Gbps LAN ports, integrate with a multi-gig modem for fast gig+ internet and offer high-speed data transmissions.
- 𝐖𝐢𝐝𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐰𝐢𝐭𝐡 𝐒𝐭𝐫𝐨𝐧𝐠 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧 - Get up to 2,400 sq. ft max coverage for up to 80 devices at a time. 5 optimally positioned antennas and Beamforming technology focus Wi-Fi signals toward hard-to-cover areas for stronger coverage.
- 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
- 𝐃𝐨𝐞𝐬 𝐍𝐨𝐭 𝐒𝐮𝐩𝐩𝐨𝐫𝐭 𝟔 𝐆𝐇𝐳 𝐁𝐚𝐧𝐝 – Please note that this dual-band WiFi 7 router does not support the 6 GHz band. It operates on the 2.4 GHz and 5 GHz bands only.
How to test an Ethernet WAN circuit
Test each property against an agreed acceptance criterion. A link light alone proves only that the physical interface is up; it does not establish that the correct VLANs, frame size, or service performance are working.
Check connectivity and Layer 2 learning
- Confirm the CE interface and provider handoff report the expected link state and speed.
- Verify that the intended VLANs appear on the correct interfaces and that counters increase when test traffic is sent.
- Check that expected remote MAC addresses are learned. If they are absent, inspect VLAN tagging, bridging, and the provider’s service mapping.
Check MTU and forwarding
Test frames at the agreed maximum size, including the tag treatment in use. A path can pass small frames while dropping larger ones, so verify the provider’s supported frame size rather than inferring it from a successful ping. If the test fails, compare CE interface MTU, VLAN encapsulation, and the provider’s UNI setting at both endpoints.
Best Value
- 【Flexible Port Configuration】1 Gigabit SFP WAN Port + 1 Gigabit WAN Port + 2 Gigabit WAN/LAN Ports plus1 Gigabit LAN Port. Up to four WAN ports optimize bandwidth usage through one device.
- 【Increased Network Capacity】Maximum number of associated client devices – 150,000. Maximum number of clients – Up to 700.
- 【Integrated into Omada SDN】Omada’s Software Defined Networking (SDN) platform integrates network devices including gateways, access points & switches with multiple control options offered – Omada Hardware controller, Omada Software Controller or Omada cloud-based controller(Contact TP-Link for Cloud-Based Controller Plan Details). Standalone mode also applies.
- 【Cloud Access】Remote Cloud access and Omada app brings centralized cloud management of the whole network from different sites—all controlled from a single interface anywhere, anytime.
- 【SDN Compatibility】For SDN usage, make sure your devices/controllers are either equipped with or can be upgraded to SDN version. SDN controllers work only with SDN Gateways, Access Points & Switches. Non-SDN controllers work only with non-SDN APs. For devices that are compatible with SDN firmware, please visit TP-Link website.
Measure service performance and recovery
Generate traffic in both directions and compare throughput, latency, and loss with the contracted rates and objectives. Coordinate load testing with the provider so the test does not trigger policing or disrupt production traffic. If resilience is part of the service, perform an agreed failover test and record interruption and recovery behavior against the acceptance criteria.
Use Ethernet OAM when available
MEF 20 identifies support for IEEE 802.3ah link OAM, IEEE 802.1ag service OAM, and ITU-T Y.1731 performance functions. ITU-T G.8013/Y.1731 applies OAM to point-to-point, multipoint-to-multipoint, and rooted-multipoint Ethernet connectivity. Where enabled by the provider, continuity checks and loopback can help isolate a fault; loss and delay measurements can help verify service objectives. Confirm which OAM functions and endpoints are actually available on the circuit.
How to compare provider proposals
Use the same requirements sheet to compare offers; a service name alone does not establish how well a circuit meets the design.
- Topology and geographic reach to every required site.
- Committed bandwidth, burst behavior, and process for changing capacity.
- VLAN transparency, MTU, and class-of-service handling.
- Latency and loss objectives, protection design, and restoration expectations.
- OAM support, cloud on-ramps and reachable regions, and provisioning time.
- Operational responsibility for alarms, troubleshooting, and maintenance notifications.
For cloud access, ask whether the provider connection is direct or mediated by its network, which regions are reachable, and how bandwidth changes are requested and billed. MEF 47.1 identifies Cloud Interconnect and Cloud Access as broad categories of cloud connectivity; the specific reach and ordering model must come from the provider.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Common implementation problems
- Link is up, but traffic does not pass: Check VLAN IDs and tag handling at both UNIs, the selected bridge or routing mode, and whether the ordered service maps the expected endpoints.
- Some frames work, but large transfers fail: Compare the configured MTU and supported frame size across both CE interfaces and the provider service, accounting for VLAN encapsulation.
- One site can reach the hub but not another site: Confirm the ordered topology. An E-Line connects exactly two UNIs; it is not a multipoint service. An E-Tree also does not provide unrestricted spoke-to-spoke reachability.
- Performance differs from expectations: Check the committed rate, burst rules, class-of-service mapping, and test direction against the service terms. Escalate with time-stamped measurements and the provider circuit reference.
- Failover behavior is unclear: Review the written protection design and test plan with the provider before relying on recovery during an outage.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
