Full TP-Link Configuration With The Omada SDN Controller

[@kitkat4135]

3 years later and this is still solid knowledge. Just starting out with tplink and learning all I can . This is GOLD

[@javiercamacho1673]

This is the second time I am watching your video and paused it to comment something interesting I haven't noticed. It is when you were creating LAN profiles, you have "Tagged Network" and "Untagged Network", so, 100 points to TP-Link to add this friendly setup in this area. Thank you for another excellent video, I am sure TP-Link is very happy with you..!!!

[@MactelecomNetworks]

Yup I’m glad they added it. Most vendors will have it if it’s a managed switch, router etc

[@javiercamacho1673]

@@MactelecomNetworks This will force other vendors to improve their products for small and medium business market, you know, the competition is always welcome...!!

[@Cappncino]

Wow, fantastic video as always. If I weren't running Ubiquiti already this would be a serious contender for a home's network setup. Thanks!

[@gwkdad]

That's what I was thinking, but try to find quality security cameras for tp-link. Ubiquiti cameras are the cats....

[@ingeborgdot]

@@gwkdad Not to rain on your parade, and not intending to be mean, but if you think you are getting good cameras with Ubiquiti, you are fooling yourself. :) Are they bad, probably not, but good, no.

[@MrConkee]

I love the TPLink Omado SDN equipment. We were deploying Unifi for customers that were on a tight budget. But this run even less than Unifi and IMO I like it better. Great video!

[@brucekuehnle7742]

Is it true that my current EAP 225's will not work with the SDN Controller if they are not "new" enough?? That sort of sucks. I feel like back in my Open Mesh days. I am accumulating a nice collection of EOL stuff.

[@tonysimek]

Excellent video, and seeing the simplicity of this encouraged me to buy some Omada EAP's. Cody is an engineer, public servant, and professional consultant! Batman had better watch out of this guy decides to fight crime as well!

[@MactelecomNetworks]

Thanks Tony appreciate the words

[@perryuploads776]

Best explanation about VLAN and Firewall settings on a Omada controller. Thanks again!

[@yogiwoo]

Excellence Video. You make it so easy to config on the tp-link Omada. Was original plan to go for unify systems, but I need 10GBE READY for my QNAP NAS [production work]. I end up purchase the R605,OC200,EAP235-WALL,EAP245,PREORDER EAP620 AND TL-SG3428XMP. Same lots of money compare to Unify system.

[@BustinCasts]

I definitely appreciate this video sir. I'm currently in the process of switching over to TP Link Omada system from pfSense and a non Omada managed switch setup. I was struggling a little after using pfSense for quite some time and your video helped tremendously. Keep up the great work, it's much appreciated.

[@BabyDeer_Red4]

I’m thinking of doing the same. Curious how it’s worked out for you so far

[@BustinCasts]

@@BabyDeer_Red4 for my home lab/home environment it’s been great. After using pfSense the firewall leaves a little to be desired, but it does the job. All traffic is allowed by default with the firewall if that helps you at all, where as I believe pfSense it’s all blocked by default.

[@JohnDoe1999-lg7mh]

Thanks. Have been using Cisco SG2xx/3xx and some newer CBS250/350 switches. Just got my first TP-Link switch, the SG3210X-M2 Only getting so far and getting stumped. Lots of differences between the two and figuring out the naming conventions. With Cisco you have switchport access and switchport trunk. Then with TP-Link you just have switchport general to start off with. I know there is some comm happening on my LAG trunk as I can see LLDP info. pfSense not seeing any DHCP requested. Down to my last few hairs on my head.

[@AudoraAudio]

Late joiner here. I came from the Fortigate/Fortinet realm which has a closed-first mentality, so this was definitely approaching things from a different angle for me. That said, I appreciate how you explained the difference between ACL's and Port Profiles (Software permissions vs VLAN Hardware "permissions") which helped things click into place for me with the Omada stuff. Also, I didn't know that you had to lock down the virtual gateway also. Excellent info, thanks so much!

[@paldo771]

This video will get alot of TP Link Omada product sold. I have already bought 2 EAP225, oc200 controller, t1500g switch because of seeing how easy it is to use.. 😂😂

[@leeflorack7798]

An amazing video. It's making my deployment of my TP-Link Omada system go much better! Thank you!

[@MactelecomNetworks]

Glad I was able to help 😊

[@benji41189]

Hey thank you for posting this. It really did help me seperate up my network and configure those firewall rules. Really useful video so thank you so much for doing it.

[@Vendoization]

Tons of video about Unify but only one about Omada Thank you

[@psxjmes]

Great explanation on the vlan setup! Thank you for the video this is great I may be doing this instead of forking out the money for ubiquiti gear.

[@jowdyboy]

I'm currently running Unifi gear, but I'm highly considering switching to the TP-LINK Omada hardware in the future.

[@ernieberlin6559]

Thanks for this video. If Ubiquiti sticks to it's cloud access compulsion in the current and upcoming controller versions, Omada is probably a very good alternative.

[@gordonsoukoreff4309]

As I understand it this switch has the first 4 ports PoE so why do you have port 1 plugged into the router (RL-605) in your diagram? Wouldn't that waste a PoE port? Wouldn't you want to plug it into port 8 of the switch? Thx.

[@Biggudikku]

Thank you for another great video and following through with your comment! Great video and series. Looking forward to learning more from your videos!

[@MactelecomNetworks]

Thanks for watching!

[@jashuabat1785]

Yours worked flawlessly, my oc200 failed to adopt my er605 and switch now I'm searching everywhere how to fix it.

[@toddsternish]

Exactly what I needed, thanks!

[@VegasEducation]

Are you able to set the kids network so that it turns off internet at a certain time and blocks certain websites, etc?

[@jamesknight7105]

I think this was a great video, I would add a dual wan setup with failover at some time. Great Job!

[@MactelecomNetworks]

Planning on making a video about that I have two ISPs

[@jamesknight7105]

@@MactelecomNetworks 1. Network > Enable WAN1 and WAN2 2. Configure both WAN1 and WAN2 3. Transmission > Bandwidth Control Enable Bandwith Control 4. Transmission > Load Balancing - Enable Load Balancing

[@Sam-qg1dy]

if u want to set-up Unifi, just follow the steps above nice job with the video!

[@thomaslucas7414]

FANTATIC VIDEO!

[@mr.brianjason]

Great video.. a channel worth subscribing to. Very thorough explanation. I’m going to upgrade my home network and I see a lot Unifi suggestions. There was one who told me about Omada and here I am and I guess I’m heading this route. Omada should get the same following as Unifi.

[@kelownadug]

a video on setting up the tlr 600 router would be great!

[@MactelecomNetworks]

Ill have to see if my contact at TP-link can send me out one

[@asutcliffe25]

Perhaps you're the person to ask, I just got a tplink router and oc200 controller and am not having much luck with port forwarding to a server for nginx proxy manager, I am able to forward directly to the default port of nginx but getting anything to route for nginx is a no-go. I suspect this may be a double nat issue...or lack thereof. Is there a way to 'enable' nat loopback in the oc200 controller?

[@RomanDoes]

Hey man! What work around do you suggest for mDNS if I use ACL? Let's say if I have a shared printer across different ACL VLANs. TIA

[@anthonydelagarde3990]

Thanks! A great video. Good value

[@Kyle97ZJ]

What is the benefit or the reason for the allow Staff to Switch rule? Also, I would think a Staff to IoT rule is needed to allow for in home access/control to those devices?

[@krutarthpatel7778]

can I do all this controlling stuff without purchasing a hardware controller OC200 ? including cloud controlling?

[@netchiller]

I have couple of vlan 20,30,40 and a WiFi printer is connect to vlan 50 (and SSID) How do I configure to ensure printer is accessible from all other vlan/SSID

[@robertperkins4909]

I have the ER7206 router, SG2210P switch, and 4 EAP610 APs, 2 upstairs and two down. With just a single SSID based on my LAN, signal strength is great on all APs. When I setup a VLAN for wired and wireless with a separate SSID, I get no internet. Ideas?

[@Robbie_Wozzlegummich]

Can the rl605 be used as a firegaurd client. Client to main site (not sit to site)?

[@miguelfmsmac]

Great video!! I am having an issue where my Apple TV (ATV is in the IoT Vlan) cannot access my NAS (NAS is in the default Vlan) to stream movies to my TV unless I disable the ACL rule (block IoT to Vlans) . I tried the last part in the video (allow staff access to switch) using the IoT network but no joy. Any ideas?

[@mymotoeabad4168]

Hi, just a question. How can you create one-way access from Staff VLAN to IoT VLAN meaning, Staff can access all IoT devices and maintain the session, but IoT can't initiate it. I have seen it done with Ubiquiti. Thanks for the vid!

[@metalfuelandfire]

There is a checkbox for "bi-directional" so you can create a 1 way allow rule followed by a "bi-directional" deny rule

[@antoniemerks1375]

Excellent video! Thanks.

[@edgarborregales2220]

Excellent ! Congratulations.

[@sonalight]

This is great thank you. If I have an wireless access point connected to a lan port and all vlans are sent through. How do you prevent a user from accessing the admin lan if they plug directly into the ethernet port where the AP is plugged? How to assign the rogue machine to the guest vlan unless they have specific mac address?

[@ernestoreid8706]

how to add device in omada controller if I installed the omada controller in cloud instance.

[@NK-vq7nn]

If I don't have a TP-link switch, but Trendnet that isn't manageable, would I still be able to separate the traffic to specifc devices. for instance, AP and Multimedia switch?

[@llamaSHORTS1]

Any idea on how to set up multiple public static IPs within Omada? We can get a block of static IPs from our ISP and want to set one of these IPs for our security camera systems

[@nicpuia7112]

would it work the same if you connect the controller directly to the router as well?

[@marksep5294]

Can I use CISCO 140ac as WAP in all Tplink system, TP link jetstream and Omada controller?

[@rayjay1234]

Do I need to be able to connect my computer via Ethernet to get this set up? I’ve got a MacBook pro with no Ethernet ports. I have the er605, oc200 and two EAPs

[@alfred576]

I setup the inter vlan blocking rules according to your video. I configured the main network vlan1 to 192.168.10.0 subnet. Then I created 2 tagged LANS such as VLAN32 (192.168.32.0) and VLAN40 (192.168.40.0). How do I get the main network VLAN1 to ping the tagged VLANS gateway IP from the main network? Thank you

[@sakzprocyon1236]

Bro i got er605 and converge sub router if i connect to the main converge router my er605 works but if i connect my er605 to the subrouter it doesnt work.. what should i do?

[@dxsaf5031]

if I understand correcly if you buy router TP-Link ER605, Omada SDN + 2x mesh wifi EAP235 and want to have SDN aI have only 3 options. First buy another device OMADA controler (e.g.TP-Link OC200, Omada SDN OC200) , buy aplication (install aon own server) or pay Y fee for cloud OMADA SDN acount, correct? II expect router ER605 Dont have build in controler, not?

[@onrokutan]

im little confused can someone help me out. I created my home Router + Switch + access point (using room outlets) should I create vlan in the swtich ?

[@olapadequadri6978]

Can I use an unmanaged switch for this

[@ausguy4385]

So would tplink D9 mesh? Do all tplink smart managed switches work with omada?

[@FrenchSmitty]

Hi Cody thank you so much for this. I wanted to know, when you create the admin SSID what would the be drawbacks or advantages to assigning it to vlan 1 let’s say?

[@KenHudson69]

How do you disable the unused ports on the router? I can find how on the switch but not the router.

[@johnchesterreyes845]

this is the most clear setup video for omada. and i wanted to know more. btw i also using those devices. what firmware do you have on your oc200. because that GUI looks the latest one. and i had a problem with the vouchers on that. because all the user/client that connects on my guest portal that didn't use any voucher, can connect to facebook/messenger(this apps only) just by connecting to the open guest SSID.

[@digrassi]

Hello, Er605 or Edgerouter x, choose which one? Thanks

[@ipsdon]

enjoy the demo, how can you configure Staff can access IoT, but not IoT to staff, I try to add a switch rule Staff Permit IoT , that is highest priority, but does not work. help!

[@mymotoeabad4168]

Hi, were you able to resolve this? I am having the same problem

[@ipsdon]

@@mymotoeabad4168 TP is not as functional as UDM, u have to configure bi-directional access in most circumstances, not as secured.

[@mymotoeabad4168]

@@ipsdon Thanks for the reply. It is defnitely not secure. I have tried enabling bi-directional, but it gives the IoT full access to the other VLAN without any restriction (unless I specify a destination host which is a pain and impractical).

[@netchiller]

i have updated my DNS on Internet section, but seems like its not reflecting. please advice?

[@emiddioricco5974]

hi mac, great video but I've got some difficulties. into the tab WN-->Switch Set I've got "No entry in the table" so I can't select the ports... what I miss up?

[@themspt]

what can you do without the gateway device?

[@YHK_YT]

Can you use a switch that has the omada SDN integrated instead of the controller?

[@dzsaki5895]

Great video! Thank U!!

[@pjuhl2313]

How to I schedule a port to reboot periodically in Omada?

[@impressiveworld8392]

Sir. What is the setup for big network. Like 2000 user and 220 accesspoint. What kind of tp link device i should take for this big network?

[@cd8496]

Isn’t there an option to use a software based controller, if I don’t want to go the hardware controller way?

[@EduardoAMarin]

Thanks for the video, being struggling with chromecast, I saw some people suggesting that solution is mDNS but is not develop in Omada. How to allow the chromecast to recieved request from secured VLAN to IOT VLAN?

[@mariembuenaventura1278]

Hi sir, What if I have a pfSense as the DHCP server? A TP-Link 2600G-52TS switch and Unifi UAP-AC access point? My problem is that my UAP has VLAN30(Officenetwork) and VLAN40(Guestnetwork). How can I setup the switchport for the TP-Link? Thanks!

[@MactelecomNetworks]

Hi you would have to tag the ports with the vlans you want. For your uplink you would want to out all the vlans as a trunk

[@babynilakshi2623]

Thanks for making the beautiful video..I have my TPlink behind my ISP router, what extra steps do I need to make to setup OpenVPn? please help 😢😢

[@javiertorresfernandez3533]

great info!. on wich scenarios you want to create different sites on the same hardware o.c.? I'm not getting that clear. thanks!

[@lemeszenski]

Hi I have a question about vpn er605, my openvpn client is not getting server public ip, it is getting local client IP, I would like to have server pub IP. How can I get it?

[@davorkarasic]

My Omada OC200 controller is not recognising the TL-SG108Pe (TP-Link) switch. Any advice what could I do to make this happen?

[@jakebechtproductions3850]

will the OC200 recognize the TL-SG105PE?

[@gustavoamarante9597]

Thanks for this video. Can I create a firewall rule to block an external ip that is trying to authenticate to my VPN created with PPTP protocol? The L2TP protocol I have a lot of problems.

[@Paddyooooooooo]

Great vid!

[@ElmerShox]

nice setup tutorial! more power! also setting up this kind of network in philippines!

[@NgocLaMinh]

Hi, can the Omada system works without any Jetwstream switch (just very basic unmanaged switch)? Actually, I just need 3 AP and the ER605 has enough LAN port for me (1 Port for WAN, 1 port for the Controller OC200). Thanks you so much for your contribution.

[@jadefullente6542]

hi there..can you please help me? I'm done setting up my OC200 but the problem is it can't detect my eap 110..thanks you in advance

[@aperson1181]

What is up with a potential ban on sales and recent buffer overflow security vulnerabilities of TP-Link?

[@MactelecomNetworks]

So we never installed TP link for customers I out did videos because I was asked a lot. I most likely won’t do any in the future

[@ahmadzaatar]

Hi Great video thanks , i have the same setup, do you think will be a solution for Airplay to discover between Vlans. i'm not able to use the airplay option unless i'm in the same subnet.

[@punchtool2920]

Does the Omada controller support Link aggregation?

[@mwildman5768]

Hi Cody Should I get a different result if I log into my Omada controller on my computer wirelessly or over Ethernet? When I log in wirelessly, it will show my AP's as adopting failed.....but when I plug into ethernet it will show that all my AP's have adopted and connected. Is this normal?

[@imperialmedia6815]

Good day sir what is the botleneck of mbps output and input of oc200 can this device process up to 700 mbps? Thank you

[@pas3pas365]

My hero!

[@kurts3779]

Hi Cody, I have the OC200 hardware controller setup with multiple EAP's and the TP link 8 port switch at my home, and it's all working fine. I have two other properties in different towns where I am going to setup sites for in the Omada software controller and those places will all have the TP link EAP's along with the same switch. So my question is, would I need to have the OC200 hardware controller setup at each property? I don't want to have a dedicated computer running but also not sure if just the one OC200 hardware controller I'm using at my home is fine.

[@freeworld848]

I have been trying to figure this out for the last few days without success and I was wondering if you would mind giving me an idea what I am missing.. I have an external OpenVPN server and have the client ovpn file already uploaded to Omada controller. It is succesfully connects to external VPN server however I have no idea on how to share this VPN connection within my local network - for instance on a dedicated WIFI SSID. I thought I would be able to just create a second LAN and select that new LAN under VPN connection however it does not work. Do you have any hint for me? Thank you very much

[@informationtech6139]

Thank you so much bro...

[@MactelecomNetworks]

No problem

[@informationtech6139]

@@MactelecomNetworks bro is it possible to use Tp-Link TL-ANT2410MO Antenna with Tp-link EAP225? Thank you

[@adonispenaso987]

sir what happen to my omada controller, this is brand new, but if i enter the device key, then this is happen Failed to add your hardware controller / integrated router. The device is offline. what should i do sir

[@mrhany6045]

I have a problem with omada sdn controller I have 2 access points ax3600 and After completing setup 2 access points disconnected

[@akaneeee5498]

Help me. I'm using Google Translate. I am using ER-7206 with an Omada SDN Controller. I'm trying to create a VLAN for my room and my family. I created VLANs 1 and 2. And I want to use the rightmost port of ER-7206 as VLAN2 and the other ports as VLAN1, but I can't find such a setting.

[@barkman1one]

Thanks for the video, used it to setup my network, but I am having a hard time changing the client IP address, in the config for use fixed IP Address there is this message,"The feature is available only when the gateway acts as the DHCP server" I have searched for hours to find a how to get it to work, do you have any ideas how to get it to work?

[@NBH2023]

is it possible without the switch?

[@michaelma4011]

Great video. by the way, do you know what its CPU speed is? Does its 128MB DRAM affect performance for a small home office with about 30-40 devices? Thank you!!!

[@yuema6621]

I am looking for the answer to the questions

[@ramcrash]

What is the difference between having the OC200 or having the software on a computer? Thanks.

[@narenn91]

I have the same question as well. I bought the router but I'm not sure if I need the controller

[@bitTorrenter]

All the devices have an interface via their IP address. Not sure what the OC200 offers that's so different.

[@jemueltizon8032]

How hidden ISP Ip address to the user on my hotspot to ensure my Isp is secure to any attacker ? Can you help me sir

[@jimurayani8815]

can i directly connect OC200 from Router without using TP link switch?

[@lightsonmainlightsonmain8536]

How would you reserve an IP address on a device?

[@GiovanniManzo]

excellent video! is there any way to connect two routers RL-605 via VPN using only one Omada Controller? The two RL605 are in two separate houses and the Controller is located in one house.

[@trimmkm]

Thanks for the great video series. I’ve followed your video with the same equipment (except for the controller, running the software on a PC). I’ve been able to set up an ACL rule to allow VLAN to access the switch with success. However, when I try to create a similar rule to allow access to a home assistant server on another VLAN, it fails. Any ideas on where to start looking?

[@trimmkm]

After reviewing the video again, I realize that there is no rule denying traffic originating from the management VLAN, so the ping requests are returned. In my case I had blocked all traffic between VLANs, and therefore my pings were not being returned. I've enabled bi-directional rules, and this solves the problem.

[@mitcdav]

Thank you for this video :) . One problem I have is that I am unable to block access to the management webpage of my ER7212PC Omada device using a Switch ACL. I have one VLAN for the internal network and a second VLAN for VPN users. I want to prevent the second VLAN (VPN users) from accessing the Omada web login page. The ACL blocks access to the web login page for the NAS on that VLAN, but not the login page for the Omada. Any suggestions? :)

[@wangmat9219]

Hi, We are a non-profit body and so far our setup is using cheap TP Link routers configured as access points and running a raspberry pi with FreeRadius. I am thinking of using OMADA SDN controller to replace the raspberry pi (due to several reasons). With the cheap (but with WiFi 6) routers, will I be able to use the OMADA SDN controller as Radius server? Of course the routers doesn't have accounting port enabled, only port 1812. Will I be able to use the captive portal login too (for the user to change their password)? My questions above might not sound professional for networking guys. I am not one. Correct me if I'm wrong.