Full TP-Link Configuration With The Omada SDN Controller

In this video we go through a full TP-Link setup using the Omada SDN controller. I configure multiple networks ( Guest, Staff and IoT) with vlans, Wireless networks, Allow for Cloud access with the Omada controller and create firewall rules
Join our discord server:
/ discord
Find us on social media:
mactelecomnetworks
mactelecomnetworks
mactelecomn
If you would like to support the channel I have an Amazon storefront below:
Canadian Amazon Store front:
www.amazon.ca/shop/mactelecomnetworks
USA Amazon store front:
www.amazon.com/shop/mactelecomnetworks
TP-link intro/ topology 0:00
Omada Controller setup and dashboard overview 2:05
Setting up WAN connection 5:54
Network and VLAN configuration 6:33
Creating wifi networks 7:54
Create switch port profiles 9:35
Setting up Cloud access 11:07
Firewall Rules 12:01

[@kitkat4135]

3 years later and this is still solid knowledge. Just starting out with tplink and learning all I can . This is GOLD

[@AudoraAudio]

Late joiner here. I came from the Fortigate/Fortinet realm which has a closed-first mentality, so this was definitely approaching things from a different angle for me. That said, I appreciate how you explained the difference between ACL's and Port Profiles (Software permissions vs VLAN Hardware "permissions") which helped things click into place for me with the Omada stuff. Also, I didn't know that you had to lock down the virtual gateway also. Excellent info, thanks so much!

[@MrConkee]

I love the TPLink Omado SDN equipment. We were deploying Unifi for customers that were on a tight budget. But this run even less than Unifi and IMO I like it better. Great video!

[@brucekuehnle7742]

Is it true that my current EAP 225's will not work with the SDN Controller if they are not "new" enough?? That sort of sucks. I feel like back in my Open Mesh days. I am accumulating a nice collection of EOL stuff.

[@tonysimek]

Excellent video, and seeing the simplicity of this encouraged me to buy some Omada EAP's. Cody is an engineer, public servant, and professional consultant! Batman had better watch out of this guy decides to fight crime as well!

[@MactelecomNetworks]

Thanks Tony appreciate the words

[@perryuploads776]

Best explanation about VLAN and Firewall settings on a Omada controller. Thanks again!

[@Cappncino]

Wow, fantastic video as always. If I weren't running Ubiquiti already this would be a serious contender for a home's network setup. Thanks!

[@gwkdad]

That's what I was thinking, but try to find quality security cameras for tp-link. Ubiquiti cameras are the cats....

[@ingeborgdot]

@@gwkdad Not to rain on your parade, and not intending to be mean, but if you think you are getting good cameras with Ubiquiti, you are fooling yourself. :) Are they bad, probably not, but good, no.

[@benji41189]

Hey thank you for posting this. It really did help me seperate up my network and configure those firewall rules. Really useful video so thank you so much for doing it.

[@paldo771]

This video will get alot of TP Link Omada product sold. I have already bought 2 EAP225, oc200 controller, t1500g switch because of seeing how easy it is to use.. 😂😂

[@javiercamacho1673]

This is the second time I am watching your video and paused it to comment something interesting I haven't noticed. It is when you were creating LAN profiles, you have "Tagged Network" and "Untagged Network", so, 100 points to TP-Link to add this friendly setup in this area. Thank you for another excellent video, I am sure TP-Link is very happy with you..!!!

[@MactelecomNetworks]

Yup I’m glad they added it. Most vendors will have it if it’s a managed switch, router etc

[@javiercamacho1673]

@@MactelecomNetworks This will force other vendors to improve their products for small and medium business market, you know, the competition is always welcome...!!

[@leeflorack7798]

An amazing video. It's making my deployment of my TP-Link Omada system go much better! Thank you!

[@MactelecomNetworks]

Glad I was able to help 😊

[@yogiwoo]

Excellence Video. You make it so easy to config on the tp-link Omada. Was original plan to go for unify systems, but I need 10GBE READY for my QNAP NAS [production work]. I end up purchase the R605,OC200,EAP235-WALL,EAP245,PREORDER EAP620 AND TL-SG3428XMP. Same lots of money compare to Unify system.

[@ernieberlin6559]

Thanks for this video. If Ubiquiti sticks to it's cloud access compulsion in the current and upcoming controller versions, Omada is probably a very good alternative.

[@psxjmes]

Great explanation on the vlan setup! Thank you for the video this is great I may be doing this instead of forking out the money for ubiquiti gear.

[@BustinCasts]

I definitely appreciate this video sir. I'm currently in the process of switching over to TP Link Omada system from pfSense and a non Omada managed switch setup. I was struggling a little after using pfSense for quite some time and your video helped tremendously. Keep up the great work, it's much appreciated.

[@BabyDeer_Red4]

I’m thinking of doing the same. Curious how it’s worked out for you so far

[@BustinCasts]

@@BabyDeer_Red4 for my home lab/home environment it’s been great. After using pfSense the firewall leaves a little to be desired, but it does the job. All traffic is allowed by default with the firewall if that helps you at all, where as I believe pfSense it’s all blocked by default.

[@Biggudikku]

Thank you for another great video and following through with your comment! Great video and series. Looking forward to learning more from your videos!

[@MactelecomNetworks]

Thanks for watching!

[@edgarborregales2220]

Excellent ! Congratulations.

[@toddsternish]

Exactly what I needed, thanks!

[@Vendoization]

Tons of video about Unify but only one about Omada Thank you

[@dzsaki5895]

Great video! Thank U!!

[@antoniemerks1375]

Excellent video! Thanks.

[@stefosters]

Brilliant video. Thank you 👍

[@jowdyboy]

I'm currently running Unifi gear, but I'm highly considering switching to the TP-LINK Omada hardware in the future.

[@anthonydelagarde3990]

Thanks! A great video. Good value

[@thomaslucas7414]

FANTATIC VIDEO!

[@FrenchSmitty]

Hi Cody thank you so much for this. I wanted to know, when you create the admin SSID what would the be drawbacks or advantages to assigning it to vlan 1 let’s say?

[@Sam-qg1dy]

if u want to set-up Unifi, just follow the steps above nice job with the video!

[@craigsanderson2858]

Thank you for a great video. Does the TP-Link firewall/gateway support DNS over HTTPS or TLS? And could you define different DNS's to each VLAN?

[@ronm6585]

Great video, thanks.

[@jamesknight7105]

I think this was a great video, I would add a dual wan setup with failover at some time. Great Job!

[@MactelecomNetworks]

Planning on making a video about that I have two ISPs

[@jamesknight7105]

@@MactelecomNetworks 1. Network > Enable WAN1 and WAN2 2. Configure both WAN1 and WAN2 3. Transmission > Bandwidth Control Enable Bandwith Control 4. Transmission > Load Balancing - Enable Load Balancing

[@Paddyooooooooo]

Great vid!

[@jashuabat1785]

Yours worked flawlessly, my oc200 failed to adopt my er605 and switch now I'm searching everywhere how to fix it.

[@m.r.5604]

Hi Cody, great video / guide, really helped me a lot! One issue I experienced: The new network profile (All vlans) doesn't show up in my switch setting options. any suggestions how to solve this? Thank you very much!

[@16siemon]

Great Video! How would you add a couple desktops, another switch and a NAS to this network setup? Also could you elaborate further why you set it up like this? As in why the TL-R605 in between the internet and the TL-SG2008P? If I were to need more ports, could I use a TL-SG2210P instead of TL-SG2008P? Say I wanted to add a printer to this network, where would that go? I`m guessing on the TL-SG2008P? What about adding a Pi-hole, that would plug in to the TL-R605 then? Thanks!

[@bobjanjoumoer2449]

I could really use some speed tests for the router and range/speed tests for the AP. I'd also love to see how the TL-ER7206 router and the TL-SG2210P switch and the same EAP245 performs in comparison to this network in terms of speed and throughput. Unfortunately it looks like you got the lower end of the hardware spectrum from TP-Link.

[@informationtech6139]

Thank you so much bro...

[@MactelecomNetworks]

No problem

[@informationtech6139]

@@MactelecomNetworks bro is it possible to use Tp-Link TL-ANT2410MO Antenna with Tp-link EAP225? Thank you

[@pas3pas365]

My hero!

[@ElmerShox]

nice setup tutorial! more power! also setting up this kind of network in philippines!

[@sonalight]

This is great thank you. If I have an wireless access point connected to a lan port and all vlans are sent through. How do you prevent a user from accessing the admin lan if they plug directly into the ethernet port where the AP is plugged? How to assign the rogue machine to the guest vlan unless they have specific mac address?

[@htran383]

Great video, thanks! I was looking for a solution to remotely video my IP cameras but didn't want to use any of the software or built in Orbi VPN and did not want to setup port forwarding. If I set it up like yours with the multiple networks for Guest and IoT, can I just put this device in front of my Orbi and still achieve this? Trying to understand if I need to add additional hardware for the wireless networks or can I leverage my existing. Thanks Cody!

[@johnchesterreyes845]

this is the most clear setup video for omada. and i wanted to know more. btw i also using those devices. what firmware do you have on your oc200. because that GUI looks the latest one. and i had a problem with the vouchers on that. because all the user/client that connects on my guest portal that didn't use any voucher, can connect to facebook/messenger(this apps only) just by connecting to the open guest SSID.

[@petercaniga6158]

Thanks for the vidoe, helped so much, just a question, do I need external firewall to protect my LAN from WAN attacks? cause i do not see configure rules for WAN to LAN. Thanks

[@kurts3779]

Hi Cody, I have the OC200 hardware controller setup with multiple EAP's and the TP link 8 port switch at my home, and it's all working fine. I have two other properties in different towns where I am going to setup sites for in the Omada software controller and those places will all have the TP link EAP's along with the same switch. So my question is, would I need to have the OC200 hardware controller setup at each property? I don't want to have a dedicated computer running but also not sure if just the one OC200 hardware controller I'm using at my home is fine.

[@ahmadzaatar]

Hi Great video thanks , i have the same setup, do you think will be a solution for Airplay to discover between Vlans. i'm not able to use the airplay option unless i'm in the same subnet.

[@RomanDoes]

Hey man! What work around do you suggest for mDNS if I use ACL? Let's say if I have a shared printer across different ACL VLANs. TIA

[@emiddioricco5974]

hi mac, great video but I've got some difficulties. into the tab WN-->Switch Set I've got "No entry in the table" so I can't select the ports... what I miss up?

[@krutarthpatel7778]

can I do all this controlling stuff without purchasing a hardware controller OC200 ? including cloud controlling?

[@EduardoAMarin]

Thanks for the video, being struggling with chromecast, I saw some people suggesting that solution is mDNS but is not develop in Omada. How to allow the chromecast to recieved request from secured VLAN to IOT VLAN?

[@trimmkm]

Thanks for the great video series. I’ve followed your video with the same equipment (except for the controller, running the software on a PC). I’ve been able to set up an ACL rule to allow VLAN to access the switch with success. However, when I try to create a similar rule to allow access to a home assistant server on another VLAN, it fails. Any ideas on where to start looking?

[@trimmkm]

After reviewing the video again, I realize that there is no rule denying traffic originating from the management VLAN, so the ping requests are returned. In my case I had blocked all traffic between VLANs, and therefore my pings were not being returned. I've enabled bi-directional rules, and this solves the problem.

[@javiertorresfernandez3533]

great info!. on wich scenarios you want to create different sites on the same hardware o.c.? I'm not getting that clear. thanks!

[@kelownadug]

a video on setting up the tlr 600 router would be great!

[@MactelecomNetworks]

Ill have to see if my contact at TP-link can send me out one

[@NK-vq7nn]

If I don't have a TP-link switch, but Trendnet that isn't manageable, would I still be able to separate the traffic to specifc devices. for instance, AP and Multimedia switch?

[@VijayKumar-hn8vq]

Thanks for the great video series. I’ve followed your video with the same equipment . I’ve been able to set up an ACL rules to allow and disallowed some VLANs . Can I see all user activities logs on controller ? like which user is reaching which site and how much bandwidth they consumes. I am looking for immediate support here. Thanks in advance!

[@GiovanniManzo]

excellent video! is there any way to connect two routers RL-605 via VPN using only one Omada Controller? The two RL605 are in two separate houses and the Controller is located in one house.

[@babynilakshi2623]

Thanks for making the beautiful video..I have my TPlink behind my ISP router, what extra steps do I need to make to setup OpenVPn? please help 😢😢

[@barkman1one]

Thanks for the video, used it to setup my network, but I am having a hard time changing the client IP address, in the config for use fixed IP Address there is this message,"The feature is available only when the gateway acts as the DHCP server" I have searched for hours to find a how to get it to work, do you have any ideas how to get it to work?

[@NgocLaMinh]

Hi, can the Omada system works without any Jetwstream switch (just very basic unmanaged switch)? Actually, I just need 3 AP and the ER605 has enough LAN port for me (1 Port for WAN, 1 port for the Controller OC200). Thanks you so much for your contribution.

[@VegasEducation]

Are you able to set the kids network so that it turns off internet at a certain time and blocks certain websites, etc?

[@gustavoamarante9597]

Thanks for this video. Can I create a firewall rule to block an external ip that is trying to authenticate to my VPN created with PPTP protocol? The L2TP protocol I have a lot of problems.

[@llamaSHORTS1]

Any idea on how to set up multiple public static IPs within Omada? We can get a block of static IPs from our ISP and want to set one of these IPs for our security camera systems

[@KenHudson69]

How do you disable the unused ports on the router? I can find how on the switch but not the router.

[@miguelfmsmac]

Great video!! I am having an issue where my Apple TV (ATV is in the IoT Vlan) cannot access my NAS (NAS is in the default Vlan) to stream movies to my TV unless I disable the ACL rule (block IoT to Vlans) . I tried the last part in the video (allow staff access to switch) using the IoT network but no joy. Any ideas?

[@robertperkins4909]

I have the ER7206 router, SG2210P switch, and 4 EAP610 APs, 2 upstairs and two down. With just a single SSID based on my LAN, signal strength is great on all APs. When I setup a VLAN for wired and wireless with a separate SSID, I get no internet. Ideas?

[@Warfalcon]

Is there a extra step to do here if you want your devices to be able to talk to the IoT network? For example I'm a home user and I want to be able to cast to my Chromecast or TV, etc. I'm about to purchase these items and set this up, using passthrough for my AT&T router. Thanks, great video! EDIT: Nevermind TP Link at the time of my message does not support mDNS over VLANs. That sucks

[@ausguy4385]

So would tplink D9 mesh? Do all tplink smart managed switches work with omada?

[@ernestoreid8706]

how to add device in omada controller if I installed the omada controller in cloud instance.

[@netchiller]

I have couple of vlan 20,30,40 and a WiFi printer is connect to vlan 50 (and SSID) How do I configure to ensure printer is accessible from all other vlan/SSID

[@digrassi]

Hello, Er605 or Edgerouter x, choose which one? Thanks

[@marksep5294]

Can I use CISCO 140ac as WAP in all Tplink system, TP link jetstream and Omada controller?

[@marine1718]

That is exacly waht I search for thanks for the video! How is the stability of omada?

[@cd8496]

Isn’t there an option to use a software based controller, if I don’t want to go the hardware controller way?

[@nicpuia7112]

would it work the same if you connect the controller directly to the router as well?

[@asutcliffe25]

Perhaps you're the person to ask, I just got a tplink router and oc200 controller and am not having much luck with port forwarding to a server for nginx proxy manager, I am able to forward directly to the default port of nginx but getting anything to route for nginx is a no-go. I suspect this may be a double nat issue...or lack thereof. Is there a way to 'enable' nat loopback in the oc200 controller?

[@mwildman5768]

Hi Cody Should I get a different result if I log into my Omada controller on my computer wirelessly or over Ethernet? When I log in wirelessly, it will show my AP's as adopting failed.....but when I plug into ethernet it will show that all my AP's have adopted and connected. Is this normal?

[@olapadequadri6978]

Can I use an unmanaged switch for this

[@imperialmedia6815]

Good day sir what is the botleneck of mbps output and input of oc200 can this device process up to 700 mbps? Thank you

[@Kyle97ZJ]

What is the benefit or the reason for the allow Staff to Switch rule? Also, I would think a Staff to IoT rule is needed to allow for in home access/control to those devices?

[@alfred576]

I setup the inter vlan blocking rules according to your video. I configured the main network vlan1 to 192.168.10.0 subnet. Then I created 2 tagged LANS such as VLAN32 (192.168.32.0) and VLAN40 (192.168.40.0). How do I get the main network VLAN1 to ping the tagged VLANS gateway IP from the main network? Thank you

[@YHK_YT]

Can you use a switch that has the omada SDN integrated instead of the controller?

[@leojoelgarcia6301]

Thank you it helped me a lot. But can I change the default 192.168.0.X to 192.168.1.X ?

[@sakzprocyon1236]

Bro i got er605 and converge sub router if i connect to the main converge router my er605 works but if i connect my er605 to the subrouter it doesnt work.. what should i do?

[@jakebechtproductions3850]

will the OC200 recognize the TL-SG105PE?

[@alfred576]

I just came across your youtube channel which is excellent. Do you have any videos on configuring IP phones, SIP profiles, VOIP? Thanks.

[@jimurayani8815]

can i directly connect OC200 from Router without using TP link switch?

[@jaimecayofragada2878]

Great video and explanation, makes it look much easier and simpler. Question with using the Controller though, will having it override any settings that may be configured directly on each of the devices? Particularly the R605. If I've used it and configured based on my needs without the Controller, would adding the Controller in the mix and configuring it through SDN take over standalone configs? Thanks!

[@MactelecomNetworks]

Hi, Adding the controller will erase the settings. You will have to do all the configuration from the controller

[@jaimecayofragada2878]

@@MactelecomNetworks I see, got it, thanks for the clarification. Cheers!

[@rayjay1234]

Do I need to be able to connect my computer via Ethernet to get this set up? I’ve got a MacBook pro with no Ethernet ports. I have the er605, oc200 and two EAPs

[@gordonsoukoreff4309]

As I understand it this switch has the first 4 ports PoE so why do you have port 1 plugged into the router (RL-605) in your diagram? Wouldn't that waste a PoE port? Wouldn't you want to plug it into port 8 of the switch? Thx.

[@netchiller]

i have updated my DNS on Internet section, but seems like its not reflecting. please advice?

[@davorkarasic]

My Omada OC200 controller is not recognising the TL-SG108Pe (TP-Link) switch. Any advice what could I do to make this happen?

[@themspt]

what can you do without the gateway device?

[@lsousasoares]

Great video! It helped me a lot. Have you tested controlling IoT devices that are connected to dedicated vlan network, from a mobile device connected to 192.168.0.1/24 (vlan 1) ? I'm struggling with this, so any help is appreciated. :)

[@jadefullente6542]

hi there..can you please help me? I'm done setting up my OC200 but the problem is it can't detect my eap 110..thanks you in advance

[@leumasile]

Hi, Thanks for the demo. Question; Can I remove the TP Link switch and have the same outputs? I mean, I would like to connect the EAPs to the router directly. Does it work? thanks

[@davidanderson7695]

You would need to use a PoE adapter. I know the single-pack adapters come with them, but I'm not sure about a multi-pack. I'm not sure if that particular router provides PoE. If not, that's probably why a switch (with PoE) was used.

[@jasonspector5050]

is there a easy way to setup url block list by category ? Great video thanks IT Admin Seguin TX

[@jemueltizon8032]

How hidden ISP Ip address to the user on my hotspot to ensure my Isp is secure to any attacker ? Can you help me sir

[@michaelma4011]

Great video. by the way, do you know what its CPU speed is? Does its 128MB DRAM affect performance for a small home office with about 30-40 devices? Thank you!!!

[@yuema6621]

I am looking for the answer to the questions

[@pjuhl2313]

How to I schedule a port to reboot periodically in Omada?

[@DavidTelesPortugal]

Is there a option for multicast DNS on the Omada sdn like in unifi? I want to add this to my home, but I want HomeKit and chromecast to continue working!

[@trimmkm]

There doesn’t seem to be support for mDMS as of yet.

[@impressiveworld8392]

Sir. What is the setup for big network. Like 2000 user and 220 accesspoint. What kind of tp link device i should take for this big network?

[@punchtool2920]

Does the Omada controller support Link aggregation?

[@ferdinandmelegrito4943]

how if i installed/configured already the eap110 without the oc200 then after while i got oc200, do i need to install from scratch or i'll install only the oc200

[@WieEiPiehGuy]

You would need to configure everything from scratch.