r/Omada_Networks

Hi all, Lulu from the Omada team here — back with this week's Wednesday discussion.

Every network has that one building: too far for cable (or the trench quote made you cry), but you still want cameras, an AP, or at least something better than "stand by the window and pray."

We see tons of posts here about APs, switches, and VLANs — but wireless bridges (PtP/PtMP) barely come up. So for this Wednesday's discussion:

How did you get your network across the gap?

• Wireless bridge? Fiber? Direct-burial Ethernet? Mesh? Powerline in desperation? 😅
• What are you connecting, and how far is the link?
• Real-world throughput vs. what the spec sheet promised?
• What do you wish you knew before you set it up? (Alignment headaches, trees that grew into the Fresnel zone, weather, lightning protection — we want the war stories.)

Topology diagrams and photos of questionable mounting jobs are strongly encouraged. Omada gear or not — all setups welcome:D

At one point I had an easy manage agile switch in my site. I have removed them with forget controls. The site type in global will not let me drop the easy manage device types. I do not have anything easy manage.

I have rebooted, cleared out any orphaned network devices that may have been downstream of the easy switch, and check ACL, profiles, port profiles, rates, etc. I see nothing that could have been tied at all to the easy switch.

How to drop easy types from a site. Its just greyed out with a checkmark.

OC220, ER7206, SG3428XPP-M2, SG2218P, SG3428X

Hi TP Link! I love your products and recommend them to all my clients and audiences. Nobody comes close in terms of simplicity and price to performance. I that I don't have to "activate" new equipment with a cloud account, which is an alarming trend.

I've been recommending your ER605 router to small business clients, and they've been rock-solid. One gripe with the new ones - I set one up for a client last week, and it forced me to come up with an ultracomplicated password just to start using it!

First, complicated passwords are ineffective (the guy who invented them came out years ago and told people not to bother with them).

Second and more importantly, I should be able to set the password to whatever I like. I know companies are living in fear of liability, and feel free to nag me with warnings, but I resent when something forces me to create a crazy password.

That's it! Carry on!

I have an oc220 and an er605 v2, is upgrading to the Fusion 2.5 worthwhile? Should I just get the er707-m2 or jump right into the Fusion.

4200 sqft home

4 eap720s

Oc220

Er605 v2

I have 4 vlans. One i setup to a single port with Internet access only. ACLs block inter VLAN traffic from that single vlan to rest. I setup a vpn client for that single vlan. All that works. Now I want to setup a kill switch so if the VPN gets disconnected no Internet wan traffic can happen to just that vlan.

Using policy based routing, I can only select wan ports not the VPN as the interface.

I planned on using ACLs to permit the VPN interface and deny all others so if that interface goes down the Internet stops.

Any suggestions?

I dont see any ways to setup virtual wan ports either.

OC220 controller latest stable

ER7206 router latest stable firmware

SG3428X 1.3 latest stable

SG2218 2.0 latest stable

SG3428XPP-M2 1.20 latest stable

Hi, Lulu from Omada here 👋

If you had the keyboard for toaday and could tell our PMs to fix, change, improve, add, or build ONE thing you really, really want — what would you choose?

The feature you keep waiting for.
The tiny annoyance that somehow drives you crazy every day.
The thing that makes you go, “Why is this still not a thing?”

Pick your team:

• Controller PMs
• Gateway PMs
• Switch PMs
• Wi-Fi PMs
• Software PMs
• Accessories PMs

Drop your request below — big or small.

And please upvote the ones you desperately want too. I want our PMs to see not only what people are asking for, but which requests make the rest of the community go:

“YES. THIS. PLEASE.”

Bonus points if your comment starts with:

“Omada, it’s 2026. Why do we STILL not have ______?” 😂

I’ll collect the strongest and most-upvoted requests and bring them back to the relevant product teams.

I have an es210x-m2 in my office. Runs great. Ran a cable from an older Sonos play 3 to it the other day and immediately the switch crashes. Any thoughts as to why?

Has anyone given Claude or chat GPT access to their controller to optimize their network?

Seem people have had good success with Claude on at least certain ubiquiti models.

Wondering if it would work with the fusion gateway?

I have an SG2210XMP-M2 as my main switch in my network. Network is managed by Software Omada controller v6.2. I bought an SG2008 v4 switch specifically because it's a full SDN switch and that it is(can be) PoE-powered.. I got everything adopted and connected correctly, firmware is the latest on both switches. It works for a while until the SG2008 randomly drops port 8 (the PD IN port), and the switch disconnects from my network. The connected clients on the SG2008 continue to communcate, albeit disconnected from the main LAN. I plugged in the 12v transformer so the SG2008 to eliminate PoE power as the issue, but the SG2008 still randomly dropped port 8. Moving the uplink to another port on SG2008 immediatley reconnects the switch to the main LAN, so it's not an issue of the SG2008 hanging or crashing. I've enabled all logging, and the only thing I see in the logs are reports of the SG2008 disconnecting, but no other alerts or events are logged to indicate why. There are no loopback or other problems reported, the switch just diconnects from the SG2210XMP-M2 like you pulled the cable. I ended up leaving the SG2008 AC powered and moved the uplink to my ER707-M2 as the SG2210XMP-M2 and SG2008 v4 clearly have a compatibility issue. My entire network is Omada-based.

2 - SG2210XMP-M2 v1.0
1 - SG2210P v5.20
1 - SG2008P v3.20
1 - SG2005P-PD v1.0
1 - SG2008 v4.20
3 - EAP723 v2.0
1 - EAP603-Outdoor v1.0
1 - EAP225-Outdoor v3.0
1 - ER707-M2 v1.20

It should also be noted that the same SG2210XMP-M2 successfully powers and communicates with the SG2005P-PD switch, as well as mulitple APs. Both SG2210XMP-M2 and the problematic SG2008 are brand new. I even swapped the SG2008 v4.20 with another brand new SG2008 v4.20 and the same disconnect problem ccurs. The only thing that misbehaves in my entire setup is what I described above.

 Posting here looking for guidance and help from TP-Link as to how to proceed. I would really like to restore the SG2008 to being PoE powered by the SG2210XMP-M2, but I can't very well have multiple disconnects a day on my network. 

SG2210XMP-M2 v1.0  firmware 1.0.26 Build 20260509 Rel.24803

SG2008 v4.2 firmware 4.20.24 Build 20260509 Rel.23533

Omada Software Controller  6.2.14.11

 Thanks in advance!

ModelFusion 2.5G v2.0

Firmware Version1.0.0 Build 20260611 Rel.70399

Not sure what I'm not getting here, I replaced ER7206 with Fusion Gateway, and everything works great except VPN

OpenVPN and SSL VPN both connect and i get my home IP address. But I'm unable to access devices on the LAN through VPN.

I can access the gateway, but nothing else on the network.

Also, when I try to setup Lightlink VPN it fails:

https://preview.redd.it/knvdxkssdrih1.png?width=1320&format=png&auto=webp&s=7be7a986b95f47b99d0f4a7f0dca07a7b9e2bdc8

Am I missing something?

Hello Folks,

Todays topic: Reverse DNS using the LocalDNS option on Omada 6.3.10.3 as seen on the Fusion 2.5 GW.

tl;dr: LocalDNS: Profile: Type: IP -> nslookup of the domain name works (resolves the IP), but nslookup of the IP does not return the name.

The Fusion GW is the DNS Resolver for the local subnet (ie. 192.168.0.1 is the Fusion and is DNS Server).

Example Setup:

https://preview.redd.it/nuzxv3yskxih1.png?width=852&format=png&auto=webp&s=5ebdb5ef94f0cd0c9d49712b5073b46f4d68af89

Expected behaviour: that forward and reverse lookup of the IP and Name work.

I kind of am afraid that this functionality (typically covered by implementing DNSMasq or similar simple DNS resolver in the product) is lacking.

ALSO: the LocalDNS profile listing is simply list of the profile names in the order they were added, which you can't sort, and the IPs are not listed at all, and neither the Profile name, nor the domain names nor the IP addresses are searchable.

I am almost about to install DNSMasq in a VM and have it take over DNS from Omada... it'd be sad to have to do that!

Maybe there is a solution? If not: Omada, please expand this functionality!

I had IPv4 successfully run, but switched providers (now fiber) and IPv4 is dead. So got IPv6 running, can access devices within the LAN via the ER-707 (ACL was just for testing) but not Wireguard on the 707 itself even with an ACL to permit the router itself. can I see somewhere if the router really uses the outside IPv6 for the Wireguard or any other address?

Howdy Folks,

I have a nice new Omada Fusion 2.5G Gateway. Software version 6.3.10.3 . -> Only Version.

I have an existing Software Omada Controller version 6.2.14.11 . -> Latest version.

In order to move the EAPs and Switches to the new controller I am aware of two options:

a) Via Site Migration -> impossible since both controllers require identical software. The Fusion controller is newer than latest available software controller version.

b) With the individual switch and EAP device passwords -> Omada managed devices have no password / there is no way to find this password.

How can I use the Fusion GW with my Omada switches and EAPs?!

Thanks!

Edit: I would be willing to loose my old config and reset the EAPs and switches on a per-device basis, however some of my switches don't have a reset button, and the EAPs are mounted on the ceiling and it's not realistic to climg on a ladder and take them down to reset them.

Edit: SOLVED: Site transfer between Software Controller (6.2.14) and Fusion (6.3.10) not possible -> FORGET DEVICES on old controller and ADOPT them on Fusion.

Hi all, I'm in the final stages of upgrading my home network, from an old ISP provided router, to a new gateway and newly installed access points for better speeds and more consistent wifi throughout the home.

My final decision is on the router / gateway, which I've decided on either:

- Fusion 2.5g which I assume would be a simple setup with controller included to overview my other Omada devices, including switch and ap's.

- Opnsense, runninf on something like a Sophos device, which I expect to be a bit more work to setup, similar price, open source and greater control. I'd need a hardware or selfhosted controller for the Omada management.

I don't mind tinkering, and am happy to learn anything I don't already know regarding the setup of either, that said, I do want a system that is dependable, something that just runs without having to constantly fixing issues. I'd like to think both are fairly stable in that sense. Two things I look forward to that I can't currently do on my ISP provided router are VLAN's for splitting traffic, and VPN to access NAS services remotely, replacing Tailscale.

I'm likely appealing to a small group of people here, but has anyone used both of these, had experience and can offer any insights into which you preferred and why? Thanks.

Hi Omada Team + Users,

I have a modem (GPON ONT, but that isn't so important) that runs in bridge mode and gets accessed via PPPOE and a vLAN that the ISP sets.

The modem also has an IP address to access the management interface.

In OpenWRT / OPNSense, etc., the way to set this is up is to create an interface with the subnet of the management IP of the modem (lets say 192.168.100.0/24) which and create a virtual WAN interface on the same port with a vLAN 10 of type PPPOE in order to get internet access.

How is this done in Omada? I can mak a WAN connection on port 1 on the Fusion 2.5G, of type PPPOE, vLAN 10, and that will then be the WAN. However how can I also create a subnet 192.168.100.0/24 (doesn't have a vLAN) to get to the management interface of the modem on the same port?

The GPON modem has only one ethernet port, so, no, can't (waste) one of the Fusion's 5 ports on a second connection just for the management interface.

Thanks for the help.

When is the Fusion Gateway series being released in Canada?

TP-Link's Canada page still says "Coming Soon" for these products and I can't find them available for sale anywhere.

Just unboxed my ER8411, sounds like I can hear something rattling / rolling around inside. Support is not being helpful when attempting to return the order and states that I need to return it by paying for shipping.

Has anyone had this issue with customer support before?