I like the separation of guest and IoT traffic! I also like the attention payed to setting rules to isolate then from access to VLAN 1. So many people miss on this stuff.

WooHoo for another non-Unifi video! Keep them coming!!

Glad to see someone ignoring unifi for a change, and giving people a different option. You can be sure if people knew there were different options they would go there, as unifi does not fit what evewryone wants. So, i am glad to see someone on net choosing to show there are other options. Personally i picked tplink ages ago, so i know they have a product that works, so nice to see your channel doing videos on this other option.

As a total noob in this field, this ist the information I was searching for. Thank you so much!

Nicely done! I have had the Omada set up for about 6 months now and finally I will get the chance to set up the same arrangement you have. I do want guests to be allowed on the AP's and nothing else and my IoT stuff to still be able to get out but not into may management LAN. Just means going back to my roku and other IoT stuff and putting in the password of the new SSID...alot of stuff on the management VLAN that needs to be moved...But worth it.

Your videos are always concise, informative, spot-on, well edited. Thank you for the knowledge.

Thank you a lot for this video! I've just finished configuring my Omada environment following your instructions, it is so clear now.

This video made me go out and buy Omada over Ubiquiti and year on only one regret.. the firewall functionality in the router is perhaps a little lack compared to an OpenSense or pfSense unit. Have you considered a video on how to augment an Omada SDN with a more heavyweight firewall with things like IDS & IPS working across the VLANs?

to what wifi or network are you connected to when doing the inital config, especially for when scanning qr

Great video. I've been having a lot of issues with Ubiquiti lately and my patience has run out. I plan on switching to Omada in the near future. The only thing I didn't like about Omada are the smaller smart switch price of $60ea. My setup will be similar.. ER7206 -> TL-SG2210P V3 -> OC200 - EAP650 AP - Easy Smart 5 Port Gigabit PoE Switch x3. I'll be using this video as a guide when I get everything together.

Thanks for taking the time and sharing your home setup. I just completed mine and really like the idea of separating the network based on client traffic. I also love the TP-Link single-user interface. Now I need to find someone who wants my Linksys and Netgear equipment. :)

Nice video and good channel. I work from home and a small office. I currently use Nest Wifi for both locations. My problem is that, at the house, the ISP can go down at inconvenient times, like when I'm video conferencing. I recently learned about failover, and your router recommendation here seems to have that feature in spades with up to 4 WAN ports. I haven't seen any consumer grade routers with a failover option that I've been interested in yet. For example, the LTE routers all seem to lack mesh abilities. And on the commercial grade equipment, failover even seems rare. Unify for example only has dual WAN on its most expensive router. Failover isn't my only priority. I know the aesthetics committee will want any visible gear to look nice. I want to keep noise to a minimum. And space is a premium. Given all these priorities, the best options I've seen so far are either your TP-Link recommendation, or using PFSense on an appropriate router. I may start with your TP-Link recommendation and use the Nest Wi-Fi gear as access points. That will allow me to experiment with another cable internet provider, an LTE router in bridge mode, or satellite provider to see how failover works. If I like it, I figure I can add to the system from there.

Please do more videos on the omada configuration via the controller asap! Thanks

I've been torn between Ubiquiti and TP-Link, I think you've just managed to convince me to go with TP-Link.

Great overview. Will get people up and running in no time

I am 12:26 into this video and just wanted stop and say thank you. This is, so far, one of the best Omada set up videos I have watched. My setup includes: OC300,ER7206,TL-SG2210P,TL-SG2210MP, EAP265 and a EAP224.My network is setup and works well, but need to do a few tweaks you covered in this video. I am challenged with ACL... This helped a lot. Thanks for the video.

Would love to see you look at UniFi vs omada set up at the basic, average and advanced level hardware similar to some of your past videos. Omada hardware is available but not sure how close it comes to UniFi gear. What’s your thoughts on Omada?

For a home network, that could be streaming between devices like computers to Roku or phones to Roku, having a separate "Secure" network doesn't seem to make as much sense as it would be an absolute pain swapping networks constantly. It's the old security vs ease of use thing. I'd prefer to see a video on routing video streaming from a secure network to an IoT network so a phone on a secure network, and as such private and protected, could cast across to the IoT network securely

This is exactly what I needed to see! I will be purchasing this exact setup. Keep the Omada vids coming!

Thank you so much. Your channel have so many useful how to videos. The Unifi setup was very helpful for me and I was curious about this platform as well.... now I know!

Excellent video, info and example setup. I especially liked the back end of the video detailing the ACLs. Thank you so much! You said there is plenty more could be done, do you have another video that might be food for thought?

One little point I notice with most people that setup networks is that they never seem to test their choice of DNS servers. You (and others) may find the 'DNS Benchmark' tool by Steve Gibson enlightening/useful... (Gibson Research produces it)

Great walk through on this one Chris. I appreciate it - I have both Ubiquiti and TP-Link devices, and as always you make it very easy to understand.

This was great! More Omada videos on ACL config and other features!! Thanks

Great video, it gave me the confidence to get the same kit and set it up myself. Two questions for the community : 1) If I connect my laptop directly to the switch with ethernet, how does it know which vlan to put me on? 2) I set up a guest portal so that users have to log in. This works great but to get it to work you have to allow the guest network to see the omada controller, which is on the secure network. So I had to remove the acl preventing the guest network from accessing the secure network. What can I put in place to make this secure again? thanks!

I set up my Omada from this video, thanks for the great knowledge and well spoken tutorial.

I have a couple of configuration questions on the Omada controller (I'm using the OC300): 1. Several of my IoT devices are wired. How do I get them to a specific VLAN? It looks like my only choice is assigning specific ports on the switch to that VLAN, but are there other ways to accomplish this? 2. How can I have devices on the Guest network be able to print to a wired printer? I'm guessing that I'll have to: a. Create new networks (wired and wireless) for this "guest" network. b. Put the printer on the wired "guest" network via VLAN assignment on that switch port. c. Use Network ACLs to allow access to the printer from that "group" wireless network, and to prevent access to anything else in that or the main "secure" network. (How do I accomplish this?) Am I missing anything?

That was a great overview video of a simple network design/implementation. Thanks Chris....

Where is the pinned comment or link for installing the software controller?

I really appreciate this walk through and it helped me, as a checklist and a how to for some parts, setting up my stronger home network (as a bit of a noob). Thank you

Thanks for the video. There is one detail that I found out. Once you block the IoT network from entering LAN, it works. However, that ACL entry also blocks the LAN network from reaching IoT network. I tried creating another ACL entry with Allow from LAN to IoT, but no Joy.

Brilliant training video on setting up a partitioned home network using TP-Link Omada

Hey, Chris thanks so much for the video. I am upgrading my 13-year-old ASUS router to your solutions. I am now retired but my wife is still working and her boss is allowing her to work from home. To that end, with all the money we are saving on gas purchases, I am upgrading my system based on your video. My internet connection is AT&T 1GB Fiber BG210 fiber modem. My house size is 3800sqf two levels brick front with at least two CAT 5 drops in every room. My shopping list today to cover this and outside is (ER605 VPN, TL-SG1024DE Switch, TL-SG1005P POE, EAP650 x 2 back of the bedrooms house left and right side, and EAP670 front of the house. I can't start today the TL-SG1024DE Switch won't be until tomorrow. Meanwhile, I have an old dell laptop in the closet I am installing Windows 10 and the controller software. Then I give all this shot. I use Flight Simulation 2020 and Formula 1 simulation software along with my son who does a lot more when he is here. I have 9 grandkids who visit with all their devices. So my smart home has over 100 wireless devices. HERE'S TO HOPING ALL THIS WORKS AND MY WIFE HAS A PRIVATE CONNECTION TO HER JOB THAT WILL BE ROCK SOLID FOR THE TRAINING SHE DOES.

Now I can understand how to config secure network with vlan, thanks for your explanation

Hi, thank you for this excellent video ! What you think about TP-Link TL-ER7212PC (3 in 1 device) for a Small Business like a Real Estate Office? Instead using this setup with OC200+ER605+TL-SG2210MP ? Waiting your reply ! Many Thks ! 🙏

The best omada video. thanks

Great video Chris. I am considering TPlink because its so hard to get UniFi hardware I need.

Very similar to Unifi, BUT I liked the blocking rules in Omada better

this is lovely and very practical examle. Awesome.

This was a great tutorial! Thank you for sharing!

Can you do a video on dual WAN with starlink and your cable internet .. fail over or backup

Thanks for sharing such a nice instructional video on OMADA, it will be very useful for me in the future.

Great training. Well thought out and organized. Easy to follow. Thanks

Awesome video! Clear and concise.

The ACL is stateless on omada so that last ACL rule you made will actually block traffic in both directions.

Thanks for all the great info, but I was wondering about how good is the firewall or can you intergrate pfSense with the Omada system instead of using the tp link firewall?

It takes so long for the OC200 to reboot - if you just connect it to usb power - then you can pull the cable out and put it back in the alternate slot and it will get new ip almost instantly .

Thanks for the great video. I'm trying to decide if I need a Smart Managed switch or not, like the SG2210MP you demo'd in the video. I would like the ability to setup the different VLANs as you did in the video. However I don't think I need much more capability or L2 features (other than IGMP Snooping). When you setup the different VLANs and Static/DHCP configurations, was that done at the ER605 Router level, or did you need the SG2210MP switch to do that? Thank-you.

This is a great video and helped me with my initial setup. I ran into one difference between options on screen you show and my setup. On the ACL setup around 22:40 in, my screen does not have an option for Destination type of Network, only IP Group and IP-Port Group. I went back to through my LAN settings and can't find any differences from what you did. Any help is appreciated. BTW, I am using the windows software controller, not the device.

Thanks for your videos, I really enjoy watching them. I have taken your advice to heart, and I have now upgraded my Home Network from a standard ISP provided Router, to a TP-Link Omada managed Network. This video has been so useful, and really helped me with the setup. I also need to give a big Shout-out to the TP-Link support people, who have been so helpful with some other issues I faced, as I was building my new Network. However, I do have one issue, which I’d love to see you make a video on. Which is, how can I connect my old Landline phone, to my new TP-Link Network? My current standard ISP provided Router has a built in RJ11 plug, and I just need to connect the phone into that jack, to make the home phone work. However, I haven’t been able to find any TP-Link gear that has an included RJ11 socket. So, do I just need a RJ11 to RJ45 adaptor and then setup a dedicated Voice Network, or do I need some extra gear, like a VOPI Gateway (if so, any recommendations)? Otherwise, if I can just get away with a RJ11 to RJ45 adaptor and a dedicated Voice Network, it would be good if you could demonstrate the setup for this. Thanks in advance for any pointers you could give on this issue. 😊

Great vid! One thing I noticed app vs on screen controller setup is that device firmware upgrades work better through the app. By better I mean it pulls the update automatically, as well as newer than what's listed on the Omada site.

Damn Bro. Never seen you before but the title of this video should have been “Solve Zach’s Issues In Detail” Amazing. And done at a level that even I could understand with a minimum of condescension. Thanks again. I have added you to my favorites.

Have a look to TP-Link ER7212PC (Router + PoE Switch + Omada Controller)

Followed your setup, but the SSID for my IoT devices won't connect to the internet by phone or computer. Any ideas?

Looking for suggestions to allow Roku to hit Plex server if Roku in IOT network and Plex Server(NAS) in Secure network. Would it be best to just put the Roku in the Secure network or configure rules?

Thanx Sir your Video get help me

pretty useful video tutorial and really help us a lot as a new user of omada and tp link product.. :)

Thanks so much for this excellent video. I noticed that you do not set a VLAN ID for your "Secure Wireless" network (even though you set VLAN ID 1 for your "Secure LAN"). I tried both, setting 1 as VLAN ID for my WLAN and not setting it and it only works _without_ the VLAN ID. All other wireless networks work with their VLAN IDs set as shown in your video. Any idea why setting a VLAN ID for the "secure wireless" network does not work? Or should it? Thanks again!

Fun fact, "omada" (ομάδα) means "team" in Greek

ER605 is too slow for my internet connection. My internet connection already has >1GB with a 2,5GbE-interface Provider-Router.

Can a deco be used as an ap with omada? How will mesh work with it? Does omada have antivirus like deco homcare?

Perfect, just what I needed, thank you!

Great job and well explained. Thank you for that.

Hi Chris I have setup my system and would like to know after a power outages how to get the oc 200 back online. I live in the Caribbean.

Thanks for this video, what is the software drawing diagram sir? Thanks is advanced

Great thanks for this. This has been extremely helpful !

Excellent overview. I've been debating moving beyond consumer wifi to a much more granular setup like this. I considered going with the Netgate4100 PFsense appliance with Omada devices behind it as a buy-once, cry-once.

More videos with pfsense integration please.

Thank you for this video, it was very helpful in getting my omada network setup. What tool are you using on your phone and laptop to view the network info and ping?

Thanks for this complete presentation. I noticed that you don't enable the default Vlan on the Secure Wlan. On my configuration, when I enable it this Wlan doesn't work anymore. Is it for the same reason you don't enable it ? Does anybody know why it doesn't work ? Thanks for your help.

Chris, I know this is a 2 years late, but nicely done. You covered what move home users would need an example of. I am looking at the Omada solution for a church application… do you know if the controller supports time of day wireless networks, so SSIDs can be shutdown when people are not onsite? Thanks in advance.

If I want to use pfSense with TP Link Omada what's the best hardware to use for pfSense?

Thank you

This is just what i needed...Your great ...Thank you

On my Omada hardware controller, the ACL rules worked both ways even though I did not click bidirectional. The only way I could replicate blocking IoT from accessing secure network was creating an ACL rule at the Gateway tab. I’m running oc200, er605, and sg3438. Do you have any idea why it didn’t work as per your instructions ?

Great video! Interested in how this setup would work with the Deco mesh APs, or with another manufacturer's mesh APs.

Followed all these steps and everything works except my connection to the internet... any idea why? I get this error: failed to obtain IP address for WAN because no response from the server.

Thanks!

Thanks.

Thanks

Interesting even if I can't do the VLAN bit yet :) I'm still using a consumer grade router with WIFI on it with a switch connected to it. The switch odes VLAN but the router does not. Since I installed an EAP225 (PoE-switch, though I might have to use an injector with the new 610) some time back I disabled the built-in WIFI of the router and let the EA225 handle that part. Have an EAP 610 on its way to me and was thinking of switching the 225 for the 610 in the same spot and then have the 225 in a mesh with it. The plan is to move away from that older router to something (prebuilt or homebrew) that does VLAN so I can isolate some stuff on my network.

Loved this video very much. Only question as i progress froward How would you share network printers (EPSON) on your secure network to allow printing say off of your iphone on the IOT Network>. Thanks!

Hi, Could you do a demonstration setup of VLANs on TP-Link Omada and a Synology NAS?

All the Vlans will be available in the same switch ports?

Hi Chris. Great vodeos and quite useful. Thank you for that. This is a very interesting solution for a home setup. My question is if one adds up a few AP can they ve setup as a mesh wireless network for seamless comnection throughout the house like with ubiquity?

You can reserve ip address on DHCP, but the common practice is what is recommended in the video.

How were you able to set the static IP for the controller? I keep getting an error saying the static IP must come out of the DHCP pool and not the addresses that were reserved to be used from outside the DHCP pool. From my understanding, this is a known problem to be addressed in a new version of firmware.

can you share the link to your video on how to install s/w based controller

Hi Chris, what do I do if I want to add wired clients in the IoT network? Do you have a follow-up video with VLANS or is there another way with this setup?

Can you please go into more detail on the ACLs for IOT. I have a lot of IOT devices and want the ability to cast from secure devices (in secure network) to the IOT network.

Hi, how do you setup IPv6 on here?

awesome! thanks!

does the switch automatically assign wired devices to the secure network then? and can that be changed?

can you do a video on remote adoption from outside the local network

This and unifi seem very similar in the interface and implementation

The only thing missing is what happens next in the setup process… plugging in actual devices and assigning them to the various vlan’s. For example, what are the pros/cons of having a dedicated “dumb” switch hooked up to one of the ports on the smart switch for all IoT devices, and another dumb switch hooked up for all Secure devices? And will I need separate access points for each vlan in order to keep things separate, or can I somehow assign the various SSIDs to various vlan’s from a single access point (hooked up to a single port on the smart switch)?? I have 18 wired devices and 29 wireless devices, so knowing the best way to hook up a good number of wired devices would be helpful. (I know there are managed switches in the Omada line with more than 8 ports, but they get more expensive, and I already have a couple of dumb switches laying around, so tips on how to incorporate the dumb switches into the smart switch layout for these vlans would be helpful.) Otherwise, this was an excellent tutorial on actul setup of the Omada suite of products. Just wish some real world connections were made and shown how to assign different ports and devices to the various vlans.

Really well explained, this helped me achieve a very similar setup which serves its purpose . Thank you! One question: The ACL which you demonstrate that blocks traffic from the IoT to the Secure network - is that the equivalent of activating the "guest" flag in an SSID?

Does the switch have to be omada compatible? I have the TP Link TL-SG1016PE managed switch, which from my understanding is not omada compatible. Would I still be able to create and manage vlans with the ER605 and the Omada controller, then assign vlan tags from the TP online GUI of my switch?

Seems like a nice system. I'll have to give it a try. Do you know how the performance is? Will it be able to keep up with a 1000/1000 fiber connection? I also noticed you used a network tool on your phone. Which one is it? I've previously tried a wifi scanner from the google app store and it was honestly not so great. LinSSID on a laptop worked better for me but I would really like something on my phone as it's easier to carry around.

superhelpful! I'm researching what AP to use with Firewalla Purple. I'm considering EAP610 with the OC200 along with the FWPurple.