TP-Link Omada SDN Quick Setup Guide

1. TL-R605 Router Initial Setup

Step 1: Connect Router to PC
Connect the router to a PC using any available LAN port. Ensure your PC's network card is configured to obtain IP addresses automatically via DHCP.

Step 2: Access Router Web Interface
After your PC receives a dynamic IP address, open the router's web interface at 192.168.0.1 in your browser. A prompt to set an administrator password will appear.

Screenshot Description: A screen prompts for 'Username', 'Password', and 'Confirm the Password'. A note advises remembering credentials and how to reset the device if forgotten by powering it on and holding the Reset button for 5 seconds. A 'Confirm' button is present.

Step 3: Create Administrator Credentials
Create an administrator username and password for the router.

Step 4: Authorize in Web Interface
Log in to the router's web interface.

Screenshot Description: The router's status page displays 'Device Info' (Hardware Version TL-R605 v1.0, Firmware Version 1.0.0), 'System Time', 'Running Time', 'WAN IPv4' details (Interface, Connection Type, Status, IP Address, Subnet Mask, MAC Address, Default Gateway, Primary DNS), and 'Resource Utilization' graphs for Memory and CPU.

Step 5: Configure WAN Connection (L2TP Example)
The router supports various Internet provider connection types. The following shows typical settings for connecting to Beeline using L2TP.

Screenshot Description: The WAN configuration screen shows 'Connection Status' as 'Connected'. Details include 'Connection Type' (L2TP), 'Username', 'Password', 'Connection Mode' (Connect Automatically), 'Upstream/Downstream Bandwidth', and 'MTU'. It also displays IP Address, Subnet Mask, Default Gateway, and Primary/Secondary DNS. A secondary connection section is also visible.

Step 6: View Local Clients
The table displays IP addresses assigned by the router to the T1500G-10PS switch, OC200 controller, EAP225 access points, and PCs.

Screenshot Description: A 'DHCP Client List' table shows columns for ID, Client Name, MAC Address, Assigned IP Address, Lease Time, and Operation. Sample entries include EAP225, OC200, T1500G-10PS, and a desktop PC.

The entire network, including the router, can be managed via the controller. Proceed to configure the OC200.

2. OC200 Controller Initial Setup

Step 1: Access Controller Web Interface
Access the OC200 web interface (using the IP address obtained from the router) and proceed through the quick setup wizard.

Screenshot Description: A 'Welcome to use Omada Controller' screen with a 'Let's Get Started' button.

Step 2: Configure Controller Settings
Set the controller name, select the country, and set the timezone. Then, choose an application scenario (e.g., 'Office').

Screenshot Description: The 'Omada Setup Wizard' shows fields for 'Set Your Controller Name' (OC200), 'Set your country or region' (Kazakhstan), 'Select Your Timezone' (UTC+06:00 Astana, Dhaka), and 'Application Scenario' with options like Hotel, Restaurant, Office, Factory, Dormitory, Campus, Hospital, Shopping, Airport, Home, and Customized. A 'Next' button is present.

Step 3: Configure Detected Devices
The controller lists automatically detected Omada devices. Select the desired devices (in this case, all).

Screenshot Description: The 'Configure Devices' step of the wizard shows a list of devices with columns for DEVICE NAME, MODEL, IP ADDRESS, and UPTIME. Devices listed include EAP225, T1500G-10PS, and TL-R605. Checkboxes are used to select devices. Navigation controls and 'Back', 'Skip', 'Next' buttons are visible.

Step 4: Configure Wi-Fi Settings
Specify the primary wireless network name (SSID) and its WPA-PSK password.

Screenshot Description: The 'Configure Wi-Fi' step allows setting a 'Network Name (SSID)' (e.g., 'Omada') and 'Password'. An option for 'Guest Wi-Fi' is also available. 'Back', 'Skip', 'Next' buttons are present.

Step 5: Set Administrator Details and Bind TP-Link ID
Enter administrator details and TP-Link account information to bind the controller to your TP-Link ID.

Screenshot Description: The 'Controller Access' screen prompts for 'Administrator Name', 'Email', and 'Password' for local login. It also includes fields for 'Cloud Access' (TP-Link ID and Password). Buttons include 'Log in and bind', 'No TP-Link ID? Register now.', 'Back', and 'Next'.

Visual Aid Description: Text 'Binding the controller to your TP-Link ID account'.

Step 6: Confirm Cloud Access
Access to the controller is now available via TP-Link Cloud.

Screenshot Description: Similar to Step 5, showing 'TP-Link ID: user@gmail.com Unbind'. A 'Next' button is present.

Visual Aid Description: Text 'Binding successful'.

Step 7: Review Configuration Summary
A summary of the controller's configured settings is displayed.

Screenshot Description: The 'Summary' page displays configured details: Controller Name (OC200), Country/Region (Kazakhstan), Timezone, Application Scenario (Office), Managed devices (EAP: 3 pcs, Switch: 1 pcs, Gateway: 1 pcs), Network Name (SSID) (Omada), Administrator Name (admin), Cloud Access (On), TP-Link ID (user@gmail.com). 'Back' and 'Finish' buttons are available.

Step 8: Mobile App Invitation
A QR code is provided for downloading the Omada mobile application.

Screenshot Description: An 'Omada SDN Controller' login interface with Username and Password fields. Below, a section 'Scan the QR Code to download Omada App' with a QR code and links to 'App Store' and 'Google Play'. 'Support' and 'APP' links are also present. A close button (X) is visible.

3. Dashboard and Network Overview

Dashboard Information
After running a Speedtest, the controller displays Internet access speed and current Internet channel utilization.

Screenshot Description: The dashboard shows 'ISP Load Good', 'Internet Capacity' (29 Mbps, 0%), and network statistics: Internet (1), Gateway (1), Switches (2), EAPs (4), Clients (5), Guests (1). It also shows 'Overall Network Clients' and 'Devices', 'Admins', 'Cloud Access', and 'Alerts'.

Visual Aid Description: Text 'Clicking on any icon will take you directly to the list of routers, switches, access points, and clients'.

Network Topology and Device Management
The controller automatically displays the network topology.

Screenshot Description: A 'Topology Map' visualizes the network connections between Internet, Gateway, Switches, and EAPs.

The controller provides a list of all managed devices.

Screenshot Description: A device list table shows columns for DEVICE NAME, MODEL, IP ADDRESS, STATUS, VERSION, UPTIME, and ACTION. Devices include TL-R605, T1500G-10PS, and EAP225.

Cloud access to the controller is provided via TP-Link Cloud at https://omada.tplinkcloud.com. After logging into the cloud, you will see a list of all controllers registered with your TP-Link ID.

Screenshot Description: A TP-Link Cloud login page for Omada, showing a business-class Wi-Fi solution (EAP245) in the background.

4. Network Configuration

Step 9: Assign Static IP Addresses
Assign static IP addresses for convenience:

• For the switch (192.168.0.2): Navigate to Devices -> T1500G-10PS -> Config -> IP setting.
• For the controller (192.168.0.3): Navigate to Settings -> Controller -> General settings -> Network Settings -> Static.
• For access points (192.168.0.11-192.168.0.12): Navigate to Devices -> EAP225 -> Config -> IP setting.

Step 10: Adjust DHCP Pool
To avoid IP address conflicts, reduce the DHCP pool size.

Navigate to Settings -> Wired Networks -> LAN and click the 'Edit' icon.

Screenshot Description: A 'DHCP Range' field is shown, with input boxes for IP address segments. The initial range is 192.168.0.1 to 192.168.0.254.

Change the starting IP address of the pool.

Screenshot Description: The 'DHCP Range' is updated to start from 192.168.0.20 to 192.168.0.254.

Step 11: Set Up Multi-SSID (Accountant Network)
To segment the office network, both wired and wireless parts can be configured. Wired segmentation uses VLANs, and wireless segmentation uses SSIDs. Two subnets are added: VLAN 20 (SSID Accountant) and VLAN 30 (SSID Guest), each with its own subnet (192.168.20.0/24 and 192.168.30.0/24 respectively).

This task is divided into two sub-tasks:

1. Wired network setup: Multi DHCP and VLAN on the router, VLAN on the switch.
2. Wireless network setup: Multi-SSID on access points.

Step 11.1: Configure Wired Network for VLAN 20
Navigate to Settings -> Wired Networks -> LAN -> Create New LAN (VLAN 20).

Screenshot Description: The 'Edit Network' screen for VLAN 20. Fields include Name ('Accountant'), Purpose ('Interface'), VLAN (20), Gateway/Subnet (192.168.20.1/24). The DHCP server is enabled with a range of 192.168.20.1 to 192.168.20.254. A 'Switch Settings' tab is shown, indicating port assignments.

Step 12: Set Up Multi-SSID (Guest Network)
Similarly, set up the Guest SSID (VLAN 30 – 192.168.30.0/24).

Screenshot Description: The 'Edit Network' screen for VLAN 30. Fields include Name ('Guest'), Purpose ('Interface'), VLAN (30), Gateway/Subnet (192.168.3.1/24). The DHCP server is enabled with a range of 192.168.3.1 to 192.168.3.254. A 'Switch Settings' tab is shown, indicating port assignments.

Step 13: Create Wireless Network 'Accountant'
Navigate to Settings -> Wireless Networks -> LAN -> Create New Wireless Network. Create the 'Accountant' wireless network and assign the previously created VLAN 20.

Screenshot Description: The 'Edit Wireless Network' screen. Fields include Network Name (SSID) ('Accountant'), Band (2.4GHz, 5GHz), Guest Network (disabled), Security (WPA-Personal), Security Key. Under 'Advanced Settings', SSID Broadcast is enabled, VLAN is set to 20, and WPA Mode is WPA2-PSK/AES.

Step 14: Create Wireless Network 'Guest'
Similarly, create the 'Guest' wireless network and assign the previously created VLAN 30.

Screenshot Description: The 'Edit Wireless Network' screen for 'Guest'. Fields include Network Name (SSID) ('Guest'), Band (2.4GHz, 5GHz), Guest Network (enabled), Security (WPA-Personal), Security Key. Under 'Advanced Settings', SSID Broadcast is enabled, VLAN is set to 30, and WPA Mode is WPA2-PSK/AES.

Unlike the main wireless network and the Accountant network, the Guest network has the 'Guest' option enabled, indicating that its clients will not have access to all private subnets. The 'Rate Limit' option is also enabled, limiting access speed to 0.5/0.5 Mbps. The 'Time Range' function specifies the broadcast time for this wireless network, limited to business hours from 08:00 to 18:00.

Since all wired and wireless network manipulations were performed within the 'Default' WLAN group, all access points will automatically adopt these settings.

5. Guest Portal and Access Control

Step 15: Set Up Guest Portal with Vouchers
Navigate to Settings -> Authentication -> Portal.

1. Enable the portal function.
2. Select the SSID.
3. Choose the authentication type. In this case, 'Voucher'. After selection, a link to 'Voucher Manager' will appear on the current page, providing an interface to the controller's voucher database.
4. Customize the portal if necessary.

Screenshot Description: The 'Portal Customization' screen allows setting the 'Type' (Voucher), 'Default Language' (Russian), 'Background' (Picture/Solid Color), 'Background Picture', 'Logo', 'Logo Position', 'Input Box Color', 'Input Text Color', 'Theme Color', 'Button Text color', 'Welcome Information', 'Terms of Service', and 'Copyright'. 'Advertisement Options' are also configurable. A preview of the portal is shown, featuring a floral background and login fields.

Step 16: Create Vouchers
After saving the settings, create vouchers. The Omada controller can create them in bulk with predefined parameters such as code length, quantity, user limits, duration, and speed/traffic limits.

Screenshot Description: The 'Create Vouchers' window allows setting 'Code Length', 'Amount', 'Type' (Limited Usage Counts, Limited Online Users), and 'Duration'. Options for 'Download Limit', 'Upload Limit', and 'Traffic Limit' are available for clients connected via portal authentication. A table lists created vouchers with details like Code, Created Time, Duration, and Type.

Step 17: Set Up Guest Portal with Local Users
Set up the portal for the guest network using personal passwords.

The portal setup is similar to the voucher setup; only 'Local User' needs to be selected in its configuration.

Screenshot Description: The 'Portal' configuration screen for 'Local User' authentication. Fields include 'Basic Info', 'SSID & Network', 'Authentication Type' (Local User), 'HTTPS Redirection', and 'Landing Page'.

Using User Manager, create personal accounts with specified user counts, access speed, and traffic volume if needed.

Screenshot Description: The 'Edit User' window allows setting 'Username', 'Password', 'Status', 'Authentication Timeout', 'MAC Address Binding Type', 'MAC Address', 'Name', and 'Telephone'. Download Limit, Upload Limit, and Traffic Limit can be configured. A table lists created users.

Step 18: Block Access to Specified Internet Resources (ACL)
Omada can block access to Internet resources based on Access Control Lists (ACLs) configured on access points, switches, and routers.

Step 18.1: EAP ACL Configuration
EAP ACLs are created based on Network/IP Group/IP-Port Group assignments and applied to Network/IP Group/IP-Port Group/SSID.

Screenshot Description: The 'Create New Rule' screen for EAP ACL. Fields include Name, Status (Enable/Deny/Permit), Protocols, Source Type (Network), Network (LAN, Accountant, Guest), and Destination Type (IP Group, IPGroup_Any, mail.kz). A 'Create New Group' dialog is shown for defining IP Subnets.

Step 19: Switch ACL and Gateway ACL Configuration
Switch ACLs are created based on networks/IP addresses, subnets/IP-Port Groups for source and destination, and are bound to physical switch ports or VLANs.

Screenshot Description: The 'Create New Rule' screen for Switch ACL. Similar fields as EAP ACL, with additional 'ACL Binding' options (Ports, VLAN, All Ports, Custom Ports) and a 'Device List' showing ports.

Gateway ACLs are created based on networks/IP addresses, subnets/IP-Port Groups for source and destination, and are bound to physical switch ports or VLANs.

Screenshot Description: The 'Create New Rule' screen for Gateway ACL. Similar fields as EAP ACL.

Step 20: URL Filtering
URL Filtering rules are created based on URLs and applied to SSIDs (EAP Rules) or Network/IP Groups (Gateway Rules).

Screenshot Description: The 'Create New Rule' screen for URL Filtering (EAP Rules). Fields include Name, Status, Policy, Source Type (Network), Network (LAN, Accountant, Guest), and URLs (e.g., facebook.com, instagram.com, ok.ru).

Screenshot Description: The 'Create New Rule' screen for URL Filtering (Gateway Rules). Similar fields as EAP Rules.

6. Advanced Router Functions via Controller

In addition to the above, the Omada controller provides access to the following router functions:

• Static Routing
• Port Forwarding via NAT and ALG
• NAT Session Limitation for networks or IP groups
• Bandwidth Control for networks or IP groups
• Creation of various VPN connections

The system also supports the following services:

• Dynamic DNS
• SNMP
• UPnP
• SSH
• Reboot Schedule
• PoE Schedule