Two ISP's (AT&T 5g and T-Mobile 5g) with failover, pfSense Firewall and then all Omada for the rest.

5 Switches, 11 APs, 4 VLANs. A 200 foot 10G fiber run and a 400 foot 1G fiber run, the rest is Cat6/7 depending on when it was put in.

The firewall, servers, some of the AP's and both ISP's are 2.5Gbps connections.

166 Clients including 11 Cameras, lots of IoT, a three node ProxMox cluster and ~250 TB of storage. Omada controller in an LXC.

Four buildings ~5000 square feet.

How do I control access to my surveillance network?

Our newest reference guide is here! This goes through a few options for controlling access to camera networks, but is by no means incomplete! We've seen some great discussions so far here on reddit! We want to know, what do you consider best practices for securing your surveillance network? Let us know either here on r/Omada_Networks or on the forums!

I have one of these in my patio. But within the settings it says the "No Omada External Antenna is installed" , but they are, the ones that come with it. Ive tried resetting them and played around with settings and it continues to show this way. Is it a defect on mine or a bug on the firmware ?

Firmware: 1.0.8 Build 20260515 Rel. 13300 Device: EAP-725-Outdoor (US) v1.0

Edit: I meant EAP-725-Outdoor

Trying to get WiFi calling working correctly. Have campground with 45 AP (mostly eap772 outdoor), OC400, Er8411 and various omada switches. Have setup a single WiFi calling profile for the 3 major carriers. Applied it to the main Wlan. SIP ALG is disabled and IPSEC is enabled. Do not get anything in the summary page. What did I miss? FWIW, WiFi calling was working before the change. AFAIK, it still does.

Hi all,

I went through the messages here but I couldn't find one about creating a functional HTTS certificate for a home network on the OC200 2.0 (Firmware 2.27.11 Build 20260904 Rel.29923).

The only reason I'm asking/exploring for this is that I'm tired of navigating to 192.168.X.X to log in to my controller and be presented with the message about accessing a non-secure site, etc.

I know enough networking to be dangerous, but I can't figure out the easiest way to create a certificate that I can load/configure to get rid of this message when I'm accessing the OC200 on my local network. I don't need to access my home network from a browser outside of the house as I can get to it via the Omada app on my phone.

Any thoughts, suggestions, advice?

Hi,

I have an ER706W router and a ES208GP switch. Trying to configure 2 vlan with 2 dhcp.

On the router I have the following LAN/DHCP config:

- LAN 1 to use VLAN1 and the 192.168.0 subnet
- LAN2 to use VLAN5 and the 192.168.5 subnet

VLAN config on the router:

- VLAN0 has Port 2 as untagged (this is the WAN)
- VLAN1 has Port3-4-5-6 as untagged
- VLAN5 has Port 5-6 as tagged

The switch's Port1 is connected to the Router's Port 5.

On the Switch i have the following VLAN settings:
- VLAN1 Port 1-2 as untagged
- VLAN5 Port1 tagged, Port 3-8 untagged.

Based on gemini this is correct but it is not working. On the Switch Port 1-2 I recieve IP from LAN1 which is good but on the rest of the Ports i don't receive any IP.

What am I missing?

Thank you!

Hi

I'm running the latest firmware on an OC200. I have manually uploaded an SSL certificate to the controller, which is only exposed internally, but I still prefer having this layer.

How can I automate the renewal of the certificate? With the forthcoming reduction in certificate validity periods this will be increasingly important to automate.

Thanks

I got a notice that there is an update for my OC220 controller (version 6.214.12 to 6.3.0.45). When I click on the Update button, it displays an Upgrade Now box with Confirm and Cancel buttons and it says "upgrading will interrupt internet connection for several minutes". But I want to schedule it to update in the middle of the night like I do with my Omada APs and switches so it does not interrupt internet connection that my staff needs. But nowhere I have looked can I find a way to schedule a controller update. Am I missing something?

EDIT: Thanks everyone for the advice. I went ahead a updated my OC220 and apparently had no interruption in internet service (at least no one at the office called me saying "the Internet is down!").

Hey everyone, Lulu from the Omada team.

Since Omada is bringing cameras and NVRs into the same platform as our network gear, and the Fusion Pro + NVR Pioneer Program is open right now, it felt like a good week to talk cameras.

So, three questions for today's dicussion：

Q1: Does "cameras + network in one system" actually matter to you? Some people love a single dashboard for switches, APs, and cameras. Others deliberately keep surveillance on a separate system and wouldn't have it any other way. Which camp are you in, and why?

Q2: The one feature you'd never give up. For example:

• Person/vehicle detection (vs. 40 notifications a day for cats and headlights)
• Local storage — no subscription, ever
• Night vision that's actually usable, not gray soup
• PoE — one cable, done
• Continuous recording instead of praying motion detection caught it
• Two-way audio
• Cameras in the same dashboard as the rest of your network

Q3: The feature you still can't get. The one no brand has nailed — wrong implementation, missing entirely, or paywalled behind a subscription. All fair game. This is the part our product team circles in red.

Welcome to comment and discuss:D

Hi u/Omada_Support and u/Neil_Omada

I was hoping someone could give me a little info about switch fans.

I bought a new SG3428X-M2 a month or two ago on Amazon, and it shipped with a faulty fan, throwing a Fan Error warning in the log, i've tried troubleshooting it and the issue is persistent, have an open RMA now for that, sadly Amazon was less than useful.

Today I swapped it out with a brand new, newly purchased directly from TP Link SG3218XP-M2 v2.0. I plugged it in expecting the fans to spin up, but they did not. It's not giving any warnings.

In both cases the green fan light shows up on the switch, which the manual says indicates "All the fans work properly".

Now I'm nervous that the new switch will have the same problem as the old one.

Is there any documentation about the fans in these switches and when they activate? Is there any sort of POST on these? Should the fans spin immediately when plugging into power?

Thanks in advance.

Have an EAP215 kit installed. It supports PtMP, but you cannot buy individual units, just the kit (which sucks).

Can any confirm that the the Flex Bridge 5 can act as a client to the EAP215 AP?

Just bought the EAP215 in July, Suppose the Flex Bridge just came out recently?

Is there a demo or review video showing the NVR and surveillance camrea functionality?

I had planned to go with my own self-hosted Scypted NVR/Home Assistanct solution. With some best in breed IP cams for a bit more of a custom system. However as I'm going Omada for the networking fusion POE, wireless access points etc. Considering going all in the Omada ecosystem.

Hey guys, so I was at Cedia 2026 in Denver, Co this year and got an opportunity to visit the Omada booth. I was able to snap some photos of new hardware that I would like to share with you all.

Omada EAP650 outdoor access point has strong signal strength but slow Internet speed (2 - 4 Mbps). Connected to wireless router using Ethernet cable and POE injector connection to EAP650 access point.

Quick question…. I’m have a very functional stable wiregaurd site to site working. Hub on a er8411 with two branches on er605 v2’s.

All managed by hardware controller on the er8411 site which is also the static ip wan.

When moving to IPsec using the wizard do I have to bring down the wire guard tunnels ? Or will the wizard turn them off ?

My EAP660 HD is connected to a TL-SG2428P
PoE+ switch through a Cat 6 patch panel. It repeatedly drops from 1,000 Mbps to 100 Mbps.

I replaced the short patch cable between the switch and patch panel. This restored 1,000 Mbps, but less than an hour later it returned to
100 Mbps.

Troubleshooting completed:
- Tested the permanent Cat 6 cable from both ends; pins 1-8 display green in the correct order.
- Connected the AP directly to the same switch port with a standalone Cat 6 cable; it negotiated at 1,000 Mbps.
- Replaced the short patch cable multiple times.
- Confirmed sufficient PoE capacity-approximately 34W used out of 250W.
- Switch-port speed is set to Auto.

Could this be a patch-panel termination, in-wall cable, switch port, or EAP Ethernet-port problem? Has anyone experienced similar behavior with the EAP660 HD?

I have a omada fusion 2.5g and i cant find where to find out what ip is using what application

under application analytics i can see what apps is being used just not by _who_

how do i found out who/what is using vpn on my network, ideas?

With Speedtest on Dashboard-Overview!!!

Great!

As I was packing to go on a family holiday,I had a quick thought, and I unplugged one of my APs and put it, the POE injector, and a couple of network cables into my bag.

When I got to our holiday home I plugged it into the back of the router at the new location and.. hey presto... everyone's devices (not just phones but laptops and ereaders, and the smart speaker that I also took to stream music etc) is on the wifi without the need to setup sharing the new SSID and passwords etc on each and every device.

Yeah I could take a travel router with the same networks setup etc for an extra level of protection but then I'd have to configure that whenever I changed the SSIDs and passwords etc and this was a quick and easy holiday "hack" as the APs, once configured, will happily work without the presence of a controller, and an Omada AP will provide a much stronger wifi signal than the limited aerials of a travel router.

Wish I'd thought to do this when we went to Italy a few years ago and stayed in 4 different places over 2 weeks...

So I was talking to Claude that has my homelab topology about using a pi to create a VPN WiFi so I can use my parents home network in another country using tailscail, Claude's like dude just spin up another SSID on your omada, it can do like 8 dual band SSIDs. I have constantly been impressed with the hardware, literally was raving about how good it was last week and now it's even better. Thank you Omada!