TP-Link ER7212PC ER7212PCUN V1 User Guide
TP-Link ER7212PC Manual
 |
View all TP-Link ER7212PC manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link ER7212PC manual content summary:
- TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 1
User Guide Omada Gigabit VPN Router with PoE+ Ports and Controller Ability © 2023 TP-Link REV1.0.0 1910013253 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 2
More Information ■ For technical support, the latest version of the User Guide and other information, please visit https://www.tp-link.com/support. ■ To ask questions, find answers, and communicate with TP-Link users or engineers, please visit https://community.tp-link.com to join TP-Link Community. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 3
Devices and Sites Create Sites...7 Adopt Devices...11 Configure the Network with Omada SDN Controller Navigate the UI...22 Modify the Current Site Configuration...27 Site Configuration...27 Services...28 Advanced Features...30 Device Account...33 Configure Wired Networks...35 Set Up an Internet - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 4
...145 802.1X...179 MAC-Based Authentication...182 RADIUS Profile...184 Services...187 DHCP Reservation...187 Dynamic DNS...188 mDNS...190 SNMP...191 IPTV...195 Upgrade Schedule...197 Export Data...198 Configure the Omada SDN Controller Manage the Controller...202 General Settings...202 Controller - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 5
via Cloud Access 214 Maintenance...216 Backup & Restore...216 Auto Backup...217 Export for Support...219 Migration...220 Site Migration...220 Controller Migration...225 Configure and Monitor Omada Managed Devices Introduction to the Devices Page...234 Configure and Monitor the Gateway...239 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 6
...366 Dynamic DNS...368 Rogue APs...368 View and Manage Logs...371 Alerts...372 Events...373 Notifications...374 Manage Administrator Accounts of Omada SDN Controller Introduction to User Accounts...381 Create and Manage Custom Account Roles ...382 Manage and Create Local User Accounts ...382 Edit - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 7
1 Accessing the Controller • 1. 1 Web Interface Access - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 8
case. Note: When using Omada SDN Controller, we recommend that you deploy the full Omada topology with supported TP-Link devices. If you use third-party devices, Omada SDN Controller cannot discover and manage press the Enter key. 3. Get started with the Omada Setup Wizard to set up the network. 2 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 9
Chapter 1 Accessing the Controller Complete Basic Configurations In the web browser, you can see the configuration page. Follow the etup wizard to complete the basic settings. 1. Click Let's Get Started. 2. Set up controller access settings. 3 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 10
your TP-Link ID to your Omada Controller. For more details about Omada Cloud, please refer to 4. 2 Manage Your Controller Remotely via Cloud Access. c. Read and agree to TP-Link's Terms of Use. d. Click Next. 3. Choose how would you like to set up your new controller. You can configure a new setup - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 11
Chapter 1 Log In to the Management Interface Accessing the Controller Once the basic configurations are finished, the browser will be redirected to the following page. Log in to the management interface using the username and password you have set in the basic configurations. 5 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 12
2 Manage Omada Managed Devices and Sites Start managing your network by creating sites and adopting devices so that you can configure and monitor your devices centrally while keeping things organized. The chapter includes the following sections: • 2. 1 Create Sites • 2. 2 Adopt Devices - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 13
and add all the devices within the network to the site, including the router, switches and APs. Site C LAN 3 Router Switch Site B Omada SDN Controller Site A Site B Site C Site D Site E Unified Management from One Interface Gateways Switches Access Points Site D Router Switch LAN 4 AP AP - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 14
Chapter 2 Manage Omada Managed Devices and Sites Create a Site View and Edit the Site Go Into the Site To create a site, choose one from the following methods according - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 15
Chapter 2 Manage Omada Managed Devices and Sites 2. Enter a Site Name to identify the new site. Click Apply. The new site will be added to the Site List and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 16
Chapter 2 Manage Omada Managed Devices and Sites Create a Site View and Edit the Site Go Into the Site After you create the site, you can view the site - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 17
devices in each LAN are added to the corresponding site so that they can be managed centrally. Site C LAN 3 Router Switch Site B Omada SDN Controller Site A Site B Site C Site D Site E Unified Management from One Interface Gateways Switches Access Points Site D Router Switch LAN 4 AP AP - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 18
Chapter 2 Manage Omada Managed Devices and Sites Make sure that the controller can communicate with the devices. Otherwise, the controller cannot discover or adopt the devices by any - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 19
Chapter 2 Manage Omada Managed Devices and Sites as Interface, disable DMZ, specify 29810-29814 as Source Port and Destination Port, specify the controller's IP address as Destination IP, and select All as Protocol. Then click Create. 13 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 20
of the gateways, and 3. 7 Configure VPN of this guide. Internet VPN VPN Connection Gateway A VPN Switch AP AP LAN 1 Integrated Router with Controller Ability Site Unified Management from One Interface Gateway Switch APs LAN 2 2. (Optional) Test the network If you are not sure whether - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 21
Chapter 2 Manage Omada Managed Devices and Sites If the ping result shows the packets are received, it implies that the controller can communicate with the devices. Otherwise, the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 22
Chapter 2 Manage Omada Managed Devices and Sites > Controller Settings to load the following page. In Controller Inform URL, specify Inform URL/ IP Address as the controller's URL or - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 23
Chapter 2 Manage Omada Managed Devices and Sites 2. Open Discovery Utility and you can see a list of devices. Select the devices to be adopted and click Batch Setting. 3. Specify - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 24
Chapter 2 Manage Omada Managed Devices and Sites enter the username and password of the devices. By default, the username and password are both admin. Then click Apply. Wait - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 25
Chapter 2 Manage Omada Managed Devices and Sites 138 as the controller's IP address (if you have configured Port Forwarding on the controller side, use the public WAN IP - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 26
Chapter 2 Manage Omada Managed Devices and Sites Prepare for Communication Prepare for Device Discovery Adopt the Devices 1. Decide which site you want to add the devices to. On - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 27
Omada SDN Controller This chapter guides you on how to configure the network with Omada SDN Controller. As the command center and management platform at the heart of the Omada network, Omada • 3. 6 Transmission • 3. 7 Configure VPN • 3. 8 Create Profiles • 3. 9 Authentication • 3. 10 Services - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 28
, it is helpful to familiarize yourself with the Controller UI. ■ Global Overview Know the status of your sites at a glance, and manage sites in the Omada platform. • Site Monitoring-Keep you informed of accurate, real-time status of every site. • Site Management-Manage all sites to deploy the whole - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 29
all your network devices centrally. ■ Site Overview Site, which means logically separated network location, is the largest unit for managing networks with Omada SDN Controller. You can simultaneously configure features for multiple devices at a site. • Add New Site - Click Add New Site to add a new - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 30
Chapter 3 Configure the Network with Omada SDN Controller location. The site is the largest unit for managing the network. - Know the status of your Site at a glance, and manage sites in the Omada platform. Site View - Know the status of your network at a glance, gain insights, and manage network devices - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 31
Chapter 3 Configure the Network with Omada SDN Controller Global Search Feature Click and About: Click to display the controller version. Tutorial: Click to view the quick Getting Started guide which demonstrates the navigation and tools available for the controller. Feedback: Click to send your - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 32
the Network with Omada SDN Controller the status of switches and speed test results. Map generates the system topology network. Devices displays all TP-Link devices discovered on the site your network device, clients and services during a specified period. You for proactive troubleshooting. And - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 33
Chapter 3 Configure the Network with Omada SDN Controller 3. 2 Modify the Current Site Configuration You can view and modify the configurations of the current site in Site, including the basic site information, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 34
Chapter 3 Configure the Network with Omada SDN Controller Time Zone Select the time zone of the according to where the site is located. These fields are optional. Address 3. 2. 2 Services Overview In Services, you can view and modify the features applied to devices on the current site. Most - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 35
to Chapter 5 Configure and Monitor Omada Managed Devices . (For Outdoor APs) When enabled, outdoor EAPs do not use the channel with the frequency ranging from 5150 MHz to 5350 MHz to meet the local laws and regulations limit in EU countries. When enabled, EAPs supporting Mesh can establish the mesh - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 36
the Network with Omada SDN Controller Connectivity Detection (For APs in the mesh network) Specify the method of Connection Detection when mesh is enabled. In a mesh network, the APs can send ARP request packets to a fixed IP address to test the connectivity. If the link fails, the status - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 37
Chapter 3 Configure the Network with Omada SDN Controller Configuration Select a site from the drop down list of Organization in the top-right corner, go to Settings > Site, and enable Advanced Features in Services first. Then configure the following features in Advanced Features. Click Save. 31 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 38
Omada SDN Controller Fast Roaming AI Roaming Dual Band 11k Report Force-Disassociation Band Steering With this feature enabled, wireless clients that support AP only issues an 802.11v roaming suggestion when a client's link quality drops below the predefined threshold and there is a better option - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 39
Chapter 3 Beacon Control Configure the Network with Omada SDN Controller Beacons are transmitted periodically by the EAP to announce the presence of a wireless network for the clients. Click , select the band, and configure - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 40
Chapter 3 Configure the Network with Omada SDN Controller Select a site from the drop-down list of Organization. Go to Settings > Site and modify the username and password in Device Account. Click Save and the new username and password are applied to all devices on the site. 34 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 41
Chapter 3 Configure the Network with Omada SDN Controller 3. 3 Configure Wired Networks Wired networks to the internet. You can set up an IPv4 connection and IPv6 connection to your internet service provider (ISP) according to your needs. The parameters of the internet connection for the gateway - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 42
Chapter 3 Configure the Network with Omada SDN Controller 1 ) Configure the number of WAN ports on the you don't want to enable online detection, select Disable. Note that Load Balancing and Link Backup will take effects based on the results of online detection. Configure a proper online detection - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 43
Chapter 3 Configure the Network with Omada SDN Controller • Set Up IPv4 Connection Select a site from the drop-down list of Organization. Go to Settings > Wired Networks > Internet. For WAN connections, choose a Connection Type according to the service provided by your ISP. Connection Type - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 44
Chapter 3 Configure the Network with Omada SDN Controller 2. Click + Advanced Settings and configure the port to a VLAN and you need to specify the VLAN. Generally, you don't need to manually configure it unless required by your ISP. Priority is only available when Internet VLAN is enabled. The - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 45
Chapter 3 Configure the Network with Omada SDN Controller ■ Static IP 1. Choose Connection Type as Static IP and configure the following parameters. IP Address Subnet Mask Default Gateway MAC Address Enter the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 46
Chapter 3 Configure the Network with Omada SDN Controller 2. Click + Advanced Settings and configure to a VLAN and you need to specify the VLAN. Generally, you don't need to manually configure it unless required by your ISP. Internet VLAN Priority Priority is only available when Internet VLAN - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 47
Chapter 3 Configure the Network with Omada SDN Controller ■ PPPoE 1. Choose Connection Type as PPPoE and configure the following parameters. Username Password MAC Address Enter the PPPoE username provided by your ISP. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 48
Chapter 3 Configure the Network with Omada SDN Controller 2. Click + Advanced Settings and configure the following parameters. Then click Apply. 42 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 49
Chapter 3 Configure the Network with Omada SDN Controller Get IP address from ISP manually activate or terminate the connection. Time-Based: During the specified period, the gateway will automatically activate the connection. You need to specify the Time Range when the connection is up. Service - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 50
Chapter 3 Configure the Network with Omada SDN Controller ■ L2TP Choose Connection Type as L2TP and configure the following parameters. Then click Apply. 44 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 51
Chapter 3 Configure the Network with Omada SDN Controller Username Password VPN Server / Domain Name WAN port to a VLAN and you need to specify the VLAN. Generally, you don't need to manually configure it unless required by your ISP. Priority is only available when Internet VLAN is enabled. The - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 52
Chapter 3 Configure the Network with Omada SDN Controller ■ PPTP Choose Connection Type as PPTP and configure the following parameters. Then click Apply. Username Password Enter the PPTP username provided by your ISP. Enter the PPTP password provided by your ISP. 46 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 53
Chapter 3 Configure the Network with Omada SDN Controller VPN Server / Domain Name Get IP WAN port to a VLAN and you need to specify the VLAN. Generally, you don't need to manually configure it unless required by your ISP. Priority is only available when Internet VLAN is enabled. The Internet - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 54
Chapter 3 Configure the Network with Omada SDN Controller • Set Up IPv6 Connection For IPv6 connections, check the box to enable the IPv6 connection, select the internet connection type according to the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 55
Prefix Delegation Size DNS Address Configure the Network with Omada SDN Controller Select the proper method whereby your ISP assigns from your ISP, or Disable to designate an address prefix for your LAN port manually. Clients in LAN will get an IPv6 address with this prefix. With Prefix Delegation - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 56
Chapter 3 IPv6 Address Prefix Length Default Gateway Primary DNS Server Secondary DNS Server Configure the Network with Omada SDN Controller Enter the static IPv6 address information received from your ISP. Enter the prefix length of the IPv6 address received from your ISP. Enter - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 57
Delegation Prefix Delegation Size DNS Address Configure the Network with Omada SDN Controller If your ISP provides only one PPPoE account get the DNS address dynamically from your ISP or designate the DNS address manually. Get from ISP Dynamically: The DNS address will be automatically assigned by - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 58
Configure the Network with Omada SDN Controller ■ 6to4 Tunnel Choose Connection Type as 6to4 Tunnel and configure the following parameters. Then click Apply. DNS Address Select whether to get the DNS address dynamically from your ISP or designate the DNS address manually. Get from ISP Dynamically - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 59
Network with Omada SDN Controller Populate to test the speed of WAN ports and automatically fill in the appropriate ratio according to test result. This feature ensures that multi-connected applications work properly. Link Backup With Link Backup enabled, the router will switch all the new - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 60
Chapter 3 Backup Mode Mode Configure the Network with Omada SDN Controller Link Backup: The system will switch all the new sessions from dropped line automatically to another to keep an always on-link network. Always Link Primary: Traffic is always forwarded through the primary WAN port unless it - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 61
Chapter 3 Configure the Network with Omada SDN Controller 2. Click + Create New LAN to load the following page, enter a name to identify the network, and select the purpose for the network. Purpose - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 62
: Specify default gateway manually. Enter the IP address of the default gateway in the field. Click the checkbox to specify legal DHCP servers for the network. With legal DHCP servers configured, Omada Gateways and Switches ensure that clients get IP addresses only from the DHCP servers whose IP - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 63
Enter the value for DHCP Option 66. It specifies the TFTP server information and supports a single TFTP server IP address. Enter the value for DHCP Option 138. It is used in discovering the devices by the Omada controller. You can configure IPv6 connections for the LAN clients based on you needs - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 64
Chapter 3 Configure the Network with Omada SDN Controller DHCP Range Enter the starting and ending With Auto selected, the DHCP server automatically assigns DNS server for devices in the network. Manual: With Manual selected, enter the IP address of a server in each DNS server field. With SLAAC - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 65
Chapter 3 DNS Server Configure the Network with Omada SDN Controller Select a method to configure the DNS server for the network. Auto: With Auto selected, the DHCP server automatically assigns DNS server for devices in the network. Manual: With Manual selected, enter the IP address of a server in - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 66
Chapter 3 Configure the Network with Omada SDN Controller Create a Network Create a Port Profile Assign the Port Profile to the Ports Note: • Three default port profiles are preconfigured on the controller. They - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 67
Chapter 3 Configure the Network with Omada SDN Controller 2. Click + Create New Port Profile to load the following page, and configure the following parameters. 61 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 68
Network 802.1X Control Port Isolation Flow Control EEE Configure the Network with Omada SDN Controller Enter a name to identify the port profile. Select the PoE by the client to authenticate. The switch cannot provide authentication services to the client through the port. Click the checkbox to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 69
Chapter 3 Configure the Network with Omada SDN Controller Loopback Control LLDP-MED Bandwidth refer to 5. 3 Configure and Monitor Switches. Click the checkbox to enable LLDP-MED (Link Layer Discovery Protocol-Media Endpoint Discovery) for device discovery and auto-configuration of VoIP devices - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 70
Chapter 3 Action DHCP L2 Relay Configure the Network with Omada SDN Controller When Storm Control selected, select the action that the switch will take when the traffic exceeds its corresponding limit. With Drop selected, the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 71
Chapter 3 Configure the Network with Omada SDN Controller 1. Go to Devices, and click the switch in the devices list to reveal the Properties window. Go ports, and all the configuration here overrides the port profile. For details, refer to Chapter 5 Configure and Monitor Omada Managed Devices. 65 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 72
Chapter 3 Configure the Network with Omada SDN Controller 3. 4 Configure Wireless Networks Wireless networks enable your wireless clients to access the internet. Once you set up a wireless network, your EAPs typically broadcast - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 73
Chapter 3 Configure the Network with Omada SDN Controller 3. (Optional) If you want to create a new WLAN group based on an existing one, check Copy All SSIDs from the WLAN Group and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 74
Chapter 3 Note: The 6 GHz band is only available for certain devices. Configure the Network with Omada SDN Controller Network Name (SSID) Enter the network name (SSID) to identify the wireless network. The users of wireless clients choose to connect to the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 75
Chapter 3 Configure the Network with Omada SDN Controller ■ WPA-Enterprise WPA-Enterprise requires an authentication server to authenticate wireless clients, and probably an accounting server to record the traffic statistics. Select a - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 76
Chapter 3 Configure the Network with Omada SDN Controller Select a PPSK Profile, which records the PPSK settings. You can create a PPSK Profile by clicking + Create New PPSK Profile from the drop-down - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 77
Chapter 3 Configure the Network with Omada SDN Controller 4. (Optional) You can also configure 3. 4. 2 Advanced Settings, 3. 4. 3 WLAN Schedule, 3. 4. 4 802.11 Rate Control, and 3. 4. 5 MAC Filter according to your needs. Related topics are - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 78
Chapter 3 Configure the Network with Omada SDN Controller ■ Apply to a Single EAP Go to Devices, select the EAP. In the Properties window, go to Config > WLANs, select the WLAN group to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 79
the Network with Omada SDN Controller 3. SSID Broadcast disabled, users of wireless clients must enter the SSID manually to connect to the wireless network. To set a wireless VLAN Then the EAPs work together with the switches which also support 802.1Q VLAN, to distribute the traffic to different - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 80
Chapter 3 Configure the Network with Omada SDN Controller PMF Protected Management Frames (PMF) provide roaming when both the AP and client have 802.11r capabilities. Currently 802.11r does not support WPA3 encryption. Rate Limit You can limit the download and upload rate of each client to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 81
Chapter 3 Time Range Configure the Network with Omada SDN Controller Select the Time Range for the action to take effect. You can create a Time Range entry by clicking + Create New Time Range Entry - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 82
Chapter 3 Note: The 6 GHz band is only available for certain devices. Configure the Network with Omada SDN Controller Disable CCK Rates (1/2/5.5/11 Mbps) Select whether to disable CCK (Complementary Code Keying), the modulation scheme which works with 802.11b devices. Disable - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 83
Chapter 3 Configure the Network with Omada SDN Controller Configuration Select a site from the drop-down list of Organization. Go to Settings > Wireless Networks, click in the ACTION column of the wireless - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 84
Chapter 3 Configure the Network with Omada SDN Controller 1. Select a site from the drop-down list of Organization. Go to Settings > Wireless Networks > AI WLAN Optimization. 2. The following APs will be added in the list automatically: APs in the mesh network and APs with unsupported firmware. 78 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 85
Chapter 3 Configure the Network with Omada SDN Controller 3. 5 Network Security Network Security is a portfolio of features designed to improve the usability and ensure the safety of your network and data. Network security services include 3. 5. 1 ACL, 3. 5. 2 URL Filtering, and 3. 5. 3 Attack - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 86
Chapter 3 Configure the Network with Omada SDN Controller 1 ) Create an ACL with the specified type. 2 ) Define packet-filtering criteria of the rule, including protocols, source, and destination, and determine whether to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 87
Chapter 3 Configure the Network with Omada SDN Controller 2. Define packet-filtering criteria of the rule, including protocols, source, and destination, and determine whether to forward the matched packets. Refer to the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 88
Chapter 3 Configure the Network with Omada SDN Controller ■ Configuring Switch ACL 1. Select a site from the drop-down list of Organization. Go to Settings > Network Security > ACL. Under the Switch ACL tab, click to load the following page. 82 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 89
Chapter 3 Configure the Network with Omada SDN Controller 2. Define packet-filtering criteria of the rule, including protocols, source, and destination, and determine whether to forward the matched packets. Refer to the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 90
Chapter 3 Configure the Network with Omada SDN Controller Network IP Group IP-Port Group MAC Group Select the network you have created. If no networks have been created, you can select - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 91
Chapter 3 Configure the Network with Omada SDN Controller ■ Configuring EAP ACL 1. Select a site from the drop-down list of Organization. Go to Settings > Network Security > ACL. Under the EAP ACL tab, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 92
Chapter 3 Configure the Network with Omada SDN Controller Policy Protocols Select the action to be taken when a packet matches the rule. Permit: Forward the matched packet. Deny: Discard the matched packet. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 93
Chapter 3 3. 5. 2 URL Filtering Configure the Network with Omada SDN Controller Overview URL Filtering allows a network administrator to create rules to block or allow certain websites, which protects it from web-based threats, and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 94
Chapter 3 Configure the Network with Omada SDN Controller ■ Configuring Gateway Rules 1. Select a site from the drop-down list of Organization. Go to Settings > Network Security > URL Filtering. Under the Gateway Rules - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 95
with Omada SDN Controller Enter the URL address using up to 128 characters. URL address should be given in a valid format. The URL which contains a wildcard(*) is supported. One URL with a wildcard(*) can match mutiple subdomains. For example, with *.tp-link.com specified, community.tp-link.com - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 96
Omada SDN Controller Enter the URL address using up to 128 characters. URL address should be given in a valid format. The URL which contains a wildcard(*) is supported. One URL with a wildcard(*) can match mutiple subdomains. For example, with *.tp-link.com specified, community.tp-link services. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 97
Chapter 3 Configuration Configure the Network with Omada SDN Controller ■ Configuring Flood Defense Select a site short time, the target host is busy with these UDP packets and cannot process normal services. With this feature enabled, the gateway limits the rate of receiving UDP packets from all - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 98
Chapter 3 Configure the Network with Omada SDN Controller Stationary Source TCP SYN Flood A TCP SYN in a short time, the target host is busy with these UDP packets and cannot process normal services. With this feature enabled, the gateway limits the rate of receiving UDP packets from a single - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 99
Chapter 3 Configure the Network with Omada SDN Controller ■ Configuring Packet Anomaly Defense Select a site from the drop-down list of Organization. Go to Settings > Network Security > Attack Defense. In the Packet - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 100
Chapter 3 Configure the Network with Omada SDN Controller Block TCP Scan (Stealth FIN/Xmas/ enabled, the router will block WinNuke attacks. WinNuke attack refers to a remote DoS (denial-of-service) attack that affects some Windows operating systems, such as the Windows 95. The attacker sends a - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 101
Chapter 3 Configure the Network with Omada SDN Controller Options, you can further configure the gateway to prevent attacks like SYN flood attacks and broadcast ping. Configuration ■ Configuring State Timeouts Select a site - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 102
Chapter 3 TCP SYN Recv TCP SYN Sent TCP Time Wait UDP Other UDP Stream Configure the Network with Omada SDN Controller The TCP SYN (Synchronize) Recv status will be closed if there is no response after the set time. The TCP SYN (Synchronize) Sent - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 103
Chapter 3 Configure the Network with Omada SDN Controller 3. 6 Transmission Transmission helps you control network traffic in multiple ways. You can add policies and rules to control transmission routes and limit the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 104
Chapter 3 Configure the Network with Omada SDN Controller Destination IP/Subnet Route Type Metric Destination IP/Subnet identifies the network traffic which the Static Route entry controls. Specify the destination of - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 105
Chapter 3 Configure the Network with Omada SDN Controller ■ Policy Routing 1. Go to Settings > Transmission > Routing > Policy Routing. Click + Create New Routing to load the following page and configure the parameters. Name - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 106
3 Routing Legend Configure the Network with Omada SDN Controller The Policy Routing entry takes You can configure Port Forwarding to allow internet users to access local hosts or use network services which are deployed in the LAN. Port Forwarding helps establish network connections between a host on - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 107
Chapter 3 Configuration Configure the Network with Omada SDN Controller ■ Port Forwarding 1. Go to Settings > Transmission > NAT > Port Forwarding. Click + Create New Rule to load the following page and configure the parameters. Name - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 108
Chapter 3 Source IP Interface DMZ Source Port Destination IP Destination Port Protocol Configure the Network with Omada SDN Controller Any: The rule applies to traffic from any source IP address. Limited IP Address: The rule only applies to traffic from specific IP - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 109
Chapter 3 Configure the Network with Omada SDN Controller ■ ALG Go to Settings > Transmission > NAT > ALG. Enable or disable certain types of ALG according to your needs and click Apply. FTP ALG H. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 110
Chapter 3 3. 6. 3 Session Limit Configure the Network with Omada SDN Controller Overview Session Limit optimizes network performance by limiting the maximum sessions of specific sources. Configuration 1. Go to Settings > Transmission > Session Limit. In Session - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 111
Chapter 3 Maximum Sessions Configure the Network with Omada SDN Controller Enter the maximum sessions of the specific sources. 3. Click Create Downstream Bandwidth of the WAN ports. It's recommended to use the Test Speed tool to decide the actual Upstream Bandwidth and Downstream Bandwidth. 105 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 112
Chapter 3 Configure the Network with Omada SDN Controller 2. In Bandwidth Control Rule List, click + Create New Rule to load the following page and configure the parameters. Name Enter the name to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 113
Chapter 3 Configure the Network with Omada SDN Controller Mode Specify the bandwidth control mode for the specific local hosts. Shared: The total bandwidth for all the local hosts is equal to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 114
supports common tunneling protocols that a VPN uses to keep the data secure: ■ IPsec IPsec (IP Security) can provide security services OpenVPN is obtaining a certificate which is used for authentication. Omada SDN controller supports generating the certificate which can be downloaded as a file on - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 115
site B to site A, and nothing is needed to be configured on site B. • Manual IPsec You create an IPsec VPN tunnel between two peer routers over internet manually, from a local router to a remote router that supports IPsec. Omada managed gateway on this site is the local peer router. ■ Client-to-Site - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 116
Chapter 3 Configure the Network with Omada SDN Controller When the remote user's gateway works as the VPN client, the gateway helps create VPN tunnels between its connected hosts and the VPN - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 117
Chapter 3 Configure the Network with Omada SDN Controller Here is the infographic to provide a quick on the same controller. Manual IPsec VPN You manually create an IPsec VPN tunnel between two peer routers over internet, from a local router to a remote router that supports IPsec. Client-to- - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 118
VPN tunneling protocol and configure the VPN policy based on the protocol. ■ Configuring Site-to-Site VPN Omada managed gateway supports two types of Site-to-Site VPNs: Auto IPsec and Manual IPsec. • Configuring Auto IPsec VPN 1. Select a site from the drop-down list of Organization. Go to Settings - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 119
site on the other end of the Auto IPsec VPN tunnel. Make sure that the selected remote site has an online Omada managed gateway within the same controller. • Configuring Manual IPsec VPN 1. Select a site from the drop-down list of Organization. Go to Settings > VPN. Click to load the following page - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 120
Chapter 3 Remote Subnets Local Networks Pre-Shared Key WAN Configure the Network with Omada SDN Controller Enter the IP address range of LAN on the remote peer of the VPN tunnel. Remote subnets should not be in the same - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 121
Chapter 3 Configure the Network with Omada SDN Controller 3. Click Advanced Settings to load the following page. Advanced settings include Phase-1 settings and Phase-2 settings. Phase-1 is used to set up a secure - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 122
the version of Internet Key Exchange (IKE) protocol which is used to set up security associations for IPsec. Both IKEv1 and IKEv2 are supported with Omada managed gateways, but IKEv1 is available only when the VPN policy is applied to a single Remote Subnet and a single Local Network. Note that - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 123
Chapter 3 Configure the Network with Omada SDN Controller Local ID Remote ID Type Remote ID SA Lifetime DPD DPD Interval When the Local ID Type is configured as Name, enter a name - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 124
Chapter 3 Configure the Network with Omada SDN Controller ■ Configuring Client-to-Site VPN Omada managed gateway supports seven types of client-to-Site VPNs depending on the role of your Omada managed gateway and the protocol that you used: Configuring the gateway as a VPN server using L2TP - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 125
Chapter 3 Configure the Network with Omada SDN Controller IPsec Encryption Local Networks Pre-shared Key for authentication. Select the WAN port on which the L2TP VPN tunnel is established. Each WAN port supports only one L2TP VPN tunnel when the gateway works as a L2TP server. Enter the IP address - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 126
Chapter 3 Configure the Network with Omada SDN Controller 2. Enter a name to identify the VPN policy and networks. WAN Select the WAN port on which the PPTP VPN tunnel is established. Each WAN port supports only one PPTP VPN tunnel when the gateway works as a PPTP server. IP Pool Enter the IP - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 127
Chapter 3 Configure the Network with Omada SDN Controller • Configuring the gateway as a VPN server using IPsec 1. Select a site from the drop-down list of Organization. Go to Settings > VPN. Click to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 128
Chapter 3 Configure the Network with Omada SDN Controller Pre-Shared Key Enter the pre-shared key(PSK). Both peer gateways must use the same pre-shared secret key for authentication. A pre- - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 129
Chapter 3 Configure the Network with Omada SDN Controller 3. Click Advanced Settings to load the following page. Advanced settings include Phase-1 settings and Phase-2 settings. Phase-1 is used to set up a secure - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 130
the version of Internet Key Exchange (IKE) protocol which is used to set up security associations for IPsec. Both IKEv1 and IKEv2 are supported with Omada managed gateways, but IKEv1 is available only when the VPN policy is applied to a single Remote Subnet and a single Local Network. Note that - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 131
Chapter 3 Configure the Network with Omada SDN Controller Local ID Remote ID Type Remote ID SA Lifetime DPD DPD Interval When the Local ID Type is configured as Name, enter a name - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 132
Network with Omada SDN service port to which a VPN device connects. Local Networks Select the networks on the local side of the VPN tunnel. The VPN policy will be only applied to the selected local networks. WAN Select the WAN port on which the VPN tunnel is established. Each WAN port supports - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 133
Chapter 3 Configure the Network with Omada SDN Controller 3. After clicking Create to save the VPN policy, go to VPN Policy List and click in the Action column to export the OpenVPN - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 134
Chapter 3 Purpose VPN Type Working Mode Username Password IPsec Encryption Remote Server Remote Subnets Local Networks Pre-shared Key WAN Configure the Network with Omada SDN Controller Select the purpose for the VPN as Client-to-Site VPN. Select the VPN type as VPN Client - L2TP. Specify the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 135
Chapter 3 Configure the Network with Omada SDN Controller • Configuring the gateway as a VPN client using PPTP 1. Select a site from the drop-down list of Organization. Go to Settings > VPN. Click to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 136
Chapter 3 Configure the Network with Omada SDN Controller Username Password MPPE Encryption Remote Server Remote Subnets Local Networks WAN Enter the username used for the VPN tunnel. This username should be - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 137
Chapter 3 Configure the Network with Omada SDN Controller 2. Enter a name to identify the VPN policy and select the purpose as Client-to-Site VPN. Refer to the following table to configure - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 138
the parameters and click Create. Configure the Network with Omada SDN Controller Username Enter the username used for the VPN clients from the configured subnet to connect to the server and obtain VPN services. With this mode selected, specify the subnet in Remote Subnets. Maximum Connections - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 139
Chapter 3 Configure the Network with Omada SDN Controller To edit or delete the VPN users, click the icon in the Action column. You can further filter the entries based on the VPN Server. Filter the entries. View and edit the account information of users. Delete the VPN user. 133 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 140
Chapter 3 Configure the Network with Omada SDN Controller 3. 8 Create Profiles Profiles section is used to configure and record your custom settings for site configurations. It includes Time Range and Groups profiles. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 141
Chapter 3 Configure the Network with Omada SDN Controller them to site configuration. To apply the customized time range profiles in configuration, refer to 3. 4. 3 WLAN Schedule, and 3. 10. 8 PoE Schedule. Name Enter a - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 142
Chapter 3 Delete the entry. Configure the Network with Omada SDN Controller 3. 8. 2 Groups Overview Groups section allows you to customize client groups based on IP, IP-Port, or MAC Address. You can set different rules - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 143
Chapter 3 Configure the Network with Omada SDN Controller ■ Based on IP Group To configure a group profile based on IP Group, you are required to specify the IP subnets, while subnet mask - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 144
Chapter 3 Configure the Network with Omada SDN Controller any IP subnet, it means the group contains the specified port(s) for all IPs. You can click +Add Subnet to add new IP - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 145
separated by a hyphen. For example, AA-BB-CC-DDEE-FF. Add MAC addresses from the clients that are connected to the devices controlled by the Omada SDN Controller. 3. Click Apply to save the entry. After saving the newly added entry, you can apply them to site configuration. To apply the customized - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 146
Chapter 3 Configure the Network with Omada SDN Controller SSID, and applied to specific types of Portal, such as Local User and Voucher. After creating the profiles, you can apply them to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 147
Chapter 3 Configure the Network with Omada SDN Controller 2. Click Apply to save the entry. After saving the newly added entry, you can apply them to site configuration. To apply the customized - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 148
the Network with Omada SDN Controller 2. Enter a name for the new profile. Click +Add to add new entries in the PPSK profile or click Import to import entries in batches from a file. Enter the parameters and click Apply to save the PPSK information. If you select Manually in PPSK Generation - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 149
Chapter 3 Configure the Network with Omada SDN Controller MAC Address VLAN Assignment (Optional) Enter the MAC address of the device that can use the passphrase for authentication. (Optional) Enter the VLAN - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 150
Chapter 3 Configure the Network with Omada SDN Controller To view, edit or delete the PPSK profile, click the icon in the Action column. View and edit the parameters in the entry. Delete the entry. 144 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 151
Chapter 3 Configure the Network with Omada SDN Controller 3. 9 Authentication Authentication is a portfolio of features designed to clients. 3. 9. 1 Portal Overview Portal authentication provides convenient authentication services to the clients that only need temporary access to the network, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 152
is designed for the developers. They can customize their own authentication type like Google account authentication according to the interface provided by Omada Controller. ■ Facebook With Facebook Portal configured, when clients connect to your Wi-Fi, they will be redirected to your Facebook page - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 153
Chapter 3 Configure the Network with Omada SDN Controller The following part introduces how to configure each type of Portal authentication: No Authentication, Simple Password, Hotspot (Voucher, Local User, SMS, RADIUS), External - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 154
Chapter 3 HTTPS Redirection Landing Page Configure the Network with Omada SDN Controller Click the checkbox to enable HTTPS Redirection. With this feature enabled, the unauthorized clients will be redirected to the Portal page when they - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 155
Chapter 3 Configure the Network with Omada SDN Controller 3. In the Portal Customization section, customize the Portal page including the background picture, logo picture and so on. Type Select the type of - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 156
supported, the controller will use the default language specified here. Select the background type. Solid Color: Configure your desired background color by entering the hexadecimal HTML color code manually appear after a client clicks the link in Terms of Service. Click the checkbox and enter text - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 157
Chapter 3 Configure the Network with Omada SDN Controller Click Advertisement Options and customize advertisement pictures on the authentication page. Advertisement Click the checkbox to enable the Advertisement feature. With this feature - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 158
Chapter 3 Configure the Network with Omada SDN Controller 4. (Optional) Configure access control rules including Pre-Authentication Access and AuthenticationFree Client if needed. Go to Settings > Authentication > Portal. On Access Control tab, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 159
Chapter 3 Configure the Network with Omada SDN Controller ■ Configuring Portal with Simple Password 1. Select a site from the drop-down list of Organization. Go to Settings > Authentication > Portal. On Portal tab, click - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 160
Chapter 3 Landing Page Configure the Network with Omada SDN Controller Select which page the client will be redirected to after a successful authentication. The Original URL: Clients are directed to the URL they request - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 161
Chapter 3 Configure the Network with Omada SDN Controller 3. In the Portal Customization section, customize the Portal page including the background picture, logo picture and so on. 155 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 162
Omada clients. If the language is not supported, the controller will use the default by entering the hexadecimal HTML color code manually or through the color picker. Picture: Click terms which will appear after a client clicks the link in Terms of Service. Click the checkbox and enter text as the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 163
Chapter 3 Configure the Network with Omada SDN Controller Click Advertisement Options and customize advertisement pictures on the authentication page. Advertisement Click the checkbox to enable the Advertisement feature. With this feature - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 164
Chapter 3 Configure the Network with Omada SDN Controller 4. (Optional) Configure access control rules including Pre-Authentication Access and AuthenticationFree Client if needed. Go to Settings > Authentication > Portal. On Access Control tab, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 165
Chapter 3 Configure the Network with Omada SDN Controller ■ Configuring Portal with Hotspot 1. Select a site from the drop-down list of Organization. Go to Settings > Authentication > Portal. On Portal tab, click to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 166
Chapter 3 Configure the Network with Omada SDN Controller 3. With different types of Hotspot selected, configure the related parameters. • Configuring Voucher Portal Voucher Select Voucher and click to manage the voucher codes. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 167
Chapter 3 Configure the Network with Omada SDN Controller Authentication Timeout Select the login duration. The client needs to log in again on the web authentication page to access the network. Preset - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 168
3 Receiver Port Status Configure the Network with Omada SDN Controller Specify the port on which the Auth and click + Create New Survey in the Form Authentication section. Then follow the on-screen instructions to create a survey by adding the type and number of questions you need. You can click - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 169
Chapter 3 Configure the Network with Omada SDN Controller 4. In the Portal Customization section, customize the Portal page including the background picture, logo picture and so on. 163 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 170
Omada supported manually Service manually or through manually or through the color picker. Configure your desired background color for the button by entering the hexadecimal HTML color code manually manually manually or through the color picker. Click the checkbox and enter text as the terms of service - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 171
Network with Omada SDN Controller Copyright Show Redirection Countdown After Authorized Click the checkbox and enter text as the copyright in the following box. You can specify the desired text font size and configure the text color by entering the hexadecimal HTML color code manually or through - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 172
Chapter 3 Configure the Network with Omada SDN Controller 5. (Optional) Configure access control rules including Pre-Authentication Access and AuthenticationFree Client if needed. Go to Settings > Authentication > Portal. On Access Control tab, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 173
Chapter 3 Configure the Network with Omada SDN Controller ■ Configuring Portal with External RADIUS Server 1. Select a site from the drop-down list of Organization. Go to Settings > Authentication > Portal. Click to enable - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 174
Chapter 3 Configure the Network with Omada SDN Controller Authentication Timeout RADIUS Profile NAS ID Disconnected Requests Receiver Port Status Authentication Mode Portal Customization HTTPS Redirection Landing Page Select the login duration. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 175
Chapter 3 Configure the Network with Omada SDN Controller 3. If you choose Local Web Portal which is provided by the built-in portal server of the controller, customize the Portal page in the Portal Customization section, including the background picture, logo picture and so on. 169 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 176
Omada supported manually Service manually or through manually or through the color picker. Configure your desired background color for the button by entering the hexadecimal HTML color code manually manually manually or through the color picker. Click the checkbox and enter text as the terms of service - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 177
Network with Omada SDN Controller Copyright Show Redirection Countdown After Authorized Click the checkbox and enter text as the copyright in the following box. You can specify the desired text font size and configure the text color by entering the hexadecimal HTML color code manually or through - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 178
Chapter 3 Configure the Network with Omada SDN Controller 4. (Optional) Configure access control rules including Pre-Authentication Access and AuthenticationFree Client if needed. Go to Settings > Authentication > Portal. On Access Control tab, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 179
Chapter 3 Configure the Network with Omada SDN Controller ■ Configuring Portal with External Portal Server 1. Select a site from the drop-down list of Organization. Go to Settings > Authentication > Portal. On Portal tab, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 180
Chapter 3 Configure the Network with Omada SDN Controller 3. (Optional) Configure access control rules including Pre-Authentication Access and AuthenticationFree Client if needed. Go to Settings > Authentication > Portal. On Access Control tab, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 181
can use Facebook account to authenticate, and for Facebook Wi-Fi V2, clients can use Facebook or Instagram account to authenticate. When the Omada Controller successfully obtain the Facebook page, it will display the name of the Facebook page here. Click the checkbox to enable HTTPS Redirection - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 182
Chapter 3 Configure the Network with Omada SDN Controller 3. In the Portal Customization section, customize the Portal page including the background picture, logo picture and so on. Type Select the type of - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 183
supported, the controller will use the default language specified here. Select the background type. Solid Color: Configure your desired background color by entering the hexadecimal HTML color code manually appear after a client clicks the link in Terms of Service. Click the checkbox and enter text - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 184
Chapter 3 Configure the Network with Omada SDN Controller Click Advertisement Options and customize advertisement pictures on the authentication page. Advertisement Click the checkbox to enable the Advertisement feature. With this feature - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 185
Chapter 3 Configure the Network with Omada SDN Controller 4. (Optional) Configure access control rules including clients. 3. 9. 2 802.1X Overview 802.1X provides port-based authentication service to restrict unauthorized clients from accessing to the network through publicly accessible switch - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 186
Omada SDN TP-Link 802.1X authentication client software on the client hosts, enabling them to request 802.1X authentication to access the LAN. ■ Authenticator An authenticator is usually a network device that supports identity, 802.1X can also deliver customized services. For example, 802.1X and VLAN - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 187
Chapter 3 Configure the Network with Omada SDN Controller Enable 802.1X Configure RADIUS Profile and Parameters Select the Ports Select a site from packets, and transmitted to the authentication server. To use this authentication mechanism, the RADIUS server should support EAP attributes. 181 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 188
Chapter 3 Authentication Type VLAN Assignment MAB Configure the Network with Omada SDN Controller Select the 802.1X authentication type. Port Based: After a client connected to the port gets authenticated successfully, other clients can access the network - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 189
Chapter 3 Configure the Network with Omada SDN Controller Note: Both MAC-Based Authentication and Portal authentication can authenticate wireless clients. If both are configured on a wireless network, a wireless client needs to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 190
provides for the AAA (Authentication, Authorization, and Accounting) needs in modern IT environments. In authentication services including 802.1X, Portal and MAC-Based Authentication, Omada devices operate as clients of RADIUS to pass user information to designated RADIUS servers. A RADIUS server - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 191
only when the device supports the feature. To make this feature work properly, it is recommended to upgrade your devices to the latest firmware version. Authentication Server IP password that will be used to validate the communication between Omada devices and the RADIUS authentication server. 185 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 192
Interim Update Interval Accounting Server IP Click the checkbox to enable RADIUS Accounting to meet billing needs. This feature is only available for Omada EAPs with Portal to account for wireless clients. Click the checkbox to enable Interim Update. By default, the RADIUS accounting process needs - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 193
3 Configure the Network with Omada SDN Controller 3. 10 Services Services provide convenient network services and facilitate network management. You site from the drop-down list of Organization. Go to Settings > Services > DHCP Reservation, click +Create New DHCP Reservation Entry and configure - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 194
10. 2 Dynamic DNS Configure the Network with Omada SDN Controller Overview WAN IP Address of your access Local Network through WAN Port. In this example, Domain Name is mysite.ddns.net. Service Provider Use Domain Name (mysite.ddns.net) to access Local Network. Remote User Internet Domain - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 195
the Network with Omada SDN Controller Prerequisite: Choose one Service Provider from the four that the controller supports, i.e. DynDNS, No-IP, Peanuthull, Comexe. Register at your Service Provider, then you get your Username and Password. Get your Domain Name from your Service Provider. How - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 196
Name Update Interval Configure the Network with Omada SDN Controller Enable or disable the Dynamic DNS entry. Select the WAN Port which the Dynamic DNS entry applies to. Enter your username for the service provider. If you haven't registered at the service provider, click Go To Register. Enter your - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 197
Omada SDN Controller Specify the device type for which the rule takes effect. Bonjour Service: Bonjour Service: Specify the services to be forwarded. Service them with an NMS (Network Management Station). The controller supports multiple SNMP versions including SNMPv1, SNMPv2c and SNMPv3. Note: - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 198
3 Community String SNMPv3 Username Password Configure the Network with Omada SDN Controller With SNMPv1 & SNMPv2c enabled, specify the Select a site from the drop-down list of Organization. Go to Settings > Services > UPnP. Enable UPnP globally and configure the parameters. Then click Apply. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 199
3 3. 10. 6 SSH Configure the Network with Omada SDN Controller Overview SSH (Secure Shell) provides a method . Configuration Select a site from the drop-down list of Organization. Go to Settings > Services > SSH. Enable SSH Login globally and configure the parameters. Then click Apply. SSH Server - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 200
Chapter 3 Configure the Network with Omada SDN Controller Configuration 1. Select a site from the drop-down list of Organization. Go to Settings > Services > Reboot Schedule. Click + Create New Reboot Schedule to load the following page and configure the parameters. Name Status Occurrence - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 201
Chapter 3 Configure the Network with Omada SDN Controller Configuration 1. Select a site from the drop-down list of Organization. Go to Settings > Services > PoE Schedule. Click + Create New PoE Schedule to load the following page and configure the parameters. Name Status Time Range Devices List - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 202
Chapter 3 Configure the Network with Omada SDN Controller Configuration 1. Select a site from the drop-down list of Organization. Go to Settings > Services > IPTV > IGMP, configure the parameters. If you want to configure the IPTV settings, go to next step; if you don't want to configure the IPTV - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 203
Network with Omada SDN Controller Note that the IPTV section will be hidden if your device is an earlier version that does not support this Mode to determine which port is used to support Internet service, IPTV service, or IP Phone service. 3. 10. 10 Upgrade Schedule Overview Upgrade Schedule - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 204
Chapter 3 Configure the Network with Omada SDN Controller Set the automatic upgrade schedule and select devices. Click Apply. Status Occurrence Execute This Upgrade Only Once Devices List Enable or disable the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 205
Chapter 3 Configure the Network with Omada SDN Controller 2. Go to Settings > Services > Export Data. Select the type of data from the export list and click Export. Export List Mode Site Format Device List: Export the list of - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 206
Chapter 3 Send Email Configure the Network with Omada SDN Controller If you want to send the exported data via email, enable Send Email and configure the parameters below: Report Name: Specify the report - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 207
4 Configure the Omada SDN Controller Controller Settings control the appearance and behavior of the controller and provide methods of data backup, restore and migration: • 4. 1 Manage the Controller • 4. 2 Manage Your Controller Remotely via Cloud Access • 4. 3 Maintenance • 4. 4 Migration - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 208
Chapter 4 4. 1 Manage the Controller Configure the Omada SDN Controller 4. 1. 1 General Settings Configuration Select Global from the drop-down list of Organization in the upper right corner. Go to Settings > Controller Settings. In - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 209
Chapter 4 4. 1. 3 User Interface Configure the Omada SDN Controller Overview In User Interface, you can Enable features or select the preferred way for the user interface of the controller. Configuration Select Global - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 210
Omada service, so that you do not need to refresh them manually device firmware updates. service provided by an email service provider. Configuration 1. Log in to your email account and enable the SMTP (Simple Mail Transfer Protocol) Service. For details, refer to the instructions of your email service - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 211
Chapter 4 Configure the Omada SDN Controller 2. Select Global from the drop-down list of the instructions of the email service provider. Enable or disable SSL according to the instructions of the email service provider. SSL (Secure Sockets Layer) is used to create an encrypted link between - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 212
SMTP Server Configure the Omada SDN Controller Test the Mail Server configuration by sending a test email to an email address that you specify. 4. 1. 5 History Data Retention Overview With History Data Retention, you can specify how the controller retains its data. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 213
Chapter 4 Configure the Omada SDN Controller Client History Specify the retention time of client online and offline records. Corresponding in the user experience improvement program and help improve the quality and performance of TP-Link products by sending statistics and usage information. 207 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 214
Chapter 4 Configure the Omada SDN Controller 4. 1. 7 Controller Status Select Global from the drop- information and status. Controller Name MAC Address System Time Uptime Controller Version Model Firmware Version Internal Storage Displays the controller name, which identifies the controller. You - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 215
Chapter 4 4. 1. 8 HTTPS Certificate Configure the Omada SDN Controller Overview If you have assigned a domain name to the controller for login, to eliminate the "untrusted certificate" error message that will appear in - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 216
Chapter 4 Configure the Omada SDN Controller For the PEM-formatted certificate: • Starts with: -----BEGIN CERTIFICATE----• Ends with: -----END CERTIFICATE----• Certificate chain is supported and no blank line is allowed between two certificate chains. For the PEM-formatted key: • RSA encryption is - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 217
Chapter 4 Configure the Omada SDN Controller Configuration Select Global from the drop-down list of Organization in the upper right port used by the controller for management. After setting the port, you can visit https://[Omada Controller Host's IP address or URL]:[HTTPS Port] to log in to the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 218
visit https://[Omada Controller Host's IP address or URL]:[HTTP Port] to log in to the Omada Controller. HTTPS . Click Factory Reset, and follow the instructions to restore the integrated router to its minutes, please wait without any operation. ■ Firmware Upgrade Select Global from the drop-down - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 219
Chapter 4 Configure the Omada SDN Controller firmware version, and to check whether it needs to be upgraded. To upgrade the firmware, click Browse, select one firmware file, and click Upgrade. 213 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 220
follow the instructions to add your controller to the Omada Cloud. ■ Cloud Access 1. Prepare your controller for Cloud Access. Note: • Before you start, make sure your controller has access to the internet. • If you have enabled cloud access and bound your TP-Link ID in the quick setup wizard, skip - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 221
ID and password. Then click Log In and Bind. 2. Access your controller through Cloud Service Go to https://omada.tplinkcloud.com and login with your TP-Link ID and password. A list of controllers that have been bound with your TP-Link ID will appear. Then click Lanuch to manage the controller. 215 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 222
Chapter 4 4. 3 Maintenance Configure the Omada SDN Controller 4. 3. 1 Backup & Restore Overview You can backup the configuration and data of your controller to prevent any loss of important information. If necessary, restore - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 223
Chapter 4 Export Configure the Omada SDN Controller Select where you want to export the data to. Export to Local File: Export and save the data locally. It is not supported when accessing the controller via cloud. Export to File Server: Export and save the data to a file server. Select the desired - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 224
Chapter 4 Configure the Omada SDN Controller Configuration To configure Auto Backup, follow these steps: 1. Select Global from the drop-down list of Organization in the upper right corner. Go - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 225
Omada and it cannot be exported, restored, or deleted. • To back up data manually and restore the data to the controller, refer to 4. 3. 1 Backup & Export for Support Click or to export the running logs or the configuration data for technical support to diagnose network problems. The exported - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 226
Chapter 4 Configure the Omada SDN Controller 4. 4 Migration Migration services allow users to migrate the configurations and data to any other controller. Migration services include 4. 4. 1 Site Migration and 4. 4. 2 Controller Migration, covering all the needs to migrate both a single site and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 227
Chapter 4 Configure the Omada SDN Controller Export Site Migrate Site Migrate Devices 1. Select Global from the drop-down list of Organization in the upper right corner. Go to Settings > - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 228
Chapter 4 Configure the Omada SDN Controller Export Site Migrate Site Migrate Devices 1. Start and log in to the target controller, click the top right corner of the screen and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 229
Chapter 4 Configure the Omada SDN Controller Export Site Migrate Site Migrate Devices 1. Enter URL of the target controller to establish the communication between Omada managed devices and your target controller. Otherwise Omada managed devices cannot be adopted by the target controller. 223 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 230
Chapter 4 Configure the Omada SDN Controller 2. Select the devices that are to be migrated by clicking the box next to each device. By default, all the devices are selected. Click Migrate Devices to migrate the selected devices to the target controller. 224 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 231
data are migrated to the target controller. You can delete the previous site if necessary. 4. 4. 2 Controller Migration Overview Controller Migration allows Omada administrators to migrate the configurations and data from the current controller to any other controller that has the same version. 225 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 232
Chapter 4 Configure the Omada SDN Controller The process of migrating configurations and data from the current controller to another controller can be summarized in three steps: Export Controller, Migrate - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 233
Chapter 4 Export Controller Migrate Controller Configure the Omada SDN Controller Migrate Devices 1. Select Global from the drop-down list of Organization in the upper right corner. Go to Settings > Migration. On the Controller Migration tab, click start button on the following page. 227 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 234
Chapter 4 Configure the Omada SDN Controller 2. Select the length of time in days that data will be backed up in the Retained Data Backup, and where you want to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 235
Chapter 4 Configure the Omada SDN Controller Export Controller Migrate Controller Migrate Devices 1. Log in to the target controller. Select Global from the drop-down list of Organization in the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 236
Chapter 4 Configure the Omada SDN Controller 2. After the file has been imported to the target or URL of the target controller to establish the communication between Omada managed devices and your target controller. Otherwise Omada managed devices cannot be adopted by the target controller. 230 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 237
Chapter 4 Configure the Omada SDN Controller 2. Select the devices that are to be migrated by clicking the box next to each device. By default, all the devices are selected. Click Migrate Devices to migrate the selected devices to the target controller. 231 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 238
Chapter 4 Configure the Omada SDN Controller 3. Verify that all the migrated devices are visible and connected on the target controller. When all the migrated devices are in Connected status - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 239
5 Configure and Monitor Omada Managed Devices This chapter guides you on how to configure and monitor Omada managed devices, including gateways, switches and EAPs. You can configure the devices individually or in batches to modify the configurations of certain devices. The chapter - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 240
Chapter 5 Configure and Monitor Omada Managed Devices 5. 1 Introduction to the Devices Page Overview The Devices page displays all TP-Link devices discovered by the controller and their general information. For an easy monitoring of the devices, you can customize the column and filter the devices - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 241
Chapter 5 Configure and Monitor Omada Managed Devices A transition status between Connected and Disconnected. Once connected to the controller, the device will send inform packets to the controller in a regular interval - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 242
Chapter 5 Configure and Monitor Omada Managed Devices To filter the devices, a tab bar reboot the device. Click to upgrade the managed devices in batches. Click to check if there is new firmware for the managed devices. (For pending devices) Click to adopt the device. (For connected switches and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 243
Chapter 5 Configure and Monitor Omada Managed Devices Missed/Isolated status, while Batch Adopt is will adopt them with the default username and password. If not, enter the username and password manually to adopt the devices. Click Batch Action, select Batch Config, click the checkboxes of devices, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 244
Chapter 5 Configure and Monitor Omada Managed Devices Click to minimize the Properties window to an icon. To reopen the minimized Properties window, click . Click to maximize the Properties window. You - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 245
Chapter 5 Configure and Monitor Omada Managed Devices 5. 2 Configure and Monitor the Gateway adopt and monitor a new router, refer to the Omada Software Controller user guide, which can be downloaded from https://www.tp-link.com/support/download/. To open the Properties window, click the entry - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 246
Chapter 5 Configure and Monitor Omada Managed Devices ■ Ports In Ports, you can view the status and edit settings of the ports. To configure a port, click in the table. PVID Specify to designate a VLAN for a port. 240 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 247
Chapter 5 Configure and Monitor Omada Managed Devices ■ General In General, you can specify the work following the settings of the site. To view and modify the site settings, refer to 3. 2. 2 Services. On/Off: The device's LED will keep on/off. Configure the parameters according to where the site - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 248
of SNMP service, refer to 3. 10. 4 SNMP. ■ Advanced In Advanced, you can configure Hardware Offload, LLDP (Link Layer Discovery Protocol), Echo Server and PoE to make better use of network resources. LLDP Echo Server PoE LLDP can help discover devices. Echo Server is used to test the connectivity - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 249
Chapter 5 Configure and Monitor Omada Managed Devices ■ Manage Device In Manage Device, you can synchronize the configurations with the controller. Force Provision Click Force Provision to synchronize the configurations of - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 250
Chapter 5 Configure and Monitor Omada Managed Devices ■ Common Settings In Common Settings, you can click the path to jump to corresponding modules quickly. 5. 2. 2 Monitor the Gateway One panel and three - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 251
Chapter 5 Configure and Monitor Omada Managed Devices You can hover the cursor over the port icon for more details. Details In Details, you can view the basic information of the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 252
Chapter 5 Configure and Monitor Omada Managed Devices Statistics In Statistics, you can monitor the CPU and memory of the device in last 24 hours via charts. To view statistics of the device in a certain period, click the chart to jump to 7. 2 View the Statistics of the Network. 246 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 253
Chapter 5 Configure and Monitor Omada Managed Devices 5. 3 Configure and Monitor Switches In the the switch features. Ports Port and LAG are two tabs designed for physical ports and LAGs (Link Aggregation Groups), respectively. Under the Port tag, all ports are listed but you can configure - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 254
Chapter 5 Configure and Monitor Omada Managed Devices ■ Port In Port, you can view and configure all ports' names and applied profiles. Status Profile Action Displays the port status in different - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 255
Chapter 5 To configure a single port, click in the table. Configure and Monitor Omada Managed Devices To configure ports in batches, click the checkboxes and then click Edit Selected. Then you can configure the port name and profile. By - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 256
Chapter 5 Configure and Monitor Omada Managed Devices • Override the Applied Profile If you select Switching for Operation, configure the following parameters and click Apply to override the applied profile. To - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 257
Chapter 5 Configure and Monitor Omada Managed Devices 251 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 258
Link Speed Port Isolation Flow Control EEE Loopback Control LLDP-MED Configure and Monitor Omada Managed any means. The switch cannot provide authentication services to the client through the port. duplex automatically. Manual: Specify the speed and duplex from the drop-down list manually. Click - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 259
Chapter 5 Configure and Monitor Omada Managed Devices Bandwidth Control Ingress Rate Limit Egress Rate Limit Broadcast Threshold Multicast Threshold Unknown Unicast Threshold Action Recover Time DHCP L2 Relay Select the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 260
Chapter 5 Circuit ID Remote ID Configure and Monitor Omada Managed Devices (Optional) Enter the customized circuit to the mirroring port. You can use mirroring to analyze network traffic and troubleshoot network problems. To configure Mirroring, select the mirrored port or LAG, specify the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 261
Chapter 5 Configure and Monitor Omada Managed Devices Note that the mirroring ports and the member ports of LAG cannot be selected as mirrored ports. PoE Mode Link Speed (Only for PoE ports) Select the PoE mode for the port. Off: Disable PoE on the PoE port. 802.3at/af: Enable PoE on - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 262
Rate Limit Egress Rate Limit Configure and Monitor Omada Managed Devices Bandwidth control optimizes network performance by share the bandwidth evenly. If an active link fails, the other active links share the bandwidth evenly. • One LACP LAG supports multiple member ports, but at most eight - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 263
Chapter 5 Configure and Monitor Omada Managed Devices profile configurations become the same as supports up to 14 LAGs, the valid value ranges from 1 to 14. Static LAG Select the LAG type as Static LAG, and the member ports are added to the LAG manually. LACP Select the LAG type as LACP (Link - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 264
Chapter 5 Configure and Monitor Omada Managed Devices ■ LAG LAGs (Link Aggregation Groups) are logical interfaces aggregated, which can increase link bandwidth and enhance the connection reliability. You can view and edit the LAGs under the LAG tab. To configure physical ports as a LAG, refer to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 265
Chapter 5 Configure and Monitor Omada Managed Devices Click to configure the LAG name and the applied profile. Name Profile Profile Overrides Enter the port name. Select the profile applied to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 266
and Monitor Omada Managed Devices With Profile Overrides enabled, you can reselect the LAG members and configure the following parameters. Link Speed Port Isolation Flow Control EEE Select the speed mode for the port. Auto: The port negotiates the speed and duplex automatically. Manual: Specify - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 267
Control Bandwidth Control Ingress Rate Limit Egress Rate Limit Broadcast Threshold Multicast Threshold Unknown Unicast Threshold DHCP L2 Relay Configure and Monitor Omada Managed Devices Loopback refers to the routing of data streams back to their source in the network. You can disable loopback - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 268
Chapter 5 Action Recover Time Configure and Monitor Omada Managed Devices With Storm Control selected, select sections to configure the features applied to the selected switch(es), including the general settings, services, and networks. ■ General In General, you can specify the device name and LED - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 269
(Maximum Transmission Unit) size of a normal frame is 1518 bytes. If you want the switch supports to transmit frames of which the MTU size is greater than 1518 bytes, you can configure the MTU size manually here. Select the Hash Algorithm, based on which the switch can choose the port to forward - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 270
Chapter 5 Configure and Monitor Omada Managed Devices ■ VLAN Interface In VLAN Interface, you can configure Management VLAN and different VLAN interface for the switch. The general information of the existing VLAN interface are displayed in the table. 264 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 271
Chapter 5 Configure and Monitor Omada Managed Devices To configure a single VLAN interface, hover the mouse on the entry and click to edit the settings. 265 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 272
Chapter 5 Configure and Monitor Omada Managed Devices Management VLAN IP Address Mode (when with other networks including VLANs with the IP address. Static: Assign an IP address to the interface manually, specify the IP Address and Subnet Mask for the interface. When the VLAN interface is set as - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 273
Chapter 5 Configure and Monitor Omada Managed Devices ■ Static Route In Static Route, you can configure entries of static route for the switch. The general information of the existing static route - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 274
IP/ Subnet Destination IP/ Prefix Length Next Hop Distance Configure and Monitor Omada Managed Devices When IP Version is IPv4, specify Destination IP/Subnet. value will be recorded into the routing table. ■ Services In Services, you can configure Management VLAN, Loopback Control and SNMP. 268 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 275
Chapter 5 Configure and Monitor Omada Managed Devices Management VLAN Display the name of the location and contact detail. You can also click Manage to jump to Settings > Services > SNMP, and for detailed configuration of SNMP service, refer to 3. 10. 4 SNMP. ■ IP Settings (Only for configuring - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 276
Chapter 5 Configure and Monitor Omada Managed Devices address to hold an IP address in reserve for the situation in which the device fails to get a dynamic IP address. Enable Fallback - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 277
Chapter 5 Configure and Monitor Omada Managed Devices ■ Manage Device In Manage Device, you can upgrade the device's firmware version manually, move it to another site, synchronize the configurations with the controller and forget the switch. Custom Upgrade Copy Configuration Click Browse and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 278
Chapter 5 Move to Site Force Provision Forget This Device Configure and Monitor Omada Managed Devices Select a site which the device will be moved to. After moving to another site, device configurations on the prior site will be replaced - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 279
Chapter 5 Configure and Monitor Omada Managed Devices You can hover the cursor over the port icon (except disabled ports) for more details. The displayed information varies due to connection status - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 280
of the device. The listed information will be varied due to the device's model and status. ■ Uplink (Only for the switch connected to an Omada-managed router/switch in Connected status) Click Uplink to view the uplink information, including the uplink port, the uplink device, the negotiation speed - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 281
Managed Devices ■ Downlink (Only for the switch connected to Omada-managed devices in Connected status) Click Downlink to view the downlink information, including the downlink ports, devices name and model as well as negotiation speed. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 282
Chapter 5 Configure and Monitor Omada Managed Devices Statistics In Statistics, you can monitor the CPU and memory of the device in last 24 hours via charts. To view statistics of the device in certain period, click the chart to jump to 7. 2 View the Statistics of the Network. 276 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 283
Chapter 5 Configure and Monitor Omada Managed Devices 5. 4 Configure and Monitor EAPs In the Properties window, you can configure one or some EAPs connected to the controller and monitor the performance - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 284
Chapter 5 Configure and Monitor Omada Managed Devices ■ General In General, you can specify the will work following the settings of the site. To view and modify the site settings, refer to 3. 2. 2 Services. On/Off: The device's LED will keep on/off. (Only for Certain wall plate APs) Enable Wi-Fi - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 285
Chapter 5 Configure and Monitor Omada Managed Devices the situation in which the device fails to get a dynamic IP address. Enable Fallback IP and then set the IP address, IP mask and gateway. 279 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 286
Chapter 5 Configure and Monitor Omada Managed Devices If you select Static as the mode, set the IP address, IP mask, gateway, and DNS server for the static address. 280 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 287
Chapter 5 Configure and Monitor Omada Managed Devices ■ Radios In Radios, you can control how and what type of radio signals the EAP emits. Select the value) Medium: Min. TxPower + (Max. TxPower-Min. TxPower) * 60% (round off the value) High: Max. TxPower Custom: Specify the value manually. 281 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 288
Chapter 5 Configure and Monitor Omada Managed Devices ■ WLANs In WLANs, you can apply the WLAN group to the EAP and specify a different SSID name and password to override the SSID - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 289
and Monitor Omada Managed Devices Enable or disable SSID Override on the EAP. If SSID Override enabled, specify the new SSID and password to override the current one. Enable or disable VLAN. If VLAN is enabled, enter a VLAN ID to add the new SSID to the VLAN. ■ Services In Services, you can - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 290
Manage to jump to Settings > Services > SNMP, and for detailed configuration of SNMP service, refer to 3. 10. 4 SNMP. Layer-3 Accessibility With this feature enabled, devices from a different subnet can access Omada managed devices. LLDP LLDP (Link Layer Discovery Protocol) can help discover - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 291
Chapter 5 Configure and Monitor Omada Managed Devices ■ Power Saving In Power Saving, you can customize at which period or band to save the AP's power consumption. Set the following parameters - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 292
Chapter 5 Select the frequency band Configure and Monitor Omada Managed Devices and configure the following parameters and features. 286 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 293
Chapter 5 Configure and Monitor Omada Managed Devices Max Associated Clients Enable this function and improve the energy-saving capacity of Power Save Delivery clients. OFDMA (Only for AP supporting 802.11 ax) Enable this feature to enable multiple users to transmit data simultaneously, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 294
Chapter 5 Configure and Monitor Omada Managed Devices ■ Manage Device In Manage Device, you can upgrade the device's firmware version manually, move it to another site, synchronize the configurations with the controller and forget the AP. Custom Upgrade Copy Configuration Click Browse and choose - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 295
Chapter 5 Move to Site Force Provision Forget this AP Configure and Monitor Omada Managed Devices Select a site which the device will be moved to. After moving to another site, device configurations on the prior site will be replaced - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 296
Chapter 5 Configure and Monitor Omada Managed Devices You can hover the cursor over the channel bar for more details. Ch.Util.(Busy/Rx/Tx) Tx Pkts/Bytes Rx Pkts/Bytes - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 297
Chapter 5 Configure and Monitor Omada Managed Devices ■ Overview In Overview, you can view the basic information of the device. The listed information varies due to the device's status. ■ LAN (Only - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 298
Chapter 5 Configure and Monitor Omada Managed Devices ■ Uplink (Wired) (Only for devices in the Connected status) If the EAP is connected to the controller in a wired manner, click Uplink (Wired) - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 299
Chapter 5 Configure and Monitor Omada Managed Devices ■ Radios (Only for devices in the Connected status) Click Radios to view the radio information including the frequency band, the wireless mode, the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 300
download the list of clients. Mesh (Only for pending/connected/isolated devices supporting Mesh) Mesh is used to establish a wireless network or expand a After mesh network establishes, the EAPs can be configured and managed in Omada controller in the same way as wired EAPs. Meanwhile, because of - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 301
Chapter 5 Configure and Monitor Omada Managed Devices Note that only certain EAP models support Mesh, and the EAPs should be in the same site to establish a Mesh network. To understand how mesh can be used, the following terms used in Omada Controller will be introduced: Root AP Isolated AP The - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 302
Chapter 5 Configure and Monitor Omada Managed Devices 1 ) Enable Mesh function. 2 ) Adopt the Root AP. 3 ) Set up wireless uplink by adopting APs in Pending (Wireless) or been managed by the controller before. Go to Devices to adopt an EAP in Pending (Wireless) status or link an isolated AP. 296 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 303
within your controller. 2) For the EAP that has been managed by Omada Controller before and cannot reach the gateway, it goes into Isolated status when the Devices list. The following page will be shown as below, click Link to connect the Uplink AP. Once mesh network has been established, the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 304
Chapter 5 Configure and Monitor Omada Managed Devices In Mesh, if AP as the priority AP, click Link in Action column. The icon appears before the current uplink AP of the downlink AP. Tips: • You can manually select the priority uplink AP that you refer to the Mesh feature in 3. 2. 2 Services. 298 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 305
Chapter 5 Configure and Monitor Omada Managed Devices Tools In Tools, you can enable RF Scanning to select a spare time of network to start scanning. • The APs in the mesh network do not support RF Scanning. Select each frequency band to view and analyze the scan results. Each colored bar graph - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 306
Chapter 5 Configure and Monitor Omada Managed Devices The 2.4 GHz results are displayed in channel widths of 20 and 40 MHz. The 5 GHz results are displayed in channel widths of 20, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 307
Chapter 5 Utilization Interference Interference Type Configure and Monitor Omada Managed Devices Displays the percentage of the frequency range already in use. Displays the level of interference. Displays the type of interface, including MWO (Microwave - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 308
6 Monitor and Manage the Clients This chapter guides you on how to monitor and manage the clients through the Clients page using the clients table and the properties window and the Hotspot Manager - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 309
Chapter 6 Monitor and Manage the Clients 6. 1 Manage Wired and Wireless Clients in Clients Page 6. 1. 1 Introduction to Clients Page The Clients page offers a straight-forward way to manage and monitor clients. It displays all connected wired and wireless clients in the chosen site and their - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 310
connected to the guest network, which you can set during the Quick Setup, creating wireless networks, etc. ■ Quick Operations For quick operations on 5. 1 Known Clients. (With portal authentication enabled) Click to manually authorize the client that has not passed the portal authentication. (With - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 311
Chapter 6 Monitor and Manage the Clients 6. 1. 3 Using the Properties Window to Monitor and Manage the Clients In Properties window, you can view more detailed information about the connected client(s) and manage them. To open the Properties window, click the entry of a single client, or click the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 312
Chapter 6 Monitor and Manage the Clients Under the History tab, you can view the connection history of the client. 306 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 313
Chapter 6 ■ Manage a Single Client In Config, you can configure the following parameters: Monitor and Manage the Clients Name Specify the client's name to better identify different clients, and the client's name is shown in the table on the Clients page. 307 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 314
Chapter 6 Monitor and Manage the Clients Rate Limit Select an existing rate limit profile, create a new rate limit profile or customize the rate limit for the client. Custom: Specify the download/upload rate limit based on needs. Note: Rate Limit on this page is only available for the clients - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 315
DHCP server, such as the gateway or switch. Use Fixed IP Address: Select a network and assign fixed IP addresses to the chosen clients manually. To view and configure networks, refer to 3. 3 Configure Wired Networks. Lock to AP helps prevent static clients from roaming frequently between multiple - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 316
Chapter 6 Monitor and Manage the Clients 6. 2 Manage Client Authentication in Hotspot Manager Hotspot Manager is a portal management system for centrally monitoring and managing the clients authorized by portal authentication. The following four tabs are provided in the system for a easy and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 317
Chapter 6 Monitor and Manage the Clients 6. 2. 2 Authorized Clients The Authorized Clients tab is used to view and manage the clients authorized by portal system, including the expired clients and the clients within the valid period. To open the list of Authorized Clients, click Hotspot Manager - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 318
Chapter 6 Monitor and Manage the Clients 2. Click +Create Vouchers on the lower-left, and the following window pops up. Configure the following parameters and click Save. Portal Code Length Amount Type Select the portal for which the vouchers will take effect. Specify the length of the code(s) - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 319
Chapter 6 Monitor and Manage the Clients Duration Type Duration Rate Limit Download/Upload Limit Traffic Limit Description (optional) Specify whether to limit the voucher duration or client duration. Select the valid period for the voucher code(s). Select an existing rate limit profile, create a - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 320
can use the codes to pass authentication. If a voucher code expires, it will be automatically removed from the list. 6. To delete certain vouchers manually, click multiple voucher codes at a time. to delete a single voucher, or Delete to delete 6. 2. 4 Local Users The Local Users tab is used to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 321
Chapter 6 Monitor and Manage the Clients 1. Click Hotspot Manager from the drop-down list of Organization and click Local Users in the pop-up page. 2. Create Local User accounts through two different ways. ■ Create Local User accounts Click +Create User on the lower-left, and the following window - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 322
Dynamic Type Binding. No Binding: No MAC address is bound to the local user account. Static Binding: Bind a MAC address to this user account manually. Then only the user with this MAC address can use the username and password to pass the authentication. Dynamic Binding: The MAC address of the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 323
Chapter 6 Monitor and Manage the Clients ■ Create Local User accounts from files. Click on the upper-right, and the following window pops up. Select a file in the format of CVS or Excel, and click Import. To see required parameters and corresponding explanation, refer to Create Local User - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 324
Chapter 6 Monitor and Manage the Clients 6. 2. 5 Form Auth Data The Form Auth Data tab is used to create and manage surveys. You can customize your survey contents and publish it to collect data. Create Surveys To create surveys, follow the steps below. 1. Click Hotspot Manager from the drop-down - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 325
Chapter 6 Monitor and Manage the Clients 6. 2. 6 Operators The Operators tab is used to manage and create operator accounts that can only be used to remotely log in to the Hotspot Manager system and manage vouchers and local users for specified sites. The operators have no privileges to create - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 326
the operator account. 5. Then you can use an operator account to log in to the Hotspot Manager system: Visit the URL https://Omada Controller Host's IP Address:443/ControllerID/login/#hotspot (for example: https://192.168.0.174:443/4d4ede7983bb983545d017c628feaa3d/login/#hotspot), and use the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 327
7 Monitor the Network This chapter guides you on how to monitor the network devices, clients, and their statistics. Through visual and real-time presentations, Omada SDN Controller keeps you informed about the accurate status of the managed network. This chapter includes the following sections: • 7. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 328
Chapter 7 7. 1 View the Status of Network with Dashboard Monitor the Network 7. 1. 1 Page Layout of Dashboard Dashboard is designed for a quick real-time monitor of the site network. An overview of network topology is at the top of Dashboard, and the below is a tab bar followed with customized - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 329
Chapter 7 Monitor the Network You can hover the cursor over the gateway, switch, AP, client or guest icons to check their status. For detailed information, click the icon here to jump to the Devices or Clients section. Tab Bar You can customize the widgets displayed on the tab for Dashboard page. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 330
Chapter 7 Monitor the Network 7. 1. 2 Explanation of Widgets The widgets are divided into two categories: Network, Client. You can click the the widgets. icon to add or remove Network Client Alerts, ISP Load, VPNs, Most Active EAPs, Most Active Switches, Wi-Fi Summary, Switching Summary, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 331
WAN port within a time range, refer to 7. 2 View the Statistics of the Network. To test the current download and unload speed and the latency of WAN port, click Test Speed on the widget to display the speed test result. ■ VPNs VPNs displays the information of VPN servers and VPN clients. Click the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 332
in the widget to open the device's Properties window for further configurations and monitoring. For details, refer to 5 Configure and Monitor Omada Managed Devices. ■ Wi-Fi Traffic Distribution The Wi-Fi Traffic Distribution widget displays channel distribution of all connected EAPs in the site - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 333
Chapter 7 Monitor the Network ■ Wi-Fi Summary The Wi-Fi Summary widget summarizes the real-time status of wireless networks in the site, including the number of connected EAPs and clients, the channel utilization, and the total number of traffic within the time range. ■ Switching Summary The - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 334
Chapter 7 Monitor the Network ■ Traffic Distribution The Traffic Distribution widget uses a pie chart to display the traffic distribution on EAPs and switches in the site within the time range. Click the tab to display the statistic of EAPs or switches, and click the slice to view the total number - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 335
Chapter 7 Monitor the Network Click the tab to display the statistic of EAPs or switches, and move the cursor on the line chart to view specific values of traffic. For detailed statistics of certain devices within a time range, refer to 7. 2 View the Statistics of the Network. ■ Retried Rate/ - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 336
Network the widget to open the device's Properties window for further configurations and monitoring. For details, refer to 5 Configure and Monitor Omada Managed Devices. ■ PoE Utilization The PoE Utilization widgets describes the PoE utilization of a switch. Select a switch from the switch list to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 337
Chapter 7 Monitor the Network the device's Properties window for further configurations and monitoring. For details, refer to 5 Configure and Monitor Omada Managed Devices. Client Widgets in Clients use lists and charts to illustrate the traffic status of wired and wireless clients in the site, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 338
Chapter 7 Monitor the Network open the client's Properties window for further configurations and monitoring. For details, refer to "6. 1 Manage Wired and Wireless Clients in Clients Page" . ■ Clients Freq Distribution The Clients Freq Distribution widget uses a donut chart to display the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 339
Chapter 7 Monitor the Network The total value of a column shows the total number of clients connected to EAPs in this time period, and the segments in four colors represents the client number of different durations in specific time. ■ Client Activities The Client Activities widget displays how - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 340
Chapter 7 Monitor the Network three failure reasons using gray colors from dark to light. Click the reason in the list to view the distribution of failures on EAPs. Association Timeout The connection failed because of session timeout. Blocked by Access Control The connection failed because the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 341
Chapter 7 Monitor the Network ■ Clients with on Boarding Times The Clients with on Boarding Times widget describes the time wireless clients uses when connecting to a certain SSID. The donut chart on the left shows the proportion of clients that uses less than 10 seconds to connect to the devices. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 342
Network Statistics provides a visual representation of device data in Omada SDN Controller. You can easily monitor the network traffic and performance under the following tabs, Performance, Switch Statistics, and Speed Test Statistics. 7. 2. 1 Performance In Performance, you can view the device - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 343
Chapter 7 Monitor the Network ■ User Counts The User Counts graph displays the number of users connected to the devices during the selected time range. Hover the cursor over the line to display the specific values. ■ Usage The Usage graph uses the orange line and yellow line to display the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 344
Chapter 7 Monitor the Network ■ Packets The Packets graph uses the dark blue line and light blue line to display the number of packets transmitted and received during the selected time range, respectively. Hover the cursor over the lines to display the specific values. ■ Dropped The Dropped graph - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 345
Chapter 7 Monitor the Network ■ Retries The Retries graph uses the dark blue line and light blue line to display the number of times that the data packets are transmitted again and received again during the selected period, respectively. Hover the cursor over the lines to display the specific - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 346
Chapter 7 Monitor the Network Select bps, Bytes or Packets to specify the data type and measuring unit. bps: Displays the traffic rate in bps. Bytes: Displays the traffic statistics in Bytes. Packets: Displays the total number of packets. If you select Packet, click the tab to specify which type of - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 347
Chapter 7 Monitor the Network You can specify the data type and measuring unit by clicking the tab. The dark blue and light blue are used to indicate the transmitted and received statistics, respectively. Hover the cursor over the lines to display the specific values. To view and configure the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 348
can click the icon of devices to open the Properties window. For detailed configuration and monitoring in the Properties window, refer to 5 Configure and Monitor Omada Managed Devices. 342 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 349
7 Monitor the Network For a better overview of the network topology, you can control the display of branches, the size of the diagram, and the link labels. ■ Display of Branches The default view shows the all devices connected by solid and dotted lines. Click the icon of the client group to - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 350
speed, and duplex type. Note that only the switch's port number can be displayed in the label. (For Link Aggregation) Displays the LAG ID, port number of LAG members, LAG speed, and duplex type. (For wireless connections between APs) Displays the negotiation rate of - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 351
Chapter 7 Monitor the Network Click to edit maps in the pop-up window. Click to edit the description and layout of the map. Click to delete the map. Click to add a map. In the pop-up window, enter the description, select the layout, and upload an image in the .jpg, .jpeg, .gif, .png, .bmp, .tiff - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 352
Chapter 7 Monitor the Network Add Map Add Devices and Walls View and Export Results 1. Go to Map > Heat Map and click to add a new map. Then click Add. Description Layout Upload an image Enter a description for the map. Select the general layout of the map, which will make the simulation more - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 353
Chapter 7 Monitor the Network 3. Click to set the default height of the added devices and the information displayed on the map. Then click Confirm. Default Height Display Information Specify the default height for devices. You can change the height for individual device later. Select the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 354
Chapter 7 Monitor the Network Add Map Add Devices and Walls View and Export Results 1. Click to enter the editing status of the map. 2. Click on the upper left, and the list of adopted devices and virtual devices will appear. Drag the devices to the desired place on the map. 3. Click on the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 355
the display of simulation results on the map. Select 2.4GHz or 5GHz to view the simulation results of the band. Click and follow the instruction to specify an area to view the signal strength and the corresponding percentage. Adjust the receiver sensitivity, and the new settings will take effect - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 356
Chapter 7 Monitor the Network Visit https://www.mapbox.com, register an account, and obtain the default token on the account page. Configuration 1. Select a site from the drop down list of Organization in the top-right corner. Go to Map > Device Map. 2. Enter the Mapbox API Access Token you - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 357
Chapter 7 3. Select the sites that can share the token, then click Confirm. Monitor the Network 4. Use the map to manage your devices. Unplaced Device List Search bar Display a list of sites that are not marked on the map. You can drag and drop a site to add it to the map. Select a catogary and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 358
Chapter 7 Right-click a device icon to edit location or remove it from the map. Monitor the Network Click a device icon to view device info and edit settings. 7. 3. 4 Site Map Prerequisite A valid Mapbox API Access Token is required to use the Site Map function. Visit https://www.mapbox.com, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 359
Chapter 7 Monitor the Network Configuration 1. Select Global from the drop down list of Organization in the top-right corner. Go to Dashboard > Site Map. 2. Enter the Mapbox API Access Token you obtained, then click Confirm. 3. Select the sites that can share the token, then click Confirm. 4. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 360
Chapter 7 Locate to current location. Zoom in and zoom out the map. Right-click the map to add a new site. Monitor the Network Right-click a site icon to edit location or remove it from the map. Click a site to view site info, and click Launch to access the site. 354 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 361
administrators to decide whether the controller and devices needs to be upgraded and optimized. It also provides network administrators and SI with data support for reporting network conditions. Go to Report, and you can view the connection data of the devices in the topology and the statistics - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 362
Chapter 7 Monitor the Network 7. 5 View the Statistics During Specified Period with Insight In the Insight page, you can monitor the site history of connected clients, portal authorizations, and rouge APs. For a better monitoring, you can specify the time period and classify the clients and APs. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 363
Chapter 7 Monitor the Network Click the tabs to filter the clients listed in the table. The three tabs can take effect simultaneously. All/Wireless/Wired: Click All to display both wireless and wired clients. Click Wireless or Wired to display wireless or wired clients only. All/Users/Guests: Click - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 364
Chapter 7 Monitor the Network In the table, you can view the client's name, MAC address, association time and duration, download and upload traffic, IP address, and the network/port it connected to. A search bar and a time selector are above the table for searching and filtering. Enter the client - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 365
Chapter 7 Monitor the Network In the table, you can view the client's name, MAC address, authorization credential, uplink and downlink traffics, authorization time and duration, IP address, and the network/port it connected to. For detailed monitoring and management, refer to 6. 2 Manage Client - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 366
and status of each port. Click Counters to display TX and RX rates for each port. All/Connected/Disconnected: Filter the ports by their link status. Click All to display information of all ports. Click Connected or Disconnected to display all connected or disconnected ports. Click to edit the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 367
. Mirroring: The network traffic of this port will receive the mirrored traffic from its mirrored port. Aggregating: The port is a part of an aggregate link Display the switch port profile that takes effect on the port. Display the connection speed and duplex mode of the port. Display the Spanning - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 368
Chapter 7 Monitor the Network PoE PD Class Display the PoE status of the port. --: PoE is disabled. _W: Display the power output of the port in watts. Display the power requirement of the PD connected to the PoE port. Power Voltage Current Display the power output of the port in watts. Display - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 369
Chapter 7 RX Multicast RX Broadcast RX Errors Display the number of received multicast packets. Display the number of received broasdcast packets. Display the number of received error packets. Monitor the Network 7. 5. 5 Port Forwarding Status In Port Forwarding Status, a table displays - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 370
Chapter 7 Packets Bytes Lease Duration Monitor the Network Display the number of transferred packets. Display the number of transferred bytes. (Only for UPnP port forwarding) Display the uptime of the port forwarding entry. 7. 5. 6 VPN Status In VPN Status, a table displays the existing VPN - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 371
Chapter 7 Tunnel ID Data Flow Protocol AH Authentication ESP Authentication ESP Encryption Monitor the Network Display the local and remote IP address/name. The arrow indicates the traffic direction. Display local and remote subnet. The arrow indicates the direction. Display the authentication and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 372
Chapter 7 Uptime Display the time duration that the VPN tunnel has been active. Monitor the Network The listed information of OpenVPN/PPTP/L2TP (Client) table is explained as follows (some information listed below is hidden by default). You can further filter the entries based on their type. - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 373
Chapter 7 Monitor the Network A tab is above the table for filtering. You can also click the icons in the Action column for quick operation. Click the tab to filter the routing information listed in the table. Gateway/Switch: Click to display the routing information of the gateway or the switch. ( - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 374
the DDNS entry. Display the status of the latest DDNS update. Display the username of the DDNS account. Display domain name registered with the DDNS service. Display the IP address of the domain name. Display the time when the IP address of the domain name was last updated. 7. 5. 9 Rogue APs - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 375
the rogue APs listed in the table based on the frequency band. Click to scan rogue APs. It may take several minutes, and the wireless service may be influenced during scanning. A string with a similar form as MAC address to recognize access points. Displays the operation channel and standard of the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 376
Chapter 7 Signal Last Seen Monitor the Network Displays the signal strength in percentage and dBm. Display the last time that the rogue AP was scanned by the controller. 370 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 377
6 View and Manage Logs The controller uses logs to record the activities of the system, devices, users and administrators, which provides powerful supports to monitor operations and diagnose anomalies. On the Log page, you can conveniently monitor the logs in 7. 6. 1 Alerts and 7. 6. 2 Events, and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 378
Chapter 7 Monitor the Network 7. 6. 1 Alerts Alerts are the logs that need to be noticed and archived specially. You can configure the logs as Alerts in Notifications, and all the logs configured as Alerts are listed under the Alerts tab for you to search, filter, and archive. Content Time Click - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 379
Chapter 7 Archive All Monitor the Network Click to archive all unarchived logs. Click to archive the log entry. Click and select the log types to delete the corresponding alert logs. Once deleted the archived alerts cannot be recovered. The unarchived alerts cannot be deleted. 7. 6. 2 Events - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 380
Chapter 7 Content Time Monitor the Network Click the tabs to filter the logs listed in the table. The two tabs can take effect simultaneously. All/Errors/Warnings/Info: Click All to display logs in both Error and Warning levels. Click Errors, Warnings or Info to display logs in the corresponding - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 381
Chapter 7 Monitor the Network To specify the logs as Alert/Event, click the corresponding checkboxes of logs and click Apply. The following icons and tab are provided as auxiliaries. Reset to Default Click to reset all notification configurations in the current site to the default. Click the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 382
the port used by the SMTP server according to the instructions of the email service provider. Enable or disable SSL according to the instructions of the email service provider. SSL (Secure Sockets Layer) is used to create an encrypted link between the controller and the SMTP server. Enable or - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 383
Chapter 7 Monitor the Network Enable Mail Server Enable Alert Emails in Site Enable Alert Emails in Admin 1. Select a site from the drop-down list of Organization in the upper right corner. Go to Site Settings > Log > Notifications and enable Alert Emails. 2. (Optional) On the same page, - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 384
Chapter 7 Monitor the Network Account to create an account or click to edit an account. Enter the email address in Email and enable Alert Emails. Click Create or Save. 378 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 385
Chapter 7 Monitor the Network Enable Alert Emails in Site Enable Alert Emails in Admin Enable Alert Emails in Log Go to Log and click Notifications. Click a tab of content types and enable Email for the activity logs that the controller emails administrators. Click Save. 379 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 386
8 Manage Administrator Accounts of Omada SDN Controller This chapter gives an introduction to different user levels of administrator accounts and guides you on how to create and manage them in the Admin page. The chapter includes the following sections: • 8. 1 Introduction to User Accounts • 8. 2 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 387
. ■ Custom roles Custom roles can be configured to access different features. They can be created or deleted only by the master administrator. Note: Please upgrade Omada APP to version 4.6 or later, otherwise you may not be able to log in with the accounts bound with customized roles. 381 - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 388
for the role. 3. Click Create. The new role will be displayed in the role list. 8. 3 Manage and Create Local User Accounts By default, Omada SDN Controller automatically sets up a local user with the role called master administrator as the primary administrator. The username and password of the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 389
Chapter 8 Manage Administrator Accounts of Omada SDN Controller are the same as that of the controller account by default. The master administrator cannot be deleted, and it can create, edit, and - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 390
Chapter 8 Manage Administrator Accounts of Omada SDN Controller 3. Check the basic information, change the password, or enable alert emails according to your needs. Click Save. 8. 3. 2 Create and Manage Other Local Accounts - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 391
Chapter 8 Manage Administrator Accounts of Omada SDN Controller 3. Select Local User for the administrator type in the pop-out window. Specify the parameters and click Create. Username Password Role Specify the - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 392
Chapter 8 Site Privileges Email (optional) Alert Emails Manage Administrator Accounts of Omada SDN Controller Assign the site permissions to the created local user. All: The created user has device permissions in all sites, including all new-created - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 393
Accounts of Omada SDN Controller 8. 4 Manage and Create Cloud User Accounts Your controller automatically sets up the cloud main administrator if you have enabled cloud access and bound the controller account with a TP-Link ID. The username and password is the same as that of the TP-Link ID. The - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 394
Chapter 8 Manage Administrator Accounts of Omada SDN Controller 3. Select Cloud User for the administrator type in the pop-out window. Specify the parameters and click Invite. TP-Link ID Role Enter an email address of the created cloud user, and then an invitation email will be sent to the email - TP-Link ER7212PC | ER7212PCUN V1 User Guide - Page 395
Chapter 8 Manage Administrator Accounts of Omada SDN Controller Site Privileges Alert Emails Assign the site permission to the created cloud user. All: The created user has permission in all sites, including
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
 |
 |
User Guide
Omada Gigabit VPN Router with PoE+ Ports and
Controller Ability
© 2023 TP-Link REV1.0.0
1910013253