TP-Link Omada Network Setup & VLAN Configuration Guide

hey hey guys what's up and welcome back I'm Mike and this is the ultimate Tech Hub today's video is a comprehensive Guide to the tp-link omada network which covers the hardware that you see behind me in the omada dashboard where we're going to make all the custom Network configurations like vlans ACLS and much more this is the second video in our Armada Network playlist so if you haven't seen the first video make sure to go back and give it a watch our first video covers the basics of the entire omada network to start off let's go over the four pieces of Hardware in this network setup we have the OC 200 controller the ER 605 VPN router this is the jet stream 10 Port gigabit switch and lastly this is the EAP 670 access point first thing you want to do is plug everything in just like you see here controller to switch router to switch modem to VPN router via the WAN port and we have the access point to the poe switch as well as a Poe camera and just a heads up the control and the access point as well as the camera are all powered by Poe plus power over ethernet however the switch which in the router will need power so the first thing you want to do is download the Yamada app for your phone and then we can start the setup process so once you open the omada app there'll be a plus sign tap on the plus sign to add the controller simply scan the QR code on the back of that controller like so then next you want to go with the entire Setup Wizard you're going to add the region your admin name and password your Wi-Fi name and password and then you're done once you get this all set up you can find the IP address of your controller on your app you'll simply type that IP address into your browser on your computer to access the dashboard you can also open up the omada cloud on your computer type in your email and password and access it that way as well you can also make all your adjustments on your phone app however I recommend a dashboard on your computer it's a bigger screen and it's much easier to make these configurations so now let's take a look at the dashboard and we're going to take a look at a few options on the dashboard we'll take a look at the main features then we're going to create some vlans and ACL Access Control list so now let's get it all set up so guys don't forget hit subscribe it's completely free okay let's go ahead and start with your modded dashboard features top left we have dashboard statistics map devices clients insight and log and at the bottom left is admin and settings let's check check out devices this is where you'll find all your devices in your network you can see our VPN router our switch and our access point you can see the IP addresses of each device and looks like we need to update the firmware of both the switch and the router and from the dashboard you can also see our devices so now bottom left is settings and we have a whole bunch of menus here but our Focus today will be wiring networks wireless networks and network security under wired networks there's two tabs internet and Lan I'm not sure why they didn't call internet just when but maybe in the future they can change that the first thing I want to do is change the controller's IP address also known as the Gateway so we need to head down to settings then to wired networks and then Lan and from here you'll see the Lan interface with the current IP address and that's the first thing we're going to change so head over to the right and click on action and from here we can make all our changes to the controller let's go ahead and change the name to omada go go ahead and leave the purpose as interface make sure all the Lan and Wan boxes are checked now we're going to change our IP address to 192.168.100.1 and we'll leave it at a slash 24. then you'll want to hit update DHCP range and now you're going to notice that our DHCP range is now 192.168.100.1 through 192.168.100.254. let's go ahead and change that 1 to an 8 and what this does is gives a 7 IP addresses outside the DHCP range that we can now use for static IP address assignment so now we'll change DNS server to manual and we're going to use cloudflare's DNS which is 1.1.1.3 and 1.0.0.3 this DNS server blocks malware and adult websites which is great for businesses and homes with small kids or teenagers now click on Save next we're going to change the IP address of the controller to a static IP address and this is our controller's current IP address which is currently in the DHCP range so go to configure and type in 192.168.100.2 and hit apply now you want to reboot the controller just unplug the ethernet cable for about 5 Seconds plug it back in and you're gonna have to wait for three or four minutes before everything comes back online okay next let's go ahead and create some vlans so click on the Lan tab and click on create new land let's go ahead and give it a name and we're going to call this VLAN guest Wi-Fi leave the purpose as interface make sure all the land and Wan boxes are checked we're going to type in VLAN 10. and our address is 192.168.10.1 24. click on update DHCP range in under DHCP controller input the IP address of the controller which is 192.168.100.2 and under DHCP range change the 1 to a two I almost forgot next go ahead and type in the manual DNS you can use cloudflare or whatever you want to use if you're lucky enough to have a pie hole go ahead and use that now go ahead and hit save and now we can see our controller and our guest Wi-Fi let's go ahead and create another VLAN let's go ahead and give it a name of Poe cameras leave the purpose as interface make sure all the land and wind boxes are checked and VLAN ID would be 30. and the Gateway will be 192.168.30.1 24. is then update the DHCP range and we'll do the same thing as last time and we're going to change the start range from dot 1 to Dot 2. we'll go ahead and add the DNS server once again we'll go ahead and use cloudflare but you can use whatever you want then we'll go ahead and update the controller's IP address and then we'll hit save and we're going to create another VLAN and this VLAN will be called iot devices leave purpose as interface check all the lane of wam boxes in our VLAN ID will be 40. the Gateway will be 192.168.40.1 24. once again update the DHCP range the start range from 1 to 2 go ahead and fill in the DNS server and guys make sure to hit subscribe it really helps out our Channel a lot and be sure to give a thumbs up and share it now add the controller's IP address 192.168.100.2 and then hit save now we can see all of our vlans now let's go ahead and create a new wireless network so go to wireless network click on create new wireless network and we're going to name our new wireless network guest Wi-Fi and we'll give it a nice complex password now go to advanced settings enable VLAN and enter the VLAN ID 10 which is the guest Wi-Fi VLAN and we're going to rate limit the upload and download speeds and I definitely recommend that you do this to your network as well you don't want your guests sucking up all your bandwidth alrighty now hit apply and you can see we have two Wi-Fi networks ultimate Tech Hub and guest Wi-Fi network let's go ahead and add one more wireless network for iot devices so we'll call iot devices give it a strong password enable VLAN and type in VLAN id40 and no rate limit here iot devices take up very little bandwidth now hit apply and we can see all three of our wireless networks pretty cool now the last thing we're going to do is create an ACL Access Control list so now click on network security click on ACL then switch ACL and create new rule let's name it iot blocking we want to block all networks from accessing iot devices and this is how you do it so make sure the policy says deny The Source will be Network and then click iot devices and the destination will be Network also and will be omada and remember omada is our secure network and make sure you're binding all ports then hit apply and congratulations you now have an ACL success so now let's take a quick look at the other menus this page enables you to monitor your stats this is your network map which shows all your Hardware this one shows all your devices like routers switches and access points and we're going to do a quick firmware update for both the router and the switch and this will take a few minutes for both don't worry I'll fast forward it all right we updated the firmware for the router and the switch so we're all good we created four vlans two additional wireless networks and even an ACL to block access to iot devices you've seen quite a few of the menus and trust me there's a lot more menus to cover but I want to keep this video as short as possible so I only want to show you basically what you need to get started with a secure safe Network well guys we're all done here I hope you enjoyed this comprehensive Guide to the TP liquid Network so guys remember like share comment subscribe and for God's sakes hit the Bell icon and I'll see you in the next video real soon peace