TP-Link Omada Controller v4+

  • Updated
IMPORTANT: You will require the latest Omada Controller software to continue.

Open a web browser and log in to your Omada v4 controller

Step 1 - Wireless Settings

Click Wireless Settings from the bottom menu then click Add. Configure with:

SSID Guest WiFi (or whatever you wish)
Band 2.4GHz and 5GHz
Guest Network Enabled
Security Mode None

Click Apply to save.

Step 2 - Guest Portal

On the Wireless Control tab select the Portal header. Click Add a New Portal and configure with:

Portal Name guestwifi
SSID select the SSID you just created
Authentication Type External RADIUS Server
Authentication Timeout 8 Hour
RADIUS Server IP *insert radius_server_ip here*
RADIUS Port 1812
RADIUS Password *insert radius_secret here*
Authentication Mode PAP
NAS ID guestwifi
RADIUS Accounting Enable
Accounting Server IP *insert radius_server_ip here*
Accounting Server Port 1813
Accounting Server Password *insert radius_secret here*
Interim Update Enable
Interim Update Interval 120
Portal Customization External Web Portal
External Web Portal URL *insert access_url here*
HTTPS Redirect Disable
Landing Page The Promotional URL
Promotional URL *insert redirect_url here*

Click Apply to save.

Step 3 - Walled Garden

Next, click the Access Control header. Configure with:

Pre-authentication Access Enable

Under Pre-Authentication Access List add each required domain, i.e.

Type URL
URL *insert domain here*
Status Enable

Please refer to this list.

Click Apply to save.

SecurePass Note: To enable our SecurePass WiFi solution please complete the steps below. This enables a secure, seamless WiFi connection for repeat users.

Secure WiFi Configuration

On the left menu, go to Settings > Network Profile > RADIUS. Click Create New RADIUS Profile and configure with:

Name: radsecure
Authentication Server IP/URL: 34.150.158.147
Authentication Port: 1812
Authentication Password: *insert radius_secret here*

Click the + Add New Authentication Server and add the secondary server:

Authentication Server IP/URL: 34.86.212.67
Authentication Port: 1812
Authentication Password: *insert radius_secret here*

Configure the following:

RADIUS Accounting: Enable
Accounting Server IP/URL: 34.150.158.147
Accounting Port: 1813
Authentication Password: *insert radius_secret here*

Click the + Add New Accounting Server and add the secondary server:

Accounting Server IP/URL: 34.86.212.67
Accounting Port: 1813
Authentication Password: *insert radius_secret here*

Configure the following:

Interim Update: Enable
Interim Update Interval: 240

Click Save to confirm.

Next, go to Settings > Wired & Wireless Networks > WLAN. Click Create New Wireless Network and configure with:

Network Name (SSID): Purple
Security: WPA-Enterprise
RADIUS Profile: radsecure
NAS ID: Default
Hotspot 2.0 Enable
Network Type: Free Public Network
Operator Domain securewifi.purple.ai
Operator Friendly Name Purple
Internet Enable
Network Availability IPv4 Single NATed private IPv4 address
NAI Realm list: Click Add New Realm
Realm name: securewifi.purple.ai
Realm Encoding: RFC4282
EAP Method: EAP-TTLS
Authentication param Non-EAP Inner Authentication Type - PAP

Click Confirm and then Apply to save.

Configuration Complete

The configuration is now complete.

Share online:
Was this article helpful?
0 out of 1 found this helpful