The KB and FAQ content on this support site has now been migrated. Click here to visit our new site today!

TP-Link Omada Controller v4+

You will require Omada Controller v4.15 or above to continue. There is a separate guide for v3.

Open a web browser and log in to your Omada v4 controller

Step 1 - Wireless Settings

Click Wireless Settings from the bottom menu then click Add. Configure with:

SSID
Guest WiFi (or whatever you wish)
Band
2.4GHz and 5GHz
Guest Network
Enabled
Security Mode
None

Click Apply to save.

Step 2 - Guest Portal

On the Wireless Control tab select the Portal header. Click Add a New Portal and configure with:

Portal Name
guestwifi
SSID
select the SSID you just created
Authentication Type
External RADIUS Server
Authentication Timeout
8 Hour
RADIUS Server IP
*insert radius_server_ip here*
RADIUS Port
1812
RADIUS Password
*insert radius_secret here*
Authentication Mode
PAP
NAS ID
guestwifi
RADIUS Accounting
Enable
Accounting Server IP
*insert radius_server_ip here*
Accounting Server Port
1813
Accounting Server Password
*insert radius_secret here*
Interim Update
Enable
Interim Update
120
Portal Customization
External Web Portal
External Web Portal URL
*insert access_url here*
HTTPS Redirect
Disable
Redirect
Enable
Redirect URL
*insert redirect_url here*

Click Apply to save.

Step 3 - Walled Garden

Next, on the Free Authentication Policy header, click Add and configure with:

Policy Name
*insert access_domain here*
Match Mode
URL
URL
*insert access_domain here*
Status
Enable

Click Apply to save. You'll need to perform the same step again for the below URLs:


URLs

venuewifi.com

openweathermap.org

cloudfront.net

stripe.com


Note: If you wish to support social network logins, you also need to add the below entries for each network you plan to support.


Facebook:

facebook.com

fbcdn.net

akamaihd.net

connect.facebook.net


Twitter:

twitter.com

twimg.com


LinkedIn:

linkedin.com

licdn.net

licdn.com


Instagram:

instagram.com


Step 4 - Controller IP and Certificate
IMPORTANT: This step must not be skipped.

Due to the way the TP-Link captive portal service operates, we need to ensure that the controller has a valid SSL certificate installed. We have made the process easy for you - please contact our support team who will provide a free certificate and instructions.

However, before doing so, please ensure that the controller is set to a static IP address on your internal (LAN) network, i.e. 192.168.0.100 and that this doesn't change. You can either set this directly on the machine running the Omada controller, or on your router (DHCP reservation settings). When speaking to our support team, please provide this IP as we will require it in order to proceed.


The configuration is now complete.


Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.