TP Link Omada Pro

Here is a step-by-step guide on how to configure TP-Link Omada Pro to work with VAULT.

Configuration Steps Overview

1. Verify Prerequisites

2. Configure RADIUS Profile

3. Configure WLAN

Verify Prerequisites

1. Verify an Access Point Group has been created (outside the scope of this document)

2. Verify an Access Point is associated to the Access Point Group (outside the scope of this document)

3. Verify Access Point firmware of EAP653v1 or later

4. Verify Omada Pro Firmware 5.9.50 or later

Configure RADIUS Profile

1. From the Omada Controller Dashboard Click on Settings

2. Click Expand Authentication Option

3. Click on RADIUS Profile

4. Click +Create New RADIUS Profile

1. Under Create New RADIUS Profile set the following information

   • Name: VAULT

   • Select Enable VLAN Assignment for Wireless Network to enable it

   • Under Authentication Server 1

     • Authentication Server IP/URL: xx.xx.xx.x

     • Authentication Port: xxxx

     • Authentication Password: XXXXXXX

   • Select RADIUS Accounting: To enable Accounting Server

   • Select Interim Update: To enable Interim Updates

     • Interim Update Interval: 1800 Seconds

   • Under Accounting Server 1

     • Accounting Server IP/URL: xx.xx.xx.x

     • Accounting Port: xxxx

     • Accounting Password: XXXXXXX

2. Click Save

Configure WLAN

1. From the Omada Controller Dashboard Click on Settings

2. Click Expand Wireless Networks Option

3. Click on WLAN

4. Click +Create New Wireless Network

1. Under Create New Wireless Network set the following information

   • • Network Name (SSID): VAULT

     • Band:

       • Select 2.4 GHz to enable 2.4 GHz

       • Select 5 GHz to enable 5 GHz

       • De-Select 6 GHz to DISABLE 6 GHz

     • Guest Network: De-Select to DISABLE

     • Security: Select PPSK with RADIUS

     • RADIUS Profile: Select VAULT (created in previous steps)

     • Authentication Type: Select Generic Radius with unbound MAC

     • NAS ID: RoamingIQ Will Provide the NAS-Identifier to use

     • Expand Advanced Settings

       • VLAN: Click to Enable

         • Enter a standard VLAN ID for your organization

2. Set all other values to best practices

3. Click Apply