How to Manage Omada Devices at Different Sites Using Omada SDN Controller via Port Forwarding (Controller 5.0 or Above)

TL-SG2008P , TL-SG3452X , TL-SG2218P , TL-SG3452XP , EAP245( V3 V4 ) , ER7406 , EAP230-Wall , TL-SG2210P( V3 V3.20 V4 V5 ) , SG2210MP , TL-SX3008F , ER7206 , ER8411 , EAP115( V4 V4.20 V5 ) , TL-SL2428P( V4 V4.20 V5 V6 ) , TL-SX3016F , S4500-8G , SG2218 , SG3428 , Omada Software Controller( V5 ) , TL-SG3452P , TL-SG3428X , ER605 , EAP650-Outdoor , EAP772-Outdoor( V1 ) , SL2428P , S4500-8GHP2F , EAP653 UR , EAP660 HD , OC200 , AP9665 , S4500-16G2F , TL-SG3428XF , ER707-M2 , EAP673 , EAP110( V4 V5 ) , EAP670 , EAP235-Wall , TL-SG2210MP , SG3210 , SG3452 , SG3452X , TL-SG3210XHP-M2 , S5500-24GP4XF , EAP225( V3 V3.20 V4 V5 ) , TL-SG2428P , EAP610-Outdoor , EAP115-Wall , ER7212PC , SG3428XF , SG2428LP , EAP225-Wall( V2 ) , EAP225-Outdoor , EAP223 , SX3008F , SG3428MP , SG3428X , EAP725-Wall , SG3452P , EAP265 HD , SX3016F , SG2218P , EAP620 HD , SG2428P , SG2008P , SG3452XP , EAP613 , EAP610 , EAP653 , TL-SG3428 , TL-SG2218 , SG2210P , S5500-4XHPP2XF , EAP615-Wall , S5500-8MHP2XF , TL-SG3428MP , OC300 , TL-SG2008( V3 V4 ) , EAP650 , TL-SG3452 , TL-SG3210( V3 ) , EAP690E HD , TL-SX3206HPP , EAP623-Outdoor HD , SG3428XMP , EAP110-Outdoor( V3 V4 ) , TL-SG3428XMP , SX3206HPP
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device, and check either the Datasheet or the firmware section for the latest improvements added to your product. Please note that product availability varies by region, and certain models may not be available in your region.
As the network scenario shown below, the Controller and the devices which need to be managed are running in different site across the Internet. In this article, we will describe how to use the Controller on PC1 to manage the devices via Port Forwarding.
Step1: Set Port Forwarding for Router A on Omada SDN Controller
Note: In this article, we suppose Router A is an Omada gateway managed by the Controller, in practice, it is enough if Router A can set up the Port Forwarding.
1. Go to Settings > Transmission > NAT > Port Forwarding, and click on Create New Rule.
2. Set the parameters of the Port Forwarding rule. In this example:
Source Port: 29810-29814
Destination IP: 192.168.0.101
Destination Port: 29810-29814
Step2: Inform the Router A’s WAN IP to the Omada devices
Method 1: Omada Discovery Utility
1) Download the Omada Discovery Utility and run it on PC2.
2) Router B, switch, and EAP will be discovered by Utility. Click the "Select All" and "Batch Setting" buttons in the lower right corner.
3) Enter the parameters needed, the Center IP is Router A's WAN IP, 192.168.1.200.
Note: The default username and password of the devices in factory reset mode are admin/admin, if you have already set them in standalone mode and changed their username and password, you can manage them and enter their username and password separately.
4) The devices will appear in the devices list with "PENDING" status, then you can adopt and manage them.
Method 2: Standalone Management Page
- For Router B,
Go to System Tools > Controller Settings > Controller Inform URL, input the Router A WAN IP 192.18.1.200 in the box, then Router B can find the Controller.
- For Switch
Go to SYSTEM > Controller Settings > Controller Inform URL, then input 192.168.1.200.
- For EAP
Go to System > Controller Settings > Controller Inform URL, then input 192.168.1.200.
After informing the devices of the Controller IP, the devices will appear in the Controller Device list with the "PENDING" status, then you can adopt them.
Method 3: CLI Command
Note: Currently, this method is only suitable for Switch and EAP.
- For Switch
1) Access its management page, then go to SECURITY > Access Security > SSH Config > Global Config on the switch management page, and check the box to enable SSH.
2) Enter the Switch’s IP in Putty and click on Open to access the CLI of the switch.
3) The commands for informing the Controller IP are as below.
enable
configure
controller inform-url 192.168.1.200
- For EAP
1) Access its management page, then go to Management > SSH > SSH Server on the EAP management page, and check the box to enable SSH.
2) Enter EAP’s IP in Putty and click on Open to access the CLI of the EAP.
3) The commands for informing the Controller IP are as below.
xsetctrladdr “192.168.1.200:29810”
Method 4: DHCP Option 138
Note: This method is only suitable for the DHCP clients, in most cases it is for the switch and EAP.
1. Configure the DHCP Option 138
1) Configure the DHCP server, in this example, it is Router B. Access Router B’s management page and go to Network > LAN > LAN, click the Operation ICON to modify the DHCP configuration.
2) Click on the "Advanced DHCP Options", and enter the WAN IP of Router A in the Option 138 entry. In this example, it is 192.168.1.200.
3) Reconnect the Switch and EAP to obtain the IP address again, the Switch and EAP will get the Controller IP from DHCP Option 138 and find Controller properly.
Related FAQs
- How to manage EAPs at different sites across Internet using Omada Controller (via NAT Port Forwarding for Controller Host with EAP Discover Utility) (Old UI)
- How to manage EAPs at different sites across Internet using Omada Controller (via NAT Port Forwarding for Controller Host with DHCP Option138) (Old UI)
- How to manage Omada devices at different sites across Internet using Omada Controller
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.

TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
SESSION, JSESSIONID, accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Zendesk
OptanonConsent, __cf_bm, __cfruid, _cfuvid, _help_center_session, _pendo___sg__.<container-id>, _pendo_meta.<container-id>, _pendo_visitorId.<container-id>, _zendesk_authenticated, _zendesk_cookie, _zendesk_session, _zendesk_shared_session, ajs_anonymous_id, cf_clearance
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au