TP-Link ER605 V2 Wired Gigabit VPN Router, Up to 3 WAN Ethernet Ports + 1 USB WAN, SPI Firewall SMB Router, Omada SDN Integrated, Load Balance, Lightning Protection

I'm using this router without the Omada controller. The TP-Link EAP610 Ultra-Slim Wireless Access Point went on sale so I got that and then decided to also get this router.I have AT&T fiber and wanted to use VLANs to segrate my guests, IoT, and main devices from each other.This router is working great so far for this purpose.The ER605 router has 5 ethernet ports. I'm using the first port for WAN, so I connected that directly to the AT&T gateway. It is the only device connected to the gateway. I set the gateway to IP passthrough so that it's supposed to provide the ER605 with the internet/public IP address and sort of not use the AT&T gateway's firewall. I'm not sure if this is exactly how it works or if I set it up correctly, but it's working for me.Port 2 is untagged with my main VLAN. I connected an 8-port Netgear unmanaged switch to port 2. Connected to the switch are my main devices: desktop PC, two NAS, and a server. All of those devices automatically get assiged IP address to the main LAN since the switch is connected to port 2.Port 3 is also untagged with my main LAN, but I haven't connected anything to it.Port 4 is untagged with IoT and I connect my Philips Hue Bridge to it. It gets assigned a IP address within the IoT VLAN.Port 5 is tagged with the main VLAN, IoT VLAN, and Guest VLAN. I connected the EAP610 Access Point to port 5 so I can connect WiFi devices to the router.Within the EAP610, I created a main 2.4gz and 5gz SSIDs that gets tagged with main VLAN, so all devices that connect to those SSIDs automatically get assigned an IP address within the main VLAN. I also created a IoT 2.4gz and 5ghz IoT SSIDs and all devices connected to them are auto assigned IP addresses with the IoT VLAN. I created a guest 2.4gz and 5ghz SSIDs that gets tagged with Guest VLAN. I also set those SSIDs to be "guest network" within the EAP610 settings so that those devices only have access to internet and can't even see/ping each other even within the same guest VLAN. So the EAP610 can create multiple SSIDs and can tag VLANs. It is working great with the ER605 router. I'm using six SSIDs so far.On the ER605 router, I set it so the IoT VLAN can't connect/ping devices on the main VLAN. I only use the guest VLAN with wifi and the access point already sets them up as a "guest network" so those devices are unable to see/ping IoT or Main VLAN devices.This set up is working great so far, but I've only had these devices for a few days and finished setting things up the way I like them today. Time will tell if these Omada devices will last. Once I have the funds, I plan on getting the Omada controller and an Omada compatible switch.

I purchased the TP-AX3000 Fest FR365 because I need VPN for a business to Cloud connection for a new cloud application implementation.I setup a new account for the cloud management which was easy and put in the Serial Number of the new AX3000, but I was initially unable to get it Imported into the TP-link management cloud.I tried the online chat for support and once I got past the AI question and asked to chat with a real human, I got connected to Edemer. I typed what we were seeing with the AX3000 being imported, but not connected. Edemer pointed me to the step where I needed to enable the device to be cloud managed. That step did not exist on the quick start guide, but it was in the user manual. I connected to the Web UI on the AX3000 directly and checked the setting to enable management from the TP-Link Cloud. I then needed to FORGET the device and re-import it. Within 5 minutes is was imported properly and manageable from the TP-Link Cloud management portal.The online support chat experience was quick and efficient and Edemer pointed me to the correct solution. The problem was fixed with 5-10 minutes after already spending 2-3 hours trying to get it to import on my own.The product itself seems good. I configured a few port forwards already and will be working on the VPN in the future. The port forwards even have the ability to limit the external source addresses using the port forward, so that is a helpful security feature.Thanks again Edemer for your help on the online support chat.

This device is a must have for folks who have had enough of Cable Company Owned and customer "Rented" internet gateways. The device is very well constructed, has enough indicator lights to let you know "at a glance" what is going on.And paired with the newer version 3.1 of cable modem operating system's your internet will be faster, more manageable and more secure than with the one the cable companies provide. This one also has a built in basic but effective firewall!Installation is simple, it practically sets itself up! Go for the simple quick setup and tweak later. I would buy this again in a New York Minute!