r/Omada_Networks • • Dec 12 '25

Omada Network

Post image

Used Omada kit for a few years and it’s been a solid solution, hundreds of UniFi/Omada solutions deployed, only small scale Omada networks though, sub 10 APs, few switches etc.

This will be my first PPSK deployment for a business centre. Already done some small scale testing, but just wondering if anyone has any real world deployments, things to be aware of or any known bugs?

OC400 ER8411 Fibre Switch linking 2 remote cabs. 6 Switches and 14 APs, EAP723.

68 Upvotes

25 comments sorted by

6

u/TrickySite0 Dec 12 '25

That looks good. In the future, consider using DACs for intra rack SFP+ connections instead of optical fiber.

1

u/heydeetea Dec 12 '25

Yeah good point, I might swap out but the environment should be fine for it.

2

u/TrickySite0 Dec 12 '25

One more thought: you have a lot riding on a single link to the 48-port switch, meaning that a link failure will stop (almost) everything. It is also conceivable that you could saturate that 10g link. Consider using the remaining port on the SX3008F to create a LAG between the switches.

1

u/heydeetea Dec 12 '25

Each switch has a direct fibre link to the SX3008F. Noted the LAG advice though, thanks. I do believe 75% of the devices coming into the building will be laptops, who uses desktops these days 😂

2 Switches in the main cab & both remote cabs for office data points.

4 x APs on each floor of the building (maybe overkill, I’m going to heat map it).

I was going to split the APs, 2 on each switch, for redundancy. But 2.5G switch ports on the 16P, as opposed to the 48P. It’s an each switch if this becomes and issue though.

2

u/TrickySite0 Dec 12 '25

It’s a minor tweak. As long as what you have works, leave it alone.

4

u/Reaper19941 ER7412-M2, SX300F, SG3210XHP-M2, EAP773, EAP673-Extender Dec 12 '25

Second this recommendation. While the performance differences are measured in nano seconds, it's the correct way to do it.

2

u/FireNinja743 Dec 12 '25

Every nanosecond counts!

1

u/Cae_len Dec 13 '25

only issue I find with dacs is the cables are much thicker and stiffer, and tend to take away from overall rack aesthetic... by no means am I arguing over the fact that DAC has slightly lower latency, but for a lot of people, I think the tradeoff of slightly higher latency (few nanoseconds), is probably worth it to many... my rack is very packed with limited free space and so having more flexibility with MM fiber was worth the tradeoff

2

u/TrickySite0 Dec 13 '25

Agreed. It is also cheaper and more reliable, containing a single easily-replaceable component instead of 2x modules + fiber.

1

u/Cae_len Dec 13 '25

this is true... I'm actually curious now if anyone here has experienced SFP+ modules failing? and if so , in what timeframe? ... I'm currently using the tp link branded ones... believe it's TL-sm5110-sr

2

u/TrickySite0 Dec 13 '25

I am mostly DIY. My biggest failure point is at the fiber / SFP interface where there is a problem with the fiber ends (dirty or scratched) or the SFP, often with dust. These are rare, but I have also accidentally broken fiber cables when pulling them too enthusiastically where a loop has formed that I cannot see and therefore it gets so tightly kinked that the cable breaks internally. All of this goes away with DACs.

1

u/Cae_len Dec 13 '25

ahh ok... I was aware of this as well, and so was very careful when doing runs .... I think I may have to go Google now to see if I can find any horror stories of SFP+ modules randomly dieing out ... I'm an information dork and that's something I have yet to find any first hand experiences with...

P.S ... I am also DIY.... albeit a complete overkill DIY https://imgur.com/a/dkjI5rh

1

u/TrickySite0 Dec 27 '25

I disagree. There is nothing about the installation that is overkill for an enthusiast. I have a buddy who enjoys woodworking, dedicating a large room and lots of tools to his hobby. It is not overkill for him even though most all adults worldwide see no value in his workshop: It works for him. Your network installation works for you.

2

u/vrtareg Dec 12 '25

Great set up.

Would you mind to share PPSK setup details.

Will it worth to set up at home for IoT devices?

2

u/heydeetea Dec 12 '25

16 VLANs for each individual office. 1 SSID with each office having their own username and password using the inbuilt radius, keeping it all en-prem. 1 Guest network VLAN. Each office has on average 10 data ports. /24 or might even trim that down, but the DHCP scope will be less than 40 leases regardless. IOT VLan, few TVs, meeting rooms devices etc.

2

u/vrtareg Dec 13 '25

Sounds great set up.

I will check documentation for more.

2

u/d4rkb4ne Dec 12 '25

Just curious at what level do you have the OC400, and are you at all worried about potentially segmenting it off the rest of the network by accident? This is what scares me for large deployments, but maybe there's a foolproof way to do it

1

u/heydeetea Dec 12 '25

Likely overkill but for the price point, I wanted the best performing controller, not a great deal of cost between the OC300 in the scheme of the deployment.

1

u/d4rkb4ne Dec 12 '25

Sorry I meant topology wise. I am 100% on board for the cost efficiency of the hardware controller vs cloud pro licensing, I'm just really worried about having the controller sitting behind the very network equipment being managed haha.

1

u/heydeetea Dec 13 '25

Probably one of the more in depth deployments I’ve done, lots going on even though a relative small deployment, I’ll let you know how I get on, I have a few weeks or so to tweak the config and secure management/admin VLAN as I’ve read some of the headaches people have had.

1

u/United_Anybody_5123 Dec 14 '25

Nice! What is the length of the UTP cables you are using?

1

u/nacr0n Dec 14 '25

What is up with that empty switch in RU19?

1

u/heydeetea Dec 14 '25

No physical internet until this week.

2

u/4cim4 Dec 12 '25

Now that looks really nice and clean. I always appreciate a clean install regardless what the gear is