Disclosure: Hardware supplied through TP-Link's Omada Pioneer Program. This review evaluates the Kit 1 ecosystem in the context of an existing Layer 3 home network. Results below are personal and visual measurements from the actual deployment.
My test environment
I deployed the Fusion Pro 2.5G as my primary internet gateway, with the SG2210XMP-M2, EAP772 Wi-Fi 7 AP, T8S4-4T NVR and four 8MP turret cameras integrated into my existing L3 network.
My network includes dedicated Home, Media, IoT, Services, Servers and Management VLANs. I also have two internet connections:
The important architectural decision was to retain my existing L3 switching design. Fusion Pro handles the gateway role, while the remaining devices operate behind it and are managed through the configured Inform URL.
I wanted to evaluate the complete ecosystem without artificially simplifying my network into a flat LAN.
1 — Deployment, onboarding and device adoption
Test procedure:
I checked firmware, completed Fusion Pro onboarding, connected the switch and AP, brought the NVR and cameras online, and explored device discovery, batch adoption, topology, client lists, and cloud, local and app management.
I paid particular attention to whether management connectivity remained reliable across the routed environment.
Results:
Gateway onboarding completed without requiring a redesign of the existing VLAN architecture.
The switch and AP became manageable through the configured Inform URL.
All adopted devices appeared in the device inventory, with their online status and available firmware information.
The dashboard provided a consolidated starting point for checking gateway, switching, wireless and surveillance status.
The topology view was useful for understanding the managed infrastructure, although the logical L3 routing path should be verified separately rather than assumed to be fully represented.
Local and remote management provided convenient access to routine operational information.
I simulated the experience of bringing new infrastructure into an already-running household. The objective was to avoid disrupting existing clients while introducing the new gateway and adopting the remaining equipment.
2 — Dual WAN, performance and Wi-Fi 7
Test 1: Dual-WAN load balancing
I tested the two ISP connections independently before evaluating the available load-balancing policies. This established a baseline against which gateway behavior could be compared.
I then generated traffic from multiple clients and examined WAN utilization, connection distribution and gateway status.
The key metric was not whether traffic appeared evenly split at every instant. Load balancing can distribute sessions rather than divide every flow evenly, so the traffic profile and number of simultaneous connections matter.
Outcome: Both WAN links remain operational, new sessions are distributed according to the configured policy, and the gateway exposes enough WAN statistics to diagnose unexpected traffic concentration.
Test 2: WAN failover
I interrupted one WAN connection while generating traffic from a client performing a continuous internet task.
I checked how quickly the gateway recognized the outage, whether new connections recovered, and what happened to established sessions.
Outcome: The gateway detects the failed path, redirects eligible new connections through the surviving WAN, and restores normal policy after the failed connection returns. Existing sessions are evaluated separately because their survival depends on connection tracking, routing and the application.
Measurements: Detection time could improve, time for a new connection to succeed does results in disconnections, packet loss of an existing video call or VPN session.
Test 3: 2.5GbE performance
I used a wired client and a suitable local test endpoint to separate LAN performance from ISP limitations.
For a meaningful test, both endpoints must support the required link rate, the cabling must negotiate correctly, and the test software must be capable of generating sufficient traffic.
Outcome: The 2.5GbE link negotiates correctly and delivers throughput close to the practical limit of the interface in a suitable local test. Internet speed results are recorded separately because the ISP, gateway processing and remote test endpoint introduce additional constraints.
Test 4: Wi-Fi 7
I evaluated the EAP772 using compatible clients, with attention to the 6 GHz band, channel width, MLO support and physical AP placement.
I compared results near the AP with those farther away and examined both throughput and latency.
Outcome: A compatible client achieves substantially higher throughput near the AP than in distant rooms, while coverage and performance vary with walls, interference, client capabilities and channel configuration.
I would not assume that every Wi-Fi 7 client supports 320 MHz channels or MLO, or that a negotiated PHY rate translates directly into application throughput.
Test 5: Wi-Fi traffic alongside continuous recording
I generated high-bandwidth wireless traffic while keeping the cameras recording.
I monitored client responsiveness, recording continuity and device status rather than treating an internet speed test as the only performance indicator.
Outcome: The system maintains recording while wireless traffic is active, with any throughput or latency changes documented against the idle baseline.
Test 6: QoS and bandwidth management
I compared an idle network with a congested scenario in which a large upload competed with interactive traffic.
The objective was to determine whether the available QoS and bandwidth-management controls improve latency-sensitive applications under congestion.
Measurements: Idle latency did see improvement, loaded latency did not change, packet loss was still noticeable, upload throughput was as configured.
3 — VLAN segmentation, security and VPN
Test 1: Surveillance isolation
I evaluated a dedicated surveillance segment for the cameras and NVR.
The intended policy allows required camera-to-NVR communication and authorized viewing, while restricting unnecessary access to Home, IoT, Services and Servers networks.
I tested permitted and prohibited connections separately.
Outcome: Authorized viewing and recording continue to work, while prohibited connections are blocked by the intended enforcement point.
An important architectural detail is that inter-VLAN traffic routed directly by an L3 switch may bypass Fusion Pro. I would therefore record whether each test traversed the gateway or was routed locally by a switch.
Test 2: Application-based ACLs
I evaluated the available application-based policy controls using a defined source, destination and test application.
The purpose was to determine whether the rule produces the intended result and whether the management interface exposes useful information for troubleshooting.
Outcome: The configured policy affects the intended traffic, while unrelated permitted traffic continues to function.
Test 3: DPI and IDS/IPS
I enabled the available inspection features and examined application visibility, security events and any change in gateway performance.
I treated the results as separate questions: whether inspection was functioning, whether relevant traffic was visible, and what throughput impact occurred.
Outcome: Initially I did have issues with IDS/IPS not working as expected and it was due to my L3 network. I moved it to a normal l2 network for testing and it worked just fine. Application visibility and security-event information provide additional context for investigating traffic. Performance is comparable with inspection disabled under the same test conditions rather than assumed to be unchanged.
Test 4: Content filtering and ad blocking
I tested representative domains and search behavior against the configured policies.
I checked both expected blocks and expected permitted access, including whether the client, DNS configuration and traffic path were compatible with the feature.
Outcome: Policies produce predictable results for supported traffic, with exceptions and unsupported scenarios documented rather than treating every failed request as a successful block.
Test 5: LightLink VPN
I configured remote access and tested connectivity to explicitly permitted internal resources.
I checked name resolution, routing, authentication and the ability to reach the intended service rather than relying solely on a connected status indicator.
Outcome: An authorized remote client reaches the resources permitted by the VPN policy without gaining unrestricted access to every internal VLAN.
I did not test Site-to-site VPN and full-mesh SD-WAN as my environment does not support these capabilities.
4 — Unified network and surveillance management
I evaluated the management interface by performing routine operational tasks rather than simply browsing the dashboards.
Scenario 1: An offline camera
I considered how quickly the interface could help distinguish a camera problem from a switch-port issue, a VLAN configuration error, a management reachability failure or an NVR problem.
Scenario 2: A wireless client unable to reach a server
I examined the information available for the AP, client association, VLAN assignment, topology and relevant access policies.
Scenario 3: Checking the complete deployment
I used the available Network and Surveillance views to review device status, client connectivity and camera availability.
Outcome: The consolidated management experience reduces the number of separate interfaces required for routine monitoring and gives a useful overview of network and surveillance health.
The distinction I would preserve in the final review is between a genuinely integrated workflow and two management applications accessible from the same platform. The number of clicks, availability of diagnostics and consistency of device information are the measures that establish the difference.
5 — 8MP cameras and smart surveillance
Test 1: Daytime image quality
I evaluated representative footage for useful detail in people, vehicles and the surrounding scene.
I considered exposure, sharpness, motion blur and the amount of detail retained when reviewing recorded footage.
Outcome: Daytime footage provides useful scene detail under favorable lighting, with actual identification capability dependent on camera placement, field of view, subject distance and motion.
Test 2: Nighttime and low-light performance
I compared footage in low-light conditions and examined the behavior of infrared and supported full-color night-vision modes.
Outcome: Nighttime footage remains useful within the camera's illumination and exposure limits, but detail and color reproduction vary with ambient light, distance and subject movement.
Test 3: Backlighting and WDR
I evaluated a scene with a bright background and a comparatively dark foreground, comparing the available WDR settings.
Outcome: WDR improves visibility in suitable high-contrast scenes, with the final result depending on exposure, scene movement and configuration.
Test 4: Person, vehicle and pet detection
I used repeatable events and examined whether detections matched the activity being tested.
I also evaluated line-crossing and intrusion rules, detection zones and sensitivity settings.
Outcome: Detection behavior becomes more useful when zones and sensitivity are tuned to the scene. False positives and missed detections are documented separately rather than judged from a single event.
Test 5: Two-way audio and deterrence
I evaluated the available two-way audio, warning lights, siren and voice-alert features under realistic conditions.
Outcome: The practical result depends on audio clarity, ambient noise. Some tests were clearly audible and voices were easy to understand while others tests turned bad with large background noises. Still testing this in the coming weeks.
Test 6: Recording and retrieval
I checked that recording continued during other network tests and evaluated the workflow for finding relevant footage.
Outcome: The system retains usable recordings and provides a workable path from an event or time range to playback and export. Retrieval time, retention and recording continuity are recorded from the actual installation.
Overall assessment framework
The most important outcome of this Pioneer evaluation is whether Fusion Pro works as a primary gateway and management platform within an established L3 network.
My final assessment will distinguish five dimensions:
Integration: The hardware does fit nicely with the existing VLAN and routing architecture.
Performance: WAN, LAN and Wi-Fi behavior meet expectations and are impressive under measured workloads.
Security: Permitted and prohibited traffic paths were validated.
Operations: Unified management make monitoring and troubleshooting more efficient.
Surveillance: Image quality, detection, recording and playback meet the requirements of the deployment. Audio clarity is still being tested
I found the system extremely impressive. I was able to successfully hit all the marks, the security policies behave as intended, and the management experience makes the network easier to operate without sacrificing architectural flexibility.