@dakorres 

there is almost 100% firewall issue, double check that TCP 29814 is open. you can use telnet from remote network to test, 

run cmd in windows or other telnet application, mybe you ned to add telnet services in add remove windows function.
telnet xxx.xxx.xxx.xxx 29814 if it answers it is open otherwise the gate is closed.

@shberge thanks a lot for your answer ... probably it is closed, I get this reply

Connecting To  .... Could not open connection to the host, on port 29814: Connect failed

Is there a port forwarding issue ? How can I fix the firewall ? And how adoption is possible using the previous firmware ?

Thanks again.

@dakorres 

You open the ports in the same way as you have done on the other ports, if you have an omda router it is quite simple, but these are different ways to do this on the different types of firewalls, what type of firewall do you have.?

And adopt port is changed in new firmware on device to work against omada 5.x software.

@shberge Ports 29810-29814 were open fron the beginning, I have been aware of that. I am using TP-LINK OMADA ER-605 routers on both sites (headquarters and branch), each of them behind a ZTE-branded VDSL modem-router (provided by my ISP, otherwise I cannot connect to internet).

I have never made port forwarding in ER-605 router.

I have only made it on ZTE one and it works perfectly with the previous firmware.

I don't know what kind of firewall are on ZTE, it just has 3 settings (High - Medium - Low level of protection). Regardless the firewall setting, telnet command has always negative result, but (using the old firmware) EAP225 works perfectly and gets adopted by OC-200 in our headquarters.

Please note that all are functioning properly as long as old firmware is running on EAP225. That keeps me thinking that it is not a matter of port forwaring and/or firewall, but another kind of issue.

I would appreciate any further help, best regards.

@dakorres 

On ER605 its port forwar prety simple

Create portforward like this.

And ZTE can i dont help you with, I do not know these forewall.

Anf how you have get it to work before without port forward in you ER605 is a mystery. 

@shberge Thanks a lot for your efforts. But following the above orders was a complete disaster. All devices in branch office have been disappeared. Even after restoring old firmware 5.0.5 on EAP225. Even ER-605 router/gateway of branch office has been lost.

OC-200 (in headquarters) cannot discover anything.

Please note, that (unlike what I have mentioned above) router ER-605 had been configured indeed with port forwarding, but only 29810-29813. Probably I was not remembering it.

Unfortunately, although (I am using auto-backup on OC-200) I reverted to all previous settings, nothing is now fixed.

I am trying to find out what's wrong now.

Please note that on "controller URL" setting on all devices (before adopting them by OC-200) I always have been inserting my DDNS address (I have no static IP from my ISP). The whole problem could have been caused by DDNS address not being updated promptly (so not a single device could reach destination in HQ by using a DDNS address).

But I have double-checked with "no-ip" (my DDNS provider) that IP address is accurate and updated.

Ι would appreciate any kind of help.

Thanks.

@dakorres 

ddns and no ip is usual not a problem. 

send som screenshot of your port forwarding configuration, what you dealing with no is usual not a problem when all the port is forwarded to correct device.

and I hope not you use 192.168.30.7 as destionation, use you controller ip in destination field.

@shberge 

@shberge ΟC-200 is 192.168.0.190 [reserved by DHCP and permanently there].

this is the configuration in our HQ

Thanks a lot for your efforts

@shberge when I am sending ping from PC of branch to HQ IP address has no answer. Is this normal ? I have no other idea to test the connection, it seems lost.