3
Votes

Enable Loopback Protection on Router Ethernet Ports

 
3
Votes

Enable Loopback Protection on Router Ethernet Ports

Enable Loopback Protection on Router Ethernet Ports
Enable Loopback Protection on Router Ethernet Ports
2025-05-08 22:39:51

As far as i can tell, every router that is of a higher class than a ER605, so thats ER7206 v2, the other ER7xxx models and the ER8411 all utilise a real, seperate switch chip for their RJ45 ports and not a controller embedded in the CPU.

 

Since these routers can control PVIDs and port tagging this would imply that it is at least a somewhat capable switch controller chip.

 

I propose enabling some form of Loopback protection for these routers to protect their RJ45 ports from direct loops.  I have observed over a number of models (from the 7206 v1 , the 7206v2 and the 8411) that they are highly susceptible to just....dying entirely if a loop occours on their ports even briefly, requiring a physical power cycle to correct.

 

One scenario this would help with is one of my own.

 

I have a Hitrons Chita cable modem from my ISP, operating in GRE mode.  Effectively each of its 4 ethernet ports is directly switched through the modem back to the ISP datacentre where the virtual gateway resides, giving me 5 useable IP addresses.  In this mode the modem is effectively a switch-bridge to the ISP data centre and it does not directly have anything to do with my internet connection, its really just a data pipe.

 

To utilise my multiple static IPs, i have multiple links from this modem to different WAN ports on my router, each configured with one of my public IPs - all works good.....UNTIL....

 

If for any reason i need to factory reset my router, i have to physically disconnect these links as upon reset as they default to LAN ports, and because they effectively terminate on the 4-port switch of my modem, a loop is formed, the router dies, and the controller cannot re-adopt it.  I have to unplug the links manually until adoption and configuration is complete, when the ports return to WAN function with seperate MACs, and the loop cannot form.

 

My current very janky but effective solution to this is to have a "middle man" switch between the modem and my router.  It has 4 links to the modem, each on a different untagged vlan.  the 4 links to my router have a different, untagged vlan per port and a tagged vlan per port matching the modem-facing ports.  Therefore, when the router is reset, its ports reach an untagged vlan on the middle-man switch that only exist on that one port and goes nowhere, so the loop cannot form.  When the controller finishes configuration, the ports return to WAN, and are set with tags to match what i need for them to pass through the switch to the modem.  

 

Sure, this works, but its janky as heck and could be completely mitigated if the router ports just had loopback enabled!

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x3, ES208G x1, EAP650 x6 Remote: ER7206 v2 x1, ER605 v2 x3, SG2008P x2, EAP650 x2, ES205G x1 Controller: OC300
#1
Options
4 Reply
Re:Enable Loopback Protection on Router Ethernet Ports
2025-05-09 02:10:18

Hi @GRL

Thank you for your feedback and post.  Since this is a new feedback/feature request, we will keep an eye on this request and collect more votes.
Feel free to vote for this feature and please describe your user case/scenario. For your requests, please understand that it might be some time before the request reaches a threshold with details and votes for an evaluation report.  During the collection of votes, we cannot update you as we would keep track of the vote and user case of a request post before the evaluation report is sent.   To stay updated on firmware releases, we recommend subscribing to the pinned thread on the related page or regularly checking our official website where new releases are typically announced promptly. Get the Latest Firmware Releases for Omada Routers Here - Subscribe for Updates
Please note that all requests undergo a thorough evaluation by our developer team before being added to the roadmap. This process may take some time, so please be patient if you don't see immediate results. Features with lower priority or fewer user reports might experience delays in implementation as we gather more feedback and compare it with competitor products.
It is important to understand that submitting a request does not guarantee its implementation; only requests that pass the evaluation will be considered for inclusion in future updates.

#2
Options
Re:Enable Loopback Protection on Router Ethernet Ports
2025-05-09 09:04:03

Hi @GRL 

GRL wrote

As far as i can tell, every router that is of a higher class than a ER605, so thats ER7206 v2, the other ER7xxx models and the ER8411 all utilise a real, seperate switch chip for their RJ45 ports and not a controller embedded in the CPU.

 

Since these routers can control PVIDs and port tagging this would imply that it is at least a somewhat capable switch controller chip.

 

I propose enabling some form of Loopback protection for these routers to protect their RJ45 ports from direct loops.  I have observed over a number of models (from the 7206 v1 , the 7206v2 and the 8411) that they are highly susceptible to just....dying entirely if a loop occours on their ports even briefly, requiring a physical power cycle to correct.

 

One scenario this would help with is one of my own.

 

I have a Hitrons Chita cable modem from my ISP, operating in GRE mode.  Effectively each of its 4 ethernet ports is directly switched through the modem back to the ISP datacentre where the virtual gateway resides, giving me 5 useable IP addresses.  In this mode the modem is effectively a switch-bridge to the ISP data centre and it does not directly have anything to do with my internet connection, its really just a data pipe.

 

To utilise my multiple static IPs, i have multiple links from this modem to different WAN ports on my router, each configured with one of my public IPs - all works good.....UNTIL....

 

If for any reason i need to factory reset my router, i have to physically disconnect these links as upon reset as they default to LAN ports, and because they effectively terminate on the 4-port switch of my modem, a loop is formed, the router dies, and the controller cannot re-adopt it.  I have to unplug the links manually until adoption and configuration is complete, when the ports return to WAN function with seperate MACs, and the loop cannot form.

 

My current very janky but effective solution to this is to have a "middle man" switch between the modem and my router.  It has 4 links to the modem, each on a different untagged vlan.  the 4 links to my router have a different, untagged vlan per port and a tagged vlan per port matching the modem-facing ports.  Therefore, when the router is reset, its ports reach an untagged vlan on the middle-man switch that only exist on that one port and goes nowhere, so the loop cannot form.  When the controller finishes configuration, the ports return to WAN, and are set with tags to match what i need for them to pass through the switch to the modem.  

 

Sure, this works, but its janky as heck and could be completely mitigated if the router ports just had loopback enabled!

No plan or not gonna be implemented on the Omada gateways, according to the team.

In the future, there will be a new product that is all-in-one. Not ER7212PC or its siblings. 

The team did not leak more information about this new product. Whether it will be born or not is undetermined.

But they say this new product will have the loop detection feature. Just FYI.

#3
Options
Re:Enable Loopback Protection on Router Ethernet Ports
2025-05-09 19:36:43 - last edited 2025-05-09 19:36:58

Guess ill stick with the janky solution then! it works so, whatever i guess

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x3, ES208G x1, EAP650 x6 Remote: ER7206 v2 x1, ER605 v2 x3, SG2008P x2, EAP650 x2, ES205G x1 Controller: OC300
#4
Options
RE:Enable Loopback Protection on Router Ethernet Ports
a week ago
Typically, Loopback protection is on switches, but for a router? It's good to have.
Alex Kota Kinabalu, Sabah Malaysia
#5
Options