7
Votes

IP-port-Group

 
7
Votes

IP-port-Group

IP-port-Group
IP-port-Group
2025-07-07 15:22:31 - last edited 2025-07-08 00:59:48

I would like to kindly request an increase in the entry limit for the IP-port-Group type. The current limitation, which allows for only a few entries, is insufficient for effective network traffic management, especially in more complex environments.

In my opinion, such a low limit should have been reviewed earlier. It is difficult to understand the rationale behind such restrictive constraints — perhaps they stem from internal business policies. Nevertheless, if these devices are intended to serve as forward-looking solutions, such a limited number of ACL rules does not meet modern user expectations.

 

 

#1
Options
6 Reply
Re:IP-port-Group
2025-07-07 18:37:22 - last edited 2025-07-08 00:59:48

  @Pablo_PL 



I agree with you, I struggle with the same thing.

#2
Options
Re:IP-port-Group
2025-07-08 07:50:46

  @Pablo_PL 

 

Agreed

 

But, i think they set the limits low to function for the "least capable" switches without creating strange issues where a low end switch (like SG2008) cant process or store as many rules as a higher end switch (like SG3452)

 

However, having operated a few of their switches in standalone mode before i went to controller, i never got to a point where a switch was "full" regarding rules so.......not sure why the restrictive choice on controller.

 

 

#3
Options
Re:IP-port-Group
2025-07-21 20:22:15 - last edited 2025-07-21 20:28:00

  @Pablo_PL 
I'm having issues with same thing. 

Running docker and many containers where each services is running on different port presents challenge for omada controller.

 

Looking at SG2008P switch load, memory is at 48% while CPU is at 2% usage. @GRL 

 

It cant be hardware limitation and if it is is there a way around this ?

1x ER7206 v1.0 1x OC200 2.0 2x EAP653(EU) v1.0 2x SG2008P v3.20
#4
Options
Re:IP-port-Group
a week ago

  @ProSumerTester having the same issue. I hear it's a hardware limitation. I'm using the OC300 and that was the latest and greatest before OC400 showed up. Anybody knows if that one has a higher limit? 

 

I guess what I'm saying here in this thread is, if this is a hardware limit, how come there isn't a hardware that is powerful enough to have a higher limit???

#5
Options
RE:IP-port-Group
a week ago
Make hardware that has a higher limit. Every problem is about money. Tell me how much?
#6
Options
Re:IP-port-Group
a week ago

  @GRL @Vincent-TP 

In this case, it appears that software team at TP-Link is lazy. The way Cisco and even ubiquity hardware deals with this is that as long as you're running capable hardware it allows for higher limits. As soon as you try to adopt a less capable switch only THEN do you get that warning assuming you already setup more IP groups. And if not, when you do try to setup more than allowed, it should specify the device(s) limiting you so you can replace them with more capable type.

#7
Options