IP-port-Group
I would like to kindly request an increase in the entry limit for the IP-port-Group type. The current limitation, which allows for only a few entries, is insufficient for effective network traffic management, especially in more complex environments.
In my opinion, such a low limit should have been reviewed earlier. It is difficult to understand the rationale behind such restrictive constraints — perhaps they stem from internal business policies. Nevertheless, if these devices are intended to serve as forward-looking solutions, such a limited number of ACL rules does not meet modern user expectations.

- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
I agree with you, I struggle with the same thing.
- Copy Link
- Report Inappropriate Content
Agreed
But, i think they set the limits low to function for the "least capable" switches without creating strange issues where a low end switch (like SG2008) cant process or store as many rules as a higher end switch (like SG3452)
However, having operated a few of their switches in standalone mode before i went to controller, i never got to a point where a switch was "full" regarding rules so.......not sure why the restrictive choice on controller.
- Copy Link
- Report Inappropriate Content
@Pablo_PL
I'm having issues with same thing.
Running docker and many containers where each services is running on different port presents challenge for omada controller.
Looking at SG2008P switch load, memory is at 48% while CPU is at 2% usage. @GRL
It cant be hardware limitation and if it is is there a way around this ?
- Copy Link
- Report Inappropriate Content
@ProSumerTester having the same issue. I hear it's a hardware limitation. I'm using the OC300 and that was the latest and greatest before OC400 showed up. Anybody knows if that one has a higher limit?
I guess what I'm saying here in this thread is, if this is a hardware limit, how come there isn't a hardware that is powerful enough to have a higher limit???
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
In this case, it appears that software team at TP-Link is lazy. The way Cisco and even ubiquity hardware deals with this is that as long as you're running capable hardware it allows for higher limits. As soon as you try to adopt a less capable switch only THEN do you get that warning assuming you already setup more IP groups. And if not, when you do try to setup more than allowed, it should specify the device(s) limiting you so you can replace them with more capable type.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 7
Views: 452
Replies: 6
