Hello everyone,

I'm a new Omada user and I'm very impressed with the system so far. I particularly love the Omada Cloud Controller interface and the ease of centralized management.

However, I've run into a significant limitation regarding advanced security features with my current setup, which includes the ER706W Multi-WAN VPN Router.
 

1. Current Setup & Goal

• Gateway: TP-Link ER706W

• Internet Connections: I am using two WAN links: one Starlink connection and one Fiber Optic connection.

• Traffic Management: I currently use the ER706W's Load Balancing feature (set at 7:3) to utilize both connections simultaneously.

• Goal: Implement robust network security features for a home lab/advanced home network.
  
   

2. Missing Features & Problem

I purchased the ER706W based on its advanced capabilities, but I am finding two key features are either limited or completely excluded from the Omada Standard setup I am currently running:

• Geo-IP Filtering (Geo-Blocking): I cannot find the option to create Location Groups or apply Geo-IP filtering in the Router ACLs. I understand this feature might be exclusive to the "Omada Pro" license or specific high-end business Gateways (like the ER8411). Is this correct?

• Per-User DPI Data: While the ER706W supports DPI, I need the "Get per-user DPI data" capability to view detailed reports (who is using Netflix, who is using YouTube, etc.) for better network monitoring and Application Control.
   

3. Request for Solutions

I need a clear path forward to gain access to these advanced features while remaining within the Omada Ecosystem (because I enjoy the Omada Cloud experience so much).

My primary questions are:

1. Is Geo-IP Filtering possible at all with the ER706W via a specific firmware or controller version?

2. If not, which specific Omada Router/Gateway model (e.g., ER7206, ER605, or higher-end ER8411) must I purchase to guarantee access to the Geo-IP Filtering and full per-user DPI reporting features?

3. Is there a specific Omada Controller version (Software or Hardware) required to unlock these advanced security features on a compatible Gateway?
   
    

Thank you in advance for your guidance. Any advice on the minimal hardware upgrade needed to achieve this functionality would be greatly appreciated!