Early Access Omada_Network_Application_V6.2.x.x Pre-Release Firmware (Released on 11th Feb, 2026)
Early Access Omada_Network_Application_V6.2.x.x Pre-Release Firmware (Released on 11th Feb, 2026)
This Article Applies to
Omada_Network_Application_v6.2.0.12_Windows (Windows 10/11/Server, 64-bit Recommended)
Omada_Network_Application_v6.2.0.12_linux_x64.tar.gz
Omada_Network_Application_v6.2.0.12_linux_x64.deb
Overview
We hope to offer you the opportunity to experience the new features added in Controller vv6.2.0.12 in advance, and to allow TP-Link to thoroughly test the firmware in your real network environment and across scenarios before the official release. All feedback is welcome, including reports of successful upgrades.
Release Notes
Version Info
This version of the Controller is fully compatible with the Omada App version 5.0.3 or above.
Supported Device Models
For device models Omada Software Controller supports, refer to the Omada Cloud SDN Platform Compatibility List.
Added support for Access Points: Flex Bridge 5.
New Features
- Added support for configurable WAN-port PVID on gateways running firmware 6.2 in Devices > Gateway Details > Ports.
- Added support for FTP and SIP ALG settings, including editable FTP/SIP signaling ports, protocol type, peer-to-peer restriction, inactivity timers, and media timeout, for gateways on firmware 6.2 in Network Config > Transmission > NAT > ALG.
- Added support for e-mail alerts when new firmware is available in Firmware > Overview > Upgrade Settings: users can subscribe to any channel (default Stable) and receive automatic notifications whenever subscribed channels release new firmware images for devices on the controller, provided the mail server is configured
- Added support for a reorganized VPN management page in Network Config > VPN that unifies the entry workflow, maps legacy SSL VPN Server/User and WireGuard pages into the new structure, and expands WireGuard to server, client and auto site-to-site scenarios (requires firmware upgrade).
- Added support for configuring multiple DHCP address ranges within a single VLAN in site - Network Config > LAN > VLAN (requires Gateway 6.2 firmware).
- Added support for allowing the number of local and remote subnets in VPN tunnels to scale to the limit advertised by the device firmware in Network Config > VPN > VPN (requires Gateway 6.2 firmware).
- Added support for IPv4-over-IPv6 dial-up modes of MAP-E and DS-Lite on WAN interfaces, including optional custom DS-Lite domain names, in Network Config > Network Settings > Internet. Enabling these modes automatically activates IPv6. Some functions are not supported for DS-Lite and MAP-E dialing, including VPN, SD-WAN, IGMP, DDNS, UPnP, Disable NAT, Port Forwarding, and NAT ALG. (requires Gateway 6.2 firmware).
- Added support for a new DHCP User List page on the gateway that displays all active DHCP clients when the gateway operates as the DHCP server in Gateway Details > Network View > DHCP User List (requires Gateway 6.2 firmware).
- Added support for one-click creation of DHCP reservations from the DHCP User List, allowing administrators to import existing leases directly into the reservation table in Network Config > Transmission > DHCP Reservation > Add From DHCP User List.
- Optimized the SD-WAN wizard to auto-generate group names and automatically assign SD-WAN IPs to each member device, removing the manual IP Pool step in Global view > SD-WAN.
- Added support for SD-WAN scale expansion: increases site-capacity limits based on gateway model, offers both manual and auto LAN-segment conflict resolution when creating or editing groups, and introduces a new SD-WAN Map view in Global view > SD-WAN (requires Gateway 6.2 firmware).
- Added support for Hotspot Viewer accounts to print voucher codes directly from the voucher list in Hotspot > Vouchers > Voucher Groups.
- Added support for configurable DNS cache lifetime by adding a TTL setting to LAN DNS in Network Config > Network Settings > LAN - LAN DNS (requires Gateway 6.2 firmware).
- Added support for remote packet capture on gateway WAN ports or VLANs to aid network diagnostics in Network Tools > Packet Capture (requires gateway 6.2 firmware).
- Added support for rogue-DHCP-server detection: the gateway raises an alert whenever an unexpected DHCP server is detected on the LAN in Logs > Alerts (requires gateway 6.2 firmware).
- Added support for on-device DNS resolution to query domain-to-IP mappings directly from the gateway in Network Tools > Network Check > DNS Lookup (requires gateway 6.2 firmware).
- Added support for LAN-side IP-conflict detection; the gateway logs an alert whenever multiple MACs are detected using the same IP in Logs > Alerts (requires gateway 6.2 firmware).
- Added support for Timing-based link-back (failover): users can configure a time range after which traffic automatically fails back to the standby WAN, supplementing the existing failover modes in Site > Network Config > Network Settings > Internet (requires gateway 6.2 firmware).
- Added support for on-demand and scheduled Speedtest: initiate a test on any WAN or set daily/weekly/monthly schedules; results are graphed and stored historically in Site > Network Config > Network Settings > Internet (requires gateway 6.2 firmware).
- Added support for extending configurable VLANs up to 4094 on gateways, covering WAN, LAN, virtual-WAN and IPTV interfaces in Site > Network Config > Network Settings > Internet/LAN/IPTV (requires gateway 6.2 firmware).
- Added support for displaying the last-edit timestamp on each portal entry in Network Config > Authentication > Portal.
- Added support for showing voucher balance and quota-limit reminders on the portal post-auth success page, along with remaining session time and, if rate-limiting is enabled, remaining data for both voucher and local-user logins on the client success page after authentication.
- Added support for uploading separate background images for mobile and PC endpoints when creating or editing a portal in Network Config > Authentication > Portal > Add/Edit Portal > Design > Background > Unified Picture.
- Added support for using a hostname instead of an IP address for the RADIUS server in portal authentication in Network Config > Authentication > Portal.
- Added support for voucher statistics grouped by voucher group, letting administrators view usage totals per group in Hotspot > Vouchers > Statistics.
- Added support for LAN Network/VLAN columns in user tables and added export options for Top 5/10/20 Users, showing the network and VLAN where each client resides in Dashboard > Traffic > Clients and Insights > Application Analytics > Users.
- Added support for managing Pro/Campus devices within Omada Controller, enabling discovery, adoption, offline provisioning, site templates and mixed-mesh deployment, while health metrics, anomaly events and Heat-Map Pro models remain unavailable in Site > Device.
- Added support for displaying the timestamp and status of the latest GPS fix (manual or automatic) on EAP772-Outdoor in AP Details > Config > General (requires EAP772-Outdoor firmware 6.2).
- Added support for configuring a NAS-ID in switch 802.1X authentication in Network Config > Authentication > 802.1X (requires switch firmware 6.2).
- Added support for VLAN assignment when MAC-based authentication is selected in switch 802.1X in Network Config > Authentication > 802.1X (requires switch firmware 6.2).
- Added support for transparent SSDP forwarding when both IGMP Snooping and unknown-multicast discard are active by introducing the "Flood Known Protocols" option in Network Config > Network Settings > LAN > Multicast Snooping (requires Switch 6.2 firmware).
- Added support for real-time LACP member-status indication: LAG list now shows green for successfully negotiated, up members and red for failed members, with failure logs sent by the switch and stored in the Controller in Switch Details > Ports > LAG List (requires Switch 6.2 firmware).
- Added support for in-place toggling between Active and Passive LACP modes without deleting and recreating the LAG; Static LAG mode remains unchanged in Switch Details > Ports > LAG Detail (requires Switch 6.2 firmware).
- Added support for displaying the last-known uplink device and uplink port columns in the device list, preserving this information even after the device goes offline in Devices > Device List.
- Added support for configuring multiple DHCP-relay server addresses on a Switch VLAN interface (quantity limited by hardware) in Switch Details > Config > VLAN Interface > DHCP Relay (requires Switch 6.2 firmware).
- Added support for VLAN-aware topology highlighting: links in the VLAN topology diagram now change color to indicate whether the selected VLAN’s traffic can traverse each connection in Network Config > Network Settings > LAN and Dashboard > Topology.
- Added support for SDM template integration, allowing administrators to view and modify SDM template options directly within switch device templates in Site Template > Device Template (switch) > Config > General > Others > SDM Template (requires Switch 6.2 firmware; supported models listed).
Enhancements
- Optimized the Internet page by moving Virtual WAN under Port Config and merging the separate Port Config and Load Balancing submit buttons into a single bottom action in Site > Network Config > Network Settings > Internet.
- Optimized Load Balancing logic to apply device-side settings when WAN Settings Overrides is disabled and added real-time port-status indicators under each WAN weight field to prevent user confusion in Site > Network Config > Network Settings > Internet > Load Balancing (requires gateway 6.2 firmware).
- Optimized Portal creation/editing with a rebuilt layout that groups settings more intuitively and exposes additional component-customization options in Network Config > Authentication > Portal.
- Optimized IP-input fields throughout the UI to accept a copied IP address pasted as a single string.
- Optimized Cloud Access with a redesigned connection flow that reduces cloud-request latency and improves overall user experience in Settings > Cloud Access.
- Optimized the DPI Rules Management page by replacing the single QoS toggle with a type selector that lets users choose between ACL and QoS rule types in Site > Network Config > Security > Application Control > Rules Management.
- Optimized controller security with built-in brute-force protection that locks login attempts after repeated password failures on "managed by other" devices in Controller (available now for AP & Gateway; Switch & OLT support planned for firmware 6.3).
- Optimized public OpenAPI documentation by completing deprecated-interface descriptions and correcting the categorization of site-template endpoints.
Bug Fixed
- Fixed bug where RADIUS Message-Authenticator was not forcibly validated, which could lead to RADIUS protocol security vulnerability (CVE-2024-3596), by adding support for enforcing Message-Authenticator verification when the “Require Message-Authenticator” option is enabled, in Site > Network Config > Profile > RADIUS Profile and Global/MSP > Settings > Server Settings > RADIUS Server.
- Fixed bug where RADIUS packets containing the Proxy-State attribute did not enforce Message-Authenticator validation, potentially exposing the system to RADIUS protocol security vulnerability (CVE-2024-3596), by adding support for limiting Proxy-State and enforcing Message-Authenticator verification when the “Limit Proxy-State” option is enabled, in Site > Network Config > Profile > RADIUS Profile and Global/MSP > Settings > Server Settings > RADIUS Server.
Notes
- Please note that Controllers on different platforms may vary in features, even if their first three digits of the version code are the same. For example, the Linux Controller currently supports Cluster Mode, but the Windows Controller doesn't support it yet.
- The Omada SDN Controller can only manage specific devices running the supported firmware. Please confirm that your device is compatible with the SDN Controller.
- Since version 5.14.32, the Omada Software Controller no longer supports upgrading from Controller v4.
- To strengthen overall security, we recommend upgrading all devices to the latest firmware.
Firmware Download
Before the Upgrade
(1) Please be sure you have read the Beta Test Agreement before upgrading the Pre-release firmware!
(2) For the sake of insurance, it's always recommended to save a copy of the controller Backup Config file before upgrading or downgrading.
(3) You may follow the following guide to upgrade your Omada Controller. How to Upgrade or Downgrade Omada SDN Controller.
Firmware Download Link
Direct Download
Omada_Network_Application_v6.2.0.12 Windows (Windows 10/11/Server, 64-bit Recommended)
Omada_Network_Application_v6.2.0.12 _linux_x64.tar.gz
Omada_Network_Application_v6.2.0.12 _linux_x64.deb
Additional Information
If somehow you encounter an issue during or after the controller upgrade, it's suggested to contact us with the following info:
- Omada Controller version (previous and current)
- Device Model(s), Hardware and Firmware versions
- (if possible) A copy of the Log file and Backup Config file
If you decide to downgrade the controller before reporting the issue to TP-Link, it's recommended to save a copy of the current Log file and Backup Config file, which could help TP-Link investigate and address the problem quickly.
>> How to get the Log file and Backup Config file for Omada SDN Controller:
-
If your Windows software controller failed to launch, please locate the controller installation path for the Log file.
-
If it's not a launch issue, you can export the Log file and Backup Config file to the local network.
-
For Omada Controller v5.8 or later version,
In the Global View, go to Settings > Maintenance > Backup & Restore > Retained Data Backup, select Settings Only, then click Export for the Backup Config file. On the same page, scroll down to Export for Support, then click Export Running Logs to download the desensitized Log file.
-
For Omada Controller v5.6 or v5.7,
Go to Settings > Maintenance > Backup & Restore > Retained Data Backup, select Settings Only, then click Export for the Backup Config file. On the same page, scroll down to Export for Support, then click Export Running Logs to download the desensitized Log file.
-
For Omada Controller v5.5 or a previous version,
Go to Settings > Maintenance > Backup & Restore > Retained Data Backup, select Settings Only, then click Export for the Backup Config file. Go to Settings > Services > Export Data > Running Log to export the Log file.
-
Update Log
Feb 11th, 2026
Provide the following firmware:
Omada_Network_Application_v6.2.0.12 Windows (Windows 10/11/Server, 64-bit Recommended)
Omada_Network_Application_v6.2.0.12 _linux_x64.tar.gz
Omada_Network_Application_v6.2.0.12 _linux_x64.deb
Recommended Threads
EAP7xx Fully Adapted to Omada 6.2 Pre-release Firmware (Released on 23rd Jan, 2026)
EAP7xx v1.4.0 Fully Adapted to Omada 6.1 Pre-release Firmware (Update on 11th Dec, 2025)
EAP6xx Pre-release Firmware Adapted to Omada Controller v6.1 (Release on 12 Nov, 2025)
Wish you a happy life and smooth network usage! >Omada US Enterprise Beta Program Launch< >Get the Latest Omada SDN Controller Releases Here< >Experience the Latest Omada EAP Firmware<
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
There is a beta release on the forum for ES switches that resolves the health reporting and in my case its topology position as well
- Copy Link
- Report Inappropriate Content
I've commented on this before... but when I go to One-Time Upgrade, to start an firmware upgrade. In the earlier version of the 6 controller, it would only show the sites that have those devices when moving forward in the process.
now and still shows ALL sites, so I have to drill down and find the site that has the hardware in it. Then check the site and upgrade.
Also it looks like it only does 4 at a time and stops. Can we get a rolling upgrade of 4 back to back until all the devices are done? Literally have 30 sites loaded with tons of hardware added. Its a locally hosted Ubuntu server that I L3 adopts all my devices too. If I have more then 4 devices, lets say 10 that need to be upgraded. 4 finish and I have to restart the firmware job in the upgrade schedule list, which is a PITA.
Thanks,
KG!
- Copy Link
- Report Inappropriate Content
Hi @Barde
Thanks for the feedback.
Yes, starting with version 6.2, VPN name validation has been standardized to allow only letters, numbers, and underscores.
Barde wrote
Upgraded my Ubuntu server box from 6.1.0.19.
Seems to work well so far. Only thing I had to change is Wireguard Server/Policy and Peer names. I had used names with "-" but now only accepts "_".
- Copy Link
- Report Inappropriate Content
Hi @Gericc
Thank you so much for taking the time to post the issue on the TP-Link community!
To better assist you, I've created a support ticket via your registered email address and escalated it to our support engineer to look into the issue. The ticket ID is TKID260249113. Please check your inbox and confirm that the support email was received. Thanks!
Gericc wrote
@GRL using the latest available on cms
- Copy Link
- Report Inappropriate Content
Hi @Thr34d
Thanks for posting here.
For the topology issue, please check if the LLDP option is enabled for the devices.
Also check the gateway LLDP on the gateway's config page:
As for the health data, 
It's a new future added from controller v6, while the firmware for the ES205GP is for Omada v5.15, that's the reason. Thanks.
- Copy Link
- Report Inappropriate Content
Vincent-TP wrote
Hi @Thr34d
Thanks for posting here.
For the topology issue, please check if the LLDP option is enabled for the devices.
Also check the gateway LLDP on the gateway's config page:
As for the health data,
It's a new future added from controller v6, while the firmware for the ES205GP is for Omada v5.15, that's the reason. Thanks.
LLDP was not activated on my router. It works now, thanks :)
And thanks too for the informations on health data, I will wait the firmware upgrade ;)
- Copy Link
- Report Inappropriate Content
Thanks for the feedback.
This is due to performance limitations of the on-premises controllers, which restrict the number of concurrent upgrade tasks.
The relevant team is currently evaluating solutions to optimize this issue and expects to resolve it in a future controller upgrade. Please pay attention to the firmware update. Thanks for your understanding.
KimcheeGUN wrote
I've commented on this before... but when I go to One-Time Upgrade, to start an firmware upgrade. In the earlier version of the 6 controller, it would only show the sites that have those devices when moving forward in the process.
now and still shows ALL sites, so I have to drill down and find the site that has the hardware in it. Then check the site and upgrade.
Also it looks like it only does 4 at a time and stops. Can we get a rolling upgrade of 4 back to back until all the devices are done? Literally have 30 sites loaded with tons of hardware added. Its a locally hosted Ubuntu server that I L3 adopts all my devices too. If I have more then 4 devices, lets say 10 that need to be upgraded. 4 finish and I have to restart the firmware job in the upgrade schedule list, which is a PITA.
Thanks,
KG!
- Copy Link
- Report Inappropriate Content
Hi @Thr34d
Great to hear that! If you encounter any further problems or have additional questions, feel free to reach out. We're here to help! 😊
- Copy Link
- Report Inappropriate Content
This version breaks my health score, was 100, now 67
All devices are connected and the gateway is 10/10
- Copy Link
- Report Inappropriate Content
Thanks for the response. I figured there was a limitation somewhere and I wanted to throw it out there again. I appreciate the info.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 2969
Replies: 20
Voters 0
No one has voted for it yet.