Workaround to Block or Disable Unused Ports on ER7212PC?

Workaround to Block or Disable Unused Ports on ER7212PC?

Workaround to Block or Disable Unused Ports on ER7212PC?
Workaround to Block or Disable Unused Ports on ER7212PC?
2025-05-02 03:12:58 - last edited 2025-05-06 01:41:31
Model: ER7212PC  
Hardware Version: V1
Firmware Version: v

Hi all,


Does anyone know a way to block or shut down unused ports on the TP-Link ER7212PC? I'm using an EAP683 AP, and my setup is fairly simple, I apply rate limiting per client since we're on a metered WAN connection.


However, someone managed to bypass this by connecting their own Wi-Fi AP directly to the switch, creating a private network at the site. This caused the monthly data quota to be exhausted.


Is there any workaround or method to disable unused Ethernet ports on the ER7212PC to prevent this?


Thanks in advance!

  0      
  0      
#1
Options
2 Accepted Solutions
Re:Workaround to Block or Disable Unused Ports on ER7212PC?-Solution
2025-05-02 08:25:50 - last edited 2025-05-06 01:41:43

  @Deck2x 

 

You can create a VLAN this way and assign it to the router port.

 

 

 

 

Recommended Solution
  0  
  0  
#2
Options
Re:Workaround to Block or Disable Unused Ports on ER7212PC?-Solution
2025-05-02 12:17:29 - last edited 2025-05-06 01:41:31

  @Deck2x 

 

\there are a number of methods

 

You can do the above and assign an empty vlan to the port

You can disable the port (if your router and controller both have v5.15 adaptations)

You can add a MAC filter to only allow certain devices (Site > Settings > MAC filtering)

 

You can do all of the above in standalone mode as well

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x3, ES208G x1, EAP650 x6 Remote: ER7206 v2 x1, ER605 v2 x3, SG2008P x2, EAP650 x2, ES205G x1 Controller: OC300
Recommended Solution
  0  
  0  
#3
Options
6 Reply
Re:Workaround to Block or Disable Unused Ports on ER7212PC?-Solution
2025-05-02 08:25:50 - last edited 2025-05-06 01:41:43

  @Deck2x 

 

You can create a VLAN this way and assign it to the router port.

 

 

 

 

Recommended Solution
  0  
  0  
#2
Options
Re:Workaround to Block or Disable Unused Ports on ER7212PC?-Solution
2025-05-02 12:17:29 - last edited 2025-05-06 01:41:31

  @Deck2x 

 

\there are a number of methods

 

You can do the above and assign an empty vlan to the port

You can disable the port (if your router and controller both have v5.15 adaptations)

You can add a MAC filter to only allow certain devices (Site > Settings > MAC filtering)

 

You can do all of the above in standalone mode as well

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x3, ES208G x1, EAP650 x6 Remote: ER7206 v2 x1, ER605 v2 x3, SG2008P x2, EAP650 x2, ES205G x1 Controller: OC300
Recommended Solution
  0  
  0  
#3
Options
Re:Workaround to Block or Disable Unused Ports on ER7212PC?
2025-05-02 12:31:25

  @GRL 

 

disable port, I didn't get that :-) nice.

  0  
  0  
#4
Options
Re:Workaround to Block or Disable Unused Ports on ER7212PC?
2025-05-02 12:34:24

  @MR.S 

 

Yep, its a nice little additional setting.

 

You can also now remove the default lan entirely from a router poirt if you set another vlan as the default pvid, you can then edit the default lan and it will let you entirely remove it from the port!

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x3, ES208G x1, EAP650 x6 Remote: ER7206 v2 x1, ER605 v2 x3, SG2008P x2, EAP650 x2, ES205G x1 Controller: OC300
  0  
  0  
#5
Options
Re:Workaround to Block or Disable Unused Ports on ER7212PC?
2025-05-02 12:42:47

  @GRL 

 

yes that was a nice feature too. yes Omada is getting more configurable with each version :-)

 

 

  0  
  0  
#6
Options
Re:Workaround to Block or Disable Unused Ports on ER7212PC?
2025-05-02 12:48:37

  @GRL 

but I see that the latest firmware must be used on routers, on the ER707-M2 I cannot change the default vlan port, nor can I disable the port on the router

 

  0  
  0  
#7
Options