2
Votes

LAN-to-WAN access

 
2
Votes

LAN-to-WAN access

LAN-to-WAN access
LAN-to-WAN access
2025-07-26 05:36:28 - last edited 2025-08-01 09:31:36
Model: Deco BE85  
Hardware Version: V1
Firmware Version: Firmware: 1.1.1 Build 20241023 Rel. 34667

Hello,

I am using a Huawei MA5671A SFP ONT module in the 10G SFP+ WAN port of my Deco BE85.
I need to access the web/telnet interface of the ONT module (e.g., 192.168.1.x) from my LAN for management purposes.

Currently, the Deco firmware isolates the WAN interface and there is no option to enable WAN management or create a direct route to the module.

Please add a feature to allow LAN-to-WAN access (or a management IP/VLAN) so that we can manage SFP modules connected to the WAN port.

Firmware: 1.1.1 Build 20241023 Rel. 34667
Hardware: Deco BE85 V1

#1
Options
2 Reply
Re:LAN-to-WAN access
2025-08-01 09:34:31

  @TP-OkanCan 

Hi, thank you very much for the feedback.

Can you find "Static Routing" under Deco App>More>Advanced, such as How to Create Static Routing on TP-Link Deco?

 

Wait for your reply.

Best regards.

 

#2
Options
Re:LAN-to-WAN access
2025-08-03 06:25:28

Hi @David-TP,

 

First of all, thank you very much for your support and guidance.heart

I have updated to the pre-release firmware you shared:
Firmware: 1.2.0 Build 20250724 Rel.20663 (Deco BE85 V1)

 

I tested the static routing feature again as you suggested:

- Destination: 192.168.1.2/24 (255.255.255.0) (Huawei MA5671A SFP ONT management IP)
- The LAN device that needs to reach the ONT is connected via Ethernet to the BE85 (IP 192.168.1.15).
- Deco LAN IP: 192.168.1.200 (Deco LAN subnet: 255.255.252.0)

 

Results:
- Internet access works fine.
- I still cannot ping or open the ONT management page (192.168.1.2) from the LAN device.
- When I tried using a /24 route (192.168.1.0/24), the Deco app became unreachable.
  To access the Deco app after that test, I had to temporarily move my phone into a different IP range (192.168.3.x).

 

Conclusion:
Even with firmware 1.2.0 Build 20250724, the WAN port remains isolated and LAN-to-WAN management access is not possible.  
Please consider adding a proper “LAN-to-WAN management access” option for users who need to manage SFP ONT modules directly.

Thank you again for your help and guidance.
 

#3
Options