Increase allowed number of groups
Please increase the number of allowed groups (IP-Port group, IP Group, etc...) past the current seriously limiting maximum of 16, this is woefully inadequate for any product aimed at the business market.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Thank you for taking the time to share your insights within the TP-Link Community. Your feedback is greatly appreciated and has been formally documented and escalated to our Product Development Division for thorough evaluation.
At this juncture, we are unable to confirm whether the requested enhancement will be implemented or to provide a definitive timeline. We appreciate your understanding of the complexities inherent in our product-planning and development cycles.
Should you have any further suggestions or additional context to offer, please feel free to share them here. All supplementary input will be consolidated and forwarded to the relevant teams for continued consideration.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Agreed. I am running Crowdsec and have identified hundreds of IP addresses and subnets that I would like to block at the gates rather than on my WAF but it is just not practical to do so with this arbitrary limitation.
- Copy Link
- Report Inappropriate Content
@Ethan-TP This is a serious limitation. In a usual homelab with several VLANs, mDNS and a reverse-proxy in an Ingress/DMZ VLAN 16 Group (especially IP-Port Group) is way to limited.
If I would have known this I probably would have chosen pfsense or opensense for my homelab. I hope you'll increase this limitation soon!
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
@Ethan-TP +1 for raising the limit.
We wanted to create a IPGroup per VLAN to being able to create simple ACLs like (cf. Posting):
VLANID_permit -> Select all target IPgroups, mapping allowed VLANs
VLANID_deny -> Deny IPGroupAny
This is impossible with nearly every (even small) business network as there are usually more than 16 VLANs (at least at our sites).
- Copy Link
- Report Inappropriate Content
Additional note: basically everything regarding switch ACLs is limit to 16:
- There can be only 16 IP groups
- There can be only 16 Subnets per IP group
- There can be only 16 Switch ACLs.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 8
Views: 583
Replies: 7
Voters 8
