Connect TP-Link Omada to Powerlynx via RADIUS over WireGuard VPN

How it works

The self-hosted Omada controller acts as the RADIUS client for Powerlynx and communicates with it over an encrypted WireGuard VPN tunnel. A client that joins the hotspot SSID is redirected to the Powerlynx splash page. After the user logs in or pays, Powerlynx returns the client to the controller, which completes authentication and accounting with Powerlynx.

The WireGuard tunnel runs on the controller host and carries only RADIUS control traffic, never user data. Powerlynx does not provide Internet access, so client traffic goes through the site’s own gateway or uplink. This setup does not require a TP-Link gateway.

The WLAN name set in Omada must be entered exactly as the SSID on the Location and Splash page in Powerlynx, because the SSID links the session to the correct location and splash page.

What this integration provides

• RADIUS authentication and accounting for TP-Link EAP access points through the Omada controller.
• Captive portal login and voucher payments through the Powerlynx splash page.
• WireGuard VPN tunnel from the controller host to Powerlynx, with no public IP required.
• Remote disconnect of sessions from Powerlynx.
• Rate limits and session time applied from the Powerlynx data plan.
• Download and upload accounting shown in the correct direction in Powerlynx.
• Authorized clients visible in both Powerlynx and the Omada controller.

Who uses this

Operators who already run TP-Link EAP access points with a self-hosted Omada controller and want to add a Powerlynx captive portal and voucher sales.

Requirements

• Self-hosted Omada Software Controller on a Linux host with a static IP.
• At least one TP-Link Omada EAP access point.
• Omada Cloud is not supported, because it cannot receive disconnect requests from Powerlynx.
• Powerlynx Location and hotspot with the TP-Link (cloud) NAS type.
• Mid-session changes of rate or time require disconnect and re-authentication, because Omada does not support CoA.
• Trial sessions must stay disabled on locations served by an Omada hotspot, so use vouchers instead.
• Setup with a TP-Link Omada gateway (ER-series) is available on request via support@powerlynx.app.

How to connect TP-Link Omada to Powerlynx — step-by-step guide.