• expired

TP-Link Deco X20 AX1800 Whole Home Mesh Wi-Fi 6 System (2 Pack) $248.25 (Was $369) Delivered @ Amazon AU

520
This post contains affiliate links. OzBargain might earn commissions when you click through and make purchases. Please see this page for more information.

Price drop on this Deco 2 pack mesh router with Wi-Fi 6, price was as high as $369, Amazon average around $317.
3 pack is also on sale for $346, though not as a good a price as the recent Good Guys deal of $300 https://www.ozbargain.com.au/node/711359

AX1800 Whole Home Mesh Wi-Fi 6 System
Faster Connections: Wi-Fi 6 speeds up to 1,800 Mbps—1,201 Mbps on 5 GHz and 574 Mbps on 2.4 GHz.
Connect More Devices: OFDMA and MU-MIMO technology quadruple capacity to enable simultaneous transmission to more devices.
Boosted Seamless Coverage: Achieve seamless whole-home coverage with a clearer and stronger whole-home Wi-Fi signal generated by Wi-Fi 6.
Ultra-Low Latency: Greater reduction in latency enables more responsive gaming and video chatting.
One Unified Network: Multiple units form a whole-home network that auto-selects the best connection as you move around your home.
Total Security: WPA3 encryption and TP-Link HomeCareTM provide personalized features, including Parental Controls, Antivirus, and Quality of Service (QoS) to ensure a safer online experience.
Setup Made Easier Than Ever: The Deco app walks you through setup step-by-step.

Price History at C CamelCamelCamel.

Related Stores

Amazon AU
Amazon AU
Marketplace

closed Comments

  • I need a mesh system but I can't consider TP-Link due to the forced subscription for basic security.

    • +2

      Yes; I bought the deco m5 from a previous deal. Security is very basic. I was hoping for a white list - there really isn't much you can play with. It's pretty much dependent on your password :( And as you say, just to use their shitty app you have to give them your location - their app also grabs details from your network and phone. An absolute data grab. Once setup you can access via browser - no extra security configuration there though

    • +7

      Thank you for the downvote.

      For those interested, it is a $10/mo subscription or $90/year for IoT, Network Protection, Parental Controls, Reports and Notifications.

      More details: https://www.tp-link.com/au/homeshield/

      Most if not every other brand out there offer these for free.

      • +1

        Really? When was this introduced? I have the X20 at home and I have those features for free.

        • +2

          I read a review for the X55 on Amazon, they upgraded to the X55 from the X20 only to find out that those basic features are now subscription based.

          • @nicolascage: what a crock on TP-Link's part! they're decent basic features, not even close to worth $90/120 a year!

      • +1

        Hmm yes that’s interesting, I use an tp ax-55 with a onemesh extender as my backup router so concerned. Anyone explain what sort of security you get with these for free?

        Normally I use nest wifi but was going to sell it and just use tp-link as seems to get better dl speeds and seems to perform very well but now wondering if this is less secure.

      • It depends on which version of the X20 you get. I bought mine earlier in the year and on my units is no charge for filtering, network protection, etc. I have version 2.0. My recollection from an earlier post is that version 3 or above come with a subscription option, as well as differing CPU's. You would have to check the version on the box before buying, so you'd have to hunt around in a physical store or find a helpful online store

    • Why negs on this ?

    • +1

      Definitely a consideration, but let's not blow things out of proportion. I don't like how around v2 they changed into the sub model (believe it was forced on them)
      - Basic security is included, port scans, inbound firewall, new device detection and parental controls and security tips.
      Paid is required for AV, Enhanced Parental Control. With most web traffic being encrypted (even DNS option), all the so-called security features and parental controls others advertise are pretty useless. Your really paying for some extra reporting.

      Set DNS to 1.1.1.3 (block malware and adult content) or just 1.1.1.2 (to block malware only) achieves the same result.

      All that said, the performance and WiFi quality of this Router is un-matches in this price range. Only neg I have is it doesn't have a web interface.

      Firmware is regularly updated, and it's a quite secure product.
      Anyone concerned with Security needs to avoid the Tenda systems!!!!

      • Only neg I have is it doesn't have a web interface.

        Are you running old hardware/firmware? The web interface may be pretty basic, but it's there.

        • Thanks, don't know why I didn't think it had one, possibly added in a later firmware, either way thanks!!
          As you have said it's pretty basic, it's more for viewing features not changing them, but it's there.

  • At AX1800 what's the value of upgrading from AC?

    • not much you get wifi 6 but your device has to support it. More stable speeds but hardly noticeable.

    • -3

      None, as long as these routers keep coming with only 1gbps ethernet ports

    • Ignore the speeds, but you benefit from lower latency (almost as good as wired).
      That being said most people wouldn't know the difference. This is a good WiFi6 system, but generally would take a good WiFi5 system over a cheap WiFi6.

  • Not bad overall, however a big problem is the inability to disable dhcp server, which will create two seperate network ranges in case you rely on the modem for dhcp , in my case i use the modem for wired devices, so no communications is possible between wired and wireless devices.

    • Could something like this be why I can't get screen mirroring to work on my wired Samsung TV, when I'm using a Samsung Phone…

      After moving from a regular TP Link wireless router I was surprised how few settings the X20 has. Despite this, it gives a great signal and we haven't had any dropouts or other issues.

      • +1

        Easy to find out, you can check the ip address of both devices, if the range is different then yes.
        Ex: phone :192.168.1.101
        Tv: 10.0.0.60

        The first three parts of the address are what matters here.

        • Decos use a default subnet mask of 255.255.252.0 so the client IP addresses may look different in the third octet (third section) and still be on the same subnet. Try downloading an app like Ping Tools if you're on Android, go to the 'Ping' section and put in the IP address of your TV and see if you get a response when you ping it.

      • Go into your TP-Link network settings using the app and change the operation mode from Router to Access Point and it should let all your devices talk to each other.

    • +1

      If you want to use it in router mode you have to plug the base one between the modem and your network switch. If you want to disable the DHCP server just change the TP-Link Mesh operation mode from Router to Access Point and then all devices will be on your ISP modems subnet and talk to each no worries.

    • Unmanaged gigabit network switches are cheap, often under $20 for 5 ports. If you get yourself a cheap switch you can put your ISPs modem into bridge mode if it has one or the Deco into the DMZ if it doesn't and plug your wired devices into the Deco via the switch.

    • Look your kind of right, you can't disable DHCP in Router Mode, but that isn't what is causing you issue.
      If you have another DHCP server, disable that. My Firewall and Pi-Hole can both be DHCP, I just use TP-Link router, it's just fine for DHCP (arguably better). The bets part is no part.

      People with limited Networking don't understand subnets and by default this is setup to use a much larger range than your typical ISP router, not saying it's caught you out but does catch a few people out. Just go into the settings and change to a range you are familiar with and ensure the subnet mask is correct for the range. (it doesn't warn you if you get it wrong, assumes you know what you are doing).

      I have this with 3 access points, lots of wired devices and switches connected to each node and no issues with wired devices seeing wireless and vs versa.
      If it's not the subnet issue, have you checked you didn't select the "isolate guest network" box and your wireless devices are connoting to guest.

  • Would you prefer to buy this or install one on the ceiling if building a house?

    • -4

      Yes

    • There are much better options if building a house, such as using Ubuqiti style wifi disks that can fit in the ceiling and doesn't look garbage.

      • +4

        What looks garbage? The X20 routers are matt white and at least look a lot better than an old style router with 4 antennas. Plus they give you a couple of extra LAN ports, which you don't get on the Ubiquiti discs

        • +1

          You typically don't need more than the one ethernet port when you are mounting the unit on the ceiling.

          That said, I think TP-Link have a few ceiling/wall mount access points in their range.

          A couple EAP615 units may be comparable if you like that wall mount look.

  • +8

    FYI..If you have GGC access than TP-LINK AX1800 Whole Home Mesh Wi-Fi System DECO X20(2-PACK) is for $224 and TP-LINK AX1800 Whole Home Mesh Wi-Fi System
    DECO X20(3-PACK) is for $303..ususal price since last 7 months..

  • -1

    I have deco m5, it has a problem working with pi-hole because the guest network can't access the DNS server. Because of this I basically cannot use the guest network function.

    Am I right in assuming that all of the TP link devices have the same software and therefore the same problem? It's been a known issue that TP-LINK has said it will not change.

    • -1

      The guest network has host isolation so the only thing it should be able to access is the TP-Link device router, this is by design and not an issue. It's for security purposes. You can probably work around it by using the TP-Link in Router mode.

      Setup your network like this:

      ISP Modem/Router > TP-Link in router mode > Switch > All devices connect to TP-Link wlan/switch

      ISP Modem/Router > Pi-Hole (either by wifi to the isp router wireless network or hard wire to the ISP router)

      Since the Pi-Hole won't be part of the internal network you should be able to access it from all devices including guests. You can also connect your nas/printers to the ISP provided router if you want guests to print or access your media library.

      You will be running dual NAT so it is best to go into your ISP router settings page and set the TP-Link unit thats in router mode as the DMZ IP address which will forward all ports and let the TP-Link handle all port forwarding from there.

      You will also want to go into the ISP router DHCP settings and assign the TP-Link router a reserved address so the DMZ continues to work if there's a power outage.

      • my pihole runs in my nas, so it's inside.
        I don't have a modem now, the M5 is doing the isp login.

        I mean it seems a bit complicated, and really I think I once tried to make it work sth like that and it was all a bit mess. Oh just thinking about it give me headaches!

        • I googled it and it says

          When Deco works in the Router mode, the guest network and main network are isolated. When Deco works in the AP mode, on the Deco app>More>Wi-Fi page, there is an "Isolated From Main Network" switch once the guest network is enabled and the switch is used to enable or disable the network isolation feature on the deco.

          Not sure why you can't switch it off in router mode ¯\_(ツ)_/¯

      • I have a reply below with more detail, but basically it isolates Guest as you sai, via vLAN tagging. If you have a managed switch (ie: switch that supports vlans) and PiHole server supports vlans, then you just add the guest vlan to your PiHole server.

        The main network is "untagged", the default vlan for guest is "591"

        But as Elon would say, the best part is no part. Just use cloud flare (1.1.1.2 to block malware, or 1.1.1.3 to block adult and malware).
        The free Parental controls, is quite good at filtering. Pi-Hole is just another point of failure, to what block a few adds.

    • Not trying to be rude but does it really matter if your guests aren't using your PiHole? You can always set your DHCP to give them a secondary public DNS that functions similarly to give similar results, otherwise Agret gave great advice.

      • yes, because the guests end up with NO dns server and can't access anything unless the guest itself has dns set
        all people are asking for is that guest network has a dns server setting. It's not a security risk.

        • +1

          What do you have set as the secondary DNS under the DHCP Server settings?

          I would have thought the guests would just fall back to that if they can't access the PiHole on the main network.

        • DNS is a very risky product, you would not want guests accessing your own DNS server.
          Yes I also run Pi-Hole, but seriously just consider Cloud Flair DNS (best part is no-part)
          1.1.1.2 (no malware), 1.1.1.3 (no malware, no adult content)
          Let's say you could disable DNS on Guest, are you going to put two interfaces on Pi-Hole so it can service both mail and guest networks?
          Do you need guest isolated? (you can remove the isolation in the gui, even in router mode) then have pi-hole service both for DNS.
          I also use Pi-Hole, just not for DHCP the router does a much better job.

    • If it helps, the main network is "untagged", the default vlan for guest is "591"

      Anyway if you have a managed switch you can do this, the Deco supports vLAN tagging in the Guest WiFi section note the vLAN tag, if you add this vLAN to your managed switch and add to the port used by your Pi-Hole server. Also configure the PiHole server to listen on this interface, then the Pi-Hole will be on both your primary and guest networks. You don't require different physical network cards, just equipment that supports vlans.

      Why create a point of failure, Cloud Flare DNS (1.1.1.2 blocks malware, 1.1.1.3 blocks adult and malware), and these days is faster.

      This is not a business router, I use Pi-Hole with this router, put my IOT junk on guest but don't isolate. Heck in this age you need to treat every device as vulnerable\compromise so the concept of isolating guest networks at home is basically useless\pointless. But it does do what you want, it's just an advanced feature requiring knowledge and support of vlans.

      • I'm not sure I understand all this. Never used vLANs

        I have line->deco m5 (pppoe/dhcp)->switch->nas (pihole)

        I followed guides to set up pihole on docker

        guest network doesn't work

        iot seem to need main network due to broadcast msg for home assistant

        • Works but you need to use vLANS, unless you have a managed switch it won't support vLANS.
          I believe with the latest firmware the vLAN may only appear if you have at least 1 other unit on wired backhaul.
          Every NAS I have used supports, vLANS, so the issue will be your switch and your NAS config. vANS are a pretty basic network concept, so not hard to learn.

          The quick solution for you is to use the router how it is designed, either use it as the DNS server or a Cloud Hosted DNS (ClairFlare, OpenDNS ect..) heck even your own Pi-Hole in the cloud (Free AWS tier) if you whitelist it. Unless you have a high-end NAS, they tend to struggle performance wise with Pi-Hole once the load creeps up and the database size increases.

          • @UltimateAI: Thanks. I set up Pi-Hole in the cloud (Free AWS tier). It runs, I can get into the web ui.

            Since I'm not on local, I can no longer assign ip->device name mapping. What do you do? I think I only see my dynamic isp name for every device. I guess then groups/clients don't work.

            • @furyou: I read about the vlan, how would you suggest I set it up?
              iot on 1 vlan with nas
              rest of home on vlan with nas
              ?

              • @furyou: Use Cloud Flair or another DNS provider or host your PiHole on a free AWS cloud instance.

                But to use vLAN.

                Use vLAN 591 for IOT (default guest)
                NAS has to be mapped into VLAN 591 and also un-tagged.
                Everything else leave on un-tagged.
                Except if you connect another TP-Link to the switch then you want to also advertise VLAN 591 to it.

                Actually from memory I think the TP-Link only advertises the vLAN when you have another node connected via Wired Backhaul then the switch can see it. Can't recall if this was just temporary for the setup or had to remain connected.

  • This or the X55?

    • For $30 more X55 is much better value.

      • +1

        From what I can tell the X55 is useful if you need an extra LAN port, but otherwise 99% of users wont be able to tell the difference. I'd go with the X55 but only if it's on sale given how cheap a reliable a 5 port network switch is.

        • That may be the case now, but going forward it's going to be more useful. The main thing is it's better for people not using wired backhaul.

          • @McFly: Yes, good point! I have a network cable for backhaul, which works brilliantly on the X20

  • +1

    I have 3 of these setup with a wired backhaul in a 4bed 2 floor house. The WiFi speeds are pretty solid with a 100/20 nbn connection. It does get network congestion every now and then which to fix need to log into the app and click the magic "optimise network" button. I wish they made these a bit thinner though as the one I have setup as the main router, sits in the cabinet in the garage with the nbn box and data cable ports, and am unable to close the cabinet door.

  • These are cheaper at good guys commercial if you have access

  • Showing 336 now for 2 pack?

Login or Join to leave a comment