Hi @KKZ,

Unlike other Omada managed devices, the controller doesn't (to the best of my knowledge) have a management vlan/layer 3 settings so it should be accessable like a regular device by default.

Few follow-up questions...

• Were there any IP restricions set on the controller? (Global Site -> Settings -> Account Security: Controller IP Access Rules)
• The access switch that's pingable, is it's interface on the same vlan as your controller?
• Is the default gateway/ip settings correctly set on the controller (matches config for pingable ip on the vlan)?

  @Vincent-TP 

what? this makes no sense.  you cannot NOT have a "management" vlan set on devices like switches and APs

OP - have you enabled the account security setting on your controller, taht are disallowing access for unauthorised IPs ?

Controller > Global > Settings > Account Security