@gjunk Your current topology is indeed double NAT, and as far as I know, the NAT function of the ER6120 cannot be turned off. Unless you have a DHCP Server of your own in your LAN, otherwise the...

@kamalk As far as I know, omada cloud supports 2FA and the CBC controller is secure Can this help you: https://www.tp-link.com/support/faq/3365/

@Pratz I suggest that you try changing the subnet mask to 32 when setting up the IP Group, 24 may contain too many IPs.

@Poverello In my opinion, there should be no problem.

@Vienna_Steve Is your controller's version V5.1.7? Will rebooting the EAP or controller restore the statistics?

@TurboChicken Coincidentally, I have both the old and new versions of the app, but I couldn't find either of the configurations you mentioned, only a similar one, not sure if it's what you describe,...