The router that can allocate more than one subnet will work for your case. Like ER605, ER7206.

@3Pro Hey, I created two manual IPSec policies without this problem. I think auto IPSec has a lot of bugs. I will not advise this type.

@unmesh Hey, You can upgrade your controller to V4.4.4, but I think there is no difference for this switch comparing to V4.4.3. It still can be managed by controller V4.4.4, but it can't adapt to...

@RMDG Hey, For your questions, hope my answers can give you some insights. 1. can i use 1 cpe220 as a.p. (receiver from office) for 2 cpe220 client (from the field machine area)..? Normally yes. But...

@Raxa04 Hey, No need for a omada software controller. OC200 is OK. You can refer to this article: https://www.tp-link.com/en/support/faq/3087/ Hope it helps!

@DavidR84 Any devices with IPv6 address will have this problem. The guest network blocks devices via ACL rules, but it doesn't have IPv6 ACL. Its ACL rule only applies to IPv4addresses.