@NeilR_M @Vincent-TP Thanks both, hints much appreciated. I've managed to resolve it ...all IoT online and no more captive portals: 1. enabled mDNS on my router 2. removed NordVPN, rebooted iphone,...

Its a EAP635 version 1.4.1 (drop downs don't allow this) I have good working internet - this eap was bought to replace an aging TP link access point. I set up WLANs on the controller, no extra...