Also, to note, https://www.tp-link.com/sg/support/faq/2678/ also mentions in the middle of the page: "Note: The Radius Client role is transferred from EAP to Omada Controller since Controller 3.1.4."...

@Timothy-Hsiao same here, packets coming from EAP and not the controller. Did you figure anything out?