@Hansturbo I have no idea, I don't know what you do or how you configure it at your place, the only thing I know is that you have an EAP225 and you can't do anything with it.

@Hansturbo change your DNS on your DHCP server. to block adult continent you have to use 1.1.1.3 and 1.0.0.3

@PerunCreative According to TP-Link, this appears to be completely normal, I don't fully trust this, it's not normal with such a high cpu. there are also major problems with IPsec together with...

@VoteForPedro You have not missing anything, that TP-Link that do dirty work, same thing with ER605v2 SHA2 work only in stand alone ER605v1 have support for all protocols you se in omada controller...

@VoteForPedro 1. No ER605v2 sha2 work only in stand alone, only device that support sha2 in controller and stand alone is ER8411 2. Yes this is easy to replace a router

@VoteForPedro Yepp thats correct ER605v1,v2 and ER7206 use sha1, this settings downt work on this device. only device that work is ER8411. ER605v2 work in stand alone only if you want to test that.