@NicholasA Hmm strange, I don't,, ok I have to wait and see :-) thanks for information.

@NicholasA Where do you get 7206 firmware (v1.2.3)? I find only 1.2.1 https://www.tp-link.com/us/support/download/er7206/v1/#Firmware

@CoKro yes, it seems quite strange, I've used pi-hole here without problems, but I don't have EAP225, but there could be something with these access points that causes problems, you can hope that...

@CoKro ok, no ACL no guest network activated on SSID, same vlan as wired network, you can ping pi-hole, then it should work. so from what I know, there is not much more I can help with unfortunately....

@CoKro if pi-hole works with wired devices I don't see any reason why wifi doesn't work if it's on the same vlan, can you ping the pi-hole server when you is connected to wifi?

@GRL In controller mode SHA2 don't work at all. in stand alone SHA2 work only on phase1 not phase2, so everything is as usual, poorly tested firmware. I have a more about what I have tested in this...