@jandico It's a limitation on tplink router. If you want to hide your client device IP, you can only use L2TP/PPTP VPN server on the ER7206. Their OpenVPN is only for accessing router LAN network,...

@JoeAshley You will need to put port 7 of TL-SG116E in VLAN 192 and Tagged. Unless the VLAN 192 won't able to go through to 2nd switch.

@RSCW No and Yes. Tplink does not have Cloud based controller for Pharos CPE. However they provide a centralized management software which can work in local network. It's called Phros Control

@japon Old EAP220 won't work well with the new V5 SDN controller. It firmware even doesn't support V3 controller

@mzperx Could that be a problem on devices Gateway settings？Are you using controller to manage the device's IP? Also DHCP reservation may not work correctly according to this thread

@Arshad007 If your PoE switch also tplink? Is there any VLAN settings you've done? IPTV service is more related to IGMP or VLAN settings. These settings are based on Switch.