My setup is FTTH ONT->ER605->SG2008P->OC200 (etc.) I have configured a VLAN which is attached to a guest SSID and has a WAN policy route via an L2TP VPN. Wireless clients connected to the guest SSID...

@Super-WiFi You don't want to increase hops... it's better to link to a root or single hop AP, even at -86dBm. I would look at positioning to improve the new AP's access to a better node. You also...

@Super-WiFi If you are using POE injectors...not all injectors are Gigabit capable...the cheap ones certainly aren't. If that's the case, the 100M link will limit your speed to ~80-90Mbps on WiFi.

@UndaCovaBrotha If you don't have static IP's on both ends, you cannot do an Omada-controlled site-site VPN. However, you can setup an L2TP/IPsec client-site VPN with subnet routing if the server end...

Also already stated I cannot afford to turn down power on either one as they need full power to reach the perimeter of the required coverage zone. I actually had a third AP in the mix (EAP235-wall)...

I can't leverage min RSSI, the signal is strong from both at the location where flapping is occurring, but weak at the perimeter where I still require the device to connect. A better feature would...