@Sel_I I too tried to move my default LAN off 192.168.0.0/24, but it caused me nothing but headaches, so I gave up fighting it and just let it happen. I don't think that's your issue though. First we...

@MarkyP I think if you just untag VLAN 1500 on port 2 which is connected to the OC200 AND in your router create a route or NAT port map from the 10.x.x.x guest subnet so it can see the OC200 IP.

@bodjie7 No. The main issue being the distance and that the EAP225 radio system isn't designed to provide any usable power at that kind of distance.

@EricJohn I get the cheap and cheerful bit! So yes, 1 Xiaomi repeater can be paired to 1 SSID on 2.4Ghz (not 5.8) and will support up to 16 'repeated' users. If you need more than 16 'guests' to...

@Sel_I A quick test might be to configure an unused LAN port on the 7206 to belong to your VPN VLAN (40). Jack a test laptop into this port and verify it get's the proper 192.168.40.x IP as well as...

@Sel_I Everything you've shown above is configured the same as my setup with 1 exception (which is controller related, nothing you can do) and 2 unknowns. My switch routes are as follows, and I'm...