@Sefinek Why the double-NAT? Can you not put your ISP modem in 'bridge' mode? If not, then can you at least set up the Omada gateway as the DMZ IP of the ISP router?

@Aisaya You need to get the AP UNDER the metal roof. Currently most of your radio power is being reflected off into outer space.... I would put it in a central hallway, or other location with as much...

@SUNSONIC Agree on router change...and ER605v2 is a good choice as the other is the ER7206 but it is getting old product-wise. All the other routers don't seem to get the love/attention from TPlink...

@GregVLAN If you have the full Omada stack (managed router and managed poe switch), then you could put the AP(s) on a tagged management VLAN and create rules to block traffic except from known MACs....

@jmanderson If you aren't using Mesh functionality, disable it in the controller and continue to monitor.

So EU/US are up to 5.1.6 circa 04/24 and the latest firmware posted for CA is 5.0.8 circa 05/22. Given that it's the same hardware as the US model, sowhy the 2 year delay in releasing firmware...