How do you 'manually' choose one AP over another? I just re-read your 1st post and my two comments were covered by your previous work.

@Death_Metal Agree, but it looks like Wireguard is not going to happen for the V1.

@Death_Metal OC200 v5.7.6 seems to be a problem load...doesn't recognize its own updates, cannot migrate a backup file to a non-OC200 controller, even on same s/w version (ie 5.7). Nothing TPlink can...

@ocbroadband Hmm, how about blocking the return path, ie block port 3389 outbound during your time window?

no harm in trying, but I think the issue with trying to use DDNS on any port configured for PPPoE.

Understood, I too have a working PPPoE connection, and it gets an IP via DHCP just fine, BUT the DDNS setup for that WAN connection always stays in OFFLINE. I think the problem is with the WAN type.