@Livy Port VLAN on R480T+ is not 802.1q. It is more like Port Isolation/Traffic Segmantation, if we take example from switches. So, now it is probably clear for you, why it uses the same sub-network.

@Taki I feel TP-Link soho and smb routers have never supported NAT Loopback, while some ADSL modems had it. Probably, routers will never support it. However, you can contact tplink support and ask...

@Aspera What about IP-addresses? It seems you have static IP somewhere and it conflicts with your DHCP.

@helzayat1 No, even with AC50/AC500 SNMP and SSH are not supported for CAP series. Omada (EAPs) supports it, but there are very few OIDs and SSH is almost useless. You need to contact tplink to ask...

@pfylip Usually, I used WBS210+TL-ANT2415MS as the base station and IP-cameras, connected by cable to several CPE210. Yes, you can configure point-to-multipoint (WBS - AP, CPEs-Clients.)

@y_u_1000 Hello, my friend, it is international community forum, please, use English. I used Google Translator, so you are talking about NAT. You cannot have access to your LAN network from WAN side...