@nrgbistro Try this guide at the beginning of the following link and it might help to read through the comments. Link

@immec This should work if you don't have anything significant blocking the signal between the two EAP225's. The wireless link requires them to be operated in mesh mode.

@Kashf You need to create a permit ACL rule. This can be by IP or MAC address of the two hosts and can also be limited by port number.

Don't think this approach will prevent devices with a hardcoded DNS address, as they are not asking for a DNS server. I have thermostats with hardcoded DNS and they bypass the pihole server with this...

My experience has been the controller uses the default password admin/admin during the first attempt to adopt. If you have changed the device's password in standalone mode, it will fail and then ask...

@NikosK When you adopt a device all previous setting will be lost because they need to be in sync, and may not be compatible, with the controller settings. So adopt first then make all required...