See this recipe for an easy way to permanently install an own SSL certificate in Omada Controller: https://community.tp-link.com/en/business/forum/topic/150083

@blasterspike, the problem might be caused by the pfSense. How did you configure the trunk port on pfSense? Does the system have a switch (something like switch0) or do you use virtual interfaces...

@CoKro, you're welcome. Glad that my answer was helpful for you.

@Ecg, CPEs are designed for directional links over very long ranges. They are not suitable for spreading a WiFi signal around as omnidirectional APs do. Reason for this is that CPEs have an antenna...

@KocherJJ, AFAIK the 2nd Ethernet port of EAP245 is not VLAN-aware. That's why you see traffic in VLAN 40 on the 2nd EAP port only if the switch untags it on egress. Thus, it's not possible to...

CoKro wrote 1&2) PVIDs too, I presume? PVID is the Port VLAN ID (I prefer the term Primary VLAN ID, but note that other vendors use this term already for another type of VLANs). In my terminology,...