@snoop-snoop 

How do I do that?

I'm guessing you mean to set the port as a tagged port for VLAN 2 like when the router is running standalone? I can't find those options in controller mode.

  @agent_kater 

yeah, tagged.

i got a controller setup so am not able to view the standalone UI but the emulator has it: https://www.tp-link.com/ph/support/emulator/

  @snoop-snoop 

I also have a controller, that's the problem. :) In standalone I know where the setting is but in the controller I can't find it.

Hi  @agent_kater 

From the screenshots you shared, the configuration is correct.

Did you enable any other options on the pages? Please keep them as the default settings.

If you couldn't recall what you have changed, you may delete the VLAN2 settings and do it again.

  @Vincent-TP After some tinkering I think I found what causes this, although I don't know yet how it causes it. I'm suspecting I have something like spanning tree turned on but I was unable to find it yet.

So, my network basically looks like this:

I found that if I disconnect the WAN cable from the router, suddenly the VLAN to the AP starts to work. Like, literally the moment I pull that cable, the phone gets an IP assigned.

Of course I also lose internet, so this isn't an actual solution, but maybe it's a pointer to what the actual issue is.

  @agent_kater 

It's not recommended to plug the dumb switch between the modem and the ER605.

Please connect as below:

  @Vincent-TP That would require an extra cable between modem and router, which I don't have. I can only reach the modem through the same switch that I also reach the LAN. And in fact it works, but only if I restrict the switch port to PPPoE traffic, a behavior I can't explain.