I have a different interface using each of the four devices.
In Bridge VLAN Filtering, I can see how to route the interfaces connected to three VLAN devices (br-lan10, br-lan20 and br-lan3) to the physical ports I want them routed to, but how do I specifiy which ports the interface connected to the NON-VLAN device (br-lan) should be routed to, since a NON-VLAN doesn't have a VLAN number (or does it?).
Once you enable VLAN Filtering, you must have a VLAN associated with a tagged or untagged physical port.
...or remove the port from the filtered bridge (I assume this is a DSA switch and not swconfig)
What do you call this network in your config?
(I think you're confusing the term "switching" with the term "routing" - but I wanted to ask this question nonetheless, since you never mentioned this network. I realize, you never listed the ports either.)
Ordinary Ethernet devices that don't parse VLAN tags require an "untagged" setting (e.g. lan2:u* in the CLI) on their bridge-vlan port. That Ethernet port must be included in only one VLAN. Packets moving through that VLAN and destined for a device on the port will have their VLAN tag removed as they are sent out to the cable. Incoming packets have the VLAN tag added so the switch and CPU can associate them with the proper VLAN. This is often called an "access" port in other systems.