I have a doubt regarding the vlan1 configuration you gave me:
config bridge-vlan
option device 'br-lan'
option vlan '1'
list ports 'lan1:u'
list ports 'lan2:u*'
Here, is there any reason to not have this vlan as PVID for port lan1? After reading DSA and PVID usage examples explanation about this option (*), I understand I would not take any advantage of it as port lan1 only works on 1 vlan and would not receive any traffic from any other vlan.