Maybe a firewall restart on router did the trick. At least now it works.
edit: a cisco access switch between the router and the dumb ap didn’t have the vlan created. I could see that my other vlans had created automatically, but not the new vlan. Created the new vlan and voila all ok.