So basically you are using the apcli0 device to connect wirelessly to some access point which is upstream for internet. Then there is another device ra0 which is also client, bridged to the lan. Is that correct? Is there some other access point that you connect?
I think it is a better approach to create a separate interface wwan with proto dhcp to bind the apcli0, rather than using a null mac for eth0.2. But this should not be the problem.
Or even better the use of travelmate helps with connectivity issues when the station is scanning.