Not sure if this is a good vlan configuration but it works on @dimfish relase 15-10-2024, unfortunately it does not work for 08-11-2024.

EDIT:
tcpdump shows

tcpdump: unsupported DSA tag: mtk

VLAN config

config device
	option type '8021q'
	option ifname 'lan2'
	option vid '20'
	option name 'lan2.20'

config device
	option type '8021q'
	option ifname 'lan3'
	option vid '30'
	option name 'lan3.30'

config device
	option type '8021q'
	option ifname 'lan4'
	option vid '40'
	option name 'lan4.40'

config interface 'vlan20'
	option proto 'static'
	option device 'lan2.20'
	option ipaddr '192.168.20.2'
	option netmask '255.255.255.0'

config interface 'vlan30'
	option proto 'static'
	option device 'lan3.30'
	option ipaddr '192.168.30.3'
	option netmask '255.255.255.0'

config interface 'vlan40'
	option proto 'static'
	option device 'lan4.40'
	option ipaddr '192.168.40.4'
	option netmask '255.255.255.0'

Version 08-11-2024

Version 15-10-2024 (web connected via vlan40)