So re-reading your original post...
the Basic Dumb AP config has me turn off the Firewall, dnsmasq and odhcp in step 6. Am I corect that to use the "guest WLAN on a dumb AP" I need this turned on?
If I need the firewall to process the additional rules, and it has been disabled all along, then it seems like the lack of IP is the first thing to fix??