WLAN VLAN not working properly on OpenWrt 25.12

Greeting, I recently tried to upgrade my router from 24.10 to 25.12.
Initially before config wifi is working but after applied wireless vlan setting, wifi stopped working properly, this configuration are known to work without issue when on 24.10.

Installed firmware version by calling ubus call system board:

root@Android-23651ade:~# ubus call system board
{
        "kernel": "6.12.74",
        "hostname": "Android-23651ade",
        "system": "ARMv7 Processor rev 5 (v7l)",
        "model": "P&W R619AC 128M",
        "board_name": "p2w,r619ac-128m",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "25.12-SNAPSHOT",
                "firmware_url": "https://downloads.openwrt.org/",
                "revision": "r32729-445814147f",
                "target": "ipq40xx/generic",
                "description": "OpenWrt 25.12-SNAPSHOT r32729-445814147f",
                "builddate": "1772995583"
        }
}

The firmware was built from Ubuntu 24.04 running in Vmware on Win 11 using official openwrt git (git checkout openwrt-25.10).

Some of default package were reselected (using make menuconfig) such as:

ath10k-firmware-qca4019 instead of ath10k-firmware-qca4019-ct
kmod-ath10k instead of kmod-ath10k-ct
wpad-openssl instead of wpad-basic-mbedtls
nginx instead of uhttpd for luci
openssl instead of mbedtls (fully deselected) for all crypto.

Wifi can be connected but not getting any ip assigned nor any network activity even when ip were manually keyin to the connected device.

Wifi authentication log from router:

[Mar 11, 2026, 07:23:18 GMT+8] daemon.info: hostapd: phy0-ap0: STA  xx:xx:xx:xx:6e:f4 IEEE 802.11: authenticated
[Mar 11, 2026, 07:23:18 GMT+8] daemon.info: hostapd: phy0-ap0: STA  xx:xx:xx:xx:6e:f4 IEEE 802.11: associated (aid 1)
[Mar 11, 2026, 07:23:18 GMT+8] daemon.notice: hostapd: Assigned VLAN ID 13 from wpa_psk_file to  xx:xx:xx:xx:6e:f4
[Mar 11, 2026, 07:23:19 GMT+8] daemon.notice: hostapd: phy0-ap0: AP-STA-CONNECTED  xx:xx:xx:xx:6e:f4 vlanid=13 auth_alg=open
[Mar 11, 2026, 07:23:19 GMT+8] daemon.info: hostapd: phy0-ap0: STA  xx:xx:xx:xx:6e:f4 RADIUS: starting accounting session 77D74246F9D8E8B5
[Mar 11, 2026, 07:23:19 GMT+8] daemon.info: hostapd: phy0-ap0: STA  xx:xx:xx:xx:6e:f4 WPA: pairwise key handshake completed (RSN)
[Mar 11, 2026, 07:23:19 GMT+8] daemon.notice: hostapd: phy0-ap0: EAPOL-4WAY-HS-COMPLETED  xx:xx:xx:xx:6e:f4

Brctl command:

root@Android-23651ade:~# brctl show
bridge name     bridge id               STP enabled     interfaces
br-lan          7fff.1c40e811f750       no              lan1
                                                        lan2
                                                        lan3
                                                        lan4
                                                        phy0-ap0-lan11
                                                        phy0-ap0-lan12
                                                        phy1-ap0-lan11
                                                        phy1-ap0-lan12
brvlan11                8000.000000000000       no
brvlan12                8000.000000000000       no
brvlan13                8000.1c40e811f752       no              phy0-ap0-lan13
                                                        phy1-ap0-lan13

After run command wifi, brctl command:

root@Android-23651ade:~# wifi
root@Android-23651ade:~# brctl show
bridge name     bridge id               STP enabled     interfaces
br-lan          7fff.1c40e811f750       no              lan1
                                                        lan2
                                                        lan3
                                                        lan4
                                                        phy0-ap0-lan11
                                                        phy1-ap0-lan11
brvlan11                8000.000000000000       no
brvlan12                8000.1c40e811f752       no              phy0-ap0-lan12
                                                        phy1-ap0-lan12
brvlan13                8000.1c40e811f752       no              phy0-ap0-lan13
                                                        phy1-ap0-lan13

Router config:

Network:


config interface 'loopback'
	option device 'lo'
	option proto 'static'
	list ipaddr '127.0.0.1/8'

config globals 'globals'
	option dhcp_default_duid 'REDACTED'
	option ula_prefix 'REDACTED/48'
	option packet_steering '2'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'lan4'

config interface 'lan'
	option device 'br-lan.11'
	option proto 'static'
	option ip6assign '60'
	list ipaddr '192.168.5.1/24'
	option multipath 'off'

config interface 'wan'
	option device 'wan'
	option proto 'dhcp'

config interface 'wan6'
	option device 'wan'
	option proto 'dhcpv6'

config interface 'wwan'
	option proto 'dhcp'
	option multipath 'off'

config interface 'wwan6'
	option proto 'dhcpv6'
	option reqaddress 'none'
	option reqprefix 'auto'
	option norelease '1'
	option multipath 'off'

config interface 'lan12_cctv'
	option proto 'static'
	option device 'br-lan.12'
	option ipaddr '192.168.10.1/24'
	option ip6assign '60'
	option multipath 'off'

config interface 'lan13_iot'
	option proto 'static'
	option device 'br-lan.13'
	option ipaddr '192.168.15.1/24'
	option ip6assign '60'
	option multipath 'off'

config interface 'lan14_guest'
	option proto 'static'
	option device 'br-lan.14'
	option ipaddr '192.168.20.1/24'
	option ip6assign '60'
	option multipath 'off'

config interface 'lan15_vpn'
	option proto 'none'
	option device 'br-lan.15'
	option force_link '1'
	option defaultroute '0'
	option delegate '0'
	option multipath 'off'

config bridge-vlan
	option device 'br-lan'
	option vlan '11'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'

config bridge-vlan
	option device 'br-lan'
	option vlan '12'

config bridge-vlan
	option device 'br-lan'
	option vlan '13'

config bridge-vlan
	option device 'br-lan'
	option vlan '14'

config bridge-vlan
	option device 'br-lan'
	option vlan '15'


Wireless: (Due to troubleshooting not all vlan shown in network are configured in wireless)


config wifi-device 'radio0'
	option type 'mac80211'
	option path 'platform/soc/a000000.wifi'
	option band '2g'
	option channel '1'
	option htmode 'HT40'
	option cell_density '0'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option mode 'ap'
	option ssid 'AP0000'
	option encryption 'psk2'
	option disabled '0'
	option key 'h4iu5khkjj5j4k5hjnh44njk4hkj4nnm5'

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'platform/soc/a800000.wifi'
	option band '5g'
	option channel '36'
	option htmode 'VHT80'
	option disabled '0'

config wifi-iface 'default_radio1'
	option device 'radio1'
	option mode 'ap'
	option ssid 'AP0000'
	option encryption 'psk2'
	option disabled '0'
	option key 'h4iu5khkjj5j4k5hjnh44njk4hkj4nnm5'

config wifi-iface 'wifinet2'
	option device 'radio0'
	option mode 'sta'
	option network 'wwan wwan6'
	option ssid 'REDACTED'
	option encryption 'sae'
	option key 'REDACTED'
	option macaddr 'REDACTED'
	option skip_inactivity_poll '1'
	option disassoc_low_ack '0'
	option ocv '0'

config wifi-vlan
	option name 'lan11'
	option network 'lan'
	option vid '11'

config wifi-vlan
	option name 'lan12'
	option network 'lan12_cctv'
	option vid '12'

config wifi-vlan
	option name 'lan13'
	option network 'lan13_iot'
	option vid '13'

config wifi-station
	option key '11111111'
	option vid '11'

config wifi-station
	option key '22222222'
	option vid '12'

config wifi-station
	option key '33333333'
	option vid '13'


Brctl command when on 24.10 (with all 5 vlan):

root@OpenWrt_Main:~# brctl show
bridge name     bridge id               STP enabled     interfaces
br-lan		7fff.1cbdb94c0d90	no		lan1
							lan2
                                                        lan3
                                                        lan4
                                                        phy0-ap0-lan11
                                                        phy0-ap0-lan12
                                                        phy0-ap0-lan13
                                                        phy0-ap0-lan14
                                                        phy0-ap0-lan15
                                                        phy0-ap1-lan11
                                                        phy0-ap1-lan12
                                                        phy0-ap1-lan13
                                                        phy0-ap1-lan14
                                                        phy0-ap1-lan15
                                                        phy1-ap0-lan11
                                                        phy1-ap0-lan12
                                                        phy1-ap0-lan13
                                                        phy1-ap0-lan14
                                                        phy1-ap0-lan15
                                                        phy1-ap1-lan11
                                                        phy1-ap1-lan12
                                                        phy1-ap1-lan13
                                                        phy1-ap1-lan14
                                                        phy1-ap1-lan15
							vpn_svpn0

From here, it can be seen that all wifi-iface under br-lan in 24.10. Any wireless client connected to any of the vlan will have working wifi. It remain the same even wifi command issued in terminal.

But in 25.12, only some wifi-iface is in br-lan, those wifi-iface vlan in br-lan such as those client connected to phy1-ap0-lan11 will have fully working wifi. While those connected to such as phy0-ap0-lan13 will not have wifi working.

phy0 is 2.4 GHz while phy1 is 5 GHz.

Thanks.

1 Like

Please install ip-bridge and show bridge vlan - it is more functional, probably just looking at the output you will learn something new.

Probably not related but I think your radio can not be in two networks

1 Like

This router connect thru internet thru wifi as client (station), wwan is static ipv4 client while wwan6 is dhcp ipv6 client.

I could not sure why wwan and wwan6 in option network, usually wwan only show up while wwan6 as alias device @wwan in network config of which is currently missing.

Anyhow, it seem unrelated to Wifi VLAN issue and ipv6 internet is working, will check on it later.

wifi is in one network only, since WAN is not a bridge at any given moment one wifi takes over particular connection not sharing with anyone else.
bridge tool will show actual wifi vlan assignments.

24.10 bridge vlan:

root@OpenWrt_Main:~# bridge vlan
port              vlan-id
lan4              11
                  12
                  13
                  14
                  15
lan3              11 PVID Egress Untagged
lan2              11 PVID Egress Untagged
lan1              11 PVID Egress Untagged
br-lan            11
                  12
                  13
                  14
                  15
phy1-ap0          14 PVID Egress Untagged
phy1-ap0-lan15    15 PVID Egress Untagged
phy1-ap0-lan14    14 PVID Egress Untagged
phy1-ap0-lan13    13 PVID Egress Untagged
phy1-ap0-lan12    12 PVID Egress Untagged
phy1-ap0-lan11    11 PVID Egress Untagged
phy1-ap1          14 PVID Egress Untagged
phy1-ap1-lan15    15 PVID Egress Untagged
phy1-ap1-lan14    14 PVID Egress Untagged
phy1-ap1-lan13    13 PVID Egress Untagged
phy1-ap1-lan12    12 PVID Egress Untagged
phy1-ap1-lan11    11 PVID Egress Untagged
phy0-ap0          14 PVID Egress Untagged
phy0-ap0-lan15    15 PVID Egress Untagged
phy0-ap0-lan14    14 PVID Egress Untagged
phy0-ap0-lan13    13 PVID Egress Untagged
phy0-ap0-lan12    12 PVID Egress Untagged
phy0-ap0-lan11    11 PVID Egress Untagged
phy0-ap1          14 PVID Egress Untagged
phy0-ap1-lan15    15 PVID Egress Untagged
phy0-ap1-lan14    14 PVID Egress Untagged
phy0-ap1-lan13    13 PVID Egress Untagged
phy0-ap1-lan12    12 PVID Egress Untagged
phy0-ap1-lan11    11 PVID Egress Untagged
vpn_svpn0         15 PVID Egress Untagged

25.12 bridge vlan:

root@Android-23651ade:~# bridge vlan
port              vlan-id
lan3              11 PVID Egress Untagged
lan2              11 PVID Egress Untagged
lan1              11 PVID Egress Untagged
br-lan            11
                  12
                  13
                  14
                  15
phy0-ap0-lan13    1 Egress Untagged
                  13 PVID Egress Untagged
brvlan13          1 PVID Egress Untagged
phy0-ap0-lan12    1 PVID Egress Untagged
brvlan12          1 PVID Egress Untagged
phy0-ap0-lan11    11 PVID Egress Untagged
brvlan11          1 PVID Egress Untagged
phy1-ap0-lan13    1 Egress Untagged
                  13 PVID Egress Untagged
phy1-ap0-lan12    1 PVID Egress Untagged
phy1-ap0-lan11    11 PVID Egress Untagged
root@Android-23651ade:~# wifi
root@Android-23651ade:~# wifi
root@Android-23651ade:~# bridge vlan
port              vlan-id
lan3              11 PVID Egress Untagged
lan2              11 PVID Egress Untagged
lan1              11 PVID Egress Untagged
br-lan            11
                  12
                  13
                  14
                  15
brvlan12          1 PVID Egress Untagged
brvlan11          1 PVID Egress Untagged
phy0-ap0-lan13    1 Egress Untagged
                  13 PVID Egress Untagged
brvlan13          1 PVID Egress Untagged
phy0-ap0-lan12    1 Egress Untagged
                  12 PVID Egress Untagged
phy0-ap0-lan11    11 PVID Egress Untagged
phy1-ap0-lan13    1 PVID Egress Untagged
phy1-ap0-lan12    12 PVID Egress Untagged
phy1-ap0-lan11    1 PVID Egress Untagged
root@Android-23651ade:~# bridge vlan
port              vlan-id
lan3              11 PVID Egress Untagged
lan2              11 PVID Egress Untagged
lan1              11 PVID Egress Untagged
br-lan            11
                  12
                  13
                  14
                  15
brvlan12          1 PVID Egress Untagged
brvlan11          1 PVID Egress Untagged
phy0-ap0-lan13    1 Egress Untagged
                  13 PVID Egress Untagged
brvlan13          1 PVID Egress Untagged
phy0-ap0-lan12    1 Egress Untagged
                  12 PVID Egress Untagged
phy0-ap0-lan11    11 PVID Egress Untagged
phy1-ap0-lan13    1 PVID Egress Untagged
phy1-ap0-lan12    12 PVID Egress Untagged
phy1-ap0-lan11    1 PVID Egress Untagged

Both wireless VLAN derived from same config where 24.10 is the same as in wireless config file but 25.12, only some wifi vlan is correct as from wireless config files, it can be seen wifi vlan broken.

Just a wild guess for those bridges without a lan port add the option to bring up an empty bridge?

1 Like

In Luci > Interface > Edit > Advance Settings > Force link already been ticked for all the bridge interface.
br-lan.11, br-lan.12, br-lan.13,br-lan.14, br-lan.15.

Such option does not exist on the bridge.

1 Like

So option force_link '1' is not required in network config for bridge?

config interface 'lan15_vpn'
	option proto 'none'
	option device 'br-lan.15'
	option force_link '1'		<<<?
	option defaultroute '0'
	option delegate '0'
	option multipath 'off'
	

I do use the empty bridge on my devices which do not have a lan port not sure about the interface setting to force it

Actually, all my device are normally wirelessly connected, so lan were left unconnected, except when configuring router.
lan 1 - lan 3 (untagged) are setup to connect to br-lan.11.
While lan 4 (tagged) are setup for all vlan br-lan.11 - br-lan.15.
Lan 4 are meant for future usage and also left unconnected.

This configuration work flawlessly on 24.10 but in 25.12, connected lan working properly except vlan wifi.

Parameter is called bridge_empty

config device
        option name 'br-guest'
        option type 'bridge'
+        option bridge_empty '1'
1 Like

Config “network’ with option bridge_empty ‘1’

config interface 'lan'
	option device 'br-lan.11'
	option proto 'static'
	option ip6assign '60'
	list ipaddr '192.168.5.1/24'
	option multipath 'off'
	option bridge_empty '1'

config interface 'lan12_cctv'
	option proto 'static'
	option device 'br-lan.12'
	option ipaddr '192.168.10.1/24'
	option ip6assign '60'
	option multipath 'off'
	option bridge_empty '1'

config interface 'lan13_iot'
	option proto 'static'
	option device 'br-lan.13'
	option ipaddr '192.168.15.1/24'
	option ip6assign '60'
	option multipath 'off'
	option bridge_empty '1'

config interface 'lan14_guest'
	option proto 'static'
	option device 'br-lan.14'
	option ipaddr '192.168.20.1/24'
	option ip6assign '60'
	option multipath 'off'
	option bridge_empty '1'

config interface 'lan15_vpn'
	option proto 'none'
	option device 'br-lan.15'
	option defaultroute '0'
	option delegate '0'
	option multipath 'off'
	option bridge_empty '1'

Resultant bridge show:

root@Android-23651ade:~# bridge vlan
port              vlan-id
lan3              11 PVID Egress Untagged
lan2              11 PVID Egress Untagged
lan1              11 PVID Egress Untagged
br-lan            11
                  12
                  13
                  14
                  15
phy0-ap0-lan13    1 Egress Untagged
                  13 PVID Egress Untagged
brvlan13          1 PVID Egress Untagged
phy0-ap0-lan12    12 PVID Egress Untagged
brvlan12          1 PVID Egress Untagged
phy0-ap0-lan11    11 PVID Egress Untagged
brvlan11          1 PVID Egress Untagged
phy1-ap0-lan13    1 Egress Untagged
                  13 PVID Egress Untagged
phy1-ap0-lan12    1 PVID Egress Untagged
phy1-ap0-lan11    1 PVID Egress Untagged

Seem no changes AFAIK.

This is wrong.

Yes, I know it is wrong.

Wireless VLAN id is configured in 'wireless' config:

config wifi-vlan
	option name 'lan11'
	option network 'lan'
	option vid '11'

config wifi-vlan
	option name 'lan12'
	option network 'lan12_cctv'
	option vid '12'

config wifi-vlan
	option name 'lan13'
	option network 'lan13_iot'
	option vid '13'

config wifi-station
	option key '11111111'
	option vid '11'

config wifi-station
	option key '22222222'
	option vid '12'

config wifi-station
	option key '33333333'
	option vid '13'

By right, it should have shown as vlan id 11 and not 1.
This only happen when on version 25.12, if version 24.10, there is no such issue.

Temporary hostapd file in directory /tmp/run

hostapd-phy0.conf

driver=nl80211
logger_syslog=127
logger_syslog_level=2
logger_stdout=127
logger_stdout_level=2
supported_rates=60 90 120 180 240 360 480 540
basic_rates=60 120 240
beacon_int=100
noscan=1
rssi_reject_assoc_rssi=0
rssi_reject_assoc_timeout=30
rssi_ignore_probe_request=0
acs_exclude_dfs=0
min_tx_power=0
hw_mode=g
channel=1
ieee80211n=1
ht_coex=0
ht_capab=[HT40+][LDPC][SHORT-GI-20][SHORT-GI-40][TX-STBC][MAX-AMSDU-7935][DSSS_CCK-40][RX-STBC1]
stationary_ap=1

#num_global_macaddr=1

# Setup interface: phy0-ap0
interface=phy0-ap0
bssid=REDACTED
ssid2="Nottingham_WiFi"
ctrl_interface=/var/run/hostapd
ap_isolate=0
bss_load_update_period=60
chan_util_avg_period=600
disassoc_low_ack=1
skip_inactivity_poll=0
ignore_broadcast_ssid=0
uapsd_advertisement_enabled=1
utf8_ssid=1
preamble=1
qos_map_set=0,0,2,16,1,1,255,255,18,22,24,38,40,40,44,46,48,56
dtim_period=2
wmm_enabled=1
start_disabled=1
wpa_passphrase=REDACTED
wpa_psk_file=/var/run/hostapd-phy0-ap0.psk
dynamic_vlan=0
wpa_disable_eapol_key_retries=0
wpa=2
wpa_pairwise=CCMP
vlan_file=/var/run/hostapd-phy0-ap0.vlan
ieee80211w=0
okc=0
disable_pmksa_caching=1
wpa_key_mgmt=WPA-PSK
#default_macaddr

hostapd-phy0-ap0.psk

vlanid=11 00:00:00:00:00:00 11111111
vlanid=12 00:00:00:00:00:00 22222222
vlanid=13 00:00:00:00:00:00 33333333

hostapd-phy0-ap0.vlan

11 phy0-ap0-lan11
12 phy0-ap0-lan12
13 phy0-ap0-lan13

hostapd-phy1.conf

driver=nl80211
logger_syslog=127
logger_syslog_level=2
logger_stdout=127
logger_stdout_level=2
beacon_int=100
noscan=0
rssi_reject_assoc_rssi=0
rssi_reject_assoc_timeout=30
rssi_ignore_probe_request=0
acs_exclude_dfs=0
enable_background_radar=0
min_tx_power=0
hw_mode=a
channel=36
ieee80211n=1
ht_coex=0
ht_capab=[HT40+][LDPC][SHORT-GI-20][SHORT-GI-40][TX-STBC][MAX-AMSDU-7935][DSSS_CCK-40][RX-STBC1]
ieee80211ac=1
vht_oper_chwidth=1
vht_oper_centr_freq_seg0_idx=42
vht_capab=[RXLDPC][SHORT-GI-80][TX-STBC-2BY1][SU-BEAMFORMER][SU-BEAMFORMEE][MU-BEAMFORMER][MU-BEAMFORMEE][RX-ANTENNA-PATTERN][TX-ANTENNA-PATTERN][RX-STBC-1][SOUNDING-DIMENSION-2][BF-ANTENNA-3][MAX-MPDU-11454][MAX-A-MPDU-LEN-EXP7]
tx_queue_data2_burst=2.0
stationary_ap=1

#num_global_macaddr=1

# Setup interface: phy1-ap0
interface=phy1-ap0
bssid=REDACTED
ssid2="Nottingham_WiFi"
ctrl_interface=/var/run/hostapd
ap_isolate=0
bss_load_update_period=60
chan_util_avg_period=600
disassoc_low_ack=1
skip_inactivity_poll=0
ignore_broadcast_ssid=0
uapsd_advertisement_enabled=1
utf8_ssid=1
preamble=1
qos_map_set=0,0,2,16,1,1,255,255,18,22,24,38,40,40,44,46,48,56
dtim_period=2
wmm_enabled=1
wpa_passphrase=REDACTED
wpa_psk_file=/var/run/hostapd-phy1-ap0.psk
dynamic_vlan=0
wpa_disable_eapol_key_retries=0
wpa=2
wpa_pairwise=CCMP
vlan_file=/var/run/hostapd-phy1-ap0.vlan
ieee80211w=0
okc=0
disable_pmksa_caching=1
wpa_key_mgmt=WPA-PSK
#default_macaddr

hostapd-phy1-ap0.psk

vlanid=11 00:00:00:00:00:00 11111111
vlanid=12 00:00:00:00:00:00 22222222
vlanid=13 00:00:00:00:00:00 33333333

hostapd-phy1-ap0.vlan

11 phy1-ap0-lan11
12 phy1-ap0-lan12
13 phy1-ap0-lan13

I'm observing the same symptoms here on all of my devices with 25.12.0 while the WLAN VLANs work well on 24.10.5. Downgraded them back to 24.10.5 but kept a glinet mt300n v2 device for debugging:

root@mt300n-v2-732:~# ubus call system board
{
        "kernel": "6.12.71",
        "hostname": "mt300n-v2-732",
        "system": "MediaTek MT7628AN ver:1 eco:2",
        "model": "GL-MT300N-V2",
        "board_name": "glinet,gl-mt300n-v2",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "25.12.0",
                "firmware_url": "https://downloads.openwrt.org/",
                "revision": "r32713-f919e7899d",
                "target": "ramips/mt76x8",
                "description": "OpenWrt 25.12.0 r32713-f919e7899d",
                "builddate": "1772496855"
        }
}

This one has wpad-mbedtls instead of wpad-basic-mbedtls, built from the imagebuilder.

My configuration has 3 VLANs on a single ap and they should be part of the respective bridges:

  • phy0-ap1-n-10 to br-lan
  • phy0-ap1-n-20 to br-guest
  • phy0-ap1-n-30 to br-iot

I found that re-configuring WLAN with the wifi command results in different combinations of inconsistency. Does this hint to a race condition in the setup process?

Try 1 - phy0-ap1-n-10 and phy0-ap1-n-20 aren't assigned correctly while phy0-ap1-n-30 is:

bridge name     bridge id               STP enabled     interfaces
br-trunk                7fff.0257c7bffd75       no              gre4t-gre
br-iot          7fff.e4956e464732       no              eth0.30
                                                        br-trunk.30
                                                        phy0-ap1-n-30
br-mgmt         7fff.e4956e464732       no              br-trunk.9
                                                        eth0.9
br-localdev             8000.e4956e464732       no              phy0-ap0
br-lan          7fff.e4956e464732       no              phy0-ap1
                                                        eth0.10
                                                        br-trunk.10
br-guest                7fff.e4956e464732       no              eth0.20
                                                        br-trunk.20
brvlan30                8000.000000000000       no
brvlan20                8000.e6956e464732       no              phy0-ap1-n-20
brvlan10                8000.e6956e464732       no              phy0-ap1-n-10

Try 2 - only phy0-ap1-n-20 isn't assigned, the others are correct

bridge name     bridge id               STP enabled     interfaces
br-trunk                7fff.162a6785f023       no              gre4t-gre
br-iot          7fff.e4956e464732       no              eth0.30
                                                        br-trunk.30
                                                        phy0-ap1-n-30
br-mgmt         7fff.e4956e464732       no              br-trunk.9
                                                        eth0.9
br-localdev             8000.e4956e464732       no              phy0-ap0
br-lan          7fff.e4956e464732       no              phy0-ap1
                                                        eth0.10
                                                        br-trunk.10
                                                        phy0-ap1-n-10
br-guest                7fff.e4956e464732       no              eth0.20
                                                        br-trunk.20
brvlan30                8000.000000000000       no
brvlan20                8000.e6956e464732       no              phy0-ap1-n-20
brvlan10                8000.000000000000       no

Can you show config for wireless and network from /etc/config?
So can compare ur config and for troubleshooting later on.
Please redact sensitive info such SSID, passphrase, mac address etc.