now seems resolved by today’s batch of firmwares (Route10: 1.3x, Switch: 2.1t, AP: 2.2g). Devices now seems to have appropriate VLANs.