Thankyou, that's all setup correctly. It usually works fine, the only difference to my other setups is that the lan connection is via vlan.
All devices appear in the network topology of the router, but the router is blocking the forwarding. I even disabled the firewall, still the same.