Try to change br-lan’s linklayer to ethernet like interface eth0 and set value upload bigger than 0 for ingress I guess.