Hi again. I redid it using the Luci gui following the instructions here and it works now (including re-association of br-guest to the guest firewall zone).
https://forum.gl-inet.com/t/ax-1800-luci-br-guest-does-not-appear-in-devices-list/24696/4
Ultimately the network uci file did end up similar to your direction, so I’m not sure why didn’t work the first time by just editing the file directly.
config device
option name 'br-lan'
option type 'bridge'
list ports 'eth2'
option multicast_to_unicast '0'
config device
option name 'br-guest'
option type 'bridge'
list ports 'eth1'
option multicast_to_unicast '0'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option netmask '255.255.255.0'
option ip6assign '60'
option isolate '0'
option ipaddr '192.168.7.1'
config interface 'guest'
option device 'br-guest'
option force_link '1'
option proto 'static'
option ipaddr '192.168.9.1'
option netmask '255.255.255.0'
option ip6assign '60'
option multicast_querier '1'
option igmp_snooping '0'
option isolate '0'
option bridge_empty '1'
brctl output:
root@XXXXX:/etc/config# brctl show
bridge name bridge id STP enabled interfaces
br-guest 7fff.9483c427xxxy no eth1
wlan0-1
wlan1-2
br-lan 7fff.9483c427xxxx no eth2
wlan0
wlan1-1
Thank you!