Thanks a lot for the updated guide! Works well!
I have a suggestion, though. Perhaps put these lines for the cAP AX at the end:
/interface bridge port
add bridge=bridgeLocal frame-types=admit-only-vlan-tagged interface=ether1
If they are done too early, you will lock yourself out.