Basic idea is: when bridge vlan-filtering is enabled, then VLAN interfaces have to be configured off the bridge, not off member interfaces. But in this config, the vlan should be on the member interface, right? Because I just did a lab now, added the vlan interface to the bridge and it did not work...