Queue not working on mAP lite

Urgent-ish question. I’m trying to set-up a queue on a mAP lite. I’ve done this before very successfully on hAP devices and know just enough to know that you have to turn off fasttrack for queues to work. I infer from this that queues only work when traffic is going through the firewall?

However, on the default configuration of the mAP lite, there is no firewall - out of the box it’s configured as a simple access point. When I create a queue and apply to the wlan1 interface, it doesn’t work.

So I’m guessing that I need to enable the firewall even though we’re not actually using it. I’ve got the firewall configuration from a hAP but I think that’s when it’s in router mode. I don’t want to convert it to a router as we need to access other devices on the core network, i.e. need to keep on the same subnet and not introduce NAT etc.

Any advice what basic firewall rules I need to add so that the queue will work?

Or am I barking up completely the wrong tree?

Realising that the device was in bridge mode allowed me to Google a little more accurately and I discovered a similar post which took me to this dialog. The default was to no use the firewall and to allow fast path:

Enabling firewall and disabling fast path worked! Phew… added the following command to the config:

/interface bridge settings set allow-fast-path=no use-ip-firewall=yes