maddinla wrote I tried "sudo update-rc.d tpeap defaults" but this won't work. [...] Does anyone know how this works correctly??? That's b/c tpeap from TP-Link is not conforming to the Linux Standard...

You configured all ports to be members of several VLANs (VID1 and VID102) at the same time. What you need is a trunk link from sw1 to sw2 over the LAG, not a separate VLAN for the LAG. So, the trunk...

I don't know the UniFi Security Gateway, but from the product site I saw that it's just a router with an integrated firewall and a VLAN-aware LAN Ethernet. So it is suitable to replace your ASUS...

CPEs are best for long-range, directional wireless links. Why didn't you choose the EAP110-Outdoor instead, which fits perfectly as an AP for a garden and is easy to set up?

AP/client roles are only needed to establish a wireless link. Once the link is in place, it looks like a full-duplex bridge to higher layers. Make sure AP isolation is unchecked and set the default...

Remove ports 1-5 from VLAN1 and add port 1 as a member and tagged port of all remaining VLANs if it should be a trunk port. What's more, ports 2-5 should be untagged members of the VLANs if you want...