I have a BPI-R1, and just as your have described in the wiki, the WAN and LAN is separated with VLAN instead of layer 2 isolation, the BCM chip’s configurement will be reset once it reboot, and U-Boot will flush configurements when boot. Though I have fixed by modifying uboot and add a flash memory, it still ugly.
Now I have seen BPI-R2 is using a new ethernet chip. Will the LAN and WAN be isolated?
I’m hoping that the WAN and LAN are isolated on every boot time, and unless I have configured specifically to forward the packets, they should be isolated during the whole boot time and not connected.