Seems that any changes to topology (i.e. to multicast filters) or associated VLAN tag cause clients to not be able to connect. Turning off WiFi and turning it back on doesn't help. Same SSID, same credentials, the only thing that seems to work is "...