As part of T6647, in the PR https://github.com/vyos/vyos-1x/pull/4018, certain traffic with invalid state are allowed through if the user sets the global-option invalid-connections to bridged-ttraffic.
That PR works for regular bridge interface traffic but does not take into consideration VLAN aware bridge traffic.
We need to allow invalid state traffic for ethernet protocol 8021q (same as vlan) and 8021ad in addition to regular arp to take VLAN aware bridge into consideration.