Looks fine to me.
You generally cannot ping PC A1, maybe due to a firewall rull on windows.
Routing has nothing to do here, as all of your network is in the same broadcast domain. You just assign the default gateway for internet reachability and you assign the closest ZS.
The way I see it your bridge is functioning properly.