Hotspot authentication issue

HI

My configuration looks like this

Internet - modem - MT(hotspot) - AP

Clients are connection to Access Point, no problem but i want to extend range of that network using Client Bridge and another Access Point

Internet - modem - MT(hotspot) - AP —(radio)---- Client Bridge - AP2

but clients connected to AP2 will have a Client Bridge MAC Address.
I am not exactly sure how Authentication mechanism work on hotspot.
I am using external Radius server with PAP login.
Havent test that yet but I am almost sure that if some connected to AP2 will login than everyone who connect to AP2 will get access becouse hotspot assign user to mac address and pass him throu.

What do you think will that work, if not is there a way to make it work.

I know i can use a WDS link to pass MAC addresses but i need to use infrastructure in this one.

Why not just make another hotspot on AP2?

Create another hotspot on second AP linked to the same Radius server. Authentication is unique and managed by the Radius server on the basis of user/password couple only.