mikrotik vlan subnets with tp-link access point RB2011L

I have a wireless tp-link access point WA801N and mikrotik

TP-LINK WA801N supports multi-ssid with vlan ids

there is 2 different ssids. it is supposed that users that connects to the first ‘secure’ ssid will obtain ip address automaticly and users who connects to the second ssid ‘guest’ will have to login using guest password.
RB2011L is connected to WAN via ether1, and office subnet network via ether2

In the WA801N i have set vlan id 10 for the ‘secure’ ssid and vlan id 20 for the ‘guest’ ssid
I have created 2 vlans on Mikrotik ether3 port, ether-3-vlan100 and ether-3-vlan600,
the access point for physical interface use an IP address from office subnet, and for vlans different subnets..

client that connect to the access point successfully lease in MikroTik router for VLAN,
but after that I can not see any traffic

where is a problem?

Any help would be appreciated.