WDS Bridge configuration problems

I’m new to using Mikrotik/RouterOS, so I was hoping I could find some help here. We have migrated one of our small wireless systems from a proprietary vendor’s system to a Router Board 333 AP/Ubiquiti PS2 CPE Based System. I’ve setup the RB333 as an AP-Bridge, WPA2 Security and all of the stations are linking and passing traffic just fine. However, since we changed, we have broken one of our customer’s VPN tunnel connections, so I’m assuming I need to setup a WDS link for them.

I added a bridge interface with the wlan1 and eth1 ports in the bridge, and on the wlan1 interface I set WDS mode to dynamic and the default bridge to the wds_bridge interface I created. When I set the CPE to station WDS mode, it will no longer link, and in the logs of the RB I can see where the station is requesting WDS, but I get a “unicast key exchange timeout”. If tried “WDS Ignore SSID” and a few other settings, however I’m getting nowhere.

I’m sure I’ve not set something right in the RouterOS, I just can’t figure out what.

Any help would be appreciated

It doesn’t sound like you need WDS to fix the VPN tunnel problem. Does the VPN not setup at all or does it setup but not pass all traffic properly? Did you disable connection tracking on the AP? If so, that could be the problem.