This indicates station-pseudobridge is for a single client. A bridge is not a routed network.
"This mode is limited to complete L2 bridging of data to single device connected to station and some support for IPv4 frame bridging
That's fine as I am not worried about L2 bridging I just want the MIkroTik to read the IPv4 / L3 header and route accordingly like that address claims it should be able to do for IPv4 frames.
The reason I suspect this is all possible is my ASUS RT-AC68U was able to do this fine, so I know it's technically feasible.
I actually think I got it working in Bridge mode so long as I didn't want DHCP to work (it looks like even DHCP will work if the DHCP response is broadcast to all MACs due to the fact the destination MAC isn't bridged when the DHCP server tries replying to the MikroTik with one of the client MACs). The MikroTik needs to have some sort of DHCP proxy service / relay I suspect for this all to work the way I want it to.
This is a routed network. If you disable the src-nat masquerade and add a Route to your EdgeRouter for the hAP LAN, then you should be able to connect to the NAS directly without NAT. You may also have to change the src-nat on the EdgeRouter to include the hAP LAN if it is not broad enough currently to cover it.
I can connect using the MikroTik's IP directly to my NAS and have it basically working via NAT. Dream goal would have been for each device to have an IP address on the same subnet rather than having to do destination NAT. Maybe it's not possible to do this like it was with my ASUS RT-AC68U while running a DHCP server that isn't broadcasting replies to all MACs?
With legacy and M series Ubiquiti, you could use WDS on the AP and station-wds on CPE and it would work perfect. But it seems they have dropped WDS in UniFi for their own Uplink protocols.
Yes just not sure why it worked so well with the ASUS RT-AC68U (until some of their more recent firmwares meant it needed a reboot once a fortnight, https://www.snbforums.com/threads/rt-ac ... ter.48581/