I use Cisco Aironet 350 series to provide point to point connection of about 15 KM distance. The configuration is as follows:
CSAC Ver 3.0---HUB ----|---RootBridge(SSID 1)
|---Non-Root (SSID 2)----Root (SSID 2)---|-HUB
RootBridge has been configured for LEAP authentication and works well for all clients connecting to it. However, Clients connecting to the network through RootX cannot be authenticated eventhough all bridges have LEAP enabled.
The multiple SSID feature is active only when VLANs are enabled. You can use multiple SSIDs to create different levels of network access and to access virtual LANs (VLANs). You can configure up to 16 separate SSID-to-VLAN pairs on your network. Since you have made no mention of that, do check if you have configured VLAN.