IMHO, nas should be started with the -l option only, if eth1 (the wl0_ifname or wifi_ifname) is part of the bridge (lan_ifnames).

I've 2 WRTGSv1.1 using one as an AP and one as an STA, and on both the wifi is not bridged to the lan. As long as the -l switch  was used, I could not get any authorization between both (only association and authentication) and thus no ping ...

Packages used: whiterussian RC3 and  nas_3.90.37-11_mipsel.ipk, wl_3.90.37-1_mipsel.ipk.

Furthermore, wl0_crypto=aes (with wl0_akm=psk2; security_mode and wl0_auth_mode unset) does not work. I need to use  wl0_crypto=aes+tkip ...