I use DD-WRT v24 with WPA2-AES client bridged to a router running Tomato 1.27 - with no issues whatsoever. Seamless roaming between the 2 routers with different BSSID. The WAN-connected router controls everything (DHCP, DNS etc) and the bridge simply forwards requests. I enable SSID broadcast, however.