It’s been a while since I’ve used WDS, but the sketch is as follows
-
Main Router
- SSID: Private – AP
- SSID: Guest – AP
- SSID: Backhaul 1 – AP/WDS
- SSID: Backhaul 2 – AP/WDS
- Bridge: Private, Backhaul 1 (and perhaps your LAN)
- Bridge: Guest, Backhaul 2
-
Secondary Router
- SSID: Private – AP
- SSID: Guest – AP
- SSID: Backhaul 1 – STA/WDS
- SSID: Backhaul 2 – STA/WDS
- Bridge: Private, Backhaul 1 (and perhaps your LAN)
- Bridge: Guest, Backhaul 2
If you run both 2.4 GHz and 5 GHz, then there would be one for each of Private and Guest on each router. The two 2.4 GHz channels on the two different routers can/should be different. All the 5 GHz radios end up being on the same channel, assuming you’re using 5 GHz for the backhaul.