Hi Tipizo
There is a SECN Tutorial on the VT Wiki page that you might find helpful to get started:
The tutorial provides a simple step by step process for setting up a simple mesh network for any SECN device.
For your simple test set up you do not need to use the WAN interfaces. Once you enable the WAN interface on a SECN device then it behaves as a router, performing NAT between the WAN and LAN sides. This is probably not what you want at present.
From your description, it seems that what you want to do is to extend the LAN from your main Router via the mesh network between two WR841 nodes.
To do this, set the WAN on both SECN nodes to the default "Disable" setting.
Connect the main router to Node 1 with an Ethernet cable plugged in to a LAN port on Node 1 (not the WAN port)
When the mesh is running, all the LAN ports and wifi APs on the WR841 nodes will be transparently bridged together just as if they were one large network switch device.
A client device connecting to Node 2 will issue a DHCP request which will be carried to the main Router which will respond and assign an IP address in its subnet, as well as DNS and Default Route information.
If you don't want clients to connect to Node 1 via wifi, then disable the AP on that node as Steve has described.
Client devices which are assigned IP address from the main Router will be in its subnet range (192.168.1.x) and so will not be able to access the SECN management interface at 10.130.1.20 and .21
To access the SECN interface you will need to have a client with an IP set in the 10.130.1.x subnet and attached vi Ethernet or wifi to one of the nodes.
So you have two IP subnets running over the Layer 2 mesh - one on 192.168.1.x for User data, and the other on 10.130.1.x for System Management.
Regards
Terry