ap#sh run Building configuration... Current configuration : 4130 bytes ! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname ap ! enable secret 5 $1$qK9j$NmfzR6f8RwCxks/wkYTmT0 ! ip subnet-zero ! ! aaa new-model ! ! aaa group server radius rad_eap server 172.26.200.25 auth-port 1812 acct-port 1813 ! aaa group server radius rad_mac ! aaa group server radius rad_acct ! aaa group server radius rad_admin cache expiry 1 cache authorization profile admin_cache cache authentication profile admin_cache ! aaa group server tacacs+ tac_admin cache expiry 1 cache authorization profile admin_cache cache authentication profile admin_cache ! aaa group server radius rad_pmip ! aaa group server radius dummy ! aaa authentication login eap_methods group rad_eap aaa authentication login mac_methods local aaa authorization exec default local aaa accounting network acct_methods start-stop group rad_acct aaa cache profile admin_cache all ! aaa session-id common ! dot11 ssid Radius vlan 11 authentication open eap eap_methods authentication network-eap eap_methods mbssid guest-mode ! dot11 ssid Radius Guest vlan 12 authentication open eap eap_methods authentication network-eap eap_methods mbssid guest-mode ! ! ! username Cisco password 7 106D000A0618 ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption vlan 1 mode wep mandatory ! encryption vlan 11 mode wep mandatory ! encryption vlan 12 mode wep mandatory ! ssid Radius ! ssid Radius Guest ! mbssid speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root beacon dtim-period 10 ! interface Dot11Radio0.1 encapsulation dot1Q 1 no ip route-cache bridge-group 254 bridge-group 254 block-unknown-source no bridge-group 254 source-learning no bridge-group 254 unicast-flooding bridge-group 254 spanning-disabled ! interface Dot11Radio0.11 encapsulation dot1Q 11 native no ip route-cache bridge-group 1 bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio0.12 encapsulation dot1Q 12 no ip route-cache bridge-group 12 bridge-group 12 block-unknown-source no bridge-group 12 source-learning no bridge-group 12 unicast-flooding bridge-group 12 spanning-disabled ! interface Dot11Radio0.340 encapsulation dot1Q 340 no ip route-cache bridge-group 255 bridge-group 255 block-unknown-source no bridge-group 255 source-learning no bridge-group 255 unicast-flooding bridge-group 255 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto ! interface FastEthernet0.1 encapsulation dot1Q 1 no ip route-cache bridge-group 254 no bridge-group 254 source-learning bridge-group 254 spanning-disabled ! interface FastEthernet0.11 encapsulation dot1Q 11 native no ip route-cache bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface FastEthernet0.12 encapsulation dot1Q 12 no ip route-cache bridge-group 12 no bridge-group 12 source-learning bridge-group 12 spanning-disabled ! interface FastEthernet0.340 encapsulation dot1Q 340 no ip route-cache bridge-group 255 no bridge-group 255 source-learning bridge-group 255 spanning-disabled ! interface BVI1 ip address 172.27.5.251 255.255.255.0 ip helper-address 172.26.1.84 ip helper-address 172.26.1.85 no ip route-cache ! ip default-gateway 172.27.200.254 ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ip radius source-interface BVI1 ! radius-server attribute 32 include-in-access-req format %h radius-server host 172.26.1.158 auth-port 1812 acct-port 1813 key 7 021201481F03 radius-server vsa send accounting ! control-plane ! bridge 1 route ip ! ! ! line con 0 transport preferred all transport output all line vty 0 4 transport preferred all transport input all transport output all line vty 5 15 transport preferred all transport input all transport output all ! end