!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname MRCISDAP3
!
enable secret 5 $1$04/u$CyXOuJfmBo43XKcRhGAol.
!
ip subnet-zero
ip domain name 
ip name-server 
!
!
aaa new-model
!
!
aaa group server radius rad_eap
 server 10.28.1.28 auth-port 1645 acct-port 1646
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa group server radius rad_eap2
 server 10.28.1.28 auth-port 1645 acct-port 1646
!
aaa authentication login eap_methids group rad_eap
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods2 group rad_eap2
aaa authorization exec default local 
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 vlan-name mrcisdopen vlan 500
!
dot11 ssid MRCISD-OPEN
   vlan 500
   authentication open 
   authentication key-management wpa
   mbssid guest-mode dtim-period 2
   wpa-psk ascii 7 08315C5E1909150702
!
dot11 ssid MRCISD-SECURE
   vlan 501
   authentication open eap eap_methods2 
   authentication network-eap eap_methods2 
   mbssid guest-mode dtim-period 2
!
!
!
username Administrator privilege 15 password 7 095F5A080B5445415F
username Cisco privilege 15 password 7 00271A150754
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 501 mode wep mandatory 
 !
 encryption vlan 500 mode ciphers tkip 
 !
 ssid MRCISD-OPEN
 !
 ssid MRCISD-SECURE
 !
 mbssid
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 power local cck 20
 station-role root access-point
 bridge-group 1
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.280
 encapsulation dot1Q 280
 no ip route-cache
 bridge-group 255
 bridge-group 255 subscriber-loop-control
 bridge-group 255 block-unknown-source
 no bridge-group 255 source-learning
 no bridge-group 255 unicast-flooding
 bridge-group 255 spanning-disabled
!
interface Dot11Radio0.500
 encapsulation dot1Q 500
 no ip route-cache
 bridge-group 254
 bridge-group 254 subscriber-loop-control
 bridge-group 254 block-unknown-source
 no bridge-group 254 source-learning
 no bridge-group 254 unicast-flooding
 bridge-group 254 spanning-disabled
!
interface Dot11Radio0.501
 encapsulation dot1Q 501
 no ip route-cache
 bridge-group 253
 bridge-group 253 subscriber-loop-control
 bridge-group 253 block-unknown-source
 no bridge-group 253 source-learning
 no bridge-group 253 unicast-flooding
 bridge-group 253 spanning-disabled
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 shutdown
 speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
 hold-queue 160 in
!
interface FastEthernet0.280
 encapsulation dot1Q 280
 no ip route-cache
 bridge-group 255
 no bridge-group 255 source-learning
 bridge-group 255 spanning-disabled
!
interface FastEthernet0.500
 encapsulation dot1Q 500
 no ip route-cache
 bridge-group 254
 no bridge-group 254 source-learning
 bridge-group 254 spanning-disabled
!
interface FastEthernet0.501
 encapsulation dot1Q 501
 no ip route-cache
 bridge-group 253
 no bridge-group 253 source-learning
 bridge-group 253 spanning-disabled
!
interface BVI1
 ip address 10.28.0.12 255.255.255.0
 no ip route-cache
!
ip default-gateway 10.28.0.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1 
!
radius-server local
  nas 10.28.0.12 key 7 1119091507021B1C14
  user testlab nthash 7 144F4A5F5A227D0E050D166D04315647542072090E71702A5B4B467B0F020B0476
!
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.28.0.12 auth-port 1645 acct-port 1646 key 7 105E19091507021B1C
radius-server host 10.28.1.28 auth-port 1645 acct-port 1646 key 7 104D000A0618
radius-server vsa send accounting
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
!
end