AP2#sh run
Building configuration...

Current configuration : 4079 bytes
!
! Last configuration change at 12:50:05 UTC Mon Sep 9 2013
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname AP2
!
!
logging rate-limit console 9
enable secret 5 
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login default local
aaa authentication login webauth group radius
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login web_list group radius
aaa authorization exec default local 
aaa accounting network acct_methods start-stop group rad_acct
!
!
!
!
!
aaa session-id common
no ip source-route
no ip cef
ip admission name webauth proxy http inactivity-time 1
ip admission name webauth method-list authentication webauth 
ip domain name SS-TN.org
!
!
!
!
dot11 pause-time 100
dot11 syslog
dot11 vlan-name Guest vlan 2
!
dot11 ssid S
   vlan 5
   band-select
   authentication open 
   authentication key-management wpa
   wpa-psk ascii 7 07237258435A1555101B054D
!
dot11 ssid Guest
   vlan 2
   web-auth
   guest-mode
!
!
dot11 captive-portal-bypass
dot11 guest
  username guest lifetime 60 password 7 1427131905171A2E203B
!
no ipv6 cef
!
!
username ss privilege 15 secret 5 $1$yS2k$xwIjxIN0lCKm5EErW2Qre.
username tnicole privilege 15 secret 5 $1$hRAA$h4ZJ/fJdQ25cyzLDjIRKi0
!
!
bridge irb
!
!
!
interface Dot11Radio0
 no ip address
 !
 encryption mode ciphers aes-ccm tkip 
 !
 encryption vlan 5 mode ciphers aes-ccm tkip 
 !
 encryption vlan 2 mode ciphers aes-ccm tkip 
 !
 ssid SS
 !
 ssid Guest
 !
 antenna gain 0
 stbc
 station-role root
 ip admission webauth
!
interface Dot11Radio0.1
 encapsulation dot1Q 5 native
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.2
 encapsulation dot1Q 2
 bridge-group 2
 bridge-group 2 subscriber-loop-control
 bridge-group 2 spanning-disabled
 bridge-group 2 block-unknown-source
 no bridge-group 2 source-learning
 no bridge-group 2 unicast-flooding
 ip admission webauth
!
interface Dot11Radio1
 no ip address
 !
 encryption mode ciphers aes-ccm tkip 
 !
 encryption vlan 5 mode ciphers aes-ccm tkip 
 !
 ssid SS
 !
 antenna gain 0
 peakdetect
 dfs band 3 block
 stbc
 channel dfs
 station-role root
!
interface Dot11Radio1.1
 encapsulation dot1Q 5 native
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
 no ip address
 duplex auto
 speed auto
!
interface GigabitEthernet0.1
 encapsulation dot1Q 5 native
 bridge-group 1
 bridge-group 1 spanning-disabled
 no bridge-group 1 source-learning
!
interface GigabitEthernet0.2
 encapsulation dot1Q 2
 bridge-group 2
 bridge-group 2 spanning-disabled
 no bridge-group 2 source-learning
!
interface BVI1
 mac-address 7c69.f660.2759
 ip address 10.5.104.9 255.255.255.192
!
ip default-gateway 10.5.104.1
ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0
ip radius source-interface BVI1 
!
!
logging host 10.99.1.65
!
radius-server local
  no authentication eapfast
  nas 10.5.104.9 key 7 01100F175804
  group guest 
    block count 3 time 300
    reauthentication time 3600
  !
!
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.5.104.9 auth-port 1812 acct-port 1813 key 7 012307165218360A255F
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
 transport input ssh
 transport output ssh
!
end