the ap setup is:
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname www.dragonwars.com
!
!
logging rate-limit console 9
enable secret 5 $1$JbKq$341Z9uDAkeHKcMTO6/WI00
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
!
!
!
!
!
aaa session-id common
no ip cef
!
!
!
!
dot11 syslog
!
dot11 ssid Dragon
vlan 1
authentication open
authentication key-management wpa
guest-mode
mbssid guest-mode
wpa-psk ascii 0 MywirelessnetworkPassword
!
dot11 ssid dragon2.4
vlan 1
authentication open eap eap_methods
authentication network-eap eap_methods
guest-mode
!
dot11 ssid guest
vlan 2
authentication open
authentication key-management wpa
mbssid guest-mode
wpa-psk ascii 0 Wifi2018range
!
!
dot11 network-map
!
crypto pki trustpoint TP-self-signed-2700559570
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2700559570
revocation-check none
rsakeypair TP-self-signed-2700559570
!
!
crypto pki certificate chain TP-self-signed-2700559570
certificate self-signed 01
3082024A 308201B3 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32373030 35353935 3730301E 170D3138 30383032 31313332
31355A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 37303035
35393537 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C749 2D9FA7CD 2A7DE256 CC468A67 E340238C 314F869C 3E45AC1E 2C8214FA
CB6C5372 A4007D70 CF3AB2CC A62FF15F A9027B12 86FAF33C BA7913E9 0A1C70F7
B2B99848 6FC519C8 4CDEA2D1 E9FFFBC7 CCC0CFAA 062819AE 2BB32009 CC332448
51BFB50C FC236C00 D473D9E0 1FE07584 AEB33CEE 9169188E E6D577E3 959CC18E
DEF90203 010001A3 72307030 0F060355 1D130101 FF040530 030101FF 301D0603
551D1104 16301482 12777777 2E647261 676F6E77 6172732E 636F6D30 1F060355
1D230418 30168014 D8A6AC7F 3A11DE7E BFA4EE5C 404F8FE4 0F0E7A0B 301D0603
551D0E04 160414D8 A6AC7F3A 11DE7EBF A4EE5C40 4F8FE40F 0E7A0B30 0D06092A
864886F7 0D010104 05000381 8100BDB3 817E42ED 9DA882B1 E0AF21A2 20B7DD55
AA1E0892 EDE164D5 3CD44804 C2908E0F 41418C20 364C877F C899A1A5 39F58919
5C5409B3 10BE4C43 EA1AF77C 6635B1F6 B08774C4 D94B4679 D9DAEF3E 18DD9EDF
8B91F64D A1A025D4 69889B84 271274E0 814DFD64 935A6F69 4F2A6262 B37D7D34
44CFB0D5 CAB9EEBC D5A985C6 E266
quit
username admin privilege 15 secret 5 $1$WmtE$BnJjyWqtPbgXF.zmi3PQk/
!
!
ip ssh version 2
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 1 mode ciphers tkip
!
encryption vlan 2 mode ciphers tkip
!
broadcast-key vlan 1 change 30
!
broadcast-key vlan 2 change 30
!
!
ssid Dragon
!
ssid guest
!
antenna gain -128
mbssid
station-role root
payload-encapsulation dot1h
infrastructure-client
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 spanning-disabled
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
!
interface GigabitEthernet0
description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router
no ip address
no ip route-cache
!
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface GigabitEthernet0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
bridge-group 2 spanning-disabled
no bridge-group 2 source-learning
!
interface BVI1
ip address 10.20.20.3 255.255.255.0
no ip route-cache
!
ip forward-protocol nd
ip http server
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
!
!
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
!
radius server Wifi2018range
!
bridge 1 protocol ieee
bridge 1 route ip
!
!
wlccp authentication-server client mac mac_methods
wlccp wds priority 1 interface BVI1
banner exec ^CC
% Password change notice.
-----------------------------------------------------------------------
Default username/password setup on AP is cisco/cisco with privilege level 15.
It is strongly suggested that you create a new username with privilege level
15 using the following command for console security.
username <myuser> privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want to
use. After you change your username/password you can turn off this message
by configuring "no banner login" and "no banner exec" in privileged mode.
-----------------------------------------------------------------------
^C
!
line con 0
privilege level 15
no activation-character
line vty 0 4
transport input all
!
end
