Hello,
so this would be what your configuration could look like (assuming that your wireless clients are in Vlan 2):
First, configure the router:
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
service-module wlan-ap 0 bootimage autonomous
!
crypto pki trustpoint TP-self-signed-2097789431
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2097789431
revocation-check none
rsakeypair TP-self-signed-2097789431
!
crypto pki certificate chain TP-self-signed-2097789431
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32303937 37383934 3331301E 170D3137 30363137 32313438
35335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 30393737
38393433 3130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BBCC 2877A414 B4105732 AFA48E9B E05FD1C5 52A5433E 8438AA58 7BE2BAB6
BC1B8736 E795C345 D4B78B5E 9D29062F 8F35A6B2 3A5A8ECA F6BBD61A 1709B280
3C0A2B50 F121CC58 FF9BB701 CEFC6E52 C85CDF75 D57FF2B5 4423567C 7590456C
D0ED7034 D1CE74C0 EB0F69AD 018CF197 3AC682E9 F7A10ACE 3FE96CB0 3A135F6C
68F50203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 14F87BA4 934C5CC7 6AD0BCF6 C8709E1E 9F269B46
2F301D06 03551D0E 04160414 F87BA493 4C5CC76A D0BCF6C8 709E1E9F 269B462F
300D0609 2A864886 F70D0101 04050003 81810066 68458D96 886C2DFB 7A1B8E55
BB8160A0 D40CD9D7 C287CA21 A628CAC9 1DF2A4CD D2B19F01 FFB8C9FA 295C7B8D
E6613DB7 D88DAF73 4D1670C1 8F345D5C B5CBD4F1 B9304EDF 47C32C20 1407846E
FCF539CF 9BC3E9BA 9AE63CAB B83FF245 0228B640 C9E4FBE5 F42B9216 BAABA1EB
C9C5081B 3D44D7F7 F7807339 94715C6C AE7B23
quit
ip source-route
!
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.0.1
!
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
!
ip dhcp pool MYDHCP_WIRELESS
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
!
ip cef
no ip domain lookup
ip domain name yourdomain.com
no ipv6 cef
!
multilink bundle-name authenticated
license udi pid CISCO892W-AGN-E-K9 sn FCZ1449C36P
!
username Ncomrouter privilege 15 secret 5 $1$zwxS$06dvG4X/4yU.O6CnlynZI.
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
!
interface FastEthernet5
!
interface FastEthernet6
!
interface FastEthernet7
!
interface FastEthernet8
no ip address
duplex auto
speed auto
!
!
interface GigabitEthernet0
no ip address
shutdown
duplex auto
speed auto
!
!
interface wlan-ap0
description Service module interface to manage the embedded AP
ip unnumbered Vlan2
arp timeout 0
!
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
switchport trunk native vlan 2
switchport mode trunk
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-FE 1$
ip address 10.10.10.1 255.255.255.248
ip tcp adjust-mss 1452
!
interface Vlan2
ip address 192.168.0.1 255.255.255.0
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
access-list 23 permit 10.10.10.0 0.0.0.7
no cdp run
bridge 1 protocol ieee
bridge 1 route ip
Then, configure the AP Module by typing:
yourname# service-module wlan-ap0 session
and configure the below:
hostname ap
!
enable secret 5 $1$uoRD$Mz7Q8NVh9L0PYSoIKxghH/
!
no aaa new-model
!
dot11 ssid YOURSSID
vlan 2
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 0 cisco123
!
username cisco privilege 15 secret 5 $1$JbKq$341Z9uDAkeHKcMTO6/WI00
!
bridge irb
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 2 mode ciphers tkip
!
ssid YOURSSID
!
station-role root
!
interface Dot11Radio0.2
encapsulation dot1Q 2 native
!
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router
no ip address
no ip route-cache
!
interface GigabitEthernet0.2
encapsulation dot1Q 2 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address dhcp
no ip route-cache
!
ip default-gateway 192.168.0.1
!
ip http server
no ip http secure-server
!
bridge 1 protocol ieee
bridge 1 route ip
To close the session between the wireless device and the router’s console, press:
Control-Shift-6 x
Hope that makes sense...
