Hola Bernardo, te paso la configuracion que el quedo al equipo:
AP-Prueba-1#
AP-Prueba-1#sh run
Building configuration...
Current configuration : 4131 bytes
!
! Last configuration change at 09:09:38 Arg Thu Apr 25 2013 by cisco
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname AP-Prueba-1
!
logging console informational
enable secret 5 $1$H7f0$iNAkWbwwO3/bkUu6e.T2M1
!
aaa new-model
!
!
aaa group server radius rad_eap2
server 10.122.0.1 auth-port 1812 acct-port 1813
!
aaa group server radius MAC_Auth
server 10.10.10.10 auth-port 1812 acct-port 1813
!
aaa authentication login default group tacacs+ local
aaa authentication login eap_methods2 group rad_eap2
aaa authentication login MAC_Method group MAC_Auth
aaa authentication enable default group tacacs+ enable
aaa authorization config-commands
aaa authorization exec default group tacacs+ none
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
!
aaa session-id common
clock timezone Arg -3
ip domain name sa
!
!
!
dot11 ssid COCAFEM
vlan 11
authentication open mac-address MAC_Method
mbssid guest-mode
!
dot11 ssid femsawl
vlan 10
authentication open eap eap_methods2
authentication network-eap eap_methods2
authentication key-management wpa
mbssid guest-mode
!
dot11 network-map
dot11 arp-cache
power inline negotiation prestandard source
!
!
username Cisco password 7 0802455D0A16
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 10 mode ciphers aes-ccm tkip
!
encryption vlan 1 mode ciphers aes-ccm tkip
!
encryption vlan 11 mode ciphers aes-ccm tkip
!
ssid COCAFEM
!
ssid femsawl
!
mbssid
channel least-congested 2417 2427 2442
station-role root
beacon dtim-period 1
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 254
bridge-group 254 subscriber-loop-control
bridge-group 254 block-unknown-source
no bridge-group 254 source-learning
no bridge-group 254 unicast-flooding
bridge-group 254 spanning-disabled
!
interface Dot11Radio0.11
encapsulation dot1Q 11
no ip route-cache
bridge-group 252
bridge-group 252 subscriber-loop-control
bridge-group 252 block-unknown-source
no bridge-group 252 source-learning
no bridge-group 252 unicast-flooding
bridge-group 252 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
speed auto
full-duplex
!
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 254
no bridge-group 254 source-learning
bridge-group 254 spanning-disabled
!
interface FastEthernet0.11
encapsulation dot1Q 11
no ip route-cache
bridge-group 252
no bridge-group 252 source-learning
bridge-group 252 spanning-disabled
!
interface BVI1
ip address 10.122.3.214 255.255.255.128
no ip route-cache
!
ip default-gateway 10.122.3.250
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
logging source-interface BVI1
access-list 703 permit 0022.5783.5dec 0000.0000.0000
radius-server local
nas 10.10.10.10 key 7 060B162A4957
user 0022.5783.5dec nthash 7 055D235A706968283F54424B2F595D7A09737017130342514F215706000D0B042B
!
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.122.0.1 auth-port 1812 acct-port 1813 key 7 0022160B175A5A545C
radius-server host 10.10.10.10 auth-port 1812 acct-port 1813 key 7 05061F042455
radius-server vsa send accounting
bridge 1 route ip
!
!
!
line con 0
logging synchronous
line vty 0 4
!
sntp server 207.169.88.1
end
AP-Prueba-1#
