I believe the RF is good we have 8 access points through out the building and normally dont have any issues with connectivity. We have not done a site survey yet so that is probaby something we should look into next. Below is the current configuration. To reinterate the AP functions good for awhile and then resets. Upon a reload it works again fine for awhile and resets. I have 4 AP's that are doing the same thing and are placed in various points around the building.
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xxxxxxxx
!
!
aaa new-model
!
!
aaa group server radius rad_eap
server 10.38.10.33 auth-port 1645 acct-port 1646
server 10.38.10.34 auth-port 1645 acct-port 1646
!
aaa group server radius rad_mac
server 10.38.10.33 auth-port 1645 acct-port 1646
server 10.38.10.34 auth-port 1645 acct-port 1646
!
aaa group server radius rad_acct
server 10.38.10.33 auth-port 1645 acct-port 1646
server 10.38.10.34 auth-port 1645 acct-port 1646
!
aaa group server radius rad_admin
server 10.38.10.33 auth-port 1645 acct-port 1646
server 10.38.10.34 auth-port 1645 acct-port 1646
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
!
aaa session-id common
clock timezone -0500 -5
clock summer-time -0400 recurring
ip domain name panther.com
ip name-server 10.38.10.33
ip name-server 10.38.10.34
!
!
dot11 syslog
dot11 vlan-name VLAN604 vlan 604
dot11 vlan-name VLAN651 vlan 651
dot11 vlan-name VLAN653 vlan 653
!
dot11 ssid PanGuest
vlan 653
authentication open
mbssid guest-mode
!
dot11 ssid PanWifi
vlan 651
authentication open eap eap_methods
authentication key-management wpa version 2
accounting acct_methods
mbssid guest-mode
!
!
!
username xxxxxxx privilege 15 password 7 xxxxxxxxxxxx
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 651 mode ciphers aes-ccm
!
encryption vlan 653 key 1 size 40bit 7 xxxxxxxxxxx transmit-key
encryption vlan 653 mode ciphers wep40
!
ssid PanGuest
!
ssid PanWifi
!
antenna gain 0
mbssid
channel width 40-above
station-role root
bridge-group 1
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.651
encapsulation dot1Q 651
no ip route-cache
bridge-group 255
bridge-group 255 subscriber-loop-control
bridge-group 255 block-unknown-source
no bridge-group 255 source-learning
no bridge-group 255 unicast-flooding
bridge-group 255 spanning-disabled
!
interface Dot11Radio0.653
encapsulation dot1Q 653
no ip route-cache
bridge-group 254
bridge-group 254 subscriber-loop-control
bridge-group 254 block-unknown-source
no bridge-group 254 source-learning
no bridge-group 254 unicast-flooding
bridge-group 254 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
!
encryption vlan 651 mode ciphers aes-ccm
!
encryption vlan 653 key 1 size 40bit 7 xxxxxxxxxxx transmit-key
encryption vlan 653 mode ciphers wep40
!
ssid PanGuest
!
ssid PanWifi
!
antenna gain 0
no dfs band block
mbssid
channel width 40-above
channel dfs
station-role root
bridge-group 1
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1.651
encapsulation dot1Q 651
no ip route-cache
bridge-group 255
bridge-group 255 subscriber-loop-control
bridge-group 255 block-unknown-source
no bridge-group 255 source-learning
no bridge-group 255 unicast-flooding
bridge-group 255 spanning-disabled
!
interface Dot11Radio1.653
encapsulation dot1Q 653
no ip route-cache
bridge-group 254
bridge-group 254 subscriber-loop-control
bridge-group 254 block-unknown-source
no bridge-group 254 source-learning
no bridge-group 254 unicast-flooding
bridge-group 254 spanning-disabled
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
!
interface GigabitEthernet0.604
encapsulation dot1Q 604 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0.651
encapsulation dot1Q 651
no ip route-cache
bridge-group 255
no bridge-group 255 source-learning
bridge-group 255 spanning-disabled
!
interface GigabitEthernet0.653
encapsulation dot1Q 653
no ip route-cache
bridge-group 254
no bridge-group 254 source-learning
bridge-group 254 spanning-disabled
!
interface BVI1
ip address 10.38.4.18 255.255.255.0
no ip route-cache
!
ip default-gateway 10.38.4.1
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
access-list 111 permit tcp any any neq telnet
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.38.10.33 auth-port 1645 acct-port 1646 key 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
radius-server host 10.38.10.34 auth-port 1645 acct-port 1646 key 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
radius-server deadtime 60
radius-server vsa send accounting
bridge 1 route ip
!
!
!
line con 0
access-class 111 in
line vty 0 4
access-class 111 in
transport input ssh
!
sntp server 10.38.4.1
sntp broadcast client
end
