Thank you so much for your reply! I have worked on this some more but still can't get it to work. The LEAP Authentication always times out. I reset the AP to factory defaults several times trying different things. Here is my latest config. This is the way I think it "should" be but I am obviously wrong! I've used the GUI to do this...
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname ap
!
!
username uuuuuuuu privilege 15 password 7 00000000000
clock timezone R -5
clock summer-time R recurring
ip subnet-zero
ip domain name ddddddddddddd.com
ip name-server 192.168.1.40
!
aaa new-model
!
!
aaa group server radius rad_eap
server 192.168.1.20 auth-port 1645 acct-port 1646
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa authorization ipmobile default group rad_pmip
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers tkip wep128
!
ssid ssssssssss
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa
!
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0
rts threshold 2312
power local 50
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address 192.168.1.20 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.1.1
ip http server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
/ivory/1100
ip http authentication aaa
ip radius source-interface BVI1
no logging trap
radius-server local
nas 192.168.1.20 key 7 000000000000
user uuuuuuuuu nthash 7 0000000000000000000000000000000000000
!
radius-server host 192.168.1.20 auth-port 1645 acct-port 1646 key 7 000000000000
radius-server attribute 32 include-in-access-req format %h
radius-server authorization permit missing Service-Type
radius-server vsa send accounting
bridge 1 route ip
!
!
line con 0
stopbits 1
line vty 5 15
!
end
