Problem with cisco 871 wireless on SMC 2554 AP's

SVBCEdge#
SVBCEdge#show run
Building configuration...
 
Current configuration : 6061 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname SVBCEdge
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxx
enable password 7 xxxx
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
!
aaa session-id common
!
crypto pki trustpoint TP-self-signed-xxxx
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-xxxx
 revocation-check none
 rsakeypair TP-self-signed-xxxx
!
!
crypto pki certificate chain TP-self-signed-xxxx
 certificate self-signed 01
  Certwashere
 
        quit
dot11 syslog
!
dot11 ssid Open
   vlan 1
   authentication open
   mbssid guest-mode
!
dot11 ssid Staff
   vlan 10
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 xxxxx
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.2.1 192.168.2.99
!
ip dhcp pool VLAN1
   import all
   network 192.168.2.0 255.255.255.0
   default-router 192.168.2.1
   dns-server xxxxx
   lease 4
!
!
ip inspect name MYFW tcp
ip inspect name MYFW udp
no ip domain lookup
ip domain name severns.local
!
!
!
username admin privilege 15 password 7 xxxx
!
!
archive
 log config
  hidekeys
!
!
ip ssh rsa keypair-name xxxxxx
!
bridge irb
!
!
interface FastEthernet0
 switchport access vlan 10
!
interface FastEthernet1
 switchport trunk native vlan 10
 switchport mode trunk
!
interface FastEthernet2
 switchport access vlan 10
 switchport mode trunk
!
interface FastEthernet3
 switchport mode trunk
 shutdown
!
interface FastEthernet4
 ip address 0.0.0.0 255.255.255.128
 ip access-group Internet-inbound-ACL in
 no ip proxy-arp
 ip inspect MYFW out
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 no cdp enable
!
interface Dot11Radio0
 no ip address
 no dot11 extension aironet
 !
 encryption vlan 10 mode ciphers tkip
 !
 ssid Open
 !
 ssid Staff
 !
 mbssid
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0
 54.0
 channel 2412
 station-role root
 no cdp enable
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 arp authorized
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.10
 encapsulation dot1Q 10
 bridge-group 10
 bridge-group 10 subscriber-loop-control
 bridge-group 10 spanning-disabled
 bridge-group 10 block-unknown-source
 no bridge-group 10 source-learning
 no bridge-group 10 unicast-flooding
!
interface Vlan1
 description Guest Network
 ip dhcp client hostname VLAN1
 no ip address
 ip nat inside
 ip virtual-reassembly
 bridge-group 1
 bridge-group 1 spanning-disabled
!
interface Vlan10
 description Internal Network
 no ip address
 ip nat inside
 ip virtual-reassembly
 bridge-group 10
 bridge-group 10 spanning-disabled
!
interface BVI10
 description Bridge to Internal Network
 ip address 10.1.10.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface BVI1
 description Bridge to Guest Network
 ip address 192.168.2.1 255.255.255.0
 ip access-group Guest-ACL in
 ip nat inside
 ip virtual-reassembly
!
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 12.10.49.129
ip route 0.0.0.0 0.0.0.0 173.14.100.22
!
ip http server
ip http secure-server
ip nat inside source list 1 interface FastEthernet4 overload
ip nat inside source static tcp 10.1.10.10 25 0.0.0.0 25 extendable
ip nat inside source static tcp 10.1.10.10 443 0.0.0.0 443 extendable
ip nat inside source static tcp 10.1.10.10 3389 0.0.0.0 3389 extendable
ip nat inside source static tcp 10.1.10.15 5900 0.0.0.0 5900 extendable
!
ip access-list extended Guest-ACL
 deny   ip any 10.1.10.0 0.0.0.255
 permit ip any any
 permit tcp any any eq ftp
ip access-list extended Internet-inbound-ACL
 permit udp any eq bootps any eq bootpc
 permit icmp any any echo
 permit icmp any any echo-reply
 permit icmp any any traceroute
 permit gre any any
 permit esp any any
 permit tcp any any eq smtp
 permit tcp any any eq 443
 permit tcp any any eq 3389
 permit tcp any any eq 5900
!
access-list 1 permit 10.1.10.0 0.0.0.255
access-list 1 permit 192.168.2.0 0.0.0.255
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
bridge 10 protocol ieee
bridge 10 route ip
!
line con 0
 password 7 xxxx
 no modem enable
line aux 0
line vty 0 4
 password 7 xxxx
 transport preferred ssh
!
scheduler max-task-time 5000
end
 
SVBCEdge#

                                  

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231: