Cisco Aironet 1130AG Access Point (WPA2 Setup)

interface gig 0 
no ip address
no ip route-cache
duplex auto
speed auto
 
interface gig 0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
 
interface gig 0.10
encapsulation dot1Q 300
no ip route-cache
bridge-group 10
no bridge-group 10 source-learning
bridge-group 10 spanning-disabled
hostname MyWAP
 
interface BVI1
ip address x.x.x.x 255.255.248.0
ip default-gateway x.x.x.x
aaa new-model
radius-server host x.x.x.x auth-port 1812 acct-port 1813 key MyRadiusKey
aaa group server radius rad_eap
server x.x.x.x auth-port 1812 acct-port 1813
aaa cache profile admin_cache
all
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
aaa group server tacacs+ tac_admin
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication enable default group tacacs+ enable
aaa accounting network acct_methods start-stop group rad_acct
 
dot11 ssid Private
vlan 1
authentication open eap eap_methods
authentication key-management wpa
mbssid guest-mode
infrastructure-ssid optional
 
dot11 ssid Public
vlan 300
authentication open
authentication key-management wpa
mbssid guest-mode
wpa-psk ascii [EnterYourWPA-PSK_Here]
 
interface Dot11Radio 0
no ip address
encryption vlan 1 mode ciphers tkip
encryption vlan 300 mode ciphers tkip
station-role root
 
interface Dot11Radio 0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
bridge-group 10 spanning-disabled
 
interface Dot11Radio 0
mbssid
ssid Private
ssid Public
no shutdown

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91: