! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname tcg-cisco-ap ! enable secret 5 $1$QOgA$FV7pJnMSDuOP8579Oz.ui0 ! ip subnet-zero ip domain name ietf65.ietf.org ip name-server 130.129.16.33 ! ! aaa new-model ! ! aaa group server radius rad_eap server 45.200.1.71 auth-port 1812 acct-port 1813 ! aaa group server radius rad_mac ! aaa group server radius rad_acct server 45.200.1.71 auth-port 1812 acct-port 1813 ! aaa group server radius rad_admin ! aaa group server tacacs+ tac_admin ! aaa group server radius rad_pmip ! aaa group server radius dummy ! aaa authentication login eap_methods group rad_eap aaa authentication login mac_methods local aaa authorization exec default local aaa accounting network acct_methods start-stop group rad_acct aaa session-id common dot11 vlan-name tcg_failure vlan 31 dot11 vlan-name tcg_success vlan 30 ! dot11 ssid ILABSTCGCISCO vlan 31 authentication open eap eap_methods authentication key-management wpa accounting acct_methods guest-mode ! ! ! username Cisco password 7 047802150C2E username admin privilege 15 password 7 130B1611050D077A7D ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache shutdown ! encryption vlan 30 mode ciphers tkip ! encryption vlan 31 mode ciphers tkip ! broadcast-key vlan 30 change 600 capability-change ! broadcast-key vlan 31 change 600 membership-termination capability-change ! ! ssid ILABSTCGCISCO ! speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 station-role root bridge-group 1 bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio0.30 encapsulation dot1Q 30 no ip route-cache bridge-group 30 bridge-group 30 subscriber-loop-control bridge-group 30 block-unknown-source no bridge-group 30 source-learning no bridge-group 30 unicast-flooding bridge-group 30 spanning-disabled ! interface Dot11Radio0.31 encapsulation dot1Q 31 no ip route-cache bridge-group 31 bridge-group 31 subscriber-loop-control bridge-group 31 block-unknown-source no bridge-group 31 source-learning no bridge-group 31 unicast-flooding bridge-group 31 spanning-disabled ! interface Dot11Radio1 no ip address no ip route-cache ! encryption vlan 30 mode ciphers tkip ! encryption vlan 31 mode ciphers tkip ! broadcast-key vlan 30 change 600 capability-change ! broadcast-key vlan 31 change 600 membership-termination capability-change ! ! ssid ILABSTCGCISCO ! speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0 power local 20 no power client local power client 20 station-role root bridge-group 1 bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio1.30 encapsulation dot1Q 30 no ip route-cache bridge-group 30 bridge-group 30 subscriber-loop-control bridge-group 30 block-unknown-source no bridge-group 30 source-learning no bridge-group 30 unicast-flooding bridge-group 30 spanning-disabled ! interface Dot11Radio1.31 encapsulation dot1Q 31 no ip route-cache bridge-group 31 bridge-group 31 subscriber-loop-control bridge-group 31 block-unknown-source no bridge-group 31 source-learning no bridge-group 31 unicast-flooding bridge-group 31 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled hold-queue 160 in ! interface FastEthernet0.30 encapsulation dot1Q 30 no ip route-cache bridge-group 30 no bridge-group 30 source-learning bridge-group 30 spanning-disabled ! interface FastEthernet0.31 encapsulation dot1Q 31 no ip route-cache bridge-group 31 no bridge-group 31 source-learning bridge-group 31 spanning-disabled ! interface BVI1 ip address 45.200.1.56 255.255.255.0 no ip route-cache ! ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ip radius source-interface BVI1 ! logging 45.200.1.4 radius-server attribute 32 include-in-access-req format %h radius-server host 45.200.1.71 auth-port 1812 acct-port 1813 key 7 011E1F175E08140A35 radius-server host 45.200.1.4 auth-port 1812 acct-port 1813 key 7 151F121F012939213C radius-server vsa send accounting ! control-plane ! bridge 1 route ip ! ! ! line con 0 line vty 0 4 ! end