!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname cisco1100-ap
!
enable secret 5 $1$9DIa$Ikb/bpFqK/KVKUnFOQmXh.
!
ip subnet-zero
ip domain name cisco-nac
ip name-server 45.200.1.2
!
!
aaa new-model
!
!
aaa group server radius rad_eap
 server 45.200.1.74 auth-port 1812 acct-port 1813
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local 
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
!
dot11 ssid ilabs-nac-cisco
   vlan 15
   authentication open eap eap_methods 
   authentication key-management wpa
!
power inline negotiation prestandard source
!
!
username Cisco password 7 12170C03465F020529
username Admin privilege 15 password 7 082F455A5D4D0B1611
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 15 mode ciphers tkip 
 !
 encryption vlan 11 mode ciphers tkip 
 !
 encryption vlan 12 mode ciphers tkip 
 !
 encryption vlan 14 mode ciphers tkip 
 !
 encryption vlan 16 mode ciphers tkip 
 !
 encryption vlan 17 mode ciphers tkip 
 !
 encryption vlan 13 mode ciphers tkip 
 !
 ssid ilabs-nac-cisco
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
 bridge-group 1
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.11
 encapsulation dot1Q 11
 no ip route-cache
 bridge-group 11
 bridge-group 11 subscriber-loop-control
 bridge-group 11 block-unknown-source
 no bridge-group 11 source-learning
 no bridge-group 11 unicast-flooding
 bridge-group 11 spanning-disabled
!
interface Dot11Radio0.12
 encapsulation dot1Q 12
 no ip route-cache
 bridge-group 12
 bridge-group 12 subscriber-loop-control
 bridge-group 12 block-unknown-source
 no bridge-group 12 source-learning
 no bridge-group 12 unicast-flooding
 bridge-group 12 spanning-disabled
!
interface Dot11Radio0.13
 encapsulation dot1Q 13
 no ip route-cache
 bridge-group 13
 bridge-group 13 subscriber-loop-control
 bridge-group 13 block-unknown-source
 no bridge-group 13 source-learning
 no bridge-group 13 unicast-flooding
 bridge-group 13 spanning-disabled
!
interface Dot11Radio0.14
 encapsulation dot1Q 14
 no ip route-cache
 bridge-group 14
 bridge-group 14 subscriber-loop-control
 bridge-group 14 block-unknown-source
 no bridge-group 14 source-learning
 no bridge-group 14 unicast-flooding
 bridge-group 14 spanning-disabled
!
interface Dot11Radio0.15
 encapsulation dot1Q 15
 no ip route-cache
 bridge-group 15
 bridge-group 15 subscriber-loop-control
 bridge-group 15 block-unknown-source
 no bridge-group 15 source-learning
 no bridge-group 15 unicast-flooding
 bridge-group 15 spanning-disabled
!
interface Dot11Radio0.16
 encapsulation dot1Q 16
 no ip route-cache
 bridge-group 16
 bridge-group 16 subscriber-loop-control
 bridge-group 16 block-unknown-source
 no bridge-group 16 source-learning
 no bridge-group 16 unicast-flooding
 bridge-group 16 spanning-disabled
!
interface Dot11Radio0.17
 encapsulation dot1Q 17
 no ip route-cache
 bridge-group 17
 bridge-group 17 subscriber-loop-control
 bridge-group 17 block-unknown-source
 no bridge-group 17 source-learning
 no bridge-group 17 unicast-flooding
 bridge-group 17 spanning-disabled
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 shutdown
 !
 encryption vlan 11 mode ciphers tkip 
 !
 encryption vlan 12 mode ciphers tkip 
 !
 encryption vlan 14 mode ciphers tkip 
 !
 encryption vlan 16 mode ciphers tkip 
 !
 encryption vlan 17 mode ciphers tkip 
 !
 encryption vlan 13 mode ciphers tkip 
 dfs band 3 block
 speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
 channel dfs
 station-role root
 bridge-group 1
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio1.11
 encapsulation dot1Q 11
 no ip route-cache
 bridge-group 11
 bridge-group 11 subscriber-loop-control
 bridge-group 11 block-unknown-source
 no bridge-group 11 source-learning
 no bridge-group 11 unicast-flooding
 bridge-group 11 spanning-disabled
!
interface Dot11Radio1.12
 encapsulation dot1Q 12
 no ip route-cache
 bridge-group 12
 bridge-group 12 subscriber-loop-control
 bridge-group 12 block-unknown-source
 no bridge-group 12 source-learning
 no bridge-group 12 unicast-flooding
 bridge-group 12 spanning-disabled
!
interface Dot11Radio1.13
 encapsulation dot1Q 13
 no ip route-cache
 bridge-group 13
 bridge-group 13 subscriber-loop-control
 bridge-group 13 block-unknown-source
 no bridge-group 13 source-learning
 no bridge-group 13 unicast-flooding
 bridge-group 13 spanning-disabled
!
interface Dot11Radio1.14
 encapsulation dot1Q 14
 no ip route-cache
 bridge-group 14
 bridge-group 14 subscriber-loop-control
 bridge-group 14 block-unknown-source
 no bridge-group 14 source-learning
 no bridge-group 14 unicast-flooding
 bridge-group 14 spanning-disabled
!
interface Dot11Radio1.15
 encapsulation dot1Q 15
 no ip route-cache
 bridge-group 15
 bridge-group 15 subscriber-loop-control
 bridge-group 15 block-unknown-source
 no bridge-group 15 source-learning
 no bridge-group 15 unicast-flooding
 bridge-group 15 spanning-disabled
!
interface Dot11Radio1.16
 encapsulation dot1Q 16
 no ip route-cache
 bridge-group 16
 bridge-group 16 subscriber-loop-control
 bridge-group 16 block-unknown-source
 no bridge-group 16 source-learning
 no bridge-group 16 unicast-flooding
 bridge-group 16 spanning-disabled
!
interface Dot11Radio1.17
 encapsulation dot1Q 17
 no ip route-cache
 bridge-group 17
 bridge-group 17 subscriber-loop-control
 bridge-group 17 block-unknown-source
 no bridge-group 17 source-learning
 no bridge-group 17 unicast-flooding
 bridge-group 17 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface FastEthernet0.11
 encapsulation dot1Q 11
 no ip route-cache
 bridge-group 11
 no bridge-group 11 source-learning
 bridge-group 11 spanning-disabled
!
interface FastEthernet0.12
 encapsulation dot1Q 12
 no ip route-cache
 bridge-group 12
 no bridge-group 12 source-learning
 bridge-group 12 spanning-disabled
!
interface FastEthernet0.13
 encapsulation dot1Q 13
 no ip route-cache
 bridge-group 13
 no bridge-group 13 source-learning
 bridge-group 13 spanning-disabled
!
interface FastEthernet0.14
 encapsulation dot1Q 14
 no ip route-cache
 bridge-group 14
 no bridge-group 14 source-learning
 bridge-group 14 spanning-disabled
!
interface FastEthernet0.15
 encapsulation dot1Q 15
 no ip route-cache
 bridge-group 15
 no bridge-group 15 source-learning
 bridge-group 15 spanning-disabled
!
interface FastEthernet0.16
 encapsulation dot1Q 16
 no ip route-cache
 bridge-group 16
 no bridge-group 16 source-learning
 bridge-group 16 spanning-disabled
!
interface FastEthernet0.17
 encapsulation dot1Q 17
 no ip route-cache
 bridge-group 17
 no bridge-group 17 source-learning
 bridge-group 17 spanning-disabled
!
interface FastEthernet0.1000
 encapsulation dot1Q 1000
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface BVI1
 ip address 45.200.1.42 255.255.255.0
 no ip route-cache
!
ip default-gateway 45.200.1.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1 
radius-server attribute 32 include-in-access-req format %h
radius-server host 45.200.1.74 auth-port 1812 acct-port 1813 key 7 06080635181A071806
radius-server vsa send accounting
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
!
end