CISCO Wireless AP1242配置实例

!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname AP-1242
!
enable secret 5 $1$cbN0$30mJFtTfO/oY4vCazC16r0
!
ip subnet-zero
!
!
aaa new-model
!
!
aaa group server radius eap_yang
 server 192.168.68.19 auth-port 1645 acct-port 1646
!
aaa authentication login eap_methods group eap_yang
aaa authorization network eap_methods group eap_yang
aaa session-id common
!
dot11 ssid IDC-01
   vlan 67
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa
!
dot11 ssid TEST-1
   vlan 70
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa
!
dot11 ssid TEST-2
   vlan 60
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa
!
dot11 ssid manage
   vlan 68
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa
!
power inline negotiation prestandard source
!
!
username Cisco password XXXXXX
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 60 mode ciphers aes-ccm
 !
 encryption vlan 70 mode ciphers aes-ccm
 !
 encryption vlan 68 mode ciphers aes-ccm
 !
 encryption vlan 67 mode ciphers aes-ccm
 !
 ssid IDC-01
 !
 ssid TEST-1
 !
 ssid TEST-2
 !
 ssid manage
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.60
 encapsulation dot1Q 60
 no ip route-cache
 bridge-group 60
 bridge-group 60 subscriber-loop-control
 bridge-group 60 block-unknown-source
 no bridge-group 60 source-learning
 no bridge-group 60 unicast-flooding
 bridge-group 60 spanning-disabled
!
interface Dot11Radio0.67
 encapsulation dot1Q 67
 no ip route-cache
 bridge-group 67
 bridge-group 67 subscriber-loop-control
 bridge-group 67 block-unknown-source
 no bridge-group 67 source-learning
 no bridge-group 67 unicast-flooding
 bridge-group 67 spanning-disabled
!
interface Dot11Radio0.68
 encapsulation dot1Q 68
 no ip route-cache
 bridge-group 68
 bridge-group 68 subscriber-loop-control
 bridge-group 68 block-unknown-source
 no bridge-group 68 source-learning
 no bridge-group 68 unicast-flooding
 bridge-group 68 spanning-disabled
!
interface Dot11Radio0.70
 encapsulation dot1Q 70
 no ip route-cache
 bridge-group 70
 bridge-group 70 subscriber-loop-control
 bridge-group 70 block-unknown-source
 no bridge-group 70 source-learning
 no bridge-group 70 unicast-flooding
 bridge-group 70 spanning-disabled
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 !
 encryption vlan 60 mode ciphers aes-ccm
 !
 encryption vlan 70 mode ciphers aes-ccm
 !
 encryption vlan 68 mode ciphers aes-ccm
 !
 encryption vlan 67 mode ciphers aes-ccm
 !
 ssid IDC-01
 !
 ssid TEST-1
 !
 ssid TEST-2
 !
 ssid manage
 !
 speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
 station-role root
 l2-filter block-arp
 bridge-group 1
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio1.60
 encapsulation dot1Q 60
 no ip route-cache
 bridge-group 60
 bridge-group 60 subscriber-loop-control
 bridge-group 60 block-unknown-source
 no bridge-group 60 source-learning
 no bridge-group 60 unicast-flooding
 bridge-group 60 spanning-disabled
!
interface Dot11Radio1.67
 encapsulation dot1Q 67
 no ip route-cache
 bridge-group 67
 bridge-group 67 subscriber-loop-control
 bridge-group 67 block-unknown-source
 no bridge-group 67 source-learning
 no bridge-group 67 unicast-flooding
 bridge-group 67 spanning-disabled
!
interface Dot11Radio1.68
 encapsulation dot1Q 68
 no ip route-cache
 bridge-group 68
 bridge-group 68 subscriber-loop-control
 bridge-group 68 block-unknown-source
 no bridge-group 68 source-learning
 no bridge-group 68 unicast-flooding
 bridge-group 68 spanning-disabled
!
interface Dot11Radio1.70
 encapsulation dot1Q 70
 no ip route-cache
 bridge-group 70
 bridge-group 70 subscriber-loop-control
 bridge-group 70 block-unknown-source
 no bridge-group 70 source-learning
 no bridge-group 70 unicast-flooding
 bridge-group 70 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface FastEthernet0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface FastEthernet0.60
 encapsulation dot1Q 60
 no ip route-cache
 bridge-group 60
 no bridge-group 60 source-learning
 bridge-group 60 spanning-disabled
!
interface FastEthernet0.67
 encapsulation dot1Q 67
 no ip route-cache
 bridge-group 67
 no bridge-group 67 source-learning
 bridge-group 67 spanning-disabled
!
interface FastEthernet0.68
 encapsulation dot1Q 68
 no ip route-cache
 bridge-group 68
 no bridge-group 68 source-learning
 bridge-group 68 spanning-disabled
!
interface FastEthernet0.70
 encapsulation dot1Q 70
 no ip route-cache
 bridge-group 70
 no bridge-group 70 source-learning
 bridge-group 70 spanning-disabled
!
interface BVI1
 ip address 172.16.10.3 255.255.255.0
 no ip route-cache
!
ip default-gateway 172.16.10.2
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
radius-server host 192.168.68.19 auth-port 1645 acct-port 1646 key XXXXXXX
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
 transport preferred all
 transport output all
line vty 0 4
 password XXXXXX
 transport preferred all
 transport input all
 transport output all
line vty 5 15
 transport preferred all
 transport input all
 transport output all
!
end