!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname TSE-AP-CISCO
!
enable secret 5 $1$ElTM$Iyla7JBKKyQJrf3cv7yUz1
!
ip subnet-zero
ip domain name tse.com
ip name-server 192.168.30.1
!
!
no aaa new-model
dot11 vlan-name Firmenleitung vlan 20
dot11 vlan-name Firmennetzwerk vlan 10
dot11 vlan-name Netzwerkverwaltung vlan 99
dot11 vlan-name Server vlan 30
!
dot11 ssid TSE-AP-02-VLAN10
   vlan 10
   authentication open 
   authentication key-management wpa optional
   mbssid guest-mode
   wpa-psk ascii 7 00300023411F59565E73
!
dot11 ssid TSE-AP-02-VLAN20
   vlan 20
   authentication open 
   authentication key-management wpa optional
   mbssid guest-mode
   wpa-psk ascii 7 053F152A64081C594857
!
!
!
username Cisco password 7 13261E010803
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption mode ciphers aes-ccm tkip wep128 
 !
 encryption vlan 10 mode ciphers aes-ccm tkip wep128 
 !
 encryption vlan 99 mode ciphers aes-ccm tkip wep128 
 !
 encryption vlan 20 mode ciphers aes-ccm tkip wep128 
 !
 ssid TSE-AP-02-VLAN10
 !
 ssid TSE-AP-02-VLAN20
 !
 mbssid
 speed basic-1.0 basic-2.0 basic-5.5 basic-6.0 basic-9.0 basic-11.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
 power local cck 1
 power local ofdm 1
 no power client local
 power client 1
 station-role root
!
interface Dot11Radio0.10
 encapsulation dot1Q 10
 no ip route-cache
 bridge-group 10
 bridge-group 10 subscriber-loop-control
 bridge-group 10 block-unknown-source
 no bridge-group 10 source-learning
 no bridge-group 10 unicast-flooding
 bridge-group 10 spanning-disabled
!
interface Dot11Radio0.20
 encapsulation dot1Q 20
 no ip route-cache
 bridge-group 20
 bridge-group 20 subscriber-loop-control
 bridge-group 20 block-unknown-source
 no bridge-group 20 source-learning
 no bridge-group 20 unicast-flooding
 bridge-group 20 spanning-disabled
!
interface Dot11Radio0.30
 encapsulation dot1Q 30
 no ip route-cache
 bridge-group 30
 bridge-group 30 subscriber-loop-control
 bridge-group 30 block-unknown-source
 no bridge-group 30 source-learning
 no bridge-group 30 unicast-flooding
 bridge-group 30 spanning-disabled
!
interface Dot11Radio0.99
 encapsulation dot1Q 99 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 hold-queue 160 in
!
interface FastEthernet0.10
 encapsulation dot1Q 10
 no ip route-cache
 bridge-group 10
 no bridge-group 10 source-learning
 bridge-group 10 spanning-disabled
!
interface FastEthernet0.20
 encapsulation dot1Q 20
 no ip route-cache
 bridge-group 20
 no bridge-group 20 source-learning
 bridge-group 20 spanning-disabled
!
interface FastEthernet0.30
 encapsulation dot1Q 30
 no ip route-cache
 bridge-group 30
 no bridge-group 30 source-learning
 bridge-group 30 spanning-disabled
!
interface FastEthernet0.99
 encapsulation dot1Q 99 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface BVI1
 ip address 192.168.99.5 255.255.255.0
 no ip route-cache
!
ip default-gateway 192.168.99.1
no ip http server
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
access-list 111 permit tcp any any neq telnet
!
control-plane
!
bridge 1 route ip
!
!
wlccp ap username Cisco password 7 096F471A1A0A
!
line con 0
 access-class 111 in
line vty 0 4
 access-class 111 in
 login local
!
end