enable secret 5 $1$HjA4$oPJCWIKOz3l38CTLa/5vR1
enable password cisco
!
aaa new-model
!
!
!
!
!
!
!
aaa session-id common
!
memory-size iomem 10
service-module wlan-ap 0 bootimage autonomous
crypto pki token default removal timeout 0
!
!
ip source-route
!
!
ip dhcp excluded-address 10.10.11.1
ip dhcp excluded-address 10.10.11.4
!
ip dhcp pool locallan
network 10.10.11.0 255.255.255.0
dns-server xxx.xxx.xxx.xxx
default-router 10.10.11.1
!
!
ip cef
no ip domain lookup
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid CISCO881W-GN-A-K9 sn FTX1522021R
license boot module c880-data level advipservices
!
!
username cisco password 0 cisco
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
description to ISP
ip address dhcp
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
interface wlan-ap0
description Service module interface to manage the embedded AP
ip unnumbered Vlan10
arp timeout 0
!
interface Wlan-GigabitEthernet0
description uplink to AP
switchport trunk native vlan 10
switchport mode trunk
no ip address
!
interface Vlan1
no ip address
!
interface Vlan10
description homeap
ip address 10.10.11.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list NAT_ACL interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 10.10.10.1 254
!
ip access-list extended NAT_ACL
permit ip 10.10.11.0 0.0.0.255 any
!
logging esm config
!
!
!
!
!
!
!
control-plane
!
!
line con 0
logging synchronous level 2
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
line vty 0 4
password cisco
transport input ssh
!
exception data-corruption buffer truncate
end
Configuration for internal AP
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ap
!
enable secret 5 $1$2Cfi$vMWphS5CZwL9rEVIlc2Gs0
!
no aaa new-model
no ip domain lookup
!
!
dot11 syslog
dot11 vlan-name vlan10 vlan 10
!
dot11 ssid homeap
vlan 10
authentication open
authentication key-management wpa
guest-mode
mbssid guest-mode
wpa-psk ascii 0 thepassword
!
!
!
username cisco privilege 15 secret 5 $1$6pP2$M0RRt/.WFvF3T8R1kZJ1z1
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 10 mode ciphers tkip
!
ssid homeap
!
antenna gain 0
mbssid
speed basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m8. m9. m10. m11. m12. m13. m14. m15.
station-role root
!
interface Dot11Radio0.10
encapsulation dot1Q 10 native
no ip route-cache
bridge-group 1
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface GigabitEthernet0
description downlink to router
no ip address
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address 0.10.11.4 255.255.255.0
no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip


No comments:
Post a Comment