Cisco: AIR-AP1131AG-A-K9

SCHEMA:  ISP <-> Router with DHCP <-> CISCO WIFI <-> Clients

Cisco configuration (WPA2):

wifi.net#sh run
 Building configuration...

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
Current configuration : 2181 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service dhcp
!
hostname cisco.local
!
logging rate-limit console 9
logging console informational
enable secret 5 <pass here>
!
aaa new-model
!
!
!
aaa session-id common
clock timezone Moscow 3
ip domain name local
!
!
dot11 syslog
!
dot11 ssid alter.wifi
   authentication open
   authentication key-management wpa version 2
   guest-mode
   wpa-psk ascii 7 <key here>
!
power inline negotiation prestandard source
!
!
username alter password 7 <key here>
!
!
ip ssh authentication-retries 5
ip ssh version 2
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption mode ciphers aes-ccm tkip
 !        
 ssid alter.wifi
 !        
 power client 20
 station-role root
 no cdp enable
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!        
interface Dot11Radio1
 no ip address
 no ip route-cache
 shutdown
 dfs band 3 block
 channel dfs
 station-role root
 no cdp enable
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!        
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 no cdp enable
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!        
interface BVI1
 ip address dhcp
 no ip route-cache
!        
no ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
logging history debugging
logging trap debugging
logging facility local6
logging 172.16.0.1
snmp-server community secname RO
no cdp run
bridge 1 route ip
!        
!        
!        
line con 0
line vty 0 4
 privilege level 15
 logging synchronous
 transport input ssh
!        
end