!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname MultitelWifi
!
enable secret 5 $1$G4Kr$k8Zl.Bsy7seFqx/F/CvKI0
!
aaa new-model
!
!
aaa group server radius rad_eap
 server 1.1.10.2 auth-port 1812 acct-port 1813
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local 
aaa accounting network acct_methods start-stop group rad_acct
!
aaa session-id common
!
!
dot11 vlan-name InsecureVLAN vlan 10
dot11 vlan-name NativeVLAN vlan 1
dot11 vlan-name SecureVLAN vlan 20
!
dot11 ssid MultitelWifi-Public
   vlan 10
   authentication open 
   mbssid guest-mode
!
dot11 ssid MultitelWifi-Secure
   vlan 20
   authentication open eap eap_methods 
   authentication key-management wpa version 2
   mbssid guest-mode
!
!
!
username Cisco password 7 0802455D0A16
username netwerktech password 7 1436021B090864182538
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 20 mode ciphers aes-ccm 
 !
 ssid MultitelWifi-Public
 !
 ssid MultitelWifi-Secure
 !
 mbssid
 station-role root access-point
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.10
 encapsulation dot1Q 10
 ip helper-address 1.1.10.5
 no ip route-cache
 bridge-group 10
 bridge-group 10 subscriber-loop-control
 bridge-group 10 block-unknown-source
 no bridge-group 10 source-learning
 no bridge-group 10 unicast-flooding
 bridge-group 10 spanning-disabled
!
interface Dot11Radio0.20
 encapsulation dot1Q 20
 ip helper-address 1.1.10.5
 no ip route-cache
 bridge-group 20
 bridge-group 20 subscriber-loop-control
 bridge-group 20 block-unknown-source
 no bridge-group 20 source-learning
 no bridge-group 20 unicast-flooding
 bridge-group 20 spanning-disabled
!
interface FastEthernet0
 no ip address
 ip helper-address 1.1.10.5
 no ip route-cache
!
interface FastEthernet0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface FastEthernet0.10
 encapsulation dot1Q 10
 ip helper-address 1.1.10.5
 no ip route-cache
 bridge-group 10
 no bridge-group 10 source-learning
 bridge-group 10 spanning-disabled
!
interface FastEthernet0.20
 encapsulation dot1Q 20
 ip helper-address 1.1.10.5
 no ip route-cache
 bridge-group 20
 no bridge-group 20 source-learning
 bridge-group 20 spanning-disabled
!
interface BVI1
 ip address 1.2.0.50 255.255.255.0
 no ip route-cache
!
ip default-gateway 1.2.0.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1 
radius-server local
!
radius-server attribute 32 include-in-access-req format %h
radius-server host 1.1.10.2 auth-port 1812 acct-port 1813 key 7 11280915121E453F053A
radius-server vsa send accounting
bridge 1 route ip
!
!
!
line con 0
line vty 5 15
!
end