Hi George,
I just attach my root&non root confit ur advise and comment pls..Below is root Bridge Config ;
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname 1300-RB
!
enable secret 5 $1$9iC5$OM9nYW3qhAg/kSReGo33J1
!
ip subnet-zero
!
!
aaa new-model
!
!
aaa group server radius rad_eap
server 192.168.5.80 auth-port 1812 acct-port 1813
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
server 192.168.5.80 auth-port 1812 acct-port 1813
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
!
aaa group server tacacs+ tac_admin
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa group server radius rad_eap1
server 192.168.5.80 auth-port 1812 acct-port 1813
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods1 group rad_eap1
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa cache profile admin_cache
all
!
aaa session-id common
dot11 activity-timeout client default 6000 maximum 7000
dot11 activity-timeout bridge default 6000 maximum 7000
!
dot11 ssid ygnict
authentication network-eap eap_methods1
authentication client username 1300_NRB password 7 1531021F0725
guest-mode
infrastructure-ssid
!
!
!
username Cisco privilege 15 password 7 013008014F0A020201141E5021
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption key 1 size 40bit 7 517A1503A1DC transmit-key
encryption mode ciphers wep40
!
ssid ygnict
!
no short-slot-time
speed basic-1.0 basic-2.0 basic-5.5 basic-6.0 basic-9.0 basic-11.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
no power client local
power client 100
power local cck 100
power local ofdm 30
no preamble-short
station-role root bridge
cca 75
concatenation
distance 11
antenna receive right
antenna transmit right
antenna gain 12
infrastructure-client
bridge-group 1
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
hold-queue 80 in
!
interface BVI1
ip address 192.168.5.80 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.5.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
!
radius-server local
no authentication eapfast
no authentication mac
nas 192.168.5.80 key 7 032752180500
user 1300_NRB nthash 7 0026452350085E575673181B514D5C34402958257379710E67147B43244E5A5507
!
radius-server attribute 32 include-in-access-req format %h
radius-server host 192.168.5.80 auth-port 1812 acct-port 1813 key 7 032752180500
radius-server vsa send accounting
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
line vty 5 15
!
end
Then Below is NON_Root Bridge config :
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname 1300_NRB
!
enable secret 5 $1$1NhR$Sjmq7FmlDlyDDc.62cHLv1
!
ip subnet-zero
!
!
aaa new-model
!
!
aaa group server radius rad_eap
server 192.168.5.80 auth-port 1812 acct-port 1813
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
server 192.168.5.80 auth-port 1812 acct-port 1813
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa group server radius rad_eap1
server 192.168.5.80 auth-port 1812 acct-port 1813
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods1 group rad_eap1
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
!
dot11 ssid ygnict
authentication network-eap eap_methods1
authentication client username 1300_NRB password 7 0802455D0A16
guest-mode
infrastructure-ssid
!
!
!
username Cisco password 7 01300F175804
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption key 1 size 40bit 7 A826F212F682 transmit-key
encryption mode ciphers wep40
!
ssid ygnict
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 basic-54.0
power local ofdm 20
no preamble-short
station-role non-root bridge
antenna receive right
antenna transmit right
antenna gain 14
bridge-group 1
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
hold-queue 80 in
!
interface BVI1
ip address 192.168.5.81 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.5.80
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
!
snmp-server community defaultCommunity RW
radius-server local
no authentication eapfast
no authentication mac
nas 192.168.5.80 key 7 106D000A0618
user 1300_NRB nthash 7 1435442E58577F7A7D7A67607A475E35512302780101012857394F097B0F0A0604
!
radius-server attribute 32 include-in-access-req format %h
radius-server host 192.168.5.80 auth-port 1812 acct-port 1813 key 7 032752180500
radius-server vsa send accounting
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
!
end
