The AP config:
dot11 vlan-name Client_VLAN vlan 201
dot11 vlan-name Guest_Internet_VLAN vlan 202
dot11 vlan-name Internal_VLAN vlan 1
dot11 vlan-name Printer_VLAN vlan 200
dot11 vlan-name Private_WIFI_VLAN vlan 203
!
dot11 ssid 230Guest
   vlan 202
   authentication open
   authentication key-management wpa
   wpa-psk ascii 7 14071D62D3E213B27
!
dot11 ssid internal
   vlan 203
   authentication open
   authentication key-management wpa
   wpa-psk ascii 7 090D7E060E003525E526B
dot11 ssid Test
   vlan 1
   authentication open
   authentication key-management wpa
   wpa-psk ascii 7 1148290A195D5D787D65
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 203 mode ciphers tkip
 !
 encryption vlan 202 mode ciphers aes-ccm
 !
 encryption vlan 1 mode ciphers tkip
 !
 ssid 230Guest
 !
 ssid internal
 !
 ssid Test
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.200
 encapsulation dot1Q 200
 no ip route-cache
 bridge-group 200
 bridge-group 200 subscriber-loop-control
 bridge-group 200 block-unknown-source
 no bridge-group 200 source-learning
 no bridge-group 200 unicast-flooding
 bridge-group 200 spanning-disabled
interface Dot11Radio0.201
 encapsulation dot1Q 201
 no ip route-cache
 bridge-group 201
 bridge-group 201 subscriber-loop-control
 bridge-group 201 block-unknown-source
 no bridge-group 201 source-learning
 no bridge-group 201 unicast-flooding
 bridge-group 201 spanning-disabled
!
interface Dot11Radio0.202
 encapsulation dot1Q 202
 no ip route-cache
 bridge-group 202
 bridge-group 202 subscriber-loop-control
 bridge-group 202 block-unknown-source
 no bridge-group 202 source-learning
 no bridge-group 202 unicast-flooding
 bridge-group 202 spanning-disabled
!
interface Dot11Radio0.203
 encapsulation dot1Q 203
 no ip route-cache
 bridge-group 203
 bridge-group 203 subscriber-loop-control
 bridge-group 203 block-unknown-source
 no bridge-group 203 source-learning
 no bridge-group 203 unicast-flooding
 bridge-group 203 spanning-disabled
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 shutdown
 dfs band 3 block
 speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
 channel dfs
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled

interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 hold-queue 160 in
!
interface FastEthernet0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface FastEthernet0.200
 encapsulation dot1Q 200
 no ip route-cache
 bridge-group 200
 no bridge-group 200 source-learning
 bridge-group 200 spanning-disabled
!
interface FastEthernet0.201
 encapsulation dot1Q 201
 no ip route-cache
 bridge-group 201
 no bridge-group 201 source-learning
 bridge-group 201 spanning-disabled
!
interface FastEthernet0.202
 encapsulation dot1Q 202
 no ip route-cache
 bridge-group 202
 no bridge-group 202 source-learning
 bridge-group 202 spanning-disabled
!
interface FastEthernet0.203
 encapsulation dot1Q 203
 no ip route-cache
 bridge-group 203
 no bridge-group 203 source-learning
 bridge-group 203 spanning-disabled
!
interface BVI1
 ip address 192.168.10.107 255.255.255.0
 no ip route-cache
!
ip default-gateway 192.168.10.4<-----L3 switch 3750

bridge 1 route ip


I'm stuck, I have no idea what I'm doing wrong, PLEASE HELP :)

Chris Serafin
cserafin@rkon.com
chris@chrisserafin.com