Current configuration : 4038 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname 
!
enable secret 5 
!
ip subnet-zero
ip domain name 
!
!
aaa new-model
!
!
aaa group server radius rad_eap
 server <IAS server> auth-port 1812 acct-port 1813
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa group server radius rad_eap1
 server <IAS server> auth-port 1812 acct-port 1813
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods1 group rad_eap1
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
dot11 vlan-name Guest vlan 75
dot11 vlan-name Wireless vlan 90
!
dot11 ssid <ssid1>
   vlan 90
   authentication open eap eap_methods1
   authentication key-management wpa
   mobility network-id 90
!
dot11 ssid <guest ssid>
   vlan 75
   authentication open
   authentication key-management wpa
   wpa-psk ascii 7 
!
!
!
username Cisco password 7 
username <user> privilege 15 password 7 
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 90 mode ciphers tkip
 !
 encryption vlan 75 mode ciphers aes-ccm tkip
 !
 ssid <ssid1>
 !
 ssid <guest ssid>
 !
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
 station-role root
 bridge-group 1
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.75
 encapsulation dot1Q 75
 no ip route-cache
 bridge-group 75
 bridge-group 75 subscriber-loop-control
 bridge-group 75 block-unknown-source
 no bridge-group 75 source-learning
 no bridge-group 75 unicast-flooding
 bridge-group 75 spanning-disabled
!
interface Dot11Radio0.90
 encapsulation dot1Q 90
 no ip route-cache
 bridge-group 90
 bridge-group 90 subscriber-loop-control
 bridge-group 90 block-unknown-source
 no bridge-group 90 source-learning
 no bridge-group 90 unicast-flooding
 bridge-group 90 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface FastEthernet0.1
 encapsulation dot1Q 1
 no ip route-cache
!
interface FastEthernet0.40
 encapsulation dot1Q 40 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface FastEthernet0.75
 encapsulation dot1Q 75
 no ip route-cache
 bridge-group 75
 no bridge-group 75 source-learning
 bridge-group 75 spanning-disabled
!
interface FastEthernet0.90
 encapsulation dot1Q 90
 no ip route-cache
 bridge-group 90
 no bridge-group 90 source-learning
 bridge-group 90 spanning-disabled
!
interface BVI1
 ip address <ip> 255.255.255.0
 no ip route-cache
!
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
!
radius-server attribute 32 include-in-access-req format %h
radius-server host <IAS Server> auth-port 1812 acct-port 1813 key 7 
radius-server vsa send accounting
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
!
end