Hi,
this config should work. Note, that you also need BVI 1 for wlccp. I had make many tests with another BVI as BVI 1 and I can´t recommend it. The AP crashed very often or. needed a reload after the configuration of a new feature.
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xxxxxxxx
!
no logging console
aaa new-model
!
!
aaa authentication login default local
aaa authentication login leapauth group radius
aaa session-id common
enable secret xxxxxxxxx
!
username adm password xxxx
clock timezone gmt 1
clock summer-time gmt+1 recurring last Sun Mar 2:00 last Sun Oct 2:00
ip subnet-zero
no ip domain lookup
ip domain name XXX
ip name-server XXXXX
ip name-server XXXXX
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 200 mode ciphers wep128
!
broadcast-key vlan 200 change 900
!
!
ssid XXXXX
vlan 200
authentication network-eap leapauth
authentication key-management cckm optional
!
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0
rts threshold 2312
power local 5
power client 5
channel 2412
station-role root
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
bridge-group 200 subscriber-loop-control
bridge-group 200 block-unknown-source
no bridge-group 200 source-learning
no bridge-group 200 unicast-flooding
bridge-group 200 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
speed 100
full-duplex
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.100
encapsulation dot1Q 100
no ip route-cache
bridge-group 100
no bridge-group 100 source-learning
bridge-group 100 spanning-disabled
!
interface FastEthernet0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
no bridge-group 200 source-learning
bridge-group 200 spanning-disabled
!
interface BVI1
ip address XXXXXXX 255.255.255.192
no ip route-cache
!
interface BVI100
ip address XXXXXXX 255.255.255.192
no ip route-cache
!
ip default-gateway XXXXXXX
no ip http server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag/ivory/1100
ip radius source-interface BVI100
snmp-server community XXXXXXX RO
snmp-server community XXXXXXX RW
snmp-server enable traps tty
radius-server host XXXXXXX auth-port 1812 acct-port 1813 key XXXXXXX
radius-server host XXXXXXX auth-port 1812 acct-port 1813 key XXXXXXX
radius-server retransmit 3
radius-server deadtime 5
radius-server attribute 32 include-in-access-req format %h
radius-server authorization permit missing Service-Type
bridge 1 route ip
bridge 100 route ip
!
wlccp ap username XXXXXXX password XXXXXXX
banner login ^C
******************************************************************************
* *
* This system is for the use of authorized users only. *
* Individuals using this system without authority, or in *
* excess of their authority, are subject to having all of their *
* activities on this system monitored and recorded by system *
* personnel. *
* *
* Anyone using this system expressly consents to such monitoring *
* and is advised that if such monitoring reveals possible *
* evidence of criminal activity, system personnel may provide the *
* evidence of such monitoring to law enforcement officials. *
* *
******************************************************************************
^C
!
line con 0
session-timeout 10
password XXXXXXX
logging synchronous
line vty 0 4
session-timeout 10
password XXXXXXX
logging synchronous
transport input telnet ssh
line vty 5 15
transport input none
!
ntp clock-period 2860640
ntp server XXXXXXX
end
