It's back to killing everything again, I'm not sure why it delayed, but after I configured another Aironet two floors above this one, it all of a sudden brought my laptop here I'm testing with down. I find that very odd. I really don't understand why this is so complicated, when its a simple block of a MAC address.
Here is the configuration after following the instructions from the links above.
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname AP-1stFlrSouthside
!
no logging console
enable secret 5 $1$y1.u$cgb0SR6.PJcu.04NoiDGB0
!
aaa new-model
!
!
aaa group server radius rad_eap
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
!
aaa session-id common
ip domain name cyberdyne.local
!
!
dot11 association mac-list 701
dot11 syslog
!
dot11 ssid GUEST
vlan 160
authentication open
authentication key-management wpa version 2
wpa-psk ascii 7 083649420A160812401D0D0A3E2A232D
!
dot11 ssid Cyberdyne
vlan 150
authentication open
authentication key-management wpa version 2
guest-mode
mbssid guest-mode
infrastructure-ssid optional
wpa-psk ascii 7 02570A4D02120E354541074B554643
!
!
!
username Cisco password 7 13094406065F5524
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 150 mode ciphers aes-ccm tkip
!
encryption vlan 160 mode ciphers aes-ccm tkip
!
ssid GUEST
!
ssid Cyberdyne
!
mbssid
station-role root
l2-filter bridge-group-acl
!
interface Dot11Radio0.150
encapsulation dot1Q 150 native
no ip route-cache
bridge-group 1
bridge-group 1 input-address-list 701
bridge-group 1 output-address-list 701
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.160
encapsulation dot1Q 160
no ip route-cache
bridge-group 160
bridge-group 160 subscriber-loop-control
bridge-group 160 block-unknown-source
no bridge-group 160 source-learning
no bridge-group 160 unicast-flooding
bridge-group 160 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
l2-filter bridge-group-acl
!
interface FastEthernet0.150
encapsulation dot1Q 150 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.160
encapsulation dot1Q 160
no ip route-cache
bridge-group 160
no bridge-group 160 source-learning
bridge-group 160 spanning-disabled
!
interface BVI1
ip address 192.168.150.21 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.150.2
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
access-list 701 deny 001f.e18a.cf8b 0000.0000.0000
access-list 701 deny 0000.0000.0000 ffff.ffff.ffff
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 route ip
!
!
!
line con 0
exec-timeout 60 0
password 7 031008190B5E2F4D1F
line vty 0 4
exec-timeout 60 0
password 7 111D4A171A43050D55
line vty 5 15
password 7 13114400065D0A2B7A
!
end
