version 12.4
no service pad
service timestamps debug datetime localtime year
service timestamps log datetime localtime year
service password-encryption
!
hostname <YOUR WIFI NAME>
!
enable secret <YOUR INCREDIBLE SECRET PASSWORD>
!
aaa new-model
!
!
aaa group server radius rad_mac
!
aaa group server radius rad_admin
!
aaa group server tacacs+ tac_admin
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local 
aaa authorization network default local 
!
aaa session-id common
clock timezone GMT+1 1
clock summer-time GMT+1 recurring last Sun Mar 2:00 last Sun Oct 3:00
ip domain name <YOUR LOCAL DOMAIN NAME>
ip name-server 8.8.8.8
ip name-server 8.8.4.4
!
!
dot11 mbssid
dot11 syslog
dot11 vlan-name norther vlan 1
dot11 vlan-name norther-guests vlan 2
!
dot11 ssid <YOUR SSID 1>
   vlan 1
   authentication open 
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii <YOUR WPA CODE>
!
dot11 ssid <YOUR-guests SSID>
   vlan 2
   authentication open 
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii <WPA CODE>
!
dot11 arp-cache
!
!
username <YOUR USERNAME> privilege 15 view root secret <YOUR PASSWORD>
!
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 2 mode ciphers aes-ccm 
 !
 encryption vlan 1 mode ciphers aes-ccm 
 !
 ssid <YOUR SSID 1>
 !
 ssid <YOUR-guests SSID>
 !
 station-role root access-point
 infrastructure-client
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio0.2
 encapsulation dot1Q 2
 no ip route-cache
 bridge-group 2
 bridge-group 2 subscriber-loop-control
 bridge-group 2 block-unknown-source
 no bridge-group 2 source-learning
 no bridge-group 2 unicast-flooding
 bridge-group 2 spanning-disabled
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 !
 encryption vlan 1 mode ciphers aes-ccm 
 !
 encryption vlan 2 mode ciphers aes-ccm 
 !
 ssid norther
 !
 ssid norther-guests
 !
 no dfs band block
 channel dfs
 station-role root
!
interface Dot11Radio1.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio1.2
 encapsulation dot1Q 2
 no ip route-cache
 bridge-group 2
 bridge-group 2 subscriber-loop-control
 bridge-group 2 block-unknown-source
 no bridge-group 2 source-learning
 no bridge-group 2 unicast-flooding
 bridge-group 2 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface FastEthernet0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
!
interface FastEthernet0.2
 encapsulation dot1Q 2
 no ip route-cache
 bridge-group 2
 no bridge-group 2 source-learning
 bridge-group 2 spanning-disabled
!
interface BVI1
 ip address <YOUR IP ADDRESS + Subnetmask>
 no ip route-cache
!
ip default-gateway <YOUR GATEWAY>
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
 privilege level 15
line vty 0 4
 exec-timeout 0 0
 privilege level 15
 password <Your Password>
 transport input telnet ssh
!
sntp server <NTP SERVER >
sntp broadcast client
end