!
! Last configuration change at 17:56:41 GMT Mon Oct 8 2007 by inno
! NVRAM config last updated at 17:56:41 GMT Mon Oct 8 2007 by inno
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname inno-wifi2
!
!
clock timezone GMT 1
ip subnet-zero
ip domain name inno-wifi2.innovaphone.sifi
!
!
aaa new-model
!
!
aaa group server radius rad_eap
 server 172.16.16.123 auth-port 1812 acct-port 1813
!
aaa group server radius rad_mac
!
aaa group server radius rad_acct
!
aaa group server radius rad_admin
 cache expiry 1
 cache authorization profile admin_cache
 cache authentication profile admin_cache
!
aaa group server tacacs+ tac_admin
 cache expiry 1
 cache authorization profile admin_cache
 cache authentication profile admin_cache
!
aaa group server radius rad_pmip
!
aaa group server radius dummy
!
aaa group server radius rad_eap1
 server 172.16.16.123 auth-port 1812 acct-port 1813
!
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods1 group rad_eap1
aaa authorization exec default local 
aaa accounting network acct_methods start-stop group rad_acct
aaa cache profile admin_cache
 all
!
aaa session-id common
dot11 vlan-name 172er vlan 1
!
dot11 ssid dev
   vlan 1
   authentication open eap eap_methods1 
   authentication network-eap eap_methods1 
   authentication key-management wpa
   infrastructure-ssid optional
!
!
!
username inno privilege 15 password 7 050F5208
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption key 1 size 128bit 7 91F773CFC1A7A2F871F6EE30F422
 encryption key 2 size 128bit 7 91F773CFC1A7A2F871F6EE30F422 transmit-key
 encryption mode ciphers wep128 
 !
 encryption vlan 1 mode ciphers tkip 
 !
 ssid dev
 !
 speed basic-1.0 basic-2.0 basic-5.5 basic-11.0
 power local 20
 no power client local
 power client 30
 channel 2472
 station-role root
 antenna receive right
 antenna transmit right
 world-mode dot11d country DE both
!
interface Dot11Radio0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 hold-queue 160 in
!
interface FastEthernet0.1
 encapsulation dot1Q 1 native
 no ip route-cache
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface BVI1
 ip address dhcp client-id FastEthernet0
 no ip route-cache
!
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1 
!
logging trap debugging
logging facility daemon
snmp-server view dot11view ieee802dot11 included
snmp-server community public RO
snmp-server location Eingang
snmp-server contact kbr@innovaphone.com
snmp-server chassis-id AP1200 Eingang
radius-server local
  no authentication eapfast
  no authentication leap
  no authentication mac
!
radius-server attribute 32 include-in-access-req format %h
radius-server host 172.16.16.123 auth-port 1812 acct-port 1813 key 7 06071F6C1D1C5A4D
radius-server vsa send accounting
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
line vty 5 15
!
sntp server 172.16.0.10
sntp broadcast client
end