no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname [NOME DO AP]
!
logging rate-limit console 9
enable secret 5 
!
aaa new-model
!
!
aaa group server radius rad_eap
 server 200.144.188.140 auth-port 1812 acct-port 1813
 server 200.144.188.141 auth-port 1812 acct-port 1813
!
aaa group server radius rad_acct
 server 200.144.188.140 auth-port 1812 acct-port 1813
 server 200.144.188.141 auth-port 1812 acct-port 1813
!
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local 
aaa accounting network acct_methods start-stop group rad_acct
!
aaa session-id common
clock timezone -0300 -3
ip domain name imt.usp.br
ip name-server 143.107.253.3
ip name-server 143.107.253.5
!
!
dot11 syslog
!
dot11 ssid USPnet
   vlan 100
   authentication open 
   mbssid guest-mode
!
dot11 ssid eduroam
   vlan 115
   authentication open eap eap_methods 
   authentication key-management wpa version 2
   accounting acct_methods
   mbssid guest-mode
!
!
!
username Cisco password 7 106D000A0618
!
!
ip ssh version 2
bridge irb
!
!
interface Dot11Radio0
 no shutdown
 no ip address
 no ip route-cache
 !
 encryption vlan 115 mode ciphers aes-ccm 
 !
 ssid USPnet
 !
 ssid eduroam
 !
 antenna transmit right-a
 antenna receive right-a
 mbssid
 no preamble-short
 station-role root
!
interface Dot11Radio0.100
 encapsulation dot1Q 100
 no ip route-cache
 bridge-group 100
 bridge-group 100 subscriber-loop-control
 bridge-group 100 block-unknown-source
 no bridge-group 100 source-learning
 no bridge-group 100 unicast-flooding
 bridge-group 100 spanning-disabled
!
interface Dot11Radio0.115
 encapsulation dot1Q 115
 no ip route-cache
 bridge-group 115
 bridge-group 115 subscriber-loop-control
 bridge-group 115 block-unknown-source
 no bridge-group 115 source-learning
 no bridge-group 115 unicast-flooding
 bridge-group 115 spanning-disabled
!
interface Dot11Radio0.119
 encapsulation dot1Q 119 native
 no ip route-cache
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!
interface FastEthernet0.100
 encapsulation dot1Q 100
 no ip route-cache
 bridge-group 100
 no bridge-group 100 source-learning
 bridge-group 100 spanning-disabled
!
interface FastEthernet0.115
 encapsulation dot1Q 115
 no ip route-cache
 bridge-group 115
 no bridge-group 115 source-learning
 bridge-group 115 spanning-disabled
!
interface BVI1
 ip address 172.19.[IP do AP] 255.255.0.0
 no ip route-cache
!
ip default-gateway 172.19.0.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1 
radius-server attribute 32 include-in-access-req format %h
radius-server host 200.144.188.140 auth-port 1812 acct-port 1813 key [CHAVE DE AUTENTICACAO DA UNIDADE]
radius-server host 200.144.188.141 auth-port 1812 acct-port 1813 key [CHAVE DE AUTENTICACAO DA UNIDADE]
radius-server deadtime 1
radius-server vsa send accounting
bridge 1 route ip
!
line con 0
line vty 0 4
!
sntp server 143.107.255.15
end