Esta configuración fue realizada hace varios en mi laboratorio. Está completamente funcional y es la que tengo actualmente operando en la compañía.

 

Configuración AP

hostname AP1
!
!
logging rate-limit console 9
enable secret 5 XXXXXXXXXXXX
!
no aaa new-model
no ip source-route
no ip cef
ip domain name LAB_INALAMBRICA
!
!
dot11 syslog
dot11 vlan-name Gestion vlan 99
dot11 vlan-name Lab_Inalambrica vlan 109

Configuración de SSID y Vlan

dot11 ssid LAB_INALAMBRICA
vlan 109
authentication open
authentication key-management wpa version 2
guest-mode
mbssid guest-mode
wpa-psk ascii 7 XXXXXXXX

Configurando el Radio y la Interface Ethernet.

interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 109 mode ciphers aes-ccm   (Encriptación y asignación de Vlan a SSID)
!
ssid LAB_INALAMBRICA
!
antenna gain 0
stbc
channel 2437
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.109
encapsulation dot1Q 109
no ip proxy-arp
no ip route-cache
no cdp enable
bridge-group 109
bridge-group 109 subscriber-loop-control
bridge-group 109 spanning-disabled
bridge-group 109 block-unknown-source
no bridge-group 109 source-learning
no bridge-group 109 unicast-flooding
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface GigabitEthernet0.99
encapsulation dot1Q 99 native
no ip redirects
ip directed-broadcast
no ip proxy-arp
no ip route-cache
no cdp enable
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface GigabitEthernet0.109
encapsulation dot1Q 109
no ip route-cache
bridge-group 109
bridge-group 109 spanning-disabled
no bridge-group 109 source-learning
!
interface GigabitEthernet1
no ip address
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning

Configuración de IP para Gestión

interface BVI1
ip address 192.168.1.2 255.255.255.0
ipv6 address dhcp
ipv6 address autoconfig
ipv6 enable
!
ip default-gateway 192.168.1.1
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http help-path

bridge 1 route ip

line con 0
line vty 0 4
login local
transport input all
!
end

Configuración SW

interface GigabitEthernet1/0/37
description AP1

switchport trunk native vlan 99
switchport mode trunk

Comandos de Pruebas de configuración:

#sh ip in br

# sh dot11 associations

Algunos errores comunes en la configuración:

%DOT11-4-NO_SSID: No SSID configured. Dot11Radio0 not started

mbssid defined globally vs. locally

Configuración Pagina Oficial Aironet Access Points CISCO

Fuente: AlexAlvarez0310