Всем добрый день.

Есть девайс 851w. Все вроде бы хорошо и "работает" :), только одно НО. Клиенты которые коннектяться по wi-fi не могут получить адрес по dhcp :(
вот конфиг, может кто увидит кривулю, буду очень благодарен за помощь. С кисками маршрутизаторами общаюсь не так давно, не обессудьте =)

version 12.4
service config
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname router
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$.tda$3nbMHYhynub0VancvaOxu1
!
no aaa new-model
!
!
dot11 syslog
!
dot11 ssid maks
   authentication open
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 7 xxxxxxxxxxxxxxxxx
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.2.1
!
ip dhcp pool LAN
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   dns-server 10.28.30.38
   domain-name lan.dom
   lease 3
!
ip dhcp pool wifi
   network 192.168.2.0 255.255.255.0
   default-router 192.168.2.1
   dns-server 10.28.30.38
   domain-name wifi.dom
   lease 3
!
!
ip cef
!
!
!
!
!
archive
log config
  hidekeys
!
!
!
bridge irb
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
ip address 10.28.x.x 255.255.x.x
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Dot11Radio0
no ip address
!
encryption vlan 2 mode ciphers tkip
!
encryption mode ciphers tkip
!
ssid maks
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
world-mode dot11d country RU both
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 spanning-disabled
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
!
interface Vlan1
no ip address
bridge-group 1
bridge-group 1 spanning-disabled
!
interface Vlan2
no ip address
bridge-group 2
bridge-group 2 spanning-disabled
!
interface BVI1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface BVI2
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 10.28.x.x
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet4 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 192.168.2.0 0.0.0.255
!
control-plane
!
bridge 1 route ip
bridge 2 route ip
!
line con 0
password 7 1406431C5E01793970
no modem enable
line aux 0
line vty 0 4
password 7 105F580E5712411958
login
!
scheduler max-task-time 5000
end