кусок того что я накрутилdot11 syslog
!
dot11 ssid PM-M
vlan 3
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 ыыыыыыыыыы
!
dot11 ssid ZH-WiFi
vlan 2
authentication open
guest-mode
infrastructure-ssid optional
!
no ip dhcp use vrf connected
ip dhcp excluded-address 172.164.0.1 172.164.0.10
ip dhcp excluded-address 172.164.10.1 172.164.10.10
ip dhcp excluded-address 172.164.10.254
ip dhcp excluded-address 172.164.0.254
ip dhcp ping packets 3
!
ip dhcp pool WiFi
import all
network 172.164.0.0 255.255.255.0
domain-name pzh.wifi
default-router 172.164.0.254
dns-server 10,10,10,10
!
ip dhcp pool WiFi-PM
import all
network 172.164.10.0 255.255.255.0
domain-name zh.wifi
default-router 172.164.10.254
dns-server 10,10,10,10
!
interface Dot11Radio0
description WiFi
no ip address
!
encryption vlan 2 mode ciphers aes-ccm
!
encryption mode ciphers aes-ccm
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
world-mode dot11d country RU both
!
interface Vlan2
description WiFi for Guest zMn
ip address 172.164.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly
rate-limit input 312000 8000 8000 conform-action transmit exceed-action drop
rate-limit output 312000 8000 8000 conform-action transmit exceed-action drop
!
interface Vlan3
ip address 172.164.10.254 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip nat inside source list 2 interface FastEthernet4 overload
!
access-list 2 permit 172.164.0.0 0.0.0.255
access-list 2 permit 172.164.10.0 0.0.0.255