This is how you would set up dual-band 2.4Ghz / 5Ghz on a Cisco autonomous AP for Open auth... Basically just associate the SSID with Dot11Radio0
and Dot11Radio1
; Substitute these WPA PSK configs if you want WPA PSK.
I can add PEAP or other EAP methods after I get home, but I haven't got access to my EAP notes right now.
!
version 15.2
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
service password-encryption
!
hostname Cisco_AP
!
!
logging rate-limit console 9
enable secret cisco
!
aaa new-model
!
!
aaa authentication login default local
!
!
!
!
!
aaa session-id common
clock timezone CST -6 0
clock summer-time CDT recurring
no ip source-route
no ip routing
no ip cef
!
!
!
!
login on-failure log
login on-success log
dot11 syslog
!
dot11 ssid OUR_SSID
vlan 1
max-associations 50
authentication open
mbssid guest-mode
!
!
dot11 guest
!
!
!
username Cisco password Cisco
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid OUR_SSID
!
antenna gain 0
stbc
mbssid
station-role root
world-mode dot11d country-code US indoor
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
no ip route-cache
!
ssid OUR_SSID
!
antenna gain 0
peakdetect
dfs band 3 block
stbc
mbssid
channel dfs
station-role root
world-mode dot11d country-code US indoor
!
interface Dot11Radio1.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
ip address 192.0.2.10 255.255.255.0
no ip route-cache
ipv6 address dhcp
ipv6 address autoconfig
ipv6 enable
!
ip forward-protocol nd
ip http server
no ip http secure-server
!
!
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
transport input all
!
end