配置如下：
bogon#sh ru
Building configuration...
Current configuration : 3894 bytes
!
version 15.3
no service pad
service telnet-zeroidle
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname bogon
!
!
logging rate-limit console 9
enable secret 5 $1$Suvm$CY8.oV6QxyVhA/Dh0Wpj5.
!
no aaa new-model
no ip source-route
no ip cef
!
!
!
!
dot11 syslog
dot11 vlan-name HBCTF-Internet vlan 4
dot11 vlan-name HBCTF-MAXHUB vlan 3
dot11 vlan-name HBCTF-office vlan 5
!
dot11 ssid HBCTF-Internet
vlan 4
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7 0707234F5A0F39151601181B0B382F
!
dot11 ssid HBCTF-MAXHUB
vlan 3
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7 01303222762A3E27146E
!
dot11 ssid HBCTF-office
vlan 5
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7 05081209011E1E5841
!
!
!
!
!
username CISCO password 7 072C285F4D06
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
!
encryption vlan 4 mode ciphers aes-ccm
!
encryption vlan 3 mode ciphers aes-ccm
!
encryption vlan 5 mode ciphers aes-ccm
!
ssid HBCTF-Internet
!
ssid HBCTF-MAXHUB
!
ssid HBCTF-office
!
antenna gain 0
stbc
mbssid
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.3
encapsulation dot1Q 3
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 spanning-disabled
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
!
interface Dot11Radio0.4
encapsulation dot1Q 4
bridge-group 4
bridge-group 4 subscriber-loop-control
bridge-group 4 spanning-disabled
bridge-group 4 block-unknown-source
no bridge-group 4 source-learning
no bridge-group 4 unicast-flooding
!
interface Dot11Radio0.5
encapsulation dot1Q 5
bridge-group 5
bridge-group 5 subscriber-loop-control
bridge-group 5 spanning-disabled
bridge-group 5 block-unknown-source
no bridge-group 5 source-learning
no bridge-group 5 unicast-flooding
!
interface Dot11Radio1
no ip address
shutdown
antenna gain 0
peakdetect
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface GigabitEthernet0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
bridge-group 3 spanning-disabled
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
!
interface GigabitEthernet0.4
encapsulation dot1Q 4
no ip route-cache
bridge-group 4
bridge-group 4 spanning-disabled
no bridge-group 4 source-learning
no bridge-group 4 unicast-flooding
!
interface GigabitEthernet0.5
encapsulation dot1Q 5
no ip route-cache
bridge-group 5
bridge-group 5 spanning-disabled
no bridge-group 5 source-learning
no bridge-group 5 unicast-flooding
!
interface GigabitEthernet1
no ip address
shutdown
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
mac-address e4aa.5d1b.3e34
ip address 10.206.253.217 255.255.255.0
ipv6 address dhcp
ipv6 address autoconfig
ipv6 enable
!
ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
password 7 025756085F5359
login
transport input all
!
end