Subject: RE: Catalyst Switch and Wireless AP - 802.1q Trunk...
Hello

I think this can be a error on Documentation. You have to force the
native vlan to bridge-group 1, but you can use whatever native vlan you
wish. (At least I do it, and it works!).
You can argue if you should create the Dot11radio subinterface that
belongs to management. I personally create it and shut it down, just for
keeping stuff organized.
See the config below.

interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption vlan 511 mode ciphers wep128
 !
 broadcast-key vlan 511 change 1800
 !
 !
 ssid e-U
   vlan 511
   max-associations 20
   authentication open eap RADIUS_AUTH
   authentication network-eap RADIUS_AUTH
   accounting RADIUS_ACC
   mobility network-id 511
 !
 ssid guest_e-U
   vlan 510
   max-associations 10
   authentication open
   guest-mode
   mobility network-id 510
 !
 short-slot-time
 speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0
36.0 48.0 54.0
 rts threshold 2312
 station-role root
 no cdp enable
!
interface Dot11Radio0.510
 encapsulation dot1Q 510
 no ip route-cache
 no cdp enable
 bridge-group 10
 bridge-group 10 subscriber-loop-control
 bridge-group 10 block-unknown-source
 no bridge-group 10 source-learning
 no bridge-group 10 unicast-flooding
 bridge-group 10 spanning-disabled
!
interface Dot11Radio0.511
 encapsulation dot1Q 511
 no ip route-cache
 no cdp enable
 bridge-group 11
 bridge-group 11 subscriber-loop-control
 bridge-group 11 block-unknown-source
 no bridge-group 11 source-learning
 no bridge-group 11 unicast-flooding
 bridge-group 11 spanning-disabled
!
interface Dot11Radio0.593
 description -=SHUTDOWN=-
 encapsulation dot1Q 593 native
 no ip route-cache
 shutdown
 no cdp enable
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto


---