Condivido questa conf che mi ha permesso ultimamente di dividere il traffico lan da quello wireless su un apparato Cisco 877w.
interface ATM0.1 point-to-point
ip address <IP PUBBLICO>
ip mtu 1492
ip flow ingress
ip nat outside
ip virtual-reassembly
ip tcp adjust-mss 1452
atm route-bridged ip
pvc 8/36
oam-pvc manage
encapsulation aal5snap
ip route 0.0.0.0 0.0.0.0 ATM0.1
interface Vlan1
ip address 172.21.10.2 255.255.255.252
ip nat inside
ip access-list standard ACL_LAN_RANGE
permit 172.21.10.0 0.0.0.3
permit 192.168.32.0 0.0.0.255
ip nat inside source list ACL_LAN_RANGE interface ATM0.1 overload
dot11 ssid <SSID>
vlan 20
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii <CHIAVE WPA>
interface Dot11Radio0
encryption vlan 20 mode ciphers aes-ccm
ssid <SSID>
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel least-congested 2412 2442 2462
station-role root
rts threshold 2312
no cdp enable
no shutdown
interface Dot11Radio0.20
encapsulation dot1Q 20
ip address 192.168.32.253 255.255.255.0
ip nat inside
interface Vlan20
ip address 192.168.32.253 255.255.255.0
