кусок того что я накрутил

dot11 syslog
!
dot11 ssid PM-M
   vlan 3
   authentication open
   authentication key-management wpa
   guest-mode
   wpa-psk ascii 7 ыыыыыыыыыы
!
dot11 ssid ZH-WiFi
   vlan 2
   authentication open
   guest-mode
   infrastructure-ssid optional
!
no ip dhcp use vrf connected
ip dhcp excluded-address 172.164.0.1 172.164.0.10
ip dhcp excluded-address 172.164.10.1 172.164.10.10
ip dhcp excluded-address 172.164.10.254
ip dhcp excluded-address 172.164.0.254
ip dhcp ping packets 3
!
ip dhcp pool WiFi
   import all
   network 172.164.0.0 255.255.255.0
   domain-name pzh.wifi
   default-router 172.164.0.254
   dns-server 10,10,10,10
!
ip dhcp pool WiFi-PM
   import all
   network 172.164.10.0 255.255.255.0
   domain-name zh.wifi
   default-router 172.164.10.254
   dns-server 10,10,10,10
!
interface Dot11Radio0
description WiFi
no ip address
!
encryption vlan 2 mode ciphers aes-ccm
!
encryption mode ciphers aes-ccm
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
world-mode dot11d country RU both
!
interface Vlan2
description WiFi for Guest zMn
ip address 172.164.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly
rate-limit input 312000 8000 8000 conform-action transmit exceed-action drop
rate-limit output 312000 8000 8000 conform-action transmit exceed-action drop
!
interface Vlan3
ip address 172.164.10.254 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip nat inside source list 2 interface FastEthernet4 overload
!
access-list 2 permit 172.164.0.0 0.0.0.255
access-list 2 permit 172.164.10.0 0.0.0.255