...
dot11 ssid bmstu_hostel
   vlan 27
   authentication open
   authentication key-management wpa version 2
   guest-mode
   wpa-psk ascii 7 1543595F507F7D73706A65
...
interface Dot11Radio0
...
 encryption vlan 27 mode ciphers aes-ccm tkip
...

• Cisco wifi WPA2-Enterprise PEAP authentication with Active Directory http://pcloadletter.co.uk/2011/07/11/cisco-wifi-active-directory-auth/

...
aaa authentication login eap_methods group radius
...
aaa accounting network acct_methods start-stop group radius
...
dot11 ssid bmstu_hostel
   vlan 27
   authentication open eap eap_methods
   authentication key-management wpa version 2
   accounting acct_methods
   guest-mode
...
interface Dot11Radio0
...
 encryption vlan 27 mode ciphers aes-ccm
...