Есть точка доступа 2 vlan подключенная к 2611.
на 2611 dhcp для пользователей и проч.

проблема:
не поднимается IP на BVI1 на точке доступа.
при этом клиенты нормально подключаются точки доступа и получают адрес от 2611

sh conf прилагаю.

!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service sequence-numbers
!
hostname ap
!
enable secret 5 $1$NTc.$k1NSpQiXpDg8xX/d2fkTC0
!
clock timezone MSK 3
ip subnet-zero
ip name-server 172.22.236.1
!
!
no aaa new-model
dot11 vlan-name clients vlan 11
dot11 vlan-name work vlan 1
!
dot11 ssid XXXXXXXXXXXXXX
  vlan 11
  authentication open
  authentication key-management wpa
  guest-mode
  mbssid guest-mode
  wpa-psk ascii 7 15430F0B0E213F3D3C373F200A
  information-element ssidl
!
dot11 ssid ZZZZZZZZZZZZZZ
  vlan 1
  authentication open
  authentication key-management wpa
  mbssid guest-mode
  wpa-psk ascii 7 124801101800181D3E2F2E2A2A
  information-element ssidl
!
!
!
username Cisco password 7 123A0C041104
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 1 mode ciphers tkip
!
encryption vlan 11 mode ciphers tkip
!
mbssid
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
no cdp enable
!
interface Dot11Radio0.1
encapsulation dot1Q 1
no ip route-cache
no cdp enable
bridge-group 254
bridge-group 254 block-unknown-source
no bridge-group 254 source-learning
no bridge-group 254 unicast-flooding
bridge-group 254 spanning-disabled
!
interface Dot11Radio0.11
encapsulation dot1Q 11
no ip route-cache
no cdp enable
bridge-group 11
bridge-group 11 subscriber-loop-control
bridge-group 11 block-unknown-source
no bridge-group 11 source-learning
no bridge-group 11 unicast-flooding
bridge-group 11 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex half
speed 10
hold-queue 160 in
!
interface FastEthernet0.1
encapsulation dot1Q 1
no ip route-cache
bridge-group 254
no bridge-group 254 source-learning
bridge-group 254 spanning-disabled
!
interface FastEthernet0.11
encapsulation dot1Q 11
no ip route-cache
bridge-group 11
no bridge-group 11 source-learning
bridge-group 11 spanning-disabled
!
interface BVI1
ip address 172.22.236.3 255.255.255.0
no ip route-cache
!
ip default-gateway 172.22.236.1
ip http server
no ip http secure-server
!
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
!
end