SSH/telnet login on the FAT AP is not possible from the wireless side

Scenario:

The administrator of the WLAN network described in Figure 1 requires management access from the wireless side.  The FAT AP has been configured to allow ssh/telnet access for the admin user and the ssh connection is successful when is initiated from the wired side of the network.

When the SSH connection is initiated from the STA connected to the Wi-Fi, the connection times out “port 22: Connection timed out”.

Figure 1 WLAN service configuration networking on a small-scale network 

Configuration:

(AP6010DN FAT V200R005C10SPCa00)

#

interface Vlanif101

 ip address 192.168.11.1 255.255.255.0

 dhcp select interface

#

interface Wlan-Bss1

 port hybrid pvid vlan 101

 port hybrid untagged vlan 101

aaa

 authentication-scheme default

 authorization-scheme default

 accounting-scheme default

 domain default

 domain default_admin

 local-user admin password irreversible-cipher %@%@e+'.%imJ9.j<g12!ETVRX;]nZONr/vTv-!YND!H1t`|3;]qX%@%@

 local-user admin privilege level 3

 local-user admin service-type telnet ssh

#

 ssh user admin authentication-type all

 ssh client first-time enable

 stelnet server enable

#

user-interface vty 0 4

 authentication-mode aaa

 user privilege level 3

 protocol inbound all

#

wlan

 wmm-profile name wmm id 1

 traffic-profile name traffic id 1

 security-profile name security id 1

 service-set name test id 1

  Wlan-Bss 1

  ssid test

  traffic-profile id 1

  security-profile id 1

 radio-profile name radio id 1

  wmm-profile id 1

#

interface Wlan-Radio0/0/0

 radio-profile id 1

 service-set id 1 wlan 1

#

return