Cisco 1801 vlan et wifi

Bonjour,

Je possède un cisco 1801W

il y a un vlan 1 (192.168.1.x)
un vlan 2 pour le wifi associé à un bridge BVI2 (192.168.2.x)

(je rappelle que le 1801w est routeur modem adsl wifi)

presque tout fonctionne : par le wifi je n'ai pas accès aux imprimantes (qui sont en vlan1) et à certains sites
(goole oui, facebook non, macbidouille non, pagesjaunes oui)

je n'ai pas pour le moment de firewall
je pense que c'est un pbl de bridge ou de nat entre les vlan1 et vlan2

merci de votre aide
voici un bout de ma config

version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xxxxx
!
boot-start-marker
boot-end-marker
!
no logging buffered
!
xxx
!
!
crypto pki certificate chain TP-self-signed-264891639
certificate self-signed 01
3082023F xxx239AB6
quit
!
dot11 ssid WiFi
vlan 2
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 xxxx
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool LAN
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 80.10.246.129
!
ip dhcp pool WiFi
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 80.10.246.129
!
!
xxxx
!
multilink bundle-name authenticated
!
no spanning-tree vlan 2
username xxxxxx
!
archive
log config
hidekeys
!
bridge irb
!
interface FastEthernet0
no ip address
ip broadcast-address 0.0.0.0
shutdown
duplex auto
speed auto
!
xxx

switchport mode trunk
!
interface Dot11Radio0
no ip address
ip broadcast-address 0.0.0.0
no dot11 extension aironet
!
encryption vlan 2 mode ciphers tkip
!
ssid WiFi
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Dot11Radio0.2
encapsulation dot1Q 2 native
no cdp enable
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 spanning-disabled
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
!
interface Dot11Radio1
no ip address
ip broadcast-address 0.0.0.0
no dot11 extension aironet
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
station-role root
!
interface ATM0
no ip address
ip broadcast-address 0.0.0.0
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
pvc 8/35
pppoe-client dial-pool-number 1
!
!
interface Vlan1
description $FW_INSIDE$
ip address 192.168.1.1 255.255.255.0
ip broadcast-address 192.168.1.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1412
!
interface Vlan2
no ip address
bridge-group 2
bridge-group 2 spanning-disabled
!
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
xxxx
!
interface BVI2
description $FW_INSIDE$
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 100 interface Dialer0 overload
xxxxx
!
ip access-list extended SDM_HTTPS
remark SDM_ACL Category=1
permit tcp any any eq 443
ip access-list extended SDM_SHELL
remark SDM_ACL Category=1
permit tcp any any eq cmd
ip access-list extended SDM_SSH
remark SDM_ACL Category=1
permit tcp any any eq 22
!
access-list 100 remark SDM_ACL Category=128
access-list 100 permit ip host 255.255.255.255 any
access-list 100 permit ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip 192.168.1.0 0.0.0.255 any
access-list 100 permit ip 192.168.2.0 0.0.0.255 any
xxxxx
no cdp run
!
control-plane
!
bridge 2 route ip
!
line con 0
line aux 0
line vty 0 4
!
end