version 6.3.1.0-4.0.0 virtual-controller-country US virtual-controller-key 80df76490185e5b6f16de5c00511cd370ef1efea6f50cc1f00 name Instant-C6:2E:94 virtual-controller-ip 172.25.173.142 terminal-access ntp-server 172.25.10.20 clock timezone Central-Time -06 00 rf-band all dynamic-radius-proxy allow-new-aps allowed-ap 18:64:72:c6:2e:94 allowed-ap 00:0b:86:cf:86:6d routing-profile route 10.0.0.0 255.0.0.0 10.1.100.11 route 10.0.0.0 255.0.0.0 10.1.100.12 arm wide-bands 5ghz 80mhz-support min-tx-power 18 max-tx-power 127 band-steering-mode prefer-5ghz air-time-fairness-mode fair-access client-aware scanning ip dhcp pool dns-server 172.25.10.1 internal-domains domain-name cra.lab syslog-level warn ap-debug syslog-level warn network syslog-level warn security syslog-level warn system syslog-level warn user syslog-level warn user-debug syslog-level warn wireless vpn primary 172.25.172.81 mgmt-user admin dd85ab7a543618aead2d7d4156a7cb54 wlan access-rule default_wired_port_profile index 0 rule any any match any any any permit wlan access-rule wired-instant index 1 rule 172.25.173.142 255.255.255.255 match tcp 80 80 permit rule 172.25.173.142 255.255.255.255 match tcp 4343 4343 permit rule any any match udp 67 68 permit rule any any match udp 53 53 permit wlan access-rule CRA_Instant index 2 rule any any match any any any permit wlan access-rule CRA_IAP_Employee index 3 captive-portal external profile Employee rule any any match any any any permit rule 10.1.100.128 255.255.255.255 match tcp 443 443 permit rule 10.1.100.128 255.255.255.255 match tcp 80 80 permit rule 173.194.0.0 255.255.0.0 match tcp 443 443 permit rule 74.125.0.0 255.255.0.0 match tcp 443 443 permit rule 209.85.0.0 255.255.0.0 match tcp 443 443 permit rule any any match any any any deny wlan access-rule CRA_IAP_Guest index 5 rule any any match any any any permit wlan access-rule guestIAP_logon index 6 rule 10.1.100.128 255.255.255.255 match tcp 80 80 permit rule 10.1.100.128 255.255.255.255 match tcp 443 443 permit rule 172.25.173.142 255.255.255.255 match any any any permit wlan access-rule employee_role index 7 rule any any match any any any permit wlan access-rule CRA_IAP_Emplyee-auth index 9 rule any any match any any any permit wlan ssid-profile CRA_Instant enable index 0 type employee essid CRA_Instant wpa-passphrase 622723b35052a3089addb1418f9b667f00f1511beef98286 opmode wpa2-psk-aes max-authentication-failures 0 vlan 15 auth-server InternalServer rf-band all captive-portal disable dtim-period 1 inactivity-timeout 1000 broadcast-filter none dmo-channel-utilization-threshold 90 local-probe-req-thresh 0 max-clients-threshold 64 wlan ssid-profile CRA_IAP_Employee enable index 1 type employee essid CRA_IAP_Employee opmode wpa2-aes max-authentication-failures 0 vlan 15 auth-server clearpasscra rf-band all captive-portal disable dtim-period 1 inactivity-timeout 1000 broadcast-filter none dmo-channel-utilization-threshold 90 local-probe-req-thresh 0 max-clients-threshold 64 wlan ssid-profile CRA_IAP_Guest enable index 3 type guest essid CRA_IAP_Guest opmode opensystem max-authentication-failures 0 vlan 15 auth-server clearpasscra set-role-pre-auth guestIAP_logon rf-band all captive-portal internal dtim-period 1 inactivity-timeout 1000 broadcast-filter none radius-accounting radius-interim-accounting-interval 10 dmo-channel-utilization-threshold 90 local-probe-req-thresh 0 max-clients-threshold 64 auth-survivability cache-time-out 24 wlan auth-server clearpasscra ip 10.1.100.128 port 1812 acctport 1813 key 3ab42c4060d6db48e5882ecb4b2a0e696756c5120a1185ff rfc3576 cppm-rfc3576-port 5999 wlan captive-portal background-color 12632256 banner-color 6750207 banner-text "Remote Campus Guest Network" terms-of-use "This network is not secure, and use is at your own risk" use-policy "Please read terms and conditions before using Guest Network" authenticated wlan external-captive-portal server 10.1.100.128 port 443 url "/guest/guest_IAP.php" auth-text "" redirect-url "10.1.100.1" server-fail-through auto-whitelist-disable https wlan external-captive-portal Employee server 10.1.100.128 port 443 url "/guest/landing.php/device_provisioning2.php" auth-text "" auto-whitelist-disable https wlan walled-garden white-list ".*ggpht.com.*" white-list ".*android.clients.google.com.*" blacklist-time 3600 auth-failure-blacklist-time 3600 ids classification ids wireless-containment none ip dhcp IAPVPN server-type Local server-vlan 15 subnet 192.168.100.1 subnet-mask 255.255.255.0 dns-server 10.1.57.127 wired-port-profile wired-instant switchport-mode access allowed-vlan all native-vlan guest no shutdown access-rule-name wired-instant speed auto duplex auto no poe type guest captive-portal disable no dot1x wired-port-profile default_wired_port_profile switchport-mode trunk allowed-vlan all native-vlan 1 shutdown access-rule-name default_wired_port_profile speed auto duplex full no poe type employee captive-portal disable no dot1x enet0-port-profile default_wired_port_profile uplink preemption enforce none failover-internet-pkt-lost-cnt 10 failover-internet-pkt-send-freq 30 failover-vpn-timeout 180 airgroup disable airgroupservice airplay disable description AirPlay airgroupservice airprint disable description AirPrint