Controller Datacenter# show configuration 
version 6.4.2.0-4.1.1
syslocation "Data center"
virtual-controller-country PE
virtual-controller-key e9230b23016a178bd1f22a38ee7dc1d6f8bbc09aa6304a04bb
name WCV-1-Master
virtual-controller-ip 172.20.0.72
virtual-controller-vlan 1 255.255.254.0 172.20.0.1
terminal-access
telnet-server
clock timezone Lima -05 00
rf-band all

allow-new-aps
allowed-ap 18:64:72:ca:f8:6a
allowed-ap 18:64:72:ca:f9:1c
allowed-ap 18:64:72:ca:f8:38
allowed-ap 18:64:72:ca:f8:56
allowed-ap 18:64:72:c8:5d:ba
allowed-ap 18:64:72:c8:5e:94
allowed-ap 18:64:72:ca:fa:34
allowed-ap 18:64:72:ca:fa:1c
allowed-ap 18:64:72:c8:5d:9e
allowed-ap 18:64:72:ca:fa:16
allowed-ap 18:64:72:ca:f8:00
allowed-ap 18:64:72:c8:5e:4c
allowed-ap 18:64:72:ca:fa:0a
allowed-ap 18:64:72:c8:5d:20
allowed-ap 18:64:72:ca:fa:2e
allowed-ap 18:64:72:c8:d7:02
allowed-ap 18:64:72:c8:d5:a0
allowed-ap 18:64:72:c8:d5:66
allowed-ap 18:64:72:c8:d5:64
allowed-ap 18:64:72:c8:d5:ec

routing-profile
 route  0.0.0.0  0.0.0.0  172.20.0.1


arm
 wide-bands 5ghz
 80mhz-support
 min-tx-power 18
 max-tx-power 127
 band-steering-mode prefer-5ghz
 air-time-fairness-mode fair-access
 client-aware
 scanning

ip dhcp pool
 subnet 172.50.0.0
 subnet-mask 255.255.255.128
 dns-server 208.67.220.220
 domain-name ilender

internal-domains
 domain-name limh1dc.intit.net

syslog-level warn ap-debug 
syslog-level warn network 
syslog-level warn security 
syslog-level warn system 
syslog-level warn user 
syslog-level warn user-debug 
syslog-level warn wireless 


extended-ssid

content-filtering



user david d3917187a436354f713d8d803772166efcf3a64394f4a344 portal
user felipe 6e853a9d6fcb7ced1f87211692cedca1931a7f4169b642c0 portal


mgmt-user admin 6f3b09417f04810f1ab448c4c718208d

wlan access-rule default_wired_port_profile
 index 0
 rule any any match any any any permit

wlan access-rule wired-instant
 index 1
 rule masterip 0.0.0.0 match tcp 80 80 permit
 rule masterip 0.0.0.0 match tcp 4343 4343 permit
 rule any any match udp 67 68 permit
 rule any any match udp 53 53 permit

wlan access-rule invitados
 index 2
 rule alias www.facebook.com match tcp 80 80 deny
 rule alias www.facebook.com match tcp 443 443 deny
 rule any any match app facebook deny
 rule any any match app facebook-apps deny
 rule any any match app facebook-mail deny
 rule any any match any any any permit
 bandwidth-limit peruser downstream 1000

wlan access-rule wc_eth0
 index 3
 rule any any match any any any permit

wlan access-rule Ilender-SantaClara
 index 4
 rule any any match any any any permit

wlan ssid-profile invitados
 enable
 index 0
 type employee
 essid invitados
 wpa-passphrase 184eb69bc54da9c689bf0fb324f75da57b0c7955688682c2
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 50
 auth-server InternalServer
 rf-band all
 captive-portal disable
 dtim-period 1
 inactivity-timeout 1000
 broadcast-filter arp
 content-filtering
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64
 dot11r

wlan ssid-profile Ilender-SantaClara
 enable
 index 1
 type employee
 essid Ilender-SantaClara
 wpa-passphrase 61f0fee2e2c1bd369e4281c8035de393e7acd37a78b2df08
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 1
 auth-server InternalServer
 rf-band all
 captive-portal disable
 dtim-period 1
 inactivity-timeout 1000
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64
 dot11r

auth-survivability cache-time-out 24



dpi

wlan captive-portal
 background-color 13421772
 banner-color 16750848
 banner-text "Welcome to Guest Network"
 terms-of-use "This network is not secure, and use is at your own risk"
 use-policy "Please read terms and conditions before using Guest Network"
 authenticated

wlan external-captive-portal
 server localhost
 port 443
 url "/"
 auth-text "Authenticated"
 auto-whitelist-disable
 https


blacklist-time 3600
auth-failure-blacklist-time 3600

ids classification

ids
 wireless-containment none

ip dhcp invitados
 server-type local
 server-vlan 50
 subnet 172.50.0.0
 subnet-mask 255.255.255.128
 dns-server 208.67.220.220
 domain-name ilender


wired-port-profile wired-instant
 switchport-mode access
 allowed-vlan all
 native-vlan guest
 no shutdown
 access-rule-name wired-instant
 speed auto
 duplex auto
 no poe
 type guest
 captive-portal disable
 no dot1x
 inactivity-timeout 1000

wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 no shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex full
 no poe
 type employee
 captive-portal disable
 no dot1x
 inactivity-timeout 1000

wired-port-profile wc_eth0
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 no shutdown
 access-rule-name wc_eth0
 speed auto
 duplex auto
 no poe
 type employee
 captive-portal disable
 no dot1x
 inactivity-timeout 1000


enet0-port-profile wc_eth0

uplink
 preemption
 enforce none
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180


airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay

airgroupservice airprint
 disable
 description AirPrint