- AP system profile
*assign LMS IP to VRRP-IP
[ap system-profile "LC1-Sunnyvale-6000"
lms-ip 10.169.145.7]



--- virtual-ap profile
-- ssid-profile (ssid name + encryption (opmode opensystem, wpa2-aes, wpa2-psk-aes passphrase ******))
-- aaa profile
-dot1x profile (standard, no change to default of MSCHAP2 and other terminate on MC, just create one by name, Q: what other possible options?)
*dot1x role (employee)
*server-group




- Traffic-management-profile (assign bw allocation)(to be assigned to dot11g-traffic and dot11a-traffic profile
(wlan traffic-management-profile "traffic-LC1-Sunnyvale-6000"
bw-alloc virtual-ap "Corp-App-LC1-Sunnyvale-6000" share 45
bw-alloc virtual-ap "Corp-Employee-LC1-Sunnyvale-6000" share 45
bw-alloc virtual-ap "guestnet" share 10
shaping-policy fair-access]



- voip-cac-profile
[wlan voip-cac-profile <corp-voip-cac>
call-admission-control
call-capacity 12
call-handoff-reservation 25]



- ap-group
[ap-group "AP-LC1-Sunnyvale-6000"
virtual-ap "guestnet"
virtual-ap "corp-app-LC1-Sunnyvale-6000"
virtual-ap "corp-employee-LC1-Sunnyvale-6000"
dot11a-radio-profile "AP"
dot11g-radio-profile "AP"
ap-system-profile "LC1-Sunnyvale-6000"
voip-cac-profile "Corp-voip-cac"
dot11a-traffic-mgmt-profile "traffic-LC1-sunnyvale-6000"
dot11g-traffic-mgmt-profile "traffic-LC1-sunnyvale-6000"]

-