Running configuration:

; JL255A Configuration Editor; Created on release #WC.16.10.0003
; Ver #14:27.6f.f8.1d.9b.3f.bf.bb.ef.7c.59.fc.6b.fb.9f.fc.ff.ff.37.ef:04
hostname "Demo-LAB-L2"
module 1 type jl255a
include-credentials
password manager user-name "admin" sha1 "25e83223e2005d2304791ea4d54a7f9f5e400111"
radius-server host 172.28.13.95 key "admin123"
radius-server host 172.28.13.95 dyn-authorization
radius-server host 172.28.13.95 time-window 0
timesync ntp
ntp unicast
ntp server 216.239.35.12 iburst
ntp enable
time timezone 480
ip route 0.0.0.0 0.0.0.0 172.28.13.150
ip source-interface radius vlan 172
tunneled-node-server
   controller-ip 172.28.13.101
   mode role-based
   exit
snmp-server community "public" unrestricted
snmpv3 engineid "00:00:00:0b:00:00:94:f1:28:7f:5f:a0"
aaa server-group radius "CPPM" host 172.28.13.95
aaa accounting update periodic 5
aaa accounting commands interim-update radius server-group "CPPM"
aaa accounting network start-stop radius server-group "CPPM"
aaa authorization user-role name "guests"
   vlan-id 10
   tunneled-node-server-redirect
   exit
aaa authorization user-role name "ARUBA-AP"
   vlan-id 172
   exit
aaa authorization user-role name "COMPUTER"
   vlan-id 30
   tunneled-node-server-redirect secondary-role "Wired-Computer"
   exit
aaa authorization user-role name "NO-ACCESS"
   vlan-id 999
   exit
aaa authorization user-role enable
aaa authentication port-access eap-radius server-group "CPPM"
aaa authentication mac-based chap-radius server-group "CPPM"
aaa port-access authenticator 1
aaa port-access authenticator active
aaa port-access mac-based 2-10
vlan 1
   name "DEFAULT_VLAN"
   no untagged 1-4,20,23-24
   untagged 5-19,21-22,25-28
   ip address dhcp-bootp
   ipv6 enable
   ipv6 address dhcp full
   exit
vlan 10
   name "VLAN10"
   untagged 1-4
   tagged 24
   no ip address
   exit
vlan 20
   name "VLAN20"
   tagged 24
   no ip address
   exit
vlan 30
   name "VLAN30"
   untagged 20
   tagged 24
   no ip address
   exit
vlan 99
   name "VLAN99"
   tagged 24
   no ip address
   exit
vlan 172
   name "VLAN172"
   untagged 23-24
   ip address 172.28.13.151 255.255.0.0
   exit
vlan 999
   name "VLAN999"
   no ip address
   exit
no tftp server
no autorun
no dhcp config-file-update
no dhcp image-file-update
no dhcp tr69-acs-url