version 6.2.0.0-3.2.0
virtual-controller-country US
virtual-controller-key ###########################################
name RAP-3-Controller
virtual-controller-ip 192.168.1.3
terminal-access
clock timezone Central-Time -06 00
rf-band all

allow-new-aps
allowed-ap 00:0b:86:83:08:a9



arm
 wide-bands 5ghz
 min-tx-power 18
 max-tx-power 127
 band-steering-mode prefer-5ghz
 air-time-fairness-mode fair-access
 client-aware
 scanning

syslog-level warn ap-debug
syslog-level warn network
syslog-level warn security
syslog-level warn system
syslog-level warn user
syslog-level warn user-debug
syslog-level warn wireless



mgmt-user admin ####################################

wlan access-rule default_wired_port_profile
 rule any any match any any any permit

wlan access-rule test
 rule any any match any any any permit

wlan access-rule default_dev_rule
 rule any any match any any any permit


wlan ssid-profile test
 index 0
 type employee
 essid test
 wpa-passphrase ######################################
 opmode wpa2-psk-aes
 max-authentication-failures 0
 rf-band all
 captive-portal disable
 dtim-period 1
 inactivity-timeout 1000
 broadcast-filter none
 blacklist
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

enet-vlan guest
auth-survivability cache-time-out 24



wlan captive-portal
 background-color 16777164
 banner-color 16777011
 banner-text "Welcome to Guest Network"
 terms-of-use "This network is not secure, and use is at your own risk"
 use-policy "Please read terms and conditions before using Guest Network"
 authenticated

wlan external-captive-portal
 server localhost
 port 80
 url "/"
 auth-text "Authenticated"


blacklist-time 3600
auth-failure-blacklist-time 3600

ids classification

ids
 wireless-containment none


wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 no shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex full
 no poe
 type employee
 auth-server InternalServer
 captive-portal disable
 no dot1x


enet0-port-profile default_wired_port_profile
enet1-port-profile default_wired_port_profile
enet2-port-profile default_wired_port_profile

wlan sta-profile
 essid Backhaul
 cipher-suite wpa2-ccmp-psk
 wpa-passphrase ##############################################
 uplink-band dot11g

uplink
 no preemption
 enforce wifi
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180


airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay
 id _airplay._tcp
 id _raop._tcp

airgroupservice airprint
 disable
 description AirPrint
 id _ipp._tcp
 id _pdl-datastream._tcp
 id _printer._tcp
 id _scanner._tcp
 id _universal._sub._ipp._tcp
 id _printer._sub._http._tcp
 id _http._tcp
 id _http-alt._tcp
 id _ipp-tls._tcp
 id _fax-ipp._tcp
 id _riousbprint._tcp
 id _cups._sub._ipp._tcp
 id _cups._sub._fax-ipp._tcp
 id _ica-networking._tcp
 id _ptp._tcp
 id _canon-bjnp1._tcp