hostname "Rbuparuba01" clock timezone CET 1 location "Building1.floor1" controller config 113 ip NAT pool dynamic-srcnat 0.0.0.0 0.0.0.0 ip access-list eth validuserethacl permit any ! netservice svc-netbios-dgm udp 138 netservice svc-snmp-trap udp 162 netservice svc-pcoip2-tcp tcp 4172 netservice svc-syslog udp 514 netservice svc-l2tp udp 1701 netservice svc-ike udp 500 netservice svc-smb-tcp tcp 445 netservice svc-citrix tcp 2598 netservice svc-dhcp udp 67 68 alg dhcp netservice svc-https tcp 443 netservice svc-pptp tcp 1723 netservice svc-ica tcp 1494 netservice svc-sccp tcp 2000 alg sccp netservice svc-telnet tcp 23 netservice svc-sec-papi udp 8209 netservice svc-lpd tcp 515 netservice svc-netbios-ssn tcp 139 netservice svc-sip-tcp tcp 5060 netservice svc-kerberos udp 88 netservice svc-tftp udp 69 alg tftp netservice svc-http-proxy3 tcp 8888 netservice svc-noe udp 32512 alg noe netservice svc-cfgm-tcp tcp 8211 netservice svc-adp udp 8200 netservice svc-pop3 tcp 110 netservice svc-pcoip-udp udp 50002 netservice svc-pcoip-tcp tcp 50002 netservice svc-rtsp tcp 554 alg rtsp netservice svc-msrpc-tcp tcp 135 139 netservice svc-dns udp 53 alg dns netservice vnc tcp 5900 5905 netservice svc-h323-udp udp 1718 1719 netservice svc-h323-tcp tcp 1720 netservice svc-vocera udp 5002 alg vocera netservice svc-http tcp 80 netservice svc-http-proxy2 tcp 8080 netservice svc-sip-udp udp 5060 netservice svc-nterm tcp 1026 1028 netservice svc-noe-oxo udp 5000 alg noe netservice svc-papi udp 8211 netservice svc-natt udp 4500 netservice svc-ftp tcp 21 alg ftp netservice svc-microsoft-ds tcp 445 netservice svc-svp 119 alg svp netservice svc-smtp tcp 25 netservice svc-gre 47 netservice web tcp list "80 443" netservice svc-netbios-ns udp 137 netservice svc-sips tcp 5061 alg sips netservice svc-smb-udp udp 445 netservice svc-ipp-tcp tcp 631 netservice svc-esp 50 netservice svc-v6-dhcp udp 546 547 netservice svc-snmp udp 161 netservice svc-bootp udp 67 69 netservice svc-pcoip2-udp udp 4172 netservice svc-msrpc-udp udp 135 139 netservice svc-ntp udp 123 netservice svc-icmp 1 netservice svc-ipp-udp udp 631 netservice svc-ssh tcp 22 netservice svc-v6-icmp 58 netservice svc-http-proxy1 tcp 3128 netservice svc-vmware-rdp tcp 3389 netdestination6 ipv6-reserved-range invert network 2000::/3 ! netdestination webmail host 195.204.76.229 ! netdestination DMZ network 195.204.76.224 255.255.255.240 ! netdestination rbupclearpass01 host 192.168.210.66 ! netdestination internal-network network 192.168.0.0 255.255.0.0 ! netexthdr default ! time-range night-hours periodic weekday 18:01 to 23:59 weekday 00:00 to 07:59 ! time-range weekend periodic weekend 00:00 to 23:59 ! time-range working-hours periodic weekday 08:00 to 18:00 ! ip access-list session v6-icmp-acl ipv6 any any svc-v6-icmp permit ! ip access-list session control any any svc-papi permit any any svc-sec-papi permit user any udp 68 deny any any svc-icmp permit any any svc-dns permit any any svc-cfgm-tcp permit any any svc-adp permit any any svc-tftp permit any any svc-dhcp permit any any svc-natt permit ! ip access-list session allow-diskservices any any svc-netbios-dgm permit any any svc-netbios-ssn permit any any svc-microsoft-ds permit any any svc-netbios-ns permit ! ip access-list session drop-and-log user any any deny log ! ip access-list session validuser network 169.254.0.0 255.255.0.0 any any deny network 127.0.0.0 255.0.0.0 any any deny network 224.0.0.0 240.0.0.0 any any deny host 255.255.255.255 any any deny network 240.0.0.0 240.0.0.0 any any deny any any any permit ipv6 host fe80:: any any deny ipv6 network fc00::/7 any any permit ipv6 network fe80::/64 any any permit ipv6 alias ipv6-reserved-range any any deny ipv6 any any any permit ! ip access-list session v6-https-acl ipv6 any any svc-https permit ! ip access-list session vocera-acl any any svc-vocera permit queue high ! ip access-list session vmware-acl ! ip access-list session v6-control ipv6 any any svc-papi permit ipv6 any any svc-sec-papi permit ipv6 user any udp 547 deny ipv6 any any svc-v6-icmp permit ipv6 any any svc-dns permit ipv6 any any svc-cfgm-tcp permit ipv6 any any svc-adp permit ipv6 any any svc-tftp permit ipv6 any any svc-dhcp permit ipv6 any any svc-natt permit ! ip access-list session icmp-acl any any svc-icmp permit ! ip access-list session v6-dhcp-acl ipv6 any any svc-v6-dhcp permit ! ip access-list session captiveportal user alias controller svc-https dst-nat 8081 user any svc-http dst-nat 8080 user any svc-https dst-nat 8081 user any svc-http-proxy1 dst-nat 8088 user any svc-http-proxy2 dst-nat 8088 user any svc-http-proxy3 dst-nat 8088 ! ip access-list session Access_webmail user alias webmail svc-http permit log ! ip access-list session v6-dns-acl ipv6 any any svc-dns permit ! ip access-list session allowall user any any permit ipv6 any any any permit ! ip access-list session lync-acl any any svc-sips permit queue high ! ip access-list session https-acl any any svc-https permit ! ip access-list session sip-acl any any svc-sip-udp permit queue high any any svc-sip-tcp permit queue high ! ip access-list session allow-dmz-access user alias DMZ any permit ! ip access-list session dns-acl any any svc-dns permit ! ip access-list session citrix-acl ! ip access-list session ra-guard ipv6 user any icmpv6 rtr-adv deny ! ip access-list session CP6-web-ACL user host 192.168.210.66 svc-http permit user host 192.168.210.66 svc-https permit ! ip access-list session v6-allowall ipv6 any any any permit ! ip access-list session tftp-acl any any svc-tftp permit ! ip access-list session skinny-acl any any svc-sccp permit queue high ! ip access-list session srcnat user any any src-nat ! ip access-list session vpnlogon user any svc-ike permit user any svc-esp permit any any svc-l2tp permit any any svc-pptp permit any any svc-gre permit ! ip access-list session logon-control user any udp 68 deny any any svc-icmp permit any any svc-dns permit any any svc-dhcp permit any any svc-natt permit any network 169.254.0.0 255.255.0.0 any deny any network 240.0.0.0 240.0.0.0 any deny ! ip access-list session allow-printservices any any svc-lpd permit any any svc-ipp-tcp permit any any svc-ipp-udp permit ! ip access-list session cplogout user alias controller svc-https dst-nat 8081 ! ip access-list session v6-http-acl ipv6 any any svc-http permit ! ip access-list session http-acl any any svc-http permit ! ip access-list session dhcp-acl any any svc-dhcp permit ! ip access-list session captiveportal6 ipv6 user alias controller6 svc-https captive ipv6 user any svc-http captive ipv6 user any svc-https captive ipv6 user any svc-http-proxy1 captive ipv6 user any svc-http-proxy2 captive ipv6 user any svc-http-proxy3 captive ! ip access-list session voip_policy user network 192.168.216.0 255.255.255.0 any permit ! ip access-list session ap-uplink-acl any any udp 68 permit any any svc-icmp permit any host 224.0.0.251 udp 5353 permit ! ip access-list session noe-acl any any svc-noe permit queue high ! ip access-list session svp-acl any any svc-svp permit queue high user host 224.0.1.116 any permit ! ip access-list session ap-acl any any svc-gre permit any any svc-syslog permit any user svc-snmp permit user any svc-snmp-trap permit user any svc-ntp permit user alias controller svc-ftp permit ! ip access-list session v6-ap-acl ipv6 any any svc-gre permit ipv6 any any svc-syslog permit ipv6 any user svc-snmp permit ipv6 user any svc-snmp-trap permit ipv6 user any svc-ntp permit ipv6 user alias controller6 svc-ftp permit ! ip access-list session block-internal-access user alias internal-network any deny ! ip access-list session auth-mobile-access user any svc-http permit user any svc-https permit user any tcp 5223 permit user any tcp 993 permit ! ip access-list session v6-logon-control ipv6 user any udp 68 deny ipv6 any any svc-v6-icmp permit ipv6 any any svc-v6-dhcp permit ipv6 any any svc-dns permit ipv6 any network fc00::/7 any permit ipv6 any network fe80::/64 any permit ipv6 any alias ipv6-reserved-range any deny ! ip access-list session h323-acl any any svc-h323-tcp permit queue high any any svc-h323-udp permit queue high ! vpn-dialer default-dialer ike authentication PRE-SHARE ****** ! dot1x high-watermark 20 dot1x low-watermark 10 aaa bandwidth-contract 20Mbit mbits 20 aaa bandwidth-contract 1MBit mbits 1 user-role ap-role access-list session control access-list session ap-acl access-list session v6-control access-list session v6-ap-acl ! user-role denyall ! user-role clearpass-login captive-portal "aruba_clearpass" access-list session CP6-web-ACL access-list session logon-control access-list session captiveportal ! user-role gjest@rbup-guest-logon captive-portal "gjest@rbup-cp_prof" access-list session logon-control access-list session captiveportal ! user-role mobile access-list session dhcp-acl access-list session dns-acl access-list session icmp-acl access-list session allow-dmz-access access-list session block-internal-access access-list session auth-mobile-access access-list session drop-and-log ! user-role default-vpn-role access-list session allowall access-list session v6-allowall ! user-role cpbase ! user-role voip access-list session dhcp-acl access-list session voip_policy ! user-role voice access-list session sip-acl access-list session noe-acl access-list session svp-acl access-list session vocera-acl access-list session skinny-acl access-list session h323-acl access-list session dhcp-acl access-list session tftp-acl access-list session dns-acl access-list session icmp-acl ! user-role default-via-role access-list session allowall ! user-role guest-logon captive-portal "default" access-list session logon-control access-list session captiveportal access-list session v6-logon-control access-list session captiveportal6 ! user-role guest bw-contract 20Mbit upstream bw-contract 20Mbit downstream access-list session http-acl access-list session https-acl access-list session dhcp-acl access-list session icmp-acl access-list session dns-acl access-list session v6-http-acl access-list session v6-https-acl access-list session v6-dhcp-acl access-list session v6-icmp-acl access-list session v6-dns-acl ! user-role stateful-dot1x ! user-role authenticated access-list session allowall access-list session v6-allowall ! user-role logon access-list session logon-control access-list session captiveportal access-list session vpnlogon access-list session v6-logon-control access-list session captiveportal6 ! ip radius nas-ip 192.168.200.150 ! aaa timers stats-timeout 300 seconds controller-ip vlan 1 interface mgmt shutdown ! dialer group evdo_us init-string ATQ0V1E0 dial-string ATDT#777 ! dialer group gsm_us init-string AT+CGDCONT=1,"IP","ISP.CINGULAR" dial-string ATD*99# ! dialer group gsm_asia init-string AT+CGDCONT=1,"IP","internet" dial-string ATD*99***1# ! dialer group vivo_br init-string AT+CGDCONT=1,"IP","zap.vivo.com.br" dial-string ATD*99# ! vlan 11 vlan 12 vlan 13 vlan 16 vlan 21 vlan 212 interface gigabitethernet 1/0 description "GE1/0" trusted trusted vlan 1,10-13,16,212 switchport mode trunk switchport trunk allowed vlan 1,10-13,16,19,21,212 ! interface gigabitethernet 1/1 description "GE1/1" trusted trusted vlan 1-4094 ! interface gigabitethernet 1/2 description "GE1/2" trusted trusted vlan 1-4094 ! interface gigabitethernet 1/3 description "GE1/3" trusted trusted vlan 1-4094 ! interface vlan 1 ip address 192.168.200.150 255.255.255.0 no ip routing ! interface vlan 13 ip address 192.168.213.254 255.255.255.0 no ip routing ip helper-address 192.168.213.254 ! interface vlan 12 ip address 81.0.189.230 255.255.255.240 shutdown ! interface vlan 16 ip address 192.168.216.254 255.255.255.0 ip helper-address 192.168.210.41 ! interface vlan 212 no ip routing ! ip default-gateway 192.168.213.1 ip route 192.168.210.0 255.255.255.0 192.168.200.1 ip route 192.168.211.0 255.255.255.0 192.168.200.1 uplink disable ap mesh-recovery-profile cluster RecoveryVUOZ1cXhZRUHHhyE wpa-hexkey 3eb32a72a6df0a53a52c6331968ea7e5efec1b1365455236eaeb6bd89bb715e3ee8d612e8fc07894768cd875d2871700586c2cfb71431e072e4eac507e00812669748f64943eabbf24bdf7af3603b8a1 crypto isakmp policy 20 encryption aes256 ! crypto isakmp key "******" address 0.0.0.0 netmask 0.0.0.0 crypto ipsec transform-set default-boc-bm-transform esp-3des esp-sha-hmac crypto ipsec transform-set default-rap-transform esp-aes256 esp-sha-hmac crypto ipsec transform-set default-aes esp-aes256 esp-sha-hmac crypto dynamic-map default-dynamicmap 10000 set transform-set "default-transform" "default-aes" ! crypto isakmp eap-passthrough eap-tls crypto isakmp eap-passthrough eap-peap crypto isakmp eap-passthrough eap-mschapv2 ip local pool "vpn" 172.30.30.10 172.30.30.50 vpdn group l2tp ! ip dhcp pool VLAN_13 default-router 192.168.213.1 dns-server 193.75.75.75 193.75.75.193 network 192.168.213.0 255.255.255.0 authoritative ! service dhcp ! syslocation "Serverrom" syscontact "" snmp-server community "" vpdn group pptp ! tunneled-node-address 0.0.0.0 adp discovery enable adp igmp-join enable adp igmp-vlan 0 voice rtcp-inactivity disable voice alg-based-cac enable voice sip-midcall-req-timeout disable ap ap-blacklist-time 3600 ap flush-r1-on-new-r0 disable mgmt-user admin root ntp server 192.168.210.41 no database synchronize ip mobile domain default ! ! ! airgroup "enable" ! airgroup location-discovery "enable" ! ! airgroup active-wireless-discovery "disable" ! airgroupservice "airplay" id "_airplay._tcp" id "_raop._tcp" id "_appletv-v2._tcp" description "AirPlay" ! airgroupservice "airprint" id "_ipp._tcp" id "_pdl-datastream._tcp" id "_printer._tcp" id "_scanner._tcp" id "_universal._sub._ipp._tcp" id "_universal._sub._ipps._tcp" id "_printer._sub._http._tcp" id "_http._tcp" id "_http-alt._tcp" id "_ipp-tls._tcp" id "_fax-ipp._tcp" id "_riousbprint._tcp" id "_cups._sub._ipp._tcp" id "_cups._sub._fax-ipp._tcp" id "_ica-networking._tcp" id "_ptp._tcp" id "_canon-bjnp1._tcp" id "_ipps._tcp" id "_ica-networking2._tcp" description "AirPrint" ! airgroupservice "itunes" id "_home-sharing._tcp" id "_apple-mobdev._tcp" id "_daap._tcp" id "_dacp._tcp" description "iTunes" ! airgroupservice "remotemgmt" id "_ssh._tcp" id "_sftp-ssh._tcp" id "_ftp._tcp" id "_telnet._tcp" id "_rfb._tcp" id "_net-assistant._tcp" description "Remote management" ! airgroupservice "sharing" id "_odisk._tcp" id "_afpovertcp._tcp" id "_xgrid._tcp" description "Sharing" ! airgroupservice "chat" id "_presence._tcp" description "Chat" ! airgroupservice "allowall" description "Remaining-Services" ! airgroup service "airplay" enable ! airgroup service "airprint" enable ! airgroup service "itunes" disable ! airgroup service "remotemgmt" disable ! airgroup service "sharing" disable ! airgroup service "chat" disable ! airgroup service "allowall" disable ! ip igmp ! ipv6 mld ! no firewall prohibit-ip-spoofing no firewall attack-rate cp 1024 ipv6 firewall ext-hdr-parse-len 100 ! ! firewall cp packet-capture-defaults controlpath other ! ip domain lookup ! country NO aaa rfc-3576-server "192.168.210.66" key ! aaa authentication mac "default" ! aaa authentication dot1x "default" ! aaa authentication dot1x "dot1x-guest" ! aaa authentication dot1x "dot1x_prof-bei23" ! aaa authentication dot1x "dot1x_prof-cbk31" termination enable termination eap-type eap-peap termination inner-eap-type eap-mschapv2 ! aaa authentication dot1x "dot1x_prof-dwi79" ! aaa authentication dot1x "dot1x_prof-pjj00" no opp-key-caching ! aaa authentication dot1x "dot1x_prof-yvb26" ! aaa authentication-server radius "Rbupclearpass01" host "192.168.210.66" key ! aaa authentication-server radius "rbupcm01" host "192.168.216.10" key ! aaa authentication-server radius "Rbupnps01" host "192.168.210.67" key nas-identifier "office" ! aaa authentication-server radius "Rbupnps01-mobile" host "192.168.210.67" key nas-identifier "mobile" ! aaa authentication-server radius "rbupnps01-skill" host "192.168.210.67" key nas-identifier "skill" ! aaa server-group "default" auth-server Internal set role condition role value-of ! aaa server-group "gjest@rbup_srvgrp-nyk45" auth-server Rbupclearpass01 ! aaa server-group "guest@rbup_srvgrp_cp6" auth-server Rbupclearpass01 ! aaa server-group "mobile@rbup_srvgrp-aqw65" auth-server Rbupnps01-mobile ! aaa server-group "office@rbup_srvgrp-zkk15" auth-server Rbupnps01 ! aaa server-group "skill@rbup_srvgrp-iia96" auth-server rbupnps01-skill ! aaa profile "default" ! aaa profile "gjest@rbup-aaa_prof" initial-role "gjest@rbup-guest-logon" ! aaa profile "guest_at_rbup-aaa_prof" initial-role "clearpass-login" authentication-mac "default" mac-server-group "guest@rbup_srvgrp_cp6" radius-accounting "guest@rbup_srvgrp_cp6" radius-interim-accounting rfc-3576-server "192.168.210.66" ! aaa profile "guest_at_rbup-dot1x_prof" initial-role "clearpass-login" authentication-dot1x "default" dot1x-server-group "guest@rbup_srvgrp_cp6" radius-interim-accounting rfc-3576-server "192.168.210.66" ! aaa profile "mobile@rbup-aaa_prof" authentication-dot1x "dot1x_prof-pjj00" dot1x-default-role "mobile" dot1x-server-group "mobile@rbup_srvgrp-aqw65" ! aaa profile "office@rbup-aaa_prof" authentication-dot1x "default" dot1x-default-role "authenticated" dot1x-server-group "office@rbup_srvgrp-zkk15" ! aaa profile "skill@rbup-aaa_prof" authentication-dot1x "dot1x_prof-yvb26" dot1x-default-role "authenticated" dot1x-server-group "skill@rbup_srvgrp-iia96" ! aaa profile "voip@rbup-aaa_prof" initial-role "voip" authentication-dot1x "dot1x_prof-dwi79" ! aaa authentication captive-portal "aruba_clearpass" server-group "guest@rbup_srvgrp_cp6" redirect-pause 0 login-page "http://192.168.210.66/guest/rbup_guest_register.php" welcome-page "http://www.r-bup.no" ! aaa authentication captive-portal "default" ! aaa authentication captive-portal "gjest@rbup-cp_prof" server-group "gjest@rbup_srvgrp-nyk45" ! aaa authentication wispr "default" ! aaa authentication vpn "default" ! aaa authentication vpn "default-rap" ! aaa authentication mgmt ! aaa authentication stateful-ntlm "default" ! aaa authentication stateful-kerberos "default" ! aaa authentication stateful-dot1x ! aaa authentication wired ! web-server ! guest-access-email ! voice logging ! voice dialplan-profile "default" ! voice real-time-config ! voice sip ! aaa password-policy mgmt ! control-plane-security no cpsec-enable ! ids wms-general-profile ! ids wms-local-system-profile ! valid-network-oui-profile ! upgrade-profile ! license profile ! activate-service-whitelist ! ifmap cppm ! ap system-profile "default" ! ap regulatory-domain-profile "default" country-code NO valid-11g-channel 1 valid-11g-channel 6 valid-11g-channel 11 valid-11a-channel 36 valid-11a-channel 40 valid-11a-channel 44 valid-11a-channel 48 valid-11a-channel 52 valid-11a-channel 56 valid-11a-channel 60 valid-11a-channel 64 valid-11a-channel 100 valid-11a-channel 104 valid-11a-channel 108 valid-11a-channel 112 valid-11a-channel 116 valid-11a-channel 120 valid-11a-channel 124 valid-11a-channel 128 valid-11a-channel 132 valid-11a-channel 136 valid-11a-channel 140 valid-11g-40mhz-channel-pair 1-5 valid-11g-40mhz-channel-pair 7-11 valid-11a-40mhz-channel-pair 36-40 valid-11a-40mhz-channel-pair 44-48 valid-11a-40mhz-channel-pair 52-56 valid-11a-40mhz-channel-pair 60-64 valid-11a-40mhz-channel-pair 100-104 valid-11a-40mhz-channel-pair 108-112 valid-11a-40mhz-channel-pair 116-120 valid-11a-40mhz-channel-pair 124-128 valid-11a-40mhz-channel-pair 132-136 ! ap wired-ap-profile "default" ! ap enet-link-profile "default" ! ap mesh-ht-ssid-profile "default" ! ap lldp med-network-policy-profile "default" ! ap mesh-cluster-profile "default" ! ap lldp profile "default" ! ap mesh-radio-profile "default" ! ap wired-port-profile "default" ! ids general-profile "default" ! ids unauthorized-device-profile "default" ! ids profile "default" ! rf arm-profile "arm-maintain" assignment maintain no scanning ! rf arm-profile "arm-scan" ! rf arm-profile "default" ! rf optimization-profile "default" ! rf event-thresholds-profile "default" ! rf am-scan-profile "default" ! rf dot11a-radio-profile "default" ! rf dot11a-radio-profile "rp-maintain-a" arm-profile "arm-maintain" ! rf dot11a-radio-profile "rp-monitor-a" mode am-mode ! rf dot11a-radio-profile "rp-scan-a" arm-profile "arm-scan" ! rf dot11g-radio-profile "default" ! rf dot11g-radio-profile "rp-maintain-g" arm-profile "arm-maintain" ! rf dot11g-radio-profile "rp-monitor-g" mode am-mode ! rf dot11g-radio-profile "rp-scan-g" arm-profile "arm-scan" ! wlan handover-trigger-profile "default" ! wlan rrm-ie-profile "default" ! wlan bcn-rpt-req-profile "default" ! wlan dot11r-profile "default" ! wlan tsm-req-profile "default" ! wlan voip-cac-profile "default" ! wlan ht-ssid-profile "default" ! wlan ht-ssid-profile "gjest@rbup-htssid_prof" ! wlan ht-ssid-profile "mobile@rbup-htssid_prof" ! wlan ht-ssid-profile "office@rbup-htssid_prof" ! wlan ht-ssid-profile "skill@rbup-htssid_prof" ! wlan ht-ssid-profile "voip@rbup-htssid_prof" ! wlan hotspot anqp-venue-name-profile "default" ! wlan hotspot anqp-nwk-auth-profile "default" ! wlan hotspot anqp-roam-cons-profile "default" ! wlan hotspot anqp-nai-realm-profile "default" ! wlan hotspot anqp-3gpp-nwk-profile "default" ! wlan hotspot h2qp-operator-friendly-name-profile "default" ! wlan hotspot h2qp-wan-metrics-profile "default" ! wlan hotspot h2qp-conn-capability-profile "default" ! wlan hotspot h2qp-op-cl-profile "default" ! wlan hotspot anqp-ip-addr-avail-profile "default" ! wlan hotspot anqp-domain-name-profile "default" ! wlan edca-parameters-profile station "default" ! wlan edca-parameters-profile ap "default" ! wlan dot11k-profile "default" ! wlan ssid-profile "default" wmm-vo-dscp "56" wmm-vi-dscp "40" wmm-be-dscp "24" wmm-bk-dscp "8" ! wlan ssid-profile "gjest@rbup-ssid_prof" essid "gjest@rbup" wmm-vo-dscp "56" wmm-vi-dscp "40" wmm-be-dscp "24" wmm-bk-dscp "8" ht-ssid-profile "gjest@rbup-htssid_prof" ! wlan ssid-profile "guest@rbup-ssid_prof" essid "guest@rbup" wmm-vo-dscp "56" wmm-vi-dscp "40" wmm-be-dscp "24" wmm-bk-dscp "8" ! wlan ssid-profile "mobile@rbup-ssid_prof" essid "mobile@rbup" opmode wpa2-aes wmm-vo-dscp "56" wmm-vi-dscp "40" wmm-be-dscp "24" wmm-bk-dscp "8" ht-ssid-profile "mobile@rbup-htssid_prof" ! wlan ssid-profile "office@rbup-ssid_prof" essid "office@rbup" opmode wpa2-aes wmm-vo-dscp "56" wmm-vi-dscp "40" wmm-be-dscp "24" wmm-bk-dscp "8" ht-ssid-profile "office@rbup-htssid_prof" ! wlan ssid-profile "skill@rbup-ssid_prof" essid "skill@rbup" opmode wpa2-aes wmm-vo-dscp "56" wmm-vi-dscp "40" wmm-be-dscp "24" wmm-bk-dscp "8" hide-ssid ht-ssid-profile "skill@rbup-htssid_prof" ! wlan ssid-profile "voip@rbup-ssid_prof" essid "voip@rbup" opmode wpa2-psk-aes wmm-vo-dscp "56" wmm-vi-dscp "40" wmm-be-dscp "24" wmm-bk-dscp "8" wpa-passphrase c10f15dd5eaa56295a5a5180d9efe6de37db6630a0f7405c ht-ssid-profile "voip@rbup-htssid_prof" ! wlan hotspot advertisement-profile "default" ! wlan hotspot hs2-profile "default" ! wlan virtual-ap "default" ! wlan virtual-ap "gjest@rbup-vap_prof" aaa-profile "gjest@rbup-aaa_prof" ssid-profile "gjest@rbup-ssid_prof" vlan 13 ! wlan virtual-ap "guest@rbup-vap_prof" aaa-profile "guest_at_rbup-aaa_prof" ssid-profile "guest@rbup-ssid_prof" vlan 13 ! wlan virtual-ap "mobile@rbup-vap_prof" aaa-profile "mobile@rbup-aaa_prof" ssid-profile "mobile@rbup-ssid_prof" vlan 212 ! wlan virtual-ap "office@rbup-vap_prof" aaa-profile "office@rbup-aaa_prof" ssid-profile "office@rbup-ssid_prof" vlan 11 band-steering ! wlan virtual-ap "skill@rbup-vap_prof" aaa-profile "skill@rbup-aaa_prof" ssid-profile "skill@rbup-ssid_prof" vlan 1 ! wlan virtual-ap "voip@rbup-vap_prof" aaa-profile "voip@rbup-aaa_prof" ssid-profile "voip@rbup-ssid_prof" vlan 16 ! ap provisioning-profile "default" ! rf arm-rf-domain-profile arm-rf-domain-key "28a572871dd5a2117a19d6abdfc9ad59" ! ap-group "default" ! ap-group "GT4" virtual-ap "office@rbup-vap_prof" virtual-ap "mobile@rbup-vap_prof" virtual-ap "guest@rbup-vap_prof" virtual-ap "skill@rbup-vap_prof" virtual-ap "gjest@rbup-vap_prof" ! ap-group "GV1" virtual-ap "office@rbup-vap_prof" virtual-ap "mobile@rbup-vap_prof" virtual-ap "voip@rbup-vap_prof" virtual-ap "guest@rbup-vap_prof" ! ap-name "rbupgv1ap407" virtual-ap "skill@rbup-vap_prof" virtual-ap "mobile@rbup-vap_prof" virtual-ap "office@rbup-vap_prof" virtual-ap "voip@rbup-vap_prof" virtual-ap "guest@rbup-vap_prof" ! airgroup cppm-server aaa ! logging level debugging security subcat firewall logging facility local0 logging level debugging user-debug 84:38:35:51:6f:30 snmp-server enable trap firewall-visibility process monitor log end