version 6.4.2.0-4.1.1
virtual-controller-country US
virtual-controller-key c0e1e6c9017b962aff5fd84f486143df401cac33b44f762992
name cocoa-2
virtual-controller-ip 192.168.0.202
terminal-access
ntp-server pool.ntp.org
clock timezone Eastern-Time -05 00
clock summer-time EDT recurring second sunday march 02:00 first sunday november 02:00
rf-band all

allow-new-aps
allowed-ap ac:a3:1e:c5:81:0e
allowed-ap ac:a3:1e:c2:d5:8c
allowed-ap ac:a3:1e:c1:bc:b6



arm
 wide-bands 5ghz
 80mhz-support
 min-tx-power 18
 max-tx-power 127
 band-steering-mode prefer-5ghz
 air-time-fairness-mode fair-access
 client-aware
 scanning

ip dhcp pool
 subnet 10.100.0.0
 subnet-mask 255.255.254.0
 domain-name Cocoa-2


syslog-level warn ap-debug 
syslog-level warn network 
syslog-level warn security 
syslog-level warn system 
syslog-level warn user 
syslog-level warn user-debug 
syslog-level warn wireless 


extended-ssid




mgmt-user admin 5c6fabb4e61f683819ba29d7b113233b50693f6a7ddf6a96

wlan access-rule default_wired_port_profile
 index 0
 rule any any match any any any permit

wlan access-rule wired-instant
 index 1
 rule masterip 0.0.0.0 match tcp 80 80 permit
 rule masterip 0.0.0.0 match tcp 4343 4343 permit
 rule any any match udp 67 68 permit
 rule any any match udp 53 53 permit

wlan access-rule Cocoa-Admin
 index 2
 rule any any match any any any permit

wlan access-rule Linton
 index 3
 rule any any match any any any permit

wlan access-rule "Cocoa Cinnamon"
 index 4
 rule any any match any any any permit

wlan ssid-profile Cocoa-Admin
 enable
 work-without-uplink
 index 0
 zone "Cocoa Admin"
 type employee
 essid Cocoa-Admin
 wpa-passphrase cf37d7dc4d92134c8f3e324ed276a0bd00070793b9428917
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 10
 auth-server InternalServer
 rf-band all
 captive-portal disable
 hide-ssid
 dtim-period 1
 inactivity-timeout 1000
 broadcast-filter arp
 deny-inter-user-bridging
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64
 dot11r
 dot11k
 dot11v

wlan ssid-profile Linton
 enable
 work-without-uplink
 index 1
 zone Linton
 type employee
 essid Linton
 wpa-passphrase 98283c1ec51d29ea06b4cd46bce3e8ae517f7b2b6f056e9d
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 30
 auth-server InternalServer
 rf-band all
 captive-portal disable
 dtim-period 1
 inactivity-timeout 1000
 broadcast-filter arp
 deny-inter-user-bridging
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

wlan ssid-profile "Cocoa Cinnamon"
 enable
 work-without-uplink
 index 2
 type guest
 essid "Cocoa Cinnamon"
 wpa-passphrase f8bdd0e8cf4885cc38eaab029b9ac67194ba9588a55ed1fb
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 20
 rf-band all
 captive-portal disable
 dtim-period 1
 inactivity-timeout 1000
 broadcast-filter arp
 deny-inter-user-bridging
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

auth-survivability cache-time-out 24



wlan external-captive-portal
 server localhost
 port 80
 url "/"
 auth-text "Authenticated"
 auto-whitelist-disable
 https


blacklist-time 3600
auth-failure-blacklist-time 3600

ids classification

ids
 wireless-containment none

ip dhcp Cocoa-Guest
 server-type Local
 server-vlan 20
 subnet 10.10.0.0
 subnet-mask 255.255.254.0
 dns-server 8.8.8.8,8.8.4.4

ip dhcp Cocoa-Employee
 server-type Local
 server-vlan 10
 subnet 10.1.0.0
 subnet-mask 255.255.254.0
 dns-server 8.8.8.8,8.8.4.4

ip dhcp Linton
 server-type Local
 server-vlan 30
 subnet 10.20.0.0
 subnet-mask 255.255.254.0
 dns-server 8.8.8.8,8.8.4.4


wired-port-profile wired-instant
 switchport-mode access
 allowed-vlan all
 native-vlan guest
 no shutdown
 access-rule-name wired-instant
 speed auto
 duplex auto
 no poe
 type guest
 captive-portal disable
 no dot1x
 inactivity-timeout 1000

wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex full
 no poe
 type employee
 captive-portal disable
 no dot1x
 inactivity-timeout 1000


enet0-port-profile default_wired_port_profile

uplink
 no preemption
 enforce ethernet
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180


airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay

airgroupservice airprint
 disable
 description AirPrint