version 6.5.4.0-6.5.4
virtual-controller-country FR
virtual-controller-key 43338cxxxxxxxxxxxxxxxxxxxxxxxx
name MairieDRE
virtual-controller-ip 1.2.1.112
virtual-controller-vlan 1 255.0.0.0 1.2.1.15
virtual-controller-dnsip 1.1.20.1
terminal-access
clock timezone Paris 01 00
rf-band all

allow-new-aps
allowed-ap 20:a6:cdxxxxxxx
allowed-ap 20:a6:cdxxxxxxx



arm
 wide-bands 5ghz
 80mhz-support
 min-tx-power 18
 max-tx-power 127
 band-steering-mode prefer-5ghz
 air-time-fairness-mode default-access
 client-aware
 scanning


syslog-level warn ap-debug 
syslog-level warn network 
syslog-level warn security 
syslog-level warn system 
syslog-level warn user 
syslog-level warn user-debug 
syslog-level warn wireless 







hash-mgmt-password
hash-mgmt-user admin password hash f56c09xxxxxxxxxxxxxxxxxxxxxx



wlan access-rule default_wired_port_profile
 index 0
 rule any any match any any any permit

wlan access-rule wired-SetMeUp
 index 1
 rule masterip 0.0.0.0 match tcp 80 80 permit
 rule masterip 0.0.0.0 match tcp 4343 4343 permit
 rule any any match udp 67 68 permit
 rule any any match udp 53 53 permit

wlan access-rule MDDRE
 index 2
 rule any any match any any any permit

wlan access-rule Sonicpoint
 index 3
 rule any any match any any any permit

wlan access-rule ToIP
 index 4
 rule any any match any any any permit

wlan access-rule PRO_WLAN
 index 5
 rule any any match any any any permit

wlan access-rule Public_WLAN
 index 6
 rule any any match any any any permit

wlan access-rule Phone_WLAN
 index 7
 rule any any match any any any permit

inbound-firewall
 rule any any any any match any any any permit

wlan ssid-profile MDDRE
 enable
 index 0
 type employee
 essid MDDRE
 wpa-passphrase 476a08a3ac92330889e9xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 1
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

wlan ssid-profile Sonicpoint
 enable
 index 1
 type employee
 essid Sonicpoint
 wpa-passphrase 95892xxxxxxxxxxxxxxxxxxxxxxxx
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 50
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

wlan ssid-profile ToIP
 enable
 index 2
 type voice
 essid ToIP
 wpa-passphrase 76545c8fxxxxxxxxxxxxxxxxxxxxxxxxxx
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 10
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

wlan ssid-profile PRO_WLAN
 enable
 index 3
 type employee
 essid PRO_WLAN
 wpa-passphrase 475469086xxxxxxxxxxxxxxxxxxxxxxxxxxxx
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 2
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

wlan ssid-profile Public_WLAN
 enable
 index 4
 type employee
 essid Public_WLAN
 wpa-passphrase f81d1dxxxxxxxxxxxxxxxxxxxxxx
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 3
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

wlan ssid-profile Phone_WLAN
 enable
 index 5
 type employee
 essid Phone_WLAN
 wpa-passphrase a5c16f7xxxxxxxxxxxxxxxxxxxxxxxxxx
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 4
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

auth-survivability cache-time-out 24



wlan external-captive-portal
 server localhost
 port 80
 url "/"
 auth-text "Authenticated"
 auto-whitelist-disable
 https


blacklist-time 3600
auth-failure-blacklist-time 3600


ids
 wireless-containment none


wired-port-profile wired-SetMeUp
 switchport-mode access
 allowed-vlan all
 native-vlan guest
 no shutdown
 access-rule-name wired-SetMeUp
 speed auto
 duplex auto
 no poe
 type guest
 captive-portal disable
 no dot1x

wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex full
 no poe
 type employee
 captive-portal disable
 no dot1x


enet0-port-profile default_wired_port_profile

uplink
 no preemption
 enforce ethernet
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180
 uplink-priority ethernet 1
 uplink-priority wifi 2
 uplink-priority cellular 3


airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay

airgroupservice airprint
 disable
 description AirPrint




firewall
 disable-auto-topology-rules