18:64:72:cc:33:0a# show configuration
version 6.4.0.0-4.1.0
virtual-controller-country US
virtual-controller-key a44a763301aaa3f36ae94822773e9940b87810e975df2073f5
name NOC-DAN-AP-01
terminal-access
ntp-server 10.200.1.50
clock timezone Eastern-Time -05 00
clock summer-time EDT recurring second sunday march 02:00 first sunday november 02:00
rf-band all

allow-new-aps
allowed-ap 18:64:72:cc:33:0a



arm
 wide-bands 5ghz
 80mhz-support
 min-tx-power 18
 max-tx-power 127
 band-steering-mode prefer-5ghz
 air-time-fairness-mode fair-access
 client-aware
 scanning

ip dhcp pool
 subnet 192.168.1.0
 subnet-mask 255.255.255.0
 dns-server 64.72.64.10,72.22.160.14
 lease-time 30

internal-domains
 domain-name xxx.com
 domain-name yyy.com

syslog-level warn ap-debug
syslog-level warn network
syslog-level warn security
syslog-level warn system
syslog-level warn user
syslog-level warn user-debug
syslog-level warn wireless


device-id "NOC-DAN-AP-01"




mgmt-user xxxx bf8b4ff7772fa8d53c09629f166b6xfvcftya8a851896206e

wlan access-rule default_wired_port_profile
 index 0
 rule any any match any any any permit

wlan access-rule wired-instant
 index 1
 rule masterip 0.0.0.0 match tcp 80 80 permit
 rule masterip 0.0.0.0 match tcp 4343 4343 permit
 rule any any match udp 67 68 permit
 rule any any match udp 53 53 permit

wlan access-rule Corp
 index 2
 rule any any match any any any permit

wlan access-rule Personal
 index 3
 rule any any match any any any permit

wlan ssid-profile Corp
 enable
 index 0
 type employee
 essid NewOak
 wpa-passphrase 0dba77222d09224fe19c0147b8c5cdf779dc6bff4844bb2d
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 1
 auth-server InternalServer
 rf-band all
 captive-portal disable
 dtim-period 1
 inactivity-timeout 1000
 broadcast-filter none
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

wlan ssid-profile "NewOak Personal"
 enable
 index 1
 type employee
 essid Personal
 wpa-passphrase 057d36211d16ec2bce0f0245ac6de556644ce461a5b45959
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 2
 auth-server InternalServer
 rf-band all
 captive-portal disable
 dtim-period 1
 inactivity-timeout 1000
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

auth-survivability cache-time-out 24



wlan external-captive-portal
 server localhost
 port 80
 url "/"
 auth-text "Authenticated"
 auto-whitelist-disable
 https


blacklist-time 3600
auth-failure-blacklist-time 3600

ids classification

ids
 wireless-containment none

ip dhcp Personal
 server-type Local
 server-vlan 2
 subnet 192.168.2.0
 subnet-mask 255.255.255.0
 lease-time 1800
 dns-server x.x.x.x,y.y.y.y


wired-port-profile wired-instant
 switchport-mode access
 allowed-vlan all
 native-vlan guest
 no shutdown
 access-rule-name wired-instant
 speed auto
 duplex auto
 no poe
 type guest
 captive-portal disable
 no dot1x

wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan 1,2
 native-vlan 1
 no shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex full
 no poe
 type employee
 captive-portal disable
 no dot1x


enet0-port-profile default_wired_port_profile

uplink
 preemption
 enforce none
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180


airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay

airgroupservice airprint
 disable
 description AirPrint