aaa rfc-3576-server "132.149.98.152"
   key "pass@123"
=================================
aaa rfc-3576-server "132.149.98.150"
   key "pass@123"
=======================================

ip access-list session captiveportalnew
  any host 132.149.98.150 svc-http permit log
  any host 132.149.98.151 svc-http permit log
  any host 132.149.98.152 svc-http permit log
  any host 132.149.98.150 svc-https permit log
  any host 132.149.98.151 svc-https permit log
  any host 132.149.98.152 svc-https permit log
  any any svc-dns permit log
  user any svc-http dst-nat 8080
  user any svc-https dst-nat 8081
  user any svc-http-proxy1 dst-nat 8088
  user any svc-http-proxy2 dst-nat 8088
  user any svc-http-proxy3 dst-nat 8088
  user alias mswitch svc-http dst-nat 8080 log
  user alias mswitch svc-https dst-nat 8081 log
  user host 132.149.15.154 svc-http permit log
  user host 132.149.15.154 svc-https permit log
========================

user-role BajajCorporate
 vlan 20
 access-list session global-sacl
 access-list session apprf-BajajCorporate-sacl
 access-list session allowall
===================================
ip access-list session apprf-BajajCorporate-sacl
========================================
aaa authentication dot1x "Corp@Bajaj_Dot1X_Auth_PROFILE"
   machine-authentication machine-default-role "authenticated"
   machine-authentication user-default-role "authenticated
====================================
aaa profile "Corp@Bajaj_AAA_PROFILE"
   authentication-dot1x "Corp@Bajaj_Dot1X_Auth_PROFILE"
   dot1x-default-role "BajajCorporate"
   dot1x-server-group "CPPM_GROUP"
   radius-accounting "CPPM_GROUP"
   rfc-3576-server "132.149.98.150"
   rfc-3576-server "132.149.98.152"
=================================

wlan ssid-profile "Corp@Bajaj_SSID_PROF"
   essid "BEL_Employee"
   opmode wpa-tkip wpa-aes wpa2-aes wpa2-tkip
===========================
wlan virtual-ap "Sion_5Flr"
   aaa-profile "Corp@Bajaj_AAA_PROFILE"
   ssid-profile "Corp@Bajaj_SSID_PROF"
   vlan 1
   forward-mode bridge