version 8.4.0.0-8.4.0
virtual-controller-country ES
virtual-controller-key 360f800101391ed798e48fbd609e3e27014606c2f1e0f9173f
name ArubaVC
terminal-access
activate-disable
clock timezone none 00 00
rf-band all

allowed-ap bc:9f:e4:cc:db:4e



arm
 wide-bands none
 a-channels 36,40,44,48,149,153,157,161,165
 g-channels 1,6,11
 min-tx-power 12
 max-tx-power 127
 band-steering-mode prefer-5ghz
 air-time-fairness-mode default-access
 client-aware

rf dot11g-radio-profile
 dot11h
 csa-count 2

rf dot11a-radio-profile
 dot11h
 csa-count 2
 very-high-throughput-disable


syslog-level warn ap-debug 
syslog-level warn network 
syslog-level warn security 
syslog-level warn system 
syslog-level warn user 
syslog-level warn user-debug 
syslog-level warn wireless 











hash-mgmt-password
hash-mgmt-user admin password hash 538b4f060212ddd601563cceec23e41e134c0cf6b93b8151a7b2de08b28f605971dbfd7113



wlan access-rule default_wired_port_profile
 index 0
 rule any any match any any any permit

wlan access-rule WirelessFPD
 index 1
 rule any any match any any any permit

wlan access-rule wired-SetMeUp
 index 2
 rule masterip 0.0.0.0 match tcp 80 80 permit
 rule masterip 0.0.0.0 match tcp 4343 4343 permit
 rule any any match udp 67 68 permit
 rule any any match udp 53 53 permit

wlan ssid-profile WirelessFPD
 enable
 index 0
 type employee
 essid Demo303
 wpa-passphrase 637141ad797012584fee15444e075bbd5fba055dddefab09
 opmode wpa2-psk-aes
 max-authentication-failures 0
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter none
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64
 very-high-throughput-disable

auth-survivability cache-time-out 24



wlan external-captive-portal
 server localhost
 port 80
 url "/"
 auth-text "Authenticated"
 auto-whitelist-disable
 https


blacklist-time 3600
auth-failure-blacklist-time 3600



ids
 wireless-containment none

alg
 sccp-disable
 sip-disable
 ua-disable
 vocera-disable

wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 uplink-enable
 trusted
 no shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex auto
 no poe
 type employee
 auth-server InternalServer
 captive-portal disable
 no dot1x

wired-port-profile wired-SetMeUp
 switchport-mode access
 allowed-vlan all
 native-vlan guest
 no shutdown
 access-rule-name wired-SetMeUp
 speed auto
 duplex auto
 no poe
 type guest
 captive-portal disable
 no dot1x


enet0-port-profile default_wired_port_profile

uplink
 preemption
 enforce none
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180



airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay

airgroupservice airprint
 disable
 description AirPrint




firewall
 disable-auto-topology-rules

cluster-security
 allow-low-assurance-devices