sh running-config 
version 6.4.4.0-4.2.3
virtual-controller-key xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
name TEST_VC
virtual-controller-ip 172.16.2.99
terminal-access
rf-band 5.0
dynamic-radius-proxy


arm
 wide-bands 5ghz
 a-channels 36+,44+,52+,60+,100+,108+,36E,52E,100E
 g-channels 1,6,11
 min-tx-power 6
 max-tx-power 15
 band-steering-mode prefer-5ghz
 air-time-fairness-mode fair-access
 client-aware
 scanning


syslog-level warn ap-debug 
syslog-level warn network 
syslog-level warn security 
syslog-level warn system 
syslog-level warn user 
syslog-level warn user-debug 
syslog-level warn wireless 


extended-ssid

restrict-corp-access 



mgmt-user admin xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx



wlan access-rule default_wired_port_profile
 index 0
 rule any any match any any any permit

wlan access-rule wired-instant
 index 1
 rule masterip 0.0.0.0 match tcp 80 80 permit
 rule masterip 0.0.0.0 match tcp 4343 4343 permit
 rule any any match udp 67 68 permit
 rule any any match udp 53 53 permit

wlan access-rule SSID1
 index 2
 rule any any match any any any permit

wlan access-rule SSID2
 index 10
 rule any any match any any any permit

wlan ssid-profile SSID1
 enable
 index 0
 type employee
 essid SSID1
 wpa-passphrase 9c2cf0a7eb89bc820e37604882cf586846d6e6810912e545
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 5
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 g-min-tx-rate 5
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64


wlan ssid-profile SSID2
 enable
 index 8
 type employee
 essid SSID2
 wpa-passphrase d9ff1f3893b1cf20375d2db8d1b93c84e2ec45039734e896
 opmode wpa2-psk-aes
 max-authentication-failures 0
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

auth-survivability cache-time-out 12




blacklist-time 3600
auth-failure-blacklist-time 3600

ids
 wireless-containment none


wired-port-profile wired-instant
 switchport-mode access
 allowed-vlan all
 native-vlan guest
 no shutdown
 access-rule-name wired-instant
 speed auto
 duplex auto
 no poe
 type guest
 captive-portal disable
 no dot1x

wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex full
 no poe
 type employee
 captive-portal disable
 no dot1x


enet0-port-profile default_wired_port_profile

uplink
 preemption
 enforce none
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180


airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay

airgroupservice airprint
 disable
 description AirPrint