version 8.6.0.0-8.6.0
virtual-controller-country ES
virtual-controller-key 071f4b7d01c077f65ff159cba88b0e62e42285bda3983f2ca9
name SetMeUp-C5:28:BC
terminal-access
ntp-server 10.254.254.1
clock timezone Madrid 01 00
rf-band 5.0


allowed-ap e8:26:89:c5:28:bc



arm
 wide-bands 5ghz
 80mhz-support
 min-tx-power 18
 max-tx-power 127
 band-steering-mode force-5ghz
 air-time-fairness-mode default-access
 channel-quality-aware-arm-disable
 client-aware
 scanning
 client-match nb-matching 75
 client-match calc-threshold 30
 client-match calc-interval 30

rf dot11g-radio-profile
 dot11h
 max-distance 0
 disable-arm-wids-functions off
 free-channel-index 40

rf dot11a-radio-profile
 dot11h
 max-distance 0


syslog-level warn ap-debug 
syslog-level warn network 
syslog-level warn security 
syslog-level warn system 
syslog-level warn user 
syslog-level warn user-debug 
syslog-level warn wireless 
















hash-mgmt-password
hash-mgmt-user Siemens password hash cd62278f02bfafee28e5dc0b34e8d3d948bd979faca69c4685a8a41a4ae19c447aa0f312d4



wlan access-rule default_wired_port_profile
 index 0
 rule any any match any any any permit

wlan access-rule wired-SetMeUp
 index 1
 rule masterip 0.0.0.0 match tcp 80 80 permit
 rule masterip 0.0.0.0 match tcp 4343 4343 permit
 rule any any match udp 67 68 permit
 rule any any match udp 53 53 permit

wlan access-rule CT_CNK7K9T2BX_INR
 index 2
 rule any any match any any any permit

wlan ssid-profile CT_CNK7K9T2BX_INR
 enable
 index 0
 type employee
 essid CT_CNK7K9T2BX_INR
 wpa-passphrase fb7436938124e8eee7f814bdb35c5dc1f3cbd3a1fddd6be7
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan guest
 rf-band 5.0
 captive-portal disable
 dtim-period 1
 inactivity-timeout 10800
 broadcast-filter arp
 air-time-limit 100
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 2

auth-survivability cache-time-out 24



wlan external-captive-portal
 server localhost
 port 80
 url "/"
 auth-text "Authenticated"
 auto-whitelist-disable
 https


blacklist-time 3600
auth-failure-blacklist-time 3600



ids
 wireless-containment none


wired-port-profile wired-SetMeUp
 switchport-mode access
 allowed-vlan all
 native-vlan guest
 no shutdown
 access-rule-name wired-SetMeUp
 speed auto
 duplex auto
 no poe
 type guest
 captive-portal disable
 no dot1x

wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex full
 no poe
 type employee
 captive-portal disable
 no dot1x


enet0-port-profile default_wired_port_profile

uplink
 preemption
 enforce none
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180



airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay

airgroupservice airprint
 disable
 description AirPrint




console
 disable

cluster-security
 allow-low-assurance-devices