Wired

 View Only
last person joined: yesterday 

Expand all | Collapse all

2930M Switch /w Radius Host Support in Central???

This thread has been viewed 20 times
  • 1.  2930M Switch /w Radius Host Support in Central???

    Posted Nov 27, 2023 10:46 AM

    Hi,

    We're in the process of implementing Aruba ClearPass on our 2930M switches which are managed via Aruba Central (template groups). We're attempting to push a configuration to the switch so it can act as a radius host. (note this is support via the CLI - non cloud). When we try to push the configuration we get a unable to backup running config error message via central.

    Has anyone sucessfully deployed Aruba Clearpass with Radius on 2930M switches using Aruba Central?

    Aurba AOS - 16.10.022



  • 2.  RE: 2930M Switch /w Radius Host Support in Central???

    MVP EXPERT
    Posted Nov 27, 2023 04:20 PM

    RADIUS (802.1x) configuration is fully support on 2930M no matter how you manage it from Aruba Central. When not familiar with template groups ask your local Aruba Partner for help with the configuration. When you use template mode you have to think carefully about the variable you want to use.

    Here a template example for 29xx switches with radius:

    %_sys_template_header%
    hostname "%_sys_hostname%"
    %_sys_module_command%
    no cwmp enable
    include-credentials
    radius-server host "clearpass.marcelkoedijk.nl" tls
    radius-server host 172.16.200.50 key "passwordhere"
    radius-server host 172.16.200.50 dyn-authorization
    radius-server host 172.16.200.50 time-window 0
    radius-server dead-time 5
    timesync ntp
    no sntp
    ntp unicast
    ntp server 129.250.35.251 iburst
    ntp enable
    no telnet-server
    time daylight-time-rule western-europe
    time timezone 60
    no web-management
    web-management idle-timeout 120
    ip dns server-address priority 1 8.8.8.8
    ip route 0.0.0.0 0.0.0.0 172.16.200.254
    ip client-tracker
    ip client-tracker probe-delay 30
    
    vlan 200
       name "VLAN200"
       ip address 172.16.200.80 255.255.255.0
       exit
    
    interface 1
    %if interface.1.state=disable%
    disable
    %endif%
    %if interface.1.name%
    name %interface.1.name%
    %endif%
    %if interface.1.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.1.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.1.untagged%
    untagged vlan %interface.1.untagged%
    %endif%
    %if interface.1.tagged%
    tagged vlan %interface.1.tagged%
    %endif%
    exit
    interface 2
    %if interface.2.state=disable%
    disable
    %endif%
    %if interface.2.name%
    name %interface.2.name%
    %endif%
    %if interface.2.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.2.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.2.untagged%
    untagged vlan %interface.2.untagged%
    %endif%
    %if interface.2.tagged%
    tagged vlan %interface.2.tagged%
    %endif%
    exit
    interface 3
    %if interface.3.state=disable%
    disable
    %endif%
    %if interface.3.name%
    name %interface.3.name%
    %endif%
    %if interface.3.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.3.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.3.untagged%
    untagged vlan %interface.3.untagged%
    %endif%
    %if interface.3.tagged%
    tagged vlan %interface.3.tagged%
    %endif%
    exit
    interface 4
    %if interface.4.state=disable%
    disable
    %endif%
    %if interface.4.name%
    name %interface.4.name%
    %endif%
    %if interface.4.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.4.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.4.untagged%
    untagged vlan %interface.4.untagged%
    %endif%
    %if interface.4.tagged%
    tagged vlan %interface.4.tagged%
    %endif%
    exit
    interface 5
    %if interface.5.state=disable%
    disable
    %endif%
    %if interface.5.name%
    name %interface.5.name%
    %endif%
    %if interface.5.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.5.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.5.untagged%
    untagged vlan %interface.5.untagged%
    %endif%
    %if interface.5.tagged%
    tagged vlan %interface.5.tagged%
    %endif%
    exit
    interface 6
    %if interface.6.state=disable%
    disable
    %endif%
    %if interface.6.name%
    name %interface.6.name%
    %endif%
    %if interface.6.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.6.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.6.untagged%
    untagged vlan %interface.6.untagged%
    %endif%
    %if interface.6.tagged%
    tagged vlan %interface.6.tagged%
    %endif%
    exit
    interface 7
    %if interface.7.state=disable%
    disable
    %endif%
    %if interface.7.name%
    name %interface.7.name%
    %endif%
    %if interface.7.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.7.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.7.untagged%
    untagged vlan %interface.7.untagged%
    %endif%
    %if interface.7.tagged%
    tagged vlan %interface.7.tagged%
    %endif%
    exit
    interface 8
    %if interface.8.state=disable%
    disable
    %endif%
    %if interface.8.name%
    name %interface.8.name%
    %endif%
    %if interface.8.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.8.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.8.untagged%
    untagged vlan %interface.8.untagged%
    %endif%
    %if interface.8.tagged%
    tagged vlan %interface.8.tagged%
    %endif%
    exit
    interface 9
    %if interface.9.state=disable%
    disable
    %endif%
    %if interface.9.name%
    name %interface.9.name%
    %endif%
    %if interface.9.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.9.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.9.untagged%
    untagged vlan %interface.9.untagged%
    %endif%
    %if interface.9.tagged%
    tagged vlan %interface.9.tagged%
    %endif%
    exit
    interface 10
    %if interface.10.state=disable%
    disable
    %endif%
    %if interface.10.name%
    name %interface.10.name%
    %endif%
    %if interface.10.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.10.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.10.untagged%
    untagged vlan %interface.10.untagged%
    %endif%
    %if interface.10.tagged%
    tagged vlan %interface.10.tagged%
    %endif%
    exit
    interface 11
    %if interface.11.state=disable%
    disable
    %endif%
    %if interface.11.name%
    name %interface.11.name%
    %endif%
    %if interface.11.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.11.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.11.untagged%
    untagged vlan %interface.11.untagged%
    %endif%
    %if interface.11.tagged%
    tagged vlan %interface.11.tagged%
    %endif%
    exit
    interface 12
    %if interface.12.state=disable%
    disable
    %endif%
    %if interface.12.name%
    name %interface.12.name%
    %endif%
    %if interface.12.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.12.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.12.untagged%
    untagged vlan %interface.12.untagged%
    %endif%
    %if interface.12.tagged%
    tagged vlan %interface.12.tagged%
    %endif%
    exit
    interface 13
    %if interface.13.state=disable%
    disable
    %endif%
    %if interface.13.name%
    name %interface.13.name%
    %endif%
    %if interface.13.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.13.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.13.untagged%
    untagged vlan %interface.13.untagged%
    %endif%
    %if interface.13.tagged%
    tagged vlan %interface.13.tagged%
    %endif%
    exit
    interface 14
    %if interface.14.state=disable%
    disable
    %endif%
    %if interface.14.name%
    name %interface.14.name%
    %endif%
    %if interface.14.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.14.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.14.untagged%
    untagged vlan %interface.14.untagged%
    %endif%
    %if interface.14.tagged%
    tagged vlan %interface.14.tagged%
    %endif%
    exit
    interface 15
    %if interface.15.state=disable%
    disable
    %endif%
    %if interface.15.name%
    name %interface.15.name%
    %endif%
    %if interface.15.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.15.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.15.untagged%
    untagged vlan %interface.15.untagged%
    %endif%
    %if interface.15.tagged%
    tagged vlan %interface.15.tagged%
    %endif%
    exit
    interface 16
    %if interface.16.state=disable%
    disable
    %endif%
    %if interface.16.name%
    name %interface.16.name%
    %endif%
    %if interface.16.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.16.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.16.untagged%
    untagged vlan %interface.16.untagged%
    %endif%
    %if interface.16.tagged%
    tagged vlan %interface.16.tagged%
    %endif%
    exit
    interface 17
    %if interface.17.state=disable%
    disable
    %endif%
    %if interface.17.name%
    name %interface.17.name%
    %endif%
    %if interface.17.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.17.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.17.untagged%
    untagged vlan %interface.17.untagged%
    %endif%
    %if interface.17.tagged%
    tagged vlan %interface.17.tagged%
    %endif%
    exit
    interface 18
    %if interface.18.state=disable%
    disable
    %endif%
    %if interface.18.name%
    name %interface.18.name%
    %endif%
    %if interface.18.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.18.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.18.untagged%
    untagged vlan %interface.18.untagged%
    %endif%
    %if interface.18.tagged%
    tagged vlan %interface.18.tagged%
    %endif%
    exit
    interface 19
    %if interface.19.state=disable%
    disable
    %endif%
    %if interface.19.name%
    name %interface.19.name%
    %endif%
    %if interface.19.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.19.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.19.untagged%
    untagged vlan %interface.19.untagged%
    %endif%
    %if interface.19.tagged%
    tagged vlan %interface.19.tagged%
    %endif%
    exit
    interface 20
    %if interface.20.state=disable%
    disable
    %endif%
    %if interface.20.name%
    name %interface.20.name%
    %endif%
    %if interface.20.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.20.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.20.untagged%
    untagged vlan %interface.20.untagged%
    %endif%
    %if interface.20.tagged%
    tagged vlan %interface.20.tagged%
    %endif%
    exit
    interface 21
    %if interface.21.state=disable%
    disable
    %endif%
    %if interface.21.name%
    name %interface.21.name%
    %endif%
    %if interface.21.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.21.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.21.untagged%
    untagged vlan %interface.21.untagged%
    %endif%
    %if interface.21.tagged%
    tagged vlan %interface.21.tagged%
    %endif%
    exit
    interface 22
    %if interface.22.state=disable%
    disable
    %endif%
    %if interface.22.name%
    name %interface.22.name%
    %endif%
    %if interface.22.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.22.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.22.untagged%
    untagged vlan %interface.22.untagged%
    %endif%
    %if interface.22.tagged%
    tagged vlan %interface.22.tagged%
    %endif%
    exit
    interface 23
    %if interface.23.state=disable%
    disable
    %endif%
    %if interface.23.name%
    name %interface.23.name%
    %endif%
    %if interface.23.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.23.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.23.untagged%
    untagged vlan %interface.23.untagged%
    %endif%
    %if interface.23.tagged%
    tagged vlan %interface.23.tagged%
    %endif%
    exit
    interface 24
    %if interface.24.state=disable%
    disable
    %endif%
    %if interface.24.name%
    name %interface.24.name%
    %endif%
    %if interface.24.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.24.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.24.untagged%
    untagged vlan %interface.24.untagged%
    %endif%
    %if interface.24.tagged%
    tagged vlan %interface.24.tagged%
    %endif%
    exit
    interface 25
    %if interface.25.state=disable%
    disable
    %endif%
    %if interface.25.name%
    name %interface.25.name%
    %endif%
    %if interface.25.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.25.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.25.untagged%
    untagged vlan %interface.25.untagged%
    %endif%
    %if interface.25.tagged%
    tagged vlan %interface.25.tagged%
    %endif%
    exit
    interface 26
    %if interface.26.state=disable%
    disable
    %endif%
    %if interface.26.name%
    name %interface.26.name%
    %endif%
    %if interface.26.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.26.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.26.untagged%
    untagged vlan %interface.26.untagged%
    %endif%
    %if interface.26.tagged%
    tagged vlan %interface.26.tagged%
    %endif%
    exit
    interface 27
    %if interface.27.state=disable%
    disable
    %endif%
    %if interface.27.name%
    name %interface.27.name%
    %endif%
    %if interface.27.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.27.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.27.untagged%
    untagged vlan %interface.27.untagged%
    %endif%
    %if interface.27.tagged%
    tagged vlan %interface.27.tagged%
    %endif%
    interface 28
    %if interface.28.state=disable%
    disable
    %endif%
    %if interface.28.name%
    name %interface.28.name%
    %endif%
    %if interface.28.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.28.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.28.untagged%
    untagged vlan %interface.28.untagged%
    %endif%
    %if interface.28.tagged%
    tagged vlan %interface.28.tagged%
    %endif%
    exit
    interface 29
    %if interface.29.state=disable%
    disable
    %endif%
    %if interface.29.name%
    name %interface.29.name%
    %endif%
    %if interface.29.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.29.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.29.untagged%
    untagged vlan %interface.29.untagged%
    %endif%
    %if interface.29.tagged%
    tagged vlan %interface.29.tagged%
    %endif%
    interface 30
    %if interface.30.state=disable%
    disable
    %endif%
    %if interface.30.name%
    name %interface.30.name%
    %endif%
    %if interface.30.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.30.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.30.untagged%
    untagged vlan %interface.30.untagged%
    %endif%
    %if interface.30.tagged%
    tagged vlan %interface.30.tagged%
    %endif%
    exit
    interface 31
    %if interface.31.state=disable%
    disable
    %endif%
    %if interface.31.name%
    name %interface.31.name%
    %endif%
    %if interface.31.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.31.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.31.untagged%
    untagged vlan %interface.31.untagged%
    %endif%
    %if interface.31.tagged%
    tagged vlan %interface.31.tagged%
    %endif%
    exit
    interface 32
    %if interface.32.state=disable%
    disable
    %endif%
    %if interface.32.name%
    name %interface.32.name%
    %endif%
    %if interface.32.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.32.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.32.untagged%
    untagged vlan %interface.32.untagged%
    %endif%
    %if interface.32.tagged%
    tagged vlan %interface.32.tagged%
    %endif%
    exit
    interface 33
    %if interface.33.state=disable%
    disable
    %endif%
    %if interface.33.name%
    name %interface.33.name%
    %endif%
    %if interface.33.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.33.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.33.untagged%
    untagged vlan %interface.33.untagged%
    %endif%
    %if interface.33.tagged%
    tagged vlan %interface.33.tagged%
    %endif%
    exit
    interface 34
    %if interface.34.state=disable%
    disable
    %endif%
    %if interface.34.name%
    name %interface.34.name%
    %endif%
    %if interface.34.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.34.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.34.untagged%
    untagged vlan %interface.34.untagged%
    %endif%
    %if interface.34.tagged%
    tagged vlan %interface.34.tagged%
    %endif%
    exit
    interface 35
    %if interface.35.state=disable%
    disable
    %endif%
    %if interface.35.name%
    name %interface.35.name%
    %endif%
    %if interface.35.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.35.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.35.untagged%
    untagged vlan %interface.35.untagged%
    %endif%
    %if interface.35.tagged%
    tagged vlan %interface.35.tagged%
    %endif%
    exit
    interface 36
    %if interface.36.state=disable%
    disable
    %endif%
    %if interface.36.name%
    name %interface.36.name%
    %endif%
    %if interface.36.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.36.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.36.untagged%
    untagged vlan %interface.36.untagged%
    %endif%
    %if interface.36.tagged%
    tagged vlan %interface.36.tagged%
    %endif%
    exit
    interface 37
    %if interface.37.state=disable%
    disable
    %endif%
    %if interface.37.name%
    name %interface.37.name%
    %endif%
    %if interface.37.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.37.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.37.untagged%
    untagged vlan %interface.37.untagged%
    %endif%
    %if interface.37.tagged%
    tagged vlan %interface.37.tagged%
    %endif%
    exit
    interface 38
    %if interface.38.state=disable%
    disable
    %endif%
    %if interface.38.name%
    name %interface.38.name%
    %endif%
    %if interface.38.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.38.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.38.untagged%
    untagged vlan %interface.38.untagged%
    %endif%
    %if interface.38.tagged%
    tagged vlan %interface.38.tagged%
    %endif%
    exit
    interface 39
    %if interface.39.state=disable%
    disable
    %endif%
    %if interface.39.name%
    name %interface.39.name%
    %endif%
    %if interface.39.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.39.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.39.untagged%
    untagged vlan %interface.39.untagged%
    %endif%
    %if interface.39.tagged%
    tagged vlan %interface.39.tagged%
    %endif%
    exit
    interface 40
    %if interface.40.state=disable%
    disable
    %endif%
    %if interface.40.name%
    name %interface.40.name%
    %endif%
    %if interface.40.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.40.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.40.untagged%
    untagged vlan %interface.40.untagged%
    %endif%
    %if interface.40.tagged%
    tagged vlan %interface.40.tagged%
    %endif%
    exit
    interface 41
    %if interface.41.state=disable%
    disable
    %endif%
    %if interface.41.name%
    name %interface.41.name%
    %endif%
    %if interface.41.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.41.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.41.untagged%
    untagged vlan %interface.41.untagged%
    %endif%
    %if interface.41.tagged%
    tagged vlan %interface.41.tagged%
    %endif%
    exit
    interface 42
    %if interface.42.state=disable%
    disable
    %endif%
    %if interface.42.name%
    name %interface.42.name%
    %endif%
    %if interface.42.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.42.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.42.untagged%
    untagged vlan %interface.42.untagged%
    %endif%
    %if interface.42.tagged%
    tagged vlan %interface.42.tagged%
    %endif%
    exit
    interface 43
    %if interface.43.state=disable%
    disable
    %endif%
    %if interface.43.name%
    name %interface.43.name%
    %endif%
    %if interface.43.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.43.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.43.untagged%
    untagged vlan %interface.43.untagged%
    %endif%
    %if interface.43.tagged%
    tagged vlan %interface.43.tagged%
    %endif%
    exit
    interface 44
    %if interface.44.state=disable%
    disable
    %endif%
    %if interface.44.name%
    name %interface.44.name%
    %endif%
    %if interface.44.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.44.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.44.untagged%
    untagged vlan %interface.44.untagged%
    %endif%
    %if interface.44.tagged%
    tagged vlan %interface.44.tagged%
    %endif%
    exit
    interface 45
    %if interface.45.state=disable%
    disable
    %endif%
    %if interface.45.name%
    name %interface.45.name%
    %endif%
    %if interface.45.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.45.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.45.untagged%
    untagged vlan %interface.45.untagged%
    %endif%
    %if interface.45.tagged%
    tagged vlan %interface.45.tagged%
    %endif%
    exit
    interface 46
    %if interface.46.state=disable%
    disable
    %endif%
    %if interface.46.name%
    name %interface.46.name%
    %endif%
    %if interface.46.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.46.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.46.untagged%
    untagged vlan %interface.46.untagged%
    %endif%
    %if interface.46.tagged%
    tagged vlan %interface.46.tagged%
    %endif%
    interface 47
    %if interface.47.state=disable%
    disable
    %endif%
    %if interface.47.name%
    name %interface.47.name%
    %endif%
    %if interface.47.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.47.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.47.untagged%
    untagged vlan %interface.47.untagged%
    %endif%
    %if interface.47.tagged%
    tagged vlan %interface.47.tagged%
    %endif%
    exit
    interface 48
    %if interface.48.state=disable%
    disable
    %endif%
    %if interface.48.name%
    name %interface.48.name%
    %endif%
    %if interface.48.poe = 0%
    no power-over-ethernet
    %endif%
    %if interface.48.rate.limit = 1%
    rate-limit bcast in percent 10
    rate-limit mcast in percent 75
    %endif%
    %if interface.48.untagged%
    untagged vlan %interface.48.untagged%
    %endif%
    %if interface.48.tagged%
    tagged vlan %interface.48.tagged%
    %endif%
    exit
    %if interface.1.auth=1%
       aaa port-access authenticator 1
       aaa port-access authenticator 1 quiet-period 30
       aaa port-access authenticator 1 tx-period 10
       aaa port-access authenticator 1 supplicant-timeout 10
       aaa port-access authenticator 1 max-requests 3
       aaa port-access authenticator 1 logoff-period 1800
       aaa port-access authenticator 1 client-limit 3
       aaa port-access mac-based 1
       aaa port-access mac-based 1 addr-limit 3
       aaa port-access mac-based 1 logoff-period 1800
       aaa port-access mac-based 1 quiet-period 30
       aaa port-access 1 controlled-direction in
    %endif%
    %if interface.2.auth=1%
       aaa port-access authenticator 2
       aaa port-access authenticator 2 quiet-period 30
       aaa port-access authenticator 2 tx-period 10
       aaa port-access authenticator 2 supplicant-timeout 10
       aaa port-access authenticator 2 max-requests 3
       aaa port-access authenticator 2 logoff-period 1800
       aaa port-access authenticator 2 client-limit 3
       aaa port-access mac-based 2
       aaa port-access mac-based 2 addr-limit 3
       aaa port-access mac-based 2 logoff-period 1800
       aaa port-access mac-based 2 quiet-period 30
       aaa port-access 2 controlled-direction in
    %endif%
    %if interface.3.auth=1%
       aaa port-access authenticator 3
       aaa port-access authenticator 3 quiet-period 30
       aaa port-access authenticator 3 tx-period 10
       aaa port-access authenticator 3 supplicant-timeout 10
       aaa port-access authenticator 3 max-requests 3
       aaa port-access authenticator 3 logoff-period 1800
       aaa port-access authenticator 3 client-limit 3
       aaa port-access mac-based 3
       aaa port-access mac-based 3 addr-limit 3
       aaa port-access mac-based 3 logoff-period 1800
       aaa port-access mac-based 3 quiet-period 30
       aaa port-access 3 controlled-direction in
    %endif%
    %if interface.4.auth=1%
       aaa port-access authenticator 4
       aaa port-access authenticator 4 quiet-period 30
       aaa port-access authenticator 4 tx-period 10
       aaa port-access authenticator 4 supplicant-timeout 10
       aaa port-access authenticator 4 max-requests 3
       aaa port-access authenticator 4 logoff-period 1800
       aaa port-access authenticator 4 client-limit 3
       aaa port-access mac-based 4
       aaa port-access mac-based 4 addr-limit 3
       aaa port-access mac-based 4 logoff-period 1800
       aaa port-access mac-based 4 quiet-period 30
       aaa port-access 4 controlled-direction in
    %endif%
    %if interface.5.auth=1%
       aaa port-access authenticator 5
       aaa port-access authenticator 5 quiet-period 30
       aaa port-access authenticator 5 tx-period 10
       aaa port-access authenticator 5 supplicant-timeout 10
       aaa port-access authenticator 5 max-requests 3
       aaa port-access authenticator 5 logoff-period 1800
       aaa port-access authenticator 5 client-limit 3
       aaa port-access mac-based 5
       aaa port-access mac-based 5 addr-limit 3
       aaa port-access mac-based 5 logoff-period 1800
       aaa port-access mac-based 5 quiet-period 30
       aaa port-access 5 controlled-direction in
    %endif%
    %if interface.6.auth=1%
       aaa port-access authenticator 6
       aaa port-access authenticator 6 quiet-period 30
       aaa port-access authenticator 6 tx-period 10
       aaa port-access authenticator 6 supplicant-timeout 10
       aaa port-access authenticator 6 max-requests 3
       aaa port-access authenticator 6 logoff-period 1800
       aaa port-access authenticator 6 client-limit 3
       aaa port-access mac-based 6
       aaa port-access mac-based 6 addr-limit 3
       aaa port-access mac-based 6 logoff-period 1800
       aaa port-access mac-based 6 quiet-period 30
       aaa port-access 6 controlled-direction in
    %endif%
    %if interface.7.auth=1%
       aaa port-access authenticator 7
       aaa port-access authenticator 7 quiet-period 30
       aaa port-access authenticator 7 tx-period 10
       aaa port-access authenticator 7 supplicant-timeout 10
       aaa port-access authenticator 7 max-requests 3
       aaa port-access authenticator 7 logoff-period 1800
       aaa port-access authenticator 7 client-limit 3
       aaa port-access mac-based 7
       aaa port-access mac-based 7 addr-limit 3
       aaa port-access mac-based 7 logoff-period 1800
       aaa port-access mac-based 7 quiet-period 30
       aaa port-access 7 controlled-direction in
    %endif%
    %if interface.8.auth=1%
       aaa port-access authenticator 8
       aaa port-access authenticator 8 quiet-period 30
       aaa port-access authenticator 8 tx-period 10
       aaa port-access authenticator 8 supplicant-timeout 10
       aaa port-access authenticator 8 max-requests 3
       aaa port-access authenticator 8 logoff-period 1800
       aaa port-access authenticator 8 client-limit 3
       aaa port-access mac-based 8
       aaa port-access mac-based 8 addr-limit 3
       aaa port-access mac-based 8 logoff-period 1800
       aaa port-access mac-based 8 quiet-period 30
       aaa port-access 8 controlled-direction in
    %endif%
    %if interface.9.auth=1%
       aaa port-access authenticator 9
       aaa port-access authenticator 9 quiet-period 30
       aaa port-access authenticator 9 tx-period 10
       aaa port-access authenticator 9 supplicant-timeout 10
       aaa port-access authenticator 9 max-requests 3
       aaa port-access authenticator 9 logoff-period 1800
       aaa port-access authenticator 9 client-limit 3
       aaa port-access mac-based 9
       aaa port-access mac-based 9 addr-limit 3
       aaa port-access mac-based 9 logoff-period 1800
       aaa port-access mac-based 9 quiet-period 30
       aaa port-access 9 controlled-direction in
    %endif%
    %if interface.10.auth=1%
       aaa port-access authenticator 10
       aaa port-access authenticator 10 quiet-period 30
       aaa port-access authenticator 10 tx-period 10
       aaa port-access authenticator 10 supplicant-timeout 10
       aaa port-access authenticator 10 max-requests 3
       aaa port-access authenticator 10 logoff-period 1800
       aaa port-access authenticator 10 client-limit 3
       aaa port-access mac-based 10
       aaa port-access mac-based 10 addr-limit 3
       aaa port-access mac-based 10 logoff-period 1800
       aaa port-access mac-based 10 quiet-period 30
       aaa port-access 10 controlled-direction in
    %endif%
    %if interface.11.auth=1%
       aaa port-access authenticator 11
       aaa port-access authenticator 11 quiet-period 30
       aaa port-access authenticator 11 tx-period 10
       aaa port-access authenticator 11 supplicant-timeout 10
       aaa port-access authenticator 11 max-requests 3
       aaa port-access authenticator 11 logoff-period 1800
       aaa port-access authenticator 11 client-limit 3
       aaa port-access mac-based 11
       aaa port-access mac-based 11 addr-limit 3
       aaa port-access mac-based 11 logoff-period 1800
       aaa port-access mac-based 11 quiet-period 30
       aaa port-access 11 controlled-direction in
    %endif%
    %if interface.12.auth=1%
       aaa port-access authenticator 12
       aaa port-access authenticator 12 quiet-period 30
       aaa port-access authenticator 12 tx-period 10
       aaa port-access authenticator 12 supplicant-timeout 10
       aaa port-access authenticator 12 max-requests 3
       aaa port-access authenticator 12 logoff-period 1800
       aaa port-access authenticator 12 client-limit 3
       aaa port-access mac-based 12
       aaa port-access mac-based 12 addr-limit 3
       aaa port-access mac-based 12 logoff-period 1800
       aaa port-access mac-based 12 quiet-period 30
       aaa port-access 12 controlled-direction in
    %endif%
    %if interface.13.auth=1%
       aaa port-access authenticator 13
       aaa port-access authenticator 13 quiet-period 30
       aaa port-access authenticator 13 tx-period 10
       aaa port-access authenticator 13 supplicant-timeout 10
       aaa port-access authenticator 13 max-requests 3
       aaa port-access authenticator 13 logoff-period 1800
       aaa port-access authenticator 13 client-limit 3
       aaa port-access mac-based 13
       aaa port-access mac-based 13 addr-limit 3
       aaa port-access mac-based 13 logoff-period 1800
       aaa port-access mac-based 13 quiet-period 30
       aaa port-access 13 controlled-direction in
    %endif%
    %if interface.14.auth=1%
       aaa port-access authenticator 14
       aaa port-access authenticator 14 quiet-period 30
       aaa port-access authenticator 14 tx-period 10
       aaa port-access authenticator 14 supplicant-timeout 10
       aaa port-access authenticator 14 max-requests 3
       aaa port-access authenticator 14 logoff-period 1800
       aaa port-access authenticator 14 client-limit 3
       aaa port-access mac-based 14
       aaa port-access mac-based 14 addr-limit 3
       aaa port-access mac-based 14 logoff-period 1800
       aaa port-access mac-based 14 quiet-period 30
       aaa port-access 14 controlled-direction in
    %endif%
    %if interface.15.auth=1%
       aaa port-access authenticator 15
       aaa port-access authenticator 15 quiet-period 30
       aaa port-access authenticator 15 tx-period 10
       aaa port-access authenticator 15 supplicant-timeout 10
       aaa port-access authenticator 15 max-requests 3
       aaa port-access authenticator 15 logoff-period 1800
       aaa port-access authenticator 15 client-limit 3
       aaa port-access mac-based 15
       aaa port-access mac-based 15 addr-limit 3
       aaa port-access mac-based 15 logoff-period 1800
       aaa port-access mac-based 15 quiet-period 30
       aaa port-access 15 controlled-direction in
    %endif%
    %if interface.16.auth=1%
       aaa port-access authenticator 16
       aaa port-access authenticator 16 quiet-period 30
       aaa port-access authenticator 16 tx-period 10
       aaa port-access authenticator 16 supplicant-timeout 10
       aaa port-access authenticator 16 max-requests 3
       aaa port-access authenticator 16 logoff-period 1800
       aaa port-access authenticator 16 client-limit 3
       aaa port-access mac-based 16
       aaa port-access mac-based 16 addr-limit 3
       aaa port-access mac-based 16 logoff-period 1800
       aaa port-access mac-based 16 quiet-period 30
       aaa port-access 16 controlled-direction in
    %endif%
    %if interface.17.auth=1%
       aaa port-access authenticator 17
       aaa port-access authenticator 17 quiet-period 30
       aaa port-access authenticator 17 tx-period 10
       aaa port-access authenticator 17 supplicant-timeout 10
       aaa port-access authenticator 17 max-requests 3
       aaa port-access authenticator 17 logoff-period 1800
       aaa port-access authenticator 17 client-limit 3
       aaa port-access mac-based 17
       aaa port-access mac-based 17 addr-limit 3
       aaa port-access mac-based 17 logoff-period 1800
       aaa port-access mac-based 17 quiet-period 30
       aaa port-access 17 controlled-direction in
    %endif%
    %if interface.18.auth=1%
       aaa port-access authenticator 18
       aaa port-access authenticator 18 quiet-period 30
       aaa port-access authenticator 18 tx-period 10
       aaa port-access authenticator 18 supplicant-timeout 10
       aaa port-access authenticator 18 max-requests 3
       aaa port-access authenticator 18 logoff-period 1800
       aaa port-access authenticator 18 client-limit 3
       aaa port-access mac-based 18
       aaa port-access mac-based 18 addr-limit 3
       aaa port-access mac-based 18 logoff-period 1800
       aaa port-access mac-based 18 quiet-period 30
       aaa port-access 18 controlled-direction in
    %endif%
    %if interface.11.auth=1%
       aaa port-access authenticator 19
       aaa port-access authenticator 19 quiet-period 30
       aaa port-access authenticator 19 tx-period 10
       aaa port-access authenticator 19 supplicant-timeout 10
       aaa port-access authenticator 19 max-requests 3
       aaa port-access authenticator 19 logoff-period 1800
       aaa port-access authenticator 19 client-limit 3
       aaa port-access mac-based 19
       aaa port-access mac-based 19 addr-limit 3
       aaa port-access mac-based 19 logoff-period 1800
       aaa port-access mac-based 19 quiet-period 30
       aaa port-access 19 controlled-direction in
    %endif%
    %if interface.20.auth=1%
       aaa port-access authenticator 20
       aaa port-access authenticator 20 quiet-period 30
       aaa port-access authenticator 20 tx-period 10
       aaa port-access authenticator 20 supplicant-timeout 10
       aaa port-access authenticator 20 max-requests 3
       aaa port-access authenticator 20 logoff-period 1800
       aaa port-access authenticator 20 client-limit 3
       aaa port-access mac-based 20
       aaa port-access mac-based 20 addr-limit 3
       aaa port-access mac-based 20 logoff-period 1800
       aaa port-access mac-based 20 quiet-period 30
       aaa port-access 20 controlled-direction in
    %endif%
    %if interface.21.auth=1%
       aaa port-access authenticator 21
       aaa port-access authenticator 21 quiet-period 30
       aaa port-access authenticator 21 tx-period 10
       aaa port-access authenticator 21 supplicant-timeout 10
       aaa port-access authenticator 21 max-requests 3
       aaa port-access authenticator 21 logoff-period 1800
       aaa port-access authenticator 21 client-limit 3
       aaa port-access mac-based 21
       aaa port-access mac-based 21 addr-limit 3
       aaa port-access mac-based 21 logoff-period 1800
       aaa port-access mac-based 21 quiet-period 30
       aaa port-access 21 controlled-direction in
    %endif%
    %if interface.22.auth=1%
       aaa port-access authenticator 22
       aaa port-access authenticator 22 quiet-period 30
       aaa port-access authenticator 22 tx-period 10
       aaa port-access authenticator 22 supplicant-timeout 10
       aaa port-access authenticator 22 max-requests 3
       aaa port-access authenticator 22 logoff-period 1800
       aaa port-access authenticator 22 client-limit 3
       aaa port-access mac-based 22
       aaa port-access mac-based 22 addr-limit 3
       aaa port-access mac-based 22 logoff-period 1800
       aaa port-access mac-based 22 quiet-period 30
       aaa port-access 22 controlled-direction in
    %endif%
    %if interface.23.auth=1%
       aaa port-access authenticator 23
       aaa port-access authenticator 23 quiet-period 30
       aaa port-access authenticator 23 tx-period 10
       aaa port-access authenticator 23 supplicant-timeout 10
       aaa port-access authenticator 23 max-requests 3
       aaa port-access authenticator 23 logoff-period 1800
       aaa port-access authenticator 23 client-limit 3
       aaa port-access mac-based 23
       aaa port-access mac-based 23 addr-limit 3
       aaa port-access mac-based 23 logoff-period 1800
       aaa port-access mac-based 23 quiet-period 30
       aaa port-access 23 controlled-direction in
    %endif%
    %if interface.24.auth=1%
       aaa port-access authenticator 24
       aaa port-access authenticator 24 quiet-period 30
       aaa port-access authenticator 24 tx-period 10
       aaa port-access authenticator 24 supplicant-timeout 10
       aaa port-access authenticator 24 max-requests 3
       aaa port-access authenticator 24 logoff-period 1800
       aaa port-access authenticator 24 client-limit 3
       aaa port-access mac-based 24
       aaa port-access mac-based 24 addr-limit 3
       aaa port-access mac-based 24 logoff-period 1800
       aaa port-access mac-based 24 quiet-period 30
       aaa port-access 24 controlled-direction in
    %endif%
    %if interface.25.auth=1%
       aaa port-access authenticator 25
       aaa port-access authenticator 25 quiet-period 30
       aaa port-access authenticator 25 tx-period 10
       aaa port-access authenticator 25 supplicant-timeout 10
       aaa port-access authenticator 25 max-requests 3
       aaa port-access authenticator 25 logoff-period 1800
       aaa port-access authenticator 25 client-limit 3
       aaa port-access mac-based 25
       aaa port-access mac-based 25 addr-limit 3
       aaa port-access mac-based 25 logoff-period 1800
       aaa port-access mac-based 25 quiet-period 30
       aaa port-access 25 controlled-direction in
    %endif%
    %if interface.26.auth=1%
       aaa port-access authenticator 26
       aaa port-access authenticator 26 quiet-period 30
       aaa port-access authenticator 26 tx-period 10
       aaa port-access authenticator 26 supplicant-timeout 10
       aaa port-access authenticator 26 max-requests 3
       aaa port-access authenticator 26 logoff-period 1800
       aaa port-access authenticator 26 client-limit 3
       aaa port-access mac-based 26
       aaa port-access mac-based 26 addr-limit 3
       aaa port-access mac-based 26 logoff-period 1800
       aaa port-access mac-based 26 quiet-period 30
       aaa port-access 26 controlled-direction in
    %endif%
    %if interface.27.auth=1%
       aaa port-access authenticator 27
       aaa port-access authenticator 27 quiet-period 30
       aaa port-access authenticator 27 tx-period 10
       aaa port-access authenticator 27 supplicant-timeout 10
       aaa port-access authenticator 27 max-requests 3
       aaa port-access authenticator 27 logoff-period 1800
       aaa port-access authenticator 27 client-limit 3
       aaa port-access mac-based 27
       aaa port-access mac-based 27 addr-limit 3
       aaa port-access mac-based 27 logoff-period 1800
       aaa port-access mac-based 27 quiet-period 30
       aaa port-access 27 controlled-direction in
    %endif%
    %if interface.28.auth=1%
       aaa port-access authenticator 28
       aaa port-access authenticator 28 quiet-period 30
       aaa port-access authenticator 28 tx-period 10
       aaa port-access authenticator 28 supplicant-timeout 10
       aaa port-access authenticator 28 max-requests 3
       aaa port-access authenticator 28 logoff-period 1800
       aaa port-access authenticator 28 client-limit 3
       aaa port-access mac-based 28
       aaa port-access mac-based 28 addr-limit 3
       aaa port-access mac-based 28 logoff-period 1800
       aaa port-access mac-based 28 quiet-period 30
       aaa port-access 28 controlled-direction in
    %endif%
    %if interface.29.auth=1%
       aaa port-access authenticator 29
       aaa port-access authenticator 29 quiet-period 30
       aaa port-access authenticator 29 tx-period 10
       aaa port-access authenticator 29 supplicant-timeout 10
       aaa port-access authenticator 29 max-requests 3
       aaa port-access authenticator 29 logoff-period 1800
       aaa port-access authenticator 29 client-limit 3
       aaa port-access mac-based 29
       aaa port-access mac-based 29 addr-limit 3
       aaa port-access mac-based 29 logoff-period 1800
       aaa port-access mac-based 29 quiet-period 30
       aaa port-access 29 controlled-direction in
    %endif%
    %if interface.30.auth=1%
       aaa port-access authenticator 30
       aaa port-access authenticator 30 quiet-period 30
       aaa port-access authenticator 30 tx-period 10
       aaa port-access authenticator 30 supplicant-timeout 10
       aaa port-access authenticator 30 max-requests 3
       aaa port-access authenticator 30 logoff-period 1800
       aaa port-access authenticator 30 client-limit 3
       aaa port-access mac-based 30
       aaa port-access mac-based 30 addr-limit 3
       aaa port-access mac-based 30 logoff-period 1800
       aaa port-access mac-based 30 quiet-period 30
       aaa port-access 30 controlled-direction in
    %endif%
    %if interface.31.auth=1%
       aaa port-access authenticator 31
       aaa port-access authenticator 31 quiet-period 30
       aaa port-access authenticator 31 tx-period 10
       aaa port-access authenticator 31 supplicant-timeout 10
       aaa port-access authenticator 31 max-requests 3
       aaa port-access authenticator 31 logoff-period 1800
       aaa port-access authenticator 31 client-limit 3
       aaa port-access mac-based 31
       aaa port-access mac-based 31 addr-limit 3
       aaa port-access mac-based 31 logoff-period 1800
       aaa port-access mac-based 31 quiet-period 30
       aaa port-access 31 controlled-direction in
    %endif%
    %if interface.32.auth=1%
       aaa port-access authenticator 32
       aaa port-access authenticator 32 quiet-period 30
       aaa port-access authenticator 32 tx-period 10
       aaa port-access authenticator 32 supplicant-timeout 10
       aaa port-access authenticator 32 max-requests 3
       aaa port-access authenticator 32 logoff-period 1800
       aaa port-access authenticator 32 client-limit 3
       aaa port-access mac-based 32
       aaa port-access mac-based 32 addr-limit 3
       aaa port-access mac-based 32 logoff-period 1800
       aaa port-access mac-based 32 quiet-period 30
       aaa port-access 32 controlled-direction in
    %endif%
    %if interface.33.auth=1%
       aaa port-access authenticator 33
       aaa port-access authenticator 33 quiet-period 30
       aaa port-access authenticator 33 tx-period 10
       aaa port-access authenticator 33 supplicant-timeout 10
       aaa port-access authenticator 33 max-requests 3
       aaa port-access authenticator 33 logoff-period 1800
       aaa port-access authenticator 33 client-limit 3
       aaa port-access mac-based 33
       aaa port-access mac-based 33 addr-limit 3
       aaa port-access mac-based 33 logoff-period 1800
       aaa port-access mac-based 33 quiet-period 30
       aaa port-access 33 controlled-direction in
    %endif%
    %if interface.34.auth=1%
       aaa port-access authenticator 34
       aaa port-access authenticator 34 quiet-period 30
       aaa port-access authenticator 34 tx-period 10
       aaa port-access authenticator 34 supplicant-timeout 10
       aaa port-access authenticator 34 max-requests 3
       aaa port-access authenticator 34 logoff-period 1800
       aaa port-access authenticator 34 client-limit 3
       aaa port-access mac-based 34
       aaa port-access mac-based 34 addr-limit 3
       aaa port-access mac-based 34 logoff-period 1800
       aaa port-access mac-based 34 quiet-period 30
       aaa port-access 34 controlled-direction in
    %endif%
    %if interface.25.auth=1%
       aaa port-access authenticator 35
       aaa port-access authenticator 35 quiet-period 30
       aaa port-access authenticator 35 tx-period 10
       aaa port-access authenticator 35 supplicant-timeout 10
       aaa port-access authenticator 35 max-requests 3
       aaa port-access authenticator 35 logoff-period 1800
       aaa port-access authenticator 35 client-limit 3
       aaa port-access mac-based 35
       aaa port-access mac-based 35 addr-limit 3
       aaa port-access mac-based 35 logoff-period 1800
       aaa port-access mac-based 35 quiet-period 30
       aaa port-access 35 controlled-direction in
    %endif%
    %if interface.36.auth=1%
       aaa port-access authenticator 36
       aaa port-access authenticator 36 quiet-period 30
       aaa port-access authenticator 36 tx-period 10
       aaa port-access authenticator 36 supplicant-timeout 10
       aaa port-access authenticator 36 max-requests 3
       aaa port-access authenticator 36 logoff-period 1800
       aaa port-access authenticator 36 client-limit 3
       aaa port-access mac-based 36
       aaa port-access mac-based 36 addr-limit 3
       aaa port-access mac-based 36 logoff-period 1800
       aaa port-access mac-based 36 quiet-period 30
       aaa port-access 36 controlled-direction in
    %endif%
    %if interface.37.auth=1%
       aaa port-access authenticator 37
       aaa port-access authenticator 37 quiet-period 30
       aaa port-access authenticator 37 tx-period 10
       aaa port-access authenticator 37 supplicant-timeout 10
       aaa port-access authenticator 37 max-requests 3
       aaa port-access authenticator 37 logoff-period 1800
       aaa port-access authenticator 37 client-limit 3
       aaa port-access mac-based 37
       aaa port-access mac-based 37 addr-limit 3
       aaa port-access mac-based 37 logoff-period 1800
       aaa port-access mac-based 37 quiet-period 30
       aaa port-access 37 controlled-direction in
    %endif%
    %if interface.38.auth=1%
       aaa port-access authenticator 38
       aaa port-access authenticator 38 quiet-period 30
       aaa port-access authenticator 38 tx-period 10
       aaa port-access authenticator 38 supplicant-timeout 10
       aaa port-access authenticator 38 max-requests 3
       aaa port-access authenticator 38 logoff-period 1800
       aaa port-access authenticator 38 client-limit 3
       aaa port-access mac-based 38
       aaa port-access mac-based 38 addr-limit 3
       aaa port-access mac-based 38 logoff-period 1800
       aaa port-access mac-based 38 quiet-period 30
       aaa port-access 38 controlled-direction in
    %endif%
    %if interface.39.auth=1%
       aaa port-access authenticator 39
       aaa port-access authenticator 39 quiet-period 30
       aaa port-access authenticator 39 tx-period 10
       aaa port-access authenticator 39 supplicant-timeout 10
       aaa port-access authenticator 39 max-requests 3
       aaa port-access authenticator 39 logoff-period 1800
       aaa port-access authenticator 39 client-limit 3
       aaa port-access mac-based 39
       aaa port-access mac-based 39 addr-limit 3
       aaa port-access mac-based 39 logoff-period 1800
       aaa port-access mac-based 39 quiet-period 30
       aaa port-access 39 controlled-direction in
    %endif%
    %if interface.40.auth=1%
       aaa port-access authenticator 40
       aaa port-access authenticator 40 quiet-period 30
       aaa port-access authenticator 40 tx-period 10
       aaa port-access authenticator 40 supplicant-timeout 10
       aaa port-access authenticator 40 max-requests 3
       aaa port-access authenticator 40 logoff-period 1800
       aaa port-access authenticator 40 client-limit 3
       aaa port-access mac-based 40
       aaa port-access mac-based 40 addr-limit 3
       aaa port-access mac-based 40 logoff-period 1800
       aaa port-access mac-based 40 quiet-period 30
       aaa port-access 40 controlled-direction in
    %endif%
    %if interface.41.auth=1%
       aaa port-access authenticator 41
       aaa port-access authenticator 41 quiet-period 30
       aaa port-access authenticator 41 tx-period 10
       aaa port-access authenticator 41 supplicant-timeout 10
       aaa port-access authenticator 41 max-requests 3
       aaa port-access authenticator 41 logoff-period 1800
       aaa port-access authenticator 41 client-limit 3
       aaa port-access mac-based 41
       aaa port-access mac-based 41 addr-limit 3
       aaa port-access mac-based 41 logoff-period 1800
       aaa port-access mac-based 41 quiet-period 30
       aaa port-access 41 controlled-direction in
    %endif%
    %if interface.42.auth=1%
       aaa port-access authenticator 42
       aaa port-access authenticator 42 quiet-period 30
       aaa port-access authenticator 42 tx-period 10
       aaa port-access authenticator 42 supplicant-timeout 10
       aaa port-access authenticator 42 max-requests 3
       aaa port-access authenticator 42 logoff-period 1800
       aaa port-access authenticator 42 client-limit 3
       aaa port-access mac-based 42
       aaa port-access mac-based 42 addr-limit 3
       aaa port-access mac-based 42 logoff-period 1800
       aaa port-access mac-based 42 quiet-period 30
       aaa port-access 42 controlled-direction in
    %endif%
    %if interface.43.auth=1%
       aaa port-access authenticator 43
       aaa port-access authenticator 43 quiet-period 30
       aaa port-access authenticator 43 tx-period 10
       aaa port-access authenticator 43 supplicant-timeout 10
       aaa port-access authenticator 43 max-requests 3
       aaa port-access authenticator 43 logoff-period 1800
       aaa port-access authenticator 43 client-limit 3
       aaa port-access mac-based 43
       aaa port-access mac-based 43 addr-limit 3
       aaa port-access mac-based 43 logoff-period 1800
       aaa port-access mac-based 43 quiet-period 30
       aaa port-access 43 controlled-direction in
    %endif%
    %if interface.44.auth=1%
       aaa port-access authenticator 44
       aaa port-access authenticator 44 quiet-period 30
       aaa port-access authenticator 44 tx-period 10
       aaa port-access authenticator 44 supplicant-timeout 10
       aaa port-access authenticator 44 max-requests 3
       aaa port-access authenticator 44 logoff-period 1800
       aaa port-access authenticator 44 client-limit 3
       aaa port-access mac-based 44
       aaa port-access mac-based 44 addr-limit 3
       aaa port-access mac-based 44 logoff-period 1800
       aaa port-access mac-based 44 quiet-period 30
       aaa port-access 44 controlled-direction in
    %endif%
    %if interface.45.auth=1%
       aaa port-access authenticator 45
       aaa port-access authenticator 45 quiet-period 30
       aaa port-access authenticator 45 tx-period 10
       aaa port-access authenticator 45 supplicant-timeout 10
       aaa port-access authenticator 45 max-requests 3
       aaa port-access authenticator 45 logoff-period 1800
       aaa port-access authenticator 45 client-limit 3
       aaa port-access mac-based 45
       aaa port-access mac-based 45 addr-limit 3
       aaa port-access mac-based 45 logoff-period 1800
       aaa port-access mac-based 45 quiet-period 30
       aaa port-access 45 controlled-direction in
    %endif%
    %if interface.46.auth=1%
       aaa port-access authenticator 46
       aaa port-access authenticator 46 quiet-period 30
       aaa port-access authenticator 46 tx-period 10
       aaa port-access authenticator 46 supplicant-timeout 10
       aaa port-access authenticator 46 max-requests 3
       aaa port-access authenticator 46 logoff-period 1800
       aaa port-access authenticator 46 client-limit 3
       aaa port-access mac-based 46
       aaa port-access mac-based 46 addr-limit 3
       aaa port-access mac-based 46 logoff-period 1800
       aaa port-access mac-based 46 quiet-period 30
       aaa port-access 46 controlled-direction in
    %endif%
    %if interface.47.auth=1%
       aaa port-access authenticator 47
       aaa port-access authenticator 47 quiet-period 30
       aaa port-access authenticator 47 tx-period 10
       aaa port-access authenticator 47 supplicant-timeout 10
       aaa port-access authenticator 47 max-requests 3
       aaa port-access authenticator 47 logoff-period 1800
       aaa port-access authenticator 47 client-limit 3
       aaa port-access mac-based 47
       aaa port-access mac-based 47 addr-limit 3
       aaa port-access mac-based 47 logoff-period 1800
       aaa port-access mac-based 47 quiet-period 30
       aaa port-access 47 controlled-direction in
    %endif%
    %if interface.48.auth=1%
       aaa port-access authenticator 48
       aaa port-access authenticator 48 quiet-period 30
       aaa port-access authenticator 48 tx-period 10
       aaa port-access authenticator 48 supplicant-timeout 10
       aaa port-access authenticator 48 max-requests 3
       aaa port-access authenticator 48 logoff-period 1800
       aaa port-access authenticator 48 client-limit 3
       aaa port-access mac-based 48
       aaa port-access mac-based 48 addr-limit 3
       aaa port-access mac-based 48 logoff-period 1800
       aaa port-access mac-based 48 quiet-period 30
       aaa port-access 48 controlled-direction in
    %endif%
    %if interface.1.stp.protect=1%
    spanning-tree 1 admin-edge-port
    spanning-tree 1 bpdu-protection
    %endif%
    %if interface.2.stp.protect=1%
    spanning-tree 2 admin-edge-port
    spanning-tree 2 bpdu-protection
    %endif%
    %if interface.3.stp.protect=1%
    spanning-tree 3 admin-edge-port
    spanning-tree 3 bpdu-protection
    %endif%
    %if interface.4.stp.protect=1%
    spanning-tree 4 admin-edge-port
    spanning-tree 4 bpdu-protection
    %endif%
    %if interface.5.stp.protect=1%
    spanning-tree 5 admin-edge-port
    spanning-tree 5 bpdu-protection
    %endif%
    %if interface.6.stp.protect=1%
    spanning-tree 6 admin-edge-port
    spanning-tree 6 bpdu-protection
    %endif%
    %if interface.7.stp.protect=1%
    spanning-tree 7 admin-edge-port
    spanning-tree 7 bpdu-protection
    %endif%
    %if interface.8.stp.protect=1%
    spanning-tree 8 admin-edge-port
    spanning-tree 8 bpdu-protection
    %endif%
    %if interface.9.stp.protect=1%
    spanning-tree 9 admin-edge-port
    spanning-tree 9 bpdu-protection
    %endif%
    %if interface.10.stp.protect=1%
    spanning-tree 10 admin-edge-port
    spanning-tree 10 bpdu-protection
    %endif%
    %if interface.12.stp.protect=1%
    spanning-tree 12 admin-edge-port
    spanning-tree 12 bpdu-protection
    %endif%
    %if interface.13.stp.protect=1%
    spanning-tree 13 admin-edge-port
    spanning-tree 13 bpdu-protection
    %endif%
    %if interface.14.stp.protect=1%
    spanning-tree 14 admin-edge-port
    spanning-tree 14 bpdu-protection
    %endif%
    %if interface.15.stp.protect=1%
    spanning-tree 15 admin-edge-port
    spanning-tree 15 bpdu-protection
    %endif%
    %if interface.16.stp.protect=1%
    spanning-tree 16 admin-edge-port
    spanning-tree 16 bpdu-protection
    %endif%
    %if interface.17.stp.protect=1%
    spanning-tree 17 admin-edge-port
    spanning-tree 17 bpdu-protection
    %endif%
    %if interface.18.stp.protect=1%
    spanning-tree 18 admin-edge-port
    spanning-tree 18 bpdu-protection
    %endif%
    %if interface.19.stp.protect=1%
    spanning-tree 19 admin-edge-port
    spanning-tree 19 bpdu-protection
    %endif%
    %if interface.20.stp.protect=1%
    spanning-tree 20 admin-edge-port
    spanning-tree 20 bpdu-protection
    %endif%
    %if interface.21.stp.protect=1%
    spanning-tree 21 admin-edge-port
    spanning-tree 21 bpdu-protection
    %endif%
    %if interface.22.stp.protect=1%
    spanning-tree 22 admin-edge-port
    spanning-tree 22 bpdu-protection
    %endif%
    %if interface.23.stp.protect=1%
    spanning-tree 23 admin-edge-port
    spanning-tree 23 bpdu-protection
    %endif%
    %if interface.24.stp.protect=1%
    spanning-tree 24 admin-edge-port
    spanning-tree 24 bpdu-protection
    %endif%
    %if interface.25.stp.protect=1%
    spanning-tree 25 admin-edge-port
    spanning-tree 25 bpdu-protection
    %endif%
    %if interface.26.stp.protect=1%
    spanning-tree 26 admin-edge-port
    spanning-tree 26 bpdu-protection
    %endif%
    %if interface.27.stp.protect=1%
    spanning-tree 27 admin-edge-port
    spanning-tree 27 bpdu-protection
    %endif%
    %if interface.28.stp.protect=1%
    spanning-tree 28 admin-edge-port
    spanning-tree 28 bpdu-protection
    %endif%
    %if interface.29.stp.protect=1%
    spanning-tree 29 admin-edge-port
    spanning-tree 29 bpdu-protection
    %endif%
    %if interface.30.stp.protect=1%
    spanning-tree 30 admin-edge-port
    spanning-tree 30 bpdu-protection
    %endif%
    %if interface.31.stp.protect=1%
    spanning-tree 31 admin-edge-port
    spanning-tree 31 bpdu-protection
    %endif%
    %if interface.32.stp.protect=1%
    spanning-tree 32 admin-edge-port
    spanning-tree 32 bpdu-protection
    %endif%
    %if interface.33.stp.protect=1%
    spanning-tree 33 admin-edge-port
    spanning-tree 33 bpdu-protection
    %endif%
    %if interface.34.stp.protect=1%
    spanning-tree 34 admin-edge-port
    spanning-tree 34 bpdu-protection
    %endif%
    %if interface.35.stp.protect=1%
    spanning-tree 35 admin-edge-port
    spanning-tree 35 bpdu-protection
    %endif%
    %if interface.36.stp.protect=1%
    spanning-tree 36 admin-edge-port
    spanning-tree 36 bpdu-protection
    %endif%
    %if interface.37.stp.protect=1%
    spanning-tree 37 admin-edge-port
    spanning-tree 37 bpdu-protection
    %endif%
    %if interface.38.stp.protect=1%
    spanning-tree 38 admin-edge-port
    spanning-tree 38 bpdu-protection
    %endif%
    %if interface.39.stp.protect=1%
    spanning-tree 39 admin-edge-port
    spanning-tree 39 bpdu-protection
    %endif%
    %if interface.40.stp.protect=1%
    spanning-tree 40 admin-edge-port
    spanning-tree 40 bpdu-protection
    %endif%
    %if interface.41.stp.protect=1%
    spanning-tree 41 admin-edge-port
    spanning-tree 41 bpdu-protection
    %endif%
    %if interface.42.stp.protect=1%
    spanning-tree 42 admin-edge-port
    spanning-tree 42 bpdu-protection
    %endif%
    %if interface.43.stp.protect=1%
    spanning-tree 43 admin-edge-port
    spanning-tree 43 bpdu-protection
    %endif%
    %if interface.44.stp.protect=1%
    spanning-tree 44 admin-edge-port
    spanning-tree 44 bpdu-protection
    %endif%
    %if interface.45.stp.protect=1%
    spanning-tree 45 admin-edge-port
    spanning-tree 45 bpdu-protection
    %endif%
    %if interface.46.stp.protect=1%
    spanning-tree 46 admin-edge-port
    spanning-tree 46 bpdu-protection
    %endif%
    %if interface.47.stp.protect=1%
    spanning-tree 47 admin-edge-port
    spanning-tree 47 bpdu-protection
    %endif%
    %if interface.48.stp.protect=1%
    spanning-tree 48 admin-edge-port
    spanning-tree 48 bpdu-protection
    %endif%
    
    spanning-tree trap errant-bpdu
    spanning-tree bpdu-protection-timeout 600
    no tftp server
    loop-protect trap loop-detected
    loop-protect disable-timer 300
    no autorun
    no dhcp config-file-update
    no dhcp image-file-update
    no dhcp tr69-acs-url
    password manager plaintext passwordhere


    ------------------------------
    Marcel Koedijk | MVP Expert 2023 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
    ------------------------------



  • 3.  RE: 2930M Switch /w Radius Host Support in Central???

    Posted Nov 27, 2023 06:00 PM

    Thanks for the response ; we are using this config in the template, the radius-server host section is being pushed by Central (without any audit errors in the logs),  but the configuration is NOT reflected on the actual switch AND the error we are seeing is;

    central: ST2-CMDR: Unable to backup running config.
                Got error: "Unable to copy configuration to "CentralBkupConfig".".

    Note we are running an active stack in this case (3 switches)

    radius-server host "clearpass.marcelkoedijk.nl" tls
    radius-server host 172.16.200.50 key "passwordhere"
    radius-server host 172.16.200.50 dyn-authorization
    radius-server host 172.16.200.50 time-window 0



  • 4.  RE: 2930M Switch /w Radius Host Support in Central???

    MVP EXPERT
    Posted Nov 28, 2023 12:40 PM

    That is strange. What switch firmware are you running?






  • 5.  RE: 2930M Switch /w Radius Host Support in Central???

    Posted Nov 28, 2023 01:40 PM

    16.10.0020




  • 6.  RE: 2930M Switch /w Radius Host Support in Central???

    MVP EXPERT
    Posted Nov 28, 2023 04:58 PM

    Firmware 16.10.0020 was released 31-03-2022. Consider to upgrade to 16.10.0024 18-08-2023 or upgrade to the LSR release 16.11.0014 27-09-2023.

    16.10.xxxx go end-of-support end May 2024.

     

    Since your current firmware is 1,5 year old and Aruba Central templates are a fairly new feature this could consider if this could be a old software issue.

     

    Upgrade and try again is my opinion. Hope this help.

     






  • 7.  RE: 2930M Switch /w Radius Host Support in Central???

    MVP EXPERT
    Posted Nov 28, 2023 05:31 PM

    Maybe you hit this bug report.

    Fixed in 16.10.0022

    https://www.arubanetworks.com/techdocs/AOS-Switch/RN/16.10/AOS-S%20Switch%2016.10.0022%20Release%20Notes.pdf



    ------------------------------
    Marcel Koedijk | MVP Expert 2023 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
    ------------------------------



  • 8.  RE: 2930M Switch /w Radius Host Support in Central???

    Posted Nov 30, 2023 02:21 PM

    yes - eaxctly thanks, we upgraded the switch last night to 16.10.0025 and it worked as expected.

    Also it looks like Aruba pulled the 0022 release from Central, it's no longer available