version 8.11.0.0-8.11.0
syslocation REDACTED
virtual-controller-country REDACTED
virtual-controller-key dbeceddf01237a51d4f2b1079a450ee12ac21d3a17a39555da
name "REDACTED"
virtual-controller-ip REDACTED
terminal-access
ntp-server REDACTED
clock timezone Eastern-Time -05 00
clock summer-time EDT recurring second sunday march 02:00 first sunday november 02:00
rf-band all

allow-new-aps

allowed-ap fc:7f:f1:cd:22:1c
allowed-ap fc:7f:f1:cd:29:34
allowed-ap fc:7f:f1:cd:30:be
allowed-ap fc:7f:f1:cd:34:44
allowed-ap fc:7f:f1:cd:39:1a
allowed-ap fc:7f:f1:cd:34:38
allowed-ap fc:7f:f1:cd:35:9e
allowed-ap fc:7f:f1:cd:25:66
allowed-ap fc:7f:f1:cd:7b:b2
allowed-ap fc:7f:f1:cd:37:b8
allowed-ap fc:7f:f1:cd:30:98
allowed-ap fc:7f:f1:cd:45:9c
allowed-ap fc:7f:f1:cd:3a:3a
allowed-ap fc:7f:f1:cb:84:88
allowed-ap d0:d3:e0:c3:96:36
allowed-ap cc:d0:83:cf:6e:58


snmp-server community REDACTED
snmp-server community REDACTED
snmp-server host REDACTED version 2c public inform

arm
 wide-bands none
 min-tx-power 9
 max-tx-power 12
 band-steering-mode prefer-5ghz
 air-time-fairness-mode fair-access
 channel-quality-aware-arm-disable
 client-aware
 scanning
 client-match

rf dot11g-radio-profile
 interference-immunity 11
 max-distance 0
 max-tx-power 12
 min-tx-power 9
 disable-arm-wids-functions off
 free-channel-index 40

rf dot11a-radio-profile
 interference-immunity 11
 max-distance 0
 max-tx-power 127
 min-tx-power 127
 disable-arm-wids-functions off

rf dot11a-secondary-radio-profile
 interference-immunity 11
 max-tx-power 127
 min-tx-power 127


syslog-level warn ap-debug 
syslog-level warn network 
syslog-level warn security 
syslog-level warn system 
syslog-level warn user 
syslog-level warn user-debug 
syslog-level warn wireless 



extended-ssid

















hash-mgmt-password
hash-mgmt-user REDACTED password hash REDACTED


wlan access-rule REDACTED
 index 0
 rule any any match any any any permit

wlan access-rule default_wired_port_profile
 index 1
 rule any any match any any any permit

wlan access-rule wired-SetMeUp
 index 2
 rule masterip 0.0.0.0 match tcp 80 80 permit
 rule masterip 0.0.0.0 match tcp 4343 4343 permit
 rule any any match udp 67 68 permit
 rule any any match udp 53 53 permit

wlan access-rule REDACTED
 index 3
 rule any any match any any any permit

wlan access-rule REDACTED
 index 4
 rule any any match any any any permit

wlan ssid-profile REDACTED
 enable
 index 0
 type employee
 essid REDACTED
 wpa-passphrase REDACTED
 opmode wpa2-psk-aes
 max-authentication-failures 0
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 g-min-tx-rate 11
 a-min-tx-rate 24
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64
 dot11r
 dot11k
 dot11v

wlan ssid-profile REDACTED
 enable
 index 1
 type employee
 essid REDACTED
 wpa-passphrase REDACTED
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 10
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 g-min-tx-rate 11
 a-min-tx-rate 24
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64
 dot11r
 dot11k
 dot11v

wlan ssid-profile REDACTED
 enable
 index 2
 type employee
 essid REDACTED
 wpa-passphrase REDACTED
 opmode wpa2-psk-aes
 max-authentication-failures 0
 vlan 20
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter none
 g-min-tx-rate 11
 a-min-tx-rate 24
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64
 dot11r
 dot11k
 dot11v

auth-survivability cache-time-out 24






wlan external-captive-portal
 server localhost
 port 80
 url "/"
 auth-text "Authenticated"
 auto-whitelist-disable
 https


blacklist-time 3600
auth-failure-blacklist-time 3600


ids
 wireless-containment none



wired-port-profile wired-SetMeUp
 switchport-mode access
 allowed-vlan all
 native-vlan guest
 no shutdown
 access-rule-name wired-SetMeUp
 speed auto
 duplex auto
 no poe
 type guest
 captive-portal disable
 no dot1x

wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex full
 no poe
 type employee
 captive-portal disable
 no dot1x


enet0-port-profile default_wired_port_profile

uplink
 preemption
 enforce none
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180



airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay

airgroupservice airprint
 disable
 description AirPrint






cluster-security
 allow-low-assurance-devices