ap310-73FA0D*>show running-config
!
! Configuration of AP310 version 7.7.1.0-012R
!
!
version 2.7
!
!
client-identity-group default
 load default-fingerprints
!
ip access-list BROADCAST-MULTICAST-CONTROL
 permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"
 permit udp any eq 67 any eq dhcpc rule-precedence 11 rule-description "permit DHCP replies"
 deny udp any range 137 138 any range 137 138 rule-precedence 20 rule-description "deny windows netbios"
 deny ip any 224.0.0.0/4 rule-precedence 21 rule-description "deny IP multicast"
 deny ip any host 255.255.255.255 rule-precedence 22 rule-description "deny IP local broadcast"
 permit ip any any rule-precedence 100 rule-description "permit all IP traffic"
!
mac access-list PERMIT-ARP-AND-IPv4
 permit any any type ip rule-precedence 10 rule-description "permit all IPv4 traffic"
 permit any any type arp rule-precedence 20 rule-description "permit all ARP traffic"
!
ip snmp-access-list default
 permit any
!
firewall-policy default
 no ip dos tcp-sequence-past-window
 no stateful-packet-inspection-l2
 ip tcp adjust-mss 1400
!
!
mint-policy global-default
!
meshpoint-qos-policy default
!
wlan-qos-policy default
 qos trust dscp
 qos trust wmm
!
radio-qos-policy default
!
aaa-policy DC-RADIUS
 authentication server 1 host 10.1.1.218 secret 0 XXXXXXXXXXX*
 authentication protocol mschap
!
wlan ASR
 ssid ASR
 vlan 100
 bridging-mode local
 encryption-type tkip-ccmp
 authentication-type eap
 wpa-wpa2 psk 0 XXXXXXXXXX
 use aaa-policy DC-RADIUS
!
wlan ASR-ctecky
 ssid ASR-ctecky
 vlan 15
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 wpa-wpa2 psk 0 XXXXXXXXXX
!
wlan ASR-free
 ssid ASR-free
 vlan 199
 bridging-mode local
 encryption-type tkip-ccmp
 authentication-type none
 wpa-wpa2 psk 0 XXXXXXXXXX
!
smart-rf-policy SmartRF_Petcenter
 group-by area
 assignable-power 5GHz max 20
 assignable-power 5GHz min 10
 assignable-power 2.4GHz max 20
 assignable-power 2.4GHz min 10
 no neighbor-recovery
 no select-shutdown
 no smart-sensor
 smart-sensor auto-trigger
 smart-sensor band smart-band-5GHz
 smart-sensor tri-radio-only
 no coverage-hole-recovery
!
auto-provisioning-policy Auto-Provisioning
 default-adoption
 evaluate-always
 adopt ap310 precedence 1 profile ap310_Office rf-domain default mac 20-9E-F7-77-01-35 20-9E-F7-77-35-00
 adopt ap310 precedence 2 profile default-ap310 rf-domain default any
!
!
management-policy default
 telnet
 no http server
 https server
 rest-server
 ssh
 user admin password 1 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX role superuser access all
 snmp-server community 0 private rw
 snmp-server community 0 public ro
 snmp-server user snmptrap v3 encrypted des auth md5 0 XXXXX
 snmp-server user snmpmanager v3 encrypted des auth md5 0 XXXXX
!
event-system-policy default
!
profile ap310 ap310_Office
 ip default-gateway 10.31.2.1
 autoinstall configuration
 autoinstall firmware
 crypto ikev1 policy ikev1-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ikev2 policy ikev2-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 crypto load-management
 crypto remote-vpn-client
 interface radio1
  wlan ASR bss 1 primary
  wlan ASR-free bss 2 primary
  wlan ASR-ctecky bss 3 primary
  antenna-mode 2x2
 interface radio2
  wlan ASR bss 1 primary
  wlan ASR-ctecky bss 2 primary
  wlan ASR-free bss 3 primary
  antenna-mode 2x2
 interface bluetooth1
  shutdown
  mode le-sensor
 interface ge1
  switchport mode trunk
  switchport trunk allowed vlan 15,99-100,199
  switchport trunk native vlan 99
 interface ge2
 interface vlan99
  ip address dhcp
 interface pppoe1
 interface usb0
 use firewall-policy default
 ntp server ntp.nic.cz
 use client-identity-group default
 logging on
 service pm sys-restart
 router ospf
 adoption-mode controller
!
profile ap310 default-ap310
 ip default-gateway 10.31.2.1
 autoinstall configuration
 autoinstall firmware
 crypto ikev1 policy ikev1-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ikev2 policy ikev2-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 crypto load-management
 crypto remote-vpn-client
 interface radio1
  wlan ASR bss 1 primary
  wlan ASR-ctecky bss 3 primary
  antenna-mode 2x2
 interface radio2
  wlan ASR bss 1 primary
  wlan ASR-ctecky bss 2 primary
  antenna-mode 2x2
 interface bluetooth1
  shutdown
  mode le-sensor
 interface ge1
  switchport mode trunk
  switchport trunk allowed vlan 15,99-100,199
  switchport trunk native vlan 99
 interface ge2
 interface vlan99
  ip address dhcp
 interface pppoe1
 interface usb0
 use firewall-policy default
 ntp server ntp.nic.cz
 use client-identity-group default
 logging on
 controller vlan 99
 service pm sys-restart
 router ospf
 adoption-mode controller
!
rf-domain default
 location Petcenter_Mstetice
 contact elxit@elinkx.cz
 timezone Europe/Prague
 country-code cz
 use smart-rf-policy SmartRF_Petcenter
 ad-wips-wireless-mitigation disable
 ad-wips-wired-mitigation disable
 controller-managed
!
ap310 20-9E-F7-73-FA-0D
 use profile default-ap310
 use rf-domain default
 hostname ap310-73FA0D
 interface radio1
  wlan ASR bss 1 primary
  wlan ASR-free bss 2 primary
  wlan ASR-ctecky bss 3 primary
  ldpc
 interface radio2
  wlan ASR bss 1 primary
  wlan ASR-ctecky bss 2 primary
  wlan ASR-free bss 3 primary
  ldpc
 virtual-controller
 rf-domain-manager capable
 no adoption-mode
!
ap310 20-9E-F7-76-F2-4E
 use profile default-ap310
 use rf-domain default
 hostname ap310-76F24E
!
ap310 20-9E-F7-76-FC-2B
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FC2B
!
ap310 20-9E-F7-76-FC-30
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FC30
!
ap310 20-9E-F7-76-FC-35
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FC35
!
ap310 20-9E-F7-76-FC-7B
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FC7B
!
ap310 20-9E-F7-76-FC-D5
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FCD5
!
ap310 20-9E-F7-76-FC-DF
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FCDF
!
ap310 20-9E-F7-76-FC-F8
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FCF8
!
ap310 20-9E-F7-76-FD-07
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FD07
!
ap310 20-9E-F7-76-FD-11
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FD11
!
ap310 20-9E-F7-76-FD-16
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FD16
!
ap310 20-9E-F7-76-FD-1B
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FD1B
!
ap310 20-9E-F7-76-FD-20
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FD20
!
ap310 20-9E-F7-76-FD-9D
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FD9D
!
ap310 20-9E-F7-76-FE-97
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FE97
!
ap310 20-9E-F7-76-FE-9C
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FE9C
!
ap310 20-9E-F7-76-FE-B0
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FEB0
!
ap310 20-9E-F7-76-FE-B5
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FEB5
!
ap310 20-9E-F7-76-FE-BA
 use profile default-ap310
 use rf-domain default
 hostname ap310-76FEBA
!
ap310 20-9E-F7-77-00-27
 use profile default-ap310
 use rf-domain default
 hostname ap310-770027
!
ap310 20-9E-F7-77-00-31
 use profile default-ap310
 use rf-domain default
 hostname ap310-770031
!
ap310 20-9E-F7-77-00-6D
 use profile default-ap310
 use rf-domain default
 hostname ap310-77006D
!
ap310 20-9E-F7-77-00-BD
 use profile default-ap310
 use rf-domain default
 hostname ap310-7700BD
!
ap310 20-9E-F7-77-00-D6
 use profile default-ap310
 use rf-domain default
 hostname ap310-7700D6
!
ap310 20-9E-F7-77-00-DB
 use profile default-ap310
 use rf-domain default
 hostname ap310-7700DB
!
ap310 20-9E-F7-77-00-E0
 use profile default-ap310
 use rf-domain default
 hostname ap310-7700E0
!
ap310 20-9E-F7-77-01-08
 use profile default-ap310
 use rf-domain default
 hostname ap310-770108
!
ap310 20-9E-F7-77-01-0D
 use profile default-ap310
 use rf-domain default
 hostname ap310-77010D
!
ap310 20-9E-F7-77-01-17
 use profile default-ap310
 use rf-domain default
 hostname ap310-770117
!
ap310 20-9E-F7-77-01-35
 use profile default-ap310
 use rf-domain default
 hostname ap310-770135
 interface radio1
  wlan ASR bss 1 primary
  wlan ASR-free bss 2 primary
  wlan ASR-ctecky bss 3 primary
 interface radio2
  wlan ASR bss 1 primary
  wlan ASR-ctecky bss 2 primary
  wlan ASR-free bss 3 primary
!
ap310 20-9E-F7-77-01-3F
 use profile default-ap310
 use rf-domain default
 hostname ap310-77013F
!
ap310 20-9E-F7-77-01-44
 use profile default-ap310
 use rf-domain default
 hostname ap310-770144
!
ap310 20-9E-F7-77-01-53
 use profile default-ap310
 use rf-domain default
 hostname ap310-770153
!
ap310 20-9E-F7-77-01-67
 use profile default-ap310
 use rf-domain default
 hostname ap310-770167
!
ap310 20-9E-F7-77-01-7B
 use profile default-ap310
 use rf-domain default
 hostname ap310-77017B
!
ap310 20-9E-F7-77-01-80
 use profile default-ap310
 use rf-domain default
 hostname ap310-770180
!
ap310 20-9E-F7-77-01-A3
 use profile default-ap310
 use rf-domain default
 hostname ap310-7701A3
!
ap310 20-9E-F7-77-01-A8
 use profile default-ap310
 use rf-domain default
 hostname ap310-7701A8
!
ap310 20-9E-F7-77-01-AD
 use profile default-ap310
 use rf-domain default
 hostname ap310-7701AD
!
ap310 20-9E-F7-77-01-B2
 use profile default-ap310
 use rf-domain default
 hostname ap310-7701B2
!
ap310 20-9E-F7-77-01-D5
 use profile default-ap310
 use rf-domain default
 hostname ap310-7701D5
!
!
end
ap310-73FA0D*>