! saved at 2023-03-02 15:01:53 ! model: NXC2500 ! firmware version: 6.10(AAIG.2) ! interface-name ge1 ge1 interface-name ge2 ge2 interface-name ge3 ge3 interface-name ge4 ge4 interface-name ge5 ge5 interface-name ge6 ge6 ! username admin encrypted-password $4$pRSgbejK$A43C0DrZcBJYK0C3/0+ojUPTxiH2R/q2zwofNs0Wg/7wvCq6g6Dhp+Bl9Mdg1fJwFLHxl+LmFP4Rs2S9ZnLFi5tGQktOHhAW3sxTok99tUk$ user-type admin username admin description Administration account username admin logon-lease-time 30 username admin logon-re-auth-time 0 username qruser encrypted-password $4$tiZ/xQws$nXzKK4c9eon9KdcbcXymZkiGuQePg4mPDSt1mkzU1KxQrSnPZjCF6PV7GJshk1s5m7OMggzcRdehWJIOR1sm1ScNbW+NP9nEnFwecBmzc5A$ user-type guest username qruser description Local QR user username qruser logon-lease-time 120 username qruser logon-re-auth-time 120 username ua-users encrypted-password $4$UCAW4QY9$LASTvQomWh4QO2DgugcEB34LhLWU7AKKQwNE0j0SzmiA5/rBotZhvSfPWeQZKsNkRSLoryPD2luKYSKZV5YcNt7qoftpJ5dofO4/TLpmpGY$ user-type guest username ua-users description Agreement User username ua-users logon-lease-time 720 username ua-users logon-re-auth-time 720 username mac-users user-type mac-address ! ip dhcp pool Network_Pool_VLAN0 network 192.168.1.0 255.255.255.0 default-router 192.168.1.1 starting-address 192.168.1.20 pool-size 200 lease 3 0 0 ! interface ge1 type internal pvid 10 ip address 10.10.100.160 255.255.255.0 upstream 1048576 downstream 1048576 mtu 1500 description OFFICE_IT ! interface ge2 type internal pvid 20 description OFFICE ip address 10.10.12.200 255.255.255.0 upstream 1048576 downstream 1048576 mtu 1500 ! interface ge3 type internal pvid 1 ip address 0.0.0.0 0.0.0.0 upstream 1048576 downstream 1048576 mtu 1500 ! interface ge4 type internal pvid 30 ip address 10.10.30.200 255.255.255.0 upstream 1048576 downstream 1048576 mtu 1500 ! interface ge5 type internal pvid 1 shutdown ! interface ge6 type internal pvid 1 shutdown ! mac-auth database ! interface vlan0 vlanid 1 join ge1 untag join ge2 untag join ge3 untag join ge4 untag join ge5 untag join ge6 untag ip address 192.168.1.1 255.255.255.0 ping-check default-gateway method icmp period 30 timeout 5 fail-tolerance 5 no ping-check activate ip dhcp-pool Network_Pool_VLAN0 ! interface vlan1 description OFFICE_IT ip address 10.10.100.161 255.255.255.0 ip gateway 10.10.100.254 metric 0 upstream 1048576 downstream 1048576 mtu 1500 ping-check default-gateway method icmp period 30 timeout 5 fail-tolerance 5 no ping-check activate vlanid 10 join ge1 untag join ge3 tag join ge4 tag ! interface vlan2 description OFFICE ip address 10.10.12.201 255.255.255.0 ip gateway 10.10.12.199 metric 0 upstream 1048576 downstream 1048576 mtu 1500 ping-check default-gateway method icmp period 30 timeout 5 fail-tolerance 5 no ping-check activate vlanid 20 join ge2 untag join ge3 tag join ge4 untag ! interface vlan3 description LAN4 ip address 10.10.30.201 255.255.255.0 upstream 1048576 downstream 1048576 mtu 1500 ping-check default-gateway method icmp period 30 timeout 5 fail-tolerance 5 no ping-check activate vlanid 30 join ge2 untag join ge3 untag join ge4 tag ip gateway 10.10.30.199 metric 0 ! address-object LAN_SUBNET interface-subnet vlan0 address-object OFFICE_Guests_Traffic interface-gateway ge2 address-object Test_Traffic interface-gateway ge6 address-object OFFICE_Staff_Traffic interface-gateway ge4 ! service-object Any_UDP udp range 1 65535 service-object Any_TCP tcp range 1 65535 service-object AH protocol 51 service-object AIM tcp eq 5190 service-object NEW_ICQ tcp eq 5190 service-object AUTH tcp eq 113 service-object BGP tcp eq 179 service-object BOOTP_CLIENT udp eq 68 service-object BOOTP_SERVER udp eq 67 service-object CAPWAP-CONTROL udp eq 5246 service-object CAPWAP-DATA udp eq 5247 service-object CU_SEEME_TCP1 tcp eq 7648 service-object CU_SEEME_TCP2 tcp eq 24032 service-object CU_SEEME_UDP1 udp eq 7648 service-object CU_SEEME_UDP2 udp eq 24032 service-object DNS_TCP tcp eq 53 service-object DNS_UDP udp eq 53 service-object ESP protocol 50 service-object FINGER tcp eq 79 service-object FTP tcp range 20 21 service-object GRE protocol 47 service-object H323 tcp eq 1720 service-object HTTP tcp eq 80 service-object HTTPS tcp eq 443 service-object ICQ udp eq 4000 service-object IKE udp eq 500 service-object IMAP4 tcp eq 143 service-object IMAP4S tcp eq 993 service-object IP6to4 protocol 41 service-object IRC_TCP tcp eq 6667 service-object IRC_UDP udp eq 6667 service-object MSN tcp eq 1863 service-object MULTICAST protocol 2 service-object NEWS tcp eq 144 service-object NetBIOS_TCP1 tcp range 137 139 service-object NetBIOS_TCP2 tcp eq 445 service-object NetBIOS_UDP1 udp range 137 139 service-object NetBIOS_UDP2 udp eq 445 service-object NFS udp eq 2049 service-object NNTP tcp eq 119 service-object NTP udp eq 123 service-object PING icmp echo service-object POP3 tcp eq 110 service-object POP3S tcp eq 995 service-object PPTP tcp eq 1723 service-object PPTP_TUNNEL protocol 47 service-object RCMD tcp eq 512 service-object RDP tcp eq 3389 service-object REAL-AUDIO tcp eq 7070 service-object REXEC tcp eq 514 service-object RLOGIN tcp eq 513 service-object ROADRUNNER_TCP tcp eq 1026 service-object ROADRUNNER_UDP udp eq 1026 service-object RTELNET tcp eq 107 service-object RTSP_TCP tcp eq 554 service-object RTSP_UDP udp eq 554 service-object SFTP tcp eq 115 service-object SMTP tcp eq 25 service-object SMTPS tcp eq 465 service-object SNMP_TCP tcp eq 161 service-object SNMP_UDP udp eq 161 service-object SNMP-TRAPS_TCP tcp eq 162 service-object SNMP-TRAPS_UDP udp eq 162 service-object SQL-NET tcp eq 1521 service-object SSDP udp eq 1900 service-object SSH_TCP tcp eq 22 service-object SSH_UDP udp eq 22 service-object STRMWORKS udp eq 1558 service-object SYSLOG udp eq 514 service-object TACACS udp eq 49 service-object TELNET tcp eq 23 service-object TFTP udp eq 69 service-object VDOLIVE tcp eq 7000 service-object VRRP protocol 112 service-object NATT udp eq 4500 service-object RIP udp eq 520 service-object OSPF protocol 89 service-object SIP udp eq 5060 service-object Kerberos-TCP tcp eq 88 service-object MS-RPC tcp eq 135 service-object LDAP-TCP tcp eq 389 service-object LPR tcp eq 515 service-object LDAPS-TCP tcp eq 636 service-object VNC5800 tcp eq 5800 service-object VNC5900 tcp eq 5900 service-object Kerberos-UDP udp eq 88 service-object LDAP-UDP udp eq 389 service-object LDAPS-UDP udp eq 636 service-object L2TP-UDP udp eq 1701 service-object RADIUS-AUTH udp eq 1812 service-object RADIUS-ACCT udp eq 1813 service-object BONJOUR udp eq 5353 ! object-group service CU-SEEME service-object CU_SEEME_TCP1 service-object CU_SEEME_TCP2 service-object CU_SEEME_UDP1 service-object CU_SEEME_UDP2 ! object-group service DNS service-object DNS_TCP service-object DNS_UDP ! object-group service IRC service-object IRC_TCP service-object IRC_UDP ! object-group service NetBIOS service-object NetBIOS_TCP1 service-object NetBIOS_TCP2 service-object NetBIOS_UDP1 service-object NetBIOS_UDP2 ! object-group service ROADRUNNER service-object ROADRUNNER_TCP service-object ROADRUNNER_UDP ! object-group service RTSP service-object RTSP_TCP service-object RTSP_UDP ! object-group service SNMP service-object SNMP_TCP service-object SNMP_UDP ! object-group service SNMP-TRAPS service-object SNMP-TRAPS_TCP service-object SNMP-TRAPS_UDP ! object-group service SSH service-object SSH_TCP service-object SSH_UDP ! object-group service Allow_WAN_To_EnterpriseWLAN description System Default Allow From WAN To EnterpriseWLAN service-object AH service-object ESP service-object HTTPS service-object IKE service-object NATT service-object GRE service-object VRRP ! object-group service Allow_DMZ_To_EnterpriseWLAN description System Default Allow From DMZ To EnterpriseWLAN object-group DNS object-group NetBIOS ! object-group service Allow_WLAN_To_EnterpriseWLAN description System Default Allow From WLAN To EnterpriseWLAN service-object BOOTP_SERVER service-object HTTP service-object HTTPS object-group DNS ! default country-code UK ! diaginfo set ac 239 diaginfo set wtp 255 ! zymesh-profile ZyMesh_AP ssid ZyMesh_ap psk 12345678 ! zymesh-profile OFFICEmesh ssid OFFICEmesh psk 74654300 ! wlan-security-profile default mode none ! wlan-security-profile OFFICE_IT mode wpa2-mix eap internal default mac-auth auth-method default dot11w-op 1 idle 300 wpa-psk password1 wpa-encrypt auto group-key 30000 ! wlan-security-profile OFFICE_Guest mode wpa2-mix eap internal default mac-auth auth-method default dot11w-op 1 idle 300 wpa-psk password1 wpa-encrypt auto group-key 30000 ! wlan-security-profile OFFICE_Staff mode wpa2-mix eap internal default mac-auth auth-method default dot11w-op 1 idle 300 wpa-psk password1 wpa-encrypt aes group-key 30000 ! wlan-security-profile Local mode wpa2-mix eap internal default mac-auth auth-method default dot11w-op 1 idle 300 wpa-psk password1 wpa-encrypt auto group-key 30000 ! wlan-ssid-profile default ssid default data-forward localbridge qos wmm security default bandselect mode disable vlan-id 20 hide ! wlan-ssid-profile OFFICE_IT ssid OFFICE_IT security OFFICE_IT qos wmm_vi downlink-rate-limit 0 mbps uplink-rate-limit 0 mbps data-forward localbridge vlan-id 10 bandselect mode standard ! wlan-ssid-profile OFFICE_Guest ssid OFFICE_Guest security OFFICE_Guest qos wmm_vi downlink-rate-limit 0 mbps uplink-rate-limit 0 mbps data-forward localbridge vlan-id 20 bandselect mode standard ! wlan-ssid-profile OFFICE_Staff ssid OFFICE_Staff security OFFICE_Staff qos wmm_vi downlink-rate-limit 0 mbps uplink-rate-limit 0 mbps data-forward localbridge vlan-id 30 bandselect mode disable mon enable 00:00 24:00 tue enable 00:00 24:00 wed enable 00:00 24:00 thu enable 00:00 24:00 fri enable 00:00 24:00 sat enable 00:00 24:00 sun enable 00:00 24:00 hide ! wlan-monitor-profile default activate scan-method auto scan-dwell 100 ! wlan-radio-profile default role ap band 2.4G band-mode bgnax 2g-channel 6 ch-width 20/40 dtim-period 2 beacon-interval 100 ampdu limit-ampdu 50000 rssi-dbm -76 rssi-kickout -105 rssi-interval 2 rssi-optype 3 rssi-retrycount 6 rssi-verifytime 10 rssi-privilegetime 300 subframe-ampdu 32 amsdu limit-amsdu 4096 block-ack guard-interval short tx-mask 7 rx-mask 7 dcs time-interval 720 dcs sensitivity-level high dcs client-aware enable dcs dcs-2g-method auto dcs channel-deployment 3-channel dcs dcs-5g-method auto dcs dfs-aware enable country-code CH dcs schedule 03:00 mon tue wed thu fri sat sun activate ! wlan-radio-profile default2 role ap band 5G band-mode anacax 2g-channel 6 ch-width 20/40 dtim-period 2 beacon-interval 100 ampdu limit-ampdu 50000 rssi-dbm -76 rssi-kickout -105 rssi-interval 2 rssi-optype 3 rssi-retrycount 6 rssi-verifytime 10 rssi-privilegetime 300 subframe-ampdu 32 amsdu limit-amsdu 4096 block-ack guard-interval short tx-mask 7 rx-mask 7 dcs time-interval 720 dcs sensitivity-level high dcs client-aware enable dcs dcs-2g-method auto dcs channel-deployment 3-channel dcs dcs-5g-method auto dcs dfs-aware enable country-code UK dcs schedule 03:00 mon tue wed thu fri sat sun ! wlan-radio-profile Disabled-2G role ap band 2.4G band-mode bgn 2g-channel 6 ch-width 20 dtim-period 2 beacon-interval 100 ampdu limit-ampdu 50000 rssi-dbm -76 rssi-kickout -105 rssi-interval 2 rssi-optype 3 rssi-retrycount 6 rssi-verifytime 10 rssi-privilegetime 300 subframe-ampdu 32 amsdu limit-amsdu 4096 block-ack guard-interval short tx-mask 7 rx-mask 7 dcs time-interval 720 dcs sensitivity-level high dcs client-aware enable dcs dcs-2g-method auto dcs channel-deployment 3-channel dcs dcs-5g-method auto dcs dfs-aware enable ! wlan-radio-profile Disabled-5G role ap band 5G band-mode an 2g-channel 6 ch-width 20/40 dtim-period 2 beacon-interval 100 ampdu limit-ampdu 50000 rssi-dbm -76 rssi-kickout -105 rssi-interval 2 rssi-optype 3 rssi-retrycount 6 rssi-verifytime 10 rssi-privilegetime 300 subframe-ampdu 32 amsdu limit-amsdu 4096 block-ack guard-interval short tx-mask 7 rx-mask 7 dcs time-interval 720 dcs sensitivity-level high dcs client-aware enable dcs dcs-2g-method auto dcs channel-deployment 3-channel dcs dcs-5g-method auto dcs dfs-aware enable ! wlan-radio-profile OFFICE ch-width 20/40 country-code UK activate band 2.4G band-mode bgn dcs time-interval 720 dcs client-aware enable dcs channel-deployment 3-channel dcs dfs-aware enable dcs dcs-2g-method auto 2g-channel 11 dcs activate dcs schedule 03:00 mon tue wed thu fri sat sun dcs 2g-selected-channel 11 ! wlan-radio-profile OFFICE_5G band 5G band-mode ac ch-width 20/40/80 country-code UK activate dcs mode interval dcs time-interval 720 dcs client-aware enable dcs channel-deployment 3-channel dcs dfs-aware enable dcs schedule 03:00 mon tue wed thu fri sat sun dcs dcs-5g-method auto ctsrts 2347 frag 2346 dtim-period 1 beacon-interval 100 ampdu limit-ampdu 50000 subframe-ampdu 32 amsdu limit-amsdu 4096 guard-interval short rssi-dbm -76 rssi-kickout -80 rssi-retrycount 10 5g-multicast-speed 6.0 dcs activate ! web-auth ap-policy-rule default-rule authentication unnecessary ! web-auth ap-auth-policy-group default ! ap-group-profile default slot1 ap-profile default slot2 ap-profile default2 lan-provision model nwa5301-nj lan1 activate pvid 1 lan-provision model nwa5301-nj lan2 activate pvid 1 lan-provision model nwa5301-nj lan3 activate pvid 1 lan-provision model nwa5301-nj vlan0 activate vid 1 join lan1 untag lan2 untag lan3 untag lan-provision model wac6502d-e lan1 activate pvid 1 lan-provision model wac6502d-e vlan0 activate vid 1 join lan1 untag lan-provision model wac6502d-s lan1 activate pvid 1 lan-provision model wac6502d-s vlan0 activate vid 1 join lan1 untag lan-provision model wac6503d-s lan1 activate pvid 1 lan-provision model wac6503d-s vlan0 activate vid 1 join lan1 untag lan-provision model wac6553d-e lan1 activate pvid 1 lan-provision model wac6553d-e vlan0 activate vid 1 join lan1 untag lan-provision model wac6552d-s lan1 activate pvid 1 lan-provision model wac6552d-s vlan0 activate vid 1 join lan1 untag lan-provision model wac6103d-i lan1 activate pvid 1 lan-provision model wac6103d-i vlan0 activate vid 1 join lan1 untag lan-provision model wac5302d-s lan1 activate pvid 1 lan-provision model wac5302d-s lan2 activate pvid 1 lan-provision model wac5302d-s lan3 activate pvid 1 lan-provision model wac5302d-s vlan0 activate vid 1 join lan1 untag lan2 untag lan3 untag lan-provision model wac6303d-s lan1 activate pvid 1 lan-provision model wac6303d-s vlan0 activate vid 1 join lan1 untag lan-provision model nwa5123-ac-hd lan1 activate pvid 1 lan-provision model nwa5123-ac-hd vlan0 activate vid 1 join lan1 untag lan-provision model wna4320v2 lan1 activate pvid 1 lan-provision model wna4320v2 vlan0 activate vid 1 join lan1 untag lan-provision model wna4320v3 lan1 activate pvid 1 lan-provision model wna4320v3 vlan0 activate vid 1 join lan1 untag lan-provision model wna4320 lan1 activate pvid 1 lan-provision model wna4320 vlan0 activate vid 1 join lan1 untag lan-provision model wax650s lan1 activate pvid 1 lan-provision model wax650s vlan0 activate vid 1 join lan1 untag lan-provision model wax610d lan1 activate pvid 1 lan-provision model wax610d vlan0 activate vid 1 join lan1 untag lan-provision model wac5302d-sv2 lan1 activate pvid 1 lan-provision model wac5302d-sv2 lan2 activate pvid 1 lan-provision model wac5302d-sv2 lan3 activate pvid 1 lan-provision model wac5302d-sv2 vlan0 activate vid 1 join lan1 untag lan2 untag lan3 untag lan-provision model wac500h lan1 activate pvid 1 lan-provision model wac500h lan2 activate pvid 1 lan-provision model wac500h vlan0 activate vid 1 join lan1 untag lan2 untag contingency-access auth-policy-group default slot1 ssid-profile 1 default slot2 ssid-profile 1 default load-balancing slot1 mode station load-balancing slot2 mode station load-balancing slot1 max sta 10 load-balancing slot2 max sta 10 load-balancing slot1 traffic level high load-balancing slot2 traffic level high load-balancing slot1 alpha 5 load-balancing slot2 alpha 5 load-balancing slot1 beta 10 load-balancing slot2 beta 10 load-balancing slot1 sigma 60 load-balancing slot2 sigma 60 load-balancing slot1 timeout 20 load-balancing slot2 timeout 20 load-balancing slot1 liInterval 10 load-balancing slot2 liInterval 10 load-balancing slot1 kickInterval 20 load-balancing slot2 kickInterval 20 ! ap-group-profile Unclassified slot1 ap-profile Disabled-2G slot2 ap-profile Disabled-5G lan-provision model nwa5301-nj lan1 activate pvid 1 lan-provision model nwa5301-nj lan2 activate pvid 1 lan-provision model nwa5301-nj lan3 activate pvid 1 lan-provision model nwa5301-nj vlan0 activate vid 1 join lan1 untag lan2 untag lan3 untag lan-provision model wac6502d-e lan1 activate pvid 1 lan-provision model wac6502d-e vlan0 activate vid 1 join lan1 untag lan-provision model wac6502d-s lan1 activate pvid 1 lan-provision model wac6502d-s vlan0 activate vid 1 join lan1 untag lan-provision model wac6503d-s lan1 activate pvid 1 lan-provision model wac6503d-s vlan0 activate vid 1 join lan1 untag lan-provision model wac6553d-e lan1 activate pvid 1 lan-provision model wac6553d-e vlan0 activate vid 1 join lan1 untag lan-provision model wac6552d-s lan1 activate pvid 1 lan-provision model wac6552d-s vlan0 activate vid 1 join lan1 untag lan-provision model wac6103d-i lan1 activate pvid 1 lan-provision model wac6103d-i vlan0 activate vid 1 join lan1 untag lan-provision model wac5302d-s lan1 activate pvid 1 lan-provision model wac5302d-s lan2 activate pvid 1 lan-provision model wac5302d-s lan3 activate pvid 1 lan-provision model wac5302d-s vlan0 activate vid 1 join lan1 untag lan2 untag lan3 untag lan-provision model wac6303d-s lan1 activate pvid 1 lan-provision model wac6303d-s vlan0 activate vid 1 join lan1 untag lan-provision model nwa5123-ac-hd lan1 activate pvid 1 lan-provision model nwa5123-ac-hd vlan0 activate vid 1 join lan1 untag lan-provision model wna4320v2 lan1 activate pvid 1 lan-provision model wna4320v2 vlan0 activate vid 1 join lan1 untag lan-provision model wna4320v3 lan1 activate pvid 1 lan-provision model wna4320v3 vlan0 activate vid 1 join lan1 untag lan-provision model wna4320 lan1 activate pvid 1 lan-provision model wna4320 vlan0 activate vid 1 join lan1 untag lan-provision model wax650s lan1 activate pvid 1 lan-provision model wax650s vlan0 activate vid 1 join lan1 untag lan-provision model wax610d lan1 activate pvid 1 lan-provision model wax610d vlan0 activate vid 1 join lan1 untag lan-provision model wac5302d-sv2 lan1 activate pvid 1 lan-provision model wac5302d-sv2 lan2 activate pvid 1 lan-provision model wac5302d-sv2 lan3 activate pvid 1 lan-provision model wac5302d-sv2 vlan0 activate vid 1 join lan1 untag lan2 untag lan3 untag lan-provision model wac500h lan1 activate pvid 1 lan-provision model wac500h lan2 activate pvid 1 lan-provision model wac500h vlan0 activate vid 1 join lan1 untag lan2 untag contingency-access auth-policy-group default load-balancing slot1 mode station load-balancing slot2 mode station load-balancing slot1 max sta 10 load-balancing slot2 max sta 10 load-balancing slot1 traffic level high load-balancing slot2 traffic level high load-balancing slot1 alpha 5 load-balancing slot2 alpha 5 load-balancing slot1 beta 10 load-balancing slot2 beta 10 load-balancing slot1 sigma 60 load-balancing slot2 sigma 60 load-balancing slot1 timeout 20 load-balancing slot2 timeout 20 load-balancing slot1 liInterval 10 load-balancing slot2 liInterval 10 load-balancing slot1 kickInterval 20 load-balancing slot2 kickInterval 20 ! ap-group-profile OFFICE slot1 ap-profile OFFICE slot2 ap-profile OFFICE_5G lan-provision model nwa5301-nj lan1 activate pvid 1 lan-provision model nwa5301-nj lan2 activate pvid 1 lan-provision model nwa5301-nj lan3 activate pvid 1 lan-provision model nwa5301-nj vlan0 activate vid 1 join lan1 untag lan2 untag lan3 untag lan-provision model wac6502d-e lan1 activate pvid 1 lan-provision model wac6502d-e vlan0 activate vid 1 join lan1 untag lan-provision model wac6502d-s lan1 activate pvid 1 lan-provision model wac6502d-s vlan0 activate vid 1 join lan1 untag lan-provision model wac6503d-s lan1 activate pvid 1 lan-provision model wac6503d-s vlan0 activate vid 1 join lan1 untag lan-provision model wac6553d-e lan1 activate pvid 1 lan-provision model wac6553d-e vlan0 activate vid 1 join lan1 untag lan-provision model wac6552d-s lan1 activate pvid 1 lan-provision model wac6552d-s vlan0 activate vid 1 join lan1 untag lan-provision model wac6103d-i lan1 activate pvid 1 lan-provision model wac6103d-i vlan0 activate vid 1 join lan1 untag lan-provision model wac5302d-s lan1 activate pvid 1 lan-provision model wac5302d-s lan2 activate pvid 1 lan-provision model wac5302d-s lan3 activate pvid 1 lan-provision model wac5302d-s vlan0 activate vid 1 join lan1 untag lan2 untag lan3 untag lan-provision model wac6303d-s lan1 activate pvid 1 lan-provision model wac6303d-s vlan0 activate vid 1 join lan1 untag lan-provision model nwa5123-ac-hd lan1 activate pvid 1 lan-provision model nwa5123-ac-hd vlan0 activate vid 1 join lan1 untag lan-provision model wna4320v2 lan1 activate pvid 1 lan-provision model wna4320v2 vlan0 activate vid 1 join lan1 untag lan-provision model wna4320v3 lan1 activate pvid 1 lan-provision model wna4320v3 vlan0 activate vid 1 join lan1 untag lan-provision model wna4320 lan1 activate pvid 1 lan-provision model wna4320 vlan0 activate vid 1 join lan1 untag lan-provision model wax650s lan1 activate pvid 1 lan-provision model wax650s vlan0 activate vid 1 join lan1 untag lan-provision model wax610d lan1 activate pvid 1 lan-provision model wax610d vlan0 activate vid 1 join lan1 untag lan-provision model wac5302d-sv2 lan1 activate pvid 1 lan-provision model wac5302d-sv2 lan2 activate pvid 1 lan-provision model wac5302d-sv2 lan3 activate pvid 1 lan-provision model wac5302d-sv2 vlan0 activate vid 1 join lan1 untag lan2 untag lan3 untag lan-provision model wac500h lan1 activate pvid 1 lan-provision model wac500h lan2 activate pvid 1 lan-provision model wac500h vlan0 activate vid 1 join lan1 untag lan2 untag contingency-access auth-policy-group default slot1 output-power 30dBm slot2 output-power 30dBm slot1 ssid-profile 1 OFFICE_Guest slot1 ssid-profile 2 OFFICE_IT slot2 ssid-profile 1 OFFICE_Guest slot2 ssid-profile 2 OFFICE_IT slot1 ssid-profile 3 OFFICE_Staff slot2 ssid-profile 3 OFFICE_Staff ! ap-group first-priority default ! rogue-ap detection activate ! rogue-ap containment no activate ! no auto-healing activate auto-healing healing-interval 10 auto-healing power-threshold -70 auto-healing healing-threshold -85 auto-healing margin 2 auto-healing healing-margin 10 ! capwap ap add A0:E4:CB:81:F8:8D capwap ap add 04:BF:6D:1C:73:8C capwap ap add B8:EC:A3:FE:B9:F6 capwap ap add B8:EC:A3:FE:B9:F3 capwap ap add B8:EC:A3:FE:7A:B7 capwap ap add B8:EC:A3:FE:7A:A8 capwap ap add B8:EC:A3:FE:7A:A5 capwap ap add B8:EC:A3:FE:C4:5E capwap ap add B8:EC:A3:FE:C4:6A capwap ap add B8:EC:A3:FE:C4:5B capwap ap add B8:EC:A3:FE:C4:73 capwap ap add B8:EC:A3:FE:C4:64 capwap ap add B8:EC:A3:FE:C4:67 capwap ap add B8:EC:A3:FE:C4:6D capwap ap add B8:EC:A3:FE:C4:76 capwap ap add B8:EC:A3:FE:B9:FC capwap ap add C8:54:4B:B2:3E:0D capwap ap add B8:EC:A3:FE:C4:61 capwap ap add C8:54:4B:B3:67:A9 capwap ap add C8:54:4B:B3:64:97 capwap ap add B8:EC:A3:FF:10:B7 capwap ap add B8:EC:A3:FF:10:A8 capwap ap add B8:EC:A3:AC:4D:4B capwap ap add B8:EC:A3:AC:4A:EB capwap ap add 4C:C5:3E:C3:35:2F capwap ap add 4C:9E:FF:78:50:22 capwap ap add A0:E4:CB:81:F8:DD capwap ap add A0:E4:CB:81:F6:21 capwap ap add 4C:C5:3E:CB:A9:01 capwap ap add A0:E4:CB:81:F9:93 capwap ap add A0:E4:CB:81:F9:1F capwap ap add 4C:C5:3E:CB:BD:1A capwap ap add 4C:9E:FF:78:50:2A capwap ap add 4C:C5:3E:CB:BD:44 capwap ap add B8:EC:A3:AC:4C:11 ! ap-group-member OFFICE member A0:E4:CB:81:F8:8D ap-group-member OFFICE member 04:BF:6D:1C:73:8C ap-group-member OFFICE member B8:EC:A3:FE:B9:F6 ap-group-member OFFICE member B8:EC:A3:FE:B9:F3 ap-group-member OFFICE member B8:EC:A3:FE:7A:B7 ap-group-member OFFICE member B8:EC:A3:FE:7A:A8 ap-group-member OFFICE member B8:EC:A3:FE:7A:A5 ap-group-member OFFICE member B8:EC:A3:FE:C4:5E ap-group-member OFFICE member B8:EC:A3:FE:C4:6A ap-group-member OFFICE member B8:EC:A3:FE:C4:5B ap-group-member OFFICE member B8:EC:A3:FE:C4:73 ap-group-member OFFICE member B8:EC:A3:FE:C4:64 ap-group-member OFFICE member B8:EC:A3:FE:C4:67 ap-group-member OFFICE member B8:EC:A3:FE:C4:6D ap-group-member OFFICE member B8:EC:A3:FE:B9:FC ap-group-member OFFICE member B8:EC:A3:FE:C4:76 ap-group-member OFFICE member C8:54:4B:B2:3E:0D ap-group-member OFFICE member B8:EC:A3:FE:C4:61 ap-group-member OFFICE member C8:54:4B:B3:67:A9 ap-group-member OFFICE member C8:54:4B:B3:64:97 ap-group-member OFFICE member B8:EC:A3:FF:10:B7 ap-group-member OFFICE member B8:EC:A3:FF:10:A8 ap-group-member OFFICE member B8:EC:A3:AC:4D:4B ap-group-member OFFICE member B8:EC:A3:AC:4A:EB ap-group-member OFFICE member 4C:C5:3E:C3:35:2F ap-group-member OFFICE member A0:E4:CB:81:F8:DD ap-group-member OFFICE member 4C:9E:FF:78:50:22 ap-group-member OFFICE member A0:E4:CB:81:F6:21 ap-group-member OFFICE member 4C:C5:3E:CB:A9:01 ap-group-member OFFICE member A0:E4:CB:81:F9:93 ap-group-member OFFICE member 4C:C5:3E:CB:BD:1A ap-group-member OFFICE member A0:E4:CB:81:F9:1F ap-group-member OFFICE member 4C:9E:FF:78:50:2A ap-group-member OFFICE member 4C:C5:3E:CB:BD:44 ap-group-member OFFICE member B8:EC:A3:AC:4C:11 ! capwap ap fallback disable capwap ap fallback interval 30 ! capwap ap 4C:9E:FF:78:50:2A override slot1 radio-setting description MyOffice slot1 ap-profile OFFICE ! zone LAN interface vlan0 ! zone LAN2 interface ge1 interface vlan1 ! zone LAN3 interface ge2 interface vlan2 ! zone LAN6 interface ge6 ! zone LAN4 interface ge4 interface vlan3 ! no page-customization ! ip http server ! ip http secure-server cert default ip http secure-server ip http secure-server force-redirect ! hostname NXC2500 ! ip ssh server cert default ip ssh server ! console baud 115200 ! ip ftp server cert default ip ftp server ! clock saving-interval begin mar last sat 02:00 end oct last sat 02:00 1 clock daylight-saving ntp server 0.pool.ntp.org ntp ! snmp-server community cheeseface ro snmp-server community faceofcheese rw snmp-server host yellow cheese snmp-server version v2c ! report ! firewall 1 from LAN4 to LAN2 action deny ! firewall 2 from LAN4 to EnterpriseWLAN action deny ! firewall 3 description Block_NXC_ADmin from LAN3 to EnterpriseWLAN action deny ! firewall 4 description Block_NXC_Admin from LAN6 to EnterpriseWLAN action deny ! firewall 5 from LAN3 to LAN2 action deny ! policy 1 description OFFICE Staff Traffic interface vlan3 dscp any next-hop gateway OFFICE_Staff_Traffic deactivate ! policy 2 description OFFICE_Guest_Traffic interface vlan2 dscp any next-hop gateway OFFICE_Guests_Traffic ! app-watch-dog activate ! web-auth logout-ip 1.1.1.1 web-auth agreement user ua-users ! web-auth exceptional-service DNS ! web-auth exceptional-service BOOTP_CLIENT ! web-auth default-rule authentication unnecessary no log ! zymesh provision-group A0:E4:CB:81:6F:4F ! storm-control ethernet ap C8:54:4B:B3:64:97 ! storm-control ethernet ap 4C:C5:3E:C3:35:2F ! wtp-logging system-log suppression ! wtp-logging mail 1 category account level all wtp-logging mail 2 category account level all wtp-logging mail 1 category ble level all wtp-logging mail 2 category ble level all wtp-logging mail 1 category built-in-service level all wtp-logging mail 2 category built-in-service level all wtp-logging mail 1 category capwap level all wtp-logging mail 2 category capwap level all wtp-logging mail 1 category daily-report level all wtp-logging mail 2 category daily-report level all wtp-logging mail 1 category default level all wtp-logging mail 2 category default level all wtp-logging mail 1 category dfs level all wtp-logging mail 2 category dfs level all wtp-logging mail 1 category dhcp level all wtp-logging mail 2 category dhcp level all wtp-logging mail 1 category file-manage level all wtp-logging mail 2 category file-manage level all wtp-logging mail 1 category force-auth level all wtp-logging mail 2 category force-auth level all wtp-logging mail 1 category interface level all wtp-logging mail 2 category interface level all wtp-logging mail 1 category pki level all wtp-logging mail 2 category pki level all wtp-logging mail 1 category routing-protocol level all wtp-logging mail 2 category routing-protocol level all wtp-logging mail 1 category system level all wtp-logging mail 2 category system level all wtp-logging mail 1 category user level all wtp-logging mail 2 category user level all wtp-logging mail 1 category wireless-health level all wtp-logging mail 2 category wireless-health level all wtp-logging mail 1 category wlan level all wtp-logging mail 2 category wlan level all wtp-logging mail 1 category wlan-band-select level all wtp-logging mail 2 category wlan-band-select level all wtp-logging mail 1 category wlan-dcs level all wtp-logging mail 2 category wlan-dcs level all wtp-logging mail 1 category wlan-load-balancing level all wtp-logging mail 2 category wlan-load-balancing level all wtp-logging mail 1 category wlan-monitor level all wtp-logging mail 2 category wlan-monitor level all wtp-logging mail 1 category wlan-rogueap level all wtp-logging mail 2 category wlan-rogueap level all wtp-logging mail 1 category wlan-station-info level all wtp-logging mail 2 category wlan-station-info level all wtp-logging mail 1 category zon level all wtp-logging mail 2 category zon level all wtp-logging mail 1 category zymesh level all wtp-logging mail 2 category zymesh level all wtp-logging mail 1 category zysh level all wtp-logging mail 2 category zysh level all wtp-logging mail 1 subject ModelName-APDescription wtp-logging mail 1 subject-appending system-name wtp-logging mail 1 subject-appending date-time wtp-logging mail 1 send-log-to xxxxOFFICE.co.uk wtp-logging mail 1 send-alerts-to xxxx@OFFICE.co.uk wtp-logging mail 1 address smtp.office365.com wtp-logging mail 1 authentication wtp-logging mail 1 authentication username copier365@OFFICE.co.uk encrypted-password $ wtp-logging mail 1 from copier365@OFFICE.co.uk wtp-logging mail 1 tls-type tls wtp-logging mail 1 tls activate wtp-logging mail 1 port 25 wtp-logging mail 1 schedule daily hour 12 minute 15 wtp-logging mail 2 port 25 wtp-logging mail 2 schedule full ! daily-report mail-subject append system-name mail-subject append date-time no reset-counter item cpu-usage item mem-usage item session-usage item port-usage item traffic-report item station-count item wtp-tx item wtp-rx smtp-tls activate smtp-auth activate smtp-tls starttls smtp-address smtp.office365.com smtp-port 25 mail-subject set Wifi Report mail-from copier365@OFFICE.co.uk mail-to-1 xxxx@OFFICE.co.uk mail-to-2 xxxx@OFFICE.co.uk schedule hour 12 minutes 0 ! periodically-collect-data ! no diag-info copy usb-storage ! logging mail 1 subject Wifi Log 2 logging mail 1 subject-appending system-name logging mail 1 subject-appending date-time logging mail 1 send-log-to xxxx@OFFICE.co.uk logging mail 1 send-alerts-to xxxx@OFFICE.co.uk logging mail 1 address smtp.office365.com logging mail 1 authentication logging mail 1 tls-type tls logging mail 1 tls activate logging mail 1 port 25 logging mail 1 schedule daily hour 12 minute 15 logging mail 1 category wlan-station-info level all ! logging mail 2 port 25 logging mail 2 schedule full !