wap generic

configure
!
! Configuration of AP7532 version 5.8.2.0-030R
!
!
version 2.5
!
!
client-identity-group default
 load default-fingerprints
!
ip access-list BROADCAST-MULTICAST-CONTROL
 permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"
 permit udp any eq 67 any eq dhcpc rule-precedence 11 rule-description "permit DHCP replies"
 deny udp any range 137 138 any range 137 138 rule-precedence 20 rule-description "deny windows netbios"
 deny ip any 224.0.0.0/4 rule-precedence 21 rule-description "deny IP multicast"
 deny ip any host 255.255.255.255 rule-precedence 22 rule-description "deny IP local broadcast"
 permit ip any any rule-precedence 100 rule-description "permit all IP traffic"
!
mac access-list PERMIT-ARP-AND-IPv4
 permit any any type ip rule-precedence 10 rule-description "permit all IPv4 traffic"
 permit any any type arp rule-precedence 20 rule-description "permit all ARP traffic"
!
ip snmp-access-list default
 permit any
!
firewall-policy default
 no ip dos tcp-sequence-past-window
 no stateful-packet-inspection-l2
 ip tcp adjust-mss 1400
!
!
mint-policy global-default
!
meshpoint-qos-policy default
!
wlan-qos-policy B747_IFE_PGA
 rate-limit client to-air rate 5000
 rate-limit client from-air rate 5000
 qos trust dscp
 qos trust wmm
!
wlan-qos-policy B747_VIP_backup
 rate-limit client to-air rate 5000
 rate-limit client from-air rate 5000
 qos trust dscp
 qos trust wmm
!
wlan-qos-policy B747_cabin_bkup
 rate-limit client to-air rate 5000
 rate-limit client from-air rate 5000
 qos trust dscp
 qos trust wmm
!
wlan-qos-policy B747_cabin_hset
 rate-limit client to-air rate 5000
 rate-limit client from-air rate 5000
 qos trust dscp
 qos trust wmm
!
wlan-qos-policy B747_internet
 rate-limit client to-air rate 5000
 rate-limit client from-air rate 5000
 qos trust dscp
 qos trust wmm
!
wlan-qos-policy B747_vip_intern
 rate-limit client to-air rate 5000
 rate-limit client from-air rate 5000
 qos trust dscp
 qos trust wmm
!
wlan-qos-policy default
 qos trust dscp
 qos trust wmm
!
radio-qos-policy default
!
wlan B747_IFE_PGA
 ssid MSN_37501_2_4
 vlan 1
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 no client-client-communication
 wpa-wpa2 psk 0 MSN37501
 use wlan-qos-policy B747_IFE_PGA
!
wlan B747_VIP_backup
 ssid "VIP Backup"
 vlan 2003
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 no client-client-communication
 wpa-wpa2 psk 0 MSN37501
 use wlan-qos-policy B747_VIP_backup
!
wlan B747_cabin_bkup
 ssid "Cabin Backup"
 vlan 2003
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 no client-client-communication
 wpa-wpa2 psk 0 MSN37501
 use wlan-qos-policy B747_cabin_bkup
!
wlan B747_cabin_hset
 ssid "Cabin Handset"
 vlan 2002
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 no client-client-communication
 wpa-wpa2 psk 0 MSN37501
 use wlan-qos-policy B747_cabin_hset
!
wlan B747_internet
 ssid Internet
 vlan 2001
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 no client-client-communication
 wpa-wpa2 psk 0 MSN37501
 use wlan-qos-policy B747_internet
!
wlan B747_vip_intern
 ssid "VIP Internet"
 vlan 2006
 bridging-mode local
 encryption-type ccmp
 authentication-type none
 no client-client-communication
 wpa-wpa2 psk 0 MSN37501
 use wlan-qos-policy B747_vip_intern
!
!
management-policy default
 telnet
 no http server
 https server
 ssh
 user admin password 1 06b5e36b8e43abc7bcb4781f76988ea4f5ce17ed13577dc5432be0b212e9c08d role superuser access all
 snmp-server community 0 private rw
 snmp-server community 0 public ro
 snmp-server user snmptrap v3 encrypted des auth md5 0 admin123
 snmp-server user snmpmanager v3 encrypted des auth md5 0 admin123
!
nsight-policy default
!
profile ap7532 default-ap7532
 autoinstall configuration
 autoinstall firmware
 crypto ikev1 policy ikev1-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ikev2 policy ikev2-default
  isakmp-proposal default encryption aes-256 group 2 hash sha
 crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
 crypto ikev1 remote-vpn
 crypto ikev2 remote-vpn
 crypto auto-ipsec-secure
 crypto load-management
 crypto remote-vpn-client
 interface radio1
  wlan B747_VIP_backup bss 1 primary
  wlan B747_internet bss 2 primary
  wlan B747_vip_intern bss 3 primary
  wlan B747_cabin_bkup bss 4 primary
  wlan B747_cabin_hset bss 5 primary
  wlan B747_IFE_PGA bss 6 primary
 interface radio2
 interface ge1
  switchport mode trunk
  switchport trunk native vlan 1
  switchport trunk native tagged
  switchport trunk allowed vlan 1,2001-2004,2006
 interface vlan1
  ip address 172.17.17.0/16
 interface vlan2001
  ip address dhcp
 interface vlan2002
  ip address dhcp
 interface vlan2003
  ip address dhcp
 interface vlan2004
  ip address dhcp
 interface vlan2006
  ip address dhcp
 interface pppoe1
 use firewall-policy default
 use client-identity-group default
 logging on
 service pm sys-restart
 router ospf
!
rf-domain default
 country-code ca
 use nsight-policy default
!
ap7532 74-67-F7-04-CB-98
 radio-count 2
 use profile default-ap7532
 use rf-domain default
 hostname ap7532-WAP01
 license AP VIRTUAL_CONTROLLER_DEFAULT_AP_LICENSE
 no adoption-site
 interface radio1
  channel 11
  power 25
  data-rates bg
 interface vlan1
  ip address 172.17.15.100/16
 rf-domain-manager capable
!
ap7532 74-67-F7-04-C5-C4
 radio-count 2
 use profile default-ap7532
 use rf-domain default
 hostname ap7532-WAP03
 license AP VIRTUAL_CONTROLLER_DEFAULT_AP_LICENSE
 interface radio1
  channel 11
  power 25
  data-rates bg
 interface vlan1
  ip address 172.17.15.102/16
 rf-domain-manager capable
!
ap7532 B8-50-01-73-83-38
 radio-count 2
 use profile default-ap7532
 use rf-domain default
 hostname ap7532-WAP05
 license AP VIRTUAL_CONTROLLER_DEFAULT_AP_LICENSE
 no adoption-site
 interface radio1
  channel 6
  power 25
  data-rates bg
 interface vlan1
  ip address 172.17.15.104/16
 rf-domain-manager capable
!
ap7532 74-67-F7-04-C8-4C
 radio-count 2
 use profile default-ap7532
 use rf-domain default
 hostname ap7532-WAP06
 license AP VIRTUAL_CONTROLLER_DEFAULT_AP_LICENSE
 no adoption-site
 interface radio1
  channel 1
  power 25
  data-rates bg
 interface vlan1
  ip address 172.17.15.105/16
 rf-domain-manager capable
!
ap7532 74-67-F7-A3-35-58
 radio-count 2
 use profile default-ap7532
 use rf-domain default
 hostname ap7532-WAP04
 license AP VIRTUAL_CONTROLLER_DEFAULT_AP_LICENSE
 no adoption-site
 interface radio1
  channel 1
  power 25
  data-rates bg
 interface vlan1
  ip address 172.17.15.103/16
 rf-domain-manager capable
!
ap7532 74-67-F7-A3-38-D0
 radio-count 2
 use profile default-ap7532
 use rf-domain default
 hostname ap7532-WAP02
 license AP VIRTUAL_CONTROLLER_DEFAULT_AP_LICENSE
 no adoption-site
 interface radio1
  channel 6
  power 25
  data-rates bg
 interface vlan1
  ip address 172.17.15.101/16
 no virtual-controller
 rf-domain-manager capable
!
!
end