-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathBasic SSID wPSK AP.txt
145 lines (140 loc) · 2.98 KB
/
Basic SSID wPSK AP.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
<#-- Default Access point Configuration -->
<#-- version 1.5 -->
<#if far.bootStrap>
aaa new-model
aaa authentication login default local
aaa authorization exec default local
!
ip domain name cisco.com
!
archive
path flash:
maximum 3
!
username ${deviceDefault.apAdminUsername} privilege 15 secret ${deviceDefault.apAdminPassword}
<#list far.Users as user >
username ${user.userName} privilege ${user.userPriv} secret ${user.userPassword}
</#list>
no username Cisco
do mkdir flash:/managed/data
bridge irb
!
!
dot11 syslog
!
dot11 ssid ${far.wifiSsid}
vlan 1
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 0 ${far.wifiPsk}
!
interface Dot11Radio0
no ip address
no ip route-cache
no shut
!
encryption vlan 1 mode ciphers aes-ccm
!
ssid ${far.wifiSsid}
!
mbssid
station-role root
!
int dot11 0.50
encap dot1Q 50 native
shutdown
!
interface Dot11Radio0.1
encapsulation dot1Q 1
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 spanning-disabled
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
!
interface Dot11Radio1
no ip address
no ip route-cache
no shut
!
encryption vlan 1 mode ciphers aes-ccm
!
ssid ${far.wifiSsid}
!
no dfs band block
mbssid
packet retries 64 drop-packet
channel dfs
station-role root
!
int dot11 1.50
encap dot1Q 50 native
shutdown
!
interface Dot11Radio1.1
encapsulation dot1Q 1
no ip route-cache
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 spanning-disabled
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
!
interface GigabitEthernet0.50
encapsulation dot1Q 50 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
interface GigabitEthernet0
description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router
no ip address
no ip route-cache
!
interface GigabitEthernet0.1
encapsulation dot1Q 1
no ip route-cache
bridge-group 10
bridge-group 10 spanning-disabled
no bridge-group 10 source-learning
bridge 1 aging-time 86400
bridge 10 aging-time 86400
!
interface BVI1
description Cisco Rainier AP v2.21, ${deviceDefault.apIpAddress} should match DHCP
ip address dhcp
!
ip http server
ip http authentication local
ip http secure-server
ip http secure-port 8443
!ip http secure-trustpoint LDevID
!
wsma agent exec
profile exec
!
wsma agent config
profile config
!
wsma agent filesys
profile filesys
!
wsma profile listener exec
transport https path /wsma/exec
!
wsma profile listener config
transport https path /wsma/config
!
wsma profile listener filesys
transport https path /wsma/filesys
!
no banner exec
!
no banner login
!
end
<#else>
</#if>