!
management user admin password $crypt$1$TKI9ULgkRHZFl9xrP/MNfURtX6G4flwaXq53mU
no management telnet
management cambium-remote
management cambium-remote url https://xydf.net
management cambium-remote validate-server-cert
management ssh
management http
management http port 80
management https
management https port 443
led
poe-out 802.3af
country-code AO
wpa2-handshake-retry 4 4
wpa2-handshake-timeout 100 500 1000
wpa2-handshake-log-level 4
placement outdoor
!
wireless radio 1
 no shutdown
 channel auto
 channel-width 20
 channel-list all-channels
 data-rate unicast 1b 2b 5.5b 11b 12 18 24 36 48 54
 data-rate non-unicast highest-basic
 power 29
 airtime-fairness
 auto-channel-select on-startup
 antenna-gain 5
 beacon-interval 100
 no dynamic-channel-selection
 off-channel-scan dwell-time 50
 off-channel-scan interval 6
 off-channel-scan samples 3
 off-channel-scan num-channels 1
 auto-rf 
 auto-rf mode autonomous 
 auto-rf min-txpower 20
 auto-rf max-txpower 30
 auto-rf chan-hold-time 120
 auto-rf power-threshold 70
 auto-rf channel-change-limit 10
 auto-rf packet-retransmission-rate 30
 auto-rf unvisited-channel-time 7200
 auto-rf per-report-valid-time-for-dynamic-avg 7200
 enhanced-roaming threshold 1
 wmm-parameters downstream txoplimit vi 3008
 wmm-parameters downstream txoplimit vo 1504
 wmm-parameters upstream txoplimit vi 3008
 wmm-parameters upstream txoplimit vo 1504
!
wireless radio 2
 no shutdown
 channel auto
 channel-width 80
 channel-list prefer-non-dfs
 data-rate unicast 6b 9 12b 18 24b 36 48 54
 data-rate non-unicast lowest-basic
 power 28
 no airtime-fairness
 auto-channel-select scheduled everyday 23:05
 antenna-gain 5
 beacon-interval 100
 dynamic-channel-selection
 dynamic-channel-selection threshold 100
 dynamic-channel-selection samples 20
 off-channel-scan dwell-time 50
 off-channel-scan interval 6
 off-channel-scan samples 3
 off-channel-scan num-channels 1
 auto-rf 
 auto-rf mode autonomous 
 auto-rf min-txpower 20
 auto-rf max-txpower 30
 auto-rf chan-hold-time 120
 auto-rf power-threshold 70
 auto-rf channel-change-limit 10
 auto-rf packet-retransmission-rate 0
 auto-rf unvisited-channel-time 7200
 auto-rf per-report-valid-time-for-dynamic-avg 7200
 enhanced-roaming threshold 1
 wmm-parameters downstream txoplimit vi 3008
 wmm-parameters downstream txoplimit vo 1504
 wmm-parameters upstream txoplimit vi 3008
 wmm-parameters upstream txoplimit vo 1504
!
wireless wlan 1
 ssid "KTVR link"
 no shutdown
 vlan 1
 security wpa2-psk
 no protected-mgmt-frames
 passphrase $crypt$1$EshCiUOMKcWCPJL4aijLrfCKJIZGeckkk4Asp
 mesh client
 no mesh-vlan-tagging
 band 2.4GHz
 dtim-interval 1
 max-associated-client 127
 no proxy-arp
 mac-authentication policy radius
 mac-authentication radius delimiter "-"
 no mac-authentication radius upper-case
 mac-authentication radius password
 radius-server authentication host 1 10.10.0.1
 radius-server authentication secret 1 $crypt$1$pA+BkaXeq93l1iHDH2mjpoL5d4wJrk7b
 radius-server authentication attempts 3
 radius-server accounting host 1 10.10.0.1
 radius-server accounting secret 1 $crypt$1$cbsgz65JmVG+BlD4Ak/zxzUU2Xb9Twgc
 radius-server accounting attempts 3
 radius-server accounting interim-update-interval 120
 radius-server accounting mode start-interim-stop
 guest-access
 guest-access access-type radius
 guest-access portal-mode external-hotspot https://cportal.loc/ext/login/48/1/6/
 guest-access success-action redirect-url https://cportal.loc/ext/login/48/1/6/
 guest-access mac-auth-fallback
 guest-access whitelist 10.10.0.0/16
!
wireless wlan 2
 ssid "KTV Ravne Free WiFi"
 no shutdown
 vlan 1
 security open
 band both
 dtim-interval 1
 max-associated-client 127
 mac-authentication policy radius
 mac-authentication radius delimiter "-"
 no mac-authentication radius upper-case
 mac-authentication radius password
 radius-server authentication host 1 10.10.0.1
 radius-server authentication secret 1 $crypt$1$jnpnwLX5FexrWQXwV15cv0PCkcXxIVOn
 radius-server accounting host 1 10.10.0.1
 radius-server accounting secret 1 $crypt$1$r02YQYEFjRGxwGe0+8EpgztflspsjSw/
 radius-server accounting interim-update-interval 180
 radius-server accounting mode start-interim-stop
 guest-access
 guest-access access-type radius
 guest-access portal-mode external-hotspot https://cportal.loc/ext/login/48/1/6/
 guest-access success-action redirect-url https://cportal.loc/ext/login/48/1/6/
 guest-access mac-auth-fallback
 guest-access whitelist 10.10.0.0/167
!
interface eth 1
 switchport mode access
 switchport access vlan 1
!
interface eth 2
 switchport mode access
 switchport access vlan 1
!
interface vlan 1
 ip address zeroconf
 management-access all
 ip address dhcp
!
ntp server ntp1.arnes.si 

timezone Europe/Ljubljana
location AP-eleven-4-MESH
hostname AP-eleven-4-MESH
snmp-server
ip gw-source-precedence static 1
ip gw-source-precedence dhcpc 2
ip gw-source-precedence pppoe 3
logging syslog 7
!