! management user admin password $crypt$1$m9VXXqRYt3/Sm83JhxFOk3ajI/bOc2waIRoES management cambium-remote management cambium-remote url https://management.loc management cambium-remote validate-server-cert management telnet management http port 80 management ssh management http management https management https port 443 led poe-out 802.3af country-code AO wpa2-handshake-retry 4 4 wpa2-handshake-timeout 100 500 1000 wpa2-handshake-log-level 4 placement outdoor ! wireless radio 1 no shutdown channel 6 channel-width 20 channel-list all-channels data-rate unicast 1b 2b 5.5b 11b 12 18 24 36 48 54 data-rate non-unicast highest-basic power 29 no airtime-fairness antenna-gain 5 beacon-interval 100 dynamic-channel-selection dynamic-channel-selection threshold 100 dynamic-channel-selection samples 20 off-channel-scan dwell-time 50 off-channel-scan interval 6 off-channel-scan samples 3 off-channel-scan num-channels 1 auto-rf auto-rf mode autonomous auto-rf min-txpower 12 auto-rf max-txpower 30 auto-rf chan-hold-time 120 auto-rf power-threshold 70 auto-rf channel-change-limit 10 auto-rf packet-retransmission-rate 30 auto-rf unvisited-channel-time 7200 auto-rf per-report-valid-time-for-dynamic-avg 7200 wmm-parameters downstream txoplimit vi 3008 wmm-parameters downstream txoplimit vo 1504 wmm-parameters upstream txoplimit vi 3008 wmm-parameters upstream txoplimit vo 1504 ! wireless radio 2 no shutdown channel auto channel-width 80 channel-list prefer-non-dfs data-rate unicast 6b 9 12b 18 24b 36 48 54 data-rate non-unicast lowest-basic power 28 no airtime-fairness auto-channel-select on-startup antenna-gain 5 beacon-interval 100 dynamic-channel-selection dynamic-channel-selection threshold 100 dynamic-channel-selection samples 20 off-channel-scan dwell-time 50 off-channel-scan interval 6 off-channel-scan samples 3 off-channel-scan num-channels 1 auto-rf auto-rf mode autonomous auto-rf min-txpower 12 auto-rf max-txpower 30 auto-rf chan-hold-time 120 auto-rf power-threshold 70 auto-rf channel-change-limit 10 auto-rf packet-retransmission-rate 0 auto-rf unvisited-channel-time 7200 auto-rf per-report-valid-time-for-dynamic-avg 7200 wmm-parameters downstream txoplimit vi 3008 wmm-parameters downstream txoplimit vo 1504 wmm-parameters upstream txoplimit vi 3008 wmm-parameters upstream txoplimit vo 1504 ! wireless wlan 1 ssid "KTV Ravne Free WiFi" no shutdown vlan 1 security open band both dtim-interval 1 max-associated-client 127 mac-authentication policy radius mac-authentication radius delimiter "-" no mac-authentication radius upper-case mac-authentication radius password radius-server authentication host 1 10.10.0.1 radius-server authentication secret 1 $crypt$1$2a9c89+Uc6hda27MFORQKiZfeC60AkTqttNSbh radius-server accounting host 1 10.10.0.1 radius-server accounting secret 1 $crypt$1$Uc6hda27MFORQKiZfeC60AkTqttNSbh/Dob6cT2Lz radius-server accounting interim-update-interval 180 radius-server accounting mode start-interim-stop guest-access guest-access access-type radius guest-access portal-mode external-hotspot https://cportal.loc/ext/login/48/1/6/ guest-access success-action redirect-url https://cportal.loc/ext/login/48/1/6/ guest-access mac-auth-fallback guest-access whitelist 10.10.0.0/16 ! wireless wlan 2 ssid "KTVR link" no shutdown vlan 1 security wpa2-psk no protected-mgmt-frames passphrase $crypt$1$GRnfdSOlNhupCvtXPfafqPMNKPIHtd96ZiX mesh base no mesh-vlan-tagging band 2.4GHz hidden-ssid dtim-interval 1 max-associated-client 127 no proxy-arp mac-authentication policy deny no guest-access ! interface eth 1 switchport mode access switchport access vlan 1 ! interface eth 2 switchport mode access switchport access vlan 1 ! interface vlan 1 ip address zeroconf management-access all ip address dhcp ! ntp server ntp1.arnes.si ip dhcp pool 16 address-range 10.0.0.10 10.0.0.190 default-router 10.0.0.1 lease 1 0 0 network 10.0.0.0 255.255.255.0 ! hostname AP-SANCE location "AP-2 Sance" snmp-server ip gw-source-precedence static 1 ip gw-source-precedence dhcpc 2 ip gw-source-precedence pppoe 3 logging syslog 7 !