! management user admin password $crypt$1$8qxZyLvA38F9vONYiRrHZDSLMcEpdub6 no management radius-auth management cambium-remote management cambium-remote url 10.110.219.62 management cambium-remote validate-server-cert no management telnet management ssh management ssh idle-timeout 300 management http management http port 80 management https management https port 443 led lldp lldp-pba no poe-out country-code IN wpa2-handshake-retry 4 4 wpa2-handshake-timeout 100 500 1000 wpa2-handshake-log-level 4 placement indoor ! wireless radio 1 no shutdown channel auto channel-width 20 channel-list all-channels data-rate unicast 1b 2b 5.5b 11b 6 9 12 18 24 36 48 54 data-rate non-unicast highest-basic power auto no airtime-fairness antenna-gain 5 beacon-interval 100 off-channel-scan dwell-time 50 auto-rf channel-selection-mode interference auto-rf interference-diff-threshold 10 auto-rf num-per-samples 40 auto-rf num-nav-samples 40 auto-rf num-congestion-samples 100 auto-rf num-noise-samples 40 auto-rf ocs-scan-interval 6 auto-rf acceptance-per-threshold 30 auto-rf nav-threshold 3000 auto-rf nav-blockout-time 24 auto-rf congestion-threshold 70 auto-rf noise-threshold -70 auto-rf per-channel-switch off auto-rf nav-channel-switch off auto-rf congestion-channel-switch off auto-rf noise-channel-switch off multicast-to-unicast max-stream 40 multicast-to-unicast max-stream-per-client 25 mesh-xtnded-dev-list wmm-parameters downstream txoplimit vi 3008 wmm-parameters downstream txoplimit vo 1504 wmm-parameters upstream txoplimit vi 3008 wmm-parameters upstream txoplimit vo 1504 ! wireless radio 2 no shutdown channel 48 channel-width 20 channel-list prefer-non-dfs data-rate unicast 6b 9 12b 18 24b 36 48 54 data-rate non-unicast lowest-basic power auto no airtime-fairness antenna-gain 5 beacon-interval 100 off-channel-scan dwell-time 50 auto-rf channel-selection-mode interference auto-rf interference-diff-threshold 10 auto-rf num-per-samples 40 auto-rf num-nav-samples 40 auto-rf num-congestion-samples 100 auto-rf num-noise-samples 40 auto-rf ocs-scan-interval 6 auto-rf acceptance-per-threshold 30 auto-rf nav-threshold 3000 auto-rf nav-blockout-time 24 auto-rf congestion-threshold 70 auto-rf noise-threshold -70 auto-rf per-channel-switch off auto-rf nav-channel-switch off auto-rf congestion-channel-switch off auto-rf noise-channel-switch off multicast-to-unicast max-stream 40 multicast-to-unicast max-stream-per-client 25 mesh-xtnded-dev-list wmm-parameters downstream txoplimit vi 3008 wmm-parameters downstream txoplimit vo 1504 wmm-parameters upstream txoplimit vi 3008 wmm-parameters upstream txoplimit vo 1504 ! wireless wlan 1 ssid TSK_WLAN_VLAN1 no shutdown vlan 10 security wpa2-psk no protected-mgmt-frames passphrase $crypt$1$RYuKrDcobJJAKl5WPbxm61OQSIGlD/hh band 5GHz dtim-interval 1 wpa-group-rekey-interval 3600 max-associated-client 256 client-isolation dynamic client-isolation dynamic gateway-probe-interval 60 no proxy-arp no unicast-dhcp network-policy-id 0 mac-authentication policy deny no guest-access ! wireless wlan 2 ssid TSK_WLAN_VLA20 no shutdown vlan 20 security wpa2-psk protected-mgmt-frames state optional protected-mgmt-frames sa-query-retry-time 100 protected-mgmt-frames association-comeback 1 passphrase $crypt$1$wbWS7FrnhunVKHu7nHOk3OAFjg8P/tQQ band 5GHz dtim-interval 1 wpa-group-rekey-interval 3600 max-associated-client 256 client-isolation dynamic client-isolation dynamic gateway-probe-interval 60 no unicast-dhcp network-policy-id 0 mac-authentication policy deny no guest-access ! interface portchannel 1 switchport mode access switchport access vlan 1 ! interface eth 1 switchport mode trunk switchport trunk native vlan 1 switchport trunk allowed vlan 10,20 acl permit mac 20 any any any //default rule acl deny ip 4 192.168.10.0/255.255.255.0 192.168.20.0/255.255.255.0 any //denying traffic between two subnets-1 acl deny ip 5 192.168.20.0/255.255.255.0 192.168.10.0/255.255.255.0 any //denying traffic between two subnets-2 ! interface vlan 1 ip address zeroconf management-access all ip dhcp request-option-all ipv6 request-option-all ipv6 address autoconfig ip address dhcp ! pppoe server shutdown tcp-mss-clamp management-access ! ! hostname E410-E150AB snmp-server no wifiperf ! ip gw-source-precedence static 1 ip gw-source-precedence dhcpc 2 ip gw-source-precedence pppoe 3 ipv6 gw-source-precedence static 1 ipv6 gw-source-precedence auto-config/dhcpc 2 logging syslog 7 !