!
management user admin password $crypt$1$mo3eyhYZobpEH4I97GHm85QtX5crNEr8
no management radius-auth
management cambium-remote
management cambium-remote validate-server-cert
no management telnet
management ssh
management ssh idle-timeout 300
management http
management http port 80
management https
management https port 443
led
lldp
lldp-pba
poe-out 802.3af
country-code HR
wpa2-handshake-retry 4 4
wpa2-handshake-timeout 100 500 1000
wpa2-handshake-log-level 4
placement indoor
!
wireless radio 1
 no shutdown
 channel auto
 channel-width 20
 channel-list all-channels
 data-rate unicast 1b 2b 5.5b 11b 12 18 24 36 48 54
 data-rate non-unicast highest-basic
 power auto
 no airtime-fairness
 antenna-gain 4
 beacon-interval 100
 off-channel-scan dwell-time 50
 auto-rf channel-selection-mode interference
 auto-rf interference-diff-threshold 10
 auto-rf num-per-samples 40
 auto-rf num-nav-samples 40
 auto-rf num-congestion-samples 100
 auto-rf num-noise-samples 40
 auto-rf ocs-scan-interval 6
 auto-rf acceptance-per-threshold 30
 auto-rf nav-threshold 3000
 auto-rf nav-blockout-time 24
 auto-rf congestion-threshold 70
 auto-rf noise-threshold -70
 auto-rf per-channel-switch off
 auto-rf nav-channel-switch off
 auto-rf congestion-channel-switch off
 auto-rf noise-channel-switch off
 multicast-to-unicast max-stream 40
 multicast-to-unicast max-stream-per-client 25
 mesh-xtnded-dev-list
 wmm-parameters downstream txoplimit vi 3008
 wmm-parameters downstream txoplimit vo 1504
 wmm-parameters upstream txoplimit vi 3008
 wmm-parameters upstream txoplimit vo 1504
!
wireless radio 2
 no shutdown
 channel auto
 channel-width 20
 channel-list prefer-non-dfs
 data-rate unicast 6b 9 12b 18 24b 36 48 54
 data-rate non-unicast lowest-basic
 power auto
 no airtime-fairness
 antenna-gain 4
 beacon-interval 100
 off-channel-scan dwell-time 50
 auto-rf channel-selection-mode interference
 auto-rf interference-diff-threshold 10
 auto-rf num-per-samples 40
 auto-rf num-nav-samples 40
 auto-rf num-congestion-samples 100
 auto-rf num-noise-samples 40
 auto-rf ocs-scan-interval 6
 auto-rf acceptance-per-threshold 30
 auto-rf nav-threshold 3000
 auto-rf nav-blockout-time 24
 auto-rf congestion-threshold 70
 auto-rf noise-threshold -70
 auto-rf per-channel-switch off
 auto-rf nav-channel-switch off
 auto-rf congestion-channel-switch off
 auto-rf noise-channel-switch off
 multicast-to-unicast max-stream 40
 multicast-to-unicast max-stream-per-client 25
 mesh-xtnded-dev-list
 wmm-parameters downstream txoplimit vi 3008
 wmm-parameters downstream txoplimit vo 1504
 wmm-parameters upstream txoplimit vi 3008
 wmm-parameters upstream txoplimit vo 1504
!
wireless wlan 1
 ssid eduroam
 no shutdown
 vlan 1090
 vlan encapsulation disable
 security wpa2-enterprise
 protected-mgmt-frames state optional
 protected-mgmt-frames sa-query-retry-time 100
 protected-mgmt-frames association-comeback 1
 passphrase $crypt$1$4ZrPxXO6L+MnnONtQVtkUttn+meQQKKD
 band both
 dtim-interval 1
 wpa-group-rekey-interval 3600
 max-associated-client 127
 client-isolation dynamic
 client-isolation dynamic gateway-probe-interval 60
 network-policy-id 0
 mac-authentication policy deny
 radius-server authentication host 1 radius.unizd.hr
 radius-server authentication secret 1 $crypt$1$4YdbaI9jRUEYnbOcZ1qrsFhIjsEbjJL8bUk1umV735XyFTttpSjmSQ==
 radius-server called-sta-id AP-MAC:SSID
 nas-identifier AP-HOSTNAME
 nas-ip AP-IP
 radius-server rad-attr service-type 1
 passpoint interworking access-network-type private
 no guest-access
!
interface eth 1
 switchport mode trunk
 switchport trunk native vlan 1
 switchport trunk allowed vlan 1090
 speed auto
 duplex full
!
interface eth 2
 switchport mode access
 switchport access vlan 1090
 speed auto
 duplex full
 radius-server authentication host 1 A.B.C.D
 radius-server authentication secret 1 $crypt$1$p7p78b0wZOrc6XIVlF9Dlczi9gn5zsPneJFIq6JzLJqDoWSsRTqeaA==
 nas-ip AP-IP
 nas-identifier AP-HOSTNAME
 called-sta-id AP-MAC
!
interface eth 3
 switchport mode access
 switchport access vlan 1090
 speed auto
 duplex full
 radius-server authentication host 1 A.B.C.D
 radius-server authentication secret 1 $crypt$1$79iQ5xmPFrYZ07qSJnZ4dzphYMIEi9AsPMseEB0JdYMGJU7n6DhJXg==
 nas-ip AP-IP
 nas-identifier AP-HOSTNAME
 called-sta-id AP-MAC
!
interface vlan 1
 ip address zeroconf
 management-access all
 ip dhcp request-option-all
 ipv6 request-option-all
 ipv6 address autoconfig 
 ip address dhcp
!
ntp server 161.53.123.5 
ntp server 161.53.160.5 
pppoe server
 shutdown
 tcp-mss-clamp
 management-access
!


ipv6 name-server  
!
hostname E425-879558
timezone Europe/Zagreb
snmp-server
no wifiperf
!
ip gw-source-precedence static 1
ip gw-source-precedence dhcpc 2
ip gw-source-precedence pppoe 3
ipv6 gw-source-precedence static 1
ipv6 gw-source-precedence auto-config/dhcpc 2
logging syslog 7

!