scsd/scsd-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

wlc/wlc-b.cfg Fri Sep 26 05:07:24 PM EDT 2025

Browse Source
This commit is contained in:
John Poland 2025-09-26 17:07:24 -04:00
parent abc0a620f4
commit 7c59997ea4
1 changed files with 27 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
configs/wlc/wlc-b.cfg
View File

@ -9,12 +9,9 @@ conductorip 10.1.35.33 ipsec ****** interface vlan 35
location "Building1.floor1" location "Building1.floor1"
controller config 680 controller config 680
crypto-local pki ServerCert scsd_full_wc3 StarCert-Ex03_26_fullchain.pfx crypto-local pki ServerCert scsd_full_wc3 StarCert-Ex03_26_fullchain.pfx
crypto-local pki ServerCert scsd_full_wc_2025 Star-Exp042025-fullchain.pfx
crypto-local pki ServerCert scsd_full_wc_2026 StarCert-Ex03_26_fullchain.pfx crypto-local pki ServerCert scsd_full_wc_2026 StarCert-Ex03_26_fullchain.pfx
crypto-local pki ServerCert scsd_wc3_2026 StarCert-Expire03202026.pfx crypto-local pki ServerCert scsd_wc3_2026 StarCert-Expire03202026.pfx
crypto-local pki ServerCert scsd_wc_2025 StartCert-Expire042025.pfx
crypto-local pki ServerCert scsd_wc_2026 StarCert-Expire03202026.pfx crypto-local pki ServerCert scsd_wc_2026 StarCert-Expire03202026.pfx
crypto-local pki ServerCert scsd_wc_full_2025 Star-Exp042025-fullchain.pfx
crypto-local pki PublicCert master-ssh-pub-cert master-ssh-pub-cert crypto-local pki PublicCert master-ssh-pub-cert master-ssh-pub-cert
ip nat pool localip 0.0.0.0 0.0.0.0 ip nat pool localip 0.0.0.0 0.0.0.0
ip nat pool dynamic-srcnat 0.0.0.0 0.0.0.0 ip nat pool dynamic-srcnat 0.0.0.0 0.0.0.0
@ -1229,6 +1226,10 @@ interface vlan 304
ip address 10.4.112.8 255.255.240.0 ip address 10.4.112.8 255.255.240.0
! !
interface vlan 305
ip address 10.5.112.8 255.255.240.0
!
interface vlan 306 interface vlan 306
ip address 10.6.112.8 255.255.240.0 ip address 10.6.112.8 255.255.240.0
! !
@ -1385,6 +1386,10 @@ interface vlan 360
ip address 10.60.112.8 255.255.240.0 ip address 10.60.112.8 255.255.240.0
! !
interface vlan 366
ip address 10.66.112.8 255.255.240.0
!
interface vlan 386 interface vlan 386
ip address 10.86.112.8 255.255.240.0 ip address 10.86.112.8 255.255.240.0
! !
@ -1401,6 +1406,10 @@ interface vlan 404
ip address 10.4.128.8 255.255.240.0 ip address 10.4.128.8 255.255.240.0
! !
interface vlan 405
ip address 10.5.128.8 255.255.240.0
!
interface vlan 406 interface vlan 406
ip address 10.6.128.8 255.255.240.0 ip address 10.6.128.8 255.255.240.0
! !
@ -1557,6 +1566,10 @@ interface vlan 460
ip address 10.60.128.8 255.255.240.0 ip address 10.60.128.8 255.255.240.0
! !
interface vlan 466
ip address 10.66.128.8 255.255.240.0
!
interface vlan 486 interface vlan 486
ip address 10.86.128.8 255.255.240.0 ip address 10.86.128.8 255.255.240.0
! !
@ -1567,22 +1580,6 @@ interface vlan 1024
ip nat inside ip nat inside
! !
interface vlan 366
ip address 10.66.112.8 255.255.240.0
!
interface vlan 466
ip address 10.66.128.8 255.255.240.0
!
interface vlan 305
ip address 10.5.112.8 255.255.240.0
!
interface vlan 405
ip address 10.5.128.8 255.255.240.0
!
! !
uplink health-check uplink health-check
! !
@ -1712,17 +1709,6 @@ crypto dynamic-map default-dynamicmap 10000
crypto map GLOBAL-IKEV2-MAP 10000 ipsec-isakmp dynamic default-rap-ipsecmap crypto map GLOBAL-IKEV2-MAP 10000 ipsec-isakmp dynamic default-rap-ipsecmap
crypto map GLOBAL-MAP 10000 ipsec-isakmp dynamic default-dynamicmap crypto map GLOBAL-MAP 10000 ipsec-isakmp dynamic default-dynamicmap
crypto-local ipsec-map default-ha-ipsecmap10.1.35.14 9999
version v2
set ikev2-policy 10015
peer-ip 10.1.35.14
src-net 10.1.35.12 255.255.255.255
dst-net 10.1.35.14 255.255.255.255
set transform-set "default-ha-transform"
factory-cert-auth
trusted
!
crypto-local ipsec-map default-ha-ipsecmap10.1.35.11 9999 crypto-local ipsec-map default-ha-ipsecmap10.1.35.11 9999
version v2 version v2
set ikev2-policy 10015 set ikev2-policy 10015
@ -1735,6 +1721,17 @@ crypto-local ipsec-map default-ha-ipsecmap10.1.35.11 9999
trusted trusted
! !
crypto-local ipsec-map default-ha-ipsecmap10.1.35.14 9999
version v2
set ikev2-policy 10015
peer-ip 10.1.35.14
src-net 10.1.35.12 255.255.255.255
dst-net 10.1.35.14 255.255.255.255
set transform-set "default-ha-transform"
factory-cert-auth
trusted
!
crypto isakmp eap-passthrough eap-tls crypto isakmp eap-passthrough eap-tls
crypto isakmp eap-passthrough eap-peap crypto isakmp eap-passthrough eap-peap
crypto isakmp eap-passthrough eap-mschapv2 crypto isakmp eap-passthrough eap-mschapv2