scsd/scsd-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: scsd:4c73ef2f2736474efb307b79e72453b5105f3b53
Branches Tags
scsd:main
...
compare: scsd:8b7e16221e0814baee5d91fe8ab32c9582c0fbb4
Branches Tags
scsd:main

3 Commits
4c73ef2f27 ... 8b7e16221e

Author SHA1 Message Date
John Poland
8b7e16221e wlc/wlc-c.cfg Sat Sep 27 10:31:53 PM EDT 2025 2025-09-27 22:31:53 -04:00
John Poland
2f0977abd5 wlc/wlc-a.cfg Sat Sep 27 10:31:53 PM EDT 2025 2025-09-27 22:31:53 -04:00
John Poland
e821abcd69 wlc/wlc-b.cfg Sat Sep 27 10:31:53 PM EDT 2025 2025-09-27 22:31:53 -04:00
3 changed files with 44 additions and 47 deletions
Show Stats Expand all files Collapse all files

28
configs/wlc/wlc-a.cfg
View File

@ -458,9 +458,6 @@ ip access-list session deny_internal_byod
any network 192.168.0.0 255.255.0.0 any deny
any any any permit
!
ip access-list session guest
host 10.48.120.112 any any permit
!
ip access-list session captiveportalbridge
user alias localip svc-https dual-nat pool localip 8081
user any svc-http dual-nat pool localip 8080
@ -499,6 +496,9 @@ ip access-list session apprf-student_byod-sacl
!
ip access-list session apprf-staff_scsd-sacl
!
ip access-list session guest
host 10.48.120.112 any any permit
!
ip access-list session apprf-scsd_test_role-sacl
!
ip access-list session noe-acl
@ -1709,17 +1709,6 @@ crypto dynamic-map default-dynamicmap 10000
crypto map GLOBAL-IKEV2-MAP 10000 ipsec-isakmp dynamic default-rap-ipsecmap
crypto map GLOBAL-MAP 10000 ipsec-isakmp dynamic default-dynamicmap
crypto-local ipsec-map default-ha-ipsecmap10.1.35.12 9999
version v2
set ikev2-policy 10015
peer-ip 10.1.35.12
src-net 10.1.35.11 255.255.255.255
dst-net 10.1.35.12 255.255.255.255
set transform-set "default-ha-transform"
factory-cert-auth
trusted
!
crypto-local ipsec-map default-ha-ipsecmap10.1.35.14 9999
version v2
set ikev2-policy 10015
@ -1731,6 +1720,17 @@ crypto-local ipsec-map default-ha-ipsecmap10.1.35.14 9999
trusted
!
crypto-local ipsec-map default-ha-ipsecmap10.1.35.12 9999
version v2
set ikev2-policy 10015
peer-ip 10.1.35.12
src-net 10.1.35.11 255.255.255.255
dst-net 10.1.35.12 255.255.255.255
set transform-set "default-ha-transform"
factory-cert-auth
trusted
!
crypto isakmp eap-passthrough eap-tls
crypto isakmp eap-passthrough eap-peap
crypto isakmp eap-passthrough eap-mschapv2

22
configs/wlc/wlc-b.cfg
View File

@ -1709,6 +1709,17 @@ crypto dynamic-map default-dynamicmap 10000
crypto map GLOBAL-IKEV2-MAP 10000 ipsec-isakmp dynamic default-rap-ipsecmap
crypto map GLOBAL-MAP 10000 ipsec-isakmp dynamic default-dynamicmap
crypto-local ipsec-map default-ha-ipsecmap10.1.35.14 9999
version v2
set ikev2-policy 10015
peer-ip 10.1.35.14
src-net 10.1.35.12 255.255.255.255
dst-net 10.1.35.14 255.255.255.255
set transform-set "default-ha-transform"
factory-cert-auth
trusted
!
crypto-local ipsec-map default-ha-ipsecmap10.1.35.11 9999
version v2
set ikev2-policy 10015
@ -1721,17 +1732,6 @@ crypto-local ipsec-map default-ha-ipsecmap10.1.35.11 9999
trusted
!
crypto-local ipsec-map default-ha-ipsecmap10.1.35.14 9999
version v2
set ikev2-policy 10015
peer-ip 10.1.35.14
src-net 10.1.35.12 255.255.255.255
dst-net 10.1.35.14 255.255.255.255
set transform-set "default-ha-transform"
factory-cert-auth
trusted
!
crypto isakmp eap-passthrough eap-tls
crypto isakmp eap-passthrough eap-peap
crypto isakmp eap-passthrough eap-mschapv2

41
configs/wlc/wlc-c.cfg
View File

@ -9,12 +9,9 @@ conductorip 10.1.35.33 ipsec ****** interface vlan 35
location "Building1.floor1"
controller config 680
crypto-local pki ServerCert scsd_full_wc3 StarCert-Ex03_26_fullchain.pfx
crypto-local pki ServerCert scsd_full_wc_2025 Star-Exp042025-fullchain.pfx
crypto-local pki ServerCert scsd_full_wc_2026 StarCert-Ex03_26_fullchain.pfx
crypto-local pki ServerCert scsd_wc3_2026 StarCert-Expire03202026.pfx
crypto-local pki ServerCert scsd_wc_2025 StartCert-Expire042025.pfx
crypto-local pki ServerCert scsd_wc_2026 StarCert-Expire03202026.pfx
crypto-local pki ServerCert scsd_wc_full_2025 Star-Exp042025-fullchain.pfx
crypto-local pki PublicCert master-ssh-pub-cert master-ssh-pub-cert
ip nat pool localip 0.0.0.0 0.0.0.0
ip nat pool dynamic-srcnat 0.0.0.0 0.0.0.0
@ -461,9 +458,6 @@ ip access-list session deny_internal_byod
any network 192.168.0.0 255.255.0.0 any deny
any any any permit
!
ip access-list session guest
host 10.48.120.112 any any permit
!
ip access-list session captiveportalbridge
user alias localip svc-https dual-nat pool localip 8081
user any svc-http dual-nat pool localip 8080
@ -502,6 +496,9 @@ ip access-list session apprf-student_byod-sacl
!
ip access-list session apprf-staff_scsd-sacl
!
ip access-list session guest
host 10.48.120.112 any any permit
!
ip access-list session apprf-scsd_test_role-sacl
!
ip access-list session noe-acl
@ -1223,6 +1220,10 @@ interface vlan 304
ip address 10.4.112.9 255.255.240.0
!
interface vlan 305
ip address 10.5.112.9 255.255.240.0
!
interface vlan 306
ip address 10.6.112.9 255.255.240.0
!
@ -1379,6 +1380,10 @@ interface vlan 360
ip address 10.60.112.9 255.255.240.0
!
interface vlan 366
ip address 10.66.112.9 255.255.240.0
!
interface vlan 386
ip address 10.86.112.9 255.255.240.0
!
@ -1395,6 +1400,10 @@ interface vlan 404
ip address 10.4.128.9 255.255.240.0
!
interface vlan 405
ip address 10.5.128.9 255.255.240.0
!
interface vlan 406
ip address 10.6.128.9 255.255.240.0
!
@ -1551,6 +1560,10 @@ interface vlan 460
ip address 10.60.128.9 255.255.240.0
!
interface vlan 466
ip address 10.66.128.9 255.255.240.0
!
interface vlan 486
ip address 10.86.128.9 255.255.240.0
!
@ -1561,22 +1574,6 @@ interface vlan 1024
ip nat inside
!
interface vlan 366
ip address 10.66.112.9 255.255.240.0
!
interface vlan 466
ip address 10.66.128.9 255.255.240.0
!
interface vlan 305
ip address 10.5.112.9 255.255.240.0
!
interface vlan 405
ip address 10.5.128.9 255.255.240.0
!
!
uplink health-check
!