Compare commits
No commits in common. "6b9d87ae40bef7c6739da684cd6e251fdb6d065b" and "0d83be57f1b01a73ca618c8d8690d14ebd10f5f1" have entirely different histories.
6b9d87ae40
...
0d83be57f1
@ -1,8 +1,8 @@
|
||||
Building configuration...
|
||||
|
||||
Current configuration : 34631 bytes
|
||||
Current configuration : 34613 bytes
|
||||
!
|
||||
! Last configuration change at 11:03:21 EDT Wed Sep 10 2025 by bmaccl09.admin
|
||||
! Last configuration change at 14:42:09 EDT Thu Aug 28 2025
|
||||
!
|
||||
version 15.2
|
||||
no service pad
|
||||
|
||||
@ -500,30 +500,16 @@ interface 1/1/22
|
||||
client track ip update-interval 120
|
||||
power-over-ethernet pre-std-detect
|
||||
interface 1/1/23
|
||||
description Auto
|
||||
description Admin Voice
|
||||
no shutdown
|
||||
no routing
|
||||
vlan access 168
|
||||
vlan access 50
|
||||
spanning-tree bpdu-guard
|
||||
spanning-tree port-type admin-edge
|
||||
spanning-tree root-guard
|
||||
spanning-tree tcn-guard
|
||||
loop-protect
|
||||
port-access onboarding-method concurrent enable
|
||||
aaa authentication port-access allow-cdp-bpdu
|
||||
aaa authentication port-access allow-lldp-bpdu
|
||||
aaa authentication port-access client-limit 3
|
||||
aaa authentication port-access dot1x authenticator
|
||||
cached-reauth
|
||||
cached-reauth-period 86400
|
||||
reauth
|
||||
enable
|
||||
aaa authentication port-access mac-auth
|
||||
cached-reauth
|
||||
cached-reauth-period 86400
|
||||
quiet-period 30
|
||||
reauth
|
||||
enable
|
||||
client track ip enable
|
||||
client track ip update-interval 120
|
||||
power-over-ethernet pre-std-detect
|
||||
@ -1176,30 +1162,16 @@ interface 2/1/24
|
||||
client track ip update-interval 120
|
||||
power-over-ethernet pre-std-detect
|
||||
interface 2/1/25
|
||||
description Auto
|
||||
description Access Control
|
||||
no shutdown
|
||||
no routing
|
||||
vlan access 168
|
||||
vlan access 72
|
||||
spanning-tree bpdu-guard
|
||||
spanning-tree port-type admin-edge
|
||||
spanning-tree root-guard
|
||||
spanning-tree tcn-guard
|
||||
loop-protect
|
||||
port-access onboarding-method concurrent enable
|
||||
aaa authentication port-access allow-cdp-bpdu
|
||||
aaa authentication port-access allow-lldp-bpdu
|
||||
aaa authentication port-access client-limit 3
|
||||
aaa authentication port-access dot1x authenticator
|
||||
cached-reauth
|
||||
cached-reauth-period 86400
|
||||
reauth
|
||||
enable
|
||||
aaa authentication port-access mac-auth
|
||||
cached-reauth
|
||||
cached-reauth-period 86400
|
||||
quiet-period 30
|
||||
reauth
|
||||
enable
|
||||
client track ip enable
|
||||
client track ip update-interval 120
|
||||
power-over-ethernet pre-std-detect
|
||||
|
||||
@ -2203,16 +2203,30 @@ interface 2/1/25
|
||||
client track ip update-interval 120
|
||||
power-over-ethernet pre-std-detect
|
||||
interface 2/1/26
|
||||
description -TO CAREHAWK-
|
||||
description Auto
|
||||
no shutdown
|
||||
no routing
|
||||
vlan access 30
|
||||
vlan access 168
|
||||
spanning-tree bpdu-guard
|
||||
spanning-tree port-type admin-edge
|
||||
spanning-tree root-guard
|
||||
spanning-tree tcn-guard
|
||||
loop-protect
|
||||
port-access onboarding-method concurrent enable
|
||||
aaa authentication port-access allow-cdp-bpdu
|
||||
aaa authentication port-access allow-lldp-bpdu
|
||||
aaa authentication port-access client-limit 3
|
||||
aaa authentication port-access dot1x authenticator
|
||||
cached-reauth
|
||||
cached-reauth-period 86400
|
||||
reauth
|
||||
enable
|
||||
aaa authentication port-access mac-auth
|
||||
cached-reauth
|
||||
cached-reauth-period 86400
|
||||
quiet-period 30
|
||||
reauth
|
||||
enable
|
||||
client track ip enable
|
||||
client track ip update-interval 120
|
||||
power-over-ethernet pre-std-detect
|
||||
|
||||
@ -7,7 +7,7 @@ clock timezone America/New_York -04 0
|
||||
!
|
||||
conductorip 10.1.35.33 ipsec ****** interface vlan 35
|
||||
location "Building1.floor1"
|
||||
controller config 669
|
||||
controller config 659
|
||||
crypto-local pki ServerCert scsd_full_wc3 StarCert-Ex03_26_fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_full_wc_2025 Star-Exp042025-fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_full_wc_2026 StarCert-Ex03_26_fullchain.pfx
|
||||
@ -1855,8 +1855,6 @@ aaa authentication dot1x "Intune_dot1_aut"
|
||||
!
|
||||
aaa authentication dot1x "LemoyneTest_dot1_aut"
|
||||
!
|
||||
aaa authentication dot1x "SCSD_IoT_dot1_aut"
|
||||
!
|
||||
aaa authentication dot1x "SCSD_Secure_dot1_aut"
|
||||
!
|
||||
aaa authentication via global-config
|
||||
@ -1939,10 +1937,6 @@ aaa profile "LemoyneTest_aaa_prof"
|
||||
!
|
||||
aaa profile "NoAuthAAAProfile"
|
||||
!
|
||||
aaa profile "SCSD_IoT_aaa_prof"
|
||||
initial-role "authenticated"
|
||||
authentication-dot1x "SCSD_IoT_dot1_aut"
|
||||
!
|
||||
aaa profile "SCSD_Secure_aaa_prof"
|
||||
authentication-dot1x "SCSD_Secure_dot1_aut"
|
||||
dot1x-default-role "stateful-dot1x"
|
||||
@ -2555,12 +2549,6 @@ wlan ssid-profile "Intune_ssid_prof"
|
||||
g-tx-rates 12 18 24 36 48 54
|
||||
hide-ssid
|
||||
!
|
||||
wlan ssid-profile "SCSD_IoT_ssid_prof"
|
||||
essid "SCSD_IoT"
|
||||
wpa-passphrase *redacted*
|
||||
opmode wpa2-psk-aes
|
||||
hide-ssid
|
||||
!
|
||||
wlan ssid-profile "SCSD_Secure_ssid_prof"
|
||||
essid "SCSD_Secure"
|
||||
opmode wpa2-aes
|
||||
@ -3339,11 +3327,6 @@ wlan virtual-ap "Intune"
|
||||
forward-mode decrypt-tunnel
|
||||
ssid-profile "Intune_ssid_prof"
|
||||
!
|
||||
wlan virtual-ap "SCSD_IoT"
|
||||
aaa-profile "SCSD_IoT_aaa_prof"
|
||||
vlan 307
|
||||
ssid-profile "SCSD_IoT_ssid_prof"
|
||||
!
|
||||
wlan virtual-ap "SCSD_Secure"
|
||||
aaa-profile "SCSD_Secure_aaa_prof"
|
||||
vlan 100
|
||||
@ -3492,10 +3475,6 @@ ap-group "APG07Corcoran"
|
||||
virtual-ap "Intune"
|
||||
virtual-ap "APG07-SCSD_Secure"
|
||||
virtual-ap "APG07-SCSD_Vendor"
|
||||
virtual-ap "SCSD_IoT"
|
||||
!
|
||||
ap-group "APG07Corcoran-IoT"
|
||||
virtual-ap "SCSD_IoT"
|
||||
!
|
||||
ap-group "APG07Corcoran-Outdoors"
|
||||
virtual-ap "APG07-SCSD_Secure-Outdoors"
|
||||
|
||||
@ -7,7 +7,7 @@ clock timezone America/New_York -04 0
|
||||
!
|
||||
conductorip 10.1.35.33 ipsec ****** interface vlan 35
|
||||
location "Building1.floor1"
|
||||
controller config 669
|
||||
controller config 659
|
||||
crypto-local pki ServerCert scsd_full_wc3 StarCert-Ex03_26_fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_full_wc_2025 Star-Exp042025-fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_full_wc_2026 StarCert-Ex03_26_fullchain.pfx
|
||||
@ -1858,8 +1858,6 @@ aaa authentication dot1x "Intune_dot1_aut"
|
||||
!
|
||||
aaa authentication dot1x "LemoyneTest_dot1_aut"
|
||||
!
|
||||
aaa authentication dot1x "SCSD_IoT_dot1_aut"
|
||||
!
|
||||
aaa authentication dot1x "SCSD_Secure_dot1_aut"
|
||||
!
|
||||
aaa authentication via global-config
|
||||
@ -1942,10 +1940,6 @@ aaa profile "LemoyneTest_aaa_prof"
|
||||
!
|
||||
aaa profile "NoAuthAAAProfile"
|
||||
!
|
||||
aaa profile "SCSD_IoT_aaa_prof"
|
||||
initial-role "authenticated"
|
||||
authentication-dot1x "SCSD_IoT_dot1_aut"
|
||||
!
|
||||
aaa profile "SCSD_Secure_aaa_prof"
|
||||
authentication-dot1x "SCSD_Secure_dot1_aut"
|
||||
dot1x-default-role "stateful-dot1x"
|
||||
@ -2519,12 +2513,6 @@ wlan ssid-profile "Intune_ssid_prof"
|
||||
g-tx-rates 12 18 24 36 48 54
|
||||
hide-ssid
|
||||
!
|
||||
wlan ssid-profile "SCSD_IoT_ssid_prof"
|
||||
essid "SCSD_IoT"
|
||||
wpa-passphrase *redacted*
|
||||
opmode wpa2-psk-aes
|
||||
hide-ssid
|
||||
!
|
||||
wlan ssid-profile "SCSD_Secure_ssid_prof"
|
||||
essid "SCSD_Secure"
|
||||
opmode wpa2-aes
|
||||
@ -3303,11 +3291,6 @@ wlan virtual-ap "Intune"
|
||||
forward-mode decrypt-tunnel
|
||||
ssid-profile "Intune_ssid_prof"
|
||||
!
|
||||
wlan virtual-ap "SCSD_IoT"
|
||||
aaa-profile "SCSD_IoT_aaa_prof"
|
||||
vlan 307
|
||||
ssid-profile "SCSD_IoT_ssid_prof"
|
||||
!
|
||||
wlan virtual-ap "SCSD_Secure"
|
||||
aaa-profile "SCSD_Secure_aaa_prof"
|
||||
vlan 100
|
||||
@ -3456,10 +3439,6 @@ ap-group "APG07Corcoran"
|
||||
virtual-ap "Intune"
|
||||
virtual-ap "APG07-SCSD_Secure"
|
||||
virtual-ap "APG07-SCSD_Vendor"
|
||||
virtual-ap "SCSD_IoT"
|
||||
!
|
||||
ap-group "APG07Corcoran-IoT"
|
||||
virtual-ap "SCSD_IoT"
|
||||
!
|
||||
ap-group "APG07Corcoran-Outdoors"
|
||||
virtual-ap "APG07-SCSD_Secure-Outdoors"
|
||||
|
||||
@ -7,7 +7,7 @@ clock timezone America/New_York -04 0
|
||||
!
|
||||
conductorip 10.1.35.33 ipsec ****** interface vlan 35
|
||||
location "Building1.floor1"
|
||||
controller config 669
|
||||
controller config 659
|
||||
crypto-local pki ServerCert scsd_full_wc3 StarCert-Ex03_26_fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_full_wc_2025 Star-Exp042025-fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_full_wc_2026 StarCert-Ex03_26_fullchain.pfx
|
||||
@ -1852,8 +1852,6 @@ aaa authentication dot1x "Intune_dot1_aut"
|
||||
!
|
||||
aaa authentication dot1x "LemoyneTest_dot1_aut"
|
||||
!
|
||||
aaa authentication dot1x "SCSD_IoT_dot1_aut"
|
||||
!
|
||||
aaa authentication dot1x "SCSD_Secure_dot1_aut"
|
||||
!
|
||||
aaa authentication via global-config
|
||||
@ -1936,10 +1934,6 @@ aaa profile "LemoyneTest_aaa_prof"
|
||||
!
|
||||
aaa profile "NoAuthAAAProfile"
|
||||
!
|
||||
aaa profile "SCSD_IoT_aaa_prof"
|
||||
initial-role "authenticated"
|
||||
authentication-dot1x "SCSD_IoT_dot1_aut"
|
||||
!
|
||||
aaa profile "SCSD_Secure_aaa_prof"
|
||||
authentication-dot1x "SCSD_Secure_dot1_aut"
|
||||
dot1x-default-role "stateful-dot1x"
|
||||
@ -2511,12 +2505,6 @@ wlan ssid-profile "Intune_ssid_prof"
|
||||
g-tx-rates 12 18 24 36 48 54
|
||||
hide-ssid
|
||||
!
|
||||
wlan ssid-profile "SCSD_IoT_ssid_prof"
|
||||
essid "SCSD_IoT"
|
||||
wpa-passphrase *redacted*
|
||||
opmode wpa2-psk-aes
|
||||
hide-ssid
|
||||
!
|
||||
wlan ssid-profile "SCSD_Secure_ssid_prof"
|
||||
essid "SCSD_Secure"
|
||||
opmode wpa2-aes
|
||||
@ -3295,11 +3283,6 @@ wlan virtual-ap "Intune"
|
||||
forward-mode decrypt-tunnel
|
||||
ssid-profile "Intune_ssid_prof"
|
||||
!
|
||||
wlan virtual-ap "SCSD_IoT"
|
||||
aaa-profile "SCSD_IoT_aaa_prof"
|
||||
vlan 307
|
||||
ssid-profile "SCSD_IoT_ssid_prof"
|
||||
!
|
||||
wlan virtual-ap "SCSD_Secure"
|
||||
aaa-profile "SCSD_Secure_aaa_prof"
|
||||
vlan 100
|
||||
@ -3448,10 +3431,6 @@ ap-group "APG07Corcoran"
|
||||
virtual-ap "Intune"
|
||||
virtual-ap "APG07-SCSD_Secure"
|
||||
virtual-ap "APG07-SCSD_Vendor"
|
||||
virtual-ap "SCSD_IoT"
|
||||
!
|
||||
ap-group "APG07Corcoran-IoT"
|
||||
virtual-ap "SCSD_IoT"
|
||||
!
|
||||
ap-group "APG07Corcoran-Outdoors"
|
||||
virtual-ap "APG07-SCSD_Secure-Outdoors"
|
||||
|
||||
@ -6,7 +6,7 @@ hostname "NOC-ARUBA-MM-2"
|
||||
clock timezone America/New_York -04 0
|
||||
!
|
||||
location "Building1.floor1"
|
||||
controller config 669
|
||||
controller config 659
|
||||
crypto-local pki ServerCert scsd_wc2_full_2025 Star-Exp042025-fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_wc2_full_2026 StarCert-Ex03_26_fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_wildcard_2025 StartCert-Expire042025.pfx
|
||||
|
||||
@ -6,7 +6,7 @@ hostname "noc-aruba-mm"
|
||||
clock timezone America/New_York -04 0
|
||||
!
|
||||
location "Building1.floor1"
|
||||
controller config 669
|
||||
controller config 659
|
||||
crypto-local pki ServerCert scsd_wc2_full_2025 Star-Exp042025-fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_wc2_full_2026 StarCert-Ex03_26_fullchain.pfx
|
||||
crypto-local pki ServerCert scsd_wildcard_2025 StartCert-Expire042025.pfx
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user