ct/ct-noc-a8360-4-b.cfg Tue Jan 27 07:42:56 PM EST 2026

ct/ct-noc-a8360-2-b.cfg Tue Jan 27 07:42:56 PM EST 2026
ct/ct-noc-a8360-3-b.cfg Tue Jan 27 07:42:56 PM EST 2026
2026-01-27 19:42:58 -05:00 · 2026-01-27 19:42:58 -05:00 · 2026-01-27 19:42:58 -05:00 · 2026-01-27 19:42:58 -05:00 · 2026-01-27 19:42:58 -05:00 · 2026-01-27 19:42:58 -05:00
34 changed files with 917 additions and 494 deletions
--- a/configs/ct/ct-noc-a8325-a.cfg
+++ b/configs/ct/ct-noc-a8325-a.cfg
@ -291,6 +291,9 @@ vlan 366
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -429,6 +432,9 @@ vlan 466
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -544,7 +550,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5,6,10,12,18,20,21,30,35,40,45,48,50,70,72,99,101,107,140,150,151,164,168,172,175-179,200,203,230,252,254,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366,367,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466,467,486,500-509,511-519,525,699,811-813,995,999,1180,1202,1251,1254,1256,1261,1262,1811-1814,3000
+spanning-tree vlan 3,5,6,10,12,18,20,21,30,35,40,45,48,50,70,72,99,101,107,140,150,151,164,168,172,175-179,200,203,230,252,254,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466-468,486,500-509,511-519,525,699,811-813,995,999,1180,1202,1251,1254,1256,1261,1262,1811-1814,3000
 spanning-tree vlan 3 priority 4
 spanning-tree vlan 5 priority 4
 spanning-tree vlan 6 priority 4
@ -625,6 +631,7 @@ spanning-tree vlan 357 priority 4
 spanning-tree vlan 360 priority 4
 spanning-tree vlan 366 priority 4
 spanning-tree vlan 367 priority 4
+spanning-tree vlan 368 priority 4
 spanning-tree vlan 386 priority 4
 spanning-tree vlan 402 priority 4
 spanning-tree vlan 403 priority 4
@ -671,6 +678,7 @@ spanning-tree vlan 457 priority 4
 spanning-tree vlan 460 priority 4
 spanning-tree vlan 466 priority 4
 spanning-tree vlan 467 priority 4
+spanning-tree vlan 468 priority 4
 spanning-tree vlan 486 priority 4
 spanning-tree vlan 500 priority 4
 spanning-tree vlan 501 priority 4
@ -1743,6 +1751,17 @@ interface vlan 367
    ip helper-address 10.1.40.117
    ip helper-address 10.21.48.20
    ip ospf 1 area 0.0.0.0
+interface vlan 368
+    description CNY Works Secure WLAN
+    ip address 10.68.112.2/20
+    active-gateway ip mac 02:00:00:00:00:01
+    active-gateway ip 10.68.112.1
+    ip helper-address 10.1.40.20
+    ip helper-address 10.1.40.115
+    ip helper-address 10.1.40.116
+    ip helper-address 10.1.40.117
+    ip helper-address 10.21.48.20
+    ip ospf 1 area 0.0.0.0
 interface vlan 386
    description StLucy Secure WLAN
    ip address 10.86.112.2/20
@ -2249,6 +2268,17 @@ interface vlan 467
    ip helper-address 10.1.40.117
    ip helper-address 10.21.48.20
    ip ospf 1 area 0.0.0.0
+interface vlan 468
+    description CNY Works Vendor WLAN
+    ip address 10.68.128.2/20
+    active-gateway ip mac 02:00:00:00:00:01
+    active-gateway ip 10.68.128.1
+    ip helper-address 10.1.40.20
+    ip helper-address 10.1.40.115
+    ip helper-address 10.1.40.116
+    ip helper-address 10.1.40.117
+    ip helper-address 10.21.48.20
+    ip ospf 1 area 0.0.0.0
 interface vlan 486
    description StLucy Vendor WLAN
    ip address 10.86.128.2/20
--- a/configs/ct/ct-noc-a8325-b.cfg
+++ b/configs/ct/ct-noc-a8325-b.cfg
@ -290,6 +290,9 @@ vlan 366
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -428,6 +431,9 @@ vlan 466
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -545,7 +551,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5,6,10,12,18,20,21,30,35,40,45,48,50,70,72,99,101,107,140,150,151,164,168,172,175-179,200,203,230,252,254,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366,367,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466,467,486,500-509,511-519,525,699,811-814,995,999,1180,1202,1251,1254,1256,1261,1262,1811-1814,3000
+spanning-tree vlan 3,5,6,10,12,18,20,21,30,35,40,45,48,50,70,72,99,101,107,140,150,151,164,168,172,175-179,200,203,230,252,254,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466-468,486,500-509,511-519,525,699,811-814,995,999,1180,1202,1251,1254,1256,1261,1262,1811-1814,3000
 spanning-tree vlan 3 priority 4
 spanning-tree vlan 5 priority 4
 spanning-tree vlan 6 priority 4
@ -626,6 +632,7 @@ spanning-tree vlan 357 priority 4
 spanning-tree vlan 360 priority 4
 spanning-tree vlan 366 priority 4
 spanning-tree vlan 367 priority 4
+spanning-tree vlan 368 priority 4
 spanning-tree vlan 386 priority 4
 spanning-tree vlan 402 priority 4
 spanning-tree vlan 403 priority 4
@ -672,6 +679,7 @@ spanning-tree vlan 457 priority 4
 spanning-tree vlan 460 priority 4
 spanning-tree vlan 466 priority 4
 spanning-tree vlan 467 priority 4
+spanning-tree vlan 468 priority 4
 spanning-tree vlan 486 priority 4
 spanning-tree vlan 500 priority 4
 spanning-tree vlan 501 priority 4
@ -1723,6 +1731,17 @@ interface vlan 367
    ip helper-address 10.1.40.117
    ip helper-address 10.21.48.20
    ip ospf 1 area 0.0.0.0
+interface vlan 368
+    description CNY Works Secure WLAN
+    ip address 10.68.112.3/20
+    active-gateway ip mac 02:00:00:00:00:01
+    active-gateway ip 10.68.112.1
+    ip helper-address 10.1.40.20
+    ip helper-address 10.1.40.115
+    ip helper-address 10.1.40.116
+    ip helper-address 10.1.40.117
+    ip helper-address 10.21.48.20
+    ip ospf 1 area 0.0.0.0
 interface vlan 386
    description StLucy Secure WLAN
    ip address 10.86.112.3/20
@ -2229,6 +2248,17 @@ interface vlan 467
    ip helper-address 10.1.40.117
    ip helper-address 10.21.48.20
    ip ospf 1 area 0.0.0.0
+interface vlan 468
+    description CNY Works Vendor WLAN
+    ip address 10.68.128.3/20
+    active-gateway ip mac 02:00:00:00:00:01
+    active-gateway ip 10.68.128.1
+    ip helper-address 10.1.40.20
+    ip helper-address 10.1.40.115
+    ip helper-address 10.1.40.116
+    ip helper-address 10.1.40.117
+    ip helper-address 10.21.48.20
+    ip ospf 1 area 0.0.0.0
 interface vlan 486
    description StLucy Vendor WLAN
    ip address 10.86.128.3/20
--- a/configs/ct/ct-noc-a8360-1-a.cfg
+++ b/configs/ct/ct-noc-a8360-1-a.cfg
@ -342,6 +342,9 @@ vlan 366
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -480,6 +483,9 @@ vlan 466
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -562,7 +568,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366,367,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811-1813,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466-468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811-1813,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -657,6 +663,7 @@ spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 366 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -703,6 +710,7 @@ spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 466 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
@ -775,7 +783,7 @@ interface lag 28 multi-chassis
    no shutdown
    no routing
    vlan trunk native 699
-    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-367,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-467,486
+    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-468,486
    lacp mode active
 interface lag 181 multi-chassis
    description FG-A inside
@ -922,6 +930,7 @@ ip route 10.0.0.0/8 nullroute vrf outside
 ip route 10.11.0.0/20 10.251.1.5 vrf outside
 ip route 10.51.62.32/28 10.251.1.5 vrf outside
 ip route 10.67.0.0/16 10.251.1.5 vrf outside
+ip route 10.68.0.0/16 10.251.1.5 vrf outside
 ip route 10.79.0.0/16 10.251.1.5 vrf outside
 ip route 10.107.49.0/24 10.251.1.5 vrf outside
 ip route 10.107.50.0/24 10.251.1.5 vrf outside
@ -948,6 +957,7 @@ ip route 172.30.45.84/32 10.251.1.5 vrf outside
 ip route 172.30.45.107/32 10.251.1.5 vrf outside
 ip route 172.30.45.109/32 10.251.1.5 vrf outside
 ip route 192.168.0.0/16 nullroute vrf outside
+ip route 192.168.68.0/24 10.251.1.5 vrf outside
 ip route 192.168.79.0/24 10.251.1.5 vrf outside
 ip route 192.168.146.0/24 10.251.1.5 vrf outside
 ip route 192.168.167.0/24 10.251.1.5 vrf outside
--- a/configs/ct/ct-noc-a8360-2-a.cfg
+++ b/configs/ct/ct-noc-a8360-2-a.cfg
@ -335,6 +335,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -464,6 +467,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -543,7 +549,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18-21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,168,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18-21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,168,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -637,6 +643,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -680,6 +687,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-2-b.cfg
+++ b/configs/ct/ct-noc-a8360-2-b.cfg
@ -335,6 +335,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -464,6 +467,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -543,7 +549,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18-21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,168,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18-21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,168,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -637,6 +643,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -680,6 +687,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-3-a.cfg
+++ b/configs/ct/ct-noc-a8360-3-a.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -537,7 +543,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -629,6 +635,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -672,6 +679,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-3-b.cfg
+++ b/configs/ct/ct-noc-a8360-3-b.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -537,7 +543,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -629,6 +635,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -672,6 +679,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-4-a.cfg
+++ b/configs/ct/ct-noc-a8360-4-a.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -559,7 +565,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,511-519,525,699,811,812,995,999,1180,1202,1251,1254,1256,1299,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,511-519,525,699,811,812,995,999,1180,1202,1251,1254,1256,1299,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -651,6 +657,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -694,6 +701,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-4-b.cfg
+++ b/configs/ct/ct-noc-a8360-4-b.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -559,7 +565,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,511-519,525,699,811,812,995,999,1180,1202,1251,1254,1256,1299,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,511-519,525,699,811,812,995,999,1180,1202,1251,1254,1256,1299,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -651,6 +657,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -694,6 +701,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-5-a.cfg
+++ b/configs/ct/ct-noc-a8360-5-a.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -541,7 +547,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1261,1262,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1261,1262,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -633,6 +639,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -676,6 +683,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-5-b.cfg
+++ b/configs/ct/ct-noc-a8360-5-b.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -541,7 +547,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1261,1262,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1261,1262,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -633,6 +639,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -676,6 +683,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-6-a.cfg
+++ b/configs/ct/ct-noc-a8360-6-a.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -537,7 +543,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -629,6 +635,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -672,6 +679,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-6-b.cfg
+++ b/configs/ct/ct-noc-a8360-6-b.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -537,7 +543,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -629,6 +635,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -672,6 +679,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-7-a.cfg
+++ b/configs/ct/ct-noc-a8360-7-a.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -537,7 +543,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -629,6 +635,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -672,6 +679,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-7-b.cfg
+++ b/configs/ct/ct-noc-a8360-7-b.cfg
@ -329,6 +329,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -458,6 +461,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -537,7 +543,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,327-330,333,334,336,337,340-342,344,345,347-349,351,353-357,360,367,368,386,402-404,406-410,413-416,420-425,427-430,433,434,436,437,440-442,444,445,447-449,451,453-457,460,467,468,486,500-509,525,699,811,812,995,999,1180,1202,1251,1254,1256,1811,1812,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -629,6 +635,7 @@ spanning-tree vlan 356 priority 12
 spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -672,6 +679,7 @@ spanning-tree vlan 456 priority 12
 spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-8-a.cfg
+++ b/configs/ct/ct-noc-a8360-8-a.cfg
@ -323,6 +323,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -443,6 +446,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -494,7 +500,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,486,500-509,525,699,995,999,1180,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,368,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,468,486,500-509,525,699,995,999,1180,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -583,6 +589,7 @@ spanning-tree vlan 355 priority 12
 spanning-tree vlan 356 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -623,6 +630,7 @@ spanning-tree vlan 455 priority 12
 spanning-tree vlan 456 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/ct/ct-noc-a8360-8-b.cfg
+++ b/configs/ct/ct-noc-a8360-8-b.cfg
@ -321,6 +321,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -441,6 +444,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -492,7 +498,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,486,500-509,525,699,995,999,1180,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,368,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,468,486,500-509,525,699,995,999,1180,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -581,6 +587,7 @@ spanning-tree vlan 355 priority 12
 spanning-tree vlan 356 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -621,6 +628,7 @@ spanning-tree vlan 455 priority 12
 spanning-tree vlan 456 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/fortigate/fortigate.conf
+++ b/configs/fortigate/fortigate.conf
--- a/configs/fortigate/vdom_scsd/firewall.cfg
+++ b/configs/fortigate/vdom_scsd/firewall.cfg
@ -5892,7 +5892,6 @@ config firewall policy
        set logtraffic all
    next
    edit 124
-        set status disable
        set name "CNYWorks>SCSD"
        set srcintf "CNYWorks"
        set dstintf "inside"
@ -6032,7 +6031,6 @@ config firewall policy
        set comments " (Copy of RAP>Inside>DCs) (Reverse of RAP>Inside>DCs)"
    next
    edit 123
-        set status disable
        set name "Servers>CNYWorks"
        set srcintf "inside"
        set dstintf "CNYWorks"
@ -6083,7 +6081,6 @@ config firewall policy
        set poolname "ippool-198.36.23.253"
    next
    edit 125
-        set status disable
        set name "CNYWorks Internet Access"
        set srcintf "CNYWorks" "inside"
        set dstintf "outside"
@ -6447,4 +6444,8 @@ config firewall on-demand-sniffer
        set hosts "24.105.188.54"
        set protocols 17
    next
+    edit "RAP_scsd"
+        set interface "RAP"
+        set max-packet-count 10000
+    next
 end
--- a/configs/sh/sh-noc-a8325-a.cfg
+++ b/configs/sh/sh-noc-a8325-a.cfg
@ -295,6 +295,9 @@ vlan 366
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -433,6 +436,9 @@ vlan 466
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -543,7 +549,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5,6,10,12,18,20,21,30,35,40,45,48,50,70,72,99,107,114,140,150,151,164,168,172,175-179,200,203,230,252,254,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366,367,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466,467,486,500-509,521-529,531-539,699,811,812,995,999,1202,1251,1254,1256,1261,1262,1811,1812,2180,2999,3000
+spanning-tree vlan 3,5,6,10,12,18,20,21,30,35,40,45,48,50,70,72,99,107,114,140,150,151,164,168,172,175-179,200,203,230,252,254,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466-468,486,500-509,521-529,531-539,699,811,812,995,999,1202,1251,1254,1256,1261,1262,1811,1812,2180,2999,3000
 spanning-tree vlan 3 priority 5
 spanning-tree vlan 5 priority 5
 spanning-tree vlan 6 priority 5
@ -624,6 +630,7 @@ spanning-tree vlan 357 priority 5
 spanning-tree vlan 360 priority 5
 spanning-tree vlan 366 priority 5
 spanning-tree vlan 367 priority 5
+spanning-tree vlan 368 priority 5
 spanning-tree vlan 386 priority 5
 spanning-tree vlan 402 priority 5
 spanning-tree vlan 403 priority 5
@ -670,6 +677,7 @@ spanning-tree vlan 457 priority 5
 spanning-tree vlan 460 priority 5
 spanning-tree vlan 466 priority 5
 spanning-tree vlan 467 priority 5
+spanning-tree vlan 468 priority 5
 spanning-tree vlan 486 priority 5
 spanning-tree vlan 500 priority 5
 spanning-tree vlan 501 priority 5
@ -1611,6 +1619,17 @@ interface vlan 367
    ip helper-address 10.1.40.117
    ip helper-address 10.21.48.20
    ip ospf 1 area 0.0.0.0
+interface vlan 368
+    description CNY Works Secure WLAN
+    ip address 10.68.112.4/20
+    active-gateway ip mac 02:00:00:00:00:01
+    active-gateway ip 10.68.112.1
+    ip helper-address 10.1.40.20
+    ip helper-address 10.1.40.115
+    ip helper-address 10.1.40.116
+    ip helper-address 10.1.40.117
+    ip helper-address 10.21.48.20
+    ip ospf 1 area 0.0.0.0
 interface vlan 386
    description StLucy Secure WLAN
    ip address 10.86.112.4/20
@ -2117,6 +2136,17 @@ interface vlan 467
    ip helper-address 10.1.40.117
    ip helper-address 10.21.48.20
    ip ospf 1 area 0.0.0.0
+interface vlan 468
+    description CNY Works Vendor WLAN
+    ip address 10.68.128.4/20
+    active-gateway ip mac 02:00:00:00:00:01
+    active-gateway ip 10.68.128.1
+    ip helper-address 10.1.40.20
+    ip helper-address 10.1.40.115
+    ip helper-address 10.1.40.116
+    ip helper-address 10.1.40.117
+    ip helper-address 10.21.48.20
+    ip ospf 1 area 0.0.0.0
 interface vlan 486
    description StLucy Vendor WLAN
    ip address 10.86.128.4/20
--- a/configs/sh/sh-noc-a8325-b.cfg
+++ b/configs/sh/sh-noc-a8325-b.cfg
@ -293,6 +293,9 @@ vlan 366
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -431,6 +434,9 @@ vlan 466
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -541,7 +547,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5,6,10,12,18,20,21,30,35,40,45,48,50,70,72,99,107,114,140,150,151,164,168,172,175-179,200,203,230,252,254,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366,367,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466,467,486,500-509,521-529,531-539,699,811,812,995,999,1202,1251,1254,1256,1261,1262,1811,1812,2180,2999,3000
+spanning-tree vlan 3,5,6,10,12,18,20,21,30,35,40,45,48,50,70,72,99,107,114,140,150,151,164,168,172,175-179,200,203,230,252,254,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466-468,486,500-509,521-529,531-539,699,811,812,995,999,1202,1251,1254,1256,1261,1262,1811,1812,2180,2999,3000
 spanning-tree vlan 3 priority 5
 spanning-tree vlan 5 priority 5
 spanning-tree vlan 6 priority 5
@ -622,6 +628,7 @@ spanning-tree vlan 357 priority 5
 spanning-tree vlan 360 priority 5
 spanning-tree vlan 366 priority 5
 spanning-tree vlan 367 priority 5
+spanning-tree vlan 368 priority 5
 spanning-tree vlan 386 priority 5
 spanning-tree vlan 402 priority 5
 spanning-tree vlan 403 priority 5
@ -668,6 +675,7 @@ spanning-tree vlan 457 priority 5
 spanning-tree vlan 460 priority 5
 spanning-tree vlan 466 priority 5
 spanning-tree vlan 467 priority 5
+spanning-tree vlan 468 priority 5
 spanning-tree vlan 486 priority 5
 spanning-tree vlan 500 priority 5
 spanning-tree vlan 501 priority 5
@ -1602,6 +1610,17 @@ interface vlan 367
    ip helper-address 10.1.40.117
    ip helper-address 10.21.48.20
    ip ospf 1 area 0.0.0.0
+interface vlan 368
+    description CNY Works Secure WLAN
+    ip address 10.68.112.5/20
+    active-gateway ip mac 02:00:00:00:00:01
+    active-gateway ip 10.68.112.1
+    ip helper-address 10.1.40.20
+    ip helper-address 10.1.40.115
+    ip helper-address 10.1.40.116
+    ip helper-address 10.1.40.117
+    ip helper-address 10.21.48.20
+    ip ospf 1 area 0.0.0.0
 interface vlan 386
    description StLucy Secure WLAN
    ip address 10.86.112.5/20
@ -2108,6 +2127,17 @@ interface vlan 467
    ip helper-address 10.1.40.117
    ip helper-address 10.21.48.20
    ip ospf 1 area 0.0.0.0
+interface vlan 468
+    description CNY Works Vendor WLAN
+    ip address 10.68.128.5/20
+    active-gateway ip mac 02:00:00:00:00:01
+    active-gateway ip 10.68.128.1
+    ip helper-address 10.1.40.20
+    ip helper-address 10.1.40.115
+    ip helper-address 10.1.40.116
+    ip helper-address 10.1.40.117
+    ip helper-address 10.21.48.20
+    ip ospf 1 area 0.0.0.0
 interface vlan 486
    description StLucy Vendor WLAN
    ip address 10.86.128.5/20
--- a/configs/sh/sh-noc-a8360-1-a.cfg
+++ b/configs/sh/sh-noc-a8360-1-a.cfg
@ -326,6 +326,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -446,6 +449,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -500,7 +506,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,486,500-509,525,699,995,999,2180,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,368,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,468,486,500-509,525,699,995,999,2180,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -589,6 +595,7 @@ spanning-tree vlan 355 priority 12
 spanning-tree vlan 356 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -629,6 +636,7 @@ spanning-tree vlan 455 priority 12
 spanning-tree vlan 456 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/sh/sh-noc-a8360-1-b.cfg
+++ b/configs/sh/sh-noc-a8360-1-b.cfg
@ -326,6 +326,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -446,6 +449,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -500,7 +506,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,486,500-509,525,699,995,999,2180,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,368,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,468,486,500-509,525,699,995,999,2180,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -589,6 +595,7 @@ spanning-tree vlan 355 priority 12
 spanning-tree vlan 356 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -629,6 +636,7 @@ spanning-tree vlan 455 priority 12
 spanning-tree vlan 456 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/sh/sh-noc-a8360-2-a.cfg
+++ b/configs/sh/sh-noc-a8360-2-a.cfg
@ -303,6 +303,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -423,6 +426,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -479,7 +485,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,486,500-509,525,699,811,995,999,1811,2180,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,368,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,468,486,500-509,525,699,811,995,999,1811,2180,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -568,6 +574,7 @@ spanning-tree vlan 355 priority 12
 spanning-tree vlan 356 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -608,6 +615,7 @@ spanning-tree vlan 455 priority 12
 spanning-tree vlan 456 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/sh/sh-noc-a8360-2-b.cfg
+++ b/configs/sh/sh-noc-a8360-2-b.cfg
@ -303,6 +303,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -423,6 +426,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -478,7 +484,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,486,500-509,525,699,811,812,995,999,2180,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,368,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,468,486,500-509,525,699,811,812,995,999,2180,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -567,6 +573,7 @@ spanning-tree vlan 355 priority 12
 spanning-tree vlan 356 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -607,6 +614,7 @@ spanning-tree vlan 455 priority 12
 spanning-tree vlan 456 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/sh/sh-noc-a8360-3-a.cfg
+++ b/configs/sh/sh-noc-a8360-3-a.cfg
@ -331,6 +331,9 @@ vlan 366
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -469,6 +472,9 @@ vlan 466
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -578,7 +584,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18-21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,168,172-179,200,203,230,251,252,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366,367,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466,467,486,500-509,521-529,531-539,637,638,699,811,812,995,999,1202,1251,1254,1256,1811,1812,2180,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18-21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,168,172-179,200,203,230,251,252,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466-468,486,500-509,521-529,531-539,637,638,699,811,812,995,999,1202,1251,1254,1256,1811,1812,2180,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -675,6 +681,7 @@ spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 366 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -721,6 +728,7 @@ spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 466 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
@ -802,14 +810,14 @@ interface lag 20 multi-chassis
    no shutdown
    no routing
    vlan trunk native 699
-    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-367,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-467,486
+    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-468,486
    lacp mode active
 interface lag 21 multi-chassis
    description aruba-wlc-b pc-0
    no shutdown
    no routing
    vlan trunk native 699
-    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-367,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-467,486
+    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-468,486
    lacp mode active
 interface lag 106 multi-chassis
    description to to FG-A Inside
@ -945,6 +953,7 @@ interface 1/1/20
    no shutdown
    lag 20
 interface 1/1/21
+    description aruba-wlc-b
    no shutdown
    lag 21
 interface 1/1/32
@ -1009,6 +1018,7 @@ ip route 10.0.0.0/8 nullroute vrf outside
 ip route 10.11.0.0/20 10.251.1.5 vrf outside
 ip route 10.51.62.32/28 10.251.1.5 vrf outside
 ip route 10.67.0.0/16 10.251.1.5 vrf outside
+ip route 10.68.0.0/16 10.251.1.5 vrf outside
 ip route 10.107.49.0/24 10.251.1.5 vrf outside
 ip route 10.107.50.0/24 10.251.1.5 vrf outside
 ip route 10.107.100.0/24 10.251.1.5 vrf outside
@ -1035,6 +1045,7 @@ ip route 172.30.45.107/32 10.251.1.5 vrf outside
 ip route 172.30.45.109/32 10.251.1.5 vrf outside
 ip route 192.168.0.0/16 nullroute vrf outside
 ip route 192.168.67.0/24 10.251.1.5 vrf outside
+ip route 192.168.68.0/24 10.251.1.5 vrf outside
 ip route 192.168.146.0/24 10.251.1.5 vrf outside
 ip route 192.168.167.0/24 10.251.1.5 vrf outside
 ip dns domain-name scsd.ad
--- a/configs/sh/sh-noc-a8360-3-b.cfg
+++ b/configs/sh/sh-noc-a8360-3-b.cfg
@ -331,6 +331,9 @@ vlan 366
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -469,6 +472,9 @@ vlan 466
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -578,7 +584,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18-21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,168,172-179,200,203,230,251,252,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366,367,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466,467,486,500-509,521-529,531-539,637,638,699,811,812,995,999,1202,1251,1254,1256,1811,1812,2180,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18-21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,168,172-179,200,203,230,251,252,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466-468,486,500-509,521-529,531-539,637,638,699,811,812,995,999,1202,1251,1254,1256,1811,1812,2180,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -675,6 +681,7 @@ spanning-tree vlan 357 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 366 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -721,6 +728,7 @@ spanning-tree vlan 457 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 466 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
@ -802,14 +810,14 @@ interface lag 20 multi-chassis
    no shutdown
    no routing
    vlan trunk native 699
-    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-367,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-467,486
+    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-468,486
    lacp mode active
 interface lag 21 multi-chassis
    description aruba-wlc-b pc-0
    no shutdown
    no routing
    vlan trunk native 699
-    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-367,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-467,486
+    vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-468,486
    lacp mode active
 interface lag 106 multi-chassis
    description to to FG-A Inside
@ -997,6 +1005,7 @@ ip route 10.0.0.0/8 nullroute vrf outside
 ip route 10.11.0.0/20 10.251.1.5 vrf outside
 ip route 10.51.62.32/28 10.251.1.5 vrf outside
 ip route 10.67.0.0/16 10.251.1.5 vrf outside
+ip route 10.68.0.0/16 10.251.1.5 vrf outside
 ip route 10.79.0.0/16 10.251.1.5 vrf outside
 ip route 10.107.49.0/24 10.251.1.5 vrf outside
 ip route 10.107.50.0/24 10.251.1.5 vrf outside
@ -1023,6 +1032,7 @@ ip route 172.30.45.84/32 10.251.1.5 vrf outside
 ip route 172.30.45.107/32 10.251.1.5 vrf outside
 ip route 172.30.45.109/32 10.251.1.5 vrf outside
 ip route 192.168.0.0/16 nullroute vrf outside
+ip route 192.168.68.0/24 10.251.1.5 vrf outside
 ip route 192.168.79.0/24 10.251.1.5 vrf outside
 ip route 192.168.146.0/24 10.251.1.5 vrf outside
 ip route 192.168.167.0/24 10.251.1.5 vrf outside
--- a/configs/sh/sh-noc-a8360-4-a.cfg
+++ b/configs/sh/sh-noc-a8360-4-a.cfg
@ -327,6 +327,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -447,6 +450,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -505,7 +511,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,486,500-509,525,699,995,999,1261,1262,2180,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,368,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,468,486,500-509,525,699,995,999,1261,1262,2180,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -594,6 +600,7 @@ spanning-tree vlan 355 priority 12
 spanning-tree vlan 356 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -634,6 +641,7 @@ spanning-tree vlan 455 priority 12
 spanning-tree vlan 456 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/sh/sh-noc-a8360-4-b.cfg
+++ b/configs/sh/sh-noc-a8360-4-b.cfg
@ -326,6 +326,9 @@ vlan 360
 vlan 367
    name RAPCenterSecureWLAN
    description RAP Center Secure WLAN
+vlan 368
+    name CNYWorksSecureWLAN
+    description CNY Works Secure WLAN
 vlan 386
    name StLucySecureWLAN
    description StLucy Secure WLAN
@ -446,6 +449,9 @@ vlan 460
 vlan 467
    name RAPCenterVendorWLAN
    description RAP Center Vendor WLAN
+vlan 468
+    name CNYWorksVendorWLAN
+    description CNY Works Vendor WLAN
 vlan 486
    name StLucyVendorWLAN
    description StLucy Vendor WLAN
@ -504,7 +510,7 @@ spanning-tree
 spanning-tree priority 2
 spanning-tree trap topology-change instance 0
 spanning-tree ignore-pvid-inconsistency
-spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,486,500-509,525,699,995,999,1261,1262,2180,2999,3000
+spanning-tree vlan 3,5-7,9-12,16,18,19,21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,172-179,200,203,230,251,252,302-304,306-310,313-316,320-325,328-330,333,334,336,337,340-342,344,345,348,349,351,353-356,360,367,368,386,402-404,406-410,413-416,420-425,428-430,433,434,436,437,440-442,444,445,448,449,451,453-456,460,467,468,486,500-509,525,699,995,999,1261,1262,2180,2999,3000
 spanning-tree vlan 3 priority 12
 spanning-tree vlan 5 priority 12
 spanning-tree vlan 6 priority 12
@ -593,6 +599,7 @@ spanning-tree vlan 355 priority 12
 spanning-tree vlan 356 priority 12
 spanning-tree vlan 360 priority 12
 spanning-tree vlan 367 priority 12
+spanning-tree vlan 368 priority 12
 spanning-tree vlan 386 priority 12
 spanning-tree vlan 402 priority 12
 spanning-tree vlan 403 priority 12
@ -633,6 +640,7 @@ spanning-tree vlan 455 priority 12
 spanning-tree vlan 456 priority 12
 spanning-tree vlan 460 priority 12
 spanning-tree vlan 467 priority 12
+spanning-tree vlan 468 priority 12
 spanning-tree vlan 486 priority 12
 spanning-tree vlan 500 priority 12
 spanning-tree vlan 501 priority 12
--- a/configs/wlc/wlc-a.cfg
+++ b/configs/wlc/wlc-a.cfg
@ -7,7 +7,7 @@ clock timezone America/New_York -05 0
 !
 conductorip 10.1.35.33 ipsec ****** interface vlan 35 
 location "Building1.floor1" 
-controller config 717
+controller config 721
 crypto-local pki ServerCert scsd_full_wc3 StarCert-Ex03_26_fullchain.pfx 
 crypto-local pki ServerCert scsd_full_wc_2026 StarCert-Ex03_26_fullchain.pfx 
 crypto-local pki ServerCert scsd_wc3_2026 StarCert-Expire03202026.pfx 
@ -852,6 +852,8 @@ vlan 366
 !
 vlan 367 
 !
+vlan 368 
+!
 vlan 386 
 !
 vlan 402 
@ -944,6 +946,8 @@ vlan 466
 !
 vlan 467 
 !
+vlan 468 
+!
 vlan 486 
 !
 vlan 1024 
@ -1045,6 +1049,8 @@ vlan-name Secure-66-ENL
 vlan Secure-66-ENL 366 
 vlan-name Secure-67-RAPCenter 
 vlan Secure-67-RAPCenter 367 
+vlan-name Secure-68-CNYWorks 
+vlan Secure-68-CNYWorks 368 
 vlan-name Secure-86-StLucy 
 vlan Secure-86-StLucy 386 
 vlan-name Vendor-02-ITC 
@ -1137,6 +1143,8 @@ vlan-name Vendor-66-ENL
 vlan Vendor-66-ENL 466 
 vlan-name Vendor-67-RAPCenter 
 vlan Vendor-67-RAPCenter 467 
+vlan-name Vendor-68-CNYWorks 
+vlan Vendor-68-CNYWorks 468 
 vlan-name Vendor-86-StLucy 
 vlan Vendor-86-StLucy 486 
 vlan-name VLAN10 
@ -1640,6 +1648,14 @@ interface vlan 467
    ip address 10.67.128.7 255.255.240.0 
 !

+interface vlan 368 
+    ip address 10.68.112.4 255.255.240.0 
+!
+
+interface vlan 468 
+    ip address 10.68.128.4 255.255.240.0 
+!
+
 !
 uplink health-check 
 !
@ -3416,6 +3432,20 @@ wlan virtual-ap "APG67-SCSD_Vendor"
    ssid-profile "SCSD_Vendor_ssid_prof" 
    band-steering 
 !
+wlan virtual-ap "APG68-SCSD_Secure" 
+    aaa-profile "SCSD_Secure_aaa_prof" 
+    vlan 368 
+    forward-mode decrypt-tunnel 
+    ssid-profile "SCSD_Secure_ssid_prof" 
+    band-steering 
+!
+wlan virtual-ap "APG68-SCSD_Vendor" 
+    aaa-profile "SCSD_Vendor_aaa_prof" 
+    vlan 468 
+    forward-mode decrypt-tunnel 
+    ssid-profile "SCSD_Vendor_ssid_prof" 
+    band-steering 
+!
 wlan virtual-ap "APG86-SCSD_Secure" 
    aaa-profile "SCSD_Secure_aaa_prof" 
    vlan 386 
@ -3846,6 +3876,11 @@ ap-group "APG67RAPCenter"
    virtual-ap "APG67-SCSD_Secure" 
    virtual-ap "APG67-SCSD_Vendor" 
 !
+ap-group "APG68CNYWorks" 
+    virtual-ap "Intune" 
+    virtual-ap "APG68-SCSD_Secure" 
+    virtual-ap "APG68-SCSD_Vendor" 
+!
 ap-group "APG86StLucy" 
    virtual-ap "Intune" 
    virtual-ap "APG86-SCSD_Secure" 
--- a/configs/wlc/wlc-b.cfg
+++ b/configs/wlc/wlc-b.cfg
@ -7,7 +7,7 @@ clock timezone America/New_York -05 0
 !
 conductorip 10.1.35.33 ipsec ****** interface vlan 35 
 location "Building1.floor1" 
-controller config 717
+controller config 721
 crypto-local pki ServerCert scsd_full_wc3 StarCert-Ex03_26_fullchain.pfx 
 crypto-local pki ServerCert scsd_full_wc_2026 StarCert-Ex03_26_fullchain.pfx 
 crypto-local pki ServerCert scsd_wc3_2026 StarCert-Expire03202026.pfx 
@ -852,6 +852,8 @@ vlan 366
 !
 vlan 367 
 !
+vlan 368 
+!
 vlan 386 
 !
 vlan 402 
@ -944,6 +946,8 @@ vlan 466
 !
 vlan 467 
 !
+vlan 468 
+!
 vlan 486 
 !
 vlan 1024 
@ -1045,6 +1049,8 @@ vlan-name Secure-66-ENL
 vlan Secure-66-ENL 366 
 vlan-name Secure-67-RAPCenter 
 vlan Secure-67-RAPCenter 367 
+vlan-name Secure-68-CNYWorks 
+vlan Secure-68-CNYWorks 368 
 vlan-name Secure-86-StLucy 
 vlan Secure-86-StLucy 386 
 vlan-name Vendor-02-ITC 
@ -1137,6 +1143,8 @@ vlan-name Vendor-66-ENL
 vlan Vendor-66-ENL 466 
 vlan-name Vendor-67-RAPCenter 
 vlan Vendor-67-RAPCenter 467 
+vlan-name Vendor-68-CNYWorks 
+vlan Vendor-68-CNYWorks 468 
 vlan-name Vendor-86-StLucy 
 vlan Vendor-86-StLucy 486 
 vlan-name VLAN10 
@ -1640,6 +1648,14 @@ interface vlan 467
    ip address 10.67.128.8 255.255.240.0 
 !

+interface vlan 368 
+    ip address 10.68.112.5 255.255.240.0 
+!
+
+interface vlan 468 
+    ip address 10.68.128.5 255.255.240.0 
+!
+
 !
 uplink health-check 
 !
@ -3378,6 +3394,20 @@ wlan virtual-ap "APG67-SCSD_Vendor"
    ssid-profile "SCSD_Vendor_ssid_prof" 
    band-steering 
 !
+wlan virtual-ap "APG68-SCSD_Secure" 
+    aaa-profile "SCSD_Secure_aaa_prof" 
+    vlan 368 
+    forward-mode decrypt-tunnel 
+    ssid-profile "SCSD_Secure_ssid_prof" 
+    band-steering 
+!
+wlan virtual-ap "APG68-SCSD_Vendor" 
+    aaa-profile "SCSD_Vendor_aaa_prof" 
+    vlan 468 
+    forward-mode decrypt-tunnel 
+    ssid-profile "SCSD_Vendor_ssid_prof" 
+    band-steering 
+!
 wlan virtual-ap "APG86-SCSD_Secure" 
    aaa-profile "SCSD_Secure_aaa_prof" 
    vlan 386 
@ -3808,6 +3838,11 @@ ap-group "APG67RAPCenter"
    virtual-ap "APG67-SCSD_Secure" 
    virtual-ap "APG67-SCSD_Vendor" 
 !
+ap-group "APG68CNYWorks" 
+    virtual-ap "Intune" 
+    virtual-ap "APG68-SCSD_Secure" 
+    virtual-ap "APG68-SCSD_Vendor" 
+!
 ap-group "APG86StLucy" 
    virtual-ap "Intune" 
    virtual-ap "APG86-SCSD_Secure" 
--- a/configs/wlc/wlc-c.cfg
+++ b/configs/wlc/wlc-c.cfg
@ -7,7 +7,7 @@ clock timezone America/New_York -05 0
 !
 conductorip 10.1.35.33 ipsec ****** interface vlan 35 
 location "Building1.floor1" 
-controller config 717
+controller config 721
 crypto-local pki ServerCert scsd_full_wc3 StarCert-Ex03_26_fullchain.pfx 
 crypto-local pki ServerCert scsd_full_wc_2026 StarCert-Ex03_26_fullchain.pfx 
 crypto-local pki ServerCert scsd_wc3_2026 StarCert-Expire03202026.pfx 
@ -852,6 +852,8 @@ vlan 366
 !
 vlan 367 
 !
+vlan 368 
+!
 vlan 386 
 !
 vlan 402 
@ -944,6 +946,8 @@ vlan 466
 !
 vlan 467 
 !
+vlan 468 
+!
 vlan 486 
 !
 vlan 1024 
@ -1045,6 +1049,8 @@ vlan-name Secure-66-ENL
 vlan Secure-66-ENL 366 
 vlan-name Secure-67-RAPCenter 
 vlan Secure-67-RAPCenter 367 
+vlan-name Secure-68-CNYWorks 
+vlan Secure-68-CNYWorks 368 
 vlan-name Secure-86-StLucy 
 vlan Secure-86-StLucy 386 
 vlan-name Vendor-02-ITC 
@ -1137,6 +1143,8 @@ vlan-name Vendor-66-ENL
 vlan Vendor-66-ENL 466 
 vlan-name Vendor-67-RAPCenter 
 vlan Vendor-67-RAPCenter 467 
+vlan-name Vendor-68-CNYWorks 
+vlan Vendor-68-CNYWorks 468 
 vlan-name Vendor-86-StLucy 
 vlan Vendor-86-StLucy 486 
 vlan-name VLAN10 
@ -1634,6 +1642,14 @@ interface vlan 467
    ip address 10.67.128.9 255.255.240.0 
 !

+interface vlan 368 
+    ip address 10.68.112.6 255.255.240.0 
+!
+
+interface vlan 468 
+    ip address 10.68.128.6 255.255.240.0 
+!
+
 !
 uplink health-check 
 !
@ -3370,6 +3386,20 @@ wlan virtual-ap "APG67-SCSD_Vendor"
    ssid-profile "SCSD_Vendor_ssid_prof" 
    band-steering 
 !
+wlan virtual-ap "APG68-SCSD_Secure" 
+    aaa-profile "SCSD_Secure_aaa_prof" 
+    vlan 368 
+    forward-mode decrypt-tunnel 
+    ssid-profile "SCSD_Secure_ssid_prof" 
+    band-steering 
+!
+wlan virtual-ap "APG68-SCSD_Vendor" 
+    aaa-profile "SCSD_Vendor_aaa_prof" 
+    vlan 468 
+    forward-mode decrypt-tunnel 
+    ssid-profile "SCSD_Vendor_ssid_prof" 
+    band-steering 
+!
 wlan virtual-ap "APG86-SCSD_Secure" 
    aaa-profile "SCSD_Secure_aaa_prof" 
    vlan 386 
@ -3800,6 +3830,11 @@ ap-group "APG67RAPCenter"
    virtual-ap "APG67-SCSD_Secure" 
    virtual-ap "APG67-SCSD_Vendor" 
 !
+ap-group "APG68CNYWorks" 
+    virtual-ap "Intune" 
+    virtual-ap "APG68-SCSD_Secure" 
+    virtual-ap "APG68-SCSD_Vendor" 
+!
 ap-group "APG86StLucy" 
    virtual-ap "Intune" 
    virtual-ap "APG86-SCSD_Secure" 
--- a/configs/wlc/wlc-mm-2.cfg
+++ b/configs/wlc/wlc-mm-2.cfg
@ -6,7 +6,7 @@ hostname "NOC-ARUBA-MM-2"
 clock timezone America/New_York -05 0 
 !
 location "Building1.floor1" 
-controller config 717
+controller config 721
 crypto-local pki ServerCert scsd_wc2_full_2025 Star-Exp042025-fullchain.pfx 
 crypto-local pki ServerCert scsd_wc2_full_2026 StarCert-Ex03_26_fullchain.pfx 
 crypto-local pki ServerCert scsd_wildcard_2025 StartCert-Expire042025.pfx 
--- a/configs/wlc/wlc-mm.cfg
+++ b/configs/wlc/wlc-mm.cfg
@ -6,7 +6,7 @@ hostname "noc-aruba-mm"
 clock timezone America/New_York -05 0 
 !
 location "Building1.floor1" 
-controller config 717
+controller config 721
 crypto-local pki ServerCert scsd_wc2_full_2026 StarCert-Ex03_26_fullchain.pfx 
 crypto-local pki ServerCert scsd_wildcard_2026 StarCert-Ex03_26_fullchain.pfx 
 crypto-local pki PublicCert master-ssh-pub-cert master-ssh-pub-cert
Author	SHA1	Message	Date
John Poland	fded806a63	ct/ct-noc-a8360-4-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	a097fcb71d	ct/ct-noc-a8360-2-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	c06eac237f	ct/ct-noc-a8360-3-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	3757af3275	ct/ct-noc-a8360-1-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	628492979b	ct/ct-noc-a8360-6-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	33eeb35bdc	ct/ct-noc-a8360-4-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	68abcb0e01	ct/ct-noc-a8360-8-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	5c4c0e7fed	ct/ct-noc-a8360-6-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	5d930c92ec	ct/ct-noc-a8325-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	81df2ba553	ct/ct-noc-a8360-2-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	bccfcaea3d	ct/ct-noc-a8360-7-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	950297fe20	ct/ct-noc-a8360-7-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	c349da4b26	ct/ct-noc-a8325-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	2e8d25a80b	ct/ct-noc-a8360-3-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	0f04477c04	ct/ct-noc-a8360-5-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	10776b107e	ct/ct-noc-a8360-8-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	4e9b0cc9d4	ct/ct-noc-a8360-5-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	23800f3acd	sh/sh-noc-a8360-1-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	5b60511c6d	sh/sh-noc-a8360-4-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	168aabf983	sh/sh-noc-a8360-2-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	45931de6c5	sh/sh-noc-a8360-2-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	da607bf73c	sh/sh-noc-a8325-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	f5710ace1b	sh/sh-noc-a8360-3-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	56af022763	sh/sh-noc-a8360-1-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	4499fccca5	sh/sh-noc-a8360-3-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	ab71073ff1	sh/sh-noc-a8360-4-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	1056b272a2	sh/sh-noc-a8325-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:58 -05:00
John Poland	3756949749	wlc/wlc-c.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:57 -05:00
John Poland	a5bbaccb2b	wlc/wlc-a.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:57 -05:00
John Poland	327aa2dee7	wlc/wlc-b.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:57 -05:00
John Poland	943c74f28f	wlc/wlc-mm-2.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:57 -05:00
John Poland	12ed8721fa	wlc/wlc-mm.cfg Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:57 -05:00
John Poland	f0fd9b6c6c	fortigate-backup Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:56 -05:00
John Poland	48e3caf98c	fortigate Tue Jan 27 07:42:56 PM EST 2026	2026-01-27 19:42:56 -05:00