aus-ap1#sh run Building configuration... Current configuration : 2659 bytes ! ! Last configuration change at 19:43:39 UTC Sun Apr 3 2016 by tom ! NVRAM config last updated at 19:28:14 UTC Sun Apr 3 2016 by tom ! NVRAM config last updated at 19:28:14 UTC Sun Apr 3 2016 by tom version 15.3 service nagle no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname aus-ap1 ! ! logging buffered 100000 logging rate-limit console 9 logging console informational enable secret 5 .......... ! aaa new-model ! ! aaa authentication login default local aaa authorization console aaa authorization exec default local aaa authorization commands 1 default local aaa authorization commands 15 default local ! ! ! ! ! aaa session-id common no ip igmp snooping ip cef ip name-server 8.8.8.8 ! ! ! ! dot11 syslog dot11 vlan-name native vlan 1 ! dot11 ssid monza vlan native authentication open authentication key-management wpa version 2 mbssid guest-mode wpa-psk ascii 7 .......... ! ! dot11 wpa handshake timeout 2000 ! ! ! ! ip ssh version 2 ip scp server enable ! bridge irb ! ! ! interface Dot11Radio0 description 802.11b/g Radio no ip address no ip route-cache load-interval 30 ! encryption vlan native mode ciphers aes-ccm ! ssid monza ! antenna gain 0 mbssid station-role root world-mode dot11d country-code GB indoor ! interface Dot11Radio0.1 encapsulation dot1Q 1 native no ip route-cache bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface GigabitEthernet0 description aus-bdr1:wlan-gi0 no ip address no ip route-cache ! interface GigabitEthernet0.1 description Wireless native VLAN access encapsulation dot1Q 1 native no ip route-cache bridge-group 1 bridge-group 1 spanning-disabled no bridge-group 1 source-learning ! interface BVI1 mac-address 4403.a742.7dd6 ip address 172.25.145.67 255.255.255.192 no ip route-cache ! ip forward-protocol nd no ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ip route 0.0.0.0 0.0.0.0 172.25.145.65 ! ! ! bridge 1 route ip ! ! ! line con 0 exec-timeout 30 0 logging synchronous line vty 0 4 exec-timeout 0 0 logging synchronous transport input ssh ! sntp server 216.239.32.15 sntp server 216.239.34.15 sntp server 216.239.36.15 sntp server 216.239.38.15 end aus-ap1#show running-config all Building configuration... Current configuration with default configurations exposed : 15767 bytes ! ! Last configuration change at 19:43:39 UTC Sun Apr 3 2016 by tom ! NVRAM config last updated at 19:28:14 UTC Sun Apr 3 2016 by tom ! NVRAM config last updated at 19:28:14 UTC Sun Apr 3 2016 by tom version 15.3 parser cache parser config partition parser command serializer parser maximum utilization 100 parser maximum latency 40 downward-compatible-config 15.3 no service log backtrace no service config no service exec-callback service nagle service slave-log no service slave-coredump no service pad to-xot no service pad from-xot no service pad cmns no service pad no service telnet-zeroidle service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec service timestamps log datetime msec service password-encryption no service exec-wait no service linenumber no service internal no service scripting no service compress-config service prompt config no service old-slip-prompts no service pt-vty-logging no service disable-ip-fast-frag no service sequence-numbers service counters max age 0 service dhcp ! hostname aus-ap1 ! shell processing ! no logging discriminator logging exception 4096 no logging count no logging message-counter log no logging message-counter debug logging message-counter syslog no logging snmp-authfail no logging userinfo logging buginf logging queue-limit 100 logging queue-limit esm 0 logging queue-limit trap 100 logging buffered 100000 logging reload message-limit 1000 notifications no logging persistent logging rate-limit console 9 except errors no logging console guaranteed logging console informational logging monitor debugging logging cns-events informational logging on enable secret 5 .......... ! spd extended-headroom 75 spd headroom 100 spd enable aaa new-model ! ! aaa authentication attempts login 3 aaa authentication login default local aaa authorization console aaa authorization exec default local aaa authorization commands 1 default local aaa authorization commands 15 default local aaa accounting jitter maximum 300 ! port 1645 ! ! ! port 1700 ! aaa session-id common aaa memory threshold authentication reject 3 aaa memory threshold accounting disable 2 process cpu extended history 12 process cpu autoprofile hog clock save interval 0 clock initialize nvram cef table consistency-check IPv4 type scan-rib-ios count 1000 period 60 cef table consistency-check IPv4 type scan-ios-rib count 1000 period 60 no cef table consistency-check IPv4 data-checking no cef table consistency-check IPv4 error-message cef table consistency-check IPv4 auto-repair delay 10 holddown 300 cef table vrf tree IPv4 type MTRIE short-mask-protection 4 stride-pattern 8-8-8-8 hardware-api-notify off cef table output-chain build favor default cef table rate-monitor-period 5 ip subnet-zero ip source-route ip routing protocol purge interface ip routing no ip arp proxy disable no ip arp gratuitous type rfc-3220 ip arp queue 512 ip arp incomplete retry 20 ip arp incomplete entries 5000 ip gratuitous-arps non-local ip icmp rate-limit unreachable 500 ip icmp redirect subnet ip spd queue threshold minimum 73 maximum 74 no ip igmp snooping ip cef optimize neighbor resolution ip cef no ip cef accounting ip cef load-sharing algorithm universal 814AE33E ip domain retry 2 ip domain timeout 3 ip domain lookup ip domain lookup nsap ip name-server 8.8.8.8 ip dhcp relay information policy replace ip dhcp relay information check ip dhcp use class ip dhcp use vrf connected ip dhcp binding cleanup interval 120 ip dhcp compatibility suboption link-selection cisco ip dhcp conflict logging ip dhcp ping packets 2 ip dhcp ping timeout 500 ! ! ! ! ip bootp server ip reflexive-list timeout 300 ip dhcp-server query lease retries 2 ip dhcp-server query lease timeout 10 ip dhcp-client broadcast-flag ip dhcp-client default-router distance 254 ip accounting-threshold 512 dot11 syslog dot11 vlan-name native vlan 1 ! dot11 ssid monza vlan native authentication open authentication key-management wpa version 2 mbssid guest-mode wpa-psk ascii 7 .......... ! ! dot11 wpa handshake timeout 2000 authentication mac-move deny authentication logging verbose ipv6 hop-limit 64 ipv6 icmp error-interval 100 10 ipv6 nd cache expire 14400 ipv6 nd nsf convergence 120 ipv6 nd nsf throttle 512 ipv6 nd nsf dad suppress 60 ipv6 nd nud limit 256 refresh 10 ipv6 nd reachable-time 0 ipv6 nd ns-interval 0 ipv6 nd resolution data limit 16 ipv6 nd dad time 0 ipv6 traffic interface-statistics ipv6 spd queue min-threshold 73 ipv6 spd queue max-threshold 74 crypto pki token default max-retries 15 ! crypto pki crl cache size 64 ! memory check-interval 60 memory statistics history table 24 memory validate-checksum 60 memory lite memory chunk siblings threshold 10000 file privilege 15 file prompt alert dot1x system-auth-control dot1x logging verbose dot1x supplicant force-multicast ! process-max-time 200 ! no ip finger no ip tcp ecn no ip tcp selective-ack no ip tcp timestamp ip tcp delayed-ack ip tcp chunk-size 0 ip tcp mss 0 ip tcp keepalive retries 4 ip tcp keepalive interval 60 ip tcp window-size 4128 ip tcp queuemax 20 ip tcp synwait-time 30 no ip tcp path-mtu-discovery no ip tcp async-mobility server ip tcp RST-count 10 RST-window 5000 ip telnet tos C0 ip telnet timeout retransmit 0 no ip telnet quiet no ip telnet hidden hostnames no ip telnet hidden addresses ip telnet comport enable ip telnet comport flow level 16 ip telnet comport receive window 4128 ip telnet comport disconnect delay 0 ip tftp min-timeout 4 no ip tftp claim-netascii ip tftp blocksize 512 ip ftp passive ip ssh time-out 120 ip ssh authentication-retries 3 ip ssh break-string ~break ip ssh version 2 ip ssh dh min size 1024 ip ssh server authenticate user publickey ip ssh server authenticate user keyboard ip ssh server authenticate user password ip scp server enable ! buffers element permanent 1000 buffers element minimum 100 buffers small permanent 50 buffers small max-free 150 buffers small min-free 20 buffers small initial 0 buffers middle permanent 25 buffers middle max-free 150 buffers middle min-free 10 buffers middle initial 0 buffers big permanent 50 buffers big max-free 150 buffers big min-free 5 buffers big initial 0 buffers verybig permanent 10 buffers verybig max-free 100 buffers verybig min-free 0 buffers verybig initial 0 buffers large permanent 0 buffers large max-free 10 buffers large min-free 0 buffers large initial 0 buffers huge permanent 0 buffers huge max-free 4 buffers huge min-free 0 buffers huge size 18024 buffers huge initial 0 no buffers tune automatic buffers Dot11Radio0 permanent 3000 buffers Dot11Radio0 max-free 3000 buffers Dot11Radio0 min-free 0 buffers Dot11Radio0 initial 0 buffers GigabitEthernet0 permanent 3000 buffers GigabitEthernet0 max-free 3000 buffers GigabitEthernet0 min-free 0 buffers GigabitEthernet0 initial 0 bridge irb ! ! ! interface Dot11Radio0 description 802.11b/g Radio mtu 1500 no ip address ip redirects ip unreachables ip proxy-arp ip mtu 1500 ip load-sharing per-destination ip cef accounting non-recursive internal no ip route-cache ip split-horizon load-interval 30 carrier-delay msec 0 no shutdown tx-ring-limit 0 tx-queue-limit 0 dot1q tunneling ethertype 0x8100 ! encryption vlan native mode ciphers aes-ccm ! ssid monza ! antenna gain 0 mbssid station-role root world-mode dot11d country-code GB indoor ipv6 nd reachable-time 0 ipv6 nd ns-interval 0 ipv6 nd dad attempts 1 snmp trap link-status arp arpa arp timeout 14400 cdp log mismatch duplex cdp tlv app hold-queue 3000 in hold-queue 30 out no bgp-policy accounting input no bgp-policy accounting output no bgp-policy accounting input source no bgp-policy accounting output source no bgp-policy source ip-prec-map no bgp-policy source ip-qos-map no bgp-policy destination ip-prec-map no bgp-policy destination ip-qos-map ! interface Dot11Radio0.1 encapsulation dot1Q 1 native ip redirects ip unreachables ip proxy-arp ip mtu 1500 ip load-sharing per-destination ip cef accounting non-recursive internal no ip route-cache ip split-horizon no shutdown ipv6 nd reachable-time 0 ipv6 nd ns-interval 0 ipv6 nd dad attempts 1 no snmp trap link-status arp timeout 14400 cdp log mismatch duplex cdp tlv app bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 path-cost -1 bridge-group 1 priority 128 bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding no bgp-policy accounting input no bgp-policy accounting output no bgp-policy accounting input source no bgp-policy accounting output source no bgp-policy source ip-prec-map no bgp-policy source ip-qos-map no bgp-policy destination ip-prec-map no bgp-policy destination ip-qos-map ! interface GigabitEthernet0 description aus-bdr1:wlan-gi0 no ip address ip redirects ip unreachables ip proxy-arp ip mtu 1500 ip load-sharing per-destination ip cef accounting non-recursive internal no ip route-cache ip split-horizon load-interval 300 carrier-delay 2 no shutdown tx-ring-limit 128 tx-queue-limit 128 dot1q tunneling ethertype 0x8100 ipv6 nd reachable-time 0 ipv6 nd ns-interval 0 ipv6 nd dad attempts 1 snmp trap link-status arp arpa arp timeout 14400 cdp log mismatch duplex cdp tlv app hold-queue 3000 in hold-queue 40 out no bgp-policy accounting input no bgp-policy accounting output no bgp-policy accounting input source no bgp-policy accounting output source no bgp-policy source ip-prec-map no bgp-policy source ip-qos-map no bgp-policy destination ip-prec-map no bgp-policy destination ip-qos-map ! interface GigabitEthernet0.1 description Wireless native VLAN access encapsulation dot1Q 1 native ip redirects ip unreachables ip proxy-arp ip mtu 1500 ip load-sharing per-destination ip cef accounting non-recursive internal no ip route-cache ip split-horizon no shutdown ipv6 nd reachable-time 0 ipv6 nd ns-interval 0 ipv6 nd dad attempts 1 no snmp trap link-status arp timeout 14400 cdp log mismatch duplex cdp tlv app bridge-group 1 bridge-group 1 path-cost -1 bridge-group 1 priority 128 bridge-group 1 spanning-disabled no bridge-group 1 source-learning no bgp-policy accounting input no bgp-policy accounting output no bgp-policy accounting input source no bgp-policy accounting output source no bgp-policy source ip-prec-map no bgp-policy source ip-qos-map no bgp-policy destination ip-prec-map no bgp-policy destination ip-qos-map ! interface BVI1 mac-address 4403.a742.7dd6 mtu 1500 ip address 172.25.145.67 255.255.255.192 ip redirects ip unreachables ip proxy-arp ip mtu 1500 ip load-sharing per-destination ip cef accounting non-recursive internal no ip route-cache ip split-horizon load-interval 300 carrier-delay 2 no shutdown tx-ring-limit 0 tx-queue-limit 0 dot1q tunneling ethertype 0x8100 ipv6 nd reachable-time 0 ipv6 nd ns-interval 0 ipv6 nd dad attempts 1 snmp trap link-status arp arpa arp timeout 14400 hold-queue 75 in hold-queue 0 out no bgp-policy accounting input no bgp-policy accounting output no bgp-policy accounting input source no bgp-policy accounting output source no bgp-policy source ip-prec-map no bgp-policy source ip-qos-map no bgp-policy destination ip-prec-map no bgp-policy destination ip-qos-map ! ip classless ip forward-protocol nd no ip http server ip http port 80 ip http authentication enable no ip http secure-server ip http secure-port 443 ip http secure-active-session-modules all ip http max-connections 5 ip http timeout-policy idle 120 life 120 requests 60 ip http timeout-policy linger 60 ip http active-session-modules all ip http digest algorithm md5 ip http client cache memory pool 100 ip http client cache memory file 2 ip http client cache ager interval 5 ip http client connection timeout 10 ip http client connection retry 1 ip http client connection pipeline-length 5 ip http client connection idle timeout 30 ip http client response timeout 30 ip http path flash:ap802-k9w7-mx.153-3.JAB/html/level/1;zflash:ap802-k9w7-mx.153-3.JAB/html/level/1;flash:ap802-k9w7-mx.153-3.JAB/html/level/15;zflash:ap802-k9w7-mx.153-3.JAB/html/level/15;flash:ap802-k9w7-mx.153-3.JAB/html;zflash:ap802-k9w7-mx.153-3.JAB/html;flash: ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ip route static adjust-time 60 ip route static inter-vrf ip route 0.0.0.0 0.0.0.0 172.25.145.65 no ip access-list helper egress check ! ip prefix-list sequence-number logging history size 1 logging history warnings logging trap informational logging delimiter tcp no logging origin-id logging facility local7 no logging source-interface logging server-arp cdp advertise-v2 cdp timer 60 cdp holdtime 180 cdp log mismatch duplex cdp run cdp tlv app ! ipv6 prefix-list sequence-number no route-tag notation dotted-decimal snmp mib notification-log globalsize 500 snmp mib notification-log globalageout 15 tacacs-server cache expiry 24 enforce hours radius-server attribute 77 include-in-acct-req radius-server attribute 77 include-in-access-req radius-server attribute 11 default direction out radius-server attribute nas-port format a radius-server cache expiry 24 enforce hours radius-server transaction max-tries 8 radius-server retransmit 3 radius-server timeout 5 radius-server ipc-limit in 10 radius-server ipc-limit done 10 radius-server vsa send accounting radius-server vsa send authentication ! bridge 1 route ip bridge 1 aging-time 300 ! ! alias exec h help alias exec lo logout alias exec p ping alias exec r resume alias exec s show alias exec u undebug alias exec un undebug alias exec w where no configuration mode exclusive default-value exec-character-bits 7 default-value special-character-bits 7 default-value data-character-bits 8 ! line con 0 motd-banner exec-banner exec-timeout 30 0 timeout login response 30 privilege level 1 logging synchronous modem answer-timeout 15 modem dtr-delay 5 data-character-bits 8 exec-character-bits 7 special-character-bits 7 domain-lookup exec length 24 width 80 history size 20 history editing monitor escape-character soft DEFAULT escape-character DEFAULT ip netmask-format bit-count ip tcp input-coalesce-threshold 20 start-character 17 stop-character 19 speed 9600 line vty 0 4 motd-banner exec-banner exec-timeout 0 0 timeout login response 30 privilege level 1 logging synchronous modem answer-timeout 15 modem dtr-delay 5 data-character-bits 8 exec-character-bits 7 special-character-bits 7 domain-lookup exec length 24 width 80 history size 20 history editing monitor transport input ssh escape-character soft DEFAULT escape-character DEFAULT ip netmask-format bit-count ip tcp input-coalesce-threshold 20 start-character 17 stop-character 19 ! exception-slave core-file aus-ap1-core exception-slave protocol tftp exception protocol tftp exception region-size 131072 exception data-corruption buffer truncate exception data-corruption buffer log exception crashinfo file flash:crashinfo exception crashinfo buffersize 32 exception crashinfo maximum files 1 no exception crashinfo dump garbage-detector monitor event-trace stacktrace no monitor event-trace sequence-number monitor event-trace timestamps datetime msec scheduler max-task-time 2000 scheduler process-watchdog normal sntp server 216.239.32.15 version 4 sntp server 216.239.34.15 version 4 sntp server 216.239.36.15 version 4 sntp server 216.239.38.15 version 4 cns id hostname cns id hostname event cns id hostname image cns image retry 60 wsma id hostname end