[AR1]disp cur [V300R024C00SPC100] # sysname AR1 # drop illegal-mac alarm # authentication-profile name default_authen_profile authentication-profile name dot1x_authen_profile authentication-profile name dot1xmac_authen_profile authentication-profile name mac_authen_profile authentication-profile name multi_authen_profile authentication-profile name portal_authen_profile # dhcp enable # radius-server template default # pki realm default certificate-check none # ssl policy default_policy type server pki-realm default version tls1.2 ciphersuite rsa_aes_128_sha256 rsa_aes_256_sha256 ecdhe_rsa_aes128_gcm_sha256 e cdhe_rsa_aes256_gcm_sha384 # ike proposal default encryption-algorithm aes-256 aes-192 aes-128 aes-gcm-256 aes-gcm-192 aes-gcm-128 dh group14 authentication-algorithm sha2-512 sha2-384 sha2-256 authentication-method pre-share integrity-algorithm hmac-sha2-256 prf hmac-sha2-256 # free-rule-template name default_free_rule # portal-access-profile name portal_access_profile # ip pool vlan10 gateway-list 192.168.10.1 network 192.168.10.0 mask 255.255.255.0 # ip pool vlan20 gateway-list 192.168.20.1 network 192.168.20.0 mask 255.255.255.0 # aaa authentication-scheme default authentication-mode local authentication-scheme radius authentication-mode radius authorization-scheme default authorization-mode local accounting-scheme default accounting-mode none local-aaa-user password policy administrator domain default authentication-scheme default accounting-scheme default radius-server default domain default_admin authentication-scheme default accounting-scheme default # web set fast-configuration state disable # firewall zone Local # mi-server # interface Vlanif1 ip address 192.168.1.1 255.255.255.0 dhcp select interface # interface GigabitEthernet0/0/0 undo portswitch # interface GigabitEthernet0/0/0.10 dot1q termination vid 10 ip address 192.168.10.1 255.255.255.0 dhcp select global # interface GigabitEthernet0/0/0.20 dot1q termination vid 20 ip address 192.168.20.1 255.255.255.0 dhcp select global # interface GigabitEthernet0/0/1 # interface GigabitEthernet0/0/2 # interface GigabitEthernet0/0/3 # interface GigabitEthernet0/0/4 # interface GigabitEthernet0/0/5 # interface GigabitEthernet0/0/6 # interface GigabitEthernet0/0/7 # interface GigabitEthernet0/0/8 # interface GigabitEthernet0/0/9 description VirtualPort # interface NULL0 # cellular profile default modem auto-recovery dial action modem-reboot fail-times 128 modem auto-recovery icmp-unreachable action modem-reboot modem auto-recovery services-unavailable action modem-reboot test-times 0 interval 3600 # undo icmp name timestamp-request receive # snmp-agent local-engineid 800007DB03C4D438CDFC11 # http secure-server ssl-policy default_policy http secure-server enable http server permit interface GigabitEthernet0/0/8 # fib regularly-refresh disable # user-interface con 0 authentication-mode aaa idle-timeout 0 0 user-interface vty 0 authentication-mode aaa user privilege level 15 user-interface vty 1 4 # wlan ac traffic-profile name default security-profile name default security-profile name default-wds security wpa2 psk pass-phrase %^%#_&~yT@A";BfRjr=s%%rOZ|yv-xW$i1KeLPX[Jq&"%^%# aes ssid-profile name default vap-profile name default wds-profile name default regulatory-domain-profile name default air-scan-profile name default rrm-profile name default radio-2g-profile name default radio-5g-profile name default wids-spoof-profile name default wids-profile name default ap-system-profile name default port-link-profile name default wired-port-profile name default ap-group name default # dot1x-access-profile name dot1x_access_profile # mac-access-profile name mac_access_profile # voice # enterprise default # diagnose # ops # autostart # secelog # ms-channel # return