Sample controller configuration file for ipsec and, Independent wlan, Sample controller – Brocade Mobility 5181 Access Point Product Reference Guide (Supporting software release 4.4.0.0) User Manual

Page 404: Configuration file for ipsec and independent wlan

Advertising
background image

390

Brocade Mobility 5181 Access Point Product Reference Guide

53-1002516-01

Establishing basic adaptive AP connectivity

10

Sample controller configuration file for
IPSec and independent WLAN

The following constitutes a sample Mobility RFS7000 Controller configuration file supporting an
AAP IPSec with Independent WLAN configuration. Please note new AAP specific CLI commands in

red

and relevant comments in

blue

.

The sample output is as follows:

!

! configuration of Mobility RFS7000 RFS7000-1 version 1.1.0.0-016D

!

version 1.0

!

!

aaa authentication login default none

service prompt crash-info

!

hostname RFS7000-1

!

username admin password 1 8e67bb26b358e2ed20fe552ed6fb832f397a507d

username admin privilege superuser

username operator password 1 fe96dd39756ac41b74283a9292652d366d73931f

!

!

To configure the ACL to be used in the CRYPTO MAP

!

ip access-list extended AAP-ACL permit ip host 10.10.10.250 any rule-precedence 20

!

spanning-tree mst cisco-interoperability enable

spanning-tree mst config

name My Name

!

country-code us

logging buffered 4

logging console 7

logging host 157.235.92.97

logging syslog 7

snmp-server sysname RFS7000-1

snmp-server manager v2

snmp-server manager v3

snmp-server user snmptrap v3 encrypted auth md5

0x7be2cb56f6060226f15974c936e2739b

snmp-server user snmpmanager v3 encrypted auth md5

0x7be2cb56f6060226f15974c936e2739b

snmp-server user snmpoperator v3 encrypted auth md5

0x49c451c7c6893ffcede0491bbd0a12c4

!

To configure the passkey for a Remote VPN Peer - 255.255.255.255 denotes all AAPs.

12345678 is the default passkey. If you change on the AAP, change here as well.

!

crypto isakmp key 0 12345678 address 255.255.255.255

!

ip http server

ip http secure-trustpoint default-trustpoint

ip http secure-server

ip ssh

no service pm sys-restart

timezone America/Los_Angeles

Advertising