Xirrus_1# show running-config 
!
configure
!
hostname Xirrus_1
!
!hardware-configuration
!======================
!  Model: XS-3500, 256MB (825MHz)
!
!  component      part number       serial number   date
!  ---------      ---------------   -------------   -----------------
!  array          180-0004-001      X13501081054A   2008-Jan-04 12:33
!  controller     100-0030-003.G1   0000000498      2008-Jan-02 12:23
!  iap module 1   100-0063-001.C    0000001876      2008-Jan-02 19:09
!  iap module 2   100-0063-001.C    0000001891      2008-Jan-02 19:29
!  iap module 3   100-0063-001.C    0000002000      2008-Jan-02 19:12
!  iap module 4   100-0063-001.C    0000001855      2008-Jan-02 19:16
!  
!  fpga status         boot version   s/w version
!  -----------------   ------------   -----------
!  queue/encrypt/fte        1.009         1.016
!  multi-channel mac        0.057         0.076
!
!  interface    mac address(es)
!  ----------   --------------------------
!  iaps         00:0f:7d:00:7d:40-00:7d:7f
!  gigabit  1   00:0f:7d:00:01:f2
!
!software-configuration
!======================
!  component         version
!  ---------------   -----------------------------------
!  boot loader       1.0 (Jan 16 2008), Build: 3025     
!  iap driver        1.0 (Mar 06 2008), Build: 3822     
!  system software   3.4 (Apr 06 2008), Build: 0616     
!
boot-env
  verify bootfile_active XS-3.4-0616.bin
  verify bootfile_backup XS-3.4-0616.bin
exit    
!
administrator
  reset
  add  Xirrus password enc "$1$47fa916a$iK0xpgVhmik9cg/ePfl0v1" read-write
  del admin
exit
!
interface console
  timeout      100000
exit
!
interface iap
  !
  global-settings
    all-down
    intrude-detect  reset
    intrude-detect  add known    "00:0f:7d:*"
  exit
  !
  global-a-settings
    rates basic     6   12    24
    rates supported 6 9 12 18 24 36 48 54
  exit
  !
  global-bg-settings
    dot11g-protect  auto-rts
    rates basic     1 2 5 11 
    rates supported 1 2 5 11  6 9 12 18 24 36 48 54
  exit
exit
!
interface gig1
  ip dhcp
  up
exit
!
vlan
  reset 
  !
  add  "vlan1000"  number  1000
    management    on
    ip addr       45.200.1.61
    ip mask       255.255.255.0
    ip gateway    45.200.1.1
  exit
  !
  add  "vlan20"  number  20
  exit
  !
  add  "vlan30"  number  30
  exit
  !
  add  "vlan40"  number  40
  exit
  !
  default-route  "vlan1000"
exit
!
dns
  server1  45.200.1.2
exit
!
syslog
  console    level    7
exit
!
date-time
  timezone      0 0
exit
!
snmp
  off
exit
!
ssh    timeout 100000
!       
ssid
  reset
  edit "xirrus" disable
  !
  add  "ilabs-nac-xirrus"
    band        both broadcast
    vlan        none
    qos         2
    encryption  wpa-both global-settings
    auth        802-1x
    enable
  exit
  !
  add  "ilabs-nac-xirrus-guest"
    band        both broadcast
    vlan        "vlan40"
    qos         2
    encryption  wpa-both unique-settings
    auth        802-1x
    passphrase  enc 8928834e38ac8f3d
    psk         on
    eap         off
    enable
  exit
  del  "xirrus"
exit
!
group
  reset
  !
  add "Employee"
    vlan      none
    qos       2
    fast-roam layer       2-only
    disable
  exit
  !
  add "Admin"
    vlan      none
    qos       2
    fast-roam layer       2-only
    disable
  exit
  !
  add "Remediation"
    vlan      none
    qos       2
    fast-roam layer       2-only
    disable
  exit
  !
  add "Guest"
    vlan      none
    qos       2
    fast-roam layer       2-only
    disable
  exit
  !
  add "Device"
    vlan      none
    qos       2
    fast-roam layer       2-only
    disable
  exit
exit
!
radius-server ! global settings
  !
  external
    primary     ip     45.200.1.74
    primary     secret enc 8928834e38ac8f3d
    !
    accounting
      primary   ip     45.200.1.74
      primary   secret enc 8928834e38ac8f3d
    exit
  exit
exit
!
filter
  reset
  enable
  !
  add-list "Employee"
    add "1" allow prot tcp port dns         src any dst 45.200.1.2   enable
    add "2" allow prot tcp port echo        src any dst any          enable
    add "3" allow prot tcp port bootpc-dhcp src any dst any          enable
    add "4" allow prot any port any         src any dst 45.200.1.19  enable
    add "5" allow prot any port any         src any dst 45.200.1.20  enable
    add "6" allow prot any port any         src any dst 45.200.1.21  enable
    add "7" deny  prot any port any         src any dst any          enable
    enable
  exit
  !
  add-list "Remediation"
    add "1" allow prot tcp port dns         src any dst 45.200.1.2   enable
    add "2" allow prot tcp port echo        src any dst any          enable
    add "3" allow prot tcp port bootpc-dhcp src any dst any          enable
    add "4" allow prot any port any         src any dst 45.200.1.19  enable
    add "7" allow prot any port any         src any dst any          enable
    enable
  !
  add-list "Guest"
    add "1" allow prot any port any src any dst any set-vlan "vlan40"  enable
    enable
  exit
  !
  add-list "Device"
    add "1" allow prot any port any src any dst any set-vlan "vlan30"  enable
    enable
  exit
exit
!
interface iap
  !
  wds
    reset
  exit
  !
  abg1  band dot11a     antenna internal directional
  abg2  band monitor    antenna internal omni
  abg3  band dot11a     antenna internal directional
  abg4  band dot11a     antenna internal directional
  !
  abg1  channel  36     auto    cellsize   small                up  
  abg2  channel monitor auto    rx-threshold -95  tx-power  20  up  
  abg3  channel  44     auto    cellsize   small                up  
  abg4  channel  52     auto    cellsize     max                down
exit
!
end
!
Xirrus_1#