console columns 200
ip route default gateway 192.168.100.254
vlan-port-mode lan1:1 hybrid
vlan-id 1 1
vlan-id 2 101
vlan-access lan1:1 1
vlan-trunk lan1:1 2 join
ip vlan-id 1 address 192.168.100.1/24
airlink log on
airlink select module1
 airlink mode 11b+g+n
 airlink channel 1+5 primary=lower
airlink enable module1
airlink select module2
 airlink mode 11a+n+ac
 airlink channel 36+40+44+48 primary=lower primary40=lower
airlink enable module2
airlink select 1
 airlink ssid employee
 airlink vlan-id 1
 airlink bind module2
 airlink auth wpa2-eap aes
 airlink stealth on
 airlink pmf off
 airlink radius auth on
 airlink radius account off
 airlink radius server 127.0.0.1
airlink enable 1
airlink select 2
 airlink ssid guest
 airlink vlan-id 101
 airlink bind module1
 airlink auth wpa2-psk aes
 airlink psk-key password
 airlink pmf off
 airlink privacy separate station
airlink enable 2
syslog notice on
dns server 192.168.100.254
certificate generate ca "WLX402 RADIUS"
radiusd use on
radiusd user yamaha password ssid=employee name=ŽR—t‘¾˜Y mailaddress=tarou.yamaha@example.com auth=eap-tls
schedule at 1 startup * ntpdate ntp.nict.jp syslog
rt-coop use on
wlan-controller role controller-ap
wlan-controller radiusd synchronization on
wlan-controller bind vlan auto
wlan-controller select 1
 airlink select module1
  airlink mode 11b+g+n
  airlink channel 1+5 primary=lower
 airlink enable module1
 airlink select module2
  airlink mode 11a+n+ac
  airlink channel 36+40+44+48 primary=lower primary40=lower
 airlink enable module2
 airlink select 1
  airlink ssid employee
  airlink vlan-id 1
  airlink bind module2
  airlink auth wpa2-eap aes
  airlink stealth on
  airlink pmf off
  airlink radius auth on
  airlink radius account off
  airlink radius server 127.0.0.1
 airlink enable 1
 airlink select 2
  airlink ssid guest
  airlink vlan-id 101
  airlink bind module1
  airlink auth wpa2-psk aes
  airlink psk-key password
  airlink pmf off
  airlink privacy separate station
 airlink enable 2
wlan-controller select 1 1
 wlan-controller member-ap ac:44:f2:XX:XX:XX
wlan-controller select 1 2
 wlan-controller model name WLX402
 wlan-controller member-ap ac:44:f2:YY:YY:YY
 wlan-controller substitute controller-ap
 wlan-controller system name WLX402_Z4V00480WL
 wlan-controller ip address 192.168.100.2/24