tag:blogger.com,1999:blog-45909442853370510432024-02-15T07:16:20.664-08:00Ciro Tammaro's BlogMicrosoft and Cisco Systems Info.
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.comBlogger100125tag:blogger.com,1999:blog-4590944285337051043.post-15610155834759641462016-06-10T12:41:00.001-07:002016-06-10T12:41:43.110-07:00- Cisco Networking: Basic ASA NAT Configuration - Webserver in the DMZ in ASA<div id="support-toc" style="background-color: white; border-bottom-color: rgb(204, 204, 204); border-bottom-style: solid; border-width: 0px 0px 2px; color: #525252; font-family: arial, helvetica, "Helvetica Neue", HelveticaNeue, "Lucida Grande", sans-serif; font-size: 14px; font-stretch: inherit; line-height: 13px; margin: -10px 0px 0px; padding: 0px 0px 10px; vertical-align: baseline; width: 675.844px; word-break: break-word; word-wrap: break-word;">
<div style="border: 0px; color: #444444; font-size: 2.6rem; font-stretch: inherit; font-weight: normal; line-height: 1.25em; margin: 0px; padding: 14px 0px 20px; vertical-align: baseline;">
<span style="font-family: inherit; font-size: 18px; font-style: inherit; font-variant: inherit; line-height: 1.25em;">Contents</span></div>
<div class="toc-h2" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 1.25em; margin: 0px 0px 4px 2px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Introduction</span></span></div>
<div class="toc-h2" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 1.25em; margin: 0px 0px 4px 2px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Prerequisites</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Requirements</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Components Used</span></span></div>
<div class="toc-h2" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 1.25em; margin: 0px 0px 4px 2px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Overview</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Goals</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Access Control List Overview</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">NAT Overview</span></span></div>
<div class="toc-h2" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 1.25em; margin: 0px 0px 4px 2px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Configure</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Get Started</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Topology</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Step 1 - Configure NAT to Allow Hosts to Go Out to Internet</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Step 2 - Configure NAT to Access Webserver from Internet</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Step 3 - Configure ACLs</span></span></div>
<div class="toc-h3" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 4px 20px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Step 4 - Test Configuration with Packet Tracer Feature</span></span></div>
<div class="toc-h2" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 1.25em; margin: 0px 0px 4px 2px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Verify</span></span></div>
<div class="toc-h2" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 1.25em; margin: 0px 0px 4px 2px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Troubleshoot</span></span></div>
<div class="toc-h2" style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 1.25em; margin: 0px 0px 4px 2px; padding: 0px; vertical-align: baseline;">
<span style="color: #007fc5; font-family: inherit;"><span style="border-color: initial; border-style: initial; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em;">Conclusion</span></span></div>
</div>
<div class="lia-message-template-content-zone" style="background-color: white; border: 0px; color: #525252; font-family: arial, helvetica, "Helvetica Neue", HelveticaNeue, "Lucida Grande", sans-serif; font-size: 14px; font-stretch: inherit; line-height: 14px; margin: 0px; padding: 0px; vertical-align: baseline;">
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc0" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h2 style="border: 0px; color: #444444; font-family: inherit; font-size: 18px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1.25em; margin: 23px 0px 3px; padding: 0px; vertical-align: baseline;">
Introduction</h2>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
This document provides a simple and straight forward example of how to configure NAT and Access Control Lists (ACLs) on an ASA Firewall in order to allow outbound as well as inbound connectivity. This document was written using an ASA 5510 Firewall running ASA code version 9.1(1) but this can easily apply to any other ASA Firewall platform. If using a platform such as an ASA 5505, which uses VLANs instead of physical interface, you need to change the interface types as appropriate.</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc1" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h2 style="border: 0px; color: #444444; font-family: inherit; font-size: 18px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1.25em; margin: 23px 0px 3px; padding: 0px; vertical-align: baseline;">
Prerequisites</h2>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc2" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Requirements</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
There are no specific requirements for this document.</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc3" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Components Used</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
The information in this document is based on ASA 5510 Firewall running ASA code version 9.1(1).</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc4" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h2 style="border: 0px; color: #444444; font-family: inherit; font-size: 18px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1.25em; margin: 23px 0px 3px; padding: 0px; vertical-align: baseline;">
Overview</h2>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc5" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Goals</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
In this example configuration, you can look at what NAT and Access Control List configuration will be needed to configure in order to allow inbound access to a webserver in the DMZ of an ASA Firewall, and allow outbound connectivity from internal and DMZ hosts. This can be summarized as two goals:</div>
<ol style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 10px 0px 10px 15px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Allow hosts on the inside and DMZ outbound connectivity to the Internet.</li>
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Allow hosts on the Internet to access a webserver on the DMZ with an IP address of 192.168.1.100.</li>
</ol>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Before getting to what steps must be done to accomplish these two goals, briefly go over the way Access Lists and NAT work on the newer versions of ASA code (version 8.3 and later).</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc6" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Access Control List Overview</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Access Control Lists (Access-lists or ACLs for short) are the method by which the ASA firewall determines if traffic is permitted or denied. By default, traffic passing from a <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">lower</strong> to <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">higher</strong> security level is denied. This can be overridden by an ACL applied to that lower security interface. Also the ASA, by default, will allow traffic from <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">higher</strong>to <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">lower </strong>security interfaces. This behavior can also be overridden with an ACL.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
In earlier versions of ASA code (8.2 and earlier), the ASA compared an incoming connection or packet against the ACL on an interface without un-translating the packet first. In other words, the ACL had to permit the packet as if you were to capture that packet on the interface. In 8.3 and later code, the ASA un-translates that packet before checking the interface ACLs. This means that for 8.3 and later code, and this document, traffic to the host's real IP is permitted and not the host's translated IP.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
<br /></div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc7" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
NAT Overview</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
NAT on the ASA in version 8.3 and later is broken into two types knows as <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Auto NAT (Object NAT)</strong> and <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Manual NAT (Twice NAT)</strong>. The first of the two, <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Object NAT</strong>, is configured within the definition of a network object. An example of this is provided later in this document. One primary advantage of this NAT method is that the ASA automatically orders the rules for processing as to avoid conflicts. This is the easiest form of NAT, but with that ease comes a limitation in configuration granularity. For example, you cannot make translation decision based on the destination in the packet as you could with the second type of nat, <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Manual Nat. Manual NAT</strong> is more robust in its granularity, but it requires that the lines be configured in the correct order in order to achieve the correct behavior. This complicates this NAT type and as a result, it will not be used in this configuration example.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
<br /></div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc9" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Get Started</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
The basic ASA configuration setup is three interfaces connected to three network segments. The ISP network segment is connected to the Ethernet0/0 interface and labelled <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside </strong>with a security level of 0. The internal network has been connected to Ethernet0/1 and labelled as <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> with a security level of 100. The DMZ segment, where the webserver resides is connected to Ethernet0/2 and labelled as <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> with a security level of 50.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
The interface configuration and IP addresses for the example is seen here:</div>
<pre style="border: 0px; font-family: courier; font-size: 11px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 10px; margin-top: 10px; max-width: 97%; overflow: auto; padding: 0px 0px 5px; vertical-align: baseline;">interface Ethernet0/0
nameif outside
security-level 0
ip address 198.51.100.100 255.255.255.0
!
interface Ethernet0/1
nameif inside
security-level 100
ip address 192.168.0.1 255.255.255.0
!
interface Ethernet0/2
nameif dmz
security-level 50
ip address 192.168.1.1 255.255.255.0
!
route outside 0.0.0.0 0.0.0.0 198.51.100.1</pre>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Here you can see that the ASA's <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> interface is set with the IP address of 192.168.0.1, and it is the default gateway for the internal hosts. The ASA's <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> interface is configured with an IP address obtained from the ISP. There is a default route in place, setting the next-hop to be the ISP gateway. If you use DHCP this is provided automatically. The <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz </strong>interface is configured with the IP address of 192.168.1.1, and it is the default gateway for hosts on our DMZ network segment.</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc10" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Topology</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Here is a visual look at how this is cabled and configured:</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
<img src="http://www.cisco.com/c/dam/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115904-asa-config-dmz-00-00.gif" style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto !important; line-height: inherit; margin: 0px; max-width: 97%; padding: 0px; position: relative; vertical-align: baseline; width: auto !important;" /></div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc11" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Step 1 - Configure NAT to Allow Hosts to Go Out to Internet</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
For this example <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Object NAT</strong>, also known as <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">AutoNAT</strong>, is used. The first thing to configure is the NAT rules that allow the hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> and <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> segments to connect to the Internet. Beacuse these hosts are using private IP addresses, you need to translate them to something that is routable on the Internet. In this case translate the address so that they look like the ASA's <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> interface IP address. If your external IP changes frequently (perhaps due to DHCP) this is the most straight forward way to set this up.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
In order to configure this NAT, you need to create a network object that represents the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> subnet as well as one that represents the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> subnet. In each of these objects, configure a <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dynamic nat</strong> rule that will PAT these clients as the pass from their respective interfaces to the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> interface.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
This configuration looks similar to this:</div>
<pre style="border: 0px; font-family: courier; font-size: 11px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 10px; margin-top: 10px; max-width: 97%; overflow: auto; padding: 0px 0px 5px; vertical-align: baseline;">object network inside-subnet
subnet 192.168.0.0 255.255.255.0
nat (inside,outside) dynamic interface
!
object network dmz-subnet
subnet 192.168.1.0 255.255.255.0
nat (dmz,outside) dynamic interface</pre>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
If you look at the running configuration at this point (with the output of <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">show run</strong>), you will see that the object definition is split into two parts of the output. The first part only indicates what is in the object (host/subnet, IP address, etc), while the second section shows that NAT rule tied to that object. If you take the first entry in the output above:</div>
<blockquote style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px 0px 0px 10px; quotes: none; vertical-align: baseline;">
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
<em style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">When hosts matching the 192.168.0.0/24 subnet traverse from the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> interface to the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> interface, we want to dynamically translate them to the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside interface</strong></em></div>
</blockquote>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc12" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Step 2 - Configure NAT to Access Webserver from Internet</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Now that the hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> and <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> interfaces can get out to the Internet, you need to modify the configuration so that users on the Internet can access our webserver on TCP port 80. In this example, the set up is so that people on the Internet can connect to another IP address the ISP provided, an additional IP address we <em style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">own</em>. For this example, use 198.51.100.101. With this configuration, users on the Internet will be able to reach the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong>webserver by accessing 198.51.100.101 on TCP port 80. Use <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Object NAT</strong> for this task, and the ASA will be translating TCP port 80 on the webserver (192.168.1.100) to look like 198.51.100.101 on TCP port 80 on the<strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong>. Similarly to what was done above, define an object and define translation rules for that object. Also, define a second object to represent the IP you are translating this host to.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
This configuration looks similar to this:</div>
<pre style="border: 0px; font-family: courier; font-size: 11px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 10px; margin-top: 10px; max-width: 97%; overflow: auto; padding: 0px 0px 5px; vertical-align: baseline;">object network webserver-external-ip
host 198.51.100.101
!
object network webserver
host 192.168.1.100
nat (dmz,outside) static webserver-external-ip service tcp www www</pre>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Just to summarize what that NAT rule means in this example:</div>
<blockquote style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px 0px 0px 10px; quotes: none; vertical-align: baseline;">
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
<em style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">When a host matching the ip address <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">192.168.1.100</strong> on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> segments establishes a connection sourced from<strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">TCP port 80 (www)</strong> and that connection goes out the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> interface, we want to translate that to be <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">TCP port 80 (www)</strong> on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> interface and translate that IP address to be <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">198.51.100.101</strong></em></div>
</blockquote>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
That seems a little odd... "sourced from TCP port 80 (www)", but web traffic is <em style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">destined</em> to port 80. It is important to understand that these NAT rules are bi-directional in nature. As a result you can re-phrase this sentence by flipping the wording around. The result makes a lot more sense:</div>
<blockquote style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px 0px 0px 10px; quotes: none; vertical-align: baseline;">
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
<em style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">When hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> establish a connection to <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">198.51.100.101</strong> on destination <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">TCP port 80 (www)</strong>, we will translate the destination IP address to be <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">192.168.1.100</strong> and the destination port will be <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">TCP port 80 (www)</strong> and send it out the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong></em></div>
</blockquote>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
This makes more sense when phrased this way. Next, you need to set up the ACLs.</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc13" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Step 3 - Configure ACLs</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
NAT is configured and the end of this configuration is near. Remember, ACLs on the ASA allow you to override the default security behavior which is as follows:</div>
<ul style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 10px 0px 10px 15px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Traffic going from a <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">lower</strong> security interface is <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">denied</strong> when going to a <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">higher</strong> security interface</li>
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Traffic going from a <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">higher</strong> security interface is <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">allowed</strong> when going to a <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">lower </strong>security interface</li>
</ul>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
So without adding any ACLs at all to the configuration, the following traffic in this example works:</div>
<ul style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 10px 0px 10px 15px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> (security level 100) can connect to hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> (security level 50)</li>
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside </strong>(security level 100) can connect to hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside </strong>(security level 0)</li>
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> (security level 50) can connect to hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> (security level 0)</li>
</ul>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
However, the following traffic is denied:</div>
<ul style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 10px 0px 10px 15px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside </strong>(security level 0) cannot connect to hosts on the<strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"> inside</strong> (security level 100)</li>
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside </strong>(security level 0) cannot connect to hosts on the<strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"> dmz </strong>(security level 50)</li>
<li style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> (security level 50) cannot connect to hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside </strong>(security level 100)<strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><br /></strong></li>
</ul>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Because traffic from the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> to the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> network is denied by the ASA with its current configuration, users on the Internet cannot reach the webserver despite the NAT configuration in step 2. You need to explicitly permit this traffic. In 8.3 and later code you must use the<strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"> Real IP</strong> of the host in the ACL and not the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">translated</strong> <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">IP</strong>. This means the configuration needs to permit traffic destined to 192.168.1.100 and <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">NOT</strong> traffic destined to 198.51.100.101 on port 80. For simplicity sake, the objects defined in step 2 will be used for this ACL as well. Once the ACL is created, you need to apply it inbound on the outside interface.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Here is what those configuration commands look like:</div>
<pre style="border: 0px; font-family: courier; font-size: 11px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 10px; margin-top: 10px; max-width: 97%; overflow: auto; padding: 0px 0px 5px; vertical-align: baseline;">access-list outside_acl extended permit tcp any object webserver eq www
!
access-group outside_acl in interface outside</pre>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
The access-list line states:</div>
<blockquote style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px 0px 0px 10px; quotes: none; vertical-align: baseline;">
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
<em style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Permit traffic from <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">any</strong>(where) to the host represented by the object <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">webserver (192.168.1.100)</strong> on port 80</em></div>
</blockquote>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
It is important the configuration uses the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">any</strong> keyword here. Because the source IP address of clients is not known reaching your website specify any meaning 'Any IP address'.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
What about traffic from the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz </strong>segment destined to hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> network segment? For example, a server on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> network that the hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> need to connect to? How can the ASA allow only that specific traffic destined to the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> server and block everything else destined to the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> segment from the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong>?</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
In this example it is assumed that there is a DNS server on the inside network at IP address 192.168.0.53 that the hosts on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> need to access for DNS resolution. You create the ACL needed and apply it to the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> interface so the ASA can override that default security behavior, mentioned earlier, for traffic entering that interface.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Here is what those configuration commands look like:</div>
<pre style="border: 0px; font-family: courier; font-size: 11px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 10px; margin-top: 10px; max-width: 97%; overflow: auto; padding: 0px 0px 5px; vertical-align: baseline;">object network dns-server
host 192.168.0.53
!
access-list dmz_acl extended permit udp any object dns-server eq domain
access-list dmz_acl extended deny ip any object inside-subnet
access-list dmz_acl extended permit ip any any
!
access-group dmz_acl in interface dmz</pre>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
The ACL is more complex that simply permitting that traffic to the DNS server on UDP port 53. If all we did is that first 'permit' line, then all traffic would be blocked from the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> to hosts on the internet. Access-list have an implicit 'deny ip any any' at the end of the ACL. As a result, your <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> hosts would not be able to go out to the internet. Even though traffic from the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> to the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> is permitted by default, by applying an ACL to the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> interface, those default security behaviors for the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> interface are no longer in effect and we must explicitly permit the traffic in the interface ACL.</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc14" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h3 style="border: 0px; color: #444444; font-family: inherit; font-size: 16px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1em; margin: 20px 0px 10px; padding: 0px; vertical-align: baseline;">
Step 4 - Test Configuration with Packet Tracer Feature</h3>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Now that the configuration is completed, you need to test it to make sure it works. The easiest method is to use actual hosts (if this is your network). However, in the interest of testing this from the command line and further exploring some of the ASA's tools, use the packet tracer to test and potentially debug any problems encountered.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Packet tracer works by simulating a packet based on a series of parameters and injecting that packet to the interface data-path, similar to a real life packet would if it was picked up off the wire. This packet is followed through the myriad of the checks and processes that are done on as it passes through the firewall and packet tracer notes the outcome. Simulate the internal host going out to a host on the Internet. The command below instructs the firewall to:</div>
<blockquote style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px 0px 0px 10px; quotes: none; vertical-align: baseline;">
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
<em style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Simulate a <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">TCP</strong> packet coming in the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> interface from ip address <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">192.168.0.125</strong> on source port <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">12345</strong>destined to an ip address of <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">203.0.113.1</strong> on port <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">80</strong></em></div>
</blockquote>
<pre style="border: 0px; font-family: courier; font-size: 11px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 10px; margin-top: 10px; max-width: 97%; overflow: auto; padding: 0px 0px 5px; vertical-align: baseline;">ciscoasa# packet-tracer input inside tcp 192.168.0.125 12345 203.0.113.1 80
Phase: 1
Type: ACCESS-LIST
Subtype:
Result: ALLOW
Config:
Implicit Rule
Additional Information:
MAC Access list
Phase: 2
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 0.0.0.0 0.0.0.0 outside
Phase: 3
Type: NAT
Subtype:
Result: ALLOW
Config:
object network inside-subnet
nat (inside,outside) dynamic interface
Additional Information:
Dynamic translate 192.168.0.125/12345 to 198.51.100.100/12345
Phase: 4
Type: NAT
Subtype: per-session
Result: ALLOW
Config:
Additional Information:
Phase: 5
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 6
Type: NAT
Subtype: per-session
Result: ALLOW
Config:
Additional Information:
Phase: 7
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 8
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 1, packet dispatched to next module
Result:
input-interface: inside
input-status: up
input-line-status: up
output-interface: outside
output-status: up
output-line-status: up
Action: allow</pre>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
The end result is that the traffic is <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">allowed</strong> meaning that it passed all the NAT and ACL checks in the configuration and was sent out the egress interface, <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong>. Note that the packet was translated in Phase 3 and the details of that Phase show what rule is hit. The host 192.168.0.125 is translated dynamically to 198.51.100.100 as per the configuration.</div>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Now, run it for a connection from the Internet to the webserver. Remember, hosts on the Internet will access the webserver by connecting to 198.51.100.101 on the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> interface. Again, this next command translates to:</div>
<blockquote style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px 0px 0px 10px; quotes: none; vertical-align: baseline;">
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
<em style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Simulate a <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">TCP</strong> packet coming in the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> interface from ip address <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">192.0.2.123</strong> on source port <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">12345</strong>destined to an ip address of <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">198.51.100.101</strong> on port <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">80</strong></em></div>
</blockquote>
<pre style="border: 0px; font-family: courier; font-size: 11px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 10px; margin-top: 10px; max-width: 97%; overflow: auto; padding: 0px 0px 5px; vertical-align: baseline;">ciscoasa# packet-tracer input outside tcp 192.0.2.123 12345 198.51.100.101 80
Phase: 1
Type: UN-NAT
Subtype: static
Result: ALLOW
Config:
object network webserver
nat (dmz,outside) static webserver-external-ip service tcp www www
Additional Information:
NAT divert to egress interface dmz
Untranslate 198.51.100.101/80 to 192.168.1.100/80
Phase: 2
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group outside_acl in interface outside
access-list outside_acl extended permit tcp any object webserver eq www
Additional Information:
Phase: 3
Type: NAT
Subtype: per-session
Result: ALLOW
Config:
Additional Information:
Phase: 4
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 5
Type: NAT
Subtype: rpf-check
Result: ALLOW
Config:
object network webserver
nat (dmz,outside) static webserver-external-ip service tcp www www
Additional Information:
Phase: 6
Type: NAT
Subtype: per-session
Result: ALLOW
Config:
Additional Information:
Phase: 7
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 8
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 3, packet dispatched to next module
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: dmz
output-status: up
output-line-status: up
Action: allow</pre>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Again the result is that the packet is allowed. The ACLs check out, the configuration looks fine, and users on the Internet (<strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong>) should be able to access that webserver using the external IP.</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc15" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h2 style="border: 0px; color: #444444; font-family: inherit; font-size: 18px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1.25em; margin: 23px 0px 3px; padding: 0px; vertical-align: baseline;">
Verify</h2>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
Verification procedures are included in Step 4 - Testing Configuration with Packet Tracer Feature.</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc16" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h2 style="border: 0px; color: #444444; font-family: inherit; font-size: 18px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1.25em; margin: 23px 0px 3px; padding: 0px; vertical-align: baseline;">
Troubleshoot</h2>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
There is currently no specific troubleshooting information available for this configuration.</div>
<a class="auto_toc_anchor" href="https://www.blogger.com/null" name="anc17" style="border: 0px; color: inherit; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"></a><br />
<h2 style="border: 0px; color: #444444; font-family: inherit; font-size: 18px; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: 1.25em; margin: 23px 0px 3px; padding: 0px; vertical-align: baseline;">
Conclusion</h2>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
The configuration of an ASA to do basic NAT is not that daunting of a task. The example in this document can be adapted to your specific scenario by changing the IP addresses and ports used in the above example configurations. The final ASA configuration for this, when combined, looks similar to this for an ASA 5510:</div>
<pre style="border: 0px; font-family: courier; font-size: 11px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 10px; margin-top: 10px; max-width: 97%; overflow: auto; padding: 0px 0px 5px; vertical-align: baseline;">ASA Version 9.1(1)
!
interface Ethernet0/0
nameif outside
security-level 0
ip address 198.51.100.100 255.255.255.0
!
interface Ethernet0/1
nameif inside
security-level 100
ip address 192.168.0.1 255.255.255.0
!
interface Ethernet0/2
nameif dmz
security-level 50
ip address 192.168.1.1 255.255.255.0
!
object network inside-subnet
subnet 192.168.0.0 255.255.255.0
object network dmz-subnet
subnet 192.168.1.0 255.255.255.0
object network webserver
host 192.168.1.100
object network webserver-external-ip
host 198.51.100.101
object network dns-server
host 192.168.0.53
!
access-list outside_acl extended permit tcp any object webserver eq www
access-list dmz_acl extended permit udp any object dns-server eq domain
access-list dmz_acl extended deny ip any object inside-subnet
access-list dmz_acl extended permit ip any any
!
object network inside-subnet
nat (inside,outside) dynamic interface
object network dmz-subnet
nat (dmz,outside) dynamic interface
object network webserver
nat (dmz,outside) static webserver-external-ip service tcp www www
access-group outside_acl in interface outside
access-group dmz_acl in interface dmz
!
route outside 0.0.0.0 0.0.0.0 198.51.100.1 1</pre>
<div style="border: 0px; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.25em; margin-bottom: 6px; padding: 0px; vertical-align: baseline;">
On an ASA 5505, for example, and the interfaces are connected as shown above (<strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">outside</strong> connected to Ethernet0/0, <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">inside</strong> connected to Ethernet0/1 and the <strong style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">dmz</strong> connected to Ethernet0/2):</div>
<pre style="border: 0px; font-family: courier; font-size: 11px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin-bottom: 10px; margin-top: 10px; max-width: 97%; overflow: auto; padding: 0px 0px 5px; vertical-align: baseline;">ASA Version 9.1(1)
!
interface Ethernet0/0
description Connected to Outside Segment
switchport access vlan 2
!
interface Ethernet0/1
description Connected to Inside Segment
switchport access vlan 1
!
interface Ethernet0/2
description Connected to DMZ Segment
switchport access vlan 3
!
interface Vlan2
nameif outside
security-level 0
ip address 198.51.100.100 255.255.255.0
!
interface Vlan1
nameif inside
security-level 100
ip address 192.168.0.1 255.255.255.0
!
interface Vlan3
nameif dmz
security-level 50
ip address 192.168.1.1 255.255.255.0
!
object network inside-subnet
subnet 192.168.0.0 255.255.255.0
object network dmz-subnet
subnet 192.168.1.0 255.255.255.0
object network webserver
host 192.168.1.100
object network webserver-external-ip
host 198.51.100.101
object network dns-server
host 192.168.0.53
!
access-list outside_acl extended permit tcp any object webserver eq www
access-list dmz_acl extended permit udp any object dns-server eq domain
access-list dmz_acl extended deny ip any object inside-subnet
access-list dmz_acl extended permit ip any any
!
object network inside-subnet
nat (inside,outside) dynamic interface
object network dmz-subnet
nat (dmz,outside) dynamic interface
object network webserver
nat (dmz,outside) static webserver-external-ip service tcp www www
access-group outside_acl in interface outside
access-group dmz_acl in interface dmz
!
route outside 0.0.0.0 0.0.0.0 198.51.100.1 1</pre>
</div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com6tag:blogger.com,1999:blog-4590944285337051043.post-29910286679361147772016-06-02T06:02:00.001-07:002016-06-02T06:02:34.231-07:00- Cisco Networking: SDM<span class="Apple-style-span" style="font-family: "univers";"><br /></span>
<br />
<div>
<span class="Apple-style-span" style="font-family: "univers";">Cisco’s Security Device Manager (SDM)</span></div>
<div>
<span class="Apple-style-span" style="font-family: "univers";"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">So finally, here it is…the part about Cisco’s SDM. This beauty is used to help you configure</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">a router from an HTTP or HTTPS interface. Actually, to be real, Cisco did produce something</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">like this in the past, but honestly, it just didn’t work all that well. This one does—really! And</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">by the way, SDM is available on Cisco router models from Cisco 830 Series to 7301. Plus, it’s</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">preinstalled on all new 850, 870, 1800, 2800, and 3800 series routers. It’s all good!</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">But there is a catch. Although the SDM is a really great tool, it’s best if you pull it out just</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">for advanced configurations—not the super-small, simple configurations like those we used in</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">this chapter. Let me explain. Let’s say you wanted to set up an advanced access list, VPN with</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">IPSec, and intrusion protection on your router. If so, then SDM is your baby. You don’t even</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">have to know what IPSec means to configure it and make it work.</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">But again, there’s both good news and bad news with this. Of course, we can now handle</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">advanced configurations much more easily, but at the same time, it’s not so good because,</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">well, literally anyone can do the same thing!</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">What I’m going to do is show you how to log in using SDM; set your hostname, banner,</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">and enable secret password; and assign a DHCP pool on a router and an IP address to an interface.</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">And if it all goes well, after this section you’ll find that SDM will turn out to be much</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">more of a good thing because it will prove to be so much more helpful to you when you’re</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">reading the more advanced chapters on the IOS, NAT, wireless technologies, and security in</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">both this book and the CCNA study guide than the way it used to be when we were all mired</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">down in basic IOS router configuration. I’ll use it a little in every chapter, both to show you</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">the ease you’ll gain and to explain its complexity. But I promise to truly expose the limitations</span> </div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;">of SDM as well.</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">Honestly, I could write a whole book about SDM, but I don’t need to because Cisco did it</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">already. To find more details about SDM, go to </span></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">www.cisco.com/go/sdm</span></span><span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">. Plus, a new router</span></span></div>
<div>
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">will typically come with a CD that walks you through physically connecting your router and</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">configuring it step-by-step (overkill in my opinion); you truly don’t need this CD to connect</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">to your router and use SDM.</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">All you need is a supported ISR router (1800/2800, etc.) and you can download the latest</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">version of SDM complete with instructions for installing it on your computer and your router</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">from the following location: </span></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">www.cisco.com/pcgi-bin/tablebuild.pl/sdm</span></span><span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">.</span></span></div>
<div>
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span><span class="Apple-style-span" style="font-family: "univers";">To download this software, you need a Cisco Connection Online (CCO) login.</span></div>
<div>
<span class="Apple-style-span" style="font-family: "univers";"></span><span lang="EN-US" style="font-family: "univers"; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">However, this is free and only takes a minute or less to set up. Go to </span></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-ansi-language: EN-US;"><span class="Apple-style-span">www.cisco</span></span></div>
<div>
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">.com </span></span><span lang="EN-US" style="font-family: "univers"; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">and click on Register in the top-right corner. Fill in the short form, add</span></span></div>
<div>
<span lang="EN-US" style="font-family: "univers"; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span><span class="Apple-style-span" style="font-family: "univers";">the username and password you want to use, and you can now download the</span></div>
<div>
<span class="Apple-style-span" style="font-family: "univers";"></span><span class="Apple-style-span" style="font-family: "univers"; line-height: 18px;">SDM and the SDM demo.</span></div>
<div>
<span class="Apple-style-span" style="font-family: "univers"; line-height: 18px;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">You need to know this though—to set up your host to log in using the SDM, you have to</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">make sure your router is configured first. In the last CLI section of this chapter, I had deleted</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">my configurations and reloaded the router, so I had to start from scratch. But doing that really</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">isn’t all that hard. You can just choose a LAN interface of the router and then connect a host</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">directly to the router using a crossover cable—not so bad!</span></div>
<div>
<span class="Apple-style-span" style="font-family: Sabon-Roman;"></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Would you like to enter the initial configuration dialog? [yes/no]: </span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-ansi-language: EN-US;"><span class="Apple-style-span">n</span></span></b></div>
<div>
<b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span></b><span class="Apple-style-span" style="font-family: Mono3Frame-Regular;">Press RETURN to get started!</span></div>
<div>
<span class="Apple-style-span" style="font-family: Mono3Frame-Regular;"></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router></span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">en</span></span></b></div>
<div>
<b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span></b><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-ansi-language: EN-US;"><span class="Apple-style-span">config t</span></span></b></div>
<div>
<b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span></b><span class="Apple-style-span" style="font-family: Mono3Frame-Regular;">Enter configuration commands, one per line. End with CNTL/Z.</span></div>
<div>
<span class="Apple-style-span" style="font-family: Mono3Frame-Regular;"></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">int f0/0</span></span></b></div>
<div>
<b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span></b><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config-if)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">ip address 1.1.1.1 255.255.255.0</span></span></b></div>
<div>
<b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span></b><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config-if)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">no shut</span></span></b></div>
<div>
<b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span></b><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config-if)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">do ping 1.1.1.2</span></span></b></div>
<div>
<b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span></b><span class="Apple-style-span" style="font-family: Mono3Frame-Regular;">Type escape sequence to abort.</span></div>
<div>
<span class="Apple-style-span" style="font-family: Mono3Frame-Regular;"></span><span class="Apple-style-span" style="font-family: Mono3Frame-Regular;">Sending 5, 100-byte ICMP Echos to 1.1.1.2, timeout is 2 seconds:</span></div>
<div>
<span class="Apple-style-span" style="font-family: Mono3Frame-Regular;"></span><span class="Apple-style-span" style="font-family: Mono3Frame-Regular;">!!!!!</span></div>
<div>
<span class="Apple-style-span" style="font-family: Mono3Frame-Regular;"></span><span class="Apple-style-span" style="font-family: Mono3Frame-Regular;">Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms</span></div>
<div>
<span class="Apple-style-span" style="font-family: Mono3Frame-Regular;"></span><span class="Apple-style-span" style="font-family: Sabon-Roman;">So what’s this all about? In the preceding configuration, I configured the FastEthernet interface</span></div>
<div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">with an IP address and enabled it with the </span></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">no shutdown </span></span><span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">command. I then tested my connection<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">by pinging my directly connected host from the router prompt. (This would be a minimum configuration<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">and will allow you to connect via SDM.) From here, you just open a browser, with popups<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">enabled, type </span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-ansi-language: EN-US;"><span class="Apple-style-span">http://1.1.1.1</span></span></b><span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">, and follow the easy prompts once connected.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">It’s different if you want to set the router to use HTTPS, which allows you access into privileged<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">mode upon connection (meaning we’re setting the router back to the original default configuration).<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">And you need to add a few more commands.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">First, enable the HTTP/HTTPS server (your router won’t support HTTPS if it doesn’t have<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">the advanced services IOS):<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">ip http server<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">ip http secure-server<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]<o:p></o:p></span></span></div>
<div class="MsoNormal">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; line-height: 115%; mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; line-height: 115%; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">ip http authentication local<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Second, create a user account using privilege level 15 (the highest level):<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">username cisco privilege ?<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"><0-15> User privilege level<o:p></o:p><!--0-15--></0-15></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">username cisco privilege 15 password ?<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">0 Specifies an UNENCRYPTED password will follow<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">7 Specifies a HIDDEN password will follow<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">LINE The UNENCRYPTED (cleartext) user password<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">username cisco privilege 15 password 0 cisco<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Last, configure the console, Telnet and SSH (if you want to use both Telnet and SSH) to<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">provide local login authentication at privilege level access:<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">line console 0<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config-line)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">login local<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config-line)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">exit<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">line vty 0 ?<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"><1-1180> Last Line number<o:p></o:p><!--1-1180--></1-1180></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><cr><span class="Apple-style-span"><o:p></o:p></span></cr></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">line vty 0 1180<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config-line)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">privilege level 15<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config-line)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">login local<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config-line)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">transport input telnet ssh<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Router(config-line)#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">^Z<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Voilà! Now let’s connect to my 2811 using HTTPS!<o:p></o:p></span></span></div>
<div class="MsoNormal">
<span lang="EN-US" style="font-family: Sabon-Roman; line-height: 115%; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Okay—as soon as I connected via </span></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; line-height: 115%; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">https://1.1.1.1</span></span><span lang="EN-US" style="font-family: Sabon-Roman; line-height: 115%; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">, I received a security alert message.</span></span></div>
<div class="MsoNormal">
<b><span lang="EN-US" style="font-family: Mono3Frame-Bold; line-height: 115%; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></b></div>
<div class="MsoNormal">
<span class="Apple-style-span" style="font-family: "georgia" , serif; line-height: normal;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNhVtbEZR3-LMDRaaEg-cDvCNrvzYRLAsiYuFK8jL8M3haA4OOBAtsl1XLpS3s6ChrjvjZKWrYv6wm_b8C_ylB4GvbcNhshpxewxt9aRfqQ9I1Vk3D034TojLL-sbQJ8TWOtrOH0V-lz-E/s1600/SecurityAlert.jpg"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5481877430326883298" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNhVtbEZR3-LMDRaaEg-cDvCNrvzYRLAsiYuFK8jL8M3haA4OOBAtsl1XLpS3s6ChrjvjZKWrYv6wm_b8C_ylB4GvbcNhshpxewxt9aRfqQ9I1Vk3D034TojLL-sbQJ8TWOtrOH0V-lz-E/s320/SecurityAlert.jpg" style="cursor: pointer; float: left; height: 202px; margin-bottom: 10px; margin-left: 0px; margin-right: 10px; margin-top: 0px; width: 252px;" /></a></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"><br /></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"><br /></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"><br /></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"><br /></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: Sabon-Roman;">I was then prompted to log in with the username/password I created. SDM started loading</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">and told me to hold on, which means it needs a bit of time to load another window. </span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span"></span></span><i><span style="font-family: Sabon-Italic;"><span class="Apple-style-span">Do not </span></span></i><span class="Apple-style-span" style="font-family: Sabon-Roman;">close this window.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">The certificate that I created with the </span></span><span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">ip http-secure-server </span></span><span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">command was loaded onto</span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">the router. I chose to click on Always Trust Content from this Publisher and then clicked Yes.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: Sabon-Roman;"><br /></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: Sabon-Roman;">Of course, the certificate would not match any site name, so I then had to verify that I</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span style="font-family: Sabon-Roman;"><span class="Apple-style-span">wanted to run it.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span style="font-family: Sabon-Roman;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: , serif;"><br /></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">I then had to log in again and wait for SDM to load, during which time the router had me<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">change my default username and password.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: , serif;"><br /></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Finally—yes! I am connected to SDM!<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: , serif;"><br /></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Clicking the Configure button at the top of the page, I chose to go step-by-step through<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">interface configuration by first choosing the type of interface I wanted to configure and then<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">clicking the Create New Connection button at the bottom of the page. This opens the LAN or<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">WAN wizard, depending on which interface you choose to configure. <o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: , serif;"><br /></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">By clicking the Edit Interface/Connection tab, you get to see your interface status.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: , serif;"><br /></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">That’s not all—just double-click on an interface to edit it. (You can only do this after you’ve<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">gone through the LAN or WAN wizard and configured the interface.)<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: , serif;"><br /></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Look down at the bottom-left portion of the wizard page and click the Additional Tasks<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">button. From there, just click the Router Properties icon.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: , serif;"><br /></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Here, you can set the hostname, MOTD banner, and enable secret password. Last, I clicked<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">on the DHCP folder, then the DHCP pool icon. I then clicked Add and created a DHCP pool on my router.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span class="Apple-style-span" style="font-family: , serif;"><br /></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Now, let’s take a look at the configuration on the router:<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><o:p><span class="Apple-style-span"> </span></o:p></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Todd#</span></span><b><span lang="EN-US" style="font-family: Mono3Frame-Bold; mso-ansi-language: EN-US;"><span class="Apple-style-span">sh run<o:p></o:p></span></span></b></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">Building configuration...<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">[output cut]<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">hostname Todd<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">!<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">ip domain name lammle.com<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">[output cut]<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">ip dhcp excluded-address 172.16.10.1<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">ip dhcp excluded-address 172.16.10.11 172.16.10.254<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">!<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">ip dhcp pool Todd's_LAN<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">import all<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">network 172.16.10.0 255.255.255.0<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">!<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">crypto pki trustpoint TP-self-signed-2645776477<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">enrollment selfsigned<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">subject-name cn=IOS-Self-Signed-Certificate-2645776477<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">revocation-check none<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">rsakeypair TP-self-signed-2645776477<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span style="font-family: Mono3Frame-Regular;"><span class="Apple-style-span">!<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">crypto pki certificate chain TP-self-signed-2645776477<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span style="font-family: Mono3Frame-Regular;"><span class="Apple-style-span">certificate self-signed 01<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span style="font-family: Mono3Frame-Regular;"><span class="Apple-style-span">3082023E 308201A7 A0030201 02020101 300D0609 2A864886 F70D0101<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span style="font-family: Mono3Frame-Regular;"><span class="Apple-style-span">04050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span style="font-family: Mono3Frame-Regular;"><span class="Apple-style-span">6E65642D 43657274 69666963 6174652D 32363435 37373634 3737301E<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span style="font-family: Mono3Frame-Regular;"><span class="Apple-style-span">170D3037 30333031 3139313 33335A17 0D323030 31303130 30303030<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span style="font-family: Mono3Frame-Regular;"><span class="Apple-style-span">305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">65642D43 65727469 66696361 74652D32 36343537 37363437 3730819F<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100BB24<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">[output cut]<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">quit<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">username todd privilege 15 secret 5 $1$nvgs$QRNCWKJ7rfmtNNkD2xvGq/<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">[output cut]<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">!<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">line con 0<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">login local<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">line aux 0<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">line vty 0 4<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">privilege level 15<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">login local<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">transport input telnet ssh<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">line vty 5 1180<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">privilege level 15<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">login local<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">transport input telnet ssh<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Mono3Frame-Regular; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">!<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">So what we can see here is that the router created the hostname, DHCP pool, and certificate.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">We went through a lot of setup because we were using HTTPS—it’s so much easier and<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">unencumbered with less setup to just use HTTP. But remember, what we used was an ISR<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">default configuration to connect using SDM. We’ll continue to use SDM throughout this<o:p></o:p></span></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0cm; mso-layout-grid-align: none; text-autospace: none;">
<span lang="EN-US" style="font-family: Sabon-Roman; mso-bidi-mso-ansi-language: EN-US;"><span class="Apple-style-span">book, but I seriously encourage you to get SDM for yourself and start getting familiar with it!</span><o:p></o:p></span></div>
</div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-85270218401607254412016-06-02T05:59:00.001-07:002016-06-02T06:00:48.300-07:00- Cisco Networking: BGP Case Study <br />
<b><span lang="EN-US" style="color: red; font-family: "arial" , sans-serif; font-size: 12.0pt; letter-spacing: 2.35pt;"><br /></span></b>
<br />
<div class="WordSection1">
<div class="MsoBodyText" style="line-height: 165%; margin: 0cm 130.75pt 0.0001pt 41.95pt; text-align: center;">
<b><span lang="EN-US" style="font-family: "arial" , sans-serif; line-height: 165%;"><span style="font-size: large;"> Topology</span></span></b><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 12pt; line-height: 165%;"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-left: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-left: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-left: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-left: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<b><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnG8zAH3IQcGWdTmTZbV2-iZKClORww-jQ4_pJIT28gTfaJ8nbvPRcuyKludj-TnI-qPfFGQYmBLvM85Le6Iw4mkhBGducJN0OinKWYEGTUwOnFUkoZl-iwIB_O3cR1k_hmj_WcvqG1B8E/s1600/BGP+Case+study.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="520" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnG8zAH3IQcGWdTmTZbV2-iZKClORww-jQ4_pJIT28gTfaJ8nbvPRcuyKludj-TnI-qPfFGQYmBLvM85Le6Iw4mkhBGducJN0OinKWYEGTUwOnFUkoZl-iwIB_O3cR1k_hmj_WcvqG1B8E/s640/BGP+Case+study.jpg" width="640" /></a></b></div>
<br />
<div class="MsoBodyText" style="margin-left: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<h2 style="margin-left: 42.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Objectives</span></h2>
<h2 style="margin-left: 42.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: small; font-weight: normal;"><span lang="EN-US" style="font-family: "symbol"; letter-spacing: -0.1pt; text-indent: -17.95pt;"><span style="font-family: "times new roman"; font-stretch: normal;"> </span></span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt; text-indent: -17.95pt;">Plan,</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: 0.15pt; text-indent: -17.95pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt; text-indent: -17.95pt;">design, and</span><span lang="EN-US" style="font-family: "arial" , sans-serif; text-indent: -17.95pt;"> <span style="letter-spacing: -0.05pt;">implement</span><span style="letter-spacing: -0.1pt;">
</span><span style="letter-spacing: -0.05pt;">the</span><span style="letter-spacing: -0.25pt;"> </span><span style="letter-spacing: -0.05pt;">International</span> <span style="letter-spacing: -0.1pt;">Travel</span><span style="letter-spacing: 0.25pt;"> </span><span style="letter-spacing: -0.1pt;">Agency</span><span style="letter-spacing: 0.1pt;"> </span><span style="letter-spacing: -0.05pt;">core</span> <span style="letter-spacing: -0.1pt;">network.</span></span></span></h2>
<h2 style="margin-left: 42.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-weight: normal;"><span lang="EN-US" style="font-family: "symbol"; letter-spacing: -0.1pt; text-indent: -18pt;"><span style="font-family: "times new roman"; font-size: 7pt; font-stretch: normal;"> </span></span><span style="font-size: small;"><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt; text-indent: -18pt;">Plan,</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: 0.15pt; text-indent: -18pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt; text-indent: -18pt;">design, and</span><span lang="EN-US" style="font-family: "arial" , sans-serif; text-indent: -18pt;"> <span style="letter-spacing: -.05pt;">implement</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">Travel</span> <span style="letter-spacing: -.05pt;">Data</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">Providers</span><span style="letter-spacing: -.4pt;">
</span><span style="letter-spacing: -.1pt;">network.</span></span></span></span></h2>
<h2 style="margin-left: 42.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: small; font-weight: normal;"><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt; text-indent: -18pt;">Allow</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.25pt; text-indent: -18pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt; text-indent: -18pt;">the</span><span lang="EN-US" style="font-family: "arial" , sans-serif; text-indent: -18pt;"> <span style="letter-spacing: -.1pt;">networks</span><span style="letter-spacing: -.15pt;">
</span>to <span style="letter-spacing: -.05pt;">communicate</span><span style="letter-spacing: -.5pt;"> </span><span style="letter-spacing: .1pt;">via</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">BGP</span></span></span></h2>
<h2 style="margin-left: 42.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-weight: normal;"><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: small; letter-spacing: -0.05pt; text-indent: -18pt;">Verify</span><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: small; letter-spacing: 0.1pt; text-indent: -18pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: small; letter-spacing: -0.05pt; text-indent: -18pt;">that</span><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: small; letter-spacing: -0.1pt; text-indent: -18pt;"> all</span><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: small; text-indent: -18pt;"> <span style="letter-spacing: -.05pt;">implementations</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">are</span>
<span style="letter-spacing: -.1pt;">operational</span><span style="letter-spacing: .25pt;"> </span><span style="letter-spacing: -.1pt;">and</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">functional</span>
<span style="letter-spacing: -.1pt;">according</span> to<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">guidelines.</span></span></span></h2>
</div>
<span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
<br />
<div class="WordSection2">
<div class="MsoBodyText" style="margin-left: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 10.0pt; margin-right: 0cm; margin-top: 3.45pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<b><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 12.0pt; letter-spacing: -0.05pt;">Background</span></b><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 12.0pt;"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 112%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 11.15pt; margin-top: 8.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">The</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.05pt;">International</span> <span style="letter-spacing: -.1pt;">Travel</span> <span style="letter-spacing: -.05pt;">Agency</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">(ITA)</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">needs</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">both</span>
<span style="letter-spacing: .05pt;">its</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.1pt;">core</span> <span style="letter-spacing: -.1pt;">network</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">and</span> <span style="letter-spacing: .05pt;">its</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">Travel</span><span style="letter-spacing: .25pt;"> </span><span style="letter-spacing: -.05pt;">Data</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">Providers</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">(TDP)</span><span style="letter-spacing: 2.55pt;"> </span><span style="letter-spacing: -.1pt;">network</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.15pt;">set</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">up.</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">Configure</span>
<span style="letter-spacing: -.05pt;">each</span> <span style="letter-spacing: -.1pt;">network</span><span style="letter-spacing: .1pt;"> </span>to <span style="letter-spacing: -.05pt;">run</span> <span style="letter-spacing: -.1pt;">EIGRP,
and</span> <span style="letter-spacing: -.15pt;">use</span> BGP<span style="letter-spacing: .1pt;"> </span>to <span style="letter-spacing: -.1pt;">advertise</span>
<span style="letter-spacing: -.05pt;">routes</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">between</span> <span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.15pt;">two.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 113%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 11.3pt; margin-top: 5.8pt; mso-line-break-override: restrictions; punctuation-wrap: simple; text-indent: -.05pt;">
<span style="font-size: x-small;"><b><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Note:</span></b><b><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.15pt;"> </span></b><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;">This<span style="letter-spacing: -.15pt;"> </span>lab<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.15pt;">uses </span><span style="letter-spacing: -.05pt;">Cisco</span>
<span style="letter-spacing: -.1pt;">1841</span><span style="letter-spacing: -.05pt;">
routers</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">with</span> <span style="letter-spacing: -.05pt;">Cisco</span>
<span style="letter-spacing: -.05pt;">IOS</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.1pt;">Release</span> <span style="letter-spacing: -.05pt;">12.4(24)T1</span> <span style="letter-spacing: -.1pt;">and</span> <span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">Advanced</span> IP<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">Services</span><span style="letter-spacing: 4.25pt;"> </span><span style="letter-spacing: -.05pt;">image</span>
<span style="letter-spacing: -.1pt;">c1841-advipservicesk9-mz.124-24.T1.bin. </span><span style="letter-spacing: -.05pt;">The</span> <span style="letter-spacing: -.1pt;">switch</span>
<span style="letter-spacing: .05pt;">is</span><span style="letter-spacing: -.15pt;">
</span>a <span style="letter-spacing: -.1pt;">Cisco</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">WS-C2960-24TT-L</span> <span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.05pt;">Cisco</span>
<span style="letter-spacing: -.05pt;">IOS</span><span style="letter-spacing: 5.05pt;">
</span><span style="letter-spacing: -.05pt;">image</span> <span style="letter-spacing: -.1pt;">c2960-lanbasek9-mz.122-46.SE.bin,</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">You</span> <span style="letter-spacing: -.05pt;">can</span> <span style="letter-spacing: -.15pt;">use</span>
<span style="letter-spacing: -.05pt;">other</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">routers</span><span style="letter-spacing: -.2pt;"> </span><span style="letter-spacing: -.1pt;">(such</span>
<span style="letter-spacing: -.05pt;">as</span><span style="letter-spacing: -.15pt;">
</span>a <span style="letter-spacing: -.1pt;">2801</span> <span style="letter-spacing: -.05pt;">or</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">2811),</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">switches</span><span style="letter-spacing: 5.35pt;">
</span><span style="letter-spacing: -.1pt;">(such</span> <span style="letter-spacing: -.05pt;">as</span><span style="letter-spacing: -.15pt;"> </span>a <span style="letter-spacing: -.1pt;">2950),</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">and</span> <span style="letter-spacing: -.05pt;">Cisco</span>
IOS<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">Software</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">versions</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.05pt;">if</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">they</span><span style="letter-spacing: .1pt;"> </span>have<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">comparable</span> <span style="letter-spacing: -.05pt;">capabilities</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">and</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">features.<o:p></o:p></span></span></span></div>
<div class="MsoBodyText" style="line-height: 112%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 36.35pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;"><span style="font-size: x-small;">Depending</span></span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"><span style="font-size: x-small;"> <span style="letter-spacing: -.05pt;">on</span> <span style="letter-spacing: -.05pt;">the</span>
<span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">or</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">switch</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">model</span><span style="letter-spacing: .25pt;"> </span><span style="letter-spacing: -.1pt;">and</span>
<span style="letter-spacing: -.1pt;">Cisco</span> <span style="letter-spacing: -.05pt;">IOS</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">Software</span><span style="letter-spacing: -.25pt;">
</span>version,<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">commands</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">available</span>
<span style="letter-spacing: -.1pt;">and</span><span style="letter-spacing: 3.55pt;">
</span><span style="letter-spacing: -.1pt;">output</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">produced</span><span style="letter-spacing: -.25pt;"> </span>might<span style="letter-spacing: -.3pt;"> </span>vary<span style="letter-spacing: -.4pt;"> </span><span style="letter-spacing: -.05pt;">from</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.15pt;">what</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: .05pt;">is</span><span style="letter-spacing: -.15pt;"> shown</span> <span style="letter-spacing: .05pt;">in</span>
this<span style="letter-spacing: -.4pt;"> </span><span style="letter-spacing: -.1pt;">lab.</span></span><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .35pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<h2>
<span style="font-size: small;"><span style="letter-spacing: -.05pt;">Required</span><span style="letter-spacing: .1pt;">
</span><span style="letter-spacing: -.05pt;">Resources</span></span><span style="font-weight: normal;"><o:p></o:p></span></h2>
<div class="MsoBodyText" style="margin: 6.85pt 0cm 0.0001pt 64pt; text-align: left; text-indent: -18pt;">
<span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"><span style="font-size: x-small;">4 <span style="letter-spacing: -0.05pt;">routers</span><span style="letter-spacing: -0.15pt;"> </span><span style="letter-spacing: -0.05pt;">(Cisco</span>
<span style="letter-spacing: -0.1pt;">1841</span> <span style="letter-spacing: -0.05pt;">with</span> <span style="letter-spacing: -0.05pt;">Cisco</span> <span style="letter-spacing: -0.05pt;">IOS</span><span style="letter-spacing: 0.1pt;"> </span><span style="letter-spacing: -0.15pt;">Release</span> <span style="letter-spacing: -0.05pt;">12.4(24)T1</span>
<span style="letter-spacing: -0.1pt;">Advanced</span> <span style="letter-spacing: -0.1pt;">IP</span><span style="letter-spacing: 0.1pt;"> </span><span style="letter-spacing: -0.05pt;">Services</span><span style="letter-spacing: -0.25pt;">
</span><span style="letter-spacing: -0.05pt;">or</span><span style="letter-spacing: 0.1pt;"> </span><span style="letter-spacing: -0.1pt;">comparable)</span></span></span></div>
<div class="MsoBodyText" style="margin: 6.85pt 0cm 0.0001pt 64pt; text-align: left; text-indent: -18pt;">
<span style="font-size: x-small;"><span style="font-family: "arial" , sans-serif; line-height: 109%; text-indent: -18pt;">1 </span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt; line-height: 109%; text-indent: -18pt;">switch</span><span style="font-family: "arial" , sans-serif; line-height: 109%; text-indent: -18pt;"> </span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt; line-height: 109%; text-indent: -18pt;">(Cisco</span><span style="font-family: "arial" , sans-serif; line-height: 109%; text-indent: -18pt;"> </span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt; line-height: 109%; text-indent: -18pt;">2960</span><span style="font-family: "arial" , sans-serif; line-height: 109%; text-indent: -18pt;">
</span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt; line-height: 109%; text-indent: -18pt;">with</span><span style="font-family: "arial" , sans-serif; line-height: 109%; text-indent: -18pt;"> </span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt; line-height: 109%; text-indent: -18pt;">the</span><span style="font-family: "arial" , sans-serif; line-height: 109%; text-indent: -18pt;"> </span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt; line-height: 109%; text-indent: -18pt;">Cisco</span><span style="font-family: "arial" , sans-serif; line-height: 109%; text-indent: -18pt;"> IOS</span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.15pt; line-height: 109%; text-indent: -18pt;"> </span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt; line-height: 109%; text-indent: -18pt;">Release</span><span style="font-family: "arial" , sans-serif; line-height: 109%; text-indent: -18pt;">
</span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt; line-height: 109%; text-indent: -18pt;">12.2(46)SE</span><span style="font-family: "arial" , sans-serif; letter-spacing: 0.1pt; line-height: 109%; text-indent: -18pt;"> </span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt; line-height: 109%; text-indent: -18pt;">C2960-LANBASEK9-M</span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.15pt; line-height: 109%; text-indent: -18pt;"> </span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt; line-height: 109%; text-indent: -18pt;">image</span><span style="font-family: "arial" , sans-serif; line-height: 109%; text-indent: -18pt;">
</span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt; line-height: 109%; text-indent: -18pt;">or</span><span style="font-family: "arial" , sans-serif; letter-spacing: 5.13333px; line-height: 109%; text-indent: -18pt;"> </span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt; line-height: 109%; text-indent: -18pt;">comparable)</span></span></div>
<div class="MsoBodyText" style="line-height: 109%; margin: 4.05pt 36.35pt 0.0001pt 64pt; text-align: left; text-indent: -18pt;">
<span style="font-size: x-small;"><span style="text-indent: -18pt;"><span style="font-family: "symbol"; mso-bidi-font-family: Symbol; mso-fareast-font-family: Symbol;"><span style="font-family: "times new roman"; font-stretch: normal;"> </span></span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Serial</span></span><span style="font-family: "arial" , sans-serif; text-indent: -18pt;">
<span style="letter-spacing: -0.1pt;">and</span> <span style="letter-spacing: -0.05pt;">Ethernet</span><span style="letter-spacing: -0.1pt;"> </span><span style="letter-spacing: -0.05pt;">cables</span></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .25pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<h2>
<span style="letter-spacing: -.05pt;">Requirements</span><span style="font-weight: normal;"><o:p></o:p></span></h2>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.9pt; margin-right: 0cm; margin-top: 7.75pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 64.0pt; text-indent: -17.9pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">1.<span style="font-family: "times new roman"; font-stretch: normal;"> </span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.15pt;">Use</span><span lang="EN-US" style="font-family: "arial" , sans-serif;"> <span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">addressing</span> scheme <span style="letter-spacing: -.2pt;">shown</span> <span style="letter-spacing: .05pt;">in</span> <span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.05pt;">diagram.<o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.95pt; margin-right: 0cm; margin-top: 4.3pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 64.0pt; text-indent: -17.95pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">2.<span style="font-family: "times new roman"; font-stretch: normal;">
</span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Configure</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: -.25pt;"> </span>ITA<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">network</span><span style="letter-spacing: .1pt;"> </span>to <span style="letter-spacing: -.05pt;">be</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: .05pt;">in</span>
<span style="letter-spacing: -.1pt;">EIGRP</span><span style="letter-spacing: .1pt;"> </span>AS<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">65001.</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.95pt; margin-right: 0cm; margin-top: 4.55pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 64.0pt; text-indent: -18.0pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">3.<span style="font-family: "times new roman"; font-stretch: normal;">
</span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Configure</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">TDP</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">network</span><span style="letter-spacing: .1pt;"> </span>to<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">be</span>
<span style="letter-spacing: .05pt;">in</span><span style="letter-spacing: -.25pt;">
</span><span style="letter-spacing: -.05pt;">EIGRP</span><span style="letter-spacing: -.15pt;"> </span>AS<span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">65002.</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.95pt; margin-right: 0cm; margin-top: 4.55pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 64.0pt; text-indent: -18.0pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">4.<span style="font-family: "times new roman"; font-stretch: normal;">
</span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Disable</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.05pt;">automatic</span><span style="letter-spacing: .1pt;">
</span><span style="letter-spacing: -.1pt;">summarization</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: .05pt;">in</span>
<span style="letter-spacing: -.05pt;">both</span> <span style="letter-spacing: -.1pt;">EIGRP</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.15pt;">domains.<o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.95pt; margin-right: 0cm; margin-top: 4.3pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 64.0pt; text-indent: -18.0pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">5.<span style="font-family: "times new roman"; font-stretch: normal;">
</span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Configure</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: -.25pt;"> </span>ITA<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">network</span><span style="letter-spacing: .1pt;"> </span>to <span style="letter-spacing: -.05pt;">be</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: .05pt;">in</span>
<span style="letter-spacing: -.1pt;">BGP</span><span style="letter-spacing: -.15pt;">
</span>AS<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">65001,</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">and</span> <span style="letter-spacing: -.05pt;">the</span>
<span style="letter-spacing: -.1pt;">TDP</span><span style="letter-spacing: .1pt;">
</span><span style="letter-spacing: -.1pt;">network</span><span style="letter-spacing: .1pt;"> </span>to <span style="letter-spacing: -.05pt;">be</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: .05pt;">in</span><span style="letter-spacing: -.25pt;"> </span>BGP<span style="letter-spacing: -.15pt;"> </span>AS<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">65002.</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.95pt; margin-right: 0cm; margin-top: 4.55pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 64.0pt; text-indent: -18.0pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">6.<span style="font-family: "times new roman"; font-stretch: normal;">
</span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Advertise</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">192.168.14.0/30</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">and</span>
<span style="letter-spacing: -.1pt;">192.168.34.0/30</span> <span style="letter-spacing: -.1pt;">networks</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: .05pt;">in</span> <span style="letter-spacing: -.05pt;">both</span> <span style="letter-spacing: -.05pt;">EIGRP</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">autonomous</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">systems.<o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 110%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.9pt; margin-right: 11.15pt; margin-top: 4.8pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 63.95pt; text-indent: -17.95pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">7.<span style="font-family: "times new roman"; font-stretch: normal; line-height: normal;"> </span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Configure</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">interfaces</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">on</span>
<span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">border</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">routers</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.1pt;">between</span><span style="letter-spacing: .25pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">two</span> <span style="letter-spacing: -.05pt;">EIGRP</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">autonomous</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">systems,</span>
<span style="letter-spacing: -.15pt;">so</span> <span style="letter-spacing: -.1pt;">they</span><span style="letter-spacing: 3.05pt;"> </span><span style="letter-spacing: -.05pt;">do</span>
<span style="letter-spacing: -.1pt;">not</span><span style="letter-spacing: .15pt;">
</span><span style="letter-spacing: -.15pt;">send</span> EIGRP<span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">packets.<o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 112%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.9pt; margin-right: 27.95pt; margin-top: 3.4pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 63.95pt; text-indent: -17.95pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">8.<span style="font-family: "times new roman"; font-stretch: normal; line-height: normal;"> </span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">All</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: 0.25pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">routers</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.15pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">will</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: 0.25pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">be</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.25pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">participating</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.25pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: 0.05pt;">in</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.25pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">BGP.</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: 0.15pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">Configure</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.1pt;">all</span> <span style="letter-spacing: -.1pt;">routers</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: .05pt;">for</span><span style="letter-spacing: -.15pt;"> </span>a<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">full</span> <span style="letter-spacing: -.05pt;">mesh</span>
<span style="letter-spacing: -.2pt;">of</span><span style="letter-spacing: .15pt;">
</span><span style="letter-spacing: -.05pt;">IBGP</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">peers</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: .05pt;">in</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">each</span><span style="letter-spacing: 3.35pt;"> </span><span style="letter-spacing: -.25pt;">s</span>y<span style="letter-spacing: -.25pt;">s</span><span style="letter-spacing: .05pt;">t</span><span style="letter-spacing: -.1pt;">e</span><span style="letter-spacing: .2pt;">m</span>.<o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.9pt; margin-right: 0cm; margin-top: 2.9pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 63.95pt; text-indent: -17.95pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">9.<span style="font-family: "times new roman"; font-stretch: normal;">
</span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Peer</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: 0.1pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">R1</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.1pt;">and</span> <span style="letter-spacing: -.05pt;">R2</span>
<span style="letter-spacing: -.1pt;">using</span> <span style="letter-spacing: -.05pt;">loopback</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">addresses,</span><span style="letter-spacing: .15pt;">
</span><span style="letter-spacing: -.1pt;">not</span><span style="letter-spacing: .15pt;"> </span>their<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">directly</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.05pt;">connected</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">interfaces.<o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 110%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.9pt; margin-right: 36.35pt; margin-top: 4.8pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 63.95pt; text-indent: -18.0pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">10.<span style="font-family: "times new roman"; font-stretch: normal; line-height: normal;"> </span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Advertise</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.1pt;">all</span>
<span style="letter-spacing: -.05pt;">loopback</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">interfaces</span><span style="letter-spacing: -.15pt;"> </span>into<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">BGP</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">process,</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">except</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">on</span>
<span style="letter-spacing: -.1pt;">R2, </span><span style="letter-spacing: -.15pt;">where</span>
<span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.05pt;">only</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">loopback</span><span style="letter-spacing: 2.65pt;">
</span><span style="letter-spacing: -.05pt;">advertised</span> <span style="letter-spacing: -.1pt;">should</span> <span style="letter-spacing: -.05pt;">be</span>
<span style="letter-spacing: -.05pt;">loopback</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">2.</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 110%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.9pt; margin-right: 22.05pt; margin-top: 3.6pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 63.95pt; text-indent: -18.0pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">11.<span style="font-family: "times new roman"; font-stretch: normal; line-height: normal;"> </span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;">On <span style="letter-spacing: -.1pt;">R2, </span><span style="letter-spacing: -.05pt;">create</span>
a <span style="letter-spacing: -.1pt;">static</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">summary</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">route</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">for</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">rest</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.2pt;">of</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: .05pt;">its</span><span style="letter-spacing: -.4pt;"> </span><span style="letter-spacing: -.1pt;">loopback</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">interfaces</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">and</span>
<span style="letter-spacing: -.1pt;">advertise</span> this<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">static</span><span style="letter-spacing: 4.65pt;"> </span><span style="letter-spacing: -.05pt;">route</span>
<span style="letter-spacing: .05pt;">in</span><span style="letter-spacing: -.25pt;">
</span><span style="letter-spacing: -.05pt;">BGP.<o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.9pt; margin-right: 0cm; margin-top: 3.4pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 63.95pt; text-indent: -18.0pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">12.<span style="font-family: "times new roman"; font-stretch: normal;"> </span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">R4</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.1pt;">should</span> <span style="letter-spacing: -.05pt;">send</span> a <span style="letter-spacing: -.05pt;">summary</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">route</span>
to<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">ITA</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">representing</span>
<span style="letter-spacing: -.1pt;">all</span> <span style="letter-spacing: -.05pt;">the</span>
<span style="letter-spacing: -.05pt;">R4</span><span style="letter-spacing: -.25pt;">
</span><span style="letter-spacing: -.05pt;">loopback</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">interfaces.<o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 110%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.9pt; margin-right: 16.05pt; margin-top: 4.55pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 63.95pt; text-indent: -18.0pt;">
<!--[if !supportLists]--><span style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">13.<span style="font-family: "times new roman"; font-stretch: normal; line-height: normal;">
</span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">R4</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.1pt;">should</span> prefer<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.05pt;">path</span><span style="letter-spacing: -.25pt;"> </span>to
<span style="letter-spacing: -.05pt;">ITA</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.1pt;">networks</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: .1pt;">via</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">the</span>
<span style="letter-spacing: -.1pt;">Ethernet</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">link</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.15pt;">between</span>
<span style="letter-spacing: -.05pt;">R1</span> <span style="letter-spacing: -.1pt;">and</span>
<span style="letter-spacing: -.1pt;">R4.</span><span style="letter-spacing: .15pt;">
</span></span><span style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Accomplish</span><span style="font-family: "arial" , sans-serif;"> this<span style="letter-spacing: 3.15pt;">
</span><span style="letter-spacing: -.05pt;">by</span><span style="letter-spacing: -.15pt;"> </span>modifying<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">MED</span>
<span style="letter-spacing: -.1pt;">advertised</span> to<span style="letter-spacing: -.05pt;"> </span><span style="letter-spacing: -.15pt;">TDP.</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 110%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 63.9pt; margin-right: 16.05pt; margin-top: 3.6pt; mso-line-break-override: restrictions; mso-list: l2 level1 lfo1; punctuation-wrap: simple; tab-stops: 63.95pt; text-indent: -18.0pt;">
<!--[if !supportLists]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;">14.<span style="font-family: "times new roman"; font-stretch: normal; line-height: normal;"> </span></span><!--[endif]--><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Routers</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.15pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: 0.05pt;">in</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.05pt;">ITA</span><span style="letter-spacing: -.15pt;"> </span>AS<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">should</span>
prefer<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.05pt;">path</span><span style="letter-spacing: -.25pt;"> </span>to<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">TDP</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.15pt;">networks </span><span style="letter-spacing: .1pt;">via</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">the</span>
<span style="letter-spacing: -.05pt;">Ethernet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">link</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">between</span>
<span style="letter-spacing: -.05pt;">R1</span> <span style="letter-spacing: -.1pt;">and</span><span style="letter-spacing: 2.65pt;"> </span><span style="letter-spacing: -.1pt;">R4.</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">Accomplish</span>
this<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">by</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">modifying</span><span style="letter-spacing: -.25pt;">
</span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">local</span><span style="letter-spacing: .25pt;"> </span><span style="letter-spacing: -.1pt;">preference</span> <span style="letter-spacing: -.2pt;">of</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">routes</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.05pt;">being</span> <span style="letter-spacing: -.1pt;">advertised</span> <span style="letter-spacing: .05pt;">in</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">from</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">TDP.<o:p></o:p></span></span></div>
</div>
<span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt; line-height: 110%;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
<br />
<div class="WordSection3">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .25pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .25pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 10.0pt; margin-right: 0cm; margin-top: 3.45pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<b><span style="font-family: "arial" , sans-serif; font-size: 12.0pt; letter-spacing: -0.05pt;">Router</span></b><b><span style="font-family: "arial" , sans-serif; font-size: 12.0pt; letter-spacing: -0.1pt;"> </span></b><b><span style="font-family: "arial" , sans-serif; font-size: 12.0pt; letter-spacing: -0.05pt;">Interface</span></b><b><span style="font-family: "arial" , sans-serif; font-size: 12.0pt; letter-spacing: 0.05pt;"> </span></b><b><span style="font-family: "arial" , sans-serif; font-size: 12.0pt; letter-spacing: -0.05pt;">Summary</span></b><b><span style="font-family: "arial" , sans-serif; font-size: 12.0pt; letter-spacing: -0.2pt;"> </span></b><b><span style="font-family: "arial" , sans-serif; font-size: 12.0pt; letter-spacing: 0.05pt;">Table</span></b><span style="font-family: "arial" , sans-serif; font-size: 12.0pt;"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-left: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .5pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<table border="0" cellpadding="0" cellspacing="0" class="MsoNormalTable" style="border-collapse: collapse; margin-left: 45.95pt; mso-padding-alt: 0cm 0cm 0cm 0cm; mso-table-layout-alt: fixed;">
<tbody>
<tr style="height: 12.0pt; mso-height-rule: exactly; mso-yfti-firstrow: yes; mso-yfti-irow: 0;">
<td colspan="5" style="background: #DBE5F1; border: solid black 1.0pt; height: 12.0pt; mso-border-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 450.0pt;" valign="top" width="600"><div align="center" class="TableParagraph" style="line-height: 10.95pt; margin-right: .35pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: center;">
<b><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Router</span></b><b><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.25pt;">
</span></b><b><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Interface</span></b><b><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> <span style="letter-spacing: -.1pt;">Summary</span></span></b><o:p></o:p></div>
</td>
</tr>
<tr style="height: 27.35pt; mso-height-rule: exactly; mso-yfti-irow: 1;">
<td style="border-top: none; border: solid black 1.0pt; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 72.0pt;" valign="top" width="96"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">Router</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.1pt;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">Model</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.45pt;" valign="top" width="138"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Interface<o:p></o:p></span></div>
<div class="TableParagraph" style="margin-left: 4.95pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">#1</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.7pt;" valign="top" width="138"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 5.2pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Interface<o:p></o:p></span></div>
<div class="TableParagraph" style="margin-left: 5.2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">#2</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.4pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> <span style="letter-spacing: -.05pt;">Interface<o:p></o:p></span></span></div>
<div class="TableParagraph" style="margin-left: 4.95pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">#1</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.45pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> <span style="letter-spacing: -.05pt;">Interface<o:p></o:p></span></span></div>
<div class="TableParagraph" style="margin-left: 4.95pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">#2</span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 27.6pt; mso-height-rule: exactly; mso-yfti-irow: 2;">
<td style="border-top: none; border: solid black 1.0pt; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 72.0pt;" valign="top" width="96"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">1700</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.45pt;" valign="top" width="138"><div class="TableParagraph" style="line-height: 102%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 29.0pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt; line-height: 102%;">Fast</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt; line-height: 102%;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt; line-height: 102%;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt; line-height: 102%;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; line-height: 102%;">0<span style="letter-spacing: 1.2pt;"> </span><span style="letter-spacing: -.05pt;">(FA0)</span></span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.7pt;" valign="top" width="138"><div class="TableParagraph" style="line-height: 102%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 5.2pt; margin-right: 29.0pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt; line-height: 102%;">Fast</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt; line-height: 102%;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt; line-height: 102%;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt; line-height: 102%;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; line-height: 102%;">1<span style="letter-spacing: 1.2pt;"> </span><span style="letter-spacing: -.05pt;">(FA1)</span></span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.4pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> 0 <span style="letter-spacing: -.15pt;">(S0)</span></span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.45pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> 1 <span style="letter-spacing: -.15pt;">(S1)</span></span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 27.35pt; mso-height-rule: exactly; mso-yfti-irow: 3;">
<td style="border-top: none; border: solid black 1.0pt; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 72.0pt;" valign="top" width="96"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">1800</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.45pt;" valign="top" width="138"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 20.8pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">Fast</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">0/0</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 1.2pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">(FA0/0)</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.7pt;" valign="top" width="138"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 5.2pt; margin-right: 20.8pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">Fast</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">0/1</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 1.2pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">(FA0/1)</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.4pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 28.75pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> <span style="letter-spacing: -.05pt;">0/0/0</span><span style="letter-spacing: 1.4pt;">
</span><span style="letter-spacing: -.05pt;">(S0/0/0)</span></span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.35pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.45pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 28.75pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> <span style="letter-spacing: -.05pt;">0/0/1</span><span style="letter-spacing: 1.4pt;">
</span><span style="letter-spacing: -.05pt;">(S0/0/1)</span></span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 27.6pt; mso-height-rule: exactly; mso-yfti-irow: 4;">
<td style="border-top: none; border: solid black 1.0pt; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 72.0pt;" valign="top" width="96"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 2.1pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">2600</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.45pt;" valign="top" width="138"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 20.8pt; margin-top: 2.1pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">Fast</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">0/0</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 1.2pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">(FA0/0)</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.7pt;" valign="top" width="138"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 5.2pt; margin-right: 20.8pt; margin-top: 2.1pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">Fast</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">0/1</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 1.2pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">(FA0/1)</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.4pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 2.1pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> <span style="letter-spacing: -.05pt;">0/0</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">(S0/0)</span></span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.45pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 5.0pt; margin-right: 0cm; margin-top: 2.1pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> <span style="letter-spacing: -.05pt;">0/1</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">(S0/1)</span></span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 27.6pt; mso-height-rule: exactly; mso-yfti-irow: 5;">
<td style="border-top: none; border: solid black 1.0pt; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 72.0pt;" valign="top" width="96"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 0cm; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">2800</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.45pt;" valign="top" width="138"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 5.0pt; margin-right: 20.8pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">Fast</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">0/0</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 1.2pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">(FA0/0)</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 103.7pt;" valign="top" width="138"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 5.2pt; margin-right: 20.8pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">Fast</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Ethernet</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 0.15pt;"> </span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.1pt;">0/1</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: 1.2pt;">
</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">(FA0/1)</span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.4pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 5.0pt; margin-right: 28.75pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> <span style="letter-spacing: -.05pt;">0/0/0</span><span style="letter-spacing: 1.4pt;">
</span><span style="letter-spacing: -.05pt;">(S0/0/0)</span></span><o:p></o:p></div>
</td>
<td style="border-bottom: solid black 1.0pt; border-left: none; border-right: solid black 1.0pt; border-top: none; height: 27.6pt; mso-border-alt: solid black .5pt; mso-border-left-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 85.45pt;" valign="top" width="114"><div class="TableParagraph" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 5.0pt; margin-right: 28.75pt; margin-top: 1.85pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt;">Serial</span><span style="font-family: "arial" , sans-serif; font-size: 10.0pt;"> <span style="letter-spacing: -.05pt;">0/0/1</span><span style="letter-spacing: 1.4pt;">
</span><span style="letter-spacing: -.05pt;">(S0/0/1)</span></span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 73.45pt; mso-height-rule: exactly; mso-yfti-irow: 6; mso-yfti-lastrow: yes;">
<td colspan="5" style="border-top: none; border: solid black 1.0pt; height: 73.45pt; mso-border-alt: solid black .5pt; mso-border-top-alt: solid black .5pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 450.0pt;" valign="top" width="600"><div class="TableParagraph" style="line-height: 100%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 4.95pt; margin-right: 5.85pt; margin-top: 1.6pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<b><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.05pt; line-height: 100%;">Note:</span></b><b><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 10.0pt; letter-spacing: -0.15pt; line-height: 100%;"> </span></b><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 10.0pt; line-height: 100%;">To<span style="letter-spacing: -.25pt;"> </span>find <span style="letter-spacing: -.1pt;">out how</span><span style="letter-spacing: -.25pt;">
</span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: .05pt;">is</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">configured, </span><span style="letter-spacing: -.05pt;">look</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.2pt;">at</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">the</span> <span style="letter-spacing: -.05pt;">interfaces</span><span style="letter-spacing: -.15pt;"> </span>to<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">identify</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">type</span>
<span style="letter-spacing: -.2pt;">of</span><span style="letter-spacing: .15pt;">
</span><span style="letter-spacing: -.1pt;">router and</span><span style="letter-spacing: 4.75pt;"> </span>how<span style="letter-spacing: -.25pt;">
</span>many<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">interfaces</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: .1pt;">
</span><span style="letter-spacing: -.15pt;">has.</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">Rather</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">than</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">list</span><span style="letter-spacing: .15pt;"> </span>all <span style="letter-spacing: -.05pt;">combinations</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.2pt;">of</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">configurations</span><span style="letter-spacing: -.4pt;"> </span><span style="letter-spacing: .05pt;">for</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">each</span><span style="letter-spacing: 2.25pt;"> </span><span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.15pt;">class,</span><span style="letter-spacing: .15pt;"> </span>this<span style="letter-spacing: -.15pt;">
</span>table<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">includes</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">identifiers</span><span style="letter-spacing: -.4pt;"> </span><span style="letter-spacing: .05pt;">for</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">the</span>
<span style="letter-spacing: -.1pt;">possible</span> <span style="letter-spacing: -.1pt;">combinations</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">Ethernet</span><span style="letter-spacing: -.1pt;"> and</span> <span style="letter-spacing: -.1pt;">serial</span><span style="letter-spacing: 3.85pt;"> </span><span style="letter-spacing: -.05pt;">interfaces</span><span style="letter-spacing: -.4pt;"> </span><span style="letter-spacing: .05pt;">in</span>
<span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">device. </span><span style="letter-spacing: -.05pt;">The</span><span style="letter-spacing: -.25pt;"> </span>table <span style="letter-spacing: -.1pt;">does</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">not </span><span style="letter-spacing: -.05pt;">include</span> <span style="letter-spacing: -.1pt;">any</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">other</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">type</span><span style="letter-spacing: -.25pt;">
</span><span style="letter-spacing: -.2pt;">of</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">interface,</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">even</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">though</span>
a<span style="letter-spacing: 3.95pt;"> </span><span style="letter-spacing: -.05pt;">specific</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: -.2pt;">
</span><span style="letter-spacing: -.05pt;">might</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">contain</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">one.
</span><span style="letter-spacing: -.05pt;">For</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">example, </span><span style="letter-spacing: -.05pt;">for</span><span style="letter-spacing: .05pt;"> </span><span style="letter-spacing: -.05pt;">an</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">ISDN</span> <span style="letter-spacing: -.05pt;">BRI</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">interface,</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">the</span>
<span style="letter-spacing: -.05pt;">string</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: .05pt;">in</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">parenthesis</span><span style="letter-spacing: 4.55pt;"> </span><span style="letter-spacing: .05pt;">is</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">legal</span><span style="letter-spacing: .25pt;"> </span><span style="letter-spacing: -.1pt;">abbreviation</span>
<span style="letter-spacing: -.05pt;">that</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">can</span> <span style="letter-spacing: -.05pt;">be</span> <span style="letter-spacing: -.15pt;">used</span>
<span style="letter-spacing: .05pt;">in</span> <span style="letter-spacing: -.1pt;">Cisco</span> <span style="letter-spacing: -.05pt;">IOS</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">commands</span><span style="letter-spacing: -.15pt;"> </span>to <span style="letter-spacing: -.1pt;">represent</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">interface.</span></span><span lang="EN-US"><o:p></o:p></span></div>
</td>
</tr>
</tbody></table>
</div>
<span lang="EN-US" style="font-family: "times new roman" , serif; font-size: 12.0pt;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
<br />
<div class="WordSection4">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .25pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 10.0pt; margin-right: 0cm; margin-top: 3.45pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<b><span lang="EN-US" style="background: lightgrey; font-family: "arial" , sans-serif; font-size: 12.0pt;">Tcl <span style="letter-spacing: -.05pt;">Script</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">Verification</span></span></b><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 12pt;"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 112%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 10.15pt; margin-top: 8.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">The</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.1pt;">Tcl</span> <span style="letter-spacing: -.05pt;">script</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.15pt;">will</span>
<span style="letter-spacing: -.05pt;">fail</span> <span style="letter-spacing: -.05pt;">for</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">some</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">remote</span><span style="letter-spacing: -.25pt;">
</span>AS<span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">addresses</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">because</span> <span style="letter-spacing: -.05pt;">the</span>
<span style="letter-spacing: -.05pt;">pings</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">are</span> <span style="letter-spacing: -.05pt;">sourced</span> <span style="letter-spacing: -.05pt;">by</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">default</span><span style="letter-spacing: -.3pt;"> </span><span style="letter-spacing: -.05pt;">from</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: 3.35pt;"> </span><span style="letter-spacing: -.1pt;">closest</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">interface,</span><span style="letter-spacing: -.1pt;"> which</span> <span style="letter-spacing: -.05pt;">the</span>
<span style="letter-spacing: -.1pt;">end</span> <span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: -.4pt;"> </span><span style="letter-spacing: -.05pt;">might</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">not
have</span> a<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">route</span> <span style="letter-spacing: -.05pt;">back</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">to.</span><span style="letter-spacing: -.1pt;"> If</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">you</span> <span style="letter-spacing: -.15pt;">want</span><span style="letter-spacing: .15pt;"> </span>to <span style="letter-spacing: -.15pt;">see</span>
<span style="letter-spacing: -.05pt;">successful</span><span style="letter-spacing: .25pt;"> </span><span style="letter-spacing: -.1pt;">pings</span><span style="letter-spacing: -.15pt;"> </span>to a<span style="letter-spacing: 4.05pt;"> </span><span style="letter-spacing: -.05pt;">remote</span> AS<span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.1pt;">address,</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">you</span>
<span style="letter-spacing: -.1pt;">source</span> <span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.05pt;">ping</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">from</span><span style="letter-spacing: .3pt;"> </span>a<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">loopback</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.05pt;">interface</span> <span style="letter-spacing: -.1pt;">using</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <b><span style="letter-spacing: -.1pt;">source</span><span style="letter-spacing: -.15pt;"> </span></b><span style="letter-spacing: -.1pt;">argument</span><span style="letter-spacing: .15pt;"> </span>to<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">ping</span>
<span style="letter-spacing: -.1pt;">or</span><span style="letter-spacing: 4.35pt;">
</span><span style="letter-spacing: -.15pt;">use</span> <span style="letter-spacing: -.05pt;">an</span> <span style="letter-spacing: -.05pt;">extended</span> <span style="letter-spacing: -.05pt;">ping.</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 0cm; margin-top: 5.8pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">The</span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;"> <span style="letter-spacing: -.1pt;">syntax</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: .05pt;">for</span><span style="letter-spacing: .1pt;"> </span>a<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">ping</span>
<span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.25pt;"> </span>a <span style="letter-spacing: -.1pt;">source</span> <span style="letter-spacing: -.05pt;">argument</span><span style="letter-spacing: -.3pt;">
</span><span style="letter-spacing: .05pt;">is</span><span style="letter-spacing: -.15pt;"> </span><b><span style="letter-spacing: -.05pt;">ping</span><span style="letter-spacing: -.15pt;"> </span></b><i><span style="letter-spacing: -.1pt;">address</span><span style="letter-spacing: .05pt;"> </span></i><b><span style="letter-spacing: -.05pt;">source</span>
</b><i><span style="letter-spacing: -.1pt;">interface</span></i><span style="letter-spacing: -.1pt;">.<o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 114%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 16.0pt; margin-top: 7.7pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;">In <span style="letter-spacing: -.05pt;">addition</span><span style="letter-spacing: -.25pt;"> </span>to <span style="letter-spacing: -.1pt;">this, </span><span style="letter-spacing: -.05pt;">most</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">remote</span>
AS<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">physical</span>
<span style="letter-spacing: -.05pt;">interfaces</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">will</span><span style="letter-spacing: -.25pt;"> </span>fail <span style="letter-spacing: -.1pt;">because</span>
<span style="letter-spacing: -.05pt;">they</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">are</span> <span style="letter-spacing: -.1pt;">not</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.05pt;">being</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">advertised</span><span style="letter-spacing: -.25pt;">
</span><span style="letter-spacing: .1pt;">via</span> <span style="letter-spacing: -.05pt;">the</span><span style="letter-spacing: 2.95pt;"> </span><span style="letter-spacing: -.05pt;">local</span> <span style="letter-spacing: -.05pt;">EIGRP</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">process</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">or</span><span style="letter-spacing: .1pt;"> </span>BGP.<span style="letter-spacing: -.1pt;"> </span>This<span style="letter-spacing: -.4pt;"> </span><span style="letter-spacing: .05pt;">is</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">normal.<o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 112%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 16.0pt; margin-top: 5.8pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">The</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.25pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">following</span><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.25pt;"> </span><span lang="EN-US" style="font-family: "arial" , sans-serif; mso-ansi-language: EN-US;">Tcl <span style="letter-spacing: -.05pt;">scripts</span><span style="letter-spacing: -.15pt;"> were</span> <span style="letter-spacing: -.05pt;">run</span>
<span style="letter-spacing: -.05pt;">with</span> <span style="letter-spacing: -.05pt;">the</span> <span style="letter-spacing: -.1pt;">advertised</span> <span style="letter-spacing: -.1pt;">loopback</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.1pt;">source</span> <span style="letter-spacing: -.05pt;">interface</span>
<span style="letter-spacing: -.1pt;">specified. </span><span style="letter-spacing: -.05pt;">All</span> <span style="letter-spacing: -.05pt;">pings</span><span style="letter-spacing: -.15pt;"> </span>to <span style="letter-spacing: -.1pt;">all</span><span style="letter-spacing: 5.55pt;"> </span><span style="letter-spacing: -.1pt;">addresses</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.05pt;">are</span>
<span style="letter-spacing: -.05pt;">successful</span> <span style="letter-spacing: -.05pt;">for</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">routers</span><span style="letter-spacing: -.15pt;">
</span><span style="letter-spacing: -.1pt;">R1, R2,</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">and</span> <span style="letter-spacing: -.1pt;">R3. Router</span><span style="letter-spacing: .1pt;">
</span><span style="letter-spacing: -.05pt;">R4</span> <span style="letter-spacing: -.05pt;">pings</span><span style="letter-spacing: -.4pt;"> </span>fail to<span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">the</span>
AS<span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">65001</span>
<span style="letter-spacing: -.1pt;">internal</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: .1pt;">WAN</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.05pt;">link</span><span style="letter-spacing: 4.25pt;"> </span><span style="letter-spacing: -.05pt;">interface</span><span style="letter-spacing: -.25pt;"> </span><span style="letter-spacing: -.1pt;">addresses</span><span style="letter-spacing: -.15pt;"> </span><span style="letter-spacing: -.1pt;">because</span>
<span style="letter-spacing: -.05pt;">they</span><span style="letter-spacing: .1pt;"> </span><span style="letter-spacing: -.05pt;">are</span> <span style="letter-spacing: -.1pt;">not</span><span style="letter-spacing: .15pt;"> </span><span style="letter-spacing: -.1pt;">advertised.</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 4.7pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">tclsh</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .15pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 384.65pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">foreach</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">{<span style="letter-spacing: 1.15pt;">
</span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.2.2.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.1.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.2.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.3.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.3.3.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.4.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.8.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.12.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">}<span style="letter-spacing: -.1pt;">
</span>{<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ping</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">$address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">source</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback1}<o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .15pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 402.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R1#tclsh</span><span lang="EN-US" style="letter-spacing: 1.0pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R1(tcl)#</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R1(tcl)#foreach</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">{<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.1.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.2.2.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.1.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.2.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.3.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.3.3.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.4.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.8.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.12.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.102.1</span><span lang="EN-US"><o:p></o:p></span></div>
</div>
<span lang="EN-US" style="font-family: "courier new"; font-size: 10.0pt;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
<br />
<div class="WordSection5">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 4.05pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.102.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.103.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.103.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.203.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.203.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.14.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.14.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.34.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.34.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#}</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">{<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#ping</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">$address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">source</span><span lang="EN-US"> <span style="letter-spacing: -.05pt;">Loopback1}</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .45pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-left: 28.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Type</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">escape</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">sequence</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">abort.</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.1.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/1</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.2.2.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.0.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/33/56</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.1.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/28</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.2.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.3.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 99%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.3.3.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 99%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.0.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 99%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.4.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
</div>
<span style="font-size: x-small;"><span lang="EN-US" style="font-family: "courier new"; line-height: 101%;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
</span><br />
<div class="WordSection6">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 4.05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending 5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.8.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.12.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100 percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.0pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/28</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">40/42/44</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape
sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.1.1.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;"><span style="font-size: x-small;">!!!!!</span></span><span lang="EN-US"><o:p></o:p></span></div>
</div>
<span lang="EN-US" style="font-family: "courier new"; font-size: 10.0pt;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
<br />
<div class="WordSection7">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 10.35pt; margin-top: 4.05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">12/15/16</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">R1(tcl)#tclquit</span><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .15pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 398.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R2#tclsh</span><span lang="EN-US" style="letter-spacing: 1.0pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R2(tcl)#</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R2(tcl)#foreach</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">{<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.1.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.2.2.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.1.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.2.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.3.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.3.3.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.4.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.8.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.12.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.102.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.102.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.103.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.103.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.203.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.203.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.14.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.14.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.34.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.34.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#}</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">{<o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#ping</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">$address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">source</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback2}</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .45pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Type</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">escape</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">sequence</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">abort.</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.1.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100 percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.0pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 97.0pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.2.2.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.0.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence
to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.1.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.2.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/1</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.3.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
</div>
<span style="font-size: x-small;"><span lang="EN-US" style="font-family: "courier new"; line-height: 101%;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
</span><br />
<div class="WordSection8">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 4.05pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.3.3.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.0.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.4.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.8.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.12.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/31/36</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.05pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 99%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 99%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/28</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 99%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
</div>
<span style="font-size: x-small;"><span lang="EN-US" style="font-family: "courier new"; line-height: 101%;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
</span><br />
<div class="WordSection9">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 4.05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/29/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.<o:p></o:p></span></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.2.2.2</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 10.35pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span></span><span lang="EN-US"><span style="font-size: x-small;">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">R2(tcl)#tclquit</span></span><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .45pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 398.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R3#tclsh</span><span lang="EN-US" style="letter-spacing: 1.0pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R3(tcl)#</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R3(tcl)#foreach</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">{<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.1.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.2.2.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.1.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.2.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.3.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.3.3.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.4.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.8.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.12.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.102.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.102.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.103.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.103.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.203.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.203.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.14.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.14.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.34.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.34.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#}</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">{<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#ping</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">$address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">source</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback3}</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .15pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Type</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">escape</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">sequence</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">abort.</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.1.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.2.2.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><o:p></o:p></span></span></div>
</div>
<span style="font-size: x-small;"><span lang="EN-US" style="font-family: "courier new";"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
</span><br />
<div class="WordSection10">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 4.05pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Type</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">escape</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">sequence</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">abort.</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.0.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.1.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.2.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.3.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 97.0pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.3.3.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.0.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.4.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.8.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.12.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip
min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">40/42/44</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type
escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
</div>
<span style="font-size: x-small;"><span lang="EN-US" style="font-family: "courier new"; line-height: 101%;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
</span><br />
<div class="WordSection11">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 4.05pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/28</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/28</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/33/52</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/28</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.3.3.3</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 201%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 10.6pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span></span><span lang="EN-US"><span style="font-size: x-small;">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">12/15/16</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">R3(tcl)#tclquit</span></span><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 99%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 392.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R4#tclsh</span><span lang="EN-US" style="letter-spacing: 1.0pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R4(tcl)#</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R4(tcl)#foreach</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">{<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.1.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.2.2.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.1.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.2.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.20.3.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.3.3.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.0.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.4.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.8.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#172.16.12.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.102.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.102.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: 0cm; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.103.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.103.3</span><span lang="EN-US"><o:p></o:p></span></div>
</div>
<span lang="EN-US" style="font-family: "courier new"; font-size: 10.0pt;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
<br />
<div class="WordSection12">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 4.05pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.203.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#10.1.203.3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.14.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.14.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.34.1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#192.168.34.2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#}</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">{<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">+>(tcl)#ping</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">$address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">source</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback0}</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .15pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Type</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">escape</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">sequence</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">abort.</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.1.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.2.2.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/28</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.0.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.1.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.2.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/28/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.3.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/29/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.0pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 96.9pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.3.3.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 59.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">28/29/32</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.0.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.4.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 77.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 3.0cm; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.8.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 9.1pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
</div>
<span style="font-size: x-small;"><span lang="EN-US" style="font-family: "courier new";"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
</span><br />
<div class="WordSection13">
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 4.05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.12.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<!--[if gte vml 1]><v:group id="Group_x0020_1"
o:spid="_x0000_s2050" style='position:absolute;left:0;text-align:left;
margin-left:1in;margin-top:22.45pt;width:402pt;height:328.6pt;z-index:-251656192;
mso-position-horizontal-relative:page' coordorigin="1440,449" coordsize="8040,6572"
o:gfxdata="UEsDBBQABgAIAAAAIQC75UiUBQEAAB4CAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbKSRvU7DMBSF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" o:allowincell="f">
<v:shape id="Freeform_x0020_68" o:spid="_x0000_s2051" style='position:absolute;
left:1440;top:449;width:8040;height:231;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="8040,231" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,230r8040,l8040,,,,,230xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,230;8040,230;8040,0;0,0;0,230"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_69" o:spid="_x0000_s2052" style='position:absolute;
left:1440;top:680;width:5640;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="5640,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r5640,l5640,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;5640,225;5640,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_70" o:spid="_x0000_s2053" style='position:absolute;
left:1440;top:905;width:600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r600,l600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;600,225;600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_71" o:spid="_x0000_s2054" style='position:absolute;
left:1440;top:1131;width:3720;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3720,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3720,l3720,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3720,225;3720,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_72" o:spid="_x0000_s2055" style='position:absolute;
left:1440;top:1356;width:3600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3600,l3600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3600,225;3600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_73" o:spid="_x0000_s2056" style='position:absolute;
left:1440;top:1582;width:8040;height:231;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="8040,231" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,230r8040,l8040,,,,,230xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,230;8040,230;8040,0;0,0;0,230"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_74" o:spid="_x0000_s2057" style='position:absolute;
left:1440;top:1812;width:5640;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="5640,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r5640,l5640,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;5640,225;5640,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_75" o:spid="_x0000_s2058" style='position:absolute;
left:1440;top:2038;width:600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r600,l600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;600,225;600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_76" o:spid="_x0000_s2059" style='position:absolute;
left:1440;top:2264;width:3720;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3720,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3720,l3720,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3720,225;3720,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_77" o:spid="_x0000_s2060" style='position:absolute;
left:1440;top:2489;width:3600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3600,l3600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3600,225;3600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_78" o:spid="_x0000_s2061" style='position:absolute;
left:1440;top:2715;width:8040;height:231;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="8040,231" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,230r8040,l8040,,,,,230xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,230;8040,230;8040,0;0,0;0,230"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_79" o:spid="_x0000_s2062" style='position:absolute;
left:1440;top:2945;width:5760;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="5760,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r5760,l5760,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;5760,225;5760,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_80" o:spid="_x0000_s2063" style='position:absolute;
left:1440;top:3171;width:600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r600,l600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;600,225;600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_81" o:spid="_x0000_s2064" style='position:absolute;
left:1440;top:3396;width:3720;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3720,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH
74LvEOYqbaoHEWm6B6tHFV0fYEimbdg2CZlYd9/edD8u4goeZ+b/8SOpV9tpFDNFtt4puC4rEOS0
N9b1Cj7WT8UdCE7oDI7ekYIdMayay4t6vQvEIrsdKxhSCvdSsh5oQi59IJcvnY8TpjzGXgbUG+xJ
3lTVrdTeJXKpSEsGNHVLHX6OSTxu8/pAEmlkEA8H4dKlAEMYrcaUSeXszI+W4thQZudew4MNfJUx
QP7asFzOFxx9L/lpojUkXjGmZ5wyhjSRJQ8YKGvKv1MWzIkL33VWU9lGfl98J6hz4cZ/uUjzf7Pb
bHuj+ZQu9z/UfAMAAP//AwBQSwMEFAAGAAgAAAAhADHdX2HSAAAAjwEAAAsAAABfcmVscy8ucmVs
c6SQwWrDMAyG74O9g9G9cdpDGaNOb4VeSwe7CltJTGPLWCZt376mMFhGbzvqF/o+8e/2tzCpmbJ4
jgbWTQuKomXn42Dg63xYfYCSgtHhxJEM3Elg372/7U40YalHMvokqlKiGBhLSZ9aix0poDScKNZN
zzlgqWMedEJ7wYH0pm23Ov9mQLdgqqMzkI9uA+p8T9X8hx28zSzcl8Zy0Nz33r6iasfXeKK5UjAP
VAy4LM8w09zU50C/9q7/6ZURE31X/kL8TKv1x6wXNXYPAAAA//8DAFBLAwQUAAYACAAAACEAMy8F
nkEAAAA5AAAAEAAAAGRycy9zaGFwZXhtbC54bWyysa/IzVEoSy0qzszPs1Uy1DNQUkjNS85PycxL
t1UKDXHTtVBSKC5JzEtJzMnPS7VVqkwtVrK34+UCAAAA//8DAFBLAwQUAAYACAAAACEAoaO1wcQA
AADbAAAADwAAAGRycy9kb3ducmV2LnhtbESPS4vCQBCE74L/YWjBm05cjIToKOIDFnYPPsFjk2mT
YKYnm5nV7L/fEQRv3VR1fdWzRWsqcafGlZYVjIYRCOLM6pJzBafjdpCAcB5ZY2WZFPyRg8W825lh
qu2D93Q/+FyEEHYpKii8r1MpXVaQQTe0NXHQrrYx6MPa5FI3+AjhppIfUTSRBksOhAJrWhWU3Q6/
JkB2cX37Pn+5n9gfNzqpLkm8HivV77XLKQhPrX+bX9efOtSP4flLGEDO/wEAAP//AwBQSwECLQAU
AAYACAAAACEA8PeKu/0AAADiAQAAEwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnht
bFBLAQItABQABgAIAAAAIQAx3V9h0gAAAI8BAAALAAAAAAAAAAAAAAAAAC4BAABfcmVscy8ucmVs
c1BLAQItABQABgAIAAAAIQAzLwWeQQAAADkAAAAQAAAAAAAAAAAAAAAAACkCAABkcnMvc2hhcGV4
bWwueG1sUEsBAi0AFAAGAAgAAAAhAKGjtcHEAAAA2wAAAA8AAAAAAAAAAAAAAAAAmAIAAGRycy9k
b3ducmV2LnhtbFBLBQYAAAAABAAEAPUAAACJAwAAAAA=
" path="m,225r3720,l3720,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3720,225;3720,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_82" o:spid="_x0000_s2065" style='position:absolute;
left:1440;top:3622;width:3600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3600,l3600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3600,225;3600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_83" o:spid="_x0000_s2066" style='position:absolute;
left:1440;top:3848;width:8040;height:231;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="8040,231" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,230r8040,l8040,,,,,230xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,230;8040,230;8040,0;0,0;0,230"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_84" o:spid="_x0000_s2067" style='position:absolute;
left:1440;top:4078;width:5640;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="5640,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r5640,l5640,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;5640,225;5640,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_85" o:spid="_x0000_s2068" style='position:absolute;
left:1440;top:4304;width:600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r600,l600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;600,225;600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_86" o:spid="_x0000_s2069" style='position:absolute;
left:1440;top:4529;width:3720;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3720,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3720,l3720,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3720,225;3720,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_87" o:spid="_x0000_s2070" style='position:absolute;
left:1440;top:4755;width:3600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3600,l3600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3600,225;3600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_88" o:spid="_x0000_s2071" style='position:absolute;
left:1440;top:4980;width:8040;height:231;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="8040,231" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH
74LvEOYqbaoHEWm6B6tHFV0fYEimbdg2CZlYd9/edD8u4goeZ+b/8SOpV9tpFDNFtt4puC4rEOS0
N9b1Cj7WT8UdCE7oDI7ekYIdMayay4t6vQvEIrsdKxhSCvdSsh5oQi59IJcvnY8TpjzGXgbUG+xJ
3lTVrdTeJXKpSEsGNHVLHX6OSTxu8/pAEmlkEA8H4dKlAEMYrcaUSeXszI+W4thQZudew4MNfJUx
QP7asFzOFxx9L/lpojUkXjGmZ5wyhjSRJQ8YKGvKv1MWzIkL33VWU9lGfl98J6hz4cZ/uUjzf7Pb
bHuj+ZQu9z/UfAMAAP//AwBQSwMEFAAGAAgAAAAhADHdX2HSAAAAjwEAAAsAAABfcmVscy8ucmVs
c6SQwWrDMAyG74O9g9G9cdpDGaNOb4VeSwe7CltJTGPLWCZt376mMFhGbzvqF/o+8e/2tzCpmbJ4
jgbWTQuKomXn42Dg63xYfYCSgtHhxJEM3Elg372/7U40YalHMvokqlKiGBhLSZ9aix0poDScKNZN
zzlgqWMedEJ7wYH0pm23Ov9mQLdgqqMzkI9uA+p8T9X8hx28zSzcl8Zy0Nz33r6iasfXeKK5UjAP
VAy4LM8w09zU50C/9q7/6ZURE31X/kL8TKv1x6wXNXYPAAAA//8DAFBLAwQUAAYACAAAACEAMy8F
nkEAAAA5AAAAEAAAAGRycy9zaGFwZXhtbC54bWyysa/IzVEoSy0qzszPs1Uy1DNQUkjNS85PycxL
t1UKDXHTtVBSKC5JzEtJzMnPS7VVqkwtVrK34+UCAAAA//8DAFBLAwQUAAYACAAAACEAde79xsIA
AADbAAAADwAAAGRycy9kb3ducmV2LnhtbESPT4vCMBTE74LfITxhL6KpZRGtRhGXwq7gwT/g9dE8
m2LzUpqsdr/9RhA8DjPzG2a57mwt7tT6yrGCyTgBQVw4XXGp4HzKRzMQPiBrrB2Tgj/ysF71e0vM
tHvwge7HUIoIYZ+hAhNCk0npC0MW/dg1xNG7utZiiLItpW7xEeG2lmmSTKXFiuOCwYa2horb8dcq
uOXEdKkudm++6m7+mQzznx0p9THoNgsQgbrwDr/a31pBmsLzS/wBcvUPAAD//wMAUEsBAi0AFAAG
AAgAAAAhAPD3irv9AAAA4gEAABMAAAAAAAAAAAAAAAAAAAAAAFtDb250ZW50X1R5cGVzXS54bWxQ
SwECLQAUAAYACAAAACEAMd1fYdIAAACPAQAACwAAAAAAAAAAAAAAAAAuAQAAX3JlbHMvLnJlbHNQ
SwECLQAUAAYACAAAACEAMy8FnkEAAAA5AAAAEAAAAAAAAAAAAAAAAAApAgAAZHJzL3NoYXBleG1s
LnhtbFBLAQItABQABgAIAAAAIQB17v3GwgAAANsAAAAPAAAAAAAAAAAAAAAAAJgCAABkcnMvZG93
bnJldi54bWxQSwUGAAAAAAQABAD1AAAAhwMAAAAA
" path="m,230r8040,l8040,,,,,230xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,230;8040,230;8040,0;0,0;0,230"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_89" o:spid="_x0000_s2072" style='position:absolute;
left:1440;top:5211;width:5640;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="5640,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r5640,l5640,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;5640,225;5640,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_90" o:spid="_x0000_s2073" style='position:absolute;
left:1440;top:5436;width:600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r600,l600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;600,225;600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_91" o:spid="_x0000_s2074" style='position:absolute;
left:1440;top:5662;width:3720;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3720,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3720,l3720,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3720,225;3720,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_92" o:spid="_x0000_s2075" style='position:absolute;
left:1440;top:5888;width:3600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3600,l3600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3600,225;3600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_93" o:spid="_x0000_s2076" style='position:absolute;
left:1440;top:6113;width:8040;height:231;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="8040,231" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,230r8040,l8040,,,,,230xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,230;8040,230;8040,0;0,0;0,230"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_94" o:spid="_x0000_s2077" style='position:absolute;
left:1440;top:6344;width:5640;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="5640,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r5640,l5640,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;5640,225;5640,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_95" o:spid="_x0000_s2078" style='position:absolute;
left:1440;top:6569;width:600;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="600,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r600,l600,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;600,225;600,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><v:shape id="Freeform_x0020_96" o:spid="_x0000_s2079" style='position:absolute;
left:1440;top:6795;width:3720;height:226;visibility:visible;mso-wrap-style:square;
v-text-anchor:top' coordsize="3720,226" o:gfxdata="UEsDBBQABgAIAAAAIQDw94q7/QAAAOIBAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbJSRzUrEMBDH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" path="m,225r3720,l3720,,,,,225xe" fillcolor="yellow" stroked="f">
<v:path arrowok="t" o:connecttype="custom" o:connectlocs="0,225;3720,225;3720,0;0,0;0,225"
o:connectangles="0,0,0,0,0"/>
</v:shape><w:wrap anchorx="page"/>
</v:group><![endif]--><!--[if !vml]--><span style="height: 438px; left: 0px; margin-left: 96px; margin-top: 30px; mso-ignore: vglayout; position: absolute; width: 536px; z-index: -1895823360;"><span style="font-size: x-small;"><img height="438" src="file:///C:/Users/ADMINI~1/AppData/Local/Temp/1/msohtmlclip1/01/clip_image001.png" v:shapes="Group_x0020_1 Freeform_x0020_68 Freeform_x0020_69 Freeform_x0020_70 Freeform_x0020_71 Freeform_x0020_72 Freeform_x0020_73 Freeform_x0020_74 Freeform_x0020_75 Freeform_x0020_76 Freeform_x0020_77 Freeform_x0020_78 Freeform_x0020_79 Freeform_x0020_80 Freeform_x0020_81 Freeform_x0020_82 Freeform_x0020_83 Freeform_x0020_84 Freeform_x0020_85 Freeform_x0020_86 Freeform_x0020_87 Freeform_x0020_88 Freeform_x0020_89 Freeform_x0020_90 Freeform_x0020_91 Freeform_x0020_92 Freeform_x0020_93 Freeform_x0020_94 Freeform_x0020_95 Freeform_x0020_96" width="536" /></span></span><!--[endif]--><span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/1</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">.....</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">0<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">percent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">(0/5)</span><span style="letter-spacing: 1.2pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">.....</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">0<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">percent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">(0/5)</span><span style="letter-spacing: 1.2pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">.....</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">0<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">percent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">(0/5)</span><span style="letter-spacing: 1.2pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">.....</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">0<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">percent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">(0/5)</span><span style="letter-spacing: 1.2pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">.....</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">0<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">percent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">(0/5)</span><span style="letter-spacing: 1.2pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.3,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">.....</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">0<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">percent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">(0/5)</span><span style="letter-spacing: 1.2pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape
sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 77.45pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/1/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.1,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">16/16/16</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">Type</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">escape</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sequence</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">to</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">abort.</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 55.2pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Sending</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">5,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100-byte</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ICMP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Echos</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">to</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.2,</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">timeout</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US">2<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">seconds:</span><span style="letter-spacing: 1.45pt;"> </span><span style="letter-spacing: -.05pt;">Packet</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">sent</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">with</span><span style="letter-spacing: -.1pt;"> </span>a<span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">source</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">address</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">of</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.1</span><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">!!!!!</span><span lang="EN-US"><o:p></o:p></span></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 10.35pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-size: x-small;"><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Success</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">is</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">percent</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">(5/5),</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">round-trip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">min/avg/max</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span></span><span lang="EN-US"><span style="font-size: x-small;">=<span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">1/2/4</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">ms</span><span style="letter-spacing: 1.1pt;"> </span><span style="letter-spacing: -.05pt;">R4(tcl)#tclquit</span></span><o:p></o:p></span></div>
</div>
<span lang="EN-US" style="font-family: "courier new"; font-size: 10.0pt;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
<br />
<div class="WordSection14">
<div class="MsoBodyText" style="margin-left: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .3pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<h2>
<span lang="EN-US" style="background: lightgrey; letter-spacing: -.05pt; mso-ansi-language: EN-US; mso-highlight: lightgrey;">Device</span><span lang="EN-US" style="background: lightgrey; mso-ansi-language: EN-US; mso-highlight: lightgrey;"> <span style="letter-spacing: -.05pt;">Configurations</span><span style="letter-spacing: .05pt;"> </span></span><span lang="EN-US" style="font-weight: normal;"><o:p></o:p></span></h2>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-left: 10.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<b><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">Router</span></b><b><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.1pt;"> </span></b><b><span lang="EN-US" style="font-family: "arial" , sans-serif; letter-spacing: -0.05pt;">R1</span></b><span lang="EN-US" style="font-family: "arial" , sans-serif; font-size: 12.0pt;"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 6.4pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">hostname</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.1.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">FastEthernet0/0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.252</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">shutdown</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Serial0/0/0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.248</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">clock</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64000</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 398.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">bandwidth</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64</span><span lang="EN-US" style="letter-spacing: 1.05pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">shutdown</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Serial0/0/1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.248</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 398.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">bandwidth</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64</span><span lang="EN-US" style="letter-spacing: 1.05pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">shutdown</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">router</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">eigrp</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">network</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.0.0.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">network</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 282.95pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">passive-interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">FastEthernet0/0</span><span lang="EN-US" style="letter-spacing: 1.05pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">auto-summary</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">router</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">bgp</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">synchronization</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">network</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.1.0</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">mask</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.3</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">remote-as</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 236.15pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.2.2.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">remote-as</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US" style="letter-spacing: 1.2pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.2.2.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">update-source</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback1</span><span lang="EN-US" style="letter-spacing: 1.2pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">remote-as</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65002</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 204.9pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">route-map</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">IN-FROM-TDP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">in</span><span lang="EN-US" style="letter-spacing: 1.25pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">route-map</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">OUT-TO-TDP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">out</span><span lang="EN-US" style="letter-spacing: 1.25pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">auto-summary</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 27.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple; text-indent: -6.0pt;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">route-map</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">OUT-TO-TDP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">permit</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10</span><span lang="EN-US" style="letter-spacing: 1.15pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">set</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">metric</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 27.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple; text-indent: -6.0pt;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">route-map</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">IN-FROM-TDP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">permit</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10</span><span lang="EN-US" style="letter-spacing: 1.15pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">set</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">local-preference</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">200</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 10.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-indent: 17.95pt;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">end</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .35pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<h2>
<span style="font-size: small;"><span lang="EN-US" style="letter-spacing: -0.05pt;">Router</span><span lang="EN-US" style="letter-spacing: -0.1pt;"> </span><span lang="EN-US" style="letter-spacing: -0.05pt;">R2</span></span><span lang="EN-US" style="font-weight: normal; mso-ansi-language: EN-US;"><o:p></o:p></span></h2>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 6.4pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">hostname</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback2</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.2.2.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback200</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.0.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.0<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: 4.05pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">
!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback201</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.1.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback202</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.2.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback203</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.3.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Serial0/0/0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.102.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.248</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 398.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">bandwidth</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64</span><span lang="EN-US" style="letter-spacing: 1.05pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">shutdown</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -0.05pt;">interface</span><span lang="EN-US" style="letter-spacing: -0.1pt;"> </span><span lang="EN-US" style="letter-spacing: -0.05pt;">Serial0/0/1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .55pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<table border="0" cellpadding="0" cellspacing="0" class="MsoNormalTable" style="border-collapse: collapse; margin-left: 31.25pt; mso-padding-alt: 0cm 0cm 0cm 0cm; mso-table-layout-alt: fixed;">
<tbody>
<tr style="height: 21.3pt; mso-height-rule: exactly; mso-yfti-firstrow: yes; mso-yfti-irow: 0;">
<td style="height: 21.3pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 131.7pt;" valign="top" width="176"><div class="TableParagraph" style="line-height: 9.6pt; margin-left: 2.75pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">ip</span><span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.1pt;"> </span><span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">address</span><span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.1pt;"> </span><span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">10.1.203.2</span><span style="font-family: "courier new"; font-size: 10.0pt;"><o:p></o:p></span></div>
<div class="TableParagraph" style="line-height: 11.3pt; margin-left: 2.75pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">clock</span><span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.1pt;"> </span><span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">rate</span><span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.1pt;"> </span><span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">64000</span><o:p></o:p></div>
</td>
<td style="height: 21.3pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 95.7pt;" valign="top" width="128"><div class="TableParagraph" style="line-height: 9.6pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">255.255.255.248</span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 21.3pt; mso-height-rule: exactly; mso-yfti-irow: 1; mso-yfti-lastrow: yes;">
<td style="height: 21.3pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 131.7pt;" valign="top" width="176"><div class="TableParagraph" style="line-height: 99%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 2.75pt; margin-right: 56.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10pt; letter-spacing: -0.05pt; line-height: 99%;">bandwidth</span><span style="font-family: "courier new"; font-size: 10pt; letter-spacing: -0.1pt; line-height: 99%;"> </span><span style="font-family: "courier new"; font-size: 10pt; letter-spacing: -0.05pt; line-height: 99%;">64</span><span style="font-family: "courier new"; font-size: 10pt; letter-spacing: 1.05pt; line-height: 99%;"> </span><span style="font-family: "courier new"; font-size: 10pt; letter-spacing: -0.05pt; line-height: 99%;">no</span><span style="font-family: "courier new"; font-size: 10pt; letter-spacing: -0.1pt; line-height: 99%;"> </span><span style="font-family: "courier new"; font-size: 10pt; letter-spacing: -0.05pt; line-height: 99%;">shutdown</span><o:p></o:p></div>
</td>
<td style="height: 21.3pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 95.7pt;" valign="top" width="128"><div class="MsoNormal">
<br /></div>
</td>
</tr>
</tbody></table>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 1.05pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
!<o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">eigrp</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">65001</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 380.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">network</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">10.0.0.0</span><span style="letter-spacing: 1.05pt;"> </span><span style="letter-spacing: -.05pt;">no</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">auto-summary</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
!<o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">bgp</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">65001</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">no</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">synchronization</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">network</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">10.2.2.0</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">mask</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">255.255.255.0</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">network</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">10.20.0.0</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">mask</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">255.255.252.0</span><o:p></o:p></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 236.15pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.1.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">remote-as</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US" style="letter-spacing: 1.2pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.1.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">update-source</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback2</span><span lang="EN-US" style="letter-spacing: 1.2pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.3</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">remote-as</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">auto-summary</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 27.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">route</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.20.0.0</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.252.0</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Null0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 10.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-indent: 17.95pt;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">end</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .1pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
</div>
<div class="WordSection15">
<h2 style="margin: 0cm 438.15pt 0.0001pt 0.55pt; text-align: left;">
<span lang="EN-US" style="font-size: small; letter-spacing: -0.05pt;"><br /></span></h2>
<h2 style="margin: 0cm 438.15pt 0.0001pt 0.55pt; text-align: left;">
<span lang="EN-US" style="font-size: small; letter-spacing: -0.05pt;">Router</span><span lang="EN-US" style="font-size: small; letter-spacing: -0.05pt;">R3</span></h2>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 6.65pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">hostname</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback3</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.3.3.3</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Serial0/0/0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.3</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.248</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">clock</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64000</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 398.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">bandwidth</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64</span><span lang="EN-US" style="letter-spacing: 1.05pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">shutdown</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Serial0/0/1</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.3</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.248</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 101%; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 398.7pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">bandwidth</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64</span><span lang="EN-US" style="letter-spacing: 1.05pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">shutdown</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.05pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Serial0/1/0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.252</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">clock</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">rate</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64000</span><span lang="EN-US"><o:p></o:p></span></div>
<div align="center" class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 398.7pt; margin-top: 4.05pt; mso-line-break-override: restrictions; punctuation-wrap: simple; text-align: center;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;"> bandwidth</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64</span><span lang="EN-US" style="letter-spacing: 1.05pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">shutdown</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">router</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">eigrp</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">network</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.0.0.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">network</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 306.95pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">passive-interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Serial0/1/0</span><span lang="EN-US" style="letter-spacing: 1.05pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">auto-summary</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">router</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">bgp</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">synchronization</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">network</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.3.3.0</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">mask</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.103.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">remote-as</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10.1.203.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">remote-as</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">remote-as</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65002</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 204.9pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">route-map</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">IN-FROM-TDP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">in</span><span lang="EN-US" style="letter-spacing: 1.25pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">route-map</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">OUT-TO-TDP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">out</span><span lang="EN-US" style="letter-spacing: 1.25pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">auto-summary</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 27.95pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple; text-indent: -6.0pt;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">route-map</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">OUT-TO-TDP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">permit</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10</span><span lang="EN-US" style="letter-spacing: 1.15pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">set</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">metric</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">20<o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 294.85pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple; text-indent: -6.0pt;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">route-map</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">IN-FROM-TDP</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">permit</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">10</span><span lang="EN-US" style="letter-spacing: 1.15pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">set</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">local-preference</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">100</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .15pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-left: 10.0pt; mso-line-break-override: restrictions; punctuation-wrap: simple; text-indent: 17.95pt;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">end</span><span lang="EN-US"><o:p></o:p></span></div>
</div>
<span lang="EN-US" style="font-family: "courier new"; font-size: 10.0pt;"><br clear="all" style="mso-break-type: section-break; page-break-before: always;" />
</span>
<br />
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .1pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<b><span lang="EN-US"> </span><span lang="EN-US" style="letter-spacing: -0.05pt; text-align: center;">Router</span><span lang="EN-US" style="letter-spacing: -0.1pt; text-align: center;"> </span><span lang="EN-US" style="letter-spacing: -0.05pt; text-align: center;">R4</span></b></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 6.65pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">hostname</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">R4</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.0.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.252.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback4</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.4.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.252.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback8</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.8.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.252.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Loopback12</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">172.16.12.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.252.0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">FastEthernet0/0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.14.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.252</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">shutdown</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">interface</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">Serial0/0/0</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple; text-align: justify;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">ip</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">address</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.2</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">255.255.255.252</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 398.7pt; margin-top: .2pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">bandwidth</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">64</span><span lang="EN-US" style="letter-spacing: 1.05pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">shutdown</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.25pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span lang="EN-US">!<o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">eigrp</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">65002</span><o:p></o:p></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .55pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<table border="0" cellpadding="0" cellspacing="0" class="MsoNormalTable" style="border-collapse: collapse; margin-left: 31.25pt; mso-padding-alt: 0cm 0cm 0cm 0cm; mso-table-layout-alt: fixed;">
<tbody>
<tr style="height: 10.0pt; mso-height-rule: exactly; mso-yfti-firstrow: yes; mso-yfti-irow: 0;">
<td style="height: 10.0pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 47.75pt;" valign="top" width="64"><div class="TableParagraph" style="line-height: 9.6pt; margin-left: 2.75pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">network</span><o:p></o:p></div>
</td>
<td style="height: 10.0pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 77.7pt;" valign="top" width="104"><div class="TableParagraph" style="line-height: 9.6pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">172.16.0.0</span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 11.4pt; mso-height-rule: exactly; mso-yfti-irow: 1;">
<td style="height: 11.4pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 47.75pt;" valign="top" width="64"><div class="TableParagraph" style="line-height: 11.15pt; margin-left: 2.75pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">network</span><o:p></o:p></div>
</td>
<td style="height: 11.4pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 77.7pt;" valign="top" width="104"><div class="TableParagraph" style="line-height: 11.15pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">192.168.14.0</span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 9.9pt; mso-height-rule: exactly; mso-yfti-irow: 2; mso-yfti-lastrow: yes;">
<td style="height: 9.9pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 47.75pt;" valign="top" width="64"><div class="TableParagraph" style="line-height: 9.9pt; margin-left: 2.75pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">network</span><o:p></o:p></div>
</td>
<td style="height: 9.9pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 77.7pt;" valign="top" width="104"><div class="TableParagraph" style="line-height: 9.9pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">192.168.34.0</span><o:p></o:p></div>
</td>
</tr>
</tbody></table>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 282.95pt; margin-top: 1.05pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">passive-interface</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">FastEthernet0/0</span><span style="letter-spacing: 1.05pt;"> </span><span style="letter-spacing: -.05pt;">passive-interface</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">Serial0/0/0</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">no</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">auto-summary</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 28.0pt; margin-right: 0cm; margin-top: 4.05pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
!<o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">router</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">bgp</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">65002</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">no</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">synchronization</span><o:p></o:p></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 0cm; margin-right: 0cm; margin-top: .55pt; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<br /></div>
<table border="0" cellpadding="0" cellspacing="0" class="MsoNormalTable" style="border-collapse: collapse; margin-left: 31.25pt; mso-padding-alt: 0cm 0cm 0cm 0cm; mso-table-layout-alt: fixed;">
<tbody>
<tr style="height: 10.1pt; mso-height-rule: exactly; mso-yfti-firstrow: yes; mso-yfti-irow: 0;">
<td style="height: 10.1pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 47.75pt;" valign="top" width="64"><div class="TableParagraph" style="line-height: 9.85pt; margin-left: 2.75pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">network</span><o:p></o:p></div>
</td>
<td style="height: 10.1pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 65.95pt;" valign="top" width="88"><div class="TableParagraph" style="line-height: 9.85pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">172.16.0.0</span><o:p></o:p></div>
</td>
<td style="height: 10.1pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 30.0pt;" valign="top" width="40"><div class="TableParagraph" style="line-height: 9.85pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">mask</span><o:p></o:p></div>
</td>
<td style="height: 10.1pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 83.7pt;" valign="top" width="112"><div class="TableParagraph" style="line-height: 9.85pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">255.255.252.0</span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 11.3pt; mso-height-rule: exactly; mso-yfti-irow: 1;">
<td style="height: 11.3pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 47.75pt;" valign="top" width="64"><div class="TableParagraph" style="line-height: 11.0pt; margin-left: 2.75pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">network</span><o:p></o:p></div>
</td>
<td style="height: 11.3pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 65.95pt;" valign="top" width="88"><div class="TableParagraph" style="line-height: 11.0pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">172.16.4.0</span><o:p></o:p></div>
</td>
<td style="height: 11.3pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 30.0pt;" valign="top" width="40"><div class="TableParagraph" style="line-height: 11.0pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">mask</span><o:p></o:p></div>
</td>
<td style="height: 11.3pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 83.7pt;" valign="top" width="112"><div class="TableParagraph" style="line-height: 11.0pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">255.255.252.0</span><o:p></o:p></div>
</td>
</tr>
<tr style="height: 9.9pt; mso-height-rule: exactly; mso-yfti-irow: 2; mso-yfti-lastrow: yes;">
<td style="height: 9.9pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 47.75pt;" valign="top" width="64"><div class="TableParagraph" style="line-height: 9.9pt; margin-left: 2.75pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">network</span><o:p></o:p></div>
</td>
<td style="height: 9.9pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 65.95pt;" valign="top" width="88"><div class="TableParagraph" style="line-height: 9.9pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">172.16.8.0</span><o:p></o:p></div>
</td>
<td style="height: 9.9pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 30.0pt;" valign="top" width="40"><div class="TableParagraph" style="line-height: 9.9pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">mask</span><o:p></o:p></div>
</td>
<td style="height: 9.9pt; mso-height-rule: exactly; padding: 0cm 0cm 0cm 0cm; width: 83.7pt;" valign="top" width="112"><div class="TableParagraph" style="line-height: 9.9pt; margin-left: 2.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="font-family: "courier new"; font-size: 10.0pt; letter-spacing: -0.05pt;">255.255.252.0</span><o:p></o:p></div>
</td>
</tr>
</tbody></table>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 0cm; margin-top: 1.05pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">network</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">172.16.12.0</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">mask</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">255.255.252.0</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 33.95pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">aggregate-address</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">172.16.0.0</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">255.255.240.0</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">summary-only</span><o:p></o:p></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 0cm; margin-top: .2pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">neighbor</span><span style="letter-spacing: -.1pt;">
</span><span style="letter-spacing: -.05pt;">192.168.14.1</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">remote-as</span><span style="letter-spacing: -.1pt;"> </span><span style="letter-spacing: -.05pt;">65001</span><o:p></o:p></div>
<div class="MsoBodyText" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 33.95pt; margin-right: 258.95pt; margin-top: 0cm; mso-line-break-override: restrictions; punctuation-wrap: simple;">
<span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">neighbor</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">192.168.34.1</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">remote-as</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">65001</span><span lang="EN-US" style="letter-spacing: 1.2pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">no</span><span lang="EN-US" style="letter-spacing: -.1pt; mso-ansi-language: EN-US;"> </span><span lang="EN-US" style="letter-spacing: -.05pt; mso-ansi-language: EN-US;">auto-summary</span><span lang="EN-US"><o:p></o:p></span></div>
<div class="MsoBodyText" style="line-height: 11.3pt; margin-left: 28.0pt; mso-line-break-override: restrictions; mso-line-height-rule: exactly; punctuation-wrap: simple;">
<span style="letter-spacing: -.05pt;">end</span><o:p></o:p></div>
<br />
<div class="MsoNormal">
<br /></div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-17647411070605791882016-05-29T01:04:00.000-07:002016-06-02T06:01:20.191-07:00- Cisco Networking: STP Switch Sim | Spanning Tree priority Configuration <!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><br />
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves>false</w:TrackMoves>
<w:TrackFormatting/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin-top:0in;
mso-para-margin-right:0in;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0in;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
</style>
<![endif]-->
<br />
<div class="MsoNormal" style="line-height: normal; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto; mso-outline-level: 3;">
<span style="font-family: 'times new roman', serif; font-size: 13.5pt;">Question:</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">A company has an existing network
comprised of 5 switches; </span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-indent: -.25in;">
<span style="font-family: "symbol"; font-size: 12.0pt;">·</span><span style="font-family: "times new roman" , "serif"; font-size: 7.0pt;"> </span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">CoreSwitch</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-indent: -.25in;">
<span style="font-family: "symbol"; font-size: 12.0pt;">·</span><span style="font-family: "times new roman" , "serif"; font-size: 7.0pt;"> </span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW1</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-indent: -.25in;">
<span style="font-family: "symbol"; font-size: 12.0pt;">·</span><span style="font-family: "times new roman" , "serif"; font-size: 7.0pt;"> </span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW2</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-indent: -.25in;">
<span style="font-family: "symbol"; font-size: 12.0pt;">·</span><span style="font-family: "times new roman" , "serif"; font-size: 7.0pt;"> </span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">AcessSwitch1</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-indent: -.25in;">
<span style="font-family: "symbol"; font-size: 12.0pt;">·</span><span style="font-family: "times new roman" , "serif"; font-size: 7.0pt;"> </span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">AcessSwitch2</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-indent: -.25in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">This switch network has pre-VLAN
spanning tree mapping. You has the following tasks to complete this Lab:<br />
</span><span style="font-family: "times new roman" , "serif"; font-size: 13.5pt;"><br />
</span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">– <b>CoreSwitch should be the root
bridge for VLAN 20</b>, but currently DSW1 is the root bridge for VLAN 20.<br />
– <b>Traffic for VLAN 30 should be forwarding over the gig 1/0/6 trunk port
between DSW1 and DSW2.</b> However VLAN 30 is currently using gig 1/0/5.<br />
– <b>Traffic for VLAN 40 should be forwarding over the gig 1/0/5 trunk port
between DSW1 and DSW2.</b> However VLAN 40 is currently using gig 1/0/6.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">You task is complicated by the fact
that you only have full access to <b>DSW1</b>, with the enable password cisco.
You are allowed and provided only limited show commands access is provided on
CoreSwitch, and DSW2 using the enable 2 level with a password of Cisco. You are
not allowed to made configuration changes on these Switches. Also you
don’t have access to ASW1 or ASW2. So you are only limited to make
configuration on DSW1.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnc3U3aGvq-BfnJwihwVfpi3lxD5MAPuR_KnuHw9yxZGF1I6mOtfMXXf8htSYAN6z70xK2B2hv-7O1mLC-ElxvLNpApZSFialW2tTyFLR4hPvlN9CHx7zbMFT_K7m-v7IoTbrx_kxlS9Ia/s1600/STP.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnc3U3aGvq-BfnJwihwVfpi3lxD5MAPuR_KnuHw9yxZGF1I6mOtfMXXf8htSYAN6z70xK2B2hv-7O1mLC-ElxvLNpApZSFialW2tTyFLR4hPvlN9CHx7zbMFT_K7m-v7IoTbrx_kxlS9Ia/s1600/STP.jpg" /></a></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div align="center" class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: center;">
<span style="color: blue; font-family: "times new roman" , "serif"; font-size: 12.0pt; text-decoration: none;"><span style="mso-ignore: vglayout;"></span></span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;"></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<b><span style="color: magenta; font-family: "times new roman" , "serif"; font-size: 14.0pt;">Required
Configurations and Explanation: </span></b><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;"></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<b><span style="font-family: "times new roman" , "serif"; font-size: 14.5pt;">1.</span></b><span style="font-family: "times new roman" , "serif"; font-size: 7.0pt;"> </span><b><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">“CoreSwitch should be the root bridge for VLAN 20.</span></b><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;"></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW1 is currently the root bridge
for VLAN 20″ our task to make CoreSwitch the root bridge for VLAN 20. For
making the CoreSwitch as a root bridge we need to assign the lowest priority
value for VLAN 20 on CoreSwitch, but we are not allowed to make changes on this
Switch we have only access to DSW1 therefore we can increase the priority of
DSW1 so that it become higher than CoreSwitch. For this use the</span><span style="font-family: "times new roman" , "serif"; font-size: 13.5pt;"> “show spanning-tree</span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">”
on CoreSwitch and on DSW1 for checking the priority of both switches for VLAN
20. Currently DSW1 is the root bridge for VLAN 20 (notice the line “This bridge
is the root” on below figure).</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW1>enable<br />
DSW1#show spanning-tree</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0l5R36rL7RX-YeVtOQ2BbDJECiauQfI1HIj3ts4brQET5v2oL9qb75hJ8mR22k2EVr4J9nxUJCfaxXF1bC-Pz_g-CNigpMq5ZcSznS86L9HlOXuFRf2ltDQVvzqzKrOhuEbVuA_AmQOxC/s1600/DSW1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0l5R36rL7RX-YeVtOQ2BbDJECiauQfI1HIj3ts4brQET5v2oL9qb75hJ8mR22k2EVr4J9nxUJCfaxXF1bC-Pz_g-CNigpMq5ZcSznS86L9HlOXuFRf2ltDQVvzqzKrOhuEbVuA_AmQOxC/s1600/DSW1.jpg" /></a></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div align="center" class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: center;">
<span style="color: blue; font-family: "times new roman" , "serif"; font-size: 12.0pt; text-decoration: none;"><span style="mso-ignore: vglayout;"></span></span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;"></span></div>
<div align="center" class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: center;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">To make the CoreSwitch the root
bridge we need to increase the DSW1′s priority value, the best value should be
you can use another value but make sure it is higher than the CoreSwitch
priority value by checking if the CoreSwitch becomes the root bridge or not;
and that value must be in increments of 4096.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW1#configure terminal<br />
DSW1(config)#spanning-tree vlan 20 priority 61440</span><span style="font-family: "times new roman" , "serif"; font-size: 7.0pt;"> </span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<b><span style="font-family: "times new roman" , "serif"; font-size: 13.5pt;">2.“Traffic for VLAN 30 should be
forwarding over the gig 1/0/6 trunk port between DSW1 and DSW2.</span></b><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;"></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">VLAN 30 is currently using gig
1/0/5″ and gig 1/0/6 is in blocking state, you can find these information by
using command “</span><span style="font-family: "times new roman" , "serif"; font-size: 13.5pt;">show spanning-tree</span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">”. We know that spaning tree protocol make the forwarding
port base on </span></div>
<ul type="disc">
<li class="MsoNormal" style="line-height: normal; mso-list: l0 level1 lfo1; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto; tab-stops: list .5in;"><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">Bridge-ID</span></li>
<li class="MsoNormal" style="line-height: normal; mso-list: l0 level1 lfo1; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto; tab-stops: list .5in;"><span style="font-family: "times new roman" , "serif"; font-size: 7.0pt;"> </span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">Port-Cost</span></li>
<li class="MsoNormal" style="line-height: normal; mso-list: l0 level1 lfo1; mso-margin-bottom-alt: auto; mso-margin-top-alt: auto; tab-stops: list .5in;"><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">Interface-ID</span></li>
</ul>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">Since both ports have same bridge-ID
and both interfaces are fastethernet therefore they will have the same
port-cost. When the both ports have same port-cost and bridge-ID then the port
with the lower interface will be in forwarding state while other will be in
blocking state. Same happen in this case that both switches DSW1 and DSW2 have
same bridge-ID and Cost therefore gig 1/0/5 is forwarding port for VLAN 30. Now
you can make the gig 1/0/6 as forwarding port by lowering the Priority Number
of the port gig 1/0/6 you can see the currently priority numbers of ports by
show </span><span style="font-family: "times new roman" , "serif"; font-size: 13.5pt;">“show spanning-tree</span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">” </span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6n3h51ItJ0T12rdJUio2T64DdnHBYPayUjbyi9-7zJ3CeY1B9wLE4EbRGvVnJBlnDpaiOLKKVcq89otAmZPmBZtA0cu2fySOBOCFaKYZpPqzXL4ulMOtfUKifX-_vlxNLi-NHKl46o-PJ/s1600/DSW1-SH.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6n3h51ItJ0T12rdJUio2T64DdnHBYPayUjbyi9-7zJ3CeY1B9wLE4EbRGvVnJBlnDpaiOLKKVcq89otAmZPmBZtA0cu2fySOBOCFaKYZpPqzXL4ulMOtfUKifX-_vlxNLi-NHKl46o-PJ/s1600/DSW1-SH.jpg" /></a></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div align="center" class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: center;">
<span style="color: blue; font-family: "times new roman" , "serif"; font-size: 12.0pt; text-decoration: none;"><span style="mso-ignore: vglayout;"></span></span><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;"></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">Notice that we only need to change
this value for VLAN 30, not for all VLANs.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: 12.0pt;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW1(config)#interface g1/0/6<br />
DSW1(config-if)#spanning-tree vlan 30 port-priority 64<br />
DSW1(config-if)#exit<br style="mso-special-character: line-break;" />
<br style="mso-special-character: line-break;" />
</span></div>
<div align="center" class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-align: center;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in; text-indent: -.25in;">
<b><span style="font-family: "times new roman" , "serif"; font-size: 13.5pt;">“3. Traffic for VLAN 40 should be forwarding
over the gig 1/0/5 trunk port between DSW1 and DSW2. </span></b><span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;"></span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">However VLAN 40 is currently using
gig 1/0/6″ and our task is to make the forwarding of VLAN 40 through gig 1/0/5.
It is a similar job, but we are not allowed to make any configurations on DSW2,
and in this case we can’t change the port-priority for VLAN 40. There is
another solution for this you can change the cost (set the lower value) on an
interface of DSW1 then only DSW1 will learn the change.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">By default, the cost of a 100Mbps
link is 19 but we can change this value to make sure that VLAN 40 will use
interface Gig1/0/5.</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW1(config)#interface g1/0/5<br />
DSW1(config-if)#spanning-tree vlan 40 cost 1</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW1(config-if)#exit<br />
<br />
You should re-check to see if everything was configured correctly:</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW1#show spanning-tree</span></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<br /></div>
<div class="MsoNormal" style="line-height: normal; margin-bottom: .0001pt; margin-bottom: 0in;">
<span style="font-family: "times new roman" , "serif"; font-size: 12.0pt;">DSW1#copy running-config
startup-config</span></div>
<div class="MsoNormal">
<br /></div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-26086250621219538912016-05-27T10:51:00.000-07:002016-06-02T06:01:35.272-07:00- Cisco Networking: fifteen Cisco vulnerabilities<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
The Cisco Product Security Incident Response Team (PSIRT) has published fifteen important vulnerability advisories:</div>
<ul style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 17px; list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software IP Service Level Agreement Vulnerability</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco Identity Services Engine Database Default Credentials Vulnerability</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software IPv6 over MPLS Vulnerabilities</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software IPv6 Denial of Service Vulnerability</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco 10000 Series Denial of Service Vulnerability</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software Smart Install Remote Code Execution Vulnerability</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software Data-Link Switching Vulnerability</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software Network Address Translation Vulnerabilities</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco Unified Communications Manager Session Initiation Protocol Memory Leak Vulnerability</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">CiscoWorks LAN Management Solution Remote Code Execution Vulnerability</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability</li>
</ul>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<span id="more-906" style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"></span></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco IOS Software IP Service Level Agreement Vulnerability</b><br />
The Cisco IOS IP Service Level Agreement (IP SLA) feature contains a denial of service (DoS) vulnerability. The vulnerability is triggered when malformed UDP packets are sent to a vulnerable device. The vulnerable UDP port numbers depend on the device configuration. Default ports are not used for the vulnerable UDP IP SLA operation or for the UDP responder ports.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
Cisco devices that are running Cisco IOS Software are vulnerable when they are configured for IP SLA, either as responders or as originators of vulnerable IP SLA operations.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
To determine the Cisco IOS Software release that is running on a Cisco product, administrators can log in to the device and issue the show version command to display the system banner. The system banner confirms that the device is running Cisco IOS Software by displaying text similar to “Cisco Internetwork Operating System Software” or “Cisco IOS Software.” The image name displays in parentheses, followed by “Version” and the Cisco IOS Software release name. Other Cisco devices do not have the show version command or may provide different output.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
IP SLA is an embedded agent in Cisco IOS Software designed to measure and monitor common network performance metrics like jitter, latency (delay), and packet loss.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
The vulnerability that is described in this document is triggered by malformed IP SLA packets sent to the vulnerable device and port. A vulnerable device can be an IP SLA responder or the source device of a vulnerable IP SLA operation.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of the vulnerability described in this document may result in the reload of a vulnerable device. Repeated exploitation could result in a DoS condition.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4c.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d4c.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco Identity Services Engine Database Default Credentials Vulnerability</b><br />
Cisco Identity Services Engine (ISE) contains a set of default credentials for its underlying database. A remote attacker could use those credentials to modify the device configuration and settings or gain complete administrative control of the device.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
This vulnerability affects all releases of Cisco ISE prior to release 1.0.4.573. This applies to both the hardware appliance and the software-only versions of the product.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
The Cisco Identity Services Engine provides an attribute-based access control solution that combines authentication, authorization, and accounting (AAA); posture; profiling; and guest management services on a single platform. Administrators can centrally create and manage access control policies for users and endpoints in a consistent fashion, and gain end-to-end visibility into everything that is connected to the network.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
The Cisco ISE contains a set of default credentials for its underlying database. A remote attacker could use those credentials to modify the device configuration and settings or gain complete administrative control of the device.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of this vulnerability may allow an attacker to modify the device configuration and settings or gain complete administrative control of the device.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95105.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95105.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco IOS Software IPv6 over MPLS Vulnerabilities</b><br />
Cisco IOS Software is affected by two vulnerabilities that cause a Cisco IOS device to reload when processing IP version 6 (IPv6) packets over a Multiprotocol Label Switching (MPLS) domain. These vulnerabilities are:</div>
<ul style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 17px; list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Crafted IPv6 Packet May Cause MPLS-Configured Device to Reload</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">ICMPv6 Packet May Cause MPLS-Configured Device to Reload</li>
</ul>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
Cisco IOS Software or Cisco IOS XE Software devices (hereafter both referenced as Cisco IOS Software in this document) that are running vulnerable versions of Cisco IOS Software and configured for MPLS are affected by two vulnerabilities related to IPv6 traffic that traverses an MPLS domain. The two vulnerabilities are independent of each other.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
The packet handling nodes in an MPLS network are called provider routers (P routers) and provider edge routers (PE routers) and are configured with MPLS. Both P and PE routers are vulnerable to both the vulnerabilities disclosed in this advisory.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
In networks that have MPLS enabled and could carry MPLS label switched packets with IPv6 payloads, the device may crash when processing MPLS label switched packets with specific IPv6 payloads. Typical deployment scenarios that would be affected by either vulnerability would be Cisco IPv6 Provider Edge Router (6PE) or IPv6 VPN Provider Edge Router (6VPE).</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of these vulnerabilities may cause the device to reload. Repeated exploitation could result in a sustained denial of service condition.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d52.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d52.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco IOS Software IPv6 Denial of Service Vulnerability</b><br />
Cisco IOS Software contains a vulnerability in the IP version 6 (IPv6) protocol stack implementation that could allow an unauthenticated, remote attacker to cause a reload of an affected device that has IPv6 enabled. The vulnerability may be triggered when the device processes a malformed IPv6 packet.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
Cisco devices that are running an affected version of Cisco IOS Software and configured for IPv6 operation are vulnerable. A device that is running Cisco IOS Software and that has IPv6 enabled will show some interfaces with assigned IPv6 addresses when the show ipv6 interface brief command is executed.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
IPv6, which was designed by the Internet Engineering Task Force (IETF), is intended to replace the current version, IP Version 4 (IPv4).</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
A vulnerability exists when Cisco IOS Software processes IPv6 packets. An attacker could exploit this vulnerability by sending malformed IPv6 packets to physical or logical interfaces that are configured to process IPv6 traffic. Transit traffic cannot trigger this vulnerability. Exploitation could cause an affected system to reload.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of the vulnerability that is described in this advisory may cause a reload of an affected device. Repeated exploitation could result in a sustained denial of service condition.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d59.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d59.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco 10000 Series Denial of Service Vulnerability</b><br />
The Cisco 10000 Series Router is affected by a denial of service (DoS) vulnerability that can allow an attacker to cause a device reload by sending a series of ICMP packets.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
Cisco 10000 Series Routers that are running an affected version of Cisco IOS are affected.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
To determine the Cisco IOS Software release that is running on a Cisco product, administrators can log in to the device and issue the show version command to display the system banner. The system banner confirms that the device is running Cisco IOS Software by displaying text similar to “Cisco Internetwork Operating System Software” or “Cisco IOS Software.” The image name displays in parentheses, followed by “Version” and the Cisco IOS Software release name. Other Cisco devices do not have the show version command or may provide different output.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
The Cisco 10000 Series Router is affected by a denial of service (DoS) vulnerability where an unauthenticated attacker could cause a device reload by sending a series of ICMP packets.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of this vulnerability could cause an affected device to reload. Repeated exploitation could result in a sustained DoS condition.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d50.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d50.shtml</a><b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"></b></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco IOS Software Smart Install Remote Code Execution Vulnerability</b><br />
A vulnerability exists in the Smart Install feature of Cisco Catalyst Switches running Cisco IOS Software that could allow an unauthenticated, remote attacker to perform remote code execution on the affected device.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
Devices configured as a Smart Install client or director are affected by this vulnerability. To display Smart Install information, use the show vstack config privileged EXEC command on the Smart Install director or client. The outputs of the show commands are different when entered on the director or on the client.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
Smart Install is a plug-and-play configuration and image-management feature that provides zero-touch deployment for new switches and Cisco Integrated Services Routers. This means that a customer can ship a device to a location, place it in the network and power it on with no configuration required on the device.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
A vulnerability exists in the Smart Install feature of Cisco Catalyst Switches running Cisco IOS Software that could allow an unauthenticated, remote attacker to perform remote code execution on the affected device. Smart Install uses TCP port 4786 for communication. An established TCP connection with a completed TCP three-way handshake is needed to be able to trigger this vulnerability.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation could allow an unauthenticated, remote attacker to perform remote code execution on the affected device.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4f.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d4f.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities</b><br />
Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or trigger memory leaks that may result in system instabilities. Affected devices would need to be configured to process SIP messages for these vulnerabilities to be exploitable.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
Cisco devices are affected when they are running affected Cisco IOS Software and Cisco IOS XE Software versions that are configured to process SIP messages.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
SIP is a popular signaling protocol that is used to manage voice and video calls across IP networks such as the Internet. SIP is responsible for handling all aspects of call setup and termination. Voice and video are the most popular types of sessions that SIP handles, but the protocol has the flexibility to accommodate other applications that require call setup and termination. SIP call signaling can use UDP (port 5060), TCP (port 5060), or Transport Layer Security (TLS; TCP port 5061) as the underlying transport protocol.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of the vulnerabilities in this advisory may result in system instabilities or a reload of an affected device. Repeated exploitation could result in a sustained DoS condition.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d5a.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d5a.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities</b><br />
Cisco IOS Software contains two vulnerabilities related to Cisco IOS Intrusion Prevention System (IPS) and Cisco IOS Zone-Based Firewall features. These vulnerabilities are:</div>
<ul style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 17px; list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Memory leak in Cisco IOS Software</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software Denial of Service when processing specially crafted HTTP packets</li>
</ul>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
Cisco IOS devices running vulnerable versions of Cisco IOS Software are affected by two vulnerabilities in Cisco IOS IPS and Cisco IOS Zone-Based Firewall. The two vulnerabilities are independent of each other.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
Firewalls are networking devices that control access to the network assets of an organization. Firewalls are often positioned at the entrance points of networks. Cisco IOS Software provides a set of security features that allow the configuration of a simple or elaborate firewall policy according to particular requirements.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of these vulnerabilities may result in:</div>
<ul style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 17px; list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Memory leak in Cisco IOS Software: The device may run out of memory resulting in instability or the device crashing.</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco IOS Software Denial of Service when processing specially crafted HTTP packets: The device may crash or hang. If the device hangs, it will have to be power cycled to recover. If the device supports and is configured with scheduler isr-watchdog then the device will reset and reload if the vulnerability is exploited.</li>
</ul>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link: </b><a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d57.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d57.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco IOS Software Data-Link Switching Vulnerability</b><br />
Cisco IOS Software contains a memory leak vulnerability in the Data-Link Switching (DLSw) feature that could result in a device reload when processing crafted IP Protocol 91 packets.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
Cisco IOS devices with the DLSw promiscuous feature enabled are affected by the vulnerability described in this advisory. Devices with the DLSw promiscuous feature enabled contain a line in the configuration defining a local DLSw peer with the promiscuous keyword.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
DLSw provides a means of transporting IBM Systems Network Architecture (SNA) and network BIOS (NetBIOS) traffic over an IP network. The Cisco implementation of DLSw over Fast Sequence Transport (FST) uses IP Protocol 91. The promiscuous DLSw feature permits the local peer to establish connection with remote peers that are not statically configured.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
A Cisco IOS device that is configured for DLSw listens for IP protocol 91 packets. Depending on the DLSw configuration, UDP port 2067, and, one or more TCP ports can also be opened. The vulnerability described in this document can only be exploited via IP Protocol 91 and can not be exploited using either the UDP or TCP transports.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of the vulnerability may result in a memory leak that can lead to a denial of service condition. Memory exhaustion can cause an affected Cisco IOS device to reload or become unresponsive; a power cycle might be required to recover from the condition.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4e.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d4e.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco IOS Software Network Address Translation Vulnerabilities</b><br />
The Cisco IOS Software network address translation (NAT) feature contains multiple denial of service (DoS) vulnerabilities in the translation of the following protocols:</div>
<ul style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 17px; list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">NetMeeting Directory (Lightweight Directory Access Protocol, LDAP)</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Session Initiation Protocol (Multiple vulnerabilities)</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">H.323 protocol</li>
</ul>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
Cisco devices that are running Cisco IOS Software are vulnerable when they are configured for NAT and contain support for one or more of the following features:</div>
<ul style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 17px; list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">NetMeeting Directory NAT (LDAP on TCP port 389)</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">NAT for Session Initiation Protocol (SIP)</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">NAT for H.323</li>
</ul>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b></div>
<ul style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 17px; list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">NAT for NetMeeting Directory (LDAP) Vulnerability: LDAP is a protocol for querying and modifying data of directory services implemented in IP networks. NAT for NetMeeting Directory, also known as the Internet Locator Service (ILS), translates LDAP packets on TCP port 389. The inspected port is not configurable. This vulnerability is triggered by malformed transit LDAP traffic that needs to be processed by the NAT for NetMeeting Directory feature.</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Four vulnerabilities in the NAT for SIP feature are described in this document:<ul style="list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">NAT of SIP over TCP vulnerability: Crafted SIP packets on TCP port 5060 could cause unpredictable results, including the reload of the vulnerable device. Translation of SIP over TCP packets will be disabled by default with the fix for this vulnerability.</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Provider edge Multiprotocol Label Switching (MPLS) NAT of SIP over UDP packets DoS vulnerability: A malformed SIP packet on UDP 5060 that transits an MPLS enabled vulnerable device that needs an MPLS tag to be imposed on the malformed packet might reload the device.</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">NAT of crafted SIP over UDP packets DoS vulnerabilities: There are two DoS vulnerabilities related to similar crafted packets on UDP port 5060 that require SIP translation: the first is a vulnerability that will cause the device to reload and the second will cause a memory leak that could lead to a DoS condition, including reload of the vulnerable device.</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">NAT of H.323 Packets DoS Vulnerability</li>
</ul>
</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Transit crafted H.323 packets on TCP port 1720 could cause a reload of the vulnerable device.</li>
</ul>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of these vulnerabilities can cause the device to reload or become unresponsive. For the NAT of UDP over SIP vulnerability that corresponds to Cisco bug CSCtj04672, it is also possible that exploitation can cause a memory leak. Repeated exploitation of the memory leak vulnerability can lead to a DoS condition in which the device reloads or becomes unresponsive. Reloading may occur automatically, or the device may require manual intervention to reload.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4d.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d4d.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco Unified Communications Manager Session Initiation Protocol Memory Leak Vulnerability</b><br />
Cisco Unified Communications Manager contains a memory leak vulnerability that could be triggered through the processing of malformed Session Initiation Protocol (SIP) messages. Exploitation of this vulnerability could cause an interruption of voice services. Cisco has released free software updates for supported Cisco Unified Communications Manager versions to address the vulnerability. A workaround exists for this SIP vulnerability.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
The following products are affected by the vulnerability that is described in this advisory:</div>
<ul style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 17px; list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco Unified Communications Manager 6.x</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco Unified Communications Manager 7.x</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco Unified Communications Manager 8.x</li>
</ul>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
Cisco Unified Communications Manager contains a vulnerability that involves the processing of SIP messages. Cisco Unified Communications Manager may leak session control buffers (SCBs) or cause a reload of the affected device when processing a malformed SIP message. Exploitation of the vulnerability may cause a critical process to fail, which could result in the disruption of voice services. All SIP ports (TCP ports 5060 and 5061 and UDP ports 5060 and 5061) are affected.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of the vulnerability that is described in this advisory could allow a remote attacker to trigger a device reload that could result in the interruption of voice services. Cisco Unified Communications Manager will restart the affected processes, but repeated attacks may result in a sustained denial of service (DoS) condition.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link: </b><a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d58.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d58.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability</b><br />
A denial of service (DoS) vulnerability exists in Jabber Extensible Communications Platform (Jabber XCP) and Cisco Unified Presence. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious XML to an affected server. Successful exploitation of this vulnerability could cause elevated memory and CPU utilization, resulting in memory exhaustion and process crashes. Repeated exploitation could result in a sustained DoS condition.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
The following versions of Cisco Unified Presence and Jabber Extensible Communications Platform (Jabber XCP) are affected by the vulnerability in this advisory. JabberNow appliances are also affected if they are running a vulnerable version of Jabber XCP software.</div>
<ul style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 17px; list-style-image: initial; list-style-position: initial; list-style-type: none; margin-bottom: 15px; margin-left: 15px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Cisco Unified Presence: All versions of Cisco Unified Presence prior to 8.5(4) are affected by the vulnerability in this advisory.</li>
<li style="background-attachment: initial; background-clip: initial; background-color: initial; background-image: url(http://www.ciscozine.com/wp-content/themes/alltuts/images/bullet_list.png); background-origin: initial; background-position: 0px 9px; background-repeat: no-repeat no-repeat; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 5px; padding-left: 15px; padding-right: 0px; padding-top: 5px;">Jabber XCP and JabberNow Appliances.</li>
</ul>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
Jabber XCP and Cisco Unified Presence provide an open and extensible platform that facilitates the secure exchange of availability and instant messaging (IM) information.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
The XML parsers in Jabber XCP (including JabberNow appliances) and Cisco Unified Presence are vulnerable to the Exponential Entity Expansion attack. This attack is also known as an XML Bomb referring to an XML document that is valid according to the rules of an XML schema yet results in the hanging or crash of the parser or underlying server. The attack is often referred to as the Billion Laughs Attack because many proof of concept examples caused XML parsers to expand the string lol or ha up to a billion times or until server resources were exhausted.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
The attack combines certain properties of XML to create valid but malicious XML using an extreme level of nested substitutions. When an XML parser attempts to expand all the nested entities it quickly exhausts all server resources.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
This technique will cause the XML parsers in Cisco Unified Presence and Jabber XCP (including JabberNow appliances) to trigger high CPU and memory usage resulting in process crashes. The attack affects both client-to-server connections as well as server-to-server (federation) links.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of this vulnerability could cause elevated memory and CPU utilization, resulting in memory exhaustion and process crashes. Repeated exploitation could result in a sustained DoS condition.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link: </b><a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d47.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b95d47.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities</b><br />
Two vulnerabilities exist in Cisco Unified Service Monitor and Cisco Unified Operations Manager software that could allow an unauthenticated, remote attacker to execute arbitrary code on affected servers.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
All versions of Cisco Unified Service Monitor and Cisco Unified Operations Manager prior to 8.6 are affected.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
Cisco Unified Service Monitor and Cisco Unified Operations Manager are products from the Cisco Unified Communications Management Suite. They provides a way to continuously monitor active calls supported by the Cisco Unified Communications System.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
Two vulnerabilities exist in Cisco Unified Service Monitor and Cisco Unified Operations Manager software that could allow an unauthenticated, remote attacker to execute arbitrary code on affected servers. These vulnerabilities can be triggered by sending a series of crafted packets to the affected server over TCP port 9002.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of these vulnerabilities could allow an unauthenticated, remote attacker to execute arbitrary code on affected servers.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9351e.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b9351e.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities</b><br />
Two vulnerabilities exist in CiscoWorks LAN Management Solution software that could allow an unauthenticated, remote attacker to execute arbitrary code on affected servers.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
CiscoWorks LAN Management Solution software releases 3.1, 3.2, and 4.0 are affected by this vulnerability.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
Cisco LAN Management Solution versions 3.1 and 3.2 are vulnerable only if the Device Fault Management component (DFM) is installed. Cisco LAN Management Solution versions 4.0 are vulnerable regardless of the options selected during installation.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
Two vulnerabilities exist in CiscoWorks LAN Management Solution software that could allow an unauthenticated, remote attacker to execute arbitrary code on affected servers.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of these vulnerabilities could allow an unauthenticated, remote attacker to execute arbitrary code on affected servers.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link:</b> <a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9351f.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b9351f.shtml</a></div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability</b><br />
A vulnerability exists in Cisco Nexus 5000 and 3000 Series Switches that may allow traffic to bypass deny statements in access control lists (ACLs) that are configured on the device.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Vulnerable Products</b><br />
All Cisco Nexus 5000 NX-OS Software Releases 5.0(2) and 5.0(3) prior to 5.0(3)N2(1) are affected by this vulnerability. All Cisco Nexus 3000 NX-OS Software Releases prior to 5.0(3)U1(2a) or 5.0(3)U2(1) are affected by this vulnerability.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Details</b><br />
A vulnerability in Cisco Nexus 5000 and 3000 Series Switches may allow traffic to bypass deny statements in IP, VLAN, or MAC ACLs that are configured in the device. This behavior is experienced when an ACL remark is configured prior to any deny statement on such ACL.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Impact</b><br />
Successful exploitation of the vulnerability may allow an attacker to access resources that should be protected by the ACL configured in Cisco Nexus 5000 and 3000 Series Switches.</div>
<div style="background-color: #f0f0f0; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; margin-bottom: 10px; margin-left: 0px; margin-right: 0px; margin-top: 10px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Link: </b><a href="http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml" style="color: #1fa2e1; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">http://www.cisco.com/…/advisory09186a0080b9250c.shtml</a></div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-69657243239473109672015-03-04T06:38:00.004-08:002016-06-02T06:01:50.156-07:00- Cisco Networking: OSPF Design Guide<h2>
<a href="https://www.blogger.com/null" name="intro">Introduction</a> </h2>
The Open Shortest Path First (OSPF) protocol, defined in <a class="exit" href="http://www.ietf.org/rfc/rfc2328.txt">RFC 2328</a>, is
an Interior Gateway Protocol used to distribute routing information within a
single Autonomous System. This paper examines how OSPF works and how it can be
used to design and build large and complicated networks. <br />
<h2>
<a href="https://www.blogger.com/null" name="topic1">Background Information</a> </h2>
OSPF protocol was developed due to a need in the internet community to
introduce a high functionality non-proprietary Internal Gateway Protocol (IGP)
for the TCP/IP protocol family. The discussion of the creation of a common
interoperable IGP for the Internet started in 1988 and did not get formalized
until 1991. At that time the OSPF Working Group requested that OSPF be
considered for advancement to Draft Internet Standard. <br />
The OSPF protocol is based on link-state technology, which is a
departure from the Bellman-Ford vector based algorithms used in traditional
Internet routing protocols such as RIP. OSPF has introduced new concepts such
as authentication of routing updates, Variable Length Subnet Masks (VLSM),
route summarization, and so forth. <br />
These chapters discuss the OSPF terminology, algorithm and the pros and
cons of the protocol in designing the large and complicated networks of today. <br />
<h3>
<a href="https://www.blogger.com/null" name="topic2">OSPF versus RIP</a> </h3>
The rapid growth and expansion of today's networks has pushed RIP to
its limits. RIP has certain limitations that can cause problems in large
networks: <br />
<ul>
<li>
RIP has a limit of 15 hops. A RIP network that spans more than 15
hops (15 routers) is considered unreachable.<br />
</li>
<li>
RIP cannot handle Variable Length Subnet Masks (VLSM). Given the
shortage of IP addresses and the flexibility VLSM gives in the efficient
assignment of IP addresses, this is considered a major flaw.<br />
</li>
<li>
Periodic broadcasts of the full routing table consume a large amount
of bandwidth. This is a major problem with large networks especially on slow
links and WAN clouds.<br />
</li>
<li>
RIP converges slower than OSPF. In large networks convergence gets to
be in the order of minutes. RIP routers go through a period of a hold-down and
garbage collection and slowly time-out information that has not been received
recently. This is inappropriate in large environments and could cause routing
inconsistencies.<br />
</li>
<li>
RIP has no concept of network delays and link costs. Routing
decisions are based on hop counts. The path with the lowest hop count to the
destination is always preferred even if the longer path has a better aggregate
link bandwidth and less delays.<br />
</li>
<li>
RIP networks are flat networks. There is no concept of areas or
boundaries. With the introduction of classless routing and the intelligent use
of aggregation and summarization, RIP networks seem to have fallen behind. <br />
</li>
</ul>
Some enhancements were introduced in a new version of RIP called RIP2.
RIP2 addresses the issues of VLSM, authentication, and multicast routing
updates. RIP2 is not a big improvement over RIP (now called RIP 1) because it
still has the limitations of hop counts and slow convergence which are
essential in todays large networks.<br />
OSPF, on the other hand, addresses most of the issues previously
presented: <br />
<ul>
<li>
With OSPF, there is no limitation on the hop count.<br />
</li>
<li>
The intelligent use of VLSM is very useful in IP address
allocation.<br />
</li>
<li>
OSPF uses IP multicast to send link-state updates. This ensures less
processing on routers that are not listening to OSPF packets. Also, updates are
only sent in case routing changes occur instead of periodically. This ensures a
better use of bandwidth.<br />
</li>
<li>
OSPF has better convergence than RIP. This is because routing changes
are propagated instantaneously and not periodically. <br />
</li>
<li>
OSPF allows for better load balancing.<br />
</li>
<li>
OSPF allows for a logical definition of networks where routers can be
divided into areas. This limits the explosion of link state updates over the
whole network. This also provides a mechanism for aggregating routes and
cutting down on the unnecessary propagation of subnet
information.<br />
</li>
<li>
OSPF allows for routing authentication by using different methods of
password authentication.<br />
</li>
<li>
OSPF allows for the transfer and tagging of external routes injected
into an Autonomous System. This keeps track of external routes injected by
exterior protocols such as BGP.<br />
</li>
</ul>
This of course leads to more complexity in the configuration and
troubleshooting of OSPF networks. Administrators that are used to the
simplicity of RIP are challenged with the amount of new information they have
to learn in order to keep up with OSPF networks. Also, this introduces more
overhead in memory allocation and CPU utilization. Some of the routers running
RIP might have to be upgraded in order to handle the overhead caused by OSPF. <br />
<h3>
<a href="https://www.blogger.com/null" name="t3">What Do We Mean by Link-States?</a> </h3>
OSPF is a link-state protocol. We could think of a link as being an
interface on the router. The state of the link is a description of that
interface and of its relationship to its neighboring routers. A description of
the interface would include, for example, the IP address of the interface, the
mask, the type of network it is connected to, the routers connected to that
network and so on. The collection of all these link-states would form a
link-state database. <br />
<h2>
<a href="https://www.blogger.com/null" name="t5">Shortest Path First Algorithm</a> </h2>
OSPF uses a shorted path first algorithm in order to build and
calculate the shortest path to all known destinations.The shortest path is
calculated with the use of the Dijkstra algorithm. The algorithm by itself is
quite complicated. This is a very high level, simplified way of looking at the
various steps of the algorithm: <br />
<ol type="1">
<li>
Upon initialization or due to any change in routing information, a
router generates a link-state advertisement. This advertisement represents the
collection of all link-states on that router. <br />
</li>
<li>
All routers exchange link-states by means of flooding. Each router
that receives a link-state update should store a copy in its link-state
database and then propagate the update to other routers. <br />
</li>
<li>
After the database of each router is completed, the router calculates
a Shortest Path Tree to all destinations. The router uses the Dijkstra
algorithm in order to calculate the shortest path tree. The destinations, the
associated cost and the next hop to reach those destinations form the IP
routing table. <br />
</li>
<li>
In case no changes in the OSPF network occur, such as cost of a link
or a network being added or deleted, OSPF should be very quiet. Any changes
that occur are communicated through link-state packets, and the Dijkstra
algorithm is recalculated in order to find the shortest path. <br />
</li>
</ol>
The algorithm places each router at the root of a tree and calculates
the shortest path to each destination based on the cumulative cost required to
reach that destination. Each router will have its own view of the topology even
though all the routers will build a shortest path tree using the same
link-state database. The following sections indicate what is involved in
building a shortest path tree. <br />
<h3>
<a href="https://www.blogger.com/null" name="t6">OSPF Cost</a> </h3>
The cost (also called metric) of an interface in OSPF is an indication
of the overhead required to send packets across a certain interface. The cost
of an interface is inversely proportional to the bandwidth of that interface. A
higher bandwidth indicates a lower cost. There is more overhead (higher cost)
and time delays involved in crossing a 56k serial line than crossing a 10M
ethernet line. The formula used to calculate the cost is: <br />
<ul>
<li>
cost= 10000 0000/bandwith in bps <br />
</li>
</ul>
For example, it will cost 10 EXP8/10 EXP7 = 10 to cross a 10M Ethernet
line and will cost 10 EXP8/1544000 = 64 to cross a T1 line. <br />
By default, the cost of an interface is calculated based on the
bandwidth; you can force the cost of an interface with the <b>ip ospf
cost <span style="font-style: italic; font-weight: normal;"><value></value></span> </b> interface
subconfiguration mode command. <br />
<h3>
<a href="https://www.blogger.com/null" name="t7">Shortest Path Tree</a> </h3>
Assume we have the following network diagram with the indicated
interface costs. In order to build the shortest path tree for RTA, we would
have to make RTA the root of the tree and calculate the smallest cost for each
destination. <br />
<img alt="spf1.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf1.gif" usemap="" /> <br />
The above is the view of the network as seen from RTA. Note the
direction of the arrows in calculating the cost. For example, the cost of RTB's
interface to network 128.213.0.0 is not relevant when calculating the cost to
192.213.11.0. RTA can reach 192.213.11.0 via RTB with a cost of 15 (10+5). RTA
can also reach 222.211.10.0 via RTC with a cost of 20 (10+10) or via RTB with a
cost of 20 (10+5+5). In case equal cost paths exist to the same destination,
Cisco's implementation of OSPF will keep track of up to six next hops to the
same destination. <br />
After the router builds the shortest path tree, it will start building
the routing table accordingly. Directly connected networks will be reached via
a metric (cost) of 0 and other networks will be reached according to the cost
calculated in the tree. <br />
<h2>
<a href="https://www.blogger.com/null" name="t8">Areas and Border Routers</a> </h2>
As previously mentioned, OSPF uses flooding to exchange link-state
updates between routers. Any change in routing information is flooded to all
routers in the network. Areas are introduced to put a boundary on the explosion
of link-state updates. Flooding and calculation of the Dijkstra algorithm on a
router is limited to changes within an area. All routers within an area have
the exact link-state database. Routers that belong to multiple areas, and
connect these areas to the backbone area are called area border routers (ABR).
ABRs must therefore maintain information describing the backbone areas and
other attached areas. <br />
<img alt="spf2.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf2.gif" usemap="" /> <br />
An area is interface specific. A router that has all of its interfaces
within the same area is called an internal router (IR). A router that has
interfaces in multiple areas is called an area border router (ABR). Routers
that act as gateways (redistribution)between OSPF and other routing protocols
(IGRP, EIGRP, IS-IS, RIP, BGP, Static) or other instances of the OSPF routing
process are called autonomous system boundary router (ASBR). Any router can be
an ABR or an ASBR. <br />
<h2>
<a href="https://www.blogger.com/null" name="t9">Link-State Packets</a> </h2>
There are different types of Link State Packets, those are what you
normally see in an OSPF database (Appendix A). The different types are
illustrated in the following diagram: <br />
<img alt="spf3.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf3.gif" usemap="" /> <br />
As indicated above, the router links are an indication of the state of
the interfaces on a router belonging to a certain area. Each router will
generate a router link for all of its interfaces. Summary links are generated
by ABRs; this is how network reachability information is disseminated between
areas. Normally, all information is injected into the backbone (area 0) and in
turn the backbone will pass it on to other areas. ABRs also have the task of
propagating the reachability of the ASBR. This is how routers know how to get
to external routes in other ASs. <br />
Network Links are generated by a Designated Router (DR) on a segment
(DRs will be discussed later). This information is an indication of all routers
connected to a particular multi-access segment such as Ethernet, Token Ring and
FDDI (NBMA also). <br />
External Links are an indication of networks outside of the AS. These
networks are injected into OSPF via redistribution. The ASBR has the task of
injecting these routes into an autonomous system. <br />
<h2>
<a href="https://www.blogger.com/null" name="t10">Enabling OSPF on the Router</a> </h2>
Enabling OSPF on the router involves the following two steps in config
mode: <br />
<ol type="1">
<li>
Enabling an OSPF process using the <b>router ospf <span style="font-style: italic; font-weight: normal;"><process-id></process-id></span> </b> command.<br />
</li>
<li>
Assigning areas to the interfaces using the <b>network <span style="font-style: italic; font-weight: normal;"><network address="" ip="" or=""> <mask>
<area-id></area-id></mask></network></span> </b> command. <br />
</li>
</ol>
The OSPF process-id is a numeric value local to the router. It does not
have to match process-ids on other routers. It is possible to run multiple OSPF
processes on the same router, but is not recommended as it creates multiple
database instances that add extra overhead to the router. <br />
The network command is a way of assigning an interface to a certain
area. The mask is used as a shortcut and it helps putting a list of interfaces
in the same area with one line configuration line. The mask contains wild card
bits where 0 is a match and 1 is a "do not care" bit, e.g. 0.0.255.255
indicates a match in the first two bytes of the network number. <br />
The area-id is the area number we want the interface to be in. The
area-id can be an integer between 0 and 4294967295 or can take a form similar
to an IP address A.B.C.D. <br />
Here's an example: <br />
<img alt="spf4.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf4.gif" usemap="" /> <br />
<blockquote>
<pre>RTA#
interface Ethernet0
ip address 192.213.11.1 255.255.255.0
interface Ethernet1
ip address 192.213.12.2 255.255.255.0
interface Ethernet2
ip address 128.213.1.1 255.255.255.0
router ospf 100
network 192.213.0.0 0.0.255.255 area 0.0.0.0
network 128.213.1.1 0.0.0.0 area 23</pre>
</blockquote>
The first network statement puts both E0 and E1 in the same area
0.0.0.0, and the second network statement puts E2 in area 23. Note the mask of
0.0.0.0, which indicates a full match on the IP address. This is an easy way to
put an interface in a certain area if you are having problems figuring out a
mask. <br />
<h2>
<a href="https://www.blogger.com/null" name="t11">OSPF Authentication</a> </h2>
It is possible to authenticate the OSPF packets such that routers can
participate in routing domains based on predefined passwords. By default, a
router uses a Null authentication which means that routing exchanges over a
network are not authenticated. Two other authentication methods exist: Simple
password authentication and Message Digest authentication (MD-5). <br />
<h3>
<a href="https://www.blogger.com/null" name="t12">Simple Password Authentication </a> </h3>
Simple password authentication allows a password (key) to be configured
per area. Routers in the same area that want to participate in the routing
domain will have to be configured with the same key. The drawback of this
method is that it is vulnerable to passive attacks. Anybody with a link
analyzer could easily get the password off the wire. To enable password
authentication use the following commands: <br />
<ul>
<li>
<b> <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp1.html#wp1013918">ip
ospf authentication-key</a> <span style="font-style: italic; font-weight: normal;">key</span> </b> (this
goes under the specific interface) <br />
</li>
<li>
<a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp1.html#wp1010942"> <b>area <span style="font-style: italic; font-weight: normal;">area-id</span> authentication</b> </a> (this goes
under "router ospf <process-id>") </process-id><br />
</li>
</ul>
Here's an example:<br />
<blockquote>
<pre>interface Ethernet0
ip address 10.10.10.10 255.255.255.0
ip ospf authentication-key mypassword
router ospf 10
network 10.10.0.0 0.0.255.255 area 0
area 0 authentication</pre>
</blockquote>
<h3>
<a href="https://www.blogger.com/null" name="t13">Message Digest Authentication</a> </h3>
Message Digest authentication is a cryptographic authentication. A key
(password) and key-id are configured on each router. The router uses an
algorithm based on the OSPF packet, the key, and the key-id to generate a
"message digest" that gets appended to the packet. Unlike the simple
authentication, the key is not exchanged over the wire. A non-decreasing
sequence number is also included in each OSPF packet to protect against replay
attacks. <br />
This method also allows for uninterrupted transitions between keys.
This is helpful for administrators who wish to change the OSPF password without
disrupting communication. If an interface is configured with a new key, the
router will send multiple copies of the same packet, each authenticated by
different keys. The router will stop sending duplicate packets once it detects
that all of its neighbors have adopted the new key. Following are the commands
used for message digest authentication: <br />
<ul>
<li>
<b> <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html#wp1011693">ip
ospf message-digest-key </a> <span style="font-style: italic; font-weight: normal;">keyid</span> md5 <span style="font-style: italic; font-weight: normal;">key</span> </b> (used under the interface) <br />
</li>
<li>
<a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp1.html#wp1010942"> <b>area <span style="font-style: italic; font-weight: normal;">area-id</span> authentication
message-digest</b> </a> (used under "router ospf
<process-id>") </process-id><br />
</li>
</ul>
Here's an example: <br />
<blockquote>
<pre>interface Ethernet0
ip address 10.10.10.10 255.255.255.0
ip ospf message-digest-key 10 md5 mypassword
router ospf 10
network 10.10.0.0 0.0.255.255 area 0
area 0 authentication message-digest </pre>
</blockquote>
<h2>
<a href="https://www.blogger.com/null" name="t14">The Backbone and Area 0</a> </h2>
OSPF has special restrictions when multiple areas are involved. If more
than one area is configured, one of these areas has be to be area 0. This is
called the backbone. When designing networks it is good practice to start with
area 0 and then expand into other areas later on. <br />
The backbone has to be at the center of all other areas, i.e. all areas
have to be physically connected to the backbone. The reasoning behind this is
that OSPF expects all areas to inject routing information into the backbone and
in turn the backbone will disseminate that information into other areas. The
following diagram will illustrate the flow of information in an OSPF network: <br />
<img alt="spf5.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf5.gif" usemap="" /> <br />
In the above diagram, all areas are directly connected to the backbone.
In the rare situations where a new area is introduced that cannot have a direct
physical access to the backbone, a virtual link will have to be configured.
Virtual links will be discussed in the next section. Note the different types
of routing information. Routes that are generated from within an area (the
destination belongs to the area) are called <b>intra-area routes</b>.
These routes are normally represented by the letter <b>O</b> in the
IP routing table. Routes that originate from other areas are called <b>inter-area</b> or <b>Summary routes</b>. The notation
for these routes is <b>O IA</b> in the IP routing table. Routes that
originate from other routing protocols (or different OSPF processes) and that
are injected into OSPF via redistribution are called <b>external
routes</b>. These routes are represented by <b>O E2</b> or <b>O E1</b> in the IP routing table. Multiple routes to the same
destination are preferred in the following order: intra-area, inter-area,
external E1, external E2. External types E1 and E2 will be explained later. <br />
<h2>
<a href="https://www.blogger.com/null" name="t15">Virtual Links</a> </h2>
Virtual links are used for two purposes: <br />
<ul>
<li>
Linking an area that does not have a physical connection to the
backbone.<br />
</li>
<li>
Patching the backbone in case discontinuity of area 0 occurs. <br />
</li>
</ul>
<h3>
<a href="https://www.blogger.com/null" name="t16">Areas Not Physically Connected to Area 0</a> </h3>
As mentioned earlier, area 0 has to be at the center of all other
areas. In some rare case where it is impossible to have an area physically
connected to the backbone, a virtual link is used. The virtual link will
provide the disconnected area a logical path to the backbone. The virtual link
has to be established between two ABRs that have a common area, with one ABR
connected to the backbone. This is illustrated in the following
example:<br />
<img alt="spf6.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf6.gif" usemap="" /> <br />
In this example, area 1 does not have a direct physical connection into
area 0. A virtual link has to be configured between RTA and RTB. Area 2 is to
be used as a transit area and RTB is the entry point into area 0. This way RTA
and area 1 will have a logical connection to the backbone. In order to
configure a virtual link, use the <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp1.html#wp1028252"> <b>area<span style="font-style: italic; font-weight: normal;"> <area-id></area-id></span> virtual-link <span style="font-style: italic; font-weight: normal;"><rid></rid></span> </b> </a> router OSPF sub-command
on both RTA and RTB, where area-id is the transit area. In the above diagram,
this is area 2. The RID is the router-id. The OSPF router-id is usually the
highest IP address on the box, or the highest loopback address if one exists.
The router-id is only calculated at boot time or anytime the OSPF process is
restarted. To find the router-id, use the <b> <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp3.html#wp1046589">show
ip ospf interface</a> </b>command. Assuming that 1.1.1.1 and
2.2.2.2 are the respective RIDs of RTA and RTB, the OSPF configuration for both
routers would be: <br />
<blockquote>
<pre>RTA#
router ospf 10
area 2 virtual-link 2.2.2.2
RTB#
router ospf 10
area 2 virtual-link 1.1.1.1</pre>
</blockquote>
<h3>
<a href="https://www.blogger.com/null" name="t17">Partitioning the Backbone</a> </h3>
OSPF allows for linking discontinuous parts of the backbone using a
virtual link. In some cases, different area 0s need to be linked together. This
can occur if, for example, a company is trying to merge two separate OSPF
networks into one network with a common area 0. In other instances,
virtual-links are added for redundancy in case some router failure causes the
backbone to be split into two. Whatever the reason may be, a virtual link can
be configured between separate ABRs that touch area 0 from each side and having
a common area. This is illustrated in the following example: <br />
<img alt="spf7.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf7.gif" usemap="" /> <br />
In the above diagram two area 0s are linked together via a virtual
link. In case a common area does not exist, an additional area, such as area 3,
could be created to become the transit area. <br />
In case any area which is different than the backbone becomes
partitioned, the backbone will take care of the partitioning without using any
virtual links. One part of the partioned area will be known to the other part
via inter-area routes rather than intra-area routes. <br />
<h2>
<a href="https://www.blogger.com/null" name="t18">Neighbors</a> </h2>
Routers that share a common segment become neighbors on that segment.
Neighbors are elected via the Hello protocol. Hello packets are sent
periodically out of each interface using IP multicast (Appendix B). Routers
become neighbors as soon as they see themselves listed in the neighbor's Hello
packet. This way, a two way communication is guaranteed. Neighbor negotiation
applies to the <b>primary address</b> only. Secondary addresses can
be configured on an interface with a restriction that they have to belong to
the same area as the primary address. <br />
Two routers will not become neighbors unless they agree on the
following: <br />
<ul>
<li>
<b>Area-id:</b> Two routers having a common segment; their
interfaces have to belong to the same area on that segment. Of course, the
interfaces should belong to the same subnet and have a similar mask. <br />
</li>
<li>
<b>Authentication:</b> OSPF allows for the configuration of
a password for a specific area. Routers that want to become neighbors have to
exchange the same password on a particular segment. <br />
</li>
<li>
<b>Hello and Dead Intervals:</b> OSPF exchanges Hello
packets on each segment. This is a form of keepalive used by routers in order
to acknowledge their existence on a segment and in order to elect a designated
router (DR) on multiaccess segments.The Hello interval specifies the length of
time, in seconds, between the hello packets that a router sends on an OSPF
interface. The dead interval is the number of seconds that a router's Hello
packets have not been seen before its neighbors declare the OSPF router down. <br />
OSPF requires these intervals to be exactly the same between two
neighbors. If any of these intervals are different, these routers will not
become neighbors on a particular segment. The router interface commands used to
set these timers are:<a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html#wp1011490"> <b> ip ospf hello-interval <span style="font-style: italic; font-weight: normal;">seconds</span> </b> </a>and <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp1.html#wp1014268"> <b>ip
ospf dead-interval <span style="font-style: italic; font-weight: normal;">seconds</span> </b> </a>. <br />
</li>
<li>
<b>Stub area flag:</b> Two routers have to also agree on
the stub area flag in the Hello packets in order to become neighbors. Stub
areas will be discussed in a later section. Keep in mind for now that defining
stub areas will affect the neighbor election process. <br />
</li>
</ul>
<h2>
<a href="https://www.blogger.com/null" name="t20">Adjacencies </a> </h2>
Adjacency is the next step after the neighboring process. Adjacent
routers are routers that go beyond the simple Hello exchange and proceed into
the database exchange process. In order to minimize the amount of information
exchange on a particular segment, OSPF elects one router to be a designated
router (DR), and one router to be a backup designated router (BDR), on each
multi-access segment. The BDR is elected as a backup mechanism in case the DR
goes down. The idea behind this is that routers have a central point of contact
for information exchange. Instead of each router exchanging updates with every
other router on the segment, every router exchanges information with the DR and
BDR. The DR and BDR relay the information to everybody else. In mathematical
terms, this cuts the information exchange from O(n*n) to O(n) where n is the
number of routers on a multi-access segment. The following router model
illustrates the DR and BDR: <br />
<img alt="spf8.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf8.gif" usemap="" /> <br />
In the above diagram, all routers share a common multi-access segment.
Due to the exchange of Hello packets, one router is elected DR and another is
elected BDR. Each router on the segment (which already became a neighbor) will
try to establish an adjacency with the DR and BDR. <br />
<h3>
<a href="https://www.blogger.com/null" name="t21">DR Election</a> </h3>
DR and BDR election is done via the Hello protocol. Hello packets are
exchanged via IP multicast packets (Appendix B) on each segment. The router
with the highest OSPF priority on a segment will become the DR for that
segment. The same process is repeated for the BDR. In case of a tie, the router
with the highest RID will win. The default for the interface OSPF priority is
one. Remember that the DR and BDR concepts are per multiaccess segment. Setting
the ospf priority on an interface is done using the <b> <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html#wp1012171">ip
ospf priority</a> <span style="font-style: italic; font-weight: normal;"><value></value></span> </b> interface command. <br />
A priority value of zero indicates an interface which is not to be
elected as DR or BDR. The state of the interface with priority zero will be <b>DROTHER</b>. The following diagram illustrates the DR election: <br />
<img alt="spf9.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf9.gif" usemap="" /> <br />
In the above diagram, RTA and RTB have the same interface priority but
RTB has a higher RID. RTB would be DR on that segment. RTC has a higher
priority than RTB. RTC is DR on that segment. <br />
<h3>
<a href="https://www.blogger.com/null" name="t22">Building the Adjacency</a> </h3>
The adjacency building process takes effect after multiple stages have
been fulfilled. Routers that become adjacent will have the exact link-state
database. The following is a brief summary of the states an interface passes
through before becoming adjacent to another router: <br />
<ul>
<li>
<b>Down:</b> No information has been received from anybody
on the segment.<br />
</li>
<li>
<b>Attempt:</b> On non-broadcast multi-access clouds such
as Frame Relay and X.25, this state indicates that no recent information has
been received from the neighbor. An effort should be made to contact the
neighbor by sending Hello packets at the reduced rate
PollInterval.<br />
</li>
<li>
<b>Init:</b> The interface has detected a Hello packet
coming from a neighbor but bi-directional communication has not yet been
established.<br />
</li>
<li>
<b>Two-way:</b> There is bi-directional communication with
a neighbor. The router has seen itself in the Hello packets coming from a
neighbor. At the end of this stage the DR and BDR election would have been
done. At the end of the 2way stage, routers will decide whether to proceed in
building an adjacency or not. The decision is based on whether one of the
routers is a DR or BDR or the link is a point-to-point or a virtual
link.<br />
</li>
<li>
<b>Exstart:</b> Routers are trying to establish the initial
sequence number that is going to be used in the information exchange packets.
The sequence number insures that routers always get the most recent
information. One router will become the primary and the other will become
secondary. The primary router will poll the secondary for
information.<br />
</li>
<li>
<b>Exchange:</b> Routers will describe their entire
link-state database by sending database description packets. At this state,
packets could be flooded to other interfaces on the router.<br />
</li>
<li>
<b>Loading: </b>At this state, routers are finalizing the
information exchange. Routers have built a link-state request list and a
link-state retransmission list. Any information that looks incomplete or
outdated will be put on the request list. Any update that is sent will be put
on the retransmission list until it gets acknowledged.<br />
</li>
<li>
<b>Full:</b> At this state, the adjacency is complete. The
neighboring routers are fully adjacent. Adjacent routers will have a similar
link-state database. <br />
</li>
</ul>
Let's look at an example: <br />
<img alt="spf10.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf10.gif" usemap="" /> <br />
RTA, RTB, RTD, and RTF share a common segment (E0) in area 0.0.0.0. The
following are the configs of RTA and RTF. RTB and RTD should have a similar
configuration to RTF and will not be included. <br />
<blockquote>
<pre>RTA#
hostname RTA
interface Loopback0
ip address 203.250.13.41 255.255.255.0
interface Ethernet0
ip address 203.250.14.1 255.255.255.0
router ospf 10
network 203.250.13.41 0.0.0.0 area 1
network 203.250.0.0 0.0.255.255 area 0.0.0.0
RTF#
hostname RTF
interface Ethernet0
ip address 203.250.14.2 255.255.255.0
router ospf 10
network 203.250.0.0 0.0.255.255 area 0.0.0.0 </pre>
</blockquote>
The above is a simple example that demonstrates a couple of commands
that are very useful in debugging OSPF networks.<br />
<ul>
<li>
<b> <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp3.html#wp1046589">show
ip ospf interface</a> <span style="font-style: italic; font-weight: normal;"> <interface></interface></span> </b> <br />
</li>
</ul>
This command is a quick check to see if all of the interfaces belong to
the areas they are supposed to be in. The sequence in which the OSPF network
commands are listed is very important. In RTA's configuration, if the "network
203.250.0.0 0.0.255.255 area 0.0.0.0" statement was put before the "network
203.250.13.41 0.0.0.0 area 1" statement, all of the interfaces would be in area
0, which is incorrect because the loopback is in area 1. Let us look at the
command's output on RTA, RTF, RTB, and RTD: <br />
<blockquote>
<pre>RTA#<b>show ip ospf interface e0</b>
Ethernet0 is up, line protocol is up
Internet Address 203.250.14.1 255.255.255.0, <b>Area 0.0.0.0
Process ID 10, Router ID 203.250.13.41, Network Type BROADCAST</b>, Cost:
10
Transmit Delay is 1 sec, <b>State BDR, Priority 1
Designated Router (ID) 203.250.15.1</b>, Interface address 203.250.14.2
<b>Backup Designated router (ID) 203.250.13.41</b>, Interface address
203.250.14.1
Timer intervals configured, <b>Hello 10, Dead 40</b>, Wait 40, Retransmit 5
Hello due in 0:00:02
<b>Neighbor Count is 3, Adjacent neighbor count is 3</b>
Adjacent with neighbor 203.250.15.1 (Designated Router)
Loopback0 is up, line protocol is up
Internet Address 203.250.13.41 255.255.255.255, Area 1
Process ID 10, Router ID 203.250.13.41, Network Type LOOPBACK, Cost: 1
Loopback interface is treated as a stub Host
RTF#<b>show ip ospf interface e0</b>
Ethernet0 is up, line protocol is up
Internet Address 203.250.14.2 255.255.255.0, <b>Area 0.0.0.0
Process ID 10, Router ID 203.250.15.1, Network Type BROADCAST</b>, Cost: 10
Transmit Delay is 1 sec, <b>State DR, Priority 1</b>
<b>Designated Router (ID) 203.250.15.1</b>, Interface address 203.250.14.2
<b>Backup Designated router (ID) 203.250.13.41</b>, Interface address
203.250.14.1
Timer intervals configured, <b>Hello 10, Dead 40</b>, Wait 40, Retransmit 5
Hello due in 0:00:08
<b>Neighbor Count is 3, Adjacent neighbor count is 3</b>
Adjacent with neighbor 203.250.13.41 (Backup Designated Router)
RTD#<b>show ip ospf interface e0</b>
Ethernet0 is up, line protocol is up
Internet Address 203.250.14.4 255.255.255.0, <b>Area 0.0.0.0
Process ID 10, Router ID 192.208.10.174, Network Type BROADCAST</b>, Cost:
10
Transmit Delay is 1 sec, <b>State DROTHER</b>, Priority 1
<b>Designated Router (ID) 203.250.15.1</b>, Interface address 203.250.14.2
<b>Backup Designated router (ID) 203.250.13.41</b>, Interface address
203.250.14.1
Timer intervals configured, <b>Hello 10, Dead 40</b>, Wait 40, Retransmit 5
Hello due in 0:00:03
<b>Neighbor Count is 3, Adjacent neighbor count is 2 </b>
Adjacent with neighbor 203.250.15.1 (Designated Router)
Adjacent with neighbor 203.250.13.41 (Backup Designated Router)
RTB#<b>show ip ospf interface e0</b>
Ethernet0 is up, line protocol is up
Internet Address 203.250.14.3 255.255.255.0, <b>Area 0.0.0.0
Process ID 10, Router ID 203.250.12.1, Network Type BROADCAST</b>, Cost: 10
Transmit Delay is 1 sec, <b>State DROTHER</b>, Priority 1
<b>Designated Router (ID) 203.250.15.1</b>, Interface address 203.250.14.2
<b>Backup Designated router (ID) 203.250.13.41</b>, Interface address
203.250.14.1
Timer intervals configured, <b>Hello 10, Dead 40</b>, Wait 40, Retransmit 5
Hello due in 0:00:03
<b>Neighbor Count is 3, Adjacent neighbor count is 2</b>
Adjacent with neighbor 203.250.15.1 (Designated Router)
Adjacent with neighbor 203.250.13.41 (Backup Designated Router)</pre>
</blockquote>
The above output shows very important information. Let us look at RTA's
output. Ethernet0 is in area 0.0.0.0. The process ID is 10 (router ospf 10) and
the router ID is 203.250.13.41. Remember that the RID is the highest IP address
on the box or the loopback interface, calculated at boot time or whenever the
OSPF process is restarted. The state of the interface is BDR. Since all routers
have the same OSPF priority on Ethernet 0 (default is 1), RTF's interface was
elected as DR because of the higher RID. In the same way, RTA was elected as
BDR. RTD and RTB are neither a DR or BDR and their state is DROTHER.<br />
Also note the neighbor count and the adjacent count. RTD has three
neighbors and is adjacent to two of them, the DR and the BDR. RTF has three
neighbors and is adjacent to all of them because it is the DR. <br />
The information about the network type is important and will determine
the state of the interface. On broadcast networks such as Ethernet, the
election of the DR and BDR should be irrelevant to the end user. It should not
matter who the DR or BDR are. In other cases, such as NBMA media such as Frame
Relay and X.25, this becomes very important for OSPF to function correctly.
Fortunately, with the introduction of point-to-point and point-to-multipoint
subinterfaces, DR election is no longer an issue. OSPF over NBMA will be
discussed in the next section. <br />
Another command we need to look at is: <br />
<ul>
<li>
<b> <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp3.html#wp1038026">show
ip ospf neighbor</a> </b> <br />
</li>
</ul>
Let us look at RTD's output: <br />
<blockquote>
<pre>RTD#<b>show ip ospf neighbor</b>
Neighbor ID Pri State Dead Time Address Interface
203.250.12.1 1 2WAY/DROTHER 0:00:37 203.250.14.3 Ethernet0
203.250.15.1 1 FULL/DR 0:00:36 203.250.14.2 Ethernet0
203.250.13.41 1 FULL/BDR 0:00:34 203.250.14.1 Ethernet0</pre>
</blockquote>
The <b>show ip ospf neighbor</b> command shows the
state of all the neighbors on a particular segment. Do not be alarmed if the
"Neighbor ID" does not belong to the segment you are looking at. In our case
203.250.12.1 and 203.250.15.1 are not on Ethernet0. This is "OK" because the
"Neighbor ID" is actually the RID which could be any IP address on the box. RTD
and RTB are just neighbors, that is why the state is 2WAY/DROTHER. RTD is
adjacent to RTA and RTF and the state is FULL/DR and FULL/BDR. <br />
<h3>
<a href="https://www.blogger.com/null" name="t23">Adjacencies on Point-to-Point Interfaces</a> </h3>
OSPF will always form an adjacency with the neighbor on the other side
of a point-to-point interface such as point-to-point serial lines. There is no
concept of DR or BDR. The state of the serial interfaces is point to point. <br />
<h3>
<a href="https://www.blogger.com/null" name="t24">Adjacencies on Non-Broadcast Multi-Access (NBMA) Networks</a> </h3>
Special care should be taken when configuring OSPF over multi-access
non-broadcast medias such as Frame Relay, X.25, ATM. The protocol considers
these media like any other broadcast media such as Ethernet. NBMA clouds are
usually built in a hub and spoke topology. PVCs or SVCs are laid out in a
partial mesh and the physical topology does not provide the multi access that
OSPF believes is out there. The selection of the DR becomes an issue because
the DR and BDR need to have full physical connectivity with all routers that
exist on the cloud. Also, because of the lack of broadcast capabilities, the DR
and BDR need to have a static list of all other routers attached to the cloud.
This is achieved using the <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html#wp1013124"> <b>neighbor <span style="font-style: italic; font-weight: normal;">ip-address </span>[priority <span style="font-style: italic; font-weight: normal;">number</span>]
[poll-interval <span style="font-style: italic; font-weight: normal;">seconds</span>] </b> </a>command,
where the "ip-address" and "priority" are the IP address and the OSPF priority
given to the neighbor. A neighbor with priority 0 is considered ineligible for
DR election. The "poll-interval" is the amount of time an NBMA interface waits
before polling (sending a Hello) to a presumably dead neighbor. The neighbor
command applies to routers with a potential of being DRs or BDRs (interface
priority not equal to 0). The following diagram shows a network diagram where
DR selection is very important: <br />
<img alt="spf11.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf11.gif" usemap="" /> <br />
In the above diagram, it is essential for RTA's interface to the cloud
to be elected DR. This is because RTA is the only router that has full
connectivity to other routers. The election of the DR could be influenced by
setting the ospf priority on the interfaces. Routers that do not need to become
DRs or BDRs will have a priority of 0 other routers could have a lower
priority. <br />
The use of the <b> <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html#wp1013124">neighbor</a> </b> command is not covered in depth in this document as this is becoming obsolete
with the introduction of new means of setting the interface Network Type to
whatever you want irrespective of what the underlying physical media is. This
is explained in the next section. <br />
<h2>
<a href="https://www.blogger.com/null" name="t25">Avoiding DRs and neighbor Command on NBMA</a> </h2>
Different methods can be used to avoid the complications of configuring
static neighbors and having specific routers becoming DRs or BDRs on the
non-broadcast cloud. Specifying which method to use is influenced by whether we
are starting the network from scratch or rectifying an already existing design. <br />
<h3>
<a href="https://www.blogger.com/null" name="t26">Point-to-Point Subinterfaces</a> </h3>
A subinterface is a logical way of defining an interface. The same
physical interface can be split into multiple logical interfaces, with each
subinterface being defined as point-to-point. This was originally created in
order to better handle issues caused by split horizon over NBMA and vector
based routing protocols. <br />
A point-to-point subinterface has the properties of any physical
point-to-point interface. As far as OSPF is concerned, an adjacency is always
formed over a point-to-point subinterface with no DR or BDR election. The
following is an illustration of point-to-point subinterfaces: <br />
<img alt="spf12.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf12.gif" usemap="" /> <br />
In the above diagram, on RTA, we can split Serial 0 into two
point-to-point subinterfaces, S0.1 and S0.2. This way, OSPF will consider the
cloud as a set of point-to-point links rather than one multi-access network.
The only drawback for the point-to-point is that each segment will belong to a
different subnet. This might not be acceptable since some administrators have
already assigned one IP subnet for the whole cloud. <br />
Another workaround is to use IP unnumbered interfaces on the cloud.
This also might be a problem for some administrators who manage the WAN based
on IP addresses of the serial lines. The following is a typical configuration
for RTA and RTB: <br />
<blockquote>
<pre>RTA#
interface Serial 0
no ip address
encapsulation frame-relay
interface Serial0.1 point-to-point
ip address 128.213.63.6 255.255.252.0
frame-relay interface-dlci 20
interface Serial0.2 point-to-point
ip address 128.213.64.6 255.255.252.0
frame-relay interface-dlci 30
router ospf 10
network 128.213.0.0 0.0.255.255 area 1
RTB#
interface Serial 0
no ip address
encapsulation frame-relay
interface Serial0.1 point-to-point
ip address 128.213.63.5 255.255.252.0
frame-relay interface-dlci 40
interface Serial1
ip address 123.212.1.1 255.255.255.0
router ospf 10
network 128.213.0.0 0.0.255.255 area 1
network 123.212.0.0 0.0.255.255 area 0</pre>
</blockquote>
<h3>
<a href="https://www.blogger.com/null" name="t27">Selecting Interface Network Types</a> </h3>
The command used to set the network type of an OSPF interface is: <br />
<blockquote>
<pre><b>ip ospf network {broadcast | non-broadcast | point-to-multipoint}</b>
</pre>
</blockquote>
<b>Point-to-Multipoint Interfaces</b> <br />
An OSPF point-to-multipoint interface is defined as a numbered
point-to-point interface having one or more neighbors. This concept takes the
previously discussed point-to-point concept one step further. Administrators do
not have to worry about having multiple subnets for each point-to-point link.
The cloud is configured as one subnet. This should work well for people who are
migrating into the point-to-point concept with no change in IP addressing on
the cloud. Also, they would not have to worry about DRs and neighbor
statements. OSPF point-to-multipoint works by exchanging additional link-state
updates that contain a number of information elements that describe
connectivity to the neighboring routers. <br />
<img alt="spf13.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf13.gif" usemap="" /> <br />
<blockquote>
<pre>RTA#
interface Loopback0
ip address 200.200.10.1 255.255.255.0
interface Serial0
ip address 128.213.10.1 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-multipoint
router ospf 10
network 128.213.0.0 0.0.255.255 area 1
RTB#
interface Serial0
ip address 128.213.10.2 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-multipoint
interface Serial1
ip address 123.212.1.1 255.255.255.0
router ospf 10
network 128.213.0.0 0.0.255.255 area 1
network 123.212.0.0 0.0.255.255 area 0</pre>
</blockquote>
Note that no static frame relay map statements were configured; this is
because Inverse ARP takes care of the DLCI to IP address mapping. Let us look
at some of <b>show ip ospf interface</b> and <b>show ip ospf route</b> outputs: <br />
<blockquote>
<pre>RTA#<b>show ip ospf interface s0</b>
Serial0 is up, line protocol is up
Internet Address 128.213.10.1 255.255.255.0, Area 0
Process ID 10, Router ID 200.200.10.1, Network Type
POINT_TO_MULTIPOINT, Cost: 64
Transmit Delay is 1 sec, State POINT_TO_MULTIPOINT,
Timer intervals configured, Hello 30, Dead 120, Wait 120, Retransmit 5
Hello due in 0:00:04
Neighbor Count is 2, Adjacent neighbor count is 2
Adjacent with neighbor 195.211.10.174
Adjacent with neighbor 128.213.63.130
RTA#<b>show ip ospf neighbor</b>
Neighbor ID Pri State Dead Time Address Interface
128.213.10.3 1 FULL/ - 0:01:35 128.213.10.3 Serial0
128.213.10.2 1 FULL/ - 0:01:44 128.213.10.2 Serial0
RTB#<b>show ip ospf interface s0</b>
Serial0 is up, line protocol is up
Internet Address 128.213.10.2 255.255.255.0, Area 0
Process ID 10, Router ID 128.213.10.2, Network Type
POINT_TO_MULTIPOINT, Cost: 64
Transmit Delay is 1 sec, State POINT_TO_MULTIPOINT,
Timer intervals configured, Hello 30, Dead 120, Wait 120, Retransmit 5
Hello due in 0:00:14
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 200.200.10.1
RTB#<b>show ip ospf neighbor</b>
Neighbor ID Pri State Dead Time Address Interface
200.200.10.1 1 FULL/ - 0:01:52 128.213.10.1 Serial0</pre>
</blockquote>
The only drawback for point-to-multipoint is that it generates multiple
Hosts routes (routes with mask 255.255.255.255) for all the neighbors. Note the
Host routes in the following IP routing table for RTB:<br />
<blockquote>
<pre>RTB#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
200.200.10.0 255.255.255.255 is subnetted, 1 subnets
O 200.200.10.1 [110/65] via 128.213.10.1, Serial0
128.213.0.0 is variably subnetted, 3 subnets, 2 masks
O <b>128.213.10.3 255.255.255.255</b>
[110/128] via 128.213.10.1, 00:00:00, Serial0
O <b>128.213.10.1 255.255.255.255</b>
[110/64] via 128.213.10.1, 00:00:00, Serial0
C 128.213.10.0 255.255.255.0 is directly connected, Serial0
123.0.0.0 255.255.255.0 is subnetted, 1 subnets
C 123.212.1.0 is directly connected, Serial1
RTC#<b>show ip route</b>
200.200.10.0 255.255.255.255 is subnetted, 1 subnets
O 200.200.10.1 [110/65] via 128.213.10.1, Serial1
128.213.0.0 is variably subnetted, 4 subnets, 2 masks
<b>O 128.213.10.2 255.255.255.255 [110/128] via 128.213.10.1,Serial1
O 128.213.10.1 255.255.255.255 [110/64] via 128.213.10.1, Serial1</b>
C 128.213.10.0 255.255.255.0 is directly connected, Serial1
123.0.0.0 255.255.255.0 is subnetted, 1 subnets
<b>O 123.212.1.0 [110/192] via 128.213.10.1, 00:14:29, Serial1</b>
</pre>
</blockquote>
Note that in RTC's IP routing table, network 123.212.1.0 is reachable
via next hop 128.213.10.1 and not via 128.213.10.2 as you normally see over
Frame Relay clouds sharing the same subnet. This is one advantage of the
point-to-multipoint configuration because you do not need to resort to static
mapping on RTC to be able to reach next hop 128.213.10.2. <br />
<b>Broadcast Interfaces</b> <br />
This approach is a workaround for using the "neighbor" command which
statically lists all existing neighbors. The interface will be logically set to
broadcast and will behave as if the router were connected to a LAN. DR and BDR
election will still be performed so special care should be taken to assure
either a full mesh topology or a static selection of the DR based on the
interface priority. The command that sets the interface to broadcast is: <br />
<blockquote>
<pre><b>
<a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html#wp1011948">ip ospf network</a> <span style="font-style: italic; font-weight: normal;">broadcast</span>
</b>
</pre>
</blockquote>
<h2>
<a href="https://www.blogger.com/null" name="t28">OSPF and Route Summarization</a> </h2>
Summarizing is the consolidation of multiple routes into one single
advertisement. This is normally done at the boundaries of Area Border Routers
(ABRs). Although summarization could be configured between any two areas, it is
better to summarize in the direction of the backbone. This way the backbone
receives all the aggregate addresses and in turn will injects them, already
summarized, into other areas. There are two types of summarization: <br />
<ul>
<li>
Inter-area route summarization <br />
</li>
<li>
External route summarization <br />
</li>
</ul>
<h3>
<a href="https://www.blogger.com/null" name="t29">Inter-Area Route Summarization</a> </h3>
Inter-area route summarization is done on ABRs and it applies to routes
from within the AS. It does not apply to external routes injected into OSPF via
redistribution. In order to take advantage of summarization, network numbers in
areas should be assigned in a contiguous way to be able to lump these addresses
into one range. To specify an address range, perform the following task in
router configuration mode: <br />
<blockquote>
<pre><b>area <span style="font-style: italic; font-weight: normal;">area-id</span> range <span style="font-style: italic; font-weight: normal;">address mask</span>
</b>
</pre>
</blockquote>
Where the "area-id" is the area containing networks to be summarized.
The "address" and "mask" will specify the range of addresses to be summarized
in one range. The following is an example of summarization: <br />
<img alt="spf14.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf14.gif" usemap="" /> <br />
In the above diagram, RTB is summarizing the range of subnets from
128.213.64.0 to 128.213.95.0 into one range: 128.213.64.0 255.255.224.0. This
is achieved by masking the first three left most bits of 64 using a mask of
255.255.224.0. In the same way, RTC is generating the summary address
128.213.96.0 255.255.224.0 into the backbone. Note that this summarization was
successful because we have two distinct ranges of subnets, 64-95 and 96-127. <br />
It would be hard to summarize if the subnets between area 1 and area 2
were overlapping. The backbone area would receive summary ranges that overlap
and routers in the middle would not know where to send the traffic based on the
summary address. <br />
The following is the relative configuration of RTB: <br />
<blockquote>
<pre>RTB#
router ospf 100
area 1 range 128.213.64.0 255.255.224.0</pre>
</blockquote>
Prior to Cisco IOS® Software Release 12.1(6), it was recommended to
manually configure, on the ABR, a discard static route for the summary address
in order to prevent possible routing loops. For the summary route shown above,
you can use this command: <br />
<blockquote>
<pre><b>ip route 128.213.64.0 255.255.224.0 null0</b>
</pre>
</blockquote>
In IOS 12.1(6) and higher, the discard route is automatically generated
by default. If for any reason you don't want to use this discard route, you can
configure the following commands under <b>router ospf</b>: <br />
<blockquote>
<pre><b>[no] <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp1.html#wp1031432">discard-route</a> <span style="font-style: italic; font-weight: normal;">internal</span>
</b>
</pre>
</blockquote>
or<br />
<blockquote>
<pre><b>[no] discard-route <span style="font-style: italic; font-weight: normal;">external</span>
</b>
</pre>
</blockquote>
Note about summary address metric calculation: <a class="exit" href="http://www.ietf.org/rfc/rfc1583.txt">RFC 1583</a> called for calculating the metric for summary routes based on the minimum
metric of the component paths available. <br />
<a class="exit" href="http://www.ietf.org/rfc/rfc2178.txt">RFC
2178</a> (now obsoleted by <a class="exit" href="http://www.ietf.org/rfc/rfc2328.txt">RFC 2328</a>)
changed the specified method for calculating metrics for summary routes so the
component of the summary with the maximum (or largest) cost would determine the
cost of the summary. <br />
Prior to IOS 12.0, Cisco was compliant with the then-current <a class="exit" href="http://www.ietf.org/rfc/rfc1583.txt">RFC 1583</a>. As
of IOS 12.0, Cisco changed the behavior of OSPF to be compliant with the new
standard, <a class="exit" href="http://www.ietf.org/rfc/rfc2328.txt">RFC
2328</a>. This situation created the possibility of sub-optimal routing if
all of the ABRs in an area were not upgraded to the new code at the same time.
In order to address this potential problem, a command has been added to the
OSPF configuration of Cisco IOS that allows you to selectively disable
compatibility with <a class="exit" href="http://www.ietf.org/rfc/rfc2328.txt">RFC 2328</a>. The new configuration command is under <b>router ospf</b>, and has the following syntax: <br />
<blockquote>
<pre><b>[no] compatible rfc1583</b> </pre>
</blockquote>
The default setting is compatible with <a class="exit" href="http://www.ietf.org/rfc/rfc1583.txt">RFC 1583</a>.
This command is available in the following versions of IOS: <br />
<ul>
<li>
12.1(03)DC<br />
</li>
<li>
12.1(03)DB <br />
</li>
<li>
12.001(001.003) - 12.1 Mainline <br />
</li>
<li>
12.1(01.03)T - 12.1 T-Train <br />
</li>
<li>
12.000(010.004) - 12.0 Mainline <br />
</li>
<li>
12.1(01.03)E - 12.1 E-Train <br />
</li>
<li>
12.1(01.03)EC <br />
</li>
<li>
12.0(10.05)W05(18.00.10) <br />
</li>
<li>
12.0(10.05)SC <br />
</li>
</ul>
<h3>
<a href="https://www.blogger.com/null" name="t30">External Route Summarization</a> </h3>
External route summarization is specific to external routes that are
injected into OSPF via redistribution. Also, make sure that external ranges
that are being summarized are contiguous. Summarization overlapping ranges from
two different routers could cause packets to be sent to the wrong destination.
Summarization is done via the following <b> <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html#wp1014453">router
ospf</a> </b> subcommand: <br />
<blockquote>
<pre><b>
<a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp3.html#wp1027853">summary-address</a> <span style="font-style: italic; font-weight: normal;">ip-address mask</span>
</b>
</pre>
</blockquote>
This command is effective only on ASBRs doing redistribution into OSPF. <br />
<img alt="spf15.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf15.gif" usemap="" /> <br />
In the above diagram, RTA and RTD are injecting external routes into
OSPF by redistribution. RTA is injecting subnets in the range 128.213.64-95 and
RTD is injecting subnets in the range 128.213.96-127. In order to summarize the
subnets into one range on each router we can do the following:<br />
<blockquote>
<pre>RTA#
router ospf 100
summary-address 128.213.64.0 255.255.224.0
redistribute bgp 50 metric 1000 subnets
RTD#
router ospf 100
summary-address 128.213.96.0 255.255.224.0
redistribute bgp 20 metric 1000 subnets</pre>
</blockquote>
This will cause RTA to generate one external route 128.213.64.0
255.255.224.0 and will cause RTD to generate 128.213.96.0 255.255.224.0. <br />
Note that the <b>summary-address</b> command has no
effect if used on RTB because RTB is not doing the redistribution into
OSPF.<br />
<h2>
<a href="https://www.blogger.com/null" name="t31">Stub Areas</a> </h2>
OSPF allows certain areas to be configured as stub areas. External
networks, such as those redistributed from other protocols into OSPF, are not
allowed to be flooded into a stub area. Routing from these areas to the outside
world is based on a default route. Configuring a stub area reduces the
topological database size inside an area and reduces the memory requirements of
routers inside that area. <br />
An area could be qualified a stub when there is a single exit point
from that area or if routing to outside of the area does not have to take an
optimal path. The latter description is just an indication that a stub area
that has multiple exit points, will have one or more area border routers
injecting a default into that area. Routing to the outside world could take a
sub-optimal path in reaching the destination by going out of the area via an
exit point which is farther to the destination than other exit points. <br />
Other stub area restrictions are that a stub area cannot be used as a
transit area for virtual links. Also, an ASBR cannot be internal to a stub
area. These restrictions are made because a stub area is mainly configured not
to carry external routes and any of the above situations cause external links
to be injected in that area. The backbone, of course, cannot be configured as
stub. <br />
All OSPF routers inside a stub area have to be configured as stub
routers. This is because whenever an area is configured as stub, all interfaces
that belong to that area will start exchanging Hello packets with a flag that
indicates that the interface is stub. Actually this is just a bit in the Hello
packet (E bit) that gets set to 0. All routers that have a common segment have
to agree on that flag. If they don't, then they will not become neighbors and
routing will not take effect. <br />
An extension to stub areas is what is called "totally stubby areas".
Cisco indicates this by adding a "no-summary" keyword to the stub area
configuration. A totally stubby area is one that blocks external routes and
summary routes (inter-area routes) from going into the area. This way,
intra-area routes and the default of 0.0.0.0 are the only routes injected into
that area. <br />
The command that configures an area as stub is: <br />
<blockquote>
<pre><a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp1.html#wp1011808">
<b>area<span style="font-style: italic; font-weight: normal;"> <area-id> </area-id></span>stub [no-summary]</b>
</a>
</pre>
</blockquote>
and the command that configures a default-cost into an area is: <br />
<blockquote>
<pre><a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp1.html#wp1011071">
<b>area <span style="font-style: italic; font-weight: normal;">area-id</span> default-cost <span style="font-style: italic; font-weight: normal;">cost</span>
</b>
</a>
</pre>
</blockquote>
If the cost is not set using the above command, a cost of 1 will be
advertised by the ABR. <br />
<img alt="spf16.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf16.gif" usemap="" /> <br />
Assume that area 2 is to be configured as a stub area. The following
example will show the routing table of RTE before and after configuring area 2
as stub.<br />
<blockquote>
<pre>RTC#
interface Ethernet 0
ip address 203.250.14.1 255.255.255.0
interface Serial1
ip address 203.250.15.1 255.255.255.252
router ospf 10
network 203.250.15.0 0.0.0.255 area 2
network 203.250.14.0 0.0.0.255 area 0
RTE#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
203.250.15.0 255.255.255.252 is subnetted, 1 subnets
C 203.250.15.0 is directly connected, Serial0
O IA 203.250.14.0 [110/74] via 203.250.15.1, 00:06:31, Serial0
128.213.0.0 is variably subnetted, 2 subnets, 2 masks
O E2 128.213.64.0 255.255.192.0
[110/10] via 203.250.15.1, 00:00:29, Serial0
O IA 128.213.63.0 255.255.255.252
[110/84] via 203.250.15.1, 00:03:57, Serial0
131.108.0.0 255.255.255.240 is subnetted, 1 subnets
O 131.108.79.208 [110/74] via 203.250.15.1, 00:00:10, Serial0</pre>
</blockquote>
RTE has learned the inter-area routes (O IA) 203.250.14.0 and
128.213.63.0 and it has learned the intra-area route (O) 131.108.79.208 and the
external route (O E2) 128.213.64.0.<br />
If we configure area 2 as stub, we need to do the following: <br />
<blockquote>
<pre>RTC#
interface Ethernet 0
ip address 203.250.14.1 255.255.255.0
interface Serial1
ip address 203.250.15.1 255.255.255.252
router ospf 10
network 203.250.15.0 0.0.0.255 area 2
network 203.250.14.0 0.0.0.255 area 0
area 2 stub
RTE#
interface Serial1
ip address 203.250.15.2 255.255.255.252
router ospf 10
network 203.250.15.0 0.0.0.255 area 2
area 2 stub</pre>
</blockquote>
Note that the stub command is configured on RTE also, otherwise RTE
will never become a neighbor to RTC. The default cost was not set, so RTC will
advertise 0.0.0.0 to RTE with a metric of 1.<br />
<blockquote>
<pre>RTE#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is 203.250.15.1 to network 0.0.0.0
203.250.15.0 255.255.255.252 is subnetted, 1 subnets
C 203.250.15.0 is directly connected, Serial0
O IA 203.250.14.0 [110/74] via 203.250.15.1, 00:26:58, Serial0
128.213.0.0 255.255.255.252 is subnetted, 1 subnets
O IA 128.213.63.0 [110/84] via 203.250.15.1, 00:26:59, Serial0
131.108.0.0 255.255.255.240 is subnetted, 1 subnets
O 131.108.79.208 [110/74] via 203.250.15.1, 00:26:59, Serial0
O*IA 0.0.0.0 0.0.0.0 [110/65] via 203.250.15.1, 00:26:59, Serial0</pre>
</blockquote>
Note that all the routes show up except the external routes which were
replaced by a default route of 0.0.0.0. The cost of the route happened to be 65
(64 for a T1 line + 1 advertised by RTC). <br />
We will now configure area 2 to be totally stubby, and change the
default cost of 0.0.0.0 to 10. <br />
<blockquote>
<pre>RTC#
interface Ethernet 0
ip address 203.250.14.1 255.255.255.0
interface Serial1
ip address 203.250.15.1 255.255.255.252
router ospf 10
network 203.250.15.0 0.0.0.255 area 2
network 203.250.14.0 0.0.0.255 area 0
area 2 stub no-summary
area 2 default cost 10
RTE#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
203.250.15.0 255.255.255.252 is subnetted, 1 subnets
C 203.250.15.0 is directly connected, Serial0
131.108.0.0 255.255.255.240 is subnetted, 1 subnets
O 131.108.79.208 [110/74] via 203.250.15.1, 00:31:27, Serial0
O*IA 0.0.0.0 0.0.0.0 [110/74] via 203.250.15.1, 00:00:00, Serial0</pre>
</blockquote>
Note that the only routes that show up are the intra-area routes (O)
and the default-route 0.0.0.0. The external and inter-area routes have been
blocked. The cost of the default route is now 74 (64 for a T1 line + 10
advertised by RTC). No configuration is needed on RTE in this case. The area is
already stub, and the <b>no-summary</b> command does not
affect the Hello packet at all as the stub command does. <br />
<h2>
<a href="https://www.blogger.com/null" name="t32">Redistributing Routes into OSPF</a> </h2>
Redistributing routes into OSPF from other routing protocols or from
static will cause these routes to become OSPF external routes. To redistribute
routes into OSPF, use the following command in router configuration mode: <br />
<blockquote>
<pre><b>
<a href="http://www.cisco.com/en/US/docs/ios/12_2/iproute/command/reference/1rfindp2.html#wp1059217">redistribute</a> <span style="font-style: italic; font-weight: normal;">protocol [process-id]</span> [metric <span style="font-style: italic; font-weight: normal;">value</span>]</b>
<b>[metric-type <span style="font-style: italic; font-weight: normal;">value</span>] [route-map <span style="font-style: italic; font-weight: normal;">map-tag</span>] [subnets]</b>
</pre>
</blockquote>
<div class="note">
<b>Note: </b>The above command should be on one line. </div>
The protocol and process-id are the protocol that we are injecting into
OSPF and its process-id if it exits. The metric is the cost we are assigning to
the external route. If no metric is specified, OSPF puts a default value of 20
when redistributing routes from all protocols except BGP routes, which get a
metric of 1. The metric-type is discussed in the next paragraph. <br />
The route-map is a method used to control the redistribution of routes
between routing domains. The format of a route map is: <br />
<blockquote>
<pre><b>
<a href="http://www.cisco.com/en/US/docs/ios/12_2/iproute/command/reference/1rfindp2.html#wp1044142">route-map</a> <span style="font-style: italic; font-weight: normal;">map-tag</span> [[permit | deny] | [<span style="font-style: italic; font-weight: normal;">sequence-number</span>]]</b>
</pre>
</blockquote>
When redistributing routes into OSPF, only routes that are not
subnetted are redistributed if the <b>subnets</b> keyword
is not specified. <br />
<h3>
<a href="https://www.blogger.com/null" name="t33">E1 vs. E2 External Routes</a> </h3>
External routes fall under two categories, external type 1 and external
type 2. The difference between the two is in the way the cost (metric) of the
route is being calculated. The cost of a type 2 route is always the external
cost, irrespective of the interior cost to reach that route. A type 1 cost is
the addition of the external cost and the internal cost used to reach that
route. A type 1 route is always preferred over a type 2 route for the same
destination. This is illustrated in the following
diagram:<br />
<img alt="spf17.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf17.gif" usemap="" /> <br />
As the above diagram shows, RTA is redistributing two external routes
into OSPF. N1 and N2 both have an external cost of <b>x</b>. The only
difference is that N1 is redistributed into OSPF with a metric-type 1 and N2 is
redistributed with a metric-type 2. If we follow the routes as they flow from
Area 1 to Area 0, the cost to reach N2 as seen from RTB or RTC will always be <b>x</b>. The internal cost along the way is not considered. On the
other hand, the cost to reach N1 is incremented by the internal cost. The cost
is <b>x+y</b> as seen from RTB and <b>x+y+z</b> as seen
from RTC. <br />
If the external routes are both type 2 routes and the external costs to
the destination network are equal, then the path with the lowest cost to the
ASBR is selected as the best path. <br />
Unless otherwise specified, the default external type given to external
routes is type 2. <br />
<a class="show-image-alone" href="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf18.gif" title="Related image, diagram or screenshot."><img alt="spf18.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf18.gif" usemap="" /></a> <br />
Suppose we added two static routes pointing to E0 on RTC: 16.16.16.0
255.255.255.0 (the /24 notation indicates a 24 bit mask starting from the far
left) and 128.213.0.0 255.255.0.0. The following shows the different behaviors
when different parameters are used in the <b>redistribute</b> command on RTC: <br />
<blockquote>
<pre>RTC#
interface Ethernet0
ip address 203.250.14.2 255.255.255.0
interface Serial1
ip address 203.250.15.1 255.255.255.252
router ospf 10
<b>redistribute static</b>
network 203.250.15.0 0.0.0.255 area 2
network 203.250.14.0 0.0.0.255 area 0
ip route 16.16.16.0 255.255.255.0 Ethernet0
ip route 128.213.0.0 255.255.0.0 Ethernet0
RTE#
interface Serial0
ip address 203.250.15.2 255.255.255.252
router ospf 10
network 203.250.15.0 0.0.0.255 area 2</pre>
</blockquote>
The following is the output of <b>show ip route</b> on RTE: <br />
<blockquote>
<pre>RTE#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
203.250.15.0 255.255.255.252 is subnetted, 1 subnets
C 203.250.15.0 is directly connected, Serial0
O IA 203.250.14.0 [110/74] via 203.250.15.1, 00:02:31, Serial0
O E2 128.213.0.0 [110/20] via 203.250.15.1, 00:02:32, Serial0</pre>
</blockquote>
Note that the only external route that has appeared is 128.213.0.0,
because we did not use the <b>subnet</b> keyword. Remember
that if the <b>subnet</b> keyword is not used, only routes
that are not subnetted will be redistributed. In our case 16.16.16.0 is a class
A route that is subnetted and it did not get redistributed. Since the <b>metric</b> keyword was not used (or a <b>default-metric</b> statement under router OSPF), the
cost allocated to the external route is 20 (the default is 1 for BGP). If we
use the following: <br />
<blockquote>
<pre><b>redistribute static metric 50 subnets</b>
RTE#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M
- mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
16.0.0.0 255.255.255.0 is subnetted, 1 subnets
O E2 16.16.16.0 [110/<b>50</b>] via 203.250.15.1, 00:00:02, Serial0
203.250.15.0 255.255.255.252 is subnetted, 1 subnets
C 203.250.15.0 is directly connected, Serial0
O IA 203.250.14.0 [110/74] via 203.250.15.1, 00:00:02, Serial0
O E2 128.213.0.0 [110/<b>50</b>] via 203.250.15.1, 00:00:02, Serial0</pre>
</blockquote>
Note that 16.16.16.0 has shown up now and the cost to external routes
is 50. Since the external routes are of type 2 (E2), the internal cost has not
been added. Suppose now, we change the type to E1: <br />
<blockquote>
<pre><b>redistribute static metric 50 metric-type 1 subnets</b>
RTE#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
16.0.0.0 255.255.255.0 is subnetted, 1 subnets
O E1 16.16.16.0 [110/<b>114</b>] via 203.250.15.1, 00:04:20, Serial0
203.250.15.0 255.255.255.252 is subnetted, 1 subnets
C 203.250.15.0 is directly connected, Serial0
O IA 203.250.14.0 [110/74] via 203.250.15.1, 00:09:41, Serial0
O E1 128.213.0.0 [110/<b>114</b>] via 203.250.15.1, 00:04:21, Serial0</pre>
</blockquote>
Note that the type has changed to E1 and the cost has been incremented
by the internal cost of S0 which is 64, the total cost is 64+50=114.<br />
Assume that we add a route map to RTC's configuration, we will get the
following: <br />
<blockquote>
<pre>RTC#
interface Ethernet0
ip address 203.250.14.2 255.255.255.0
interface Serial1
ip address 203.250.15.1 255.255.255.252
router ospf 10
<b>redistribute static metric 50 metric-type 1 subnets route-map STOPUPDATE</b>
network 203.250.15.0 0.0.0.255 area 2
network 203.250.14.0 0.0.0.255 area 0
ip route 16.16.16.0 255.255.255.0 Ethernet0
ip route 128.213.0.0 255.255.0.0 Ethernet0
access-list 1 permit 128.213.0.0 0.0.255.255
route-map STOPUPDATE permit 10
match ip address 1</pre>
</blockquote>
The route map above will only permit 128.213.0.0 to be redistributed
into OSPF and will deny the rest. This is why 16.16.16.0 does not show up in
RTE's routing table anymore.<br />
<blockquote>
<pre>RTE#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
203.250.15.0 255.255.255.252 is subnetted, 1 subnets
C 203.250.15.0 is directly connected, Serial0
O IA 203.250.14.0 [110/74] via 203.250.15.1, 00:00:04, Serial0
O E1 128.213.0.0 [110/114] via 203.250.15.1, 00:00:05, Serial0</pre>
</blockquote>
<h2>
<a href="https://www.blogger.com/null" name="t34">Redistributing OSPF into Other Protocols</a> </h2>
<h3>
<a href="https://www.blogger.com/null" name="t35">Use of a Valid Metric</a> </h3>
Whenever you redistribute OSPF into other protocols, you have to
respect the rules of those protocols. In particular, the metric applied should
match the metric used by that protocol. For example, the RIP metric is a hop
count ranging between 1 and 16, where 1 indicates that a network is one hop
away and 16 indicates that the network is unreachable. On the other hand IGRP
and EIGRP require a metric of the form: <br />
<blockquote>
<pre><b>
<a href="http://www.cisco.com/en/US/docs/ios/12_2/iproute/command/reference/1rfospf.html#wp1017910">default-metric </a>
<span style="font-style: italic; font-weight: normal;">bandwidth delay reliability loading mtu</span>
</b>
</pre>
</blockquote>
<h3>
<a href="https://www.blogger.com/null" name="t36">VLSM</a> </h3>
Another issue to consider is VLSM (Variable Length Subnet
Guide)(Appendix C). OSPF can carry multiple subnet information for the same
major net, but other protocols such as RIP and IGRP (EIGRP is OK with VLSM)
cannot. If the same major net crosses the boundaries of an OSPF and RIP domain,
VLSM information redistributed into RIP or IGRP will be lost and static routes
will have to be configured in the RIP or IGRP domains. The following example
illustrates this problem: <br />
<img alt="spf19.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf19.gif" usemap="" /> <br />
In the above diagram, RTE is running OSPF and RTA is running RIP. RTC
is doing the redistribution between the two protocols. The problem is that the
class C network 203.250.15.0 is variably subnetted, it has two different masks
255.255.255.252 and 255.255.255.192. Let us look at the configuration and the
routing tables of RTE and RTA: <br />
<blockquote>
<pre>RTA#
interface Ethernet0
ip address 203.250.15.68 255.255.255.192
router rip
network 203.250.15.0
RTC#
interface Ethernet0
ip address 203.250.15.67 255.255.255.192
interface Serial1
ip address 203.250.15.1 255.255.255.252
router ospf 10
redistribute rip metric 10 subnets
network 203.250.15.0 0.0.0.255 area 0
router rip
redistribute ospf 10 metric 2
network 203.250.15.0
RTE#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
203.250.15.0 is variably subnetted, 2 subnets, 2 masks
C 203.250.15.0 255.255.255.252 is directly connected, Serial0
O 203.250.15.64 255.255.255.192
[110/74] via 203.250.15.1, 00:15:55, Serial0
RTA#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
203.250.15.0 255.255.255.192 is subnetted, 1 subnets
C 203.250.15.64 is directly connected, Ethernet0</pre>
</blockquote>
Note that RTE has recognized that 203.250.15.0 has two subnets while
RTA thinks that it has only one subnet (the one configured on the interface).
Information about subnet 203.250.15.0 255.255.255.252 is lost in the RIP
domain. In order to reach that subnet, a static route needs to be configured on
RTA: <br />
<blockquote>
<pre>RTA#
interface Ethernet0
ip address 203.250.15.68 255.255.255.192
router rip
network 203.250.15.0
<b>ip route 203.250.15.0 255.255.255.0 203.250.15.67</b>
</pre>
</blockquote>
This way RTA will be able to reach the other subnets. <br />
<h3>
<a href="https://www.blogger.com/null" name="t37">Mutual Redistribution</a> </h3>
Mutual redistribution between protocols should be done very carefully
and in a controlled manner. Incorrect configuration could lead to potential
looping of routing information. A rule of thumb for mutual redistribution is
not to allow information learned from a protocol to be injected back into the
same protocol. Passive interfaces and distribute lists should be applied on the
redistributing routers. Filtering information with link-state protocols such as
OSPF is a tricky business. <b>Distribute-list out</b> works on the
ASBR to filter redistributed routes into other protocols. <b>Distribute-list in</b> works on any router to prevent routes from
being put in the routing table, but it does not prevent link-state packets from
being propagated, downstream routers would still have the routes. It is better
to avoid OSPF filtering as much as possible if filters can be applied on the
other protocols to prevent loops. <br />
<img alt="spf20.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf20.gif" usemap="" /> <br />
To illustrate, suppose RTA, RTC, and RTE are running RIP. RTC and RTA
are also running OSPF. Both RTC and RTA are doing redistribution between RIP
and OSPF. Let us assume that you do not want the RIP coming from RTE to be
injected into the OSPF domain so you put a passive interface for RIP on E0 of
RTC. However, you have allowed the RIP coming from RTA to be injected into
OSPF. Here is the outcome: <br />
<div class="note">
<b>Note: </b>Do not use the following configuration. </div>
<blockquote>
<pre>RTE#
interface Ethernet0
ip address 203.250.15.130 255.255.255.192
interface Serial0
ip address 203.250.15.2 255.255.255.192
router rip
network 203.250.15.0
RTC#
interface Ethernet0
ip address 203.250.15.67 255.255.255.192
interface Serial1
ip address 203.250.15.1 255.255.255.192
router ospf 10
redistribute rip metric 10 subnets
network 203.250.15.0 0.0.0.255 area 0
router rip
redistribute ospf 10 metric 2
passive-interface Ethernet0
network 203.250.15.0
RTA#
interface Ethernet0
ip address 203.250.15.68 255.255.255.192
router ospf 10
redistribute rip metric 10 subnets
network 203.250.15.0 0.0.0.255 area 0
router rip
redistribute ospf 10 metric 1
network 203.250.15.0
RTC#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
203.250.15.0 255.255.255.192 is subnetted, 4 subnets
C 203.250.15.0 is directly connected, Serial1
C 203.250.15.64 is directly connected, Ethernet0
<b>R 203.250.15.128 [120/1] via 203.250.15.68, 00:01:08, Ethernet0
[120/1] via 203.250.15.2, 00:00:11, Serial1</b>
O 203.250.15.192 [110/20] via 203.250.15.68, 00:21:41, Ethernet0</pre>
</blockquote>
Note that RTC has two paths to reach 203.250.15.128 subnet: Serial 1
and Ethernet 0 (E0 is obviously the wrong path). This happened because RTC gave
that entry to RTA via OSPF and RTA gave it back via RIP because RTA did not
learn it via RIP. This example is a very small scale of loops that can occur
because of an incorrect configuration. In large networks this situation gets
even more aggravated.<br />
In order to fix the situation in our example, you could stop RIP from
being sent on RTA's Ethernet 0 via a passive interface. This might not be
suitable in case some routers on the Ethernet are RIP only routers. In this
case, you could allow RTC to send RIP on the Ethernet; this way RTA will not
send it back on the wire because of split horizon (this might not work on NBMA
media if split horizon is off). Split horizon does not allow updates to be sent
back on the same interface they were learned from (via the same protocol).
Another good method is to apply distribute-lists on RTA to deny subnets learned
via OSPF from being put back into RIP on the Ethernet. The latter is the one we
will be using: <br />
<blockquote>
<pre>RTA#
interface Ethernet0
ip address 203.250.15.68 255.255.255.192
router ospf 10
redistribute rip metric 10 subnets
network 203.250.15.0 0.0.0.255 area 0
router rip
redistribute ospf 10 metric 1
network 203.250.15.0
<b>distribute-list 1 out ospf 10</b>
</pre>
</blockquote>
And the output of RTC's routing table would be: <br />
<blockquote>
<pre>RTF#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is not set
203.250.15.0 255.255.255.192 is subnetted, 4 subnets
C 203.250.15.0 is directly connected, Serial1
C 203.250.15.64 is directly connected, Ethernet0
<b>R 203.250.15.128 [120/1] via 203.250.15.2, 00:00:19, Serial1</b>
O 203.250.15.192 [110/20] via 203.250.15.68, 00:21:41, Ethernet0</pre>
</blockquote>
<h2>
<a href="https://www.blogger.com/null" name="t38">Injecting Defaults into OSPF</a> </h2>
An autonomous system boundary router (ASBR) can be forced to generate a
default route into the OSPF domain. As discussed earlier, a router becomes an
ASBR whenever routes are redistributed into an OSPF domain. However, an ASBR
does not, by default, generate a default route into the OSPF routing domain. <br />
To have OSPF generate a default route use the following: <br />
<blockquote>
<pre><b>
<a href="http://www.cisco.com/en/US/docs/ios/12_2/iproute/command/reference/1rfospf.html#wp1025098">default-information originate</a> [always] [metric <span style="font-style: italic; font-weight: normal;">metric-value</span>]</b>
<b>[metric-type <span style="font-style: italic; font-weight: normal;">type-value</span>] [route-map <span style="font-style: italic; font-weight: normal;">map-name</span>]</b>
</pre>
</blockquote>
<div class="note">
<b>Note: </b>The above command should be on one line. </div>
There are two ways to generate a default. The first is to advertise
0.0.0.0 inside the domain, but only if the ASBR itself already has a default
route. The second is to advertise 0.0.0.0 regardless whether the ASBR has a
default route. The latter can be set by adding the keyword <b>always</b>. You should be careful when using the <b>always</b> keyword. If your router advertises a default (0.0.0.0)
inside the domain and does not have a default itself or a path to reach the
destinations, routing will be broken. <br />
The metric and metric type are the cost and type (E1 or E2) assigned to
the default route. The route map specifies the set of conditions that need to
be satisfied in order for the default to be generated. <br />
<img alt="spf21.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf21.gif" usemap="" /> <br />
Assume that RTE is injecting a default-route 0.0.0.0 into RIP. RTC will
have a gateway of last resort of 203.250.15.2. RTC will not propagate the
default to RTA until we configure RTC with a <b>default-information
originate </b>command. <br />
<blockquote>
<pre>RTC#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is 203.250.15.2 to network 0.0.0.0
203.250.15.0 255.255.255.192 is subnetted, 4 subnets
C 203.250.15.0 is directly connected, Serial1
C 203.250.15.64 is directly connected, Ethernet0
R 203.250.15.128 [120/1] via 203.250.15.2, 00:00:17, Serial1
O 203.250.15.192 [110/20] via 203.250.15.68, 2d23, Ethernet0
R* 0.0.0.0 0.0.0.0 [120/1] via 203.250.15.2, 00:00:17, Serial1
[120/1] via 203.250.15.68, 00:00:32, Ethernet0
RTC#
interface Ethernet0
ip address 203.250.15.67 255.255.255.192
interface Serial1
ip address 203.250.15.1 255.255.255.192
router ospf 10
redistribute rip metric 10 subnets
network 203.250.15.0 0.0.0.255 area 0
<b>default-information originate metric 10</b>
router rip
redistribute ospf 10 metric 2
passive-interface Ethernet0
network 203.250.15.0
RTA#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is 203.250.15.67 to network 0.0.0.0
203.250.15.0 255.255.255.192 is subnetted, 4 subnets
O 203.250.15.0 [110/74] via 203.250.15.67, 2d23, Ethernet0
C 203.250.15.64 is directly connected, Ethernet0
O E2 203.250.15.128 [110/10] via 203.250.15.67, 2d23, Ethernet0
C 203.250.15.192 is directly connected, Ethernet1
O*E2 0.0.0.0 0.0.0.0 [110/10] via 203.250.15.67, 00:00:17, Ethernet0</pre>
</blockquote>
Note that RTA has learned 0.0.0.0 as an external route with metric 10.
The gateway of last resort is set to 203.250.15.67 as expected. <br />
<h2>
<a href="https://www.blogger.com/null" name="t39">OSPF Design Tips</a> </h2>
The OSPF RFC (1583) did not specify any guidelines for the number of
routers in an area or number the of neighbors per segment or what is the best
way to architect a network. Different people have different approaches to
designing OSPF networks. The important thing to remember is that any protocol
can fail under pressure. The idea is not to challenge the protocol but rather
to work with it in order to get the best behavior. The following are a list of
things to consider. <br />
<h3>
<a href="https://www.blogger.com/null" name="t40">Number of Routers per Area</a> </h3>
The maximum number of routers per area depends on several factors,
including the following: <br />
<ul>
<li>
What kind of area do you have?<br />
</li>
<li>
What kind of CPU power do you have in that area?<br />
</li>
<li>
What kind of media?<br />
</li>
<li>
Will you be running OSPF in NBMA mode?<br />
</li>
<li>
Is your NBMA network meshed?<br />
</li>
<li>
Do you have a lot of external LSAs in the network? <br />
</li>
<li>
Are other areas well summarized? <br />
</li>
</ul>
For this reason, it's difficult to specify a maximum number of routers
per area. Consult your local sales or system engineer for specific network
design help. <br />
<h3>
<a href="https://www.blogger.com/null" name="t41">Number of Neighbors</a> </h3>
The number of routers connected to the same LAN is also important. Each
LAN has a DR and BDR that build adjacencies with all other routers. The fewer
neighbors that exist on the LAN, the smaller the number of adjacencies a DR or
BDR have to build. That depends on how much power your router has. You could
always change the OSPF priority to select your DR. Also if possible, try to
avoid having the same router be the DR on more than one segment. If DR
selection is based on the highest RID, then one router could accidently become
a DR over all segments it is connected to. This router would be doing extra
effort while other routers are idle. <br />
<img alt="spf22.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf22.gif" usemap="" /> <br />
<h3>
<a href="https://www.blogger.com/null" name="t42">Number of Areas per ABR</a> </h3>
ABRs will keep a copy of the database for all areas they service. If a
router is connected to five areas for example, it will have to keep a list of
five different databases. The number of areas per ABR is a number that is
dependent on many factors, including type of area (normal, stub, NSSA), ABR CPU
power, number of routes per area, and number of external routes per area. For
this reason, a specific number of areas per ABR cannot be recommended. Of
course, it's better not to overload an ABR when you can always spread the areas
over other routers. The following diagram shows the difference between one ABR
holding five different databases (including area 0) and two ABRs holding three
databases each. Again, these are just guidelines, the more areas you configure
per ABR the lower performance you get. In some cases, the lower performance can
be tolerated. <br />
<img alt="spf23.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf23.gif" usemap="" /> <br />
<h3>
<a href="https://www.blogger.com/null" name="t43">Full Mesh vs. Partial Mesh</a> </h3>
Non Broadcast Multi-Access (NBMA) clouds such as Frame Relay or X.25,
are always a challenge. The combination of low bandwidth and too many
link-states is a recipe for problems. A partial mesh topology has proven to
behave much better than a full mesh. A carefully laid out point-to-point or
point-to-multipoint network works much better than multipoint networks that
have to deal with DR issues. <br />
<img alt="spf24.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf24.gif" usemap="" /> <br />
<h3>
<a href="https://www.blogger.com/null" name="t34a">Memory Issues</a> </h3>
It is not easy to figure out the memory needed for a particular OSPF
configuration. Memory issues usually come up when too many external routes are
injected in the OSPF domain. A backbone area with 40 routers and a default
route to the outside world would have less memory issues compared with a
backbone area with 4 routers and 33,000 external routes injected into OSPF. <br />
Memory could also be conserved by using a good OSPF design.
Summarization at the area border routers and use of stub areas could further
minimize the number of routes exchanged. <br />
The total memory used by OSPF is the sum of the memory used in the
routing table (<b> <a href="http://www.cisco.com/en/US/docs/ios/12_2/iproute/command/reference/1rfindp2.html#wp1022845">show
ip route summary</a> </b>) and the memory used in the link-state
database. The following numbers are a rule of thumb estimate. Each entry in the
routing table will consume between approximately 200 and 280 bytes plus 44
bytes per extra path. Each LSA will consume a 100 byte overhead plus the size
of the actual link state advertisement, possibly another 60 to 100 bytes (for
router links, this depends on the number of interfaces on the router). This
should be added to memory used by other processes and by the IOS itself. If you
really want to know the exact number, you can do a <b>show
memory</b> with and without OSPF being turned on. The difference in
the processor memory used would be the answer (keep a backup copy of the
configs). <br />
Normally, a routing table with less than 500K bytes could be
accommodated with 2 to 4 MB RAM; Large networks with greater than 500K may need
8 to 16 MB, or 32 to 64 MB if full routes are injected from the Internet. <br />
<h2>
<a href="https://www.blogger.com/null" name="sum">Summary</a> </h2>
The OSPF protocol defined in RFC 1583, provides a high functionality
open protocol that allows multiple vendor networks to communicate using the
TCP/IP protocol family. Some of the benefits of OSPF are, fast convergence,
VLSM, authentication, hierarchical segmentation, route summarization, and
aggregation which are needed to handle large and complicated networks. <br />
<h2>
<a href="https://www.blogger.com/null" name="appa">Appendix A: Link-State Database Synchronization</a> </h2>
<img alt="spf25.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf25.gif" usemap="" /> <br />
In the above diagram, routers on the same segment go through a series
of states before forming a successful adjacency. The neighbor and DR election
are done via the Hello protocol. Whenever a router sees itself in his
neighbor's Hello packet, the state transitions to "2-Way". At that point DR and
BDR election is performed on multi-access segments. A router continues forming
an adjacency with a neighbor if either of the two routers is a DR or BDR or
they are connected via a point-to-point or virtual link. <br />
In the <b>Exstart</b> state,the two neighbors form a
Master/Slave relationship where they agree on a initial <b>sequence
number</b>. The sequence number is used to detect old or duplicate
Link-State Advertisements (LSA). <br />
In the <b>Exchange</b> state, Database Description Packets
(DD) will get exchanged. These are abbreviated link-state advertisements in the
form of link-state headers. The header supplies enough information to identify
a link. The master node sends DD packets which are acknowledged with DD packets
from the slave node. All adjacencies in exchange state or greater are used by
the flooding procedure. These adjacencies are fully capable of transmitting and
receiving all types of OSPF routing protocol packets. <br />
In the <b>Loading</b> state, link-state request packets are
sent to neighbors, asking for more recent advertisements that have been
discovered but not yet received. Each router builds a list of required LSAs to
bring its adjacency up to date. A <b>Retransmission</b> List is
maintained to make sure that every LSA is acknowledged. To specify the number
of seconds between link-state advertisement retransmissions for the adjacency
you can use: <br />
<blockquote>
<pre><b>
<a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html#wp1012363">ip ospf retransmit-interval </a>
<span style="font-style: italic; font-weight: normal;">seconds</span>
</b>
</pre>
</blockquote>
Link-state update packets are sent in response to request packets. The
link-state update packets will be flooded over all adjacencies. <br />
In the <b>Full</b> state, the neighbor routers are fully
adjacent. The databases for a common area are an exact match between adjacent
routers. <br />
Each LSA has an <b>age</b> field that gets periodically
incremented while it is contained in the database or as it gets flooded
throughout the area. When an LSA reaches a <b>Maxage</b> it gets
flushed from the database if that LSA is not on any neighbors retransmission
list. <br />
<h3>
<a href="https://www.blogger.com/null" name="appa1">Link-State Advertisements</a> </h3>
<img alt="spf26.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf26.gif" usemap="" /> <br />
Link-state advertisements are broken into five types. Router Links (RL)
are generated by all routers. These links describe the state of the router
interfaces inside a particular area. These links are only flooded inside the
router's area. Network Links (NL) are generated by a DR of a particular
segment; these are an indication of the routers connected to that segment.
Summary Links (SL) are the inter-area links (type 3); these links will list the
networks inside other areas but still belonging to the autonomous system.
Summary links are injected by the ABR from the backbone into other areas and
from other areas into the backbone. These links are used for aggregation
between areas. Other types of summary links are the asbr-summary links. These
are type 4 links that point to the ASBR. This is to make sure that all routers
know the way to exit the autonomous system. The last type is type 5, External
Links (EL), these are injected by the ASBR into the domain. <br />
The above diagram illustrates the different link types. RTA generates a
router link (RL) into area 1, and it also generates a network link (NL) since
it happens the be the DR on that particular segment. RTB is an ABR, and it
generates RL into area 1 and area 0. RTB also generates summary links into area
1 and area 0. These links are the list of networks that are interchanged
between the two areas. An ASBR summary link is also injected by RTB into area
1. This is an indication of the existence of RTD, the autonomous system
boundary router (ASBR). Similarly RTC, which is another ABR, generates RL for
area 0 and area 2, and a SL (3) into area 2 (since it is not announcing any
ASBR), and a SL (3,4) into area 0 announcing RTD. RTD generates a RL for area 2
and generates an EL for external routes learned via BGP. The external routers
will be flooded all over the domain. <br />
The following table is a summary of the link state advertisements. <br />
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1">
<tbody>
<tr>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">LS Type</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">Advertisement Description</th>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Router Link advertisements. Generated by each router for each
area it belongs to. They describe the states of the router's link to the area.
These are only flooded within a particular area.</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">2</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Network Link advertisements. Generated by Designated Routers.
They describe the set of routers attached to a particular network. Flooded in
the area that contains the network.</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">3 or 4</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Summary Link advertisements. Generated by Area Border routers.
They describe inter-area (between areas) routes. Type 3 describes routes to
networks, also used for aggregating routes. Type 4 describes routes to
ASBR.</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">5</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">AS external link advertisements. Originated by ASBR. They
describe routes to destinations external to the AS. Flooded all over except
stub areas.</td>
</tr>
</tbody></table>
If you look at the OSPF database in detail, using <b> <a href="http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp3.html#wp1012173">show
ip ospf database detail</a> </b>, you will see different keywords
such as Link-Data, Link-ID, and Link-state ID. These terms become confusing as
the value of each depends on the link state type and the link-type. We will go
over this terminology and will provide a detailed example on the OSPF database
as seen from the router. <br />
The Link-State ID basically defines the identity of the link-state
depending on the LS type. <b>Router Links</b> are identified by the
router ID (RID) of the router that originated the advertisement. <b>Network Links</b> are identified by the relative IP address of the
DR. This makes sense because Network Links are originated by the Designated
Router. <b>Summary Links</b> (type 3) are identified by the IP
network numbers of the destinations they are pointing at. <b>ASBR Summary
Links</b> (Summary Links type 4) are identified by the RID of the ASBR.
Finally, <b>External Links</b> are identified by the IP network
numbers of the external destinations they are pointing at. The following table
summarizes this information: <br />
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1">
<tbody>
<tr>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">LS Type</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">Link State ID (In the high level view of the database when
referencing a router this is called Link ID) </th>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">The originating Router's Router ID (RID).</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">2</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">The IP interface address of the network's Designated
Router.</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">3</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">The destination network number.</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">4</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">The router ID of the described AS boundary router.</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">5</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">The external network number.</td>
</tr>
</tbody></table>
Next, we will describe the different links available: <br />
<b>Stub network links:</b> This term has nothing to do with
stub areas. A stub segment is a segment that has one router only attached to
it. An Ethernet or Token Ring segment that has one attached router is
considered a link to a stub network. A loopback interface is also considered a
link to stub network with a 255.255.255.255 mask (Host route). <br />
<b>Point-to-point links:</b> These could be physical or
logical (subinterfaces) point-to-point serial link connections. These links
could be numbered (an IP address is configured on the link) or unnumbered. <br />
<b>Transit links:</b> These are interfaces connected to
networks that have more than one router attached, hence the name transit. <br />
<b>Virtual links:</b> These are logical links that connect
areas that do not have physical connections to the backbone. Virtual links are
treated as numbered point-to-point links. <br />
The <b>link-ID</b> is an identification of the link itself.
This is different for each link type. A <b>transit link</b> is
identified by the IP address of the DR on that link. A <b>numbered
point-to-point link</b> is identified by the RID of the neighbor router on
the point-to-point link. <b>Virtual links are identical to point-to-point
links.</b> Finally, links to <b>stub networks</b> are identified
by the IP address of the interface to the stub network. The following table
summarizes this information: <br />
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1">
<tbody>
<tr>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">Link Type</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">Link ID (This applies to individual Links)</th>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Point-to-Point</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Neighbor Router ID</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Link to transit network</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Interface address of DR</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Link to stub network (In case of loopback mask is
255.255.255.255)</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Network/subnet number</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Virtual Link</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Neighbor Router ID</td>
</tr>
</tbody></table>
The <b>Link Data</b> is the IP address of the link, except
for stub network where the link data is the network mask.<br />
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1">
<tbody>
<tr>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">Link Type</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">Link Data</th>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Stub network</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Network Mask</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Other networks (applies to router links only)</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">Router's associated IP interface address</td>
</tr>
</tbody></table>
Finally, an <b>Advertising Router</b> is the RID of the
router that has sent the LSA. <br />
<h3>
<a href="https://www.blogger.com/null" name="appa2">OSPF Database Example</a> </h3>
<img alt="spf27.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf27.gif" usemap="" /> <br />
Given the network diagram above, the following configurations, and the
IP route tables, let us look at different ways of understanding the OSPF
database. <br />
<blockquote>
<pre>RTA#
interface Loopback0
ip address 203.250.13.41 255.255.255.255
interface Ethernet0
ip address 203.250.15.68 255.255.255.192
interface Ethernet1
ip address 203.250.15.193 255.255.255.192
router ospf 10
network 203.250.0.0 0.0.255.255 area 0
RTA#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is 203.250.15.67 to network 0.0.0.0
203.250.16.0 255.255.255.192 is subnetted, 1 subnets
O E2 203.250.16.128 [110/10] via 203.250.15.67, 00:00:50, Ethernet0
203.250.13.0 255.255.255.255 is subnetted, 1 subnets
C 203.250.13.41 is directly connected, Loopback0
203.250.15.0 255.255.255.192 is subnetted, 3 subnets
O IA 203.250.15.0 [110/74] via 203.250.15.67, 00:00:50, Ethernet0
C 203.250.15.64 is directly connected, Ethernet0
C 203.250.15.192 is directly connected, Ethernet1
O*E2 0.0.0.0 0.0.0.0 [110/10] via 203.250.15.67, 00:00:50, Ethernet0
RTE#
ip subnet-zero
interface Ethernet0
ip address 203.250.16.130 255.255.255.192
interface Serial0
ip address 203.250.15.2 255.255.255.192
router ospf 10
redistribute rip metric 10 subnets
network 203.250.15.0 0.0.0.63 area 1
default-information originate metric 10
router rip
network 203.250.16.0
ip route 0.0.0.0 0.0.0.0 Ethernet0
RTE#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
203.250.16.0 255.255.255.192 is subnetted, 1 subnets
C 203.250.16.128 is directly connected, Ethernet0
203.250.13.0 is variably subnetted, 2 subnets, 2 masks
O IA 203.250.13.41 255.255.255.255
[110/75] via 203.250.15.1, 00:16:31, Serial0
203.250.15.0 255.255.255.192 is subnetted, 3 subnets
C 203.250.15.0 is directly connected, Serial0
O IA 203.250.15.64 [110/74] via 203.250.15.1, 00:16:31, Serial0
O IA 203.250.15.192 [110/84] via 203.250.15.1, 00:16:31, Serial0
S* 0.0.0.0 0.0.0.0 is directly connected, Ethernet0
RTC#
ip subnet-zero
interface Ethernet0
ip address 203.250.15.67 255.255.255.192
interface Serial1
ip address 203.250.15.1 255.255.255.192
router ospf 10
network 203.250.15.64 0.0.0.63 area 0
network 203.250.15.0 0.0.0.63 area 1
RTF#<b>show ip route</b>
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
Gateway of last resort is 203.250.15.2 to network 0.0.0.0
203.250.16.0 255.255.255.192 is subnetted, 1 subnets
O E2 203.250.16.128 [110/10] via 203.250.15.2, 04:49:05, Serial1
203.250.13.0 255.255.255.255 is subnetted, 1 subnets
O 203.250.13.41 [110/11] via 203.250.15.68, 04:49:06, Ethernet0
203.250.15.0 255.255.255.192 is subnetted, 3 subnets
C 203.250.15.0 is directly connected, Serial1
C 203.250.15.64 is directly connected, Ethernet0
O 203.250.15.192 [110/20] via 203.250.15.68, 04:49:06, Ethernet0
O*E2 0.0.0.0 0.0.0.0 [110/10] via 203.250.15.2, 04:49:06, Serial1</pre>
</blockquote>
<b>General View of the Database</b> <br />
<blockquote>
<pre>RTC#<b>show ip ospf database</b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
Router Link States (Area 1)
Link ID ADV Router Age Seq# Checksum Link count
203.250.15.67 203.250.15.67 48 0x80000008 0xB112 2
203.250.16.130 203.250.16.130 212 0x80000006 0x3F44 2
Summary Net Link States (Area 1)
Link ID ADV Router Age Seq# Checksum
203.250.13.41 203.250.15.67 602 0x80000002 0x90AA
203.250.15.64 203.250.15.67 620 0x800000E9 0x3E3C
203.250.15.192 203.250.15.67 638 0x800000E5 0xA54E
Router Link States (Area 0)
Link ID ADV Router Age Seq# Checksum Link count
203.250.13.41 203.250.13.41 179 0x80000029 0x9ADA 3
203.250.15.67 203.250.15.67 675 0x800001E2 0xDD23 1
Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
203.250.15.68 203.250.13.41 334 0x80000001 0xB6B5
Summary Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
203.250.15.0 203.250.15.67 792 0x80000002 0xAEBD
Summary ASB Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
203.250.16.130 203.250.15.67 579 0x80000001 0xF9AF
AS External Link States
Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 203.250.16.130 1787 0x80000001 0x98CE 10
203.250.16.128 203.250.16.130 5 0x80000002 0x93C4 0</pre>
</blockquote>
This is a general look at the whole OSPF database. The database is
listed according to the areas. In this case, we are looking at RTC's database
which is an ABR. Both area 1 and area 0's databases are listed. Area 1 is
composed of router links and summary links. No network links exist because no
DR exists on any of the segments in area 1. No Summary ASBR links exist in area
1 because the only ASBR happens to be in area 0. External links do not belong
to any particular area as they are flooded all over. Note that all the links
are the cumulative links collected from all routers in an area. <br />
We will mainly concentrate on the database in area 0. The Link-ID
indicated here is actually the Link-State ID. This is a representation of the
whole router, not a particular link. This is a bit confusing, but just remember
that this high level Link-ID (should be Link-State ID) represents the whole
router and not just a link. <br />
<b>Router Links</b> <br />
<blockquote>
<pre>Router Link States (Area 0)
Link ID ADV Router Age Seq# Checksum <b>Link count</b>
203.250.13.41 203.250.13.41 179 0x80000029 0x9ADA <b>3</b>
203.250.15.67 203.250.15.67 675 0x800001E2 0xDD23 <b>1</b>
</pre>
</blockquote>
We will start with the router links. There are two entries listed for
203.250.13.41 and 203.250.15.67, these are the RIDs of the two routers in area
0. The number of links in area 0 for each router is also indicated. RTA has
three links to area 0 and RTC has one link. A detailed view of RTC's router
links follows:<br />
<blockquote>
<pre>RTC#<b>show ip ospf database router 203.250.15.67 </b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
Router Link States (Area 1)
LS age: 1169
Options: (No TOS-capability)
LS Type: Router Links
Link State ID: 203.250.15.67
Advertising Router: 203.250.15.67
LS Seq Number: 80000008
Checksum: 0xB112
Length: 48
Area Border Router
Number of Links: 2
Link connected to: another Router (point-to-point)
(Link ID) Neighboring Router ID: 203.250.16.130
(Link Data) Router Interface address: 203.250.15.1
Number of TOS metrics: 0
TOS 0 Metrics: 64
<b>Link connected to: a Stub Network
(Link ID) Network/subnet number: 203.250.15.0
(Link Data) Network Mask: 255.255.255.192
Number of TOS metrics: 0
TOS 0 Metrics: 64</b>
</pre>
</blockquote>
One thing to note here is that OSPF generates an extra stub link for
each point-to-point interface. Do not get confused if you see the link count
larger than the number of physical interfaces. <br />
<blockquote>
<pre>Router Link States (Area 0)
LS age: 1227
Options: (No TOS-capability)
<b>LS Type: Router Links
Link State ID: 203.250.15.67
Advertising Router: 203.250.15.67</b>
LS Seq Number: 80000003
Checksum: 0xA041
Length: 36
Area Border Router
<b> Number of Links: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 203.250.15.68
(Link Data) Router Interface address: 203.250.15.67</b>
Number of TOS metrics: 0
TOS 0 Metrics: 10</pre>
</blockquote>
Note that the Link ID is equal to the IP address (not the RID) of the
attached DR; in this case it is 203.250.15.68. The Link Data is RTC's own IP
address. <br />
<b>Network Links</b> <br />
<blockquote>
<pre>Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
203.250.15.68 203.250.13.41 334 0x80000001 0xB6B5</pre>
</blockquote>
One network link is listed, indicated by the interface IP address (not
the RID) of the DR, in this case 203.250.15.68. A detailed view of this entry
follows: <br />
<blockquote>
<pre>RTC#<b>show ip ospf database network</b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
Net Link States (Area 0)
Routing Bit Set on this LSA
LS age: 1549
Options: (No TOS-capability)
LS Type: Network Links
<b>Link State ID: 203.250.15.68 (address of Designated Router)
Advertising Router: 203.250.13.41</b>
LS Seq Number: 80000002
Checksum: 0xB4B6
Length: 32
Network Mask: 255.255.255.192
<b>Attached Router: 203.250.13.41
Attached Router: 203.250.15.67</b>
</pre>
</blockquote>
Note that the network link lists the RIDs of the routers attached to
the transit network; in this case the RIDs of RTA and RTC are listed. <br />
<b>Summary Links</b> <br />
<blockquote>
<pre>Summary Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
203.250.15.0 203.250.15.67 792 0x80000002 0xAEBD
Area 0 has one summary link represented by the IP network address of the
link 203.250.15.0. This link was injected by the ABR RTC from area 1 into
area 0. A detailed view of this summary link follows, summary links for
area 1 are not listed here:
RTC#<b>show ip ospf database summary (area 1 is not listed)</b>
Summary Net Link States (Area 0)
LS age: 615
Options: (No TOS-capability)
LS Type: Summary Links(Network)
<b>Link State ID: 203.250.15.0 (summary Network Number)</b>
Advertising Router: 203.250.15.67
LS Seq Number: 80000003
Checksum: 0xACBE
Length: 28
Network Mask: 255.255.255.192 TOS: 0 Metric: 64</pre>
</blockquote>
<b>Summary ASBR Links</b> <br />
<blockquote>
<pre>Summary ASB Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
203.250.16.130 203.250.15.67 579 0x80000001 0xF9AF</pre>
</blockquote>
This is an indication of who the ASBR is. In this case the ASBR is RTE
represented by its RID 203.250.16.130. The advertising router for this entry
into area 0 is RTC with RID 203.250.15.67. A detailed view of the summary ASBR
entry follows:<br />
<blockquote>
<pre>RTC#<b>show ip ospf database asbr-summary</b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
Summary ASB Link States (Area 0)
LS age: 802
Options: (No TOS-capability)
<b>LS Type: Summary Links(AS Boundary Router)
Link State ID: 203.250.16.130 (AS Boundary Router address)
Advertising Router: 203.250.15.67</b>
LS Seq Number: 80000003
Checksum: 0xF5B1
Length: 28
Network Mask: 0.0.0.0 TOS: 0 Metric: 64</pre>
</blockquote>
<b>External Links</b> <br />
<blockquote>
<pre>AS External Link States
Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 203.250.16.130 1787 0x80000001 0x98CE 10
203.250.16.128 203.250.16.130 5 0x80000002 0x93C4 0</pre>
</blockquote>
We have two external Links, the first one is the 0.0.0.0 injected into
OSPF via the <b>default-information originate</b> command.
The other entry is network 203.250.16.12 8 which is injected into OSPF by
redistribution. The router advertising these networks is 203.250.16.130, the
RID of RTE. The following is the detailed view of the external routes:<br />
<blockquote>
<pre>RTC#<b>show ip ospf database external</b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
AS External Link States
Routing Bit Set on this LSA
LS age: 208
Options: (No TOS-capability)
<b>LS Type: AS External Link
Link State ID: 0.0.0.0 (External Network Number )
Advertising Router: 203.250.16.130</b>
LS Seq Number: 80000002
Checksum: 0x96CF
Length: 36
Network Mask: 0.0.0.0
Metric Type: 2 (Larger than any link state path)
TOS: 0
Metric: 10
<b>Forward Address: 0.0.0.0</b>
External Route Tag: 10
Routing Bit Set on this LSA
LS age: 226
Options: (No TOS-capability)
<b>LS Type: AS External Link
Link State ID: 203.250.16.128 (External Network Number)
Advertising Router: 203.250.16.130</b>
LS Seq Number: 80000002
Checksum: 0x93C4
Length: 36
Network Mask: 255.255.255.192
Metric Type: 2 (Larger than any link state path)
TOS: 0
Metric: 10
<b>Forward Address: 0.0.0.0</b>
External Route Tag: 0</pre>
</blockquote>
Note the forward address. Whenever this address is 0.0.0.0 it indicates
that the external routes are reachable via the advertising router, in this case
203. 250.16.130. This is why the identity of the ASBR is injected by ABRs into
other areas using ASBR summary links. <br />
This forward address is not always 0.0.0.0. In some cases, it could be
the IP address of another router on the same segment. The following diagram
will illustrate this situation: <br />
<img alt="spf28.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf28.gif" usemap="" /> <br />
In the above situation RTB, is running BGP with RTA, and OSPF with the
rest of the domain. RTA is not running OSPF. RTB is redistributing BGP routes
into OSPF. According to OSPF, RTB is an ASBR advertising external routes. The
forwarding address in this case is set to 125.211.1.1 and not to the
advertising router (0.0.0.0) RT B. This makes sense because there is no need to
make the extra hop. An important thing to remember is that routers inside the
OSPF domain should be able to reach the forwarding address via OSPF in order
for the external routes to be put in the IP routing table. If the forwarding
address is reached via some other protocol or no t accessible, the external
entries would be in the database but not in the IP routing table. <br />
Another situation would arise if both RTB and RTC are ASBRs (RTC is
also running BGP with RTA). In this situation, in order to eliminate the
duplication of the effort, one of the two routers will not advertise (will
flush) the external routes. T he router with the higher RID will win. <br />
<b>The Full Database</b> <br />
Finally, this is a listing of the whole database as an exercise. You
should now b e able to go over each entry and explain what is going on: <br />
<blockquote>
<pre>RTC#<b>show ip ospf database router</b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
Router Link States (Area 1)
LS age: 926
Options: (No TOS-capability)
LS Type: Router Links
Link State ID: 203.250.15.67
Advertising Router: 203.250.15.67
LS Seq Number: 80000035
Checksum: 0x573F
Length: 48
Area Border Router
Number of Links: 2
Link connected to: another Router (point-to-point)
(Link ID) Neighboring Router ID: 203.250.16.130
(Link Data) Router Interface address: 203.250.15.1
Number of TOS metrics: 0
TOS 0 Metrics: 64
Link connected to: a Stub Network
(Link ID) Network/subnet number: 203.250.15.0
(Link Data) Network Mask: 255.255.255.192
Number of TOS metrics: 0
TOS 0 Metrics: 64
Routing Bit Set on this LSA
LS age: 958
Options: (No TOS-capability)
LS Type: Router Links
Link State ID: 203.250.16.130
Advertising Router: 203.250.16.130
LS Seq Number: 80000038
Checksum: 0xDA76
Length: 48
AS Boundary Router
Number of Links: 2
Link connected to: another Router (point-to-point)
(Link ID) Neighboring Router ID: 203.250.15.67
(Link Data) Router Interface address: 203.250.15.2
Number of TOS metrics: 0
TOS 0 Metrics: 64
Link connected to: a Stub Network
(Link ID) Network/subnet number: 203.250.15.0
(Link Data) Network Mask: 255.255.255.192
Number of TOS metrics: 0
TOS 0 Metrics: 64
Router Link States (Area 0)
Routing Bit Set on this LSA
LS age: 1107
Options: (No TOS-capability)
LS Type: Router Links
Link State ID: 203.250.13.41
Advertising Router: 203.250.13.41
LS Seq Number: 8000002A
Checksum: 0xC0B0
Length: 60
AS Boundary Router
Number of Links: 3
Link connected to: a Stub Network
(Link ID) Network/subnet number: 203.250.13.41
(Link Data) Network Mask: 255.255.255.255
Number of TOS metrics: 0
TOS 0 Metrics: 1
Link connected to: a Stub Network
(Link ID) Network/subnet number: 203.250.15.192
(Link Data) Network Mask: 255.255.255.192
Number of TOS metrics: 0
TOS 0 Metrics: 10
Link connected to: a Transit Network
(Link ID) Designated Router address: 203.250.15.68
(Link Data) Router Interface address: 203.250.15.68
Number of TOS metrics: 0
TOS 0 Metrics: 10
LS age: 1575
Options: (No TOS-capability)
LS Type: Router Links
Link State ID: 203.250.15.67
Advertising Router: 203.250.15.67
LS Seq Number: 80000028
Checksum: 0x5666
Length: 36
Area Border Router
Number of Links: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 203.250.15.68
(Link Data) Router Interface address: 203.250.15.67
Number of TOS metrics: 0
TOS 0 Metrics: 10
RTC#<b>show ip ospf database network</b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
Net Link States (Area 0)
Routing Bit Set on this LSA
LS age: 1725
Options: (No TOS-capability)
LS Type: Network Links
Link State ID: 203.250.15.68 (address of Designated Router)
Advertising Router: 203.250.13.41
LS Seq Number: 80000026
Checksum: 0x6CDA
Length: 32
Network Mask: 255.255.255.192
Attached Router: 203.250.13.41
Attached Router: 203.250.15.67
RTC#<b>show ip ospf database summary</b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
Summary Net Link States (Area 1)
LS age: 8
Options: (No TOS-capability)
LS Type: Summary Links(Network)
Link State ID: 203.250.13.41 (summary Network Number)
Advertising Router: 203.250.15.67
LS Seq Number: 80000029
Checksum: 0x42D1
Length: 28
Network Mask: 255.255.255.255 TOS: 0 Metric: 11
LS age: 26
Options: (No TOS-capability)
LS Type: Summary Links(Network)
Link State ID: 203.250.15.64 (summary Network Number)
Advertising Router: 203.250.15.67
LS Seq Number: 80000030
Checksum: 0xB182
Length: 28
Network Mask: 255.255.255.192 TOS: 0 Metric: 10
LS age: 47
Options: (No TOS-capability)
LS Type: Summary Links(Network)
Link State ID: 203.250.15.192 (summary Network Number)
Advertising Router: 203.250.15.67
LS Seq Number: 80000029
Checksum: 0x1F91
Length: 28
Network Mask: 255.255.255.192 TOS: 0 Metric: 20
Summary Net Link States (Area 0)
LS age: 66
Options: (No TOS-capability)
LS Type: Summary Links(Network)
Link State ID: 203.250.15.0 (summary Network Number)
Advertising Router: 203.250.15.67
LS Seq Number: 80000025
Checksum: 0x68E0
Length: 28
Network Mask: 255.255.255.192 TOS: 0 Metric: 64
RTC#<b>show ip ospf asbr-summary</b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
Summary ASB Link States (Area 0)
LS age: 576
Options: (No TOS-capability)
LS Type: Summary Links(AS Boundary Router)
Link State ID: 203.250.16.130 (AS Boundary Router address)
Advertising Router: 203.250.15.67
LS Seq Number: 80000024
Checksum: 0xB3D2
Length: 28
Network Mask: 0.0.0.0 TOS: 0 Metric: 64
RTC#<b>show ip ospf database external</b>
OSPF Router with ID (203.250.15.67) (Process ID 10)
AS External Link States
Routing Bit Set on this LSA
LS age: 305
Options: (No TOS-capability)
LS Type: AS External Link
Link State ID: 0.0.0.0 (External Network Number)
Advertising Router: 203.250.16.130
LS Seq Number: 80000001
Checksum: 0x98CE
Length: 36
Network Mask: 0.0.0.0
Metric Type: 2 (Larger than any link state path)
TOS: 0
Metric: 10
Forward Address: 0.0.0.0
External Route Tag: 10
Routing Bit Set on this LSA
LS age: 653
Options: (No TOS-capability)
LS Type: AS External Link
Link State ID: 203.250.16.128 (External Network Number)
Advertising Router: 203.250.16.130
LS Seq Number: 80000024
Checksum: 0x4FE6
Length: 36
Network Mask: 255.255.255.192
Metric Type: 2 (Larger than any link state path)
TOS: 0
Metric: 10
Forward Address: 0.0.0.0
External Route Tag: 0</pre>
</blockquote>
<h2>
<a href="https://www.blogger.com/null" name="appb">Appendix B: OSPF and IP Multicast Addressing</a> </h2>
OSPF used IP multicast to exchange Hello packets and Link State
Updates. An IP multicast address is implemented using class D addresses. A
class D address ranges from 224.0.0.0 to 239.255.255.255. <br />
<img alt="spf29.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf29.gif" usemap="" /> <br />
Some special IP multicast addresses are reserved for OSPF: <br />
<ul>
<li>
224.0.0.5: All OSPF routers should be able to transmit and listen to
this address. <br />
</li>
<li>
224.0.0.6: All DR and BDR routers should be able to transmit and
listen to this address. <br />
</li>
</ul>
The mapping between IP multicast addresses and MAC addresses has the
following rule: <br />
For multiaccess networks that support multicast, the low order 23 bits
of the IP address are used as the low order bits of the MAC multicast address
01-005E-00-00- 00. For example: <br />
<ul>
<li>
224.0.0.5 would be mapped to 01-00-5E-00-00-05 <br />
</li>
<li>
224.0.0.6 would be mapped to
01-00-5E-00-00-06<br />
</li>
</ul>
OSPF uses broadcast on Token Ring networks. <br />
<h2>
<a href="https://www.blogger.com/null" name="appc">Appendix C: Variable Length Subnet Masks (VLSM)</a> </h2>
The following is a binary/decimal conversion chart: <br />
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1">
<tbody>
<tr>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1"></th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">0000</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1"></th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">0001</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1"></th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">0010</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1"></th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">0011</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1"></th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">0100</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1"></th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">0101</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1"></th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">0110</th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1"></th>
<th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1">0111</th>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">16</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">32</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">48</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">64</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">80</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">96</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">112</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">17</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">33</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">49</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">65</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">81</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">97</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">113</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">2</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">18</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">34</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">50</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">66</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">82</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">98</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">114</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">3</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">19</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">35</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">51</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">67</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">83</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">99</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">115</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">4</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">20</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">36</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">52</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">68</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">84</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">116</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">5</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">21</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">37</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">53</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">69</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">85</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">117</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">6</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">22</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">38</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">54</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">70</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">86</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">102</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">118</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">7</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">23</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">39</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">55</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">71</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">87</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">103</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">119</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">8</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">24</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">40</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">56</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">72</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">88</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">104</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">120</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">9</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">25</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">41</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">57</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">73</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">89</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">105</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">121</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">10</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">26</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">42</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">58</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">74</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">90</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">106</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">122</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">11</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">27</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">43</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">59</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">75</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">91</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">107</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">123</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">12</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">28</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">44</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">60</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">76</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">92</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">108</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">124</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">13</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">29</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">45</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">61</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">77</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">93</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">109</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">125</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">14</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">30</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">46</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">62</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">78</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">94</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">126</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">15</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">31</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">47</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">63</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">79</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">95</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">127</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1"></td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1"></td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1"></td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1"></td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1"></td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1"></td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1"></td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1"></td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">128</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">144</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">160</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">176</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">192</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">208</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">224</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">240</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0000</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">129</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">145</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">161</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">177</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">193</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">209</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">225</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">241</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0001</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">130</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">146</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">162</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">178</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">194</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">210</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">226</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">242</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0010</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">131</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">147</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">163</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">179</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">195</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">211</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">227</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">243</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0011</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">132</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">148</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">164</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">180</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">196</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">212</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">228</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">244</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0100</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">133</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">149</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">165</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">181</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">197</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">213</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">229</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">245</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0101</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">134</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">150</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">166</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">182</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">198</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">214</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">230</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">246</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0110</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">135</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">151</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">167</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">183</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">199</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">215</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">231</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">247</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">0111</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">136</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">152</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">168</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">184</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">200</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">216</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">232</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">248</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1000</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">137</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">153</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">169</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">185</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">201</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">217</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">233</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">249</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1001</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">138</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">154</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">170</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">186</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">202</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">218</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">234</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">250</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1010</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">139</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">155</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">171</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">187</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">203</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">219</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">235</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">251</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1011</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">140</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">156</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">172</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">188</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">204</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">220</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">236</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">252</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1100</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">141</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">157</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">173</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">189</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">205</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">221</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">237</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">253</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1101</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">142</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">158</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">174</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">190</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">206</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">222</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">238</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">254</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1110</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">143</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">159</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">175</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">191</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">207</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">223</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">239</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">255</td>
<td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1">1111</td>
</tr>
</tbody></table>
The idea behind variable length subnet masks is to offer more
flexibility in dealing with dividing a major net into multiple subnets and
still being able to maintain an adequate number of hosts in each subnet.
Without VLSM one subnet mask only can be applied to a major network. This
restricts the number of hosts given the number of subnets required. If you pick
the mask such that you have enough subnets, you are not able to allocate enough
hosts in each subnet. The same is true for the hosts; a mask that allows enough
hosts might not provide enough subnet space. <br />
For example, suppose you were assigned a class C network 192.214.11.0
and you need to divide that network into three subnets with 100 hosts in one
subnet and 50 hosts for each of the remaining subnets. Ignore the two end
limits 0 and 255, and you have theoretically available to you 256 addresses
(192.214.11.0 - 192.214.11.255). This cannot be done without VLSM. <br />
<img alt="spf30.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf30.gif" usemap="" /> <br />
There are a handful of subnet masks that can be used; note that a mask
should have a contiguous number of ones that start from the left and the rest
of the bits are all 0s. <br />
<blockquote>
<pre>-252 (1111 1100) The address space is divided into 64.
-248 (1111 1000) The address space is divided into 32.
-240 (1111 0000) The address space is divided into 16.
-224 (1110 0000) The address space is divided into 8.
-192 (1100 0000) The address space is divided into 4.
-128 (1000 0000) The address space is divided into 2.</pre>
</blockquote>
Without VLSM you have the choice to use mask 255.255.255.128 and divide
the addresses into 2 subnets with 128 hosts each or use 255.255.255.192 and
divide the space into 4 subnets with 64 hosts each. This does not meet the
requirement. If you use multiple masks, you can use mask 128 and further subnet
the second chunk of addresses with mask 192. This table shows how you have
divided the address space accordingly.<br />
<img alt="spf31.gif" border="0" src="http://www.cisco.com/c/dam/en/us/support/docs/ip/open-shortest-path-first-ospf/7039-spf31.gif" usemap="" /> <br />
Now, be careful in allocating the IP addresses to each mask. Once you
assign an IP address to the router or to a host, you have used up the whole
subnet for that segment. For example, if you assign 192.214.11.10
255.255.255.128 to E2, the whole range of addresses between 192.214.11.0 and
192.214.11.127 is consumed by E2. In the same way if you assign 192.214.11.160
255.255.255.128 to E2, the whole range of addresses between 192.214.11.128 and
192.214.11.255 is consumed by the E2 segment. <br />
This is an illustration of how the router interprets these addresses.
Remember that any time you use a mask different than the natural mask, for
instance if you are subnetting, the router complains if the combination IP
address and mask result in a subnet zero. Use the <b> <a href="http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr/command/ip_nat_source_through_iterate-ip-addrs.html#GUID-F68F9644-E437-4E5A-B52A-881A27A5B04C">ip
subnet-zero</a> </b> command on the router in order to resolve this
issue. <br />
<blockquote>
<pre>RTA#
ip subnet-zero
interface Ethernet2
ip address 192.214.11.10 255.255.255.128
interface Ethernet3
ip address 192.214.11.160 255.255.255.192
interface Ethernet4
ip address 192.214.11.226 255.255.255.192
RTA#<b>show ip route connected</b>
192.214.11.0 is variably subnetted, 3 subnets, 2 masks
C 192.214.11.0 255.255.255.128 is directly connected, Ethernet2
C 192.214.11.128 255.255.255.192 is directly connected, Ethernet3
C 192.214.11.192 255.255.255.192 is directly connected, Ethernet4</pre>
</blockquote>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-36627985443686749812014-02-09T05:45:00.000-08:002016-06-02T06:02:55.135-07:00- Cisco Networking: Cisco Adaptive Security Appliance (ASA) Setup Wizard<h1 style="background-color: white; border: 0px; font-family: arial, verdana, sans-serif; font-size: 1.67em; line-height: 20.802080154418945px; margin: 0px; padding: 0px;">
</h1>
<div style="background-color: white; border: 0px; color: #333333; font-family: arial, verdana, sans-serif; font-size: 12px; line-height: 20.802080154418945px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
After you are connected to your Cisco Adaptive Security Appliance (ASA), you will have to decide whether to use the startup wizard or use a differemt configuration methods. The introduction page will appear and which allows you to make a decision. Because you need to have Java installed on your computer, you have three choices here:</div>
<ul class="level-one" style="background-color: white; border: 0px; color: #333333; font-family: arial, verdana, sans-serif; font-size: 12px; line-height: 20.802080154418945px; margin: 5px 0px 5px 10px; padding: 0px;">
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<b>Install ASDM Launcher and Run Cisco Adaptive Security Device Manager (ASDM):</b> Installs the ASDM on your computer. If this is the computer you will always use to perform your management, this method makes the most sense.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<b>Run ASDM:</b> This option uses Java Web Start to launch the ASDM tool directly from the copy installed on the ASA. This is beneficial if you are not at your normal computer because you do not install any software.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<b>Run Startup Wizard:</b> This option also uses Java Web Start to launch ASDM, with one exception; after the ASDM has launched, the Startup Wizard runs automatically.</div>
<img alt="image0.jpg" src="http://media.wiley.com/Lux/91/298691.image0.jpg" height="400" style="border: 0px; margin: 0px; padding: 0px;" width="390" /></li>
</ul>
<div style="background-color: white; border: 0px; color: #333333; font-family: arial, verdana, sans-serif; font-size: 12px; line-height: 20.802080154418945px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
To perform the network configuration of the ASA, the following process walks you through the Startup Wizard:</div>
<ol class="level-one" style="background-color: white; border: 0px; color: #333333; font-family: arial, verdana, sans-serif; font-size: 12px; line-height: 20.802080154418945px; margin: 5px 0px 5px 10px; padding: 0px;">
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click the Run Startup Wizard button on the introduction page.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
You receive a warning related to the security settings on Java.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
If you are sure that you are connected to the correct device on the network and not some fake device trying to collect your credentials, dismiss the warning message.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Because you expect this message from the ASDM, continue to the website. The Cisco ASDM Launcher dialog box appears.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
If you have an enable password, but no actual users, skip the Username field, fill in the enable password in the Password field, and click OK.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
If you have already created an administrative user, provide the username and password in the appropriate fields.</div>
<img alt="image1.jpg" src="http://media.wiley.com/Lux/92/298692.image1.jpg" height="353" style="border: 0px; font-weight: normal; margin: 0px; padding: 0px;" width="535" /><div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The Starting Point page appears.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Select one of the following, based on whether you are setting up the ASA initially or whether you are using setup to change an existing ASA installation:</div>
<ul class="level-two" style="border: 0px; font-weight: normal; margin: 5px 0px 5px 10px; padding: 0px;">
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Modify Existing Configuration:</i> You can choose to modify the existing configuration.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Reset Configuration to Factory Defaults:</i> With the exception of the management interface, modify the default configuration. As it turns out, a lot of small networks out there require only simple changes to their configuration, and as such, re-running the Startup Wizard is the easiest way to make these changes.</div>
<img alt="image2.jpg" src="http://media.wiley.com/Lux/93/298693.image2.jpg" height="400" style="border: 0px; display: block; margin: 0px 0px 0px -36px; padding: 0px;" width="483" /></li>
</ul>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click the Next button.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The Basic Configuration page, appears with two optional items which you can choose to do.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
(Optional) Select from the following items:</div>
<ul class="level-two" style="border: 0px; font-weight: normal; margin: 5px 0px 5px 10px; padding: 0px;">
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Configure the Device for Teleworker Usage:</i> This option supports teleworkers or remote workers via a virtual private network (VPN). If you select this option, you are presented with an extra page of questions for the Easy VPN Remote Configuration near the end of the Startup Wizard.</div>
<div class="child-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
On this page, you can also tell the Startup Wizard the name of the firewall device, such as ASAFirewall1, and the domain name to which the device belongs, such as edtetz.net.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Change Privileged Mode (Enable) Password:</i> If you are not happy with your current enable password, change it here before you complete this step of the Startup Wizard.</div>
<img alt="image3.jpg" src="http://media.wiley.com/Lux/94/298694.image3.jpg" height="400" style="border: 0px; display: block; margin: 0px 0px 0px -36px; padding: 0px;" width="483" /></li>
</ul>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click the Next button.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Choose virtual local area networks (VLANs) for the Outside, Inside, and optionally, DMZ interfaces.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Depending on the number of interfaces you are licensed for, you can configure up to three interfaces. The basic license for the ASA allows you to have only two interfaces. The Interface Selection page of the Startup Wizard appears.</div>
<ul class="level-two" style="border: 0px; font-weight: normal; margin: 5px 0px 5px 10px; padding: 0px;">
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The <i>Outside VLAN </i>faces the Internet.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The <i>Inside VLAN </i>faces your corporate network.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The<i> DMZ VLAN</i> operates parallel to your corporate network. The <i>Demilitarized Zone (DMZ)</i>is an area where you can place servers, such as mail, web, or ftp servers, that the public at large — or at least people outside your network — need access to.</div>
</li>
</ul>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
For each of these interfaces, you assign a VLAN to the segment or choose not to use the interface at all. By default, the Inside interface is configured for VLAN 1, which you can change if you want; however, because this is the default VLAN on your switches, you may not want to change it.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
For your Outside interface and DMZ interface, you can choose another VLAN or go with the ones chosen by default.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Enabling the inside VLAN, outside VLAN, and DMZ VLAN interfaces does not actually associate any particular switch ports to those interfaces. The interfaces are virtual and need to be associated to physical interfaces on the switch. This means that any number of ports can be associated to any of these interfaces.</div>
<img alt="image4.jpg" src="http://media.wiley.com/Lux/95/298695.image4.jpg" height="400" style="border: 0px; font-weight: normal; margin: 0px; padding: 0px;" width="483" /></li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click the Next button.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The Switch Port Allocation page appears.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Assign the ASA switch ports to the three VLANs by selecting the port in the Available Ports or Allocated Ports panes and clicking the Add or Remove buttons.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Initially, all your ports are associated with the inside VLAN. In most cases, associate the lowest interface, or Ethernet 0/0 of an ASA 5505, with the outside VLAN because you will likely want to use the additional ports on the inside of your network.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Also, on the ASA 5505, the last two ports supply Power over Ethernet (POE) to power up devices, such as phones or access points (APs), which is yet another reason you want the upper ports to be associated with the inside network.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
As you choose a switch port and associate it with a VLAN or interface, you are prompted with a message telling you that it may be removed from an existing VLAN. Because all ports start out associated with the Inside interface, you see this message for all your port reassignments.</div>
<img alt="image5.jpg" src="http://media.wiley.com/Lux/96/298696.image5.jpg" height="400" style="border: 0px; font-weight: normal; margin: 0px; padding: 0px;" width="483" /></li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click the Next button.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The Interface IP Address Configuration page appears.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Assign IP configuration for each of your IP addresses.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
For your outside address, you can manually assign an address, which is not uncommon for business Internet connections. If your Internet connection supports either Dynamic Host Configuration Protocol (DHCP) or Point-to-Point Protocol over Ethernet (PPPOE), select the appropriate option.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
If you use DHCP, tell your ASA to use the default gateway it receives from DHCP as the system-wide default gateway for this device. If you choose not to use the system-wide default gateway option, you need to configure a manual route through ASDM or the <span class="code" style="font-family: "courier" , "courier new" , monospace; font-size: 1em;">route outside 0 0 <ip address="" gateway="" of=""></ip></span> at the command-line interface (CLI).</div>
<img alt="image6.jpg" src="http://media.wiley.com/Lux/97/298697.image6.jpg" height="400" style="border: 0px; font-weight: normal; margin: 0px; padding: 0px;" width="483" /></li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click the Next button.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The DHCP Server page appears. For small businesses or regional offices, the ASA may represent the only real device on the network other than printers and computers. You may have these locations set up without any local servers onsite.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
(Optional) Select the Enable DHCP Server on the Inside Interface check box to have the ASA act as a DHCP server for this network segment.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
(Optional) Select the Enable Auto-Configuration from Interface check box so that you can copy most of these settings from an existing interface.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Enabling the Auto-Configuration check box is very useful for Domain Name System (DNS) and Windows Internet Name Service (WINS) server addresses that are constantly being used on all network segments and may all be the same for the organization.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Configure or change any of the missing information in the following:</div>
<ul class="level-two" style="border: 0px; font-weight: normal; margin: 5px 0px 5px 10px; padding: 0px;">
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Starting IP Address: </i>The first address to be handed out in the DHCP range.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Ending IP Address: </i>The last address to be handed out in the DHCP range.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>DNS servers 1 and 2:</i> The DNS servers that are handed out to DHCP clients.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>WINS servers 1 and 2:</i> The WINS servers that are handed out to DHCP clients.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Lease Length:</i> The lease length determines when DHCP clients are required to renew their leases on the DHCP supplied addresses.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Ping Timeout: </i>The Ping Timeout setting is used by the DHCP server because it pings each address that it is ready to give, prior to assigning the address, to verify that the address is not in use. This reduces the chance of duplicate IP addresses being created on the network.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Domain Name:</i> The domain name of the DHCP client belongs to.</div>
<img alt="image7.jpg" src="http://media.wiley.com/Lux/98/298698.image7.jpg" height="400" style="border: 0px; display: block; margin: 0px 0px 0px -36px; padding: 0px;" width="483" /></li>
</ul>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click the Next button.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The Address Translation (NAT/PAT) page appears.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Set up Network Address Translation or Port Address Translation.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Choose from the available address translation methods:</div>
<ul class="level-two" style="border: 0px; font-weight: normal; margin: 5px 0px 5px 10px; padding: 0px;">
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Use Port Address Translation (PAT):</i> Most small offices, which use only one public IP address on their Internet connection, use PAT on their connection. PAT can use a specific address or the main address from their outside VLAN interfaces. PAT allows an entire office to share (or translate to) a single external IP address for Internet access.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
<i>Use Network Address Translation (NAT):</i> Selecting NAT puts one-to-one mapping (or translation) between internal and external IP addresses, so you can specify a range of addresses to use on the outside VLAN interface.</div>
<div class="child-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
If you use ASA internally on your network (for example, to protect a server subnet), you may want to select the Enable Traffic through the Firewall Without Address Translation radio button if you use public addresses on your internal network (not likely) or if you use the ASA as firewall on the interior of your network.</div>
<img alt="image8.jpg" src="http://media.wiley.com/Lux/99/298699.image8.jpg" height="400" style="border: 0px; display: block; margin: 0px 0px 0px -36px; padding: 0px;" width="483" /></li>
</ul>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click the Next button.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The Administrative Access page appears.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Set what systems on your network can connect to your ASA to perform management or configuration changes.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Use the following process to add new management interfaces. If you want to use ASDM, you need to select the Enable HTTP Server for HTTPS/ASDM Access check box, whereas the Enable ASDM History Metrics check box saves usage data regarding accessing the ASDM interface.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
In the command line setup, you only have the option to ASDM connections to be made from a single computer. This page allows you to specify additional systems that can perform management of your ASA and the type of connection they make to perform that configuration.</div>
<img alt="image9.jpg" src="http://media.wiley.com/Lux/00/298700.image9.jpg" height="400" style="border: 0px; font-weight: normal; margin: 0px; padding: 0px;" width="483" /><div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
If you add a new management option, the Add Administrative Access Entry dialog box appears. Select your desired options to create the new Administrative Access entry:</div>
<ol class="level-two" style="border: 0px; font-weight: normal; margin: 5px 0px 5px 10px; padding: 0px;">
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Choose HTTP (ASDM), SSH, or Telnet from the Access Type drop-down list.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Choose Inside from the Interface Name drop-down list.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Inside is typically the most secure interface option, but in some cases, such as if you need to be able to conduct remote administration over the Outside interface, you should be very restrictive in the address from which the administration is performed.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Specify either a specific address from which administration is performed in the IP Address text box or give a network range defined by either an IP address or a Network ID from the Subnet Mask drop-down list.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Remember, the more restrictive you can be with this configuration, the more secure your ASA is.</div>
</li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click OK.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
You return to the Administrative Access page.</div>
</li>
</ol>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
If you allow your firewall to be administered from the outside interface, you leave yourself open to potentially being compromised by someone you do not know.</div>
<img alt="image10.jpg" src="http://media.wiley.com/Lux/01/298701.image10.jpg" height="432" style="border: 0px; font-weight: normal; margin: 0px; padding: 0px;" width="535" /></li>
<li style="border: 0px; font-weight: bold; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Click the Next button.</div>
<div class="child-para" style="border: 0px; font-weight: normal; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
The summary page of the configuration Startup Wizard appears, providing a summary of the configuration that you have applied to the system. All these configuration changes are written into the running configuration on the ASA. After the configuration changes are made, you see the standard ASA ASDM management screen. From this interface you can</div>
<ul class="level-two" style="border: 0px; font-weight: normal; margin: 5px 0px 5px 10px; padding: 0px;">
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Perform any other configuration changes.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Relaunch the Startup Wizard or other wizards.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Perform basic monitoring of the ASA via the home page.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Perform more detailed monitoring of the ASA and connections that it hosts through the Monitoring pages.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Run additional management and troubleshooting tools.</div>
</li>
<li style="border: 0px; list-style: disc; margin: 0px 0px 5px 18px; padding: 0px;"><div class="first-para" style="border: 0px; margin-bottom: 8px; margin-top: 8px; padding: 0px;">
Save the current configuration to flash memory.</div>
<img alt="image11.jpg" src="http://media.wiley.com/Lux/02/298702.image11.jpg" height="382" style="border: 0px; display: block; margin: 0px 0px 0px -36px; padding: 0px;" width="535" /></li>
</ul>
</li>
</ol>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-37910510989264156442014-02-07T23:15:00.000-08:002016-06-02T06:03:14.972-07:00- Cisco Networking: Dynamic Multipoint IPsec VPNs (Using Multipoint GRE/NHRP to Scale IPsec VPNs)<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="intro">Introduction</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
This document discusses Dynamic Multipoint IPsec VPNs (DMVPN) and why a company might want to design or migrate their network to make use of this new IPsec VPN solution in Cisco IOS<sup>®</sup> Software.</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="background">Background Information</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Companies may need to interconnect many sites to a main site, and perhaps also to each other, across the Internet while encrypting the traffic to protect it. For example, a set of retail stores that need to connect to the company headquarters for inventory and ordering may also need to connect to other stores within the company to check out product availabilty. In the past, the only way to make the connection was to use a Layer-2 network such as ISDN or Frame Relay to interconnect everything. Setting up and paying for these hard-wired links for internal IP traffic can be time consuming and costly. If all of the sites (including the main site) already have relatively cheap Internet access, then this Internet access can also be used for internal IP communication between the stores and headquarters by using IPsec tunnels to ensure privacy and data integrity.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
In order for companies to build large IPsec networks interconnecting their sites across the Internet, you need to be able to scale the IPsec network. IPsec encrypts traffic between two endpoints (peers), and the encryption is done by the two endpoints using a shared "secret". Since this secret is shared only between these two endpoints, encrypted networks are inherently a collection of point-to-point links. Because of this, IPsec is intrinsically a point-to-point tunnel network. The most feasible method to scale a large point-to-point network is to organize it into a hub-and-spoke or full (partial) mesh network. In most networks, the majority of the IP traffic is between the spokes and the hub, and very little is between the spokes, so the hub-and-spoke design is often the best choice. This design also matches with older Frame Relay networks since it was prohibitively expensive to pay for links between all sites in these networks.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
When using the Internet as the interconnection between the hub and spokes, the spokes also have direct access to each other with no additional cost, but it has been very difficult, if not impossible, to set up and/or manage a full (partial) mesh network. Full or partial mesh networks are often desirable because there can be a cost savings if spoke-to-spoke traffic can go directly through rather then via the hub. Spoke-to-spoke traffic traversing the hub uses hub resources and can incur extra delays, especially when using IPsec encryption, since the hub will need to decrypt the incoming packets from the sending spokes and then re-encrypt the traffic to send it to the receiving spoke. Another example where direct spoke-to-spoke traffic would be useful is the case where two spokes are in the same city and the hub is across the country.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
As IPsec hub-and-spoke networks were deployed and grew in size, it became more desirable to have them route IP packets as dynamically as possible. In the older Frame Relay hub-and-spoke networks this was accomplished by running a dynamic routing protocol like OSPF or EIGRP over the Frame Relay links. This was useful for dynamically advertising the reachability of spoke networks and also to support redundancy in the IP routing network. If the network lost a hub router, a backup hub router could automatically take over to retain network connectivity to the spoke networks.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
There is a fundamental problem with IPsec tunnels and dynamic routing protocols. Dynamic routing protocols rely on using IP multicast or broadcast packets, but IPsec does not support encrypting multicast or broadcast packets. The current method for solving this problem is to use generic routing encapsulation (GRE) tunnels in combination with IPsec encryption.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
GRE tunnels do support transporting IP multicast and broadcast packets to the other end of the GRE tunnel. The GRE tunnel packet is an IP unicast packet, so the GRE packet can be encrypted using IPsec. In this scenario, GRE does the tunneling work and IPsec does the encryption part of supporting the VPN network. When GRE tunnels are configured, the IP addresses for the endpoints of the tunnel (<b>tunnel source ...</b>, <b>tunnel destination ...</b>) must be known by the other endpoint and must be routable over the Internet. This means that the hub and all of the spoke routers in this network must have static non-private IP addresses.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
For small site connections to the Internet, it is typical for a spoke's external IP address to change each time it connects to the Internet because their Internet Service Provider (ISP) dynamically provides the outside interface address (via Dynamic Host Configuration Protocol (DHCP)) each time the spoke comes on line (asymmetric digital subscriber line (ADSL) and Cable services). This dynamic allocation of the "outside address" of the router allows the ISP to oversubscribe the use of their Internet address space, since not all users will be online at the same time. It can be considerably more expensive to pay the provider to allocate a static address for the spoke router. Running a dynamic routing protocol over an IPsec VPN requires the use of GRE tunnels, but you lose the option of having spokes with dynamically allocated IP addresses on their outside physical interfaces.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The above restrictions and some others are summarized in the following four points:</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>IPsec uses an access control list (ACL) to define what data is to be encrypted. So, each time a new (sub)network is added behind a spoke or the hub, the customer must change the ACL on both the hub and spoke routers. If the SP manages the router, then the customer must notify the SP in order to get the IPsec ACL changed so that new traffic will be encrypted.</li>
<li>With large hub-and-spoke networks, the size of the configuration on the Hub router can become very large, to the extent that it is unusable. For example a hub router would need up to 3900 lines of configuration to support 300 spoke routers. This is large enough that it would be difficult to show the configuration and to find the section of the configuration that is relevant to a current problem that is being debugged. Also this size configuration may be too large to fit in NVRAM and would need to be stored on Flash memory.</li>
<li>GRE + IPsec must know the endpoint peer address. The spokes' IP addresses are connected directly to the Internet via their own ISP, and they are often set up so that their external interface addresses are not fixed. The IP addresses can change each time the site comes online (via DHCP).</li>
<li>If the spokes need to directly talk with each other over the IPsec VPN, then the hub-and-spoke network must become a full mesh. Since it is not already known which spokes will need to talk directly with each other, a full mesh is required, even though each spoke may not need to talk directly with every other spoke. Also, it is not feasible to configure IPsec on a small spoke router so that it has direct connectivity with all other spoke routers in the network; thus spoke routers may need to be more powerful routers.</li>
</ul>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="solution">The DMVPN Solution</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The DMVPN solution uses Multipoint GRE (mGRE) and Next Hop Resolution Protocol (NHRP), with IPsec and some new enhancements, to solve the above problems in a scalable manner.</div>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="autoipsec">Automatic IPsec Encryption Initiation</a></h3>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
When not using the DMVPN solution, the IPsec encryption tunnel is not initiated until there is data traffic that requires the use of this IPsec tunnel. It may take 1 to 10 seconds to complete the initiation of the IPsec tunnel and data traffic is dropped during this time. When using GRE with IPsec, the GRE tunnel configuration already includes the GRE tunnel peer (<b>tunnel destination …</b>) address, which also is the IPsec peer address. Both of these addresses are preconfigured.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
If you use Tunnel Endpoint Discovery (TED) and dynamic crypto maps on the hub router, then you can avoid having to preconfigure the IPsec peer addresses on the hub, but a TED probe and response needs to be sent and received before ISAKMP negotiation can start. This should not be necessary since, when using GRE, the peer source and destination addresses are already known. They are either in the configuration or resolved with NHRP (for multipoint GRE tunnels).</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
With the DMVPN solution, IPsec is triggered immediately for both point-to-point and multipoint GRE tunnels. Also, it is not necessary to configure any crypto ACLs, since these will be automatically derived from the GRE tunnel source and destination addresses. The following commands are used to define the IPsec encryption parameters. Notice that there is no <b>set peer ...</b> or<b>match address ...</b> commands required because this information is derived directly from the associated GRE tunnel or NHRP mappings.</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>crypto ipsec profile <profile-name></profile-name></b>
<b> set transform-set <transform-name></transform-name></b>
</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The following command associates a tunnel interface with the IPsec profile.</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>interface tunnel<number></number></b>
...
<b> tunnel protection ipsec profile <profile-name></profile-name></b>
</pre>
</blockquote>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="dyntun">Dynamic Tunnel Creation for “Spoke-to-Hub” Links</a></h3>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
No GRE or IPsec information about a spoke is configured on the hub router in the DMVPN network . The spoke router's GRE tunnel is configured (via NHRP commands) with information about the hub router. When the spoke router starts up, it automatically initiates the IPsec tunnel with the hub router as described above. It then uses NHRP to notify the hub router of its current physical interface IP address. This is useful for three reasons:</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>If the spoke router has its physical interface IP address assigned dynamically (such as with ADSL or CableModem), then the hub router cannot be configured with this information since each time the spoke router reloads it will get a new physical interface IP address.</li>
<li>Configuration of the hub router is shortened and simplified since it does not need to have any GRE or IPsec information about the peer routers. All of this information is learned dynamically via NHRP.</li>
<li>When you add a new spoke router to the DMVPN network, you do not need to change the configuration on the hub or on any of the current spoke routers. The new spoke router is configured with the hub information, and when it starts up, it dynamically registers with the hub router. The dynamic routing protocol propagates the routing information for this spoke to the hub. The hub propagates this new routing information to the other spokes. It also propagates the routing information from the other spokes to this spoke.</li>
</ul>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="dyntunspoke">Dynamic Tunnel Creation for “Spoke-to-Spoke” Traffic</a></h3>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
As stated earlier, currently in a mesh network, all point-to-point IPsec (or IPsec+GRE) tunnels must be configured on all the routers, even if some/most of these tunnels are not running or needed at all times. With the DMVPN solution, one router is the hub, and all the other routers (spokes) are configured with tunnels to the hub. The spoke-to-hub tunnels are up continuously, and spokes do not need configuration for direct tunnels to any of the other spokes. Instead, when a spoke wants to transmit a packet to another spoke (such as the subnet behind another spoke), it uses NHRP to dynamically determine the required destination address of the target spoke. The hub router acts as the NHRP server and handles this request for the source spoke. The two spokes then dynamically create an IPsec tunnel between them (via the single mGRE interface) and data can be directly transferred. This dynamic spoke-to-spoke tunnel will be automatically torn down after a (configurable) period of inactivity.</div>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="supdyn">Supporting Dynamic Routing Protocols</a></h3>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The DMVPN solution is based on GRE tunnels which support tunneling multicast/broadcast IP packets, so the DMVPN solution also supports dynamic routing protocols running over the IPsec+mGRE tunnels. Previously, NHRP required you to explicitly configure the broadcast/multicast mapping for the tunnel destination IP addresses to support GRE tunneling of Multicast and Broadcast IP packets. For example, at the hub you would need the <b>ip nhrp map multicast <spoke-n-addr></spoke-n-addr></b> configuration line for each spoke. With the DMVPN solution, the spoke addresses are not known in advance, so this configuration is not possible. Instead, NHRP can be configured to automatically add each spoke to the multicast destination list on the hub with the <b>ip nhrp map multicast dynamic</b> command. With this command, when the spoke routers register their unicast NHRP mapping with the NHRP server (hub), NHRP will also create a broadcast/multicast mapping for this spoke. This eliminates the need for the spoke addresses to be known in advance.</div>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="cef">Cisco Express Forwarding Fast Switching for mGRE</a></h3>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Currently, traffic in an mGRE interface is process-switched, resulting in poor performance. The DMVPN solution adds Cisco Express Forwarding switching for the mGRE traffic, resulting in much better performance. There are no configuration commands necessary to turn on this feature. If Cisco Express Forwarding switching is allowed on the GRE tunnel interface and the outgoing/incoming physical interfaces, then the multipoint GRE tunnel packets will be Cisco Express Forwarding-switched.</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="dynroute">Using Dynamic Routing Over IPsec Protected VPNs</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
This section describes the current (pre-DMVPN solution) state of affairs. IPsec is implemented on Cisco routers via a set of commands that define the encryption and then a <b>crypto map <map-name></map-name></b> command applied on the external interface of the router. Because of this design and the fact that there is not currently a standard for using IPsec to encrypt IP multicast/broadcast packets, IP routing protocol packets cannot be “forwarded” through the IPsec tunnel and any routing changes cannot be dynamically propagated to the other side of the IPsec tunnel.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>All dynamic routing protocols except BGP use broadcast or multicast IP packets. GRE tunnels are used in combination with IPsec to solve this problem.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
GRE tunnels are implemented on Cisco routers by using a virtual tunnel interface (<b>interface tunnel<#></b>). The GRE tunneling protocol is designed to handle IP multicast/broadcast packets so a dynamic routing protocol can be “run over" a GRE tunnel. GRE tunnel packets are IP unicast packets that encapsulate the original IP multicast/unicast packet. You can then use IPsec to encrypt the GRE tunnel packet. You can also run IPsec in transport mode and save 20 bytes since GRE has already encapsulated the original data packet so you do not need IPsec to encapsulate the GRE IP packet in another IP header.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
When running IPsec in transport mode, there is a restriction that the IP source and destination addresses of the packet to be encrypted must match the IPsec peer addresses (the router itself). In this case, this just means that the GRE tunnel endpoint and IPsec peer addresses must be the same. This is not a problem since the same routers are both the IPsec and GRE tunnel endpoints. By combining GRE tunnels with IPsec encryption, you can use a dynamic IP routing protocol to update the routing tables on both ends of the encrypted tunnel. The IP routing table entries for the networks that were learned through the encrypted tunnel will have the other end of the tunnel (GRE tunnel interface IP address) as the IP next hop. Thus, if the networks change on either side of the tunnel, then the other side will dynamically learn of the change and connectivity will continue without any configuration changes on the routers.</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="baseconfig">Base Configuration</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The following is a standard point-to-point IPsec+GRE configuration. After this there is a series of configuration examples where specific features of the DMVPN solution are added in steps to show the different capabilities of DMVPN. Each example builds on the previous examples to show how to use the DMVPN solution in increasingly complex network designs. This succession of examples can be used as a template for migrating a current IPsec+GRE VPN to a DMVPN. You can stop "the migration" at any point if that particular configuration example matches your network design requirements.</div>
<b style="font-family: arial, helvetica, sans-serif; font-size: 12px;">IPsec + GRE Hub and Spoke (n = 1,2,3,...)</b><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><br />
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img alt="dmvpn_01.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/dmvpn_01.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router <img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Hub
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
<b>crypto map vpnmap1 local-address Ethernet0
crypto map vpnmap1 10 ipsec-isakmp
set peer 172.16.1.1
set transform-set trans2
match address 101
crypto map vpnmap1 20 ipsec-isakmp
set peer 172.16.2.1
set transform-set trans2
match address 102</b>
<b>. . .
crypto map vpnmap1 <10 n=""> ipsec-isakmp
set peer 172.16.<n>.1
set transform-set trans2
match address <n>
!</n></n><!--10--></10></b>
<b>interface Tunnel1
bandwidth 1000
ip address 10.0.0.1 255.255.255.252
ip mtu 1400
delay 1000
tunnel source Ethernet0
tunnel destination 172.16.1.1
!
interface Tunnel2
bandwidth 1000
ip address 10.0.0.5 255.255.255.252
ip mtu 1400
delay 1000
tunnel source Ethernet0
tunnel destination 172.16.2.1
!
. . .
!
interface Tunnel<n>
bandwidth 1000
ip address 10.0.0.<4n-3> 255.255.255.252
ip mtu 1400
delay 1000
tunnel source Ethernet0
tunnel destination 172.16.<n>.1</n><!--4n-3--></4n-3></n></b>
!
interface Ethernet0
ip address 172.17.0.1 255.255.255.0
<b>crypto map vpnmap1</b>
!
interface Ethernet1
ip address 192.168.0.1 255.255.255.0
!
<b>router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.0.0 0.0.0.255
no auto-summary
!
access-list 101 permit gre host 172.17.0.1 host 172.16.1.1
access-list 102 permit gre host 172.17.0.1 host 172.16.2.1
...
access-list <n> permit gre host 172.17.0.1 host 172.16.<n>.1</n></n></b>
</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router <img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke1
!
<b>crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto map vpnmap1 local-address Ethernet0
crypto map vpnmap1 10 ipsec-isakmp
set peer 172.17.0.1
set transform-set trans2
match address 101
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.2 255.255.255.252
ip mtu 1400
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1</b>
!
interface Ethernet0
ip address 172.16.1.1 255.255.255.252
<b>crypto map vpnmap1</b>
!
interface Ethernet1
ip address 192.168.1.1 255.255.255.0
!
<b>router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.1.0 0.0.0.255
no auto-summary
!
access-list 101 permit gre host 172.16.1.1 host 172.17.0.1</b>
</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router <img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke2
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
<b>crypto map vpnmap1 local-address Ethernet0
crypto map vpnmap1 10 ipsec-isakmp
set peer 172.17.0.1
set transform-set trans2
match address 101
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.6 255.255.255.252
ip mtu 1400
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1</b>
!
interface Ethernet0
ip address 172.16.2.1 255.255.255.252
<b>crypto map vpnmap1</b>
!
interface Ethernet1
ip address 192.168.2.1 255.255.255.0
!
<b>router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.2.0 0.0.0.255
no auto-summary
!
access-list 101 permit gre host 172.16.2.1 host 172.17.0.1</b>
</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router <img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke<n>
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0
!
<b>crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto map vpnmap1 local-address Ethernet0
crypto map vpnmap1 10 ipsec-isakmp
set peer 172.17.0.1
set transform-set trans2
match address 101
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.<4n-2> 255.255.255.252
ip mtu 1400
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1<!--4n-2--></4n-2></b>
!
interface Ethernet0
ip address 172.16.<n>.1 255.255.255.252
<b>crypto map vpnmap1</b>
!
interface Ethernet1
ip address 192.168.<n>.1 255.255.255.0
!
<b>router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.<n>.0 0.0.0.255
no auto-summary
!
access-list 101 permit gre host 172.16.<n>.1 host 172.17.0.1</n></n></b>
</n></n></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
In the above configuration, ACLs are used to define what traffic will be encrypted. On both the hub and spoke routers, this ACL only needs to match the GRE tunnel IP packets. No matter how the networks change at either end, the GRE IP tunnel packets will not change, so this ACL need not change.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>When using Cisco IOS software versions prior to 12.2(13)T, you must apply the <b>crypto map vpnmap1</b> configuration command to both the GRE tunnel interfaces (Tunnel<x>) and the physical interface (Ethernet0). With Cisco IOS version 12.2(13)T and later, you only apply the <b>crypto map vpnmap1</b> configuration command to the physical interface (Ethernet0).</x></div>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="ex1">Examples of the Routing Tables on the Hub and Spoke Routers</a></h3>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Routing Table on Hub Router <img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">172.17.0.0/24 is subnetted, 1 subnets
C 172.17.0.0 is directly connected, Ethernet0
10.0.0.0/30 is subnetted, <n> subnets
C 10.0.0.0 is directly connected, Tunnel1
C 10.0.0.4 is directly connected, Tunnel2
...
C 10.0.0.<4n-4> is directly connected, Tunnel<n>
C 192.168.0.0/24 is directly connected, Ethernet1
D 192.168.1.0/24 [90/2841600] via 10.0.0.2, 18:28:19, Tunnel1
D 192.168.2.0/24 [90/2841600] via 10.0.0.6, 2d05h, Tunnel2
...
D 192.168.<n>.0/24 [90/2841600] via 10.0.0.<4n-2>, 2d05h, Tunnel<n></n><!--4n-2--></4n-2></n></n><!--4n-4--></4n-4></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Routing Table on Spoke1 Router <img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.0 is directly connected, Ethernet0
10.0.0.0/30 is subnetted, <n> subnets
C 10.0.0.0 is directly connected, Tunnel1
D 10.0.0.4 [90/2841600] via 10.0.0.1, 23:00:58, Tunnel0
...
D 10.0.0.<4n-4> [90/2841600] via 10.0.0.1, 23:00:58, Tunnel0
D 192.168.0.0/24 [90/2841600] via 10.0.0.1, 23:00:58, Tunnel0
C 192.168.1.0/24 is directly connected, Loopback0
D 192.168.2.0/24 [90/3097600] via 10.0.0.1, 23:00:58, Tunnel0
...
D 192.168.<n>.0/24 [90/3097600] via 10.0.0.1, 23:00:58, Tunnel0</n><!--4n-4--></4n-4></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Routing Table on Spoke<n> Router <img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">172.16.0.0/24 is subnetted, 1 subnets
C 172.16.<n>.0 is directly connected, Ethernet0
10.0.0.0/30 is subnetted, <n> subnets
D 10.0.0.0 [90/2841600] via 10.0.0.1, 22:01:21, Tunnel0
D 10.0.0.4 [90/2841600] via 10.0.0.1, 22:01:21, Tunnel0
...
C 10.0.0.<4n-4> is directly connected, Tunnel0
D 192.168.0.0/24 [90/2841600] via 10.0.0.1, 22:01:21, Tunnel0
D 192.168.1.0/24 [90/3097600] via 10.0.0.1, 22:01:21, Tunnel0
D 192.168.2.0/24 [90/3097600] via 10.0.0.1, 22:01:21, Tunnel0
...
C 192.168.<n>.0/24 is directly connected, Ethernet0</n><!--4n-4--></4n-4></n></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
This is a basic working configuration, and is used as a starting point for comparison with the more complex configurations possible using the DMVPN solution. The first change will reduce the size of the configuration on the hub router. This is not important with small numbers of spoke routers, but it does become critical when there are more than 50 to 100 spoke routers.</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="reducing">Reducing the Hub Router Configuration Size</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
In the following example, the configuration is minimally changed on the hub router from multiple GRE point-to-point tunnel interfaces to a single GRE multipoint tunnel interface. This is a first step into the DMVPN solution.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
There is a unique block of configuration lines on the hub router to define the crypto map characteristics for each spoke router. This piece of the configuration defines the crypto ACL and the GRE tunnel interface for that spoke router. These characteristics are mostly the same for all the spokes, except for IP addresses (<b>set peer …</b>, <b>tunnel destination …</b>).</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Looking at the above configuration on the hub router, you see that there are at least 13 lines of configuration per spoke router; four for the crypto map, one for the crypto ACL, and eight for the GRE tunnel interface. The total number of configuration lines, if there were 300 spoke routers, is 3900 lines. You also need 300 (/30) subnets for addressing each tunnel link. A configuration of this size is very hard to manage and even more difficult when troubleshooting the VPN network. To reduce this value, you could use dynamic crypto maps, which would reduce the above value by 1200 lines, leaving 2700 lines in a 300-spoke network.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>When using dynamic crypto maps, the IPsec encryption tunnel must be initiated by the spoke router. You can also use <b>ip unnumbered <interface></interface></b> to reduce the number of subnets needed for the GRE tunnels, but this may make troubleshooting more difficult later.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
With the DMVPN solution, you can configure a single multipoint GRE tunnel interface and a single IPsec profile on the hub router to handle all spoke routers. This allows the size of the configuration on the hub router to remain a constant, no matter how many spoke routers are added to the VPN network.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The DMVPN solution introduces the following new commands:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b> crypto ipsec profile <name>
<ipsec parameters="">
tunnel protection ipsec profile <name>
ip nhrp map multicast dynamic</name></ipsec></name></b>
</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The <b>crypto ipsec profile <name></name></b> command is used like a dynamic crypto map, and it is designed specifically for tunnel interfaces. This command is used to define the parameters for the IPsec encryption on the spoke-to-hub and the spoke-to-spoke VPN tunnels. The only parameter that is required under the profile is the transform set. The IPsec peer address and the <b>match address ...</b> clause for the IPsec proxy are automatically derived from the NHRP mappings for the GRE tunnel.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The <b>tunnel protection ipsec profile <name></name></b> command is configured under the GRE tunnel interface and is used to associate the GRE tunnel interface with the IPsec profile. In addition, the <b>tunnel protection ipsec profile <name></name></b> command can also be used with a point-to-point GRE tunnel. In this case it will derive the IPsec peer and proxy information from the <b>tunnel source ...</b>and <b>tunnel destination ...</b> configuration. This simplifies the configuration since the IPsec peer and the crypto ACLs are no longer needed.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>The <b>tunnel protection …</b> command specifies that the IPsec encryption will be done after the GRE encapsulation has been added to the packet.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
These first two new commands are similar to configuring a crypto map and assigning the crypto map to an interface using the<b>crypto map <name></name></b> command. The big difference is that, with the new commands, you do not need to specify the IPsec peer address or an ACL to match the packets to be encrypted. These parameters are automatically determined from the NHRP mappings for the mGRE tunnel interface.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>When using the <b>tunnel protection …</b> command on the tunnel interface, a <b>crypto map ...</b> command is not configured on the physical outgoing interface.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The last new command, <b>ip nhrp map multicast dynamic</b>, allows NHRP to automatically add spoke routers to the multicast NHRP mappings when these spoke routers initiate the mGRE+IPsec tunnel and register their unicast NHRP mappings. This is needed to enable dynamic routing protocols to work over the mGRE+IPsec tunnels between the hub and spokes. If this command was not available, then the hub router would need to have a separate configuration line for a multicast mapping to each spoke.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>With this configuration, the spoke routers must initiate the mGRE+IPsec tunnel connection, since the hub router is not configured with any information about the spokes. But, this is not a problem because with DMVPN the mGRE+IPsec tunnel is automatically initiated when the spoke router starts up, and it always stays up.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>The following example shows point-to-point GRE tunnel interfaces on the spoke routers and lines of NHRP configuration added on both the hub and spoke routers to support the mGRE tunnel on the hub router. The configuration changes are as follows.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router (old) <img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>crypto map vpnmap1 10 IPsec-isakmp
set peer 172.16.1.1
set transform-set trans2
match address 101
crypto map vpnmap1 20 IPsec-isakmp
set peer 172.16.2.1
set transform-set trans2
match address 102
. . .
crypto map vpnmap1 <10n> IPsec-isakmp
set peer 172.16.<n>.1
set transform-set trans2
match address <n>
!
interface Tunnel1
bandwidth 1000
ip address 10.0.0.1 255.255.255.252
ip mtu 1400
delay 1000
tunnel source Ethernet0
tunnel destination 172.16.1.1
!
interface Tunnel2
bandwidth 1000
ip address 10.0.0.5 255.255.255.252
ip mtu 1400
delay 1000
tunnel source Ethernet0
tunnel destination 172.16.2.1
!
. . .
!
interface Tunnel<n>
bandwidth 1000
ip address 10.0.0.<4n-1> 255.255.255.252
ip mtu 1400
delay 1000
tunnel source Ethernet0
tunnel destination 172.16.<n>.1</n><!--4n-1--></4n-1></n></n></n><!--10n--></10n></b>
!
interface Ethernet0
ip address 172.17.0.1 255.255.255.0
<b>crypto map vpnmap1</b>
!
<b>access-list 101 permit gre host 172.17.0.1 host 172.16.1.1
access-list 102 permit gre host 172.17.0.1 host 172.16.2.1
. . .
access-list <n> permit gre host 172.17.0.1 host 172.16.<n>.1</n></n></b>
</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="ORACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/ORACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router (new) <img alt="ORACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/ORACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>crypto ipsec profile vpnprof
set transform-set trans2</b>
!
interface Tunnel0
bandwidth 1000
<b>ip address 10.0.0.1 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
no ip split-horizon eigrp 1</b>
delay 1000
tunnel source Ethernet0
<b>tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof</b>
!
interface Ethernet0
ip address 172.17.0.1 255.255.255.0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router (old) <img alt="REDCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/REDCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">crypto map vpnmap1 10 IPsec-isakmp
set peer 172.17.0.1
set transform-set trans2
match address 101
!
interface Tunnel0
bandwidth 1000
<b>ip address 10.0.0.<4n-2> 255.255.255.252
ip mtu 1400<!--4n-2--></4n-2></b>
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1
!
interface Ethernet0
ip address 172.16.<n>.1 255.255.255.252
<b>crypto map vpnmap1</b>
!
. . .
!
access-list 101 permit gre host 172.16.<n>.1 host 172.17.0.1
!</n></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="ORACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/ORACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router (new) <img alt="ORACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/ORACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">crypto map vpnmap1 10 IPsec-isakmp
set peer 172.17.0.1
set transform-set trans2
match address 101
!
interface Tunnel0
bandwidth 1000
<b>ip address 10.0.0.<n> 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1</n></b>
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1
<b>tunnel key 100000</b>
!
interface Ethernet0
ip address 172.16.<n>.1 255.255.255.252
<b>crypto map vpnmap1</b>
!
. . .
!
access-list 101 permit gre host 172.16.<n>.1 host 172.17.0.1
!</n></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
On the spoke routers, the subnet mask has changed, and NHRP commands have been added under the tunnel interface. The NHRP commands are necessary since the hub router is now using NHRP to map the spoke tunnel interface IP address to the spoke physical interface IP address.</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>ip address 10.0.0.<n> 255.255.255.0</n></b>
<b>ip mtu 1400</b>
<b>ip nhrp authentication test</b>
<b>ip nhrp map 10.0.0.1 172.17.0.1</b>
<b>ip nhrp network-id 100000</b>
<b>ip nhrp holdtime 300</b>
<b>ip nhrp nhs 10.0.0.1</b>
...
<b>tunnel key 100000</b>
</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The subnet is now /24 instead of /30, so all of the nodes are in the same subnet, instead of different subnets. The spokes still send spoke-to-spoke traffic via the hub since they are using a point-to-point GRE tunnel interface. The <b>ip nhrp authentication ...</b>,<b>ip nhrp network-id ...</b> and <b>tunnel key ...</b> commands are used to map the tunnel packets and the NHRP packets to the correct multipoint GRE tunnel interface and NHRP network when they are received on the hub. The <b>ip nhrp map ...</b> and <b>ip nhrp nhs</b> ... commands are used by NHRP on the spoke to advertise the spokes NHRP mapping (10.0.0.<n> --> 172.16.<n>.1) to the hub. The 10.0.0.<n> address is retrieved from the <b>ip address ...</b> command on the tunnel interface and the 172.16.<n>.1 address is retrieved from the <b>tunnel destination ...</b> command on the tunnel interface.</n></n></n></n></div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
In a case where there are 300 spoke routers, this change would reduce the number of configuration lines on the hub from 3900 lines to 16 lines (a reduction of 3884 lines). The configuration on each spoke router would increase by 6 lines.</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="suppdyn">Supporting Dynamic Addresses on Spokes</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
On a Cisco router, each IPsec peer needs to be configured with the IP address of the other IPsec peer before the IPsec tunnel can be brought up. There is a problem with doing this if a spoke router has a dynamic address on its physical interface, which is common for routers that are connected via DSL or Cable links.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
TED allows one IPsec peer to find another IPsec peer by sending a special Internet Security Association and Key Management Protocol (ISAKMP) packet to the IP destination address of the original data packet that needed to be encrypted. The assumption is that this packet will traverse the intervening network along the same path as taken by the IPsec tunnel packet. This packet will be picked up by the other-end IPsec peer, which will respond to the first peer. The two routers will then negotiate ISAKMP and IPsec Security Associations (SAs) and bring up the IPsec tunnel. This will only work if the data packets to be encrypted have routable IP addresses.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
TED can be used in combination with the GRE tunnels as configured in the previous section. This has been tested and works, though there was a bug in earlier versions of Cisco IOS software where TED forced all IP traffic between the two IPsec peers to be encrypted, not just the GRE tunnel packets. The DMVPN solution provides this and additional capabilities without the hosts having to use Internet routable IP addresses and without having to send probe and response packets. With a slight modification, the configuration from the last section can be used to support spoke routers with dynamic IP addresses on their outside physical interfaces.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="ORACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/ORACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router (no change) <img alt="ORACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/ORACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.1 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
no ip split-horizon eigrp 1
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address 172.17.0.1 255.255.255.0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="ORACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/ORACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router (old) <img alt="ORACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/ORACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">crypto map vpnmap1 10 IPsec-isakmp
set peer 172.17.0.1
set transform-set trans2
match address 101
!
...
!
<b>access-list 101 permit gre host 172.16.<n>.1 host 172.17.0.1</n></b>
</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router (new) <img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">crypto map vpnmap1 10 IPsec-isakmp
set peer 172.17.0.1
set transform-set trans2
<b>set security-association level per-host</b>
match address 101
!
...
!
<b>access-list 101 permit gre any host 172.17.0.1</b>
</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The functionality that is used in the new spoke configuration is as follows.</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>When the GRE tunnel interface comes up, it will start sending NHRP registration packets to the hub router. These NHRP registration packets will trigger IPsec to be initiated. On the spoke router, the set peer <peer-address> and <b>match ip access-list <acl></acl></b> commands are configured. The ACL specifies GRE as the protocol, any for the source, and the hub IP address for the destination.</peer-address><br />
<b>Note: </b>It is important to note that any is being used as the source in the ACL, and this must be the case since the IP address of the spoke router is dynamic and, therefore, not known before the physical interface is active. An IP subnet can be used for the source in the ACL if the dynamic spoke interface address will be restricted to an address within that subnet.<br />
</li>
<li>The <b>set security-association level per-host</b> command is used so that the IP source in the spokes IPsec proxy will be just the spokes current physical interface address (/32), rather than the "any" from the ACL. If the "any" from the ACL were used as the source in the IPsec proxy, it would preclude any other spoke router from also setting up an IPsec+GRE tunnel with this hub. This is because the resulting IPsec proxy on the hub would be equivalent to <b>permit gre host 172.17.0.1 any</b>. This would mean that all GRE tunnel packets destined to any spoke would be encrypted and sent to the first spoke that established a tunnel with the hub, since its IPsec proxy matches GRE packets for every spoke.</li>
<li>Once the IPsec tunnel is set up, an NHRP registration packet goes from the spoke router to the configured Next Hop Server (NHS). The NHS is the hub router of this hub-and-spoke network. The NHRP registration packet provides the information for the hub router to create an NHRP mapping for this spoke router. With this mapping, the hub router can then forward unicast IP data packets to this spoke router over the mGRE+IPsec tunnel. Also, the hub adds the spoke router to its NHRP multicast mapping list. The hub will then start sending dynamic IP routing multicast packets to the spoke (if a dynamic routing protocol is configured). The spoke will then become a routing protocol neighbor of the hub, and they will exchange routing updates.</li>
</ul>
<b style="font-family: arial, helvetica, sans-serif; font-size: 12px;">IPsec + mGRE Hub and Spoke</b><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><br />
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img alt="dmvpn_02.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/dmvpn_02.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router <img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Hub
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
<b>ip address 10.0.0.1 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
no ip split-horizon eigrp 1
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address 172.17.0.1 255.255.255.0
!
interface Ethernet1
ip address 192.168.0.1 255.255.255.0
!
router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.0.0 0.0.0.255
no auto-summary
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Notice in the above hub configuration that the IP addresses of the spoke routers are not configured. The spoke’s external physical interface and the mapping to the spoke’s tunnel interface IP addresses are learned dynamically by the hub via NHRP. This allows the spoke’s external physical interface IP address to be dynamically assigned.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router <img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke1
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto map vpnmap1 local-address Ethernet0
crypto map vpnmap1 10 IPsec-isakmp
set peer 172.17.0.1
<b>set security-association level per-host</b>
set transform-set trans2
match address 101
!
interface Tunnel0
bandwidth 1000
<b>ip address 10.0.0.2 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1
tunnel key 100000
!
interface Ethernet0
<b>ip address dhcp hostname Spoke1</b>
crypto map vpnmap1
!
interface Ethernet1
ip address 192.168.1.1 255.255.255.0
!
router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.1.0 0.0.0.255
no auto-summary
!
<b>access-list 101 permit gre 172.16.1.0 0.0.0.255 host 172.17.0.1</b>
</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router <img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke2
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto map vpnmap1 local-address Ethernet0
crypto map vpnmap1 10 IPsec-isakmp
set peer 172.17.0.1
<b>set security-association level per-host</b>
set transform-set trans2
match address 101
!
interface Tunnel0
bandwidth 1000
<b>ip address 10.0.0.3 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1
tunnel key 100000
!
interface Ethernet0
<b>ip address dhcp hostname Spoke2</b>
crypto map vpnmap1
!
interface Ethernet1
ip address 192.168.2.1 255.255.255.0
!
router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.1.0 0.0.0.255
no auto-summary
!
<b>access-list 101 permit gre 172.16.2.0 0.0.0.255 host 172.17.0.1</b>
</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The primary things to notice about the spoke configurations are:</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>The external physical interface (ethernet0) IP address is dynamic via DHCP.<br />
<b>ip address dhcp hostname Spoke2</b></li>
<li>The crypto ACL (101) specifies a subnet as the source for the IPsec proxy.<br />
<b>access-list 101 permit gre 172.16.2.0 0.0.0.255 host 172.17.0.1</b></li>
<li>The following command in the IPsec crypto map specifies that the security association will be per host.<br />
<b>set security-association level per-host</b></li>
<li>All of the tunnels are part of the same subnet, since all of them connect via the same multipoint GRE interface on the hub router.<br />
<b>ip address 10.0.0.2 255.255.255.0</b></li>
</ul>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The combination of these three commands make it unnecessary for the spoke’s external physical interface IP address to be configured. The IPsec proxy that is used will be host-based rather then subnet-based.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The configuration on the spoke routers does have the IP address of the hub router configured, since it needs to initiate the IPsec+GRE tunnel. Notice the similarity between the Spoke1 and Spoke2 configurations. Not only are these two similar, but all of the spoke router configurations will be similar. In most cases, all the spokes simply need unique IP addresses on their interfaces, and the rest of the their configurations will be the same. This makes it possible to configure and deploy many spoke routers quickly.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The NHRP data looks like the following on the hub and spoke.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router <img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Hub#<b>show ip nhrp</b>
10.0.0.2/32 via 10.0.0.2, Tunnel0 created 01:25:18, expire 00:03:51
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.1.4
10.0.0.3/32 via 10.0.0.3, Tunnel0 created 00:06:02, expire 00:04:03
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.2.10
...
10.0.0.<n>/32 via 10.0.0.<n>, Tunnel0 created 00:06:00, expire 00:04:25
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.<n>.41</n></n></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router <img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Spoke1#<b>sho ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 4d08h, never expire
Type: static, Flags: authoritative
NBMA address: 172.17.0.1</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="dynmulti">Dynamic Multipoint Hub and Spoke</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The configuration on the spoke routers above does not rely on features from the DMVPN solution, so the spoke routers can run Cisco IOS software versions prior to 12.2(13)T. The configuration on the hub router does rely on DMVPN features, so it must run Cisco IOS version 12.2(13)T or later. This allows you some flexibility in deciding when you need to upgrade your spoke routers that are already deployed. If your spoke routers are also running Cisco IOS version 12.2(13)T or later, then you can simplify the spoke configuration as follows.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router (prior to Cisco IOS 12.2(13)T) <img alt="YELCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/YELCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>crypto map vpnmap1 10 IPsec-isakmp
set peer 172.17.0.1
set security-association level per-host
set transform-set trans2
match address 101</b>
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.<n> 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1
tunnel key 100000
!
interface Ethernet0
ip address dhcp hostname Spoke<n>
<b>crypto map vpnmap1</b>
!
. . .
!
<b>access-list 101 permit gre any host 172.17.0.1</b>
</n></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="GRECIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/GRECIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router (after Cisco IOS 12.2(13)T) <img alt="GRECIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/GRECIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>crypto ipsec profile vpnprof
set transform-set trans2</b>
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.<n> 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1
tunnel key 100000
<b>tunnel protection ipsec profile vpnprof</b>
!
interface Ethernet0
ip address dhcp hostname Spoke<n>
!</n></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Notice that we have done the following:</div>
<ol style="font-family: arial, helvetica, sans-serif; font-size: 12px;" type="1">
<li>Removed the <b>crypto map vpnmap1 10 ipsec-isakmp</b> command and replaced it with <b>crypto ipsec profile vpnprof</b>.</li>
<li>Removed the <b>crypto map vpnmap1</b> command from the Ethernet0 interfaces and put the <b>tunnel protection ipsec profile vpnprof</b> command on the Tunnel0 interface.</li>
<li>Removed the crypto ACL, <b>access-list 101 permit gre any host 172.17.0.1</b>.</li>
</ol>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
In this case the IPsec peer addresses and proxies are automatically derived from the <b>tunnel source ...</b> and <b>tunnel destination ...</b>configuration. The peers and proxies are as follows (as seen in the output from <b>show crypto ipsec sa</b> command):</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">...
local ident (addr/mask/prot/port): (172.16.1.24/255.255.255.255/47/0)
remote ident (addr/mask/prot/port): (172.17.0.1/255.255.255.255/47/0)
...
local crypto endpt.: 172.17.1.24, remote crypto endpt.:172.17.0.1
...</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
In summary, the following full configurations include all of the changes made up to this point from the <a href="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml#baseconfig" style="color: #2970a6; font-size: 11px; text-decoration: none;">Base Configuration</a>(IPsec+GRE hub and spoke).</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="GRECIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/GRECIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router <img alt="GRECIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/GRECIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Hub
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.1 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
no ip split-horizon eigrp 1
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address 172.17.0.1 255.255.255.0
!
interface Ethernet1
ip address 192.168.0.1 255.255.255.0
!
router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.0.0 0.0.0.255
no auto-summary
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
There are no changes in the hub configuration.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="GRECIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/GRECIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router <img alt="GRECIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/GRECIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke1
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
<b>crypto ipsec profile vpnprof
set transform-set trans2</b>
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.2 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1
tunnel key 100000
<b>tunnel protection ipsec profile vpnprof</b>
!
interface Ethernet0
ip address dhcp hostname Spoke2
!
interface Ethernet1
ip address 192.168.1.1 255.255.255.0
!
router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.1.0 0.0.0.255
no auto-summary
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="GRECIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/GRECIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router <img alt="GRECIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/GRECIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke2
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
<b>crypto ipsec profile vpnprof
set transform-set trans2</b>
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.3 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
delay 1000
tunnel source Ethernet0
tunnel destination 172.17.0.1
tunnel key 100000
<b>tunnel protection ipsec profile vpnprof</b>
!
interface Ethernet0
ip address dhcp hostname Spoke2
!
interface Ethernet1
ip address 192.168.2.1 255.255.255.0
!
router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.2.0 0.0.0.255
no auto-summary
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="dmvpn">Dynamic Multipoint IPsec VPN</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The concepts and configuration in this section show the full capabilities of DMVPN. NHRP provides the capability for the spoke routers to dynamically learn the exterior physical interface address of the other spoke routers in the VPN network. This means that a spoke router will have enough information to dynamically build an IPsec+mGRE tunnel directly to other spoke routers. This is advantageous since, if this spoke-to-spoke data traffic was sent via the hub router, then it must be encrypted/decrypted, twice increasing the delay and the load on the hub router. In order to use this feature, the spoke routers need to be switched from point-to-point GRE (p-pGRE) to multipoint GRE (mGRE) tunnel interfaces. They also need to learn the (sub)networks that are available behind the other spokes with an IP next-hop of the tunnel IP address of the other spoke router. The spoke routers learn these (sub)networks via the dynamic IP routing protocol running over the IPsec+mGRE tunnel with the hub.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The dynamic IP routing protocol running on the hub router can be configured to reflect the routes learned from one spoke back out the same interface to all of the other spokes, but the IP next-hop on these routes will usually be the hub router, not the spoke router from which the hub learned this route.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>The dynamic routing protocol only runs on the hub and spoke links, it does not run on the dynamic spoke-to-spoke links.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The dynamic routing protocols (RIP, OSPF and EIGRP) need to be configured on the hub router to advertise the routes back out the mGRE tunnel interface and to set the IP next-hop to the originating spoke router for routes learned from one spoke when the route is advertised back out to the other spokes.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The following are requirements for the routing protocol configurations.</div>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="rip">RIP</a></h3>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
You need to turn off split horizon on the mGRE tunnel interface on the hub, otherwise RIP will not advertise routes learned via the mGRE interface back out that same interface.</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>no ip split-horizon</b>
</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
No other changes are necessary. RIP will automatically use the original IP next-hop on routes that it advertises back out the same interface where it learned these routes.</div>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="eigrp">EIGRP</a></h3>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
You need to turn off split horizon on the mGRE tunnel interface on the hub, otherwise EIGRP will not advertise routes learned via the mGRE interface back out that same interface.</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>no ip split-horizon eigrp <as></as></b>
</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
EIGRP will, by default, set the IP next-hop to be the hub router for routes that it is advertising, even when advertising those routes back out the same interface where it learned them. So in this case, you need the following configuration command to instruct EIGRP to use the original IP next-hop when advertising these routes.</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>no ip next-hop-self eigrp <as></as></b>
</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>The <b>no ip next-hop-self eigrp <as></as></b> command will be available starting in Cisco IOS release 12.3(2). For Cisco IOS releases between 12.2(13)T and 12.3(2) you must do the following:</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>If spoke-to-spoke dynamic tunnels are not wanted, then the above command is not needed.</li>
<li>If spoke-to-spoke dynamic tunnels are wanted, then you must use process switching on the tunnel interface on the spoke routers.</li>
<li>Otherwise, you will need to use a different routing protocol over the DMVPN.</li>
</ul>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="ospf">OSPF</a></h3>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Since OSPF is a link-state routing protocol, there are not any split horizon issues. Normally for multipoint interfaces you configure the OSPF network type to be point-to-multipoint, but this would cause OSPF to add host routes to the routing table on the spoke routers. These hosts routes would cause packets destined to networks behind other spoke routers to be forwarded via the hub, rather then forwarded directly to the other spoke. To get around this problem, configure the OSPF network type to be broadcast using the command.</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>ip ospf network broadcast</b>
</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
You also need to make sure that the hub router will be the Designated Router (DR) for the IPsec+mGRE network. This is done by setting the OSPF priority to be greater than 1 on the hub and 0 on the spokes.</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>Hub: <b>ip ospf priority 2</b></li>
<li>Spoke: <b>ip ospf priority 0</b></li>
</ul>
<b style="font-family: arial, helvetica, sans-serif; font-size: 12px;">DMVPN Single Hub</b><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><br />
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img alt="dmvpn_03.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/dmvpn_03.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router <img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Hub
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.1 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
<b>ip ospf network broadcast
ip ospf priority 2</b>
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address 172.17.0.1 255.255.255.0
!
interface Ethernet1
ip address 192.168.0.1 255.255.255.0
!
<b>router ospf 1
network 10.0.0.0 0.0.0.255 area 0
network 192.168.0.0 0.0.0.255 area 0</b>
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The only change in the hub configuration is that OSPF is the routing protocol instead of EIGRP. Notice that the OSPF network type is set to broadcast and the priority is set to 2. Setting the OSPF network type to broadcast will cause OSPF to install routes for networks behind the spokes routers with an IP next-hop address as the GRE tunnel address for that spoke router.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router <img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke1
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.2 255.255.255.0
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map multicast 172.17.0.1</b>
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
<b>ip ospf network broadcast
ip ospf priority 0</b>
delay 1000
tunnel source Ethernet0
<b>tunnel mode gre multipoint</b>
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address dhcp hostname Spoke1
!
interface Ethernet1
ip address 192.168.1.1 255.255.255.0
!
<b>router ospf 1
network 10.0.0.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0</b>
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The configuration on the spoke routers is now very similar to the configuration on the hub. The differences are as follows:</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>The OSPF priority is set to 0. The spoke routers cannot be allowed to become the DR for the mGRE nonbroadcast multiaccess (NBMA) network. Only the hub router has direct static connections to all spoke routers. The DR must have access to all members of the NBMA network.</li>
<li>There are NHRP unicast and multicast mappings configured for the hub router.<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>ip nhrp map multicast 172.17.0.1</b>
<b>ip nhrp map 10.0.0.1 172.17.0.1</b>
</pre>
</blockquote>
In the previous configuration, the <b>ip nhrp map multicast ...</b> command was not needed since the GRE tunnel was point-to-point. In that case, multicast packets will be automatically encapsulated through the tunnel to the single possible destination. This command is now needed because the spokes GRE tunnel has changed to multipoint and there is more then one possible destination.</li>
<li>When the spoke router comes up, it must initiate the tunnel connection with the hub, since the hub router is not configured with any information about the spoke routers, and the spoke routers may have dynamically assigned IP addresses. The spoke routers are also configured with the hub as their NHRP NHS.<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">ip nhrp nhs 10.0.0.1</pre>
</blockquote>
With the above command, the spoke router will send NHRP Registration packets through the mGRE+IPsec tunnel to the hub router at regular intervals. These registration packets provide the spoke NHRP mapping information that is needed by the hub router to tunnel packets back to the spoke routers.</li>
</ul>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router <img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke2
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.3 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast 172.17.0.1
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
<b>ip ospf network broadcast
ip ospf priority 0</b>
delay 1000
tunnel source Ethernet0
<b>tunnel mode gre multipoint</b>
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address dhcp hostname Spoke1
!
interface Ethernet1
ip address 192.168.3.1 255.255.255.0
!
<b>router ospf 1
network 10.0.0.0 0.0.0.255 area 0
network 192.168.2.0 0.0.0.255 area 0</b>
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router <img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke<n>
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.<n> 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast 172.17.0.1
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
<b>ip ospf network broadcast
ip ospf priority 0</b>
delay 1000
tunnel source Ethernet0
<b>tunnel mode gre multipoint</b>
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address dhcp hostname Spoke<n>
!
interface Ethernet1
ip address 192.168.<n>.1 255.255.255.0
!
<b>router ospf 1
network 10.0.0.0 0.0.0.255 area 0
network 192.168.<n>.0 0.0.0.255 area 0</n></b>
!</n></n></n></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Notice that the configurations of all of the spoke routers are very similar. The only differences are the IP addresses on the local interfaces. This helps when deploying a large number of spoke routers. All of the spoke routers can be configured identically, and only the local IP interface addresses need to be added.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
At this point, take a look at the routing tables and the NHRP mapping tables on the Hub, Spoke1, and Spoke2 routers to see the initial conditions (just after the Spoke1 and Spoke2 routers come up) and the conditions after Spoke1 and Spoke2 have created a dynamic link between them.</div>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="initial">Initial Conditions</a></h3>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router Information <img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Hub#<b>show ip route</b>
172.17.0.0/24 is subnetted, 1 subnets
C 172.17.0.0 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 1 subnets
C 10.0.0.0 is directly connected, Tunnel0
C 192.168.0.0/24 is directly connected, Ethernet1
O 192.168.1.0/24 [110/2] via 10.0.0.2, 00:19:53, Tunnel0
O 192.168.2.0/24 [110/2] via 10.0.0.3, 00:19:53, Tunnel0
Hub#<b>show ip nhrp</b>
10.0.0.2/32 via 10.0.0.2, Tunnel0 created 00:57:27, expire 00:04:13
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.1.24
10.0.0.3/32 via 10.0.0.3, Tunnel0 created 07:11:25, expire 00:04:33
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.2.75
Hub#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
204 Ethernet0 172.17.0.1 set HMAC_SHA+DES_56_CB 0 0
205 Ethernet0 172.17.0.1 set HMAC_SHA+DES_56_CB 0 0
2628 Tunnel0 10.0.0.1 set HMAC_MD5 0 402
2629 Tunnel0 10.0.0.1 set HMAC_MD5 357 0
2630 Tunnel0 10.0.0.1 set HMAC_MD5 0 427
2631 Tunnel0 10.0.0.1 set HMAC_MD5 308 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router Information <img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Spoke1#<b>show ip route</b>
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.24 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 1 subnets
C 10.0.0.0 is directly connected, Tunnel0
O 192.168.0.0/24 [110/2] via 10.0.0.1, 00:31:46, Tunnel0
C 192.168.1.0/24 is directly connected, Ethernet1
O 192.168.2.0/24 [110/2] via 10.0.0.3, 00:31:46, Tunnel0
Spoke1#<b>show ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 01:42:00, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.1
Spoke1#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
2 Ethernet0 172.16.1.24 set HMAC_SHA+DES_56_CB 0 0
2064 Tunnel0 10.0.0.2 set HMAC_MD5 0 244
2065 Tunnel0 10.0.0.2 set HMAC_MD5 276 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router Information <img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Spoke2#<b>show ip route</b>
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.2.0 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 1 subnets
C 10.0.0.0 is directly connected, Tunnel0
O 192.168.0.0/24 [110/2] via 10.0.0.1, 00:38:52, Tunnel0
O 192.168.1.0/24 [110/2] via 10.0.0.2, 00:38:52, Tunnel0
C 192.168.2.0/24 is directly connected, Ethernet1
Spoke2#<b>show ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 01:32:10, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.1
Spoke2#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
17 Ethernet0 172.16.2.75 set HMAC_SHA+DES_56_CB 0 0
2070 Tunnel0 10.0.0.3 set HMAC_MD5 0 279
2071 Tunnel0 10.0.0.3 set HMAC_MD5 316 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
At this point we ping from 192.168.1.2 to 192.168.2.3. These addresses are for hosts behind the Spoke1 and Spoke2 routers, respectively. The following sequence of events takes place to build the direct spoke-to-spoke mGRE+IPsec tunnel.</div>
<ol style="font-family: arial, helvetica, sans-serif; font-size: 12px;" type="1">
<li>The Spoke1 router receives the ping packet with the destination 192.168.2.3. It looks up this destination in the routing table and finds that it needs to forward this packet out the Tunnel0 interface to the IP nexthop, 10.0.0.3.</li>
<li>The Spoke1 router checks the NHRP mapping table for the destination 10.0.0.3 and finds that there is not an entry. The Spoke1 router creates an NHRP resolution request packet and sends it to its NHS (the Hub router).</li>
<li>The Hub router checks its NHRP mapping table for the destination 10.0.0.3 and finds that it maps to the address 172.16.2.75. The Hub router creates an NHRP resolution reply packet and sends it to the Spoke1 router.</li>
<li>The Spoke1 router receives the NHRP resolution reply, and it enters the 10.0.0.3 —>172.16.2.75 mapping in its NHRP mapping table. The addition of the NHRP mapping triggers IPsec to initiate an IPsec tunnel with the peer 172.16.2.75.</li>
<li>The Spoke1 router initiates ISAKMP with 172.16.2.75 and negotiates the ISAKMP and IPsec SAs. The IPsec proxy is derived from the Tunnel0 <b>tunnel source <address>
</address>
</b> command and the NHRP mapping.<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>local ident (addr/mask/prot/port): (172.16.1.24/255.255.255.255/47/0)</b>
<b>remote ident (addr/mask/prot/port): (172.16.2.75/255.255.255.255/47/0)</b>
</pre>
</blockquote>
</li>
<li>Once the IPsec tunnel has finished being built, all further data packets to the 192.168.2.0/24 subnet are sent directly to Spoke2.</li>
<li>After a packet destined to 192.168.2.3 has been forwarded to the host, this host will send a return packet to 192.168.1.2. When the Spoke2 router receives this packet destined to 192.168.1.2, it will look up this destination in the routing table and find that it needs to forward this packet out the Tunnel0 interface to the IP next-hop, 10.0.0.2.</li>
<li>The Spoke2 router checks the NHRP mapping table for the destination 10.0.0.2 and finds that there is not an entry. The Spoke2 router creates an NHRP resolution request packet and sends it to its NHS (the Hub router).</li>
<li>The Hub router checks its NHRP mapping table for the destination 10.0.0.2 and finds that it maps to the address 172.16.1.24. The Hub router creates an NHRP resolution reply packet and sends it to the Spoke2 router.</li>
<li>The Spoke2 router receives the NHRP resolution reply, and it enters the 10.0.0.2 —> 172.16.1.24 mapping in its NHRP mapping table. The addition of the NHRP mapping triggers IPsec to initiate an IPsec tunnel with the peer 172.16.1.24, but there already is an IPsec tunnel with peer 172.16.1.24, so nothing further needs to be done.</li>
<li>Spoke1 and Spoke2 can now forward packets directly to each other. When the NHRP mapping has not been used for forwarding packets for the holdtime, the NHRP mapping will be deleted. The deletion of the NHRP mapping entry will trigger IPsec to delete the IPsec SAs for this direct link.</li>
</ol>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="dyncond">Conditions After a Dynamic Link Is Created Between Spoke1 and Spoke2</a></h3>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router Information <img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Spoke1#<b>show ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 02:34:16, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.1
10.0.0.3/32 via 10.0.0.3, Tunnel0 created 00:00:05, expire 00:03:35
Type: dynamic, Flags: router unique used
NBMA address: 172.16.2.75
Spoke1#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
2 Ethernet0 172.16.1.24 set HMAC_SHA+DES_56_CB 0 0
3 Ethernet0 172.16.1.24 set HMAC_SHA+DES_56_CB 0 0
2064 Tunnel0 10.0.0.2 set HMAC_MD5 0 375
2065 Tunnel0 10.0.0.2 set HMAC_MD5 426 0
2066 Tunnel0 10.0.0.2 set HMAC_MD5 0 20
2067 Tunnel0 10.0.0.2 set HMAC_MD5 19 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router Information <img alt="CYACIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/CYACIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Spoke2#<b>show ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 02:18:25, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.1
10.0.0.2/32 via 10.0.0.2, Tunnel0 created 00:00:24, expire 00:04:35
Type: dynamic, Flags: router unique used
NBMA address: 172.16.1.24
Spoke2#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
17 Ethernet0 172.16.2.75 set HMAC_SHA+DES_56_CB 0 0
18 Ethernet0 172.16.2.75 set HMAC_SHA+DES_56_CB 0 0
2070 Tunnel0 10.0.0.3 set HMAC_MD5 0 407
2071 Tunnel0 10.0.0.3 set HMAC_MD5 460 0
2072 Tunnel0 10.0.0.3 set HMAC_MD5 0 19
2073 Tunnel0 10.0.0.3 set HMAC_MD5 20 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
From the above output you can see that Spoke1 and Spoke2 have gotten NHRP mappings for each other from the Hub router, and they have built and used an mGRE+IPsec tunnel. The NHRP mappings will expire after five minutes ( the current value of NHRP holdtime = 300 seconds). If the NHRP mappings are used within the last minute before expiring, then an NHRP resolution request and reply will be sent to refresh the entry before it is deleted. Otherwise, the NHRP mapping will be deleted and that will trigger IPsec to clear the IPsec SAs.</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="dualhubs">Dynamic Multipoint IPsec VPN with Dual Hubs</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
With a few additional configuration lines to the spoke routers you can set up dual (or multiple) hub routers, for redundancy. There are two ways to configure dual hub DMVPNs.</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>A single DMVPN network with each spoke using a single multipoint GRE tunnel interface and pointing to two different hubs as its Next-Hop-Server (NHS).<br />
The hub routers will only have a single multipoint GRE tunnel interface.</li>
<li>Dual DMVPN networks with each spoke having two GRE tunnel interfaces (either point-to-point or multipoint) and each GRE tunnel connected to a different hub router.<br />
Again, the hub routers will only have a single multipoint GRE tunnel interface.</li>
</ul>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The following examples will look at configuring these two different scenarios for dual hub DMVPNs. In both cases, the highlighted differences are relative to the DMVPN single hub configuration.</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="dualhubsingle">Dual Hub - Single DMVPN Layout</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The dual hub with a single DMVPN layout is fairly easy to set up, but it does not give you as much control over the routing across the DMVPN as the dual hub with dual DMVPNs layout does. The idea in this case is to have a single DMVPN "cloud" with all hubs (two in this case) and all spokes connected to this single subnet ("cloud"). The static NHRP mappings from the spokes to the hubs define the static IPsec+mGRE links over which the dynamic routing protocol will run. The dynamic routing protocol will not run over the dynamic IPsec+mGRE links between spokes. Since the spoke routers are routing neighbors with the hub routers over the same mGRE tunnel interface, you cannot use link or interfaces differences (like metric, cost, delay, or bandwidth) to modify the dynamic routing protocol metrics to prefer one hub over the other hub when they are both up. If this preference is needed, then techniques internal to the configuration of the routing protocol must be used. For this reason, it may be better to use EIGRP or RIP rather than OSPF for the dynamic routing protocol.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>The above issue is usually only a problem if the hub routers are co-located. When they are not co-located, normal dynamic routing will likely end up preferring the correct hub router, even if the destination network can be reached via either hub router.</div>
<b style="font-family: arial, helvetica, sans-serif; font-size: 12px;">Dual Hub - Single DMVPN Layout</b><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><br />
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img alt="dmvpn_04.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/dmvpn_04.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub Router <img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Hub1
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
<b>bandwidth 1000
ip address 10.0.0.1 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
ip ospf network broadcast
<b>ip ospf priority 2</b>
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address 172.17.0.1 255.255.255.0
!
interface Ethernet1
ip address 192.168.0.1 255.255.255.0
!
<b>router ospf 1
network 10.0.0.0 0.0.0.255 area 1
network 192.168.0.0 0.0.0.255 area 0</b>
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub2 Router <img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Hub2
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
<b>bandwidth 900
ip address 10.0.0.2 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp map multicast 172.17.0.1</b>
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
ip nhrp nhs 10.0.0.1
ip ospf network broadcast
<b>ip ospf priority 1</b>
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address 172.17.0.5 255.255.255.0
!
interface Ethernet1
ip address 192.168.0.2 255.255.255.0
!
<b>router ospf 1
network 10.0.0.0 0.0.0.255 area 1
network 192.168.0.0 0.0.0.255 area 0</b>
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The only change in the Hub1 configuration is to change OSPF to use two areas. Area 0 is used for the network behind the two hubs, and area 1 is used for the DMVPN network and networks behind the spoke routers. OSPF could use a single area, but two areas were used here to demonstrate the configuration for multiple OSPF areas.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The configuration for Hub2 is basically the same as the Hub1 configuration with the appropriate IP address changes. The one main difference is that Hub2 is also a spoke (or client) of Hub1, making Hub1 the primary hub and Hub2 the secondary hub. This is done so that Hub2 is an OSPF neighbor with Hub1 over the mGRE tunnel. Since Hub1 is the OSPF DR, it must have a direct connection with all other OSPF routers over the mGRE interface (NBMA network). Without the direct link between Hub1 and Hub2, Hub2 would not participate in the OSPF routing when Hub1 is also up. When Hub1 is down, Hub2 will be the OSPF DR for the DMVPN (NBMA network). When Hub1 comes back up, it will take over being the OSPF DR for the DMVPN.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The routers behind Hub1 and Hub2 will use Hub1 for sending packets to the spoke networks because the bandwidth for the GRE tunnel interface is set to 1000 Kb/sec versus 900 Kb/sec on Hub2. In contrast, the spoke routers will send packets for the networks behind the hub routers to both Hub1 and Hub2, since there is only a single mGRE tunnel interface on each spoke router and there will be two equal cost routes. If per-packet load balancing is being used this can cause out-of-order packets.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router <img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke1
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.11 255.255.255.0
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map multicast 172.17.0.1
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp map multicast 172.17.0.5
ip nhrp map 10.0.0.2 172.17.0.5</b>
ip nhrp network-id 100000
ip nhrp holdtime 300
<b>ip nhrp nhs 10.0.0.1
ip nhrp nhs 10.0.0.2</b>
ip ospf network broadcast
ip ospf priority 0
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address dhcp hostname Spoke1
!
interface Ethernet1
ip address 192.168.1.1 255.255.255.0
!
<b>router ospf 1
network 10.0.0.0 0.0.0.255 area 1
network 192.168.1.0 0.0.0.255 area 1</b>
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The differences in the configuration on the spoke routers are as follows:</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>In the new configuration, the spoke is configured with static NHRP mappings for Hub2 and Hub2 is added as a next hop server.<br />
Original:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>ip nhrp map multicast 172.17.0.1</b>
<b>ip nhrp map 10.0.0.1 172.17.0.1</b>
<b>ip nhrp nhs 10.0.0.1</b>
</pre>
</blockquote>
New:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;"><b>ip nhrp map multicast 172.17.0.1</b>
<b>ip nhrp map 10.0.0.1 172.17.0.1</b>
<b>ip nhrp map multicast 172.17.0.5</b>
<b>ip nhrp map 10.0.0.2 172.17.0.5</b>
<b>ip nhrp nhs 10.0.0.1</b>
<b>ip nhrp nhs 10.0.0.2</b>
</pre>
</blockquote>
</li>
<li>The OSPF areas on the spoke routers have been changed to area 1.</li>
</ul>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Remember that by defining the static NHRP mapping and NHS on a spoke router for a hub, you are going to run the dynamic routing protocol over this tunnel. This defines the hub and spoke routing or neighbor network. Notice that Hub2 is a hub for all of the spokes, and it is also a spoke for Hub1. This makes it easy to design, configure, and modify multilayer hub-and-spoke networks when you are using the DMVPN solution.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router <img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke2
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.12 255.255.255.0
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map multicast 172.17.0.1
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp map multicast 172.17.0.5
ip nhrp map 10.0.0.2 172.17.0.5</b>
ip nhrp network-id 100000
ip nhrp holdtime 300
<b>ip nhrp nhs 10.0.0.1
ip nhrp nhs 10.0.0.2</b>
ip ospf network broadcast
ip ospf priority 0
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address dhcp hostname Spoke1
!
interface Ethernet1
ip address 192.168.2.1 255.255.255.0
!
<b>router ospf 1
network 10.0.0.0 0.0.0.255 area 0
network 192.168.2.0 0.0.0.255 area 0</b>
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router <img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke<n>
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.<n> 255.255.255.0
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map multicast 172.17.0.1
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp map multicast 172.17.0.5
ip nhrp map 10.0.0.2 172.17.0.5</b>
ip nhrp network-id 100000
ip nhrp holdtime 300
<b>ip nhrp nhs 10.0.0.1
ip nhrp nhs 10.0.0.2</b>
ip ospf network broadcast
ip ospf priority 0
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address dhcp hostname Spoke<x>
!
interface Ethernet1
ip address 192.168.<n>.1 255.255.255.0
!
<b>router ospf 1
network 10.0.0.0 0.0.0.255 area 0
network 192.168.<n>.0 0.0.0.255 area 0</n></b>
!</n></x></n></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
At this point, you can take a look at the routing tables, the NHRP mapping tables, and the IPsec connections on the Hub1, Hub2, Spoke1, and Spoke2 routers to see the initial conditions (just after the Spoke1 and Spoke2 routers come up).</div>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="initcond2">Initial Conditions and Changes</a></h3>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub1 Router Information <img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Hub1#<b>show ip route</b>
172.17.0.0/24 is subnetted, 1 subnets
C 172.17.0.0 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 1 subnets
C 10.0.0.0 is directly connected, Tunnel0
C 192.168.0.0/24 is directly connected, Ethernet1
O 192.168.1.0/24 [110/2] via 10.0.0.11, 00:02:17, Tunnel0
O 192.168.2.0/24 [110/2] via 10.0.0.12, 00:02:17, Tunnel0
Hub1#<b>show ip nhrp</b>
10.0.0.2/32 via 10.0.0.2, Tunnel0 created 1w3d, expire 00:03:15
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.17.0.5
10.0.0.11/32 via 10.0.0.11, Tunnel0 created 1w3d, expire 00:03:49
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.1.24
10.0.0.12/32 via 10.0.0.12, Tunnel0 created 1w3d, expire 00:04:06
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.2.75
Hub1#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
4 Ethernet0 172.17.0.1 set HMAC_SHA+DES_56_CB 0 0
5 Ethernet0 172.17.0.1 set HMAC_SHA+DES_56_CB 0 0
6 Ethernet0 172.17.0.1 set HMAC_SHA+DES_56_CB 0 0
3532 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 0 232
3533 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 212 0
3534 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 0 18
3535 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 17 0
3536 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 0 7
3537 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 7 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub2 Router Information <img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Hub2#<b>show ip route</b>
172.17.0.0/24 is subnetted, 1 subnets
C 172.17.0.0 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 1 subnets
C 10.0.0.0 is directly connected, Tunnel0
C 192.168.0.0/24 is directly connected, Ethernet1
O 192.168.1.0/24 [110/2] via 10.0.0.11, 00:29:15, Tunnel0
O 192.168.2.0/24 [110/2] via 10.0.0.12, 00:29:15, Tunnel0
Hub2#<b>show ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 1w3d, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.1
10.0.0.11/32 via 10.0.0.11, Tunnel0 created 1w3d, expire 00:03:15
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.1.24
10.0.0.12/32 via 10.0.0.12, Tunnel0 created 00:46:17, expire 00:03:51
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.2.75
Hub2#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
4 Ethernet0 171.17.0.5 set HMAC_SHA+DES_56_CB 0 0
5 Ethernet0 171.17.0.5 set HMAC_SHA+DES_56_CB 0 0
6 Ethernet0 171.17.0.5 set HMAC_SHA+DES_56_CB 0 0
3520 Tunnel0 10.0.0.2 set HMAC_MD5+DES_56_CB 0 351
3521 Tunnel0 10.0.0.2 set HMAC_MD5+DES_56_CB 326 0
3522 Tunnel0 10.0.0.2 set HMAC_MD5+DES_56_CB 0 311
3523 Tunnel0 10.0.0.2 set HMAC_MD5+DES_56_CB 339 0
3524 Tunnel0 10.0.0.2 set HMAC_MD5+DES_56_CB 0 25
3525 Tunnel0 10.0.0.2 set HMAC_MD5+DES_56_CB 22 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router Information <img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Spoke1#<b>show ip route</b>
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.0 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 1 subnets
C 10.0.0.0 is directly connected, Tunnel0
O IA 192.168.0.0/24 [110/11] via 10.0.0.1, 00:39:31, Tunnel0
[110/11] via 10.0.0.2, 00:39:31, Tunnel0
C 192.168.1.0/24 is directly connected, Ethernet1
O 192.168.2.0/24 [110/2] via 10.0.0.12, 00:37:58, Tunnel0
Spoke1#<b>show ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 00:56:40, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.1
10.0.0.2/32 via 10.0.0.2, Tunnel0 created 00:56:40, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.5
Spoke1#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
1 Ethernet0 172.16.1.24 set HMAC_SHA+DES_56_CB 0 0
2 Ethernet0 172.16.1.24 set HMAC_SHA+DES_56_CB 0 0
2010 Tunnel0 10.0.0.11 set HMAC_MD5+DES_56_CB 0 171
2011 Tunnel0 10.0.0.11 set HMAC_MD5+DES_56_CB 185 0
2012 Tunnel0 10.0.0.11 set HMAC_MD5+DES_56_CB 0 12
2013 Tunnel0 10.0.0.11 set HMAC_MD5+DES_56_CB 13 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router Information <img alt="BLUCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/BLUCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Spoke2#<b>show ip route</b>
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.2.0 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 1 subnets
C 10.0.0.0 is directly connected, Tunnel0
O IA 192.168.0.0/24 [110/11] via 10.0.0.1, 00:57:56, Tunnel0
[110/11] via 10.0.0.2, 00:57:56, Tunnel0
O 192.168.1.0/24 [110/2] via 10.0.0.11, 00:56:14, Tunnel0
C 192.168.2.0/24 is directly connected, Ethernet1
Spoke2#<b>show ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 5w6d, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.1
10.0.0.2/32 via 10.0.0.2, Tunnel0 created 6w6d, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.5
Spoke2#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
2 Ethernet0 172.16.2.75 set HMAC_SHA+DES_56_CB 0 0
3 Ethernet0 172.16.2.75 set HMAC_SHA+DES_56_CB 0 0
3712 Tunnel0 10.0.0.12 set HMAC_MD5+DES_56_CB 0 302
3713 Tunnel0 10.0.0.12 set HMAC_MD5+DES_56_CB 331 0
3716 Tunnel0 10.0.0.12 set HMAC_MD5+DES_56_CB 0 216
3717 Tunnel0 10.0.0.12 set HMAC_MD5+DES_56_CB 236 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
There are a couple of interesting issues to notice about the routing tables on Hub1, Hub2, Spoke1, and Spoke2:</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>Both hub routers have equal cost routes to the networks behind the spoke routers.<br />
Hub1:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O 192.168.1.0/24 [110/2] via 10.0.0.11, 00:02:17, Tunnel0
O 192.168.2.0/24 [110/2] via 10.0.0.12, 00:02:17, Tunnel0</pre>
</blockquote>
Hub2:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O 192.168.1.0/24 [110/2] via 10.0.0.11, 00:29:15, Tunnel0
O 192.168.2.0/24 [110/2] via 10.0.0.12, 00:29:15, Tunnel0</pre>
</blockquote>
This means that Hub1 and Hub2 will advertise the same cost for the networks behind the spoke routers to the routers in the network behind the hub routers. For example, the routing table on a router, R2, that is connected directly to the 192.168.0.0/24 LAN would look like the following:<br />
R2:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O IA 192.168.1.0/24 [110/12] via 192.168.0.1, 00:00:26, Ethernet1/0/3
[110/12] via 192.168.0.2, 00:00:27, Ethernet1/0/3O
O IA 192.168.2.0/24 [110/12] via 192.168.0.1, 00:00:27, Ethernet1/0/3
[110/12] via 192.168.0.2, 00:00:27, Ethernet1/0/3</pre>
</blockquote>
</li>
<li>The spoke routers have equal cost routes via both hub routers to the network behind the hub routers.<br />
Spoke1:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O IA 192.168.0.0/24 [110/11] via 10.0.0.1, 00:39:31, Tunnel0
[110/11] via 10.0.0.2, 00:39:31, Tunnel0</pre>
</blockquote>
Spoke2:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O IA 192.168.0.0/24 [110/11] via 10.0.0.1, 00:57:56, Tunnel0
[110/11] via 10.0.0.2, 00:57:56, Tunnel0</pre>
</blockquote>
If the spoke routers are doing per-packet load balancing, then you could get out-of-order packets.</li>
</ul>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
To avoid doing asymmetric routing or per-packet load balancing across the links to the two hubs, you need to configure the routing protocol to prefer one spoke-to-hub path in both directions. If you want Hub1 to be the primary and Hub2 to be the backup, then you can set the OSPF cost on the hub tunnel interfaces to be different.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">interface tunnel0
...
ip ospf cost 10
...</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">interface tunnel0
...
ip ospf cost 20
...</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Now the routes look like the following:</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O 192.168.1.0/24 [110/11] via 10.0.0.11, 00:00:28, Tunnel0
O 192.168.2.0/24 [110/11] via 10.0.0.12, 00:00:28, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O 192.168.1.0/24 [110/21] via 10.0.0.11, 00:00:52, Tunnel0
O 192.168.2.0/24 [110/21] via 10.0.0.12, 00:00:52, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
R2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O IA 192.168.1.0/24 [110/31] via 192.168.0.1, 00:01:06, Ethernet1/0/3
O IA 192.168.2.0/24 [110/31] via 192.168.0.1, 00:01:06, Ethernet1/0/3</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The two hub routers now have different costs on the routes for the networks behind the spoke routers. This means Hub1 will be preferred for forwarding traffic to the spoke routers, as can be seen on router R2. This will take care of the asymmetric routing problem described in the first bullet above.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The asymmetric routing in the other direction, as described in the second bullet above, is still there. When using OSPF as the dynamic routing protocol, you can fix this with a workaround by using the <b>distance ...</b> command under <b>router ospf 1</b> on the spokes to prefer routes learned via Hub1 over routes learned via Hub2.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">router ospf 1
distance 111 10.0.0.2 0.0.0.0 1
access-list 1 permit any</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">router ospf 1
distance 111 10.0.0.2 0.0.0.0 1
access-list 1 permit any</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Now the routes look like the following:</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O 192.168.0.0/24 [110/11] via 10.0.0.1, 00:00:06, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">O 192.168.1.0/24 [110/11] via 10.0.0.1, 00:00:10, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The above routing configuration will protect against asymmetric routing, while at the same time allowing failover to Hub2 if Hub1 goes down. It does mean that when both hubs are up, only Hub1 is used. If you want to use both hubs by balancing the spokes across the hubs, with failover protection and no asymmetric routing, then the routing configuration can get complex, especially when using OSPF. For this reason, the following dual hub with dual DMVPN layout may be a better choice.</div>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="dualhubdual">Dual Hub - Dual DMVPN Layout</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The dual hub with dual DMVPN layout is slightly more difficult to set up, but it does give you better control of the routing across the DMVPN. The idea is to have a two separate DMVPN "clouds". Each hub (two in this case) is connected to one DMVPN subnet ("cloud") and the spokes are connected to both DMVPN subnets ("clouds"). Since the spoke routers are routing neighbors with both hub routers over the two GRE tunnel interfaces, you can use interface configuration differences (such as bandwidth, cost and delay) to modify the dynamic routing protocol metrics to prefer one hub over the other hub when they are both up.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>The above issue is usually only relevant if the hub routers are co-located. When they are not co-located, normal dynamic routing will likely end up preferring the correct hub router, even if the destination network can be reached via either hub router.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
You can use either p-pGRE or mGRE tunnel interfaces on the spoke routers. Multiple p-pGRE interfaces on a spoke router can use the same <b>tunnel source ...</b> IP address, but multiple mGRE interfaces on a spoke router must have a unique <b>tunnel source ...</b> IP address. This is because when IPsec is initiating, the first packet is an ISAKMP packet which needs to be associated with one of the mGRE tunnels. The ISAKMP packet only has the destination IP address (remote IPsec peer address) with which to make this association. This address is matched against the <b>tunnel source ...</b> address, but since both tunnels have the same<b>tunnel source ...</b> address, the first mGRE tunnel interface is always matched. This means that incoming multicast data packets may be associated with the wrong mGRE interface, breaking any dynamic routing protocol.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
GRE packets themselves do not have this problem since they have the <b>tunnel key ...</b> value to differentiate between the two mGRE interfaces. Starting in Cisco IOS Software Releases 12.3(5) and 12.3(7)T, an additional parameter was introduced to overcome this limitation: <b>tunnel protection....shared</b>. The <b>shared</b> keyword indicates that mutiple mGRE interfaces will use the IPSec encryption with the same source IP address. If you have an earlier release you can use p-pGRE tunnels in this dual hub with dual DMVPN layout. In the p-pGRE tunnel case, both the <b>tunnel source ...</b> and the <b>tunnel destination ...</b> IP addresses can be used for matching. For this example p-pGRE tunnels will be used in this dual hub with dual DMVPN layout and not use the<b>shared</b> qualifier.</div>
<b style="font-family: arial, helvetica, sans-serif; font-size: 12px;">Dual Hub - Dual DMVPN Layout</b><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><br />
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img alt="dmvpn_05.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/dmvpn_05.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The following highlighted changes are relative to the dynamic multipoint hub and spoke configurations illustrated earlier in this document.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub1 Router <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
<b>hostname Hub1</b>
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.1 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
no ip split-horizon eigrp 1
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address 172.17.0.1 255.255.255.252
!
interface Ethernet1
ip address 192.168.0.1 255.255.255.0
!
router eigrp 1
network 10.0.0.0 0.0.0.255
network 192.168.0.0 0.0.0.255
no auto-summary
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub2 Router <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
<b>hostname Hub2</b>
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwidth 1000
<b>ip address 10.0.1.1 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
<b>ip nhrp network-id 100001</b>
ip nhrp holdtime 600
no ip split-horizon eigrp 1
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
<b>tunnel key 100001</b>
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address 172.17.0.5 255.255.255.252
!
interface Ethernet1
ip address 192.168.0.2 255.255.255.0
!
router eigrp 1
network 10.0.1.0 0.0.0.255
network 192.168.0.0 0.0.0.255
no auto-summary
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
In this case, the Hub1 and Hub2 configurations are similar. The main difference is that each is the hub of a different DMVPN. Each DMVPN uses a different:</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>IP subnet (10.0.0.0/24, 10.0.0.1/24)</li>
<li>NHRP network id (100000, 100001)</li>
<li>Tunnel key (100000, 100001)</li>
</ul>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The dynamic routing protocol has been switched from OSPF to EIGRP, since it is easier to set up and manage a NBMA network using EIGRP, as described later in this document.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke1
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
<b>interface Tunnel0</b>
bandwidth 1000
<b>ip address 10.0.0.11 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000</b>
ip nhrp holdtime 300
<b>ip nhrp nhs 10.0.0.1</b>
delay 1000
tunnel source Ethernet0
<b>tunnel destination 172.17.0.1
tunnel key 100000</b>
tunnel protection ipsec profile vpnprof
!
<b>interface Tunnel1</b>
bandwidth 1000
<b>ip address 10.0.1.11 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map 10.0.1.1 172.17.0.5
ip nhrp network-id 100001</b>
ip nhrp holdtime 300
<b>ip nhrp nhs 10.0.1.1</b>
delay 1000
tunnel source Ethernet0
<b>tunnel destination 172.17.0.5
tunnel key 100001</b>
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address dhcp hostname Spoke1
!
interface Ethernet1
ip address 192.168.1.1 255.255.255.0
!
router eigrp 1
<b>network 10.0.0.0 0.0.0.255
network 10.0.1.0 0.0.0.255</b>
network 192.168.1.0 0.0.0.255
no auto-summary
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Each of the spoke routers is configured with two p-pGRE tunnel interface, one in each of the two DMVPNs. The <b>ip address ...</b>, <b>ip nhrp network-id ...</b>, <b>tunnel key ...</b> and <b>tunnel destination ...</b> values are used to differentiate between the two tunnels. The dynamic routing protocol, EIGRP, is run over both p-pGRE tunnel subnets and is used to select one p-pGRE interface (DMVPN) over the other.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke2
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
<b>interface Tunnel0</b>
bandwidth 1000
<b>ip address 10.0.0.12 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000</b>
ip nhrp holdtime 300
<b>ip nhrp nhs 10.0.0.1</b>
delay 1000
tunnel source Ethernet0
<b>tunnel destination 172.17.0.1
tunnel key 100000</b>
tunnel protection ipsec profile vpnprof
!
interface Tunnel1
bandwidth 1000
<b>ip address 10.0.1.12 255.255.255.0</b>
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map 10.0.1.1 172.17.0.5
ip nhrp network-id 100001</b>
ip nhrp holdtime 300
<b>ip nhrp nhs 10.0.1.1</b>
delay 1000
tunnel source Ethernet0
<b>tunnel destination 172.17.0.5
tunnel key 100001</b>
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address dhcp hostname Spoke2
!
interface Ethernet1
ip address 192.168.2.1 255.255.255.0
!
router eigrp 1
<b>network 10.0.0.0 0.0.0.255
network 10.0.1.0 0.0.0.255</b>
network 192.168.2.0 0.0.0.255
no auto-summary
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke<n> Router <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></n></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke<n>
!
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile vpnprof
set transform-set trans2
!
<b>interface Tunnel0</b>
bandwidth 1000
<b>ip address 10.0.0.<n> 255.255.255.0</n></b>
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000</b>
ip nhrp holdtime 300
<b>ip nhrp nhs 10.0.0.1</b>
delay 1000
tunnel source Ethernet0
<b>tunnel destination 172.17.0.1
tunnel key 100000</b>
tunnel protection ipsec profile vpnprof
!
<b>interface Tunnel1</b>
bandwidth 1000
<b>ip address 10.0.1.<n> 255.255.255.0</n></b>
ip mtu 1400
ip nhrp authentication test
<b>ip nhrp map 10.0.1.1 172.17.0.5
ip nhrp network-id 100001</b>
ip nhrp holdtime 300
<b>ip nhrp nhs 10.0.1.1</b>
delay 1000
tunnel source Ethernet0
<b>tunnel destination 172.17.0.5
tunnel key 100001</b>
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address dhcp hostname Spoke<x>
!
interface Ethernet1
ip address 192.168.<n>.1 255.255.255.0
!
router eigrp 1
<b>network 10.0.0.0 0.0.0.255
network 10.0.1.0 0.0.0.255</b>
network 192.168.<n>.0 0.0.0.255
no auto-summary
!</n></n></x></n></pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
At this point, let us take a look at the routing tables, the NHRP mapping tables, and IPsec connections on the Hub1, Hub2, Spoke1 and Spoke2 routers to see the initial conditions (just after the Spoke1 and Spoke2 routers come up).</div>
<h3 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="initcond3">Initial Conditions and Changes</a></h3>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub1 Router Information <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Hub1#<b>show ip route</b>
172.17.0.0/30 is subnetted, 1 subnets
C 172.17.0.0 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 2 subnets
C 10.0.0.0 is directly connected, Tunnel0
D 10.0.1.0 [90/2611200] via 192.168.0.2, 00:00:46, Ethernet1
C 192.168.0.0/24 is directly connected, Ethernet1
D 192.168.1.0/24 [90/2841600] via 10.0.0.11, 00:00:59, Tunnel0
D 192.168.2.0/24 [90/2841600] via 10.0.0.12, 00:00:34, Tunnel0
Hub1#<b>show ip nhrp</b>
10.0.0.12/32 via 10.0.0.12, Tunnel0 created 23:48:32, expire 00:03:50
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.2.75
10.0.0.11/32 via 10.0.0.11, Tunnel0 created 23:16:46, expire 00:04:45
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.1.24
Hub1#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
15 Ethernet0 172.17.63.18 set HMAC_SHA+DES_56_CB 0 0
16 Ethernet0 10.0.0.1 set HMAC_SHA+DES_56_CB 0 0
2038 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 0 759
2039 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 726 0
2040 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 0 37
2041 Tunnel0 10.0.0.1 set HMAC_MD5+DES_56_CB 36 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Hub2 Router Information <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Hub2#<b>show ip route</b>
172.17.0.0/30 is subnetted, 1 subnets
C 172.17.0.4 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 2 subnets
D 10.0.0.0 [90/2611200] via 192.168.0.1, 00:12:22, Ethernet1
C 10.0.1.0 is directly connected, Tunnel0
C 192.168.0.0/24 is directly connected, Ethernet1
D 192.168.1.0/24 [90/2841600] via 10.0.1.11, 00:13:24, Tunnel0
D 192.168.2.0/24 [90/2841600] via 10.0.1.12, 00:12:11, Tunnel0
Hub2#<b>show ip nhrp</b>
10.0.1.12/32 via 10.0.1.12, Tunnel3 created 06:03:24, expire 00:04:39
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.2.75
10.0.1.11/32 via 10.0.1.11, Tunnel3 created 23:06:47, expire 00:04:54
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.16.1.24
Hub2#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
4 Ethernet0 171.17.0.5 set HMAC_SHA+DES_56_CB 0 0
6 Ethernet0 171.17.0.5 set HMAC_SHA+DES_56_CB 0 0
2098 Tunnel0 10.0.1.1 set HMAC_MD5+DES_56_CB 0 722
2099 Tunnel0 10.0.1.1 set HMAC_MD5+DES_56_CB 690 0
2100 Tunnel0 10.0.1.1 set HMAC_MD5+DES_56_CB 0 268
2101 Tunnel0 10.0.1.1 set HMAC_MD5+DES_56_CB 254 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router Information <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Spoke1#<b>show ip route</b>
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.1.0 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 1 subnets
C 10.0.0.0 is directly connected, Tunnel0
C 10.0.1.0 is directly connected, Tunnel1
D 192.168.0.0/24 [90/2841600] via 10.0.1.1, 00:26:30, Tunnel1
[90/2841600] via 10.0.0.1, 00:26:30, Tunnel0
C 192.168.1.0/24 is directly connected, Ethernet1
D 192.168.2.0/24 [90/3097600] via 10.0.1.1, 00:26:29, Tunnel1
[90/3097600] via 10.0.0.1, 00:26:29, Tunnel0
Spoke1#<b>show ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 23:25:46, never expire
Type: static, Flags: authoritative
NBMA address: 172.17.0.1
10.0.1.1/32 via 10.0.1.1, Tunnel1 created 23:24:40, never expire
Type: static, Flags: authoritative
NBMA address: 172.17.0.5
Spoke1#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
16 Ethernet0 172.16.1.24 set HMAC_SHA+DES_56_CB 0 0
18 Ethernet0 172.16.1.24 set HMAC_SHA+DES_56_CB 0 0
2118 Tunnel0 10.0.0.11 set HMAC_MD5+DES_56_CB 0 181
2119 Tunnel0 10.0.0.11 set HMAC_MD5+DES_56_CB 186 0
2120 Tunnel1 10.0.1.11 set HMAC_MD5+DES_56_CB 0 105
2121 Tunnel1 10.0.1.11 set HMAC_MD5+DES_56_CB 110 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router Information <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">Spoke2#<b>show ip route</b>
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.2.0 is directly connected, Ethernet0
10.0.0.0/24 is subnetted, 2 subnets
C 10.0.0.0 is directly connected, Tunnel0
C 10.0.1.0 is directly connected, Tunnel1
D 192.168.0.0/24 [90/2841600] via 10.0.1.1, 00:38:04, Tunnel1
[90/2841600] via 10.0.0.1, 00:38:04, Tunnel0
D 192.168.1.0/24 [90/3097600] via 10.0.1.1, 00:38:02, Tunnel1
[90/3097600] via 10.0.0.1, 00:38:02, Tunnel0
C 192.168.2.0/24 is directly connected, Ethernet1
Spoke2#<b>show ip nhrp</b>
10.0.0.1/32 via 10.0.0.1, Tunnel0 created 1d02h, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.1
10.0.1.1/32 via 10.0.1.1, Tunnel1 created 1d02h, never expire
Type: static, Flags: authoritative used
NBMA address: 172.17.0.5
Spoke2#<b>show crypto engine connection active</b>
ID Interface IP-Address State Algorithm Encrypt Decrypt
8 Ethernet0 172.16.2.75 set HMAC_SHA+DES_56_CB 0 0
9 Ethernet0 172.16.2.75 set HMAC_SHA+DES_56_CB 0 0
2036 Tunnel0 10.0.0.12 set HMAC_MD5+DES_56_CB 0 585
2037 Tunnel0 10.0.0.12 set HMAC_MD5+DES_56_CB 614 0
2038 Tunnel1 10.0.1.12 set HMAC_MD5+DES_56_CB 0 408
2039 Tunnel1 10.0.1.12 set HMAC_MD5+DES_56_CB 424 0</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Again, there are a couple of interesting things to notice about the routing tables on Hub1, Hub2, Spoke1, and Spoke2:</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>Both hub routers have equal cost routes to the networks behind the spoke routers.<br />
Hub1:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.1.0/24 [90/2841600] via 10.0.0.11, 00:00:59, Tunnel0
D 192.168.2.0/24 [90/2841600] via 10.0.0.12, 00:00:34, Tunnel0</pre>
</blockquote>
Hub2:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.1.0/24 [90/2841600] via 10.0.1.11, 00:13:24, Tunnel0
D 192.168.2.0/24 [90/2841600] via 10.0.1.12, 00:12:11, Tunnel0</pre>
</blockquote>
This means that Hub1 and Hub2 will advertise the same cost for the networks behind the spoke routers to the routers in the network behind the hub routers. For example, the routing table on a router, R2, that is connected directly to the 192.168.0.0/24 LAN would look like the following:<br />
R2:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.1.0/24 [90/2867200] via 192.168.0.1, 00:51:51, Ethernet1/0/3
[90/2867200] via 192.168.0.2, 00:51:51, Ethernet1/0/3
D 192.168.2.0/24 [90/2867200] via 192.168.0.2, 00:52:43, Ethernet1/0/3
[90/2867200] via 192.168.0.1, 00:52:43, Ethernet1/0/3</pre>
</blockquote>
</li>
<li>The spoke routers have equal cost routes via both hub routers to the network behind the hub routers.<br />
Spoke1:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.0.0/24 [90/3097600] via 10.0.1.1, 00:26:30, Tunnel1
[90/3097600] via 10.0.0.1, 00:26:30, Tunnel0</pre>
</blockquote>
Spoke2:<br />
<blockquote>
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.0.0/24 [90/3097600] via 10.0.1.1, 00:38:04, Tunnel1
[90/3097600] via 10.0.0.1, 00:38:04, Tunnel0</pre>
</blockquote>
If the spoke routers are doing per-packet load-balancing, then you could get out-of-order packets.</li>
</ul>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
To avoid doing asymmetric routing or per-packet load balancing across the links to the two hubs, you need to configure the routing protocol to prefer one spoke-to-hub path in both directions. If you want Hub1 to be the primary and Hub2 to be the backup, then you can set the delay on the hub tunnel interfaces to be different.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">interface tunnel0
...
delay 1000
...</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">interface tunnel0
...
delay 1050
...</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>In this example, 50 was added to the delay on the tunnel interface on Hub2 because it is smaller than the delay on Ethernet1 interface between the two hubs (100). By doing this, Hub2 will still forward packets directly to the spoke routers, but it will advertise a less desirable route than Hub1 to routers behind Hub1 and Hub2. If the delay was increased by more than 100, then Hub2 would forward packets for the spoke routers through Hub1 via the Ethernet1 interface, though the routers behind Hub1 and Hub2 would still correctly prefer Hub-1 for sending packets to the spoke routers.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Now the routes look like the following:</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.1.0/24 [90/2841600] via 10.0.0.11, 00:01:11, Tunnel0
D 192.168.2.0/24 [90/2841600] via 10.0.0.12, 00:01:11, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.1.0/24 [90/2854400] via 10.0.1.11, 00:00:04, Tunnel0
D 192.168.2.0/24 [90/2854400] via 10.0.1.12, 00:00:04, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
R2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.1.0/24 [90/2867200] via 192.168.0.1, 00:02:18, Ethernet1/0/3
D 192.168.2.0/24 [90/2867200] via 192.168.0.1, 00:02:18, Ethernet1/0/3</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The two hub routers have different costs for the network routes behind the spoke routers, so, in this case, Hub1 will be preferred for forwarding traffic to the spoke routers, as can be seen on R2. This takes care of issue described in the first bullet above.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The issue described in the second bullet above is still there, but since you have two p-pGRE tunnel interfaces, you can set the<b>delay ...</b> on the tunnel interfaces separately to change the EIGRP metric for the routes learned from Hub1 versus Hub2.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">interface tunnel0
delay 1000
interface tunnel1
delay 1050</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">interface tunnel0
delay 1000
interface tunnel1
delay 1050</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Now the routes look like the following:</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.0.0/24 [90/2841600] via 10.0.0.1, 00:15:44, Tunnel0
D 192.168.2.0/24 [90/3097600] via 10.0.0.1, 00:15:44, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.0.0/24 [90/2841600] via 10.0.0.1, 00:13:54, Tunnel0
D 192.168.1.0/24 [90/3097600] via 10.0.0.1, 00:13:54, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The above routing configuration will protect against asymmetric routing, while at the same time allowing failover to Hub2 if Hub1 goes down. It does mean that when both hubs are up, only Hub1 is used.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
If you want to use both hubs by balancing the spokes across the hubs, with failover protection and no asymmetric routing, then the routing configuration is more complex, but you can do it when using EIGRP. To accomplish this, set the <b>delay ...</b> on the tunnel interfaces of the hub routers back to being equal and then use the <b>offset-list <acl> out <offset> <interface></interface></offset></acl></b> command on the spoke routers to increase the EIGRP metric for routes advertised out the GRE tunnel interfaces to the backup hub. The unequal<b>delay ...</b> between the Tunnel0 and Tunnel1 interfaces on the spoke is still used, so the spoke router will prefer its primary hub router. The changes on the spoke routers are as follows.</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke1 Router <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke1
!
...
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.11 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
<b>delay 1000</b>
tunnel source Ethernet0
tunnel destination 172.17.0.1
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Tunnel1
bandwidth 1000
ip address 10.0.1.11 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.1.1 172.17.0.5
ip nhrp network-id 100001
ip nhrp holdtime 300
ip nhrp nhs 10.0.1.1
<b>delay 1500</b>
tunnel source Ethernet0
tunnel destination 172.17.0.5
tunnel key 100001
tunnel protection ipsec profile vpnprof
!
...
!
router eigrp 1
<b>offset-list 1 out 12800 Tunnel1</b>
network 10.0.0.0 0.0.0.255
network 10.0.1.0 0.0.0.255
network 192.168.1.0
<b>distribute-list 1 out</b>
no auto-summary
!
<b>access-list 1 permit 192.168.1.0</b>
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<table bgcolor="#FFFFFF" border="1" cellpadding="3" cellspacing="1" style="color: black; font-family: arial, helvetica, sans-serif; font-size: 12px; width: 60%px;"><tbody>
<tr><th bgcolor="#CCCCFF" colspan="1" height="" rowspan="1" width=""><img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /> Spoke2 Router <img alt="MAGCIR.gif" border="0" src="http://www.cisco.com/image/gif/paws/41940/MAGCIR.gif" style="border: 0px;" usemap="http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml" /></th></tr>
<tr><td bgcolor="#FFFFFF" colspan="1" height="" rowspan="1" width=""><pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">version 12.3
!
hostname Spoke2
!
...
!
interface Tunnel0
bandwidth 1000
ip address 10.0.0.12 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.0.1 172.17.0.1
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.0.0.1
<b>delay 1500</b>
tunnel source Ethernet0
tunnel destination 172.17.0.1
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Tunnel1
bandwidth 1000
ip address 10.0.1.12 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.0.1.1 172.17.0.5
ip nhrp network-id 100001
ip nhrp holdtime 300
ip nhrp nhs 10.0.1.1
<b>delay 1000</b>
tunnel source Ethernet0
tunnel destination 172.17.0.5
tunnel key 100001
tunnel protection ipsec profile vpnprof
!
...
!
router eigrp 1
<b>offset-list 1 out 12800 Tunnel1</b>
network 10.0.0.0 0.0.0.255
network 10.0.1.0 0.0.0.255
network 192.168.2.0
<b>distribute-list 1 out</b>
no auto-summary
!
<b>access-list 1 permit 192.168.2.0</b>
!</pre>
</td></tr>
</tbody></table>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>The offset value of 12800 (50*256) was added to the EIGRP metric because it is smaller than 25600 (100*256). This value (25600), is what is added to the EIGRP metric for routes learned between the hub routers. By using 12800 in the <b>offset-list</b>command, the backup hub router will forward packets directly to the spoke routers, rather than forwarding these packets via the Ethernet to go through primary hub router for those spokes. The metric on the routes advertised by the hub routers will still be such that the correct primary hub router will be preferred. Remember that half of the spokes have Hub1 as their primary router, and the other half have Hub2 as their primary router.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>If the offset value was increased by more than 25600 (100*256), then the hubs would forward packets for half of the spoke routers through the other hub via the Ethernet1 interface, even though the routers behind the hubs would still prefer the correct hub for sending packets to the spoke routers.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>The <b>distribute-list 1 out</b> command was also added since it is possible that routes learned from one hub router via one tunnel interface on a spoke could be advertised back to the other hub via the other tunnel. The <b>distribute-list ...</b> command ensures that the spoke router can only advertise its own routes.</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<b>Note: </b>If you prefer to control the routing advertisements on the hub routers rather than on the spoke routers , then the <b>offset-list <acl1> in <value> <interface></interface></value></acl1></b> and <b>distribute-list <acl2> in</acl2></b> commands can be configured on the hub routers instead of on the spokes. The <acl2> access-list would list the routes from behind all spokes and the <acl1> access-list would list only the routes from behind spokes where another hub router is to be the primary hub.</acl1></acl2></div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
With these changes the routes look like the following:</div>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.1.0/24 [90/2841600] via 10.0.0.11, 00:12:11, Tunnel2
D 192.168.2.0/24 [90/2854400] via 10.0.0.12, 00:13:24, Tunnel2</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Hub2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.1.0/24 [90/2854400] via 10.0.1.11, 00:09:58, Tunnel0
D 192.168.2.0/24 [90/2841600] via 10.10.1.12, 00:11:11, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
R2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.1.0/24 [90/2867200] via 192.168.0.1, 00:13:13, Ethernet1/0/3
D 192.168.2.0/24 [90/2867200] via 192.168.0.2, 00:14:25, Ethernet1/0/3</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke1:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.0.0/24 [90/2841600] via 10.0.0.1, 00:16:12, Tunnel0</pre>
</blockquote>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
Spoke2:</div>
<blockquote style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<pre style="font-size: 11px; height: auto; max-width: 650px; min-width: 400px; overflow: auto;">D 192.168.0.0/24 [90/2841600] via 10.0.1.1, 00:18:54, Tunnel1</pre>
</blockquote>
<h2 style="font-family: arial, helvetica, sans-serif;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="conclusion">Conclusion</a></h2>
<div style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
The DMVPN solution provides the following functionality to better scale large and small IPsec VPN networks.</div>
<ul style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<li>DMVPN allows better scaling in full mesh or in partial mesh IPsec VPNs.<br />
It is especially useful when spoke-to-spoke traffic is sporadic (for example, every spoke is not constantly sending data to every other spoke). It does allow any spoke to send data directly to any other spoke, as long there is direct IP connectivity between the spokes.</li>
<li>DMVPN supports IPsec nodes with dynamically assigned addresses (such as Cable, ISDN, and DSL).<br />
This applies to hub-and-spoke as well as mesh networks. DMVPN can require the hub-to-spoke link to constantly be up.</li>
<li>DMVPN simplifies the addition of VPN nodes.<br />
When adding a new spoke router, you only have to configure the spoke router and plug it into the network (though, you may need to add ISAKMP authorization information for the new spoke on the hub). The hub will dynamically learn about the new spoke and the dynamic routing protocol will propagate the routing to the hub and all other spokes.</li>
<li>DMVPN reduces the size of the configuration needed on all the routers in the VPN.<br />
This is also the case for GRE+IPsec hub-and-spoke-only VPN networks.</li>
<li>DMVPN uses GRE and, therefore, supports IP multicast and dynamic routing traffic across the VPN.<br />
This means that a dynamic routing protocol can be used, and redundant “hubs” can be supported by the protocol. Multicast applications are also supported.</li>
<li>DMVPN supports split tunneling at the spokes.</li>
</ul>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-48933307853716040642014-01-28T06:16:00.003-08:002016-06-02T06:03:31.553-07:00- Cisco Networking: Cisco Secure Services Client (SSC)<h2 class="p_H_Head1" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin: 14px 0em 7px -0.1in;">
Introduction</h2>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051137" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pB1_Body1" style="color: black; font-size: 11px; font-weight: normal; margin: 1px 0em 6px;">
The Cisco Secure Services Client (SSC) is client software that provides 802.1X (Layer 2) and device authentication for access to both wired and wireless networks. SSC manages user and device identity and the network access protocols required for secure access. It works intelligently to make it simple for employees and guests to connect to an enterprise wired or wireless network.</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071342" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pB1_Body1" style="color: black; font-size: 11px; font-weight: normal; margin: 1px 0em 6px;">
SSC supports these main features:</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051150" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Wired (802.3) and wireless (802.11) network adapters</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071220" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Integrated VPN support</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071222" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Authentication using Windows machine credentials</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071224" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Single sign-on user authentication using Windows logon credentials</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071215" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Simplified and easy-to-use 802.1X configuration</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071273" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />EAP methods:</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071389" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu2_Bullet2" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />EAP-FAST, EAP-PEAP, EAP-TTLS, EAP-TLS, and<br />
LEAP (EAP-MD5, EAP-GTC and EAP-MSCHAPv2 for 802.3 wired only).</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071275" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Inner EAP methods:</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071301" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu2_Bullet2" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />PEAP—EAP-GTC. EAP-TLS, and EAP-MSCHAPv2</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1086735" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu2_Bullet2" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />EAP-FAST—EAP-GTC. EAP-TLS, and EAP-MSCHAPv2</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071270" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu2_Bullet2" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />EAP-TTLS—EAP-MD5 and EAP-MSCHAPv2<br />
(also legacy protocols—PAP, CHAP, MSCHAP, and MSCHAPv2)</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071345" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Encryption modes:</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071362" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu2_Bullet2" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Static WEP (Open or Shared), dynamic WEP (generated with 802.1X), TKIP and AES</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071358" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Key establishment protocols:</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071383" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu2_Bullet2" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />WPA, WPA2/802.11i and CCKM (selectively, depending on the 802.11 NIC adapter)</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051154" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Smartcard-provided credentials</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051155" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Cisco Trust Agent (CTA) processing when CTA is also installed</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Supported_Operating_Systems" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><span style="color: black; font-family: "arial" , "helvetica" , sans-serif; font-weight: normal;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1075243" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a></h3>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Supported Operating Systems</h3>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1075254" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pB1_Body1" style="color: black; font-size: 11px; font-weight: normal; margin: 1px 0em 6px;">
The supported 32-bit operating systems are:</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1075257" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Windows XP Professional (SP2)</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1075261" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Windows 2000 (SP4)</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1075334" style="color: black; font-family: arial, helvetica, sans-serif; font-weight: normal;"></a><div class="pBu1_Bullet1" style="color: black; font-size: 11px; font-weight: normal; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Windows 2003 Server Enterprise Edition (SP2)</div>
</h3>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
</h3>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
GUI Operation</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The management utility GUI guides the administrator through a series of windows and menu options to specify and configure the wired and wireless network security profiles.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Points to remember when using the management utility GUI:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />If an entry has a ? next to it, you can click the ? to obtain context-sensitive help.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />The window that appears when you click <b class="cBold">Next</b><span style="font-style: italic;"> </span>is determined by the choices you made on the current window.</div>
<div class="pB1_Body1" style="margin: 1px 0em 6px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: 11px;">To activate the SSC management utility GUI, double-click </span></span><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 11px; font-weight: bold;">sscManagementUtility.exe</span><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: 11px;">. The welcome window appears (see </span></span>Figure 2-1).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-1 Cisco SSC Management Utility Welcome Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/271001-272000/271005.jpg" hspace="0" id="wp1051891" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
There are four choices on this window:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Create New Configuration Profile—Used to create a new deployment profile. The management utility guides the system administrator through the process of specifying client policies and security authentication policies for single or multiple networks. The management utility validates the configuration file against the configuration schema and the business rules.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Modify Existing Configuration Profile—Used to revise the policy settings of an already created (unprocessed or processed) configuration file. Processed profiles are valid, signed, encrypted (shared keys and passwords are encrypted), and contain embedded certificate and Proxy Auto-Configuration (PAC) files.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Process Existing Configuration Profile—Used to process and validate an existing configuration profile (processed or unprocessed) against the configuration schema and business rules. The processing involves these operations:</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Verifying the validity of the created file</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Embedding any referenced certificate or PAC files</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Encrypting any passwords or shared keys</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Signing the final configuration file, so that end users cannot tamper with the administrator-deployed configuration file.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Create Pre-Configured Client Package—The management utility combines the client source package file with the processed and signed configuration file to produce the client destination package file. The client destination package file is used to configure the user's PC with SSC and the defined profiles.</div>
<div class="Note3" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.4in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pN3_Note3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.75in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />For SSC 5.0, the sscPackageGen utility must be used to generate the destination package file.</div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Creating a New Configuration File</h3>
<div class="pB1_Body1" style="margin: 1px 0em 6px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: 11px;">To create a new configuration file, click </span></span><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 11px; font-weight: bold;">Create New Configuration Profile</span><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: 11px;"> and the window shown in</span></span> Figure 2-2<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: 11px;"> appears.</span></span></div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-2 Select Cisco SCS Version Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270501.jpg" hspace="0" id="wp1051910" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The SSC management utility enables you to create a configuration file for SSC 5.1 or 5.0.</div>
<div class="pB1_Body1" style="margin: 1px 0em 6px;">
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: 11px;">When you click </span></span><b class="cBold" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px;">Cisco SSC 5.1</b><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: 11px;">, the Client Policy window appears</span></span> (Figure 2-3).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring Client Policy</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Client Policy window enables you to configure the client policy options (Figure 2-3).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-3 Client Policy Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270502.jpg" hspace="0" id="wp1051922" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />SSC releases 5.0 and later do not allow end users to enter license numbers using the SSC GUI. It is the responsibility of the network administrator to enter a valid license in the destination package using the SSC management utility so that all end users have the appropriate license.</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
There are three sections on this window:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />License section—allows you to specify a new unlimited SSC license key that you purchased from Cisco.</div>
<div class="Note3" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.4in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pN3_Note3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.75in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />The SSC software downloaded from the Cisco.com download center supports a limited 90-day trial license.</div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Connection Settings section—allows you to define whether 802.1X authentication must be attempted after user logon or before Windows domain authentication (pre-logon). If you choose pre-logon, you can also specify the maximum (worst case) number of seconds to wait before allowing the user to logon (default 30 seconds). If a network connection cannot be established within this time, the Windows logon process continues with user logon.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Allowed Media section—enables the types of media controlled by the SSC client.</div>
<div class="Note3" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.4in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pN3_Note3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.75in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />SSC releases 5.0 and later are single-homed allowing only one network connection to be operating at a time. Also, wired connections have higher priority than wireless connections.</div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If you enable VPN for a wireless connection, you can specify the authentication mechanism VPN will use:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Soft token authentication—Prompts for username and password for the soft token account. SSC automatically obtains the soft token from the Secure Computing SofToken-II program and passes the soft token to the IPSec VPN client.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Password authentication—Prompts for the VPN password. SSC automatically activates the IPSec VPN client and passes the password.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Certificate authentication—No prompt is required. SSC automatically activates the IPSec VPN client, and the VPN server obtains the certificate.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you complete your selections and click <b class="cBold">Next</b>, the Authentication Policy window appears (Figure 2-4).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring Authentication Policy</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
This window allows you to define global association and authentication network policies. Global policies apply to all networks that you, the administrator, or the user can create.</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-4 Authentication Policy Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/271001-272000/271006.jpg" hspace="0" id="wp1051939" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you complete your selections and click <b class="cBold">Next</b>, the Networks window appears (Figure 2-5).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring Networks</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Networks window allows you to configure networks that are pre-defined for your enterprise user. You can either configure networks that are available to all groups or create groups with specific networks. For additional information on groups, see the "Groups in SSC" section.</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-5 Networks Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270504.jpg" hspace="0" id="wp1051951" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you click <b class="cBold">Add Group</b>, the User Groups window appears (Figure 2-6).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-6 User Groups Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270505.jpg" hspace="0" id="wp1051966" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Scanlist control section enables you to control whether users can see the scanlist when this group is active. It may be necessary to restrict viewing of the scanlist; for example, in order to prevent users from accidentally connecting to nearby devices.</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />This is a per-group setting. For groups created by the end user using the SSC GUI, the scanlist control is set to <span style="font-style: italic;">Allow the user to see a scanlist in this group</span>.</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Click <b class="cBold">OK. </b>The Networks window reappears with the new group just created visible (<span style="font-style: italic;">My Group</span> in Figure 2-7).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-7 Networks Window with New Group Visible</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270506.jpg" hspace="0" id="wp1051975" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Network groups contain single or multiple network profile descriptions. A network profile defines the specific properties and operational behavior of a single network. The profile includes the following characteristics:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />The user-friendly name of the network.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Network access media (wired, Wi-Fi) and adapter details used for the network connection.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Definition of the security class (open, shared key, authenticating) of the network.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Definition of the connection context (machine only, user only, machine and user) for the network.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Wi-Fi association and encryption method (Wi-Fi network).</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Authentication methods supported and properties (authenticating network).</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Static keys, if applicable (non-authenticating network).</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Definition of types and source of credentials (authenticating network).</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Definition of trusted servers (authenticating network) and support for deploying Certificate Authority (CA) certificates and manual provisioning of EAP-FAST Protected Access Credentials (PACs).</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Networks defined as part of the distribution package are locked; therefore, the end user is not able to edit the configuration settings or delete the profiles.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
On the Networks window (Figure 2-7), you can add a network to a newly created group, such as My Group, by highlighting it and clicking <b class="cBold">Add Network</b>. The Network Media window appears (Figure 2-8).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-8 Network Media Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270507.jpg" hspace="0" id="wp1051986" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
This window enables you to choose a wired or a wireless network.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If you choose <b class="cBold">Wired (803.3) Network</b> and then click <span style="font-weight: bold;">Next</span>, the Wired Network Setting window appears (Figure 2-9).</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If you choose <b class="cBold">Wifi (wireless) Network</b> and then click<b class="cBold"> Next</b>, the WiFi Network Setting window appears (Figure 2-11).</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you have finished adding all your groups and networks, click the <b class="cBold">Next</b> button and Figure 2-24 appears (see the "Validating the Configuration File" section).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring Wired Network Settings</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Wired Network Settings window enables you to create an open (non-secure) network or an 802.1X authentication wired network (Figure 2-9).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-9 Wired Network Settings Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/271001-272000/271007.jpg" hspace="0" id="wp1084572" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
In the Display Name field, you can enter the name that is displayed for this wired network.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Connection Timeout value is the length of time that SSC waits for a network connection to be established before it tries another network.</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />Some smartcard authentication systems require almost 60 seconds to complete an authentication. When using a smartcard, you might need to increase the Connection Timeout value.</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
In the Security Level area, choose the desired network type:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Open Network—This setting is recommended for guest access on the wired network.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Authenticating Network—This setting is recommended for secure enterprise wired networks.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you choose <b class="cBold">Open Network</b> and click <b class="cBold">Next</b>, the 802.1X Connection Setting window appears (Figure 2-12).</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you choose <b class="cBold">Authenticating Network</b> and click<span style="font-weight: bold;"> </span><b class="cBold">Next</b>, the 802.1X Connection Settings window appears (Figure 2-10). This window enables you to enter your 802.1X timer values. The default values should work for most wired networks; however, you have the option to configure the settings to suit your environment.</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-10 Connection Settings Window for a Wired Network</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/271001-272000/271008.jpg" hspace="0" id="wp1084652" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When complete and you can click <b class="cBold">Next, </b>the Network Connection Type window appears (Figure 2-13).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring WiFi Network Settings</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The WiFi Network Settings window enables you to create an open (non-secure) network, a shared key network, or an 802.1X authentication wireless network (Figure 2-11).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-11 WiFi Network Settings Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270508.jpg" hspace="0" id="wp1051997" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
In the Display Name field, you can enter the name that is displayed for this wireless network.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
In the SSID field, you should enter the SSID (or network name) for this wireless network.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Association Timeout value is the length of time that the SSC waits for association to the SSID before it tries another network.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Connection Timeout value is the length of time that the SSC waits for a network connection to be established, before it tries another network.</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />Some smartcard authentication systems require almost 60 seconds to complete an authentication. When using a smartcard, you might need to increase the Connection Timeout value.</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
In the Security Level area, choose the desired network type:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Open Network—This setting is recommended for guest access wireless networks.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Shared Key Network—This setting is not recommended for enterprise wireless networks.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Authenticating Network—This setting is recommended for secure enterprise wireless networks.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you complete your selections and click<span style="font-weight: bold;"> </span><b class="cBold">Next</b>, the CCX Settings window appears.</div>
<div class="Note2" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.43in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note2" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.85in; margin-right: 0em; margin-top: 0px;" />
<div class="pN2_Note2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.88in; margin-right: 0em; text-indent: -0.46in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />The CCX settings apply only in a Windows Vista environment.</div>
<hr class="Note2" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.85in; margin-right: 0em; margin-top: 0px;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When using Windows XP or Windows 2000, ignore the CCX settings window and click<b class="cBold"> Next</b>. The 802.1X Connection Settings window appears (Figure 2-12).</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
This window enables you to enter your 802.1X timer values. The default values should work for most networks; however, you may set it to suit your environment.</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-12 802.1X Connection Settings Window for a Wireless Network</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270510.jpg" hspace="0" id="wp1052017" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
In the Association Mode field, click the drop-down arrow to select the association mode for this network:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />WEP</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />WPA Enterprise (TKIP)</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />WPA Enterprise (AES)</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />WPA2 Enterprise (TKIP)</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />WPA2 Enterprise (AES)</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />CCKM (TKIP)</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />CCKM (AES)</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />The chosen association mode must be enabled from the Authentication Policy window (see the "Configuring Authentication Policy" section).</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When finished, click <b class="cBold">Next</b> and the Network Connection Type window appears (Figure 2-13).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring the Network Connection Type</h3>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-13 Network Connection Type Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270511.jpg" hspace="0" id="wp1052031" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
This window enables you to choose the type of network connection. SSC defaults to Machine Connection. The User Connection option defines the connection as a user connection type. User connections are attempted after the user has logged onto the PC.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
A machine and user network contains a machine part and a user part. The SSID is the same for the two parts, but the credential type for machine connection can be different from the credential type for user connection.</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />For an open network, the Machine and User Connection option is not available.</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When finished, click <b class="cBold">Next</b> and the Machine Authentication (EAP) Method window appears (Figure 2-14).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring EAP Authentication</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Machine Authentication (EAP) Method and the User Authentication (EAP) Method windows enable you to choose the authentication method for the machine and the user, respectively. Both windows contain the same authentication method options.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Figure 2-14 lists the EAP methods for a wireless network connection.</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-14 Machine Authentication (EAP) Method Window for a Wireless Network Connection</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/200001-210000/203001-204000/203980.jpg" hspace="0" id="wp1052045" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Figure 2-15 lists the EAP methods for a wired network connection.</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-15 Machine Authentication Method Window for a Wired Network Connection</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/271001-272000/271009.jpg" hspace="0" id="wp1084102" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />The chosen authentication mode must be enabled from the Authentication Policy window (see the "Configuring Authentication Policy" section).</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If you choose any of the EAP options with a configure button, you must click the corresponding Configure button to configure the EAP method:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />EAP TLS—See the "Configuring EAP TLS" section.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />EAP TTLS—See the "Configuring EAP TTLS" section.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />PEAP—See the "Configuring PEAP Options" section.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />EAP Fast—See the "Configuring EAP Fast Settings" section.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If you choose the Validate Server Identity option on the EAP TLS, EAP TTLS, PEAP, or EAP Fast settings window, the window in Figure 2-20 appears after you click <b class="cBold">Next</b> (see the "Configuring Trusted Server Validation Rules" section).</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If you do not choose the Validate Server Identity option, Figure 2-22 appears when you click <b class="cBold">Next </b>(see the "Configuring Trusted Certificate Authority" section).</div>
<h3 class="p_H_Head3" style="font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring EAP TLS</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The EAP TLS Settings window contains two options (Figure 2-16):</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Validate Server Certificate—enables server certificate validation.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Enable Fast Reconnect—enables session resumption.</div>
<div class="Note3" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.4in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pN3_Note3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.75in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />The <i class="cEmphasis">Disable when using a Smart Card</i> option is not available for machine authentication.</div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-16 EAP-TLS Settings Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/200001-210000/203001-204000/203360.jpg" hspace="0" id="wp1065750" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you click<b class="cBold"> OK</b>, the Machine or User Authentication (EAP) Method window reappears (see the "Configuring EAP Authentication" section).</div>
<h3 class="p_H_Head3" style="font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring EAP TTLS</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The EAP TTLS Settings window enables you to configure EAP TTLS settings (Figure 2-17).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-17 EAP TTLS Settings Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270660.jpg" hspace="0" id="wp1065977" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The EAP TTLS Settings window contains two sections:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />EAP TTLS Settings</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Validate Server Identity—enables server certificate validation.</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Enable Fast Reconnect—enables session resumption.</div>
<div class="Note4" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.65in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note4" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 1in; margin-right: 0em; margin-top: 0px;" />
<div class="pN4_Note4" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 1in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />The <i class="cEmphasis">Disable when using a Smart Card</i> option is not available on machine authentication EAP method setting windows.</div>
<hr class="Note4" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 1in; margin-right: 0em; margin-top: 0px;" />
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Inner Methods—Specifies the EAP methods.</div>
<div class="Note3" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.4in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pN3_Note3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.75in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />Prior to choosing the EAP MD5 or EAP MSCHAPv2, the option needs to be enabled on the Authentication Policy window (see the "Configuring Authentication Policy" section).</div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you are finished, click <b class="cBold">OK</b>. The Machine or User Authentication (EAP) Method window reappears (see the "Configuring EAP Authentication" section).</div>
<h3 class="p_H_Head3" style="font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring PEAP Options</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The PEAP Settings window enables you to configure PEAP settings (Figure 2-18).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-18 PEAP Setting Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/271001-272000/271010.jpg" hspace="0" id="wp1052058" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
There are two sections on this window:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />PEAP settings</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Validate Server Identity—enables server certificate validation.</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Enable Fast Reconnect—enables session resumption.</div>
<div class="Note4" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.65in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note4" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 1in; margin-right: 0em; margin-top: 0px;" />
<div class="pN4_Note4" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 1in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />The <i class="cEmphasis">Disable when using a Smart Card</i> and the <i class="cEmphasis">Authenticate using a Token and EAP GTC</i> options are not available for machine authentication.</div>
<hr class="Note4" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 1in; margin-right: 0em; margin-top: 0px;" />
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Inner methods based on Credentials Source—enables you to choose to authenticate using a password or a certificate.</div>
<div class="Note3" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.4in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pN3_Note3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.75in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />Prior to choosing EAP MSCHAPv2 or EAP GTC, the option needs to be enabled on the Authentication Policy window (see the <a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1056256" style="color: #3366cc;">"Configuring Authentication Policy" section</a>).</div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you complete your selections and click <b class="cBold">OK</b>, the Machine or User Authentication Method window reappears (see the <a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1056541" style="color: #3366cc;">"Configuring EAP Authentication" section</a>).</div>
<h3 class="p_H_Head3" style="font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring EAP Fast Settings</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The EAP FAST Settings window enables you to configure the EAP Fast settings (<a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1065494" style="color: #3366cc;">Figure 2-19</a>):</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-19 EAP FAST Settings Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270518.jpg" hspace="0" id="wp1065496" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
This window contains three sections:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />EAP Fast Settings</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Validate Server Identity—enables server certificate validation.</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Enable Fast Reconnect—enables session resumption.</div>
<div class="Note4" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.65in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note4" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 1in; margin-right: 0em; margin-top: 0px;" />
<div class="pN4_Note4" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 1in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />The <i class="cEmphasis">Disable when using a Smart Card</i> and the <i class="cEmphasis">Authenticate using a Token and EAP GTC</i> options are not available for machine authentication.</div>
<hr class="Note4" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 1in; margin-right: 0em; margin-top: 0px;" />
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Allow Posture—The term <i class="cEmphasis">posture</i> refers to a collection of attributes that can be use to identify the status of the endpoint device that is seeking access to the network. Some of these attributes relate to the endpoint device type and operating system; other attributes support various security applications that might be present on the endpoint, such as antivirus (AV) scanning software.</div>
<div class="pB3_Body3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px 0.5in;">
Validating or assessing posture applies to a set of rules for the posture data to assess the level of trust that can be placed in that endpoint. The assessment, or <b class="cBold">posture token</b><span style="font-style: italic;">,</span> can be used as one of the conditions for authorizing network access. Posture validation, together with the traditional user authentication, provide a complete security assessment of the endpoint device and the user.</div>
<div class="Note3" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.4in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pN3_Note3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.75in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />Allow Posture is not supported in SSC for Windows XP and Windows 2000 environments. SSC only supports this option in the Windows Vista environment.</div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Inner methods based on Credentials Source—Enables you to authenticate using a password, certificate, token, or EAP GTC.</div>
<div class="Note3" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.4in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pN3_Note3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.75in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />Prior to choosing EAP MSCHAPv2 or EAP GTC, the option needs to be enabled on the Authentication Policy window (see the <a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1056256" style="color: #3366cc;">"Configuring Authentication Policy" section</a>).</div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Use PACs—Specifies the use of PACs for EAP-FAST authentication.</div>
<div class="Note3" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.4in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pN3_Note3" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.75in; margin-right: 0em; text-indent: -0.36in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />Typically, the Use PACs option must be checked because most authentication servers use PACS for EAP FAST. Before unchecking this option, verify that your authentication server does not use PACs for EAP FAST; otherwise, the clients authentication attempts will be unsuccessful.</div>
<hr class="Note3" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.75in; margin-right: 0em; margin-top: 5px;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
On this window, you can manually provide one or more specific PAC files or authentication by clicking <b class="cBold">Add PAC File</b>.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you complete your selections and click <b class="cBold">OK</b>, the Machine or User Authentication (EAP) Method window reappears (see the <a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1056541" style="color: #3366cc;">"Configuring EAP Authentication" section</a>).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring Trusted Server Validation Rules</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When the Validate Server Identity option is configured for the EAP method, the Machine Server Validation window enables you to configure certificate trusted server rules (<a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1052076" style="color: #3366cc;">Figure 2-20</a>).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-20 Certificate Trusted Server Validation Rules Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270514.jpg" hspace="0" id="wp1052078" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
To define server validation rules, follow these steps:</div>
<div class="pSsF_StepsubFirst" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 14px; margin-left: 0.85in; margin-right: 0em; text-indent: -0.27in;">
<b>a. </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="10" />Click <b class="cBold">Add Rule</b>.</div>
<div class="pSsN_StepsubNext" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 14px; margin-left: 0.85in; margin-right: 0em; text-indent: -0.27in;">
<b>b. </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="10" />When the optional settings appear for the <b class="cBold">Certificate Field </b>and the<b class="cBold"> Match </b>columns, click the drop-down arrows and highlight the desired settings.</div>
<div class="pSsN_StepsubNext" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 14px; margin-left: 0.85in; margin-right: 0em; text-indent: -0.27in;">
<b>c. </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="10" />Enter a value in the Value field.</div>
<div class="Note2" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.43in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note2" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.85in; margin-right: 0em; margin-top: 0px;" />
<div class="pN2_Note2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.88in; margin-right: 0em; text-indent: -0.46in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />Click <b class="cBold">Remove</b> to remove the rule.</div>
<hr class="Note2" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.85in; margin-right: 0em; margin-top: 0px;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When finished, click <b class="cBold">Next</b> and<b class="cBold"> </b><a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1052092" style="color: #3366cc;">Figure 2-21</a> appears.</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring Trusted Certificate Authority</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Trusted Certificate Authority window enables you to configure authority options.</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-21 Trusted Certificate Authority Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270515.jpg" hspace="0" id="wp1052094" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you check the Include Root Certificate Authority (CA) Certificate option, you must click <b class="cBold">Add Certificate</b> to add a certificate file.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you are finished, click <b class="cBold">Next</b>. The Machine Credentials window appears (<a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1052103" style="color: #3366cc;">Figure 2-22</a>).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring Machine Credentials</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Machine Credentials window enables you to specify the machine credentials (<a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1052103" style="color: #3366cc;">Figure 2-22</a>).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-22 Machine Credentials Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270516.jpg" hspace="0" id="wp1052105" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />The Protected Identity Pattern option is not available when the EAP-TLS authentication method is chosen.</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
SSC releases 5.0 and later support these placeholder patterns when you specify identities:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />[username]—Specifies the username.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />[domain]—Specifies the domain of the user's PC.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When the [username] and [domain] placeholders are used, one of these conditions applies:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />If a client certificate is used for authentication, the placeholder's value is obtained from the CN field of the client certificate.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />If a client certificate is not used for authentication, the credentials are obtained from the operating system and the [username] placeholder represents the assigned machine name.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
A typical pattern for machine unprotected identity is<span style="font-style: italic;"> host/anonymous.[domain].</span></div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />If password source is configured for this profile, the pattern would be the actual string to send as the username with no placeholders.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
A typical pattern for machine protected identity is <span style="font-style: italic;">host/[username].[domain]</span>.</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />If password source is configured for this profile, the pattern would be the actual string to send as the username.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When finished, click <b class="cBold">Finish</b> and the Networks window reappears (<a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1051973" style="color: #3366cc;">Figure 2-7</a>).</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Configuring User Credentials</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When you have configured a user connection, the User Credentials window enables you to configure the user credentials (<a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1068847" style="color: #3366cc;">Figure 2-23</a>).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-23 User Credentials Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270519.jpg" hspace="0" id="wp1052158" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />The Protected Identity Pattern option is not available when the EAP-TLS authentication method is chosen.</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
SSC releases 5.0 and later support these placeholder patterns when you specify user identities:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />[username]—Specifies the username.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />[domain]—Specifies the domain of the user's PC.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When the [username] and [domain] placeholders are used, these conditions apply:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />If a client certificate is used for authentication, the placeholder's value is obtained from the CN field of the client certificate.</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />If the credential source is the end user, the placeholder's value is obtained from the information the user enters.</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" /> If the credentials are obtained from the operating system, the placeholder's value is obtained from the logon information.</div>
<div class="pB2_Body2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px 0.25in;">
A typical pattern for user unprotected identity is<span style="font-style: italic;"> anonymous@[domain] </span>for tunneled methods or <span style="font-style: italic;">[username]@[domain] </span>for non-tunneled methods.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If a client certificate is not used, the user identity pattern would be the actual string to send as the username (no placeholders). A typical pattern for user protected identity is <span style="font-style: italic;">[username]@[domain]</span>.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If the password source is this profile, the pattern would be the actual string to send as the password (no placeholders).</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
You can specify the user credentials by choosing to use single signon credentials (SSC obtains the credentials from the operating system), prompting the user for credentials, or specifying an actual static password credential to be sent in the deployment file.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When finished, click <b class="cBold">Finish</b> and the window in <a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1051973" style="color: #3366cc;">Figure 2-7</a> reappears with the group and network configurations you have specified. When you click <b class="cBold">Next</b>, the Validation window appears.</div>
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Validating the Configuration File</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
At this point, the management utility validates the networks you have defined against your policy settings. Any policy violations are displayed. You must correct any errors before you save the file. For example, errors might appear in the Validation window (<a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1052181" style="color: #3366cc;">Figure 2-24</a>).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-24 Validation Window with Validation Errors</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/270001-271000/270520.jpg" hspace="0" id="wp1052183" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When there are no validation errors, you can save the deployment file in any location you choose or accept the default location. The processed file (signed with encrypted credentials, PACs, and CA certificates) is stored by default in this file location:</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
<span style="font-style: italic;">C:\Documents and Settings\All Users\Application Data\Cisco\Cisco Secure ServicesClient<br />\newConfigFiles\configuration.xml</span></div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The Cisco SSC client looks in this location for any new destination package. If you have the client installed on your system, you can automatically test and verify the configuration that you just created before deploying it.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Click <b class="cBold">Finish</b> to save the configuration file.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If you need to make changes to the deployment package you just created, you can reopen the management utility, click <b class="cBold">Modify Existing Configuration</b> on the welcome window (<a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1051889" style="color: #3366cc;">Figure 2-1</a>), and choose the configuration file that you just saved.</div>
<h2 class="p_H_Head1" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin: 14px 0em 7px -0.1in;">
Creating the Pre-Configured Client Destination Package File</h2>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The sscManagement Utility can be used to create the client destination packages with network administrator configured profiles.</div>
<div class="Note1B" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -10px -0.25in; text-indent: -0.5em;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<div class="pN1_Note1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 3px 0em 3px 0in; text-indent: -0.3in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="1" />For SSC 5.0, the sscPackageGen utility must be used to generate the destination package file.</div>
<hr class="Cautn1table" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0in; margin-right: 0em; margin-top: 5px; text-align: right;" />
<h3 class="p_H_Head2" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Using the Management Utility GUI</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
To create a pre-configured client package, the administrator clicks the Create Pre-Configured Client Package button on the management utility GUI window (<a href="http://www.cisco.com/en/US/docs/wireless/wlan_adapter/secure_client/5.1.0/administration/guide/C2_SetupSSC.html#wp1052209" style="color: #3366cc;">Figure 2-25</a>).</div>
<div class="pTC_TableCap" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; font-weight: bold; margin: 14px 0em 9px 0.5in; text-indent: -0.5in;">
Figure 2-25 Select Pre-Configured Client Components Window</div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div align="left" style="font-family: arial, helvetica, sans-serif; font-size: 12px;">
<img border="0" src="http://www.cisco.com/en/US/i/200001-300000/270001-280000/271001-272000/271012.jpg" hspace="0" id="wp1052211" style="border: 0px;" vspace="0" /></div>
<div class="pGraphicAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 20px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pAnchor" style="font-family: Arial, Helvetica, sans-serif; font-size: 2px; margin-bottom: 10px; margin-left: 0em; margin-right: 0em;">
</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
The management utility combines the client source package file (Cisco_SSC-SP2K-5.msi) with the processed and signed configuration file (configuration.xml) to produce the final client destination package file (yourCisco_SSC-XP2K-5.msi).</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Accept the default file locations or click <b class="cBold">Browse</b> to locate the files. Click <b class="cBold">Finish</b>.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
You can distribute the pre-configured client destination file (yourCisco_SSC-SP2K-5.msi) to the desired user PCs using your preferred distribution methods.</div>
<h2 class="p_H_Head1" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin: 14px 0em 7px -0.1in;">
Groups in SSC</h2>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
A group, fundamentally, is a collection of configured connections (networks). Every configured connection must belong to some group or be defined under the <span style="font-style: italic;">globalNetworks</span> section in the distribution package.</div>
<div class="Note2" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.43in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note2" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.85in; margin-right: 0em; margin-top: 0px;" />
<div class="pN2_Note2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.88in; margin-right: 0em; text-indent: -0.46in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />End users can add networks only to groups and not to the <span style="font-style: italic;">globalNetworks</span> section (because they typically do not have access to the management tool that would allow them to sign the distribution package).</div>
<hr class="Note2" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.85in; margin-right: 0em; margin-top: 0px;" />
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Classifying connections into groups provides multiple benefits:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Improved user experience when attempting to make a connection. It is important to understand how the client establishes a network connection in order to illustrate this point. The client works through the list of available networks in the order in which they are defined until a successful connection is made.</div>
<div class="pB2_Body2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px 0.25in;">
For example, an enterprise end user who often travels outside the business campus might configure connections for public WiFi networks or hotspots. Without groups, a newly configured home network is added to the end of this list, which could be quite large. The client works through the list from the beginning, including all the public networks, before establishing a connection to the home network. This greatly increases the time to get connected to the last added network.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Easier management of configured connections. In the previous example, an end user might attempt to delete some connections to connect more quickly, but the deleted connections might be needed at a later time. However, if the connection list is divided into groups, each group list would be much smaller. It is easy to switch between the groups to obtain faster connectivity.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
A group may be created by an administrator or an end user. At least one group must be defined in the configuration. If there are multiple groups, one group must be chosen as the <span style="font-style: italic;">active</span> group. The client attempts to make a network connection using the connections defined in the active group. End users can add or delete networks only from the active group. Groups can be added or deleted by clicking on the Configure Groups button on the main window of the client GUI.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
Networks that are defined in the <span style="font-style: italic;">globalNetworks</span> section of the distribution package are available in every group at the top of the list. Because only enterprise administrators can create <span style="font-style: italic;">globalNetworks</span>, administrators can control the enterprise networks that an end user can connect to, even in the presence of user-defined networks. An end user cannot delete administrator-configured networks.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
It is important to note that a typical end user of an enterprise network does not need knowledge of groups in order to use this client. It is the responsibility of the administrator to always specify a default group in the created distribution package. If there is just one group available, the client selects that as the active group. The end user can add or delete their own networks without using groups.</div>
<div class="Note2" style="font-family: arial, helvetica, sans-serif; font-size: 12px; margin: 0px 0em -15px 0.43in;">
<img alt="" src="http://www.cisco.com/en/US/i/templates/note.gif" style="border: 0px;" /></div>
<hr class="Note2" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.85in; margin-right: 0em; margin-top: 0px;" />
<div class="pN2_Note2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-left: 0.88in; margin-right: 0em; text-indent: -0.46in;">
<b>Note </b><img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="6" />A group selection is not maintained during reboots or SSC repairs. When SSC is repaired or restarted, SSC always goes back to the first configured group in the configuration.xml file.</div>
<hr class="Note2" style="background-color: #aaaaaa; border-color: grey; border-style: solid; font-family: arial, helvetica, sans-serif; font-size: 12px; margin-left: 0.85in; margin-right: 0em; margin-top: 0px;" />
<h2 class="p_H_Head1" style="color: #336666; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin: 14px 0em 7px -0.1in;">
VPN Integration</h2>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
SSC 5.1 integrates an automatic VPN connection feature but requires the Cisco IPSec VPN client (4.8 or later) to be installed on the user's PC. SSC minimizes user intervention when establishing a VPN connection. SSC supports these IPSec VPN authentication options:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Password—Specifies a simple password authentication.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Secure Computing SofToken II—Specifies a soft token from Secure Computing SofToken II for authentication. This option requires that Secure Computing SofToken II be installed on the user's PC. SSC uses the Secure Computing SofToken II APIs to get a password that is automatically passed to the VPN daemon as a credential.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Certificate—Specifies certificate authentication and uses the connection to specify the certificate to use. Using this option, SSC does not prompt the end user for anything.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
If the VPN concentrator does not require user authentication, such as in group authentication, SSC does not prompt the user for information.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When authentication is required by the VPN concentrator, SSC prompts the user for VPN logon information:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Soft token authentication—Prompts for username and pin for the soft token account.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Password authentication—Prompts for username and password.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Certificate authentication—No prompt is required.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
When the VPN connection is successful, SSC maintains the user-entered information for possible future VPN connection attempts while the user is logged on to the PC. If the VPN connection fails, SSC re-prompts the user for VPN logon information.</div>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
SSC deletes the user's VPN information when the user logs off, shuts down the PC, or repairs SSC.</div>
<h3 class="p_H_Head3" style="font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Supported VPN Features</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
SSC supports these VPN features:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />A single set of credentials for VPN access through all networks and VPN connections, which is maintained until the user logs off or the service is restarted (repair or reboot).</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Each individual profile has a setting to enable or disable automatic VPN connection and a choice of the VPN connection entry.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />An edit networks option is provided to allow the user to change the automatic VPN connection setting.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />SSC loads the .dll files for IPSec VPN and Secure Computing SofToken. If the .dll files cannot be loaded the VPN feature is disabled.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />SSC provides a new icon to indicate the VPN connection status.</div>
<div class="pBu2_Bullet2" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.55in; margin-right: 0em; text-indent: -0.25in;">
–<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="17" />Right clicking the tray icon provides options to Connect VPN or Disconnect VPN.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Prompt for soft token credentials.</div>
<h3 class="p_H_Head3" style="font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin: 14px 0em 7px -0.1in;">
Unsupported VPN Features</h3>
<div class="pB1_Body1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin: 1px 0em 6px;">
SSC does not support these VPN features:</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Use of static credentials in the schema as soft token credentials.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Use of single sign-on credentials in the schema as soft token credentials.</div>
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Use of hardware tokens.</div>
<a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077414" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051880" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051881" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051882" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051883" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051889" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref35289" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051893" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051894" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051895" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077485" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077486" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077514" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082266" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082267" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082268" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082264" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077455" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1083583" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Creating_a_New_Configuration_File" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1056892" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1056893" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051908" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref99084" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051912" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051913" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051914" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051918" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_Client_Policy" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1056159" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1056214" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051920" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref10810" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051924" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051925" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051926" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051927" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051928" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1058178" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1057628" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051929" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051930" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051931" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1058741" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1058742" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1058743" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1059912" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_Authentication_Policy" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1056256" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref91243" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085827" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051937" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref32950" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051941" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051942" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051947" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_Networks" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1056297" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077551" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077556" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref75438" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051953" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051954" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051962" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051964" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref22738" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051968" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051969" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051970" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051971" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051972" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051973" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref48308" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051977" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1062481" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077933" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077934" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077935" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077936" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077937" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077938" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077939" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077940" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077941" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077942" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077943" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077927" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051984" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref78410" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051988" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051989" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051990" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084583" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084585" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085888" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085883" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_Wired_Network_Settings" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084202" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084703" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084544" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref10983" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084573" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084548" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084820" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084823" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084824" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084825" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084826" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084828" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084814" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084847" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084580" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref43240" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084653" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084581" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084891" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_WiFi_Network_Settings" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1056385" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1063095" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051995" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref84383" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1051999" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052000" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052002" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052003" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052005" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052006" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1071522" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052007" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1063227" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1063229" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1063275" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082481" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082482" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082483" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1064618" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052015" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref81386" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052019" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052020" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052023" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1063755" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1063837" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1063878" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1063919" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1063960" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1064001" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1064002" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1064131" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1064135" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_the_Network_Connection_Type" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084611" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052029" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref79073" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052033" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052034" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084927" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052036" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084939" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052041" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_EAP_Authentication" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1056541" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref99376" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1064456" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084150" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052043" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref55099" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052047" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052048" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084057" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084060" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref38387" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084103" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084062" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1064702" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052050" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1064798" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065652" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065657" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065672" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067320" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052051" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_EAP_TLS" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065705" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref79352" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065746" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067838" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067839" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068716" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065748" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref71066" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065752" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1066729" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068686" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_EAP_TTLS" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067855" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref23138" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067859" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065835" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref10666" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065978" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065848" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065861" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067876" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067870" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067871" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068699" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067883" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067868" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065874" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065887" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_PEAP_Options" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065735" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref85310" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1066939" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052056" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref36335" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052060" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052061" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052062" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067908" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052063" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052064" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068735" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052065" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067923" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052070" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067578" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_EAP_Fast_Settings" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065210" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref14623" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065492" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065494" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref46602" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065498" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065499" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1084032" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067944" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068025" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068026" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068740" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082914" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082916" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082860" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068030" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068052" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1082743" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1083119" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068750" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068748" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_Trusted_Server_Validation_Rules" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1065315" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref57682" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1067177" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052076" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref25149" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052080" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052081" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052082" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052083" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052084" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052085" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085362" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085366" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_Trusted_Certificate_Authority" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085368" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref17724" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068251" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052092" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref48432" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052096" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052097" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052101" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068318" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_Machine_Credentials" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068341" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068381" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052103" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref17880" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052107" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052108" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052110" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085051" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085081" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085082" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052113" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052114" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052115" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052116" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052117" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052118" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1069150" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1069151" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Configuring_User_Credentials" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1069152" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1069147" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068847" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref69288" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052160" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052161" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085070" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1085068" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052164" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052165" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052166" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052167" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052168" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052169" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052170" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052171" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052172" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052173" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052174" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Validating_the_Configuration_File" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1056624" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref44872" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052176" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052181" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref17642" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052185" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052186" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052187" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052188" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052189" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052190" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052191" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Creating_the_Pre-Configured_Client_Destination_Package_File" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052197" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref20589" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052198" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1083598" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Using_the_Management_Utility_GUI" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1068899" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052207" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052209" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref65237" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052213" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052214" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052215" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1069106" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1052219" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Groups_in_SSC" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077594" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref41002" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref36700" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077613" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077614" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077615" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077616" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077617" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077618" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077619" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1086633" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077621" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1077622" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="VPN_Integration" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076306" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wpxref85986" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076307" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076308" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076309" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076310" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076311" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076312" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076313" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076314" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076315" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076316" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076317" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Supported_VPN_Features" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076318" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076319" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076320" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076321" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076322" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076323" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076324" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076325" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076326" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="Unsupported_VPN_Features" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076327" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076328" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076329" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076330" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076331" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp1076332" style="font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><br />
<div class="pBu1_Bullet1" style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; margin-bottom: 7px; margin-left: 0.25in; margin-right: 0em; text-indent: -0.25in;">
•<img alt="" border="0" src="http://www.cisco.com/en/US/i/templates/blank.gif" height="2" style="border: 0px;" width="19" />Changing the password for the soft tokens from Secure Computing SofToken II.</div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-3250729439716168732014-01-24T23:13:00.000-08:002014-01-24T23:25:28.065-08:00Windows Server 2008: Top 10 in Windows Server 2008 R2<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<span style="font-family: Calibri; font-size: x-small;"><strong><br /></strong></span></div>
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<span style="font-family: Calibri; font-size: x-small;"><strong><br /></strong></span></div>
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<span style="font-family: Calibri; font-size: x-small;"><strong><br /></strong></span></div>
<b>#10 Migration Tools</b>: Starting off my Top 10 countdown are the migration tools available for Windows 2008 R2. Okay, so who gets excited about migration tools? Considering Windows 2008 R2 comes as a 64-bit only operating system and there’s no inplace upgrade path from 32-bit to 64-bit, the release of Windows 2008 R2 requires tools to help organizations “migrate” server to server than just shove in a CD and do an inplace upgrade. Because of that, Microsoft made some GREAT tools (and for any org than plans to migrate from physical Windows 2003 hardware to virtualized Windows 2008 R2 guest images, this is the PERFECT way to go from physical to virtual!!!) Go to <a href="http://www.microsoft.com/migration">http://www.microsoft.com/migration</a> for a link to the various migration tools. There are tools that help you migrate fileservers (including files and ACLs), tools that help you migrate RRAS servers to 2008 R2, print server migration tools shifting your printers and print queues to 2008 R2. My favorite migration tool is the DHCP migration tool that migrates not only scopes, but also LEASES from old Windows DHCP servers to Windows 2008 R2 servers! (do you realize what that means? You can migrate a DHCP server in the middle of a day, carry over DHCP leases without having to expire out leases from the old server to get DHCP activated on a new server! (sorry, we were really excited when this tool came out, and to this day, I still get excited about sharing this!!!))<br />
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<br /></div>
<br />
<br />
<b>#9 Active Directory 2008 R2</b>: Number 9 on my list are updates to Active Directory. Gotta start off by saying that no one really “has” to migrate to AD/2008 or AD/2008 R2 for any of the current products, so things like Exchange 2010, SharePoint 2010, etc do NOT require AD/2008 (or 2008 R2). We have a LOT of customers who are happily running AD/2003 in Native Mode with all of the latest and greatest products running. However, for those who want enhancements in AD, the biggies in 2008 R2 are the Recycle Bin (effectively allows you to simply recover deleted objects in AD, so if you fat finger delete a user object, accidentally overwrite an AD group, simply go to the recycle bin and undelete stuff…). Also in AD/2008 R2 is Offline Domain Join which allows you to pre-stage create a computer account in AD, dump an XML file and then when you install Windows 7 on the computer you can run a DJoin command on the Windows 7 and “join” the domain on that Win7 computer without the Win7 computer even being attached to the network! That way you can build systems in the lab and “join them” to AD without actually / physically connecting the computers to AD. Okay, another geek moment, but this is great when we’re prestaging systems to roll out in another site or domain and we don’t even need to be physically at or physically connected to that domain… Oh, and something that I’m still excited about that’s in AD/2008 is Fine Grain Password Policies. In AD/2003 you could only have 1 password policy per domain (upper case, complex password, change every 30-days, etc had to be the SAME for everyone in the domain). With Fine Grain Passwords added to AD/2008 (and carried over to AD/2008 R2) you can now set password policies “per group” so you can have folks in HR or Accounting change their passwords every 20-days to please the regulators, and field support and sales people can change their passwords say ever 60-days or something. All done by groups, really slick!!!<br />
<br />
<br />
<br />
<b>#8 Remote Server Manager</b>: Alright, #8 on my Top 10 countdown is the ability to remotely manage other Windows 2008 R2 servers using the Server Manager tool. With Windows 2008 you had this really great tool “Server Manager” that allowed you to Add Roles, Features, Administer the servers, etc from a single console, however it was ONLY for the system you were on, so you had to constantly Remote Desktop into other servers. Now with Windows 2008 R2 servers you can remotely access Server Manager on other systems. So just sit at one console and reach into other servers in your network to do day to day administrative tasks!<br />
<br />
<br />
<br />
<b>#7 Direct Access</b>: Okay, DirectAccess, probably gets my award for “most innovative technology” in Windows 7 client and Windows 2008 R2 server and would have been closer to #1 in my countdown if it weren’t so complicated to implement. So DirectAccess is a technology that effectively does away with VPNs. Just like RPC/HTTPS (Outlook Anywhere) eliminated the need to VPN from Outlook to Exchange for your email a few years ago, DirectAccess does away with VPNs by giving you access to “everything else” on your network like your F> and K> drive shares, http:// SharePoint shares, accounting software, CRM software, etc. Basically “anything” you normally have access to from a VPN, you can now access “natively” from a Windows 7 client. DirectAccess leverages IPSec policies and Certificates to “automatically” tunnel a Windows 7 client into the network. Effectively a client that has DirectAccess configured can simply turn on their laptop or desktop computer, get an Internet connection, and over encrypted IPSec re-establish normal network connections, but “outside” the network. AND, your internal network doesn’t have all be Windows 2008 R2, just a single server in the DMZ needs to be running Windows 2008 R2 as a “proxy” that effectively encrypts communications between the client and this one 2008 R2 server. Everything else “inside” your network can be just plain old TCP networking like Windows 2003, SharePoint, Linux, etc… Okay, so here’s the catch, the client systems need to be Windows 7 (not a biggie, a lot of orgs have already started their migration to Win7 clients). You need to enable IPv6 on the 2008 R2 proxy/gateway server and IPv6 on all Win7 clients (also not a biggie because it’s on by default since Win2008 and Vista, although you need to now understand how IPv6 works to do the proper addressing, so that’s a learning experience to figure out). You need to be running Microsoft Certification Authority (CA), which for many orgs is also not a big deal as they’ve been running Microsoft’s CA for a while, however if you haven’t setup Microsoft’s CA, kind of familiar with Auto-enrollment of certificates to automatically push out certs using AD, this is something new for you to learn. If you’re already doing Auto-enrollment, you’re set! And then IPSec and split DNS, this is the technical pieces that everyone gets wrong and Microsoft’s whitepaper guide on DA is not very helpful. We took time writing this portion of the chapter of my Windows 2008 R2 book as once you get this working, then DA actually works! So, a REALLY slick technology once you get it working. I’d recommend any hardcore techie to throw this in your lab to fiddle with, it’s a great technology to understand and ultimately implement!<br />
<br />
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<span style="font-size: x-small;"><span style="font-family: Calibri;"><img alt="" src="http://www.networkworld.com/community/files/imce/img_blogs/2010/morimoto-DirectAccess.jpg" height="198" style="border: none; display: block;" width="560" /></span></span></div>
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<br /></div>
<b><br /></b>
<b>#6 SConfig in ServerCore</b>: So for #6 on my countdown is SConfig.exe in ServerCore. So how many of you actually installed Microsoft’s GUI-less ServerCore when it came out in Windows 2008? Who enjoyed the “net user administrator…”, “netdom rename computer…”, “netdom join..” commands to even get a ServerCore system assigned an IP address and joined to a domain before you could even do anything? It was a pain and the reason that a lot of people gave up on ServerCore. So with Windows 2008 R2, Microsoft came up with a utility called “Sconfig.exe” that you run after you install ServerCore. Now from the DOS prompt thing, you just type Sconfig and a “menu” (text based) shows up on screen. You walk the menu to name your server, give it an IP address, domain a domain, and most importantly set it so you can run Remote Server Manager (see #8 on my list) to remotely manage the server. So you can now have a simple menu to get the basics going, and then remote into the system and use the Server Manager GUI to do the rest! Where I can count the number of ServerCore systems we installed in Windows 2008 on one hand, I can now say we’re deploying a couple dozen ServerCore systems a week these days because of these new tools built-in to Windows 2008 R2!<br />
<br />
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<span style="font-size: x-small;"><span style="font-family: Calibri;"><img alt="" src="http://www.networkworld.com/community/files/imce/img_blogs/2010/morimoto-Sconfig.jpg" height="420" style="border: none; display: block;" width="560" /></span></span></div>
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<br /></div>
<b><br /></b>
<b><br /></b>
<b>#5 Improvements in Group Policy Management</b>: Okay, most of this is Windows 2008 stuff on the Group Policies, but never the less, what Microsoft has done with Group Policies in Windows 2008 (and 2008 R2) has been awesome, so it landed in the #5 spot on my Top 10! So the minute you launch the Group Policy Management Console (GPMC) you’ll notice not just the Computer Configuration container and the User Configuration container, but under the Computer and User containers are “Policies” and “Preferences”. The Policies container is the same container that has been in AD all along where you have containers for Account Policies, Windows Settings, Administrative Tools, Security, etc. But under the “Preferences” is a whole new set of “views” to policies. For some 1000+ policies, instead of more text based “descriptions” of stuff, there’s a GUI for you to “see” a user Control Panel type stuff where you can click through the GUI to “set” settings. When you set the settings and click OK, you’re effectively creating the group policy. So for things like Internet Explorer settings, you just click the checkbox or option on screen, and those settings are set. Or you can do drive mappings through a GUI, or set display settings through a GUI. This whole Preferences area REALLY makes setting policies easier. It’s just like you are in Control Panel on your workstation, but instead what you choose are set for the “policy” for the managed systems…<br />
<br />
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<span style="font-family: Calibri; font-size: x-small;"><img alt="" src="http://www.networkworld.com/community/files/imce/img_blogs/2010/morimoto-GPgui.jpg" height="495" style="border: none; display: block;" width="410" /> </span></div>
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<span style="font-size: x-small;"><span style="font-family: Calibri;"><strong></strong></span></span></div>
<br />
<br />
<b>#4 Clustering of Print Servers and DHCP</b>: We’re at #4 on my countdown and it’s about clustering. So with Windows 2008 R2, you can cluster everything like you used to (fileservers, app servers, etc) but they’ve added a whole bunch of other things to cluster. My 2 favorite new clustered features are clustering print servers and DHCP servers… So how many times have you had a print server printer service stop and all of the print queues on the system go offline. A simple restart of the service gets you going again, but now you have hundreds of print jobs backed up… I would have never taken 2 hardware systems and cluster print services, that was overkill of hardware, but with virtualization, heck yeah, put a print server as a guest session one physical host, and cluster it with a guest session on another physical host. I now have full redundancy on a print service with effectively zero downtime! And the other cluster service that has been really slick is clustering DHCP. Do you know for the past 20 years we’ve been doing DHCP “split scopes” the whole 80/20 or 60/40 split scope across servers, which really wasn’t fault tolerance, it was moreso just minimizing our risk that when a DHCP server went offline that we were still able to limp along. Now with virtual guest sessions, I can CLUSTER the DHCP servers with 100% of my IP addresses. I have two servers issuing IP addresses in perfect unison. If I lose one server, I have another DHCP server continuing exactly where I left off. I can failover and patch/update a server back and forth. This completely changes (and drastically improves) something as simple as DHCP…<br />
<br />
<br />
<br />
<b>#3 Remote Desktop Services:</b> Number 3 on my list is Remote Desktop Services, or RDS, which used to be called Terminal Services. Every administrator has used Terminal Services / Remote Desktop to reach into a server to remotely administer / manage a server, and a number of orgs have used Terminal Services and Citrix for our client systems. With Windows 2008 R2, we’ve really found orgs can get rid of Citrix and just use the straight features out of 2008 R2 because why did people buy Citrix? It was because Citrix provided Single Sign-on (so you didn’t have to enter in your password to logon to Citrix), better remote printing offered by Citrix, high availability offered in Citrix, and the ability to just drop an application icon on a user’s desktop and give remote access to an “application” and not have to do the full Remote Desktop with the 2nd start button and everything. With Windows 2008 R2 (actually with Windows 2008) ALL of these features are native to Remote Desktop Services out of the box. So as long as your client system is running XP SP3 or higher, you get the single sign-on so you never have to type a logon/password to get access to a RDS session. You can run RDS “RemoteApp” to simply launch an application right from your client system. Also added in Windows 2008 R2 is Virtual Desktop Infrastructure (VDI) which provides you the ability to give personal desktop sessions (like Hyper-V guest sessions) to individual users for a full desktop experience. All of this is something you used to have to go to 2 or 3 other vendors for these features (Citrix and VMware) that are now included out of the box in Windows 2008 R2. Check these features out!<br />
<br />
<br />
<br />
<b>#2 Hyper-V R2</b>: Alright, down to #2 and Hyper-V server virtualization hits my #2 spot… What can I say, just a couple years ago 100% of my server virtualization business was VMware, they dominated the whole virtualization world and in just over a year, Microsoft released Hyper-V with Windows 2008 and then updated Hyper-V with Windows 2008 R2 to include not only what VMware has in their VI3 and their newly released vSphere 4, but Microsoft now gives it all away out of the box in Windows 2008 R2. If money matters to you, what organizations used to buy ESX, V/Motion, and now VSphere for, you get it all in Windows 2008 R2. In side by side comparisons, server virtualization is server virtualization whether it’s VMware or Hyper-V R2, you can run guest sessions (lots of them on a 32gb 8core server (12-15 easily)), you can take snapshots so before you patch or update a guest session, just take a snapshot and if the update screws up your application, just rollback to the snapshot. If you have a problem with any Microsoft product being virtualized (Exchange 2010, SharePoint 2007, System Center, etc) it’s the same company / same support call to get Exchange support as it is Hyper-V virtualization support. And with Hyper-V R2, you can now “cluster” Hyper-V host servers and move guest sessions across Hyper-V hosts, AND not only move them around for disaster recovery, you can do them LIVE in the middle of the day without dropping a client session state in what Microsoft called “Live Migration” (and VMware calls V/Motion that you pay lots of extra $$ for). You just right click a guest session and “Live Migrate” the guest session to another server in the middle of the day to evacuate a problemsome host, or maybe do load balancing of hosts, or as part of your process to move images so you can patch and update a host. End of the day, VMware is far from 100% of our virtualization business and actually in just a couple years is now at par with Microsoft and now Microsoft Hyper-V makes up 50% of our virtualization business…<br />
<br />
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<span style="font-size: x-small;"><span style="font-family: Calibri;"><img alt="" src="http://www.networkworld.com/community/files/imce/img_blogs/2010/morimoto-LiveMigrate.jpg" height="413" style="border: none; display: block;" width="560" /></span></span></div>
<div class="MsoNormal" style="background-color: white; color: #333333; font-family: Arial, Helvetica, sans-serif; font-size: 15px; line-height: 20px; margin: 0in 0in 0pt; padding: 0px;">
<br /></div>
<b><br /></b>
<b><br /></b>
<b>#1 Stability and Reliability</b>: Okay, not a specific feature or function, but my #1 on Windows 2008 R2 is that it just plain works! This is the first operating system we’ve deployed well over a year in beta in full blown production environments without issues, and our experience since the product RTM’d has been just as solid. No issues, no surprises, this one has been a keeper and because of that, Stability and Reliability of Windows Server 2008 R2 and Windows 7 puts this in my #1 spot!Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-48955071478702689442013-12-31T13:22:00.000-08:002019-04-29T10:26:54.752-07:00My Certifications<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgopDj2DbmZiVbi5gsdITD_AvGBDVO2qchKBl1fHU4socgHUPNcpskNoojYmtUjyNMYEqjJvBrpu9Se8Wbml2DCRlUdxL4OrQ87kVcKX-z4ghQszDrxdeILVz8fZsvrpO9dSy58vBktAvk3/s1600/CCNP+R%2526S.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="714" data-original-width="921" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgopDj2DbmZiVbi5gsdITD_AvGBDVO2qchKBl1fHU4socgHUPNcpskNoojYmtUjyNMYEqjJvBrpu9Se8Wbml2DCRlUdxL4OrQ87kVcKX-z4ghQszDrxdeILVz8fZsvrpO9dSy58vBktAvk3/s320/CCNP+R%2526S.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwkJvd7TkIW1IDh_e1MLL7d5PeTgC5Ub8wigFswl0YHCD2zWHRoWT_mtGPGN3bIbpTHfTGWrLPkCZOYe59lCB5tWa93e45pYxs8wK5vEKAXSiY0eFTv2sc4CAdTdg7_BgPyHhpxUp7vCzN/s1600/CCNP+Sec.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="715" data-original-width="919" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwkJvd7TkIW1IDh_e1MLL7d5PeTgC5Ub8wigFswl0YHCD2zWHRoWT_mtGPGN3bIbpTHfTGWrLPkCZOYe59lCB5tWa93e45pYxs8wK5vEKAXSiY0eFTv2sc4CAdTdg7_BgPyHhpxUp7vCzN/s320/CCNP+Sec.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsEnDJYLJJtm8pUS_sqBW1Xq1-kelWX3nW2przzz5j9C6FDGOhWf5rWSY90S-eRksNLou-Qhyphenhyphen0iKCLog9P5x_ilL2ccRvVFxoCd-MW0DakeiWBtuNY_jvus_A5vIkh6lzjtqOL3PM4-lZj/s1600/CCDP.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="711" data-original-width="918" height="247" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsEnDJYLJJtm8pUS_sqBW1Xq1-kelWX3nW2przzz5j9C6FDGOhWf5rWSY90S-eRksNLou-Qhyphenhyphen0iKCLog9P5x_ilL2ccRvVFxoCd-MW0DakeiWBtuNY_jvus_A5vIkh6lzjtqOL3PM4-lZj/s320/CCDP.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgU23nQiA6NZReOoFbCJEKGtMOkigefajyPTKsHyHql3fQf84V0bKkYE4C_GtShKWRst9n8LZDQgo9zebXcShG1Phd4yd5JBWEIRSvEx0wYMNCDUKt4hxXmRVUwXsCp0MgRjVXtwlxEll2h/s1600/CCDA.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="715" data-original-width="921" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgU23nQiA6NZReOoFbCJEKGtMOkigefajyPTKsHyHql3fQf84V0bKkYE4C_GtShKWRst9n8LZDQgo9zebXcShG1Phd4yd5JBWEIRSvEx0wYMNCDUKt4hxXmRVUwXsCp0MgRjVXtwlxEll2h/s320/CCDA.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Q2-8d5vTEUt1waRLMP99VOfAeBrU_ZnQfWUgAkjtCN1wuDThLZzPQqxyYYh4KUSNzUoVoqGC4kwW7THofH6D3M4SLGAl1CXSFah5Tj61Op7R7n_BkmBoyoOcVdRavNp-ohzv3oDY2yrn/s1600/CCNA+Sec.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="713" data-original-width="921" height="247" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Q2-8d5vTEUt1waRLMP99VOfAeBrU_ZnQfWUgAkjtCN1wuDThLZzPQqxyYYh4KUSNzUoVoqGC4kwW7THofH6D3M4SLGAl1CXSFah5Tj61Op7R7n_BkmBoyoOcVdRavNp-ohzv3oDY2yrn/s320/CCNA+Sec.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpHKtA_YRUWQ5hZ5Q8NiVXUfDMl1hcOvh5u1HkpNhpWn5kWFJQB2RFFd6RpwXnbY_QzDKl4pUs_wjMCWrhHaKYKLF-X_KrLUMtrUdNjEVzTi3s9UWCmSAfOauJaZYdr7kXw0QkGEQJtOAU/s1600/CCNA+R%2526S.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="716" data-original-width="921" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpHKtA_YRUWQ5hZ5Q8NiVXUfDMl1hcOvh5u1HkpNhpWn5kWFJQB2RFFd6RpwXnbY_QzDKl4pUs_wjMCWrhHaKYKLF-X_KrLUMtrUdNjEVzTi3s9UWCmSAfOauJaZYdr7kXw0QkGEQJtOAU/s320/CCNA+R%2526S.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnaFAhqB6tsXqG0AovKkNO4V2zh_WTeFavHzmnsL7qjq4_cLDqZx6Qu0DGlHbXyvAa1FgadaLy5h_6wj0B2PKiyqJFqFfpHiag6wJvsxldHpZWPmt8Rn5d-jTABO8cdlEjRgOJugco6l0L/s1600/CCENT.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="712" data-original-width="919" height="247" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnaFAhqB6tsXqG0AovKkNO4V2zh_WTeFavHzmnsL7qjq4_cLDqZx6Qu0DGlHbXyvAa1FgadaLy5h_6wj0B2PKiyqJFqFfpHiag6wJvsxldHpZWPmt8Rn5d-jTABO8cdlEjRgOJugco6l0L/s320/CCENT.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgR6hM_wJAK6SdRaU7ZjXD_CJ5OPqgTnq3C9euOp72gRfC9yWroxZBa-TGeHXe0J4PGXjqZ8YCMVWo7g-eEKuSTZnbu9_nzla8GYNMV_Rj7jx1PrrgHTP9GRsJ7hn3O6v6C3o0NkVcWqZyD/s1600/Asa+Specialist+certificate.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgR6hM_wJAK6SdRaU7ZjXD_CJ5OPqgTnq3C9euOp72gRfC9yWroxZBa-TGeHXe0J4PGXjqZ8YCMVWo7g-eEKuSTZnbu9_nzla8GYNMV_Rj7jx1PrrgHTP9GRsJ7hn3O6v6C3o0NkVcWqZyD/s1600/Asa+Specialist+certificate.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhH2LdTz2C6ef4rllZqil_VtSZUxr1-Uh9Wf8tb5dWB9EhOBhn9wOTGRIjvXWUPxGEOcfbu2oykgeWzEbqQd_Jg4R7xPKxEYjxYECmkUTGkGKhCYpKhl1NTZipGHPjUOgLOo-g8wpLZPfuF/s1600/CCNP+Security+certificate.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhH2LdTz2C6ef4rllZqil_VtSZUxr1-Uh9Wf8tb5dWB9EhOBhn9wOTGRIjvXWUPxGEOcfbu2oykgeWzEbqQd_Jg4R7xPKxEYjxYECmkUTGkGKhCYpKhl1NTZipGHPjUOgLOo-g8wpLZPfuF/s1600/CCNP+Security+certificate.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjo7J9dtIIrvtnDUFHKg5rSxXBYbOuDrD-BhxSWOCsetoFq0x_Lkj9pJQJxR-y_CXBYB94rXrExPpdLjD4Su0dRvkJEhdUck-ZBcUXYwmqWuzBPP1KpIzwCFjgUcYO3QSVwQtfwVhHyzi1P/s1600/Firewall+Security_certificate.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjo7J9dtIIrvtnDUFHKg5rSxXBYbOuDrD-BhxSWOCsetoFq0x_Lkj9pJQJxR-y_CXBYB94rXrExPpdLjD4Su0dRvkJEhdUck-ZBcUXYwmqWuzBPP1KpIzwCFjgUcYO3QSVwQtfwVhHyzi1P/s1600/Firewall+Security_certificate.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj98ia3KmoQuwhZUu9yI29gyNIuNSFPTOnfjl85e7DUICbfQQqIr57Qtvfi9ZIJiUMdXRh2hV0qFgzTuxeIyhu9RUxP07u-308auFiNPtViKzNK1fpORSFGMs_U_HUgFaKpoCQhspzjNRQG/s1600/IPS+Specialist+certificate.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj98ia3KmoQuwhZUu9yI29gyNIuNSFPTOnfjl85e7DUICbfQQqIr57Qtvfi9ZIJiUMdXRh2hV0qFgzTuxeIyhu9RUxP07u-308auFiNPtViKzNK1fpORSFGMs_U_HUgFaKpoCQhspzjNRQG/s1600/IPS+Specialist+certificate.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilMGnmCO70W13J_ehaZzGubfYoJXEorFxEjOHyaTAjTuq4eKaICvSBfrP3OpumQNVkszjIMlfZ0SesKdS99mZ7z1X9Iu99unNdaRxY863f4AxhfTbHEP-gJOGVc9B-NpTwpKWOUJ2buhKD/s1600/NSA-CNSS+Recognition.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilMGnmCO70W13J_ehaZzGubfYoJXEorFxEjOHyaTAjTuq4eKaICvSBfrP3OpumQNVkszjIMlfZ0SesKdS99mZ7z1X9Iu99unNdaRxY863f4AxhfTbHEP-gJOGVc9B-NpTwpKWOUJ2buhKD/s1600/NSA-CNSS+Recognition.jpg" width="270" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2fbT1PMfvXT6x2A7MO-0Q-Ddim6VRA2z1rhSm8KZgavyTzQ0c7mg4ossLrKnnMhtZDlE2qRMB62vVur1LILQc0_Tb384tnGdHnMVWD0ClO-smam2KRz-1QNZrcBHTKIutrzB8NPPaSAo6/s1600/VPN+Security+Specialist+certificate.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2fbT1PMfvXT6x2A7MO-0Q-Ddim6VRA2z1rhSm8KZgavyTzQ0c7mg4ossLrKnnMhtZDlE2qRMB62vVur1LILQc0_Tb384tnGdHnMVWD0ClO-smam2KRz-1QNZrcBHTKIutrzB8NPPaSAo6/s1600/VPN+Security+Specialist+certificate.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhskLbiRaCZ_dLm7rRV8KM7hnEroJAsPqe-7qfIrkYbLTIxWXwiijkuDqF4NtOk3aA2ejBc2TTZp_Q8xVUB7ROfKvw9fodUwWNGkxxe2HG8-B8CTT4WvgVD0OjyT3kd83OpX4TPsUqWKjTd/s1600/Cisco+IOS+Security+Specialist.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhskLbiRaCZ_dLm7rRV8KM7hnEroJAsPqe-7qfIrkYbLTIxWXwiijkuDqF4NtOk3aA2ejBc2TTZp_Q8xVUB7ROfKvw9fodUwWNGkxxe2HG8-B8CTT4WvgVD0OjyT3kd83OpX4TPsUqWKjTd/s1600/Cisco+IOS+Security+Specialist.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrDGGvs9MnhxMG2_EUn7ddmDXH0r_8IANdaBO10T8ZpXh1HGVYncg9f-AOBrUuCESCp7Uij6rREXVduYkMVBis_n-zDudNkva2pugfaYQCoqXzLxksyGdL1b29LPxrgr1pXP-uNpw8rpHb/s1600/ccna-voice.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="247" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrDGGvs9MnhxMG2_EUn7ddmDXH0r_8IANdaBO10T8ZpXh1HGVYncg9f-AOBrUuCESCp7Uij6rREXVduYkMVBis_n-zDudNkva2pugfaYQCoqXzLxksyGdL1b29LPxrgr1pXP-uNpw8rpHb/s1600/ccna-voice.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg77eWCl4XJe2FTqySASx7mMv8Vabozn0tMWAUBZ0s3BMLEu0Kyms1YcOXPBXl4eGpj0lEj87N8MSU-F6P6eMdw-yk1sNupqNfhEC9obPeWjPyUQDCJSKmvvhQ_RNc7j1-f4_hXGcjz_LG0/s1600/cnss.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg77eWCl4XJe2FTqySASx7mMv8Vabozn0tMWAUBZ0s3BMLEu0Kyms1YcOXPBXl4eGpj0lEj87N8MSU-F6P6eMdw-yk1sNupqNfhEC9obPeWjPyUQDCJSKmvvhQ_RNc7j1-f4_hXGcjz_LG0/s1600/cnss.jpg" width="307" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijGuUKub8ShlMJB7IyOh28RJa1JD0S4MD_1E6NsAv_eszEiH824fGl5vZtnQmwNiim4d5gYoNe_IQzyKKboeCcCyg9y1WWeGIAt3EHz39gr6wuEo_7h1fLH85g31fUmYSG0IWsP9Q0MC4E/s1600/mcsd.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="245" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijGuUKub8ShlMJB7IyOh28RJa1JD0S4MD_1E6NsAv_eszEiH824fGl5vZtnQmwNiim4d5gYoNe_IQzyKKboeCcCyg9y1WWeGIAt3EHz39gr6wuEo_7h1fLH85g31fUmYSG0IWsP9Q0MC4E/s1600/mcsd.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglR6vpETRPbE7TPGS7bntRvZIocqnYIQAjnJ3K0OOM7tVTzqQRnPa7JqlfL7SMdI62jvO3S29otvaPXLhd8-A_JZAbquWlGnZOgMRwr5t7KMkIrBIvLWB4657HX2K72ySPiHchvRLQI8Mg/s1600/mcts.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="239" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglR6vpETRPbE7TPGS7bntRvZIocqnYIQAjnJ3K0OOM7tVTzqQRnPa7JqlfL7SMdI62jvO3S29otvaPXLhd8-A_JZAbquWlGnZOgMRwr5t7KMkIrBIvLWB4657HX2K72ySPiHchvRLQI8Mg/s1600/mcts.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifUE1sRPqJQzH2e7X3G73U1htZmt6KDLdjP1sE2ajlSxA5y8xetjDMWaC-L0tjP95FO-M5MHu0p9JE4rpe4BUylVL-4pPj3r-ygAu5gI6TvKZKw3itVNaHYloz0KBH7x3EB0dYKzMvn-Ge/s1600/CompTia+A%252Bce+Certificate+exp2021.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="591" data-original-width="761" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifUE1sRPqJQzH2e7X3G73U1htZmt6KDLdjP1sE2ajlSxA5y8xetjDMWaC-L0tjP95FO-M5MHu0p9JE4rpe4BUylVL-4pPj3r-ygAu5gI6TvKZKw3itVNaHYloz0KBH7x3EB0dYKzMvn-Ge/s320/CompTia+A%252Bce+Certificate+exp2021.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeTW5mTN5C2Feln_T8GWp3T8-8TYRpgyonanFS0Ag9LknUQdZcccw_DbIUWeaKnCtJAyJ0ley2Nk1S9pcfKD82VWsGw4nfVjTqYRNAt9r3WWgn3jFSMrNK-ZWgrkkKoMH0ljJDnqSvAouQ/s1600/a+.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="208" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeTW5mTN5C2Feln_T8GWp3T8-8TYRpgyonanFS0Ag9LknUQdZcccw_DbIUWeaKnCtJAyJ0ley2Nk1S9pcfKD82VWsGw4nfVjTqYRNAt9r3WWgn3jFSMrNK-ZWgrkkKoMH0ljJDnqSvAouQ/s1600/a+.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAh8sGoB7G488OeTGIMLeQl_3hZD8FSWW6JovoHTGn6_aZHRfVZXZYgu0XJwtA31zFQiSUdVdABVdqmYYuLJUZ4qKyrNPbWeo_UX9WKbk18BZcS92dwgfMQcECDAJM4ARGxo287AKmie_l/s1600/A+ce.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="206" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAh8sGoB7G488OeTGIMLeQl_3hZD8FSWW6JovoHTGn6_aZHRfVZXZYgu0XJwtA31zFQiSUdVdABVdqmYYuLJUZ4qKyrNPbWeo_UX9WKbk18BZcS92dwgfMQcECDAJM4ARGxo287AKmie_l/s1600/A+ce.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSVovGDkAIluywGNufbCAYtQlRpvrvpceAZHM9aBJms8hoHRabLrcNQewYjl8EtQ57ZGDurCqPOypic9pb6CAjAxA-CZs0oe4YUro3AT7mmhzZzjZpSbUnEZCWClK0pNdSFfqIg13d1Ih8/s1600/n+.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="208" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSVovGDkAIluywGNufbCAYtQlRpvrvpceAZHM9aBJms8hoHRabLrcNQewYjl8EtQ57ZGDurCqPOypic9pb6CAjAxA-CZs0oe4YUro3AT7mmhzZzjZpSbUnEZCWClK0pNdSFfqIg13d1Ih8/s1600/n+.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPGIFkJpUbOVdJhyP8ZRNuarJx8gqPelWRIdAOtn-fWuT7-fKzlGjYDZx_BI3mTGBqsodj23QNPzl7fsqx05XZohY7CgisGjk3S8H4Qi-VUREWD4NnPCu5rkQNLP1V9F4uo4KF41bPbWIb/s1600/n+ce.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="208" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPGIFkJpUbOVdJhyP8ZRNuarJx8gqPelWRIdAOtn-fWuT7-fKzlGjYDZx_BI3mTGBqsodj23QNPzl7fsqx05XZohY7CgisGjk3S8H4Qi-VUREWD4NnPCu5rkQNLP1V9F4uo4KF41bPbWIb/s1600/n+ce.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmwOGh6C8nubnHVYxsePL63cuq-AefHGzIrRBDncJTJkAnc-SXs57RPDs17grHfSQ3XyMGCfGZW5-UmUbNeUI1qvIknuJGlfaNPfpdV1FdsxPXYgoP8GUu6gKyS0T9iz41piETvRWpBVKz/s1600/Network%252BCertified+CE+exp2021.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="591" data-original-width="761" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmwOGh6C8nubnHVYxsePL63cuq-AefHGzIrRBDncJTJkAnc-SXs57RPDs17grHfSQ3XyMGCfGZW5-UmUbNeUI1qvIknuJGlfaNPfpdV1FdsxPXYgoP8GUu6gKyS0T9iz41piETvRWpBVKz/s320/Network%252BCertified+CE+exp2021.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhd-edQJQbsV181VItLu7thBe-8jhzSULPnhVAffGbxpHJn7fA7PtXy5B0EY_ll85S4_Z4jqtl7r3OU7WH5G6g073GqGmUqy9v5fMbUuR6SAYWNGKCaZXtfYT8yE4dK2Z8HUoAdryNHgf1p/s1600/Security%252Bce+Certificate+exp2021.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="592" data-original-width="762" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhd-edQJQbsV181VItLu7thBe-8jhzSULPnhVAffGbxpHJn7fA7PtXy5B0EY_ll85S4_Z4jqtl7r3OU7WH5G6g073GqGmUqy9v5fMbUuR6SAYWNGKCaZXtfYT8yE4dK2Z8HUoAdryNHgf1p/s320/Security%252Bce+Certificate+exp2021.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRPpuM9TdGknaMtLs5c6KaeVH7bBUN8s7XRjnLcuMfQHdqnss2BKxpLSfeJNeqk7UzMSyWpbMkNf3UwM5OdsNh2InbCqSiVmsbp74Kcf6O6ohPHzAZSuaCQlzgH6bxDAZvz8QVuqNCY67a/s1600/s+ce.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="207" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRPpuM9TdGknaMtLs5c6KaeVH7bBUN8s7XRjnLcuMfQHdqnss2BKxpLSfeJNeqk7UzMSyWpbMkNf3UwM5OdsNh2InbCqSiVmsbp74Kcf6O6ohPHzAZSuaCQlzgH6bxDAZvz8QVuqNCY67a/s1600/s+ce.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcSaH67NUkPnsKiDXufOjav6e391wVsJJeeXGx2_MVys5Mn2gyrXrN9EYsWOS_57rivYEaGNWDB8HspxpAQVE1jUQPlkygPo2hb-B9Ex_qJXs_a-uLKjprtUdEM40lcbEN5wmQND3oEtPN/s1600/CompTIA+IT+Operations+Specialist+%25E2%2580%2593+CIOS+2017.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="592" data-original-width="761" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcSaH67NUkPnsKiDXufOjav6e391wVsJJeeXGx2_MVys5Mn2gyrXrN9EYsWOS_57rivYEaGNWDB8HspxpAQVE1jUQPlkygPo2hb-B9Ex_qJXs_a-uLKjprtUdEM40lcbEN5wmQND3oEtPN/s320/CompTIA+IT+Operations+Specialist+%25E2%2580%2593+CIOS+2017.jpg" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxc14JFk9tdJrmVkPwvvaF724Hd7STBoV5Fe5RcA5CzpEU8fpDQrluFLRojWzoqTftKvjx5sJfV7KorWhyphenhyphen2OjcrOigordbREuWD8GJYb2yTYS6AHVZ1MLYyb8nw1aIkMSUKmd-l5EnevrG/s1600/CompTIA+Secure+Infrastructure+Specialist+%25E2%2580%2593+CSIS+2017.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="590" data-original-width="761" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxc14JFk9tdJrmVkPwvvaF724Hd7STBoV5Fe5RcA5CzpEU8fpDQrluFLRojWzoqTftKvjx5sJfV7KorWhyphenhyphen2OjcrOigordbREuWD8GJYb2yTYS6AHVZ1MLYyb8nw1aIkMSUKmd-l5EnevrG/s320/CompTIA+Secure+Infrastructure+Specialist+%25E2%2580%2593+CSIS+2017.jpg" width="320" /></a></div>
<br />Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com2Italy41.87194 12.56737999999995729.678010500000003 -8.0869170000000423 54.065869500000005 33.221676999999957tag:blogger.com,1999:blog-4590944285337051043.post-20961962649816237342013-12-14T13:05:00.003-08:002013-12-14T13:11:48.947-08:00Lancio Visual Studio 2013 - 19 novembre - Sessione 4<iframe allowfullscreen="" frameborder="0" height="270" src="//www.youtube.com/embed/KmHLD-WDOQY" width="480"></iframe>Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-7621079557666372602013-12-14T13:05:00.001-08:002013-12-14T13:11:35.883-08:00Lancio Visual Studio 2013 - 19 novembre - Sessione 3<iframe allowfullscreen="" frameborder="0" height="270" src="//www.youtube.com/embed/56ex1zFzJeM" width="480"></iframe>Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-45077260824170147922013-12-14T13:03:00.001-08:002013-12-14T13:11:20.793-08:00Lancio Visual Studio 2013 - 19 novembre - Sessione 2<iframe allowfullscreen="" frameborder="0" height="270" src="//www.youtube.com/embed/lEgQTTrJXQQ" width="480"></iframe>Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com1tag:blogger.com,1999:blog-4590944285337051043.post-73369078207856205502013-12-14T13:01:00.001-08:002013-12-14T13:11:58.915-08:00Lancio Visual Studio 2013 - 19 novembre - Sessione 1<iframe allowfullscreen="" frameborder="0" height="270" src="//www.youtube.com/embed/tYCurEinW4Q" width="480"></iframe>Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-47146802829568110442013-11-18T04:47:00.000-08:002016-06-02T06:03:48.785-07:00- Cisco Networking: Split Tunneling for AnyConnect VPN Client on the ASA Configuration Example<h2>
Introduction </h2>
<div content="0">
This document provides step-by-step instructions on how to allow
Cisco AnyConnect VPN client access to the Internet while they are tunneled into
a Cisco Adaptive Security Appliance (ASA) 8.0.2. This configuration allows the
client secure access to corporate resources via SSL while giving unsecured
access to the Internet using split tunneling. </div>
<h2>
Prerequisites </h2>
<h3>
Requirements </h3>
Ensure that you meet these requirements before you attempt this
configuration:<br />
<ul>
<li>
ASA Security Appliance needs to run version 8.x</li>
<li>
Cisco AnyConnect VPN Client 2.x<br />
<b>Note: </b>Download the AnyConnect VPN Client package (anyconnect-win*.pkg)
from the Cisco <a href="http://www.cisco.com/pcgi-bin/tablebuild.pl/anyconnect">Software Download</a> (<a href="http://tools.cisco.com/RPF/register/register.do">registered</a> customers only) . Copy the AnyConnect VPN client to
the ASA's flash memory, which is to be downloaded to the remote user computers
in order to establish the SSL VPN connection with the ASA. Refer to the <a href="http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/svc.html#wp1040195">Installing the AnyConnect Client</a> section of the ASA
configuration guide for more information.</li>
</ul>
<h3>
Components Used </h3>
The information in this document is based on these software and hardware
versions: <br />
<ul>
<li>
Cisco 5500 Series ASA that runs software version 8.0(2) </li>
<li>
Cisco AnyConnect SSL VPN Client version for Windows 2.0.0343 </li>
<li>
PC which runs Microsoft Visa, Windows XP SP2 or Windows 2000 Professional SP4
with Microsoft Installer version 3.1</li>
<li>
Cisco Adaptive Security Device Manager (ASDM) version 6.0(2)</li>
</ul>
The information in this document was created from the devices in a specific
lab environment. All of the devices used in this document started with a cleared
(default) configuration. If your network is live, make sure that you understand
the potential impact of any command.<br />
<h3>
Conventions </h3>
Refer to the <a href="http://www.cisco.com/en/US/tech/tk801/tk36/technologies_tech_note09186a0080121ac5.shtml">Cisco Technical Tips Conventions</a> for more information
on document conventions.<br />
<h2>
Background Information </h2>
The Cisco AnyConnect VPN Client provides secure SSL connections to the
security appliance for remote users. Without a previously installed client,
remote users enter the IP address in their browser of an interface configured to
accept SSL VPN connections. Unless the security appliance is configured to
redirect http:// requests to https://, users must enter the URL in the form
https://<br />
<address>
.</address>
<br />
After entering the URL, the browser connects to that interface and displays
the login screen. If the user satisfies the login and authentication, and the
security appliance identifies the user as requiring the client, it downloads the
client that matches the operating system of the remote computer. After
downloading, the client installs and configures itself, establishes a secure SSL
connection and either remains or uninstalls itself (depending on the security
appliance configuration) when the connection terminates.<br />
In the case of a previously installed client, when the user authenticates,
the security appliance examines the revision of the client and upgrades the
client as necessary.<br />
When the client negotiates an SSL VPN connection with the security appliance,
it connects using Transport Layer Security (TLS), and optionally, Datagram
Transport Layer Security (DTLS). DTLS avoids latency and bandwidth problems
associated with some SSL connections, and improves the performance of real-time
applications that are sensitive to packet delays.<br />
The AnyConnect client can be downloaded from the security appliance, or it
can be installed manually on the remote PC by the system administrator. Refer to
<a href="http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect20/administrative/guide/admin.html">Cisco AnyConnect VPN Client Administrator Guide</a> for
more information on how to install the client manually.<br />
The security appliance downloads the client based on the group policy or
username attributes of the user establishing the connection. You can configure
the security appliance to automatically download the client, or you can
configure it to prompt the remote user about whether to download the client. In
the latter case, if the user does not respond, you can configure the security
appliance to either download the client after a timeout period or present the
login page.<br />
<h2>
Configure </h2>
In this section, you are presented with the information to configure the
features described in this document. <br />
<b>Note: </b>Use the <a href="http://tools.cisco.com/Support/CLILookup/cltSearchAction.do">Command Lookup Tool</a> (<a href="http://tools.cisco.com/RPF/register/register.do">registered</a> customers only) to obtain more information on the
commands used in this section.<br />
<h3>
Network Diagram </h3>
This document uses this network setup:<br />
<img alt="/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config1.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config1.gif" usemap="" /> <br />
<b>Note: </b>The IP addressing schemes used in this configuration are not
legally routable on the Internet. They are <a href="http://www.ietf.org/rfc/rfc1918.txt?number=1918" target="_blank">RFC 1918</a> <img alt="leavingcisco.com" src="http://www.cisco.com/swa/i/icon_popup_short.gif" height="9" width="19" />
addresses which have been used in a lab environment.<br />
<h3>
ASA Configuration Using ASDM 6.0(2) </h3>
This document assumes that the basic configuration, such as interface
configuration, is already made and works properly.<br />
<b>Note: </b>Refer to <a href="http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/mgaccess.html#wp1047288">Allowing HTTPS Access for ASDM</a> in order to allow the
ASA to be configured by the ASDM. <br />
<b>Note: </b>WebVPN and ASDM cannot be enabled on the same ASA interface
unless you change the port numbers. Refer to <a href="http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807be2a1.shtml">ASDM and WebVPN Enabled on the Same Interface of ASA</a>
for more information.<br />
Complete these steps in order to configure the SSL VPN on ASA with split
tunneling:<br />
<ol type="1">
<li>
Choose <b>Configuration > Remote Access VPN > Network (Client) Access
> Address Management > Address Pools > Add</b> in order to create an IP
address pool <b>vpnpool</b>.<br />
<img alt="asa8x-split-tunnel-anyconnect-config2.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config2.gif" usemap="" /> </li>
<li>
Click <b>Apply</b>.<br />
<b>Equivalent CLI Configuration:</b> <br />
<table bgcolor="#ffffff" border="1" cellpadding="3" cellspacing="1" style="width: 60%px;">
<tbody>
<tr>
<th bgcolor="#ccccff" colspan="1" rowspan="1">Cisco ASA 8.0(2)</th></tr>
<tr>
<td bgcolor="#ffffff" colspan="1" rowspan="1"><pre>ciscoasa(config)#<b>ip local pool vpnpool 192.168.10.1-192.168.10.254 mask 255.255.255.0</b>
</pre>
</td></tr>
</tbody></table>
</li>
<li>
Enable WebVPN.<br />
<ol type="a">
<li>
Choose <b>Configuration > Remote Access VPN > Network (Client) Access
> SSL VPN Connection Profiles</b> and under <b>Access Interfaces</b>, click
the check boxes <b>Allow Access</b> and <b>Enable DTLS</b> for the outside
interface. Also, check the <b>Enable Cisco AnyConnect VPN Client or legacy SSL
VPN Client access on the interface selected in the table below</b> check box in
order to enable SSL VPN on the outside interface.<br />
<img alt="asa8x-split-tunnel-anyconnect-config3.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config3.gif" usemap="" /> </li>
<li>
Click <b>Apply</b>.</li>
<li>
Choose <b>Configuration > Remote Access VPN > Network (Client) Access
> Advanced > SSL VPN > Client Settings > Add</b> in order to add the
Cisco AnyConnect VPN client image from the flash memory of ASA as shown.<br />
<img alt="asa8x-split-tunnel-anyconnect-config4.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config4.gif" usemap="" /> </li>
<li>
Click <b>OK</b>.<br />
<img alt="asa8x-split-tunnel-anyconnect-config5.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config5.gif" usemap="" /> </li>
<li>
Click <b>Add</b>.<br />
<img alt="asa8x-split-tunnel-anyconnect-config6.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config6.gif" usemap="" /> <br />
<b>Equivalent CLI Configuration:</b> <br />
<table bgcolor="#ffffff" border="1" cellpadding="3" cellspacing="1" style="width: 60%px;">
<tbody>
<tr>
<th bgcolor="#ccccff" colspan="1" rowspan="1">Cisco ASA 8.0(2)</th></tr>
<tr>
<td bgcolor="#ffffff" colspan="1" rowspan="1"><pre>ciscoasa(config)#<b>webvpn</b>
ciscoasa(config-webvpn)#<b>enable outside</b>
ciscoasa(config-webvpn)#<b>svc image disk0:/anyconnect-win-2.0.0343-k9.pkg 1</b>
ciscoasa(config-webvpn)#<b>tunnel-group-list enable</b>
ciscoasa(config-webvpn)#<b>svc enable</b>
</pre>
</td></tr>
</tbody></table>
</li>
</ol>
</li>
<li>
Configure Group Policy.<br />
<ol type="a">
<li>
Choose <b>Configuration > Remote Access VPN > Network (Client) Access
> Group Policies</b> in order to create an internal group policy
<b>clientgroup</b>. Under the <b>General</b> tab, select the <b>SSL VPN
Client</b> check box in order to enable the WebVPN as tunneling protocol.<br />
<img alt="asa8x-split-tunnel-anyconnect-config7.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config7.gif" usemap="" /> </li>
<li>
In the <b>Advanced > Split Tunneling</b> tab, uncheck the <b>Inherit</b>
check box for Split Tunnel Policy and chose <b>Tunnel Network List Below</b>
from the drop down list. <br />
<img alt="/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config8.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config8.gif" usemap="" /> </li>
<li>
Uncheck the <b>Inherit</b> check box for <b>Split Tunnel Network List</b> and
then click <b>Manage</b> in order to launch the ACL Manager.<br />
<img alt="asa8x-split-tunnel-anyconnect-config9.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config9.gif" usemap="" /> </li>
<li>
Within the ACL Manager, choose <b>Add > Add ACL...</b> in order to create
a new access list.<br />
<img alt="asa8x-split-tunnel-anyconnect-config10.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config10.gif" usemap="" /> </li>
<li>
Provide a name for the ACL and click <b>OK</b>.<br />
<img alt="asa8x-split-tunnel-anyconnect-config11.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config11.gif" usemap="" /> </li>
<li>
Once the ACL name is created, choose <b>Add > Add ACE</b> in order to add
an Access Control Entry (ACE).<br />
Define the ACE that corresponds to the LAN behind the ASA. In this case, the
network is 10.77.241.128/26 and select <b>Permit</b> as the Action.</li>
<li>
Click <b>OK</b> in order to exit the ACL Manager.<br />
<img alt="asa8x-split-tunnel-anyconnect-config12.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config12.gif" usemap="" /> </li>
<li>
Make sure that the ACL you just created is selected for the split-tunnel
Network List. Click <b>OK</b> in order to return to the Group Policy
configuration.<br />
<img alt="/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config13.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config13.gif" usemap="" /> </li>
<li>
On the main page, click <b>Apply</b> and then Send (if required) in order to
send the commands to the ASA.</li>
<li>
Configure the <b>SSL VPN</b> settings under Group policy mode.<br />
<ol type="a">
<li>
For the Keep Installer on Client System option, uncheck the <b>Inherit</b>
check box, and click the <b>Yes</b> radio button.<br />
This action allows the SVC software to remain on the client machine.
Therefore, the ASA is not required to download the SVC software to the client
each time a connection is made. This option is a good choice for remote users
who often access the corporate network.<br />
<img alt="asa8x-split-tunnel-anyconnect-config14.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config14.gif" usemap="" /> </li>
<li>
Click <b>Login Setting</b> in order to set the <b>Post Login Setting</b> and
<b>Default Post Login Selection</b> as shown.<br />
<img alt="asa8x-split-tunnel-anyconnect-config15.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config15.gif" usemap="" /> </li>
<li>
For the Renegotiation Interval option, uncheck the <b>Inherit</b> box,
uncheck the <b>Unlimited</b> check box, and enter the number of minutes until
rekey.<br />
Security is enhanced by setting limits on the length of time a key is
valid.</li>
<li>
For the Renegotiation Method option, uncheck the <b>Inherit</b> check box,
and click the <b>SSL</b> radio button.<br />
Renegotiation can use the present SSL tunnel or a new tunnel created
expressly for renegotiation.<br />
<img alt="asa8x-split-tunnel-anyconnect-config16.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config16.gif" usemap="" /> </li>
</ol>
</li>
<li>
Click <b>OK</b> and then <b>Apply</b>.<br />
<img alt="asa8x-split-tunnel-anyconnect-config17.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config17.gif" usemap="" /> <br />
<b>Equivalent CLI Configuration:</b> <br />
<table bgcolor="#ffffff" border="1" cellpadding="3" cellspacing="1" style="width: 60%px;">
<tbody>
<tr>
<th bgcolor="#ccccff" colspan="1" rowspan="1">Cisco ASA 8.0(2)</th></tr>
<tr>
<td bgcolor="#ffffff" colspan="1" rowspan="1"><pre>ciscoasa(config)#<b>access-list split-tunnel standard permit 10.77.241.128 255.255.255.192</b>2
ciscoasa(config)#<b>group-policy clientgroup internal</b>
ciscoasa(config)#<b>group-policyclientgroup attributes</b>
ciscoasa(config-group-policy)#<b>vpn-tunnel-protocol webvpn</b>
ciscoasa(config-group-policy)#<b>split-tunnel-policy tunnelspecified</b>
ciscoasa(config-group-policy)#<b>split-tunnel-network-list value split-tunnel</b>
ciscoasa(config-group-policy)#<b>webvpn</b>
ciscoasa(config-group-webvpn)#<b>svc ask none default svc</b>
ciscoasa(config-group-webvpn)#<b>svc keep-installer installed</b>
ciscoasa(config-group-webvpn)#<b>svc rekey time 30</b>
ciscoasa(config-group-webvpn)#<b>svc rekey method ssl</b>
</pre>
</td></tr>
</tbody></table>
</li>
</ol>
</li>
<li>
Choose <b>Configuration > Remote Access VPN > AAA Setup > Local
Users > Add</b> in order to create a new user account <b>ssluser1</b>. Click
<b>OK</b> and then <b>Apply</b>.<br />
<img alt="asa8x-split-tunnel-anyconnect-config18.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config18.gif" usemap="" /> <br />
<b>Equivalent CLI Configuration:</b> <br />
<table bgcolor="#ffffff" border="1" cellpadding="3" cellspacing="1" style="width: 60%px;">
<tbody>
<tr>
<th bgcolor="#ccccff" colspan="1" rowspan="1">Cisco ASA 8.0(2)</th></tr>
<tr>
<td bgcolor="#ffffff" colspan="1" rowspan="1"><pre>ciscoasa(config)#username <b>ssluser1</b> password asdmASA@</pre>
</td></tr>
</tbody></table>
</li>
<li>
Choose <b>Configuration > Remote Access VPN > AAA Setup > AAA
Servers Groups > Edit</b> in order to modify the default server group LOCAL
by checking the <b>Enable Local User Lockout</b> check box with maximum attempts
value as <b>16</b>. <br />
<img alt="/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config19.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config19.gif" usemap="" /> </li>
<li>
Click <b>OK</b> and then <b>Apply</b>.<br />
<b>Equivalent CLI Configuration:</b> <br />
<table bgcolor="#ffffff" border="1" cellpadding="3" cellspacing="1" style="width: 60%px;">
<tbody>
<tr>
<th bgcolor="#ccccff" colspan="1" rowspan="1">Cisco ASA 8.0(2)</th></tr>
<tr>
<td bgcolor="#ffffff" colspan="1" rowspan="1"><pre>ciscoasa(config)#<b>aaa local authentication attempts max-fail 16</b>
</pre>
</td></tr>
</tbody></table>
</li>
<li>
Configure Tunnel Group.<br />
<ol type="a">
<li>
Choose <b>Configuration > Remote Access VPN > Network (Client) Access
> SSL VPN Connection Profiles Connection Profiles > Add</b> in order to
create a new tunnel group <b>sslgroup</b>.</li>
<li>
In the <b>Basic</b> tab, you can perform the list of configurations as
shown:<br />
<ul>
<li>
Name the Tunnel group as <b>sslgroup</b>.</li>
<li>
Under Client Address Assignment, choose the address pool <b>vpnpool</b> from
the drop down list.</li>
<li>
Under Default Group Policy, choose the group policy <b>clientgroup</b> from
the drop down list.</li>
</ul>
<img alt="asa8x-split-tunnel-anyconnect-config20.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config20.gif" usemap="" /> </li>
<li>
Under the <b>SSL VPN > Connection Aliases</b> tab, specify the group alias
name as <b>sslgroup_users</b> and click <b>OK</b>.<br />
<img alt="asa8x-split-tunnel-anyconnect-config21.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config21.gif" usemap="" /> </li>
<li>
Click <b>OK</b> and then <b>Apply</b>.<br />
<b>Equivalent CLI Configuration:</b> <br />
<table bgcolor="#ffffff" border="1" cellpadding="3" cellspacing="1" style="width: 60%px;">
<tbody>
<tr>
<th bgcolor="#ccccff" colspan="1" rowspan="1">Cisco ASA 8.0(2)</th></tr>
<tr>
<td bgcolor="#ffffff" colspan="1" rowspan="1"><pre>ciscoasa(config)#<b>tunnel-group sslgroup type remote-access</b>
ciscoasa(config)#<b>tunnel-group sslgroup general-attributes</b>
ciscoasa(config-tunnel-general)#<b>address-pool vpnpool</b>
ciscoasa(config-tunnel-general)#<b>default-group-policy clientgroup</b>
ciscoasa(config-tunnel-general)#<b>exit</b>
ciscoasa(config)#<b>tunnel-group sslgroup webvpn-attributes</b>
ciscoasa(config-tunnel-webvpn)#<b>group-alias sslgroup_users enable</b>
</pre>
</td></tr>
</tbody></table>
</li>
</ol>
</li>
<li>
Configure NAT.<br />
<ol type="a">
<li>
Choose <b>Configuration > Firewall > NAT Rules > Add Dynamic NAT
Rule</b> so the traffic that comes from the inside network can be translated
with outside IP address 172.16.1.5.<br />
<img alt="asa8x-split-tunnel-anyconnect-config22.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config22.gif" usemap="" /> </li>
<li>
Click <b>OK</b>.</li>
<li>
Click <b>OK</b>.<br />
<img alt="asa8x-split-tunnel-anyconnect-config23.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config23.gif" usemap="" /> </li>
<li>
Click <b>Apply</b>.<br />
<b>Equivalent CLI Configuration:</b> <br />
<table bgcolor="#ffffff" border="1" cellpadding="3" cellspacing="1" style="width: 60%px;">
<tbody>
<tr>
<th bgcolor="#ccccff" colspan="1" rowspan="1">Cisco ASA 8.0(2)</th></tr>
<tr>
<td bgcolor="#ffffff" colspan="1" rowspan="1"><pre>ciscoasa(config)#<b>global (outside) 1 172.16.1.5</b>
ciscoasa(config)#<b>nat (inside) 1 0.0.0.0 0.0.0.0</b>
</pre>
</td></tr>
</tbody></table>
</li>
</ol>
</li>
<li>
Configure the nat-exemption for the return-traffic from inside network to the
VPN client.<br />
<blockquote>
<pre>ciscoasa(config)#<b>access-list nonat permit ip 10.77.241.0 192.168.10.0</b>
ciscoasa(config)#<b>access-list nonat permit ip 192.168.10.0 10.77.241.0</b>
ciscoasa(config)#<b>nat (inside) 0 access-list nonat</b>
</pre>
</blockquote>
</li>
</ol>
<h3>
ASA CLI Configuration </h3>
<table bgcolor="#ffffff" border="1" cellpadding="3" cellspacing="1" style="width: 60%px;">
<tbody>
<tr>
<th bgcolor="#ccccff" colspan="1" rowspan="1">Cisco ASA 8.0(2) </th></tr>
<tr>
<td bgcolor="#ffffff" colspan="1" rowspan="1"><pre>ciscoasa(config)#<b>show running-config</b>
: Saved
:
ASA Version 8.0(2)
!
hostname ciscoasa
domain-name default.domain.invalid
enable password 8Ry2YjIyt7RRXU24 encrypted
names
!
interface Ethernet0/0
nameif inside
security-level 100
ip address 10.77.241.142 255.255.255.192
!
interface Ethernet0/1
nameif outside
security-level 0
ip address 172.16.1.1 255.255.255.0
!
interface Ethernet0/2
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet0/3
shutdown
no nameif
no security-level
no ip address
!
interface Management0/0
shutdown
no nameif
no security-level
no ip address
!
passwd 2KFQnbNIdI.2KYOU encrypted
boot system disk0:/asa802-k8.bin
ftp mode passive
clock timezone IST 5 30
dns server-group DefaultDNS
domain-name default.domain.invalid
<b>access-list split-tunnel standard permit 10.77.241.128 255.255.255.192</b>
<i>
<span style="color: blue;">!--- ACL for Split Tunnel network list for encryption.</span>
</i>
access-list nonat permit ip 10.77.241.0 192.168.10.0
access-list nonat permit ip 192.168.10.0 10.77.241.0
<i>
<span style="color: blue;">!--- ACL to define the traffic to be exempted from NAT.</span>
</i>
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
<b>ip local pool vpnpool 192.168.10.1-192.168.10.254 mask 255.255.255.0</b>
<i>
<span style="color: blue;">!--- The address pool for the Cisco AnyConnect SSL VPN Clients</span>
</i>
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-602.bin
no asdm history enable
arp timeout 14400
<b>global (outside) 1 172.16.1.5</b>
<i>
<span style="color: blue;">!--- The global address for Internet access used by VPN Clients.
!--- Note: Uses an RFC 1918 range for lab setup.
!--- Apply an address from your public range provided by your ISP.</span>
</i>
<b>nat (inside) 0 access-list nonat</b>
<i>
<span style="color: blue;">!--- The traffic permitted in "nonat" ACL is exempted from NAT.</span>
</i>
<b>nat (inside) 1 0.0.0.0 0.0.0.0</b>
route outside 0.0.0.0 0.0.0.0 172.16.1.2 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 0.0.0.0 0.0.0.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
no crypto isakmp nat-traversal
telnet timeout 5
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
!
service-policy global_policy global
<b>webvpn</b>
<b>enable outside</b>
<i>
<span style="color: blue;">!--- Enable WebVPN on the outside interface</span>
</i>
<b> svc image disk0:/anyconnect-win-2.0.0343-k9.pkg 1</b>
<i>
<span style="color: blue;">!--- Assign an order to the AnyConnect SSL VPN Client image</span>
</i>
<b>svc enable</b>
<i>
<span style="color: blue;">!--- Enable the security appliance to download SVC images to remote computers</span>
</i>
<b>tunnel-group-list enable</b>
<i>
<span style="color: blue;">!--- Enable the display of the tunnel-group list on the WebVPN Login page</span>
</i>
<b>group-policy clientgroup internal</b>
<i>
<span style="color: blue;">!--- Create an internal group policy "clientgroup"</span>
</i>
<b>group-policy clientgroup attributes</b>
<b>vpn-tunnel-protocol svc</b>
<i>
<span style="color: blue;">!--- Specify SSL as a permitted VPN tunneling protocol</span>
</i>
<b>split-tunnel-policy tunnelspecified
split-tunnel-network-list value split-tunnel</b>
<i>
<span style="color: blue;">!--- Encrypt the traffic specified in the split tunnel ACL only</span>
</i>
<b>webvpn</b>
<b>svc keep-installer installed</b>
<i>
<span style="color: blue;">!--- When the security appliance and the SVC perform a rekey, they renegotiate
!--- the crypto keys and initialization vectors, increasing the security of the connection.</span>
</i>
<b>svc rekey time 30</b>
<i>
<span style="color: blue;">!--- Command that specifies the number of minutes from the start of the
!--- session until the rekey takes place, from 1 to 10080 (1 week).</span>
</i>
<b>svc rekey method ssl</b>
<i>
<span style="color: blue;">!--- Command that specifies that SSL renegotiation takes place during SVC rekey.</span>
</i>
<b>svc ask none default svc</b>
<b>username ssluser1 password ZRhW85jZqEaVd5P. encrypted</b>
<i>
<span style="color: blue;">!--- Create a user account "ssluser1"</span>
</i>
<b>tunnel-group sslgroup type remote-access</b>
<i>
<span style="color: blue;">!--- Create a tunnel group "sslgroup" with type as remote access</span>
</i>
<b>tunnel-group sslgroup general-attributes</b>
<b>address-pool vpnpool</b>
<i>
<span style="color: blue;">!--- Associate the address pool vpnpool created</span>
</i>
<b>default-group-policy clientgroup</b>
<i>
<span style="color: blue;">!--- Associate the group policy "clientgroup" created</span>
</i>
<b>tunnel-group sslgroup webvpn-attributes</b>
<b>group-alias sslgroup_users enable</b>
<i>
<span style="color: blue;">!--- Configure the group alias as sslgroup-users</span>
</i>
prompt hostname context
Cryptochecksum:af3c4bfc4ffc07414c4dfbd29c5262a9
: end
ciscoasa(config)#</pre>
</td></tr>
</tbody></table>
<h3>
Establish the SSL VPN Connection with SVC </h3>
Complete these steps in order to establish a SSL VPN connection with ASA:<br />
<ol type="1">
<li>
Enter the URL or IP address of the ASA's WebVPN interface in your web browser
in the format as shown.<br />
<blockquote>
<pre>https://url</pre>
</blockquote>
OR<br />
<blockquote>
<pre>https://<ip address="" asa="" interface="" of="" the="" webvpn=""></ip></pre>
</blockquote>
<img alt="asa8x-split-tunnel-anyconnect-config24.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config24.gif" usemap="" /> </li>
<li>
Enter your username and password. Also, choose your respective group from the
drop down list as shown.<br />
<img alt="asa8x-split-tunnel-anyconnect-config25.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config25.gif" usemap="" /> <br />
This window appears before the SSL VPN connection is established.<br />
<img alt="asa8x-split-tunnel-anyconnect-config26.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config26.gif" usemap="" /> <br />
<b>Note: </b>ActiveX software must be installed in your computer before you
download the SVC.<br />
You receive this window once the connection is established.<br />
<img alt="asa8x-split-tunnel-anyconnect-config27.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config27.gif" usemap="" /> </li>
<li>
Click the lock which appears in the task bar of your computer.<br />
<img alt="/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config28.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config28.gif" usemap="" /> <br />
This window appears and provides information about the SSL connection. For
example, <b>192.168.10.1</b> is the assigned IP by the ASA, etc.<br />
<img alt="asa8x-split-tunnel-anyconnect-config29.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config29.gif" usemap="" /> <br />
This window shows the Cisco AnyConnect VPN Client Version information.<br />
<img alt="asa8x-split-tunnel-anyconnect-config30.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config30.gif" usemap="" /> </li>
</ol>
<h2>
Verify </h2>
Use this section to confirm that your configuration works properly.<br />
The <a href="https://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.pl">Output Interpreter Tool</a> (<a href="http://tools.cisco.com/RPF/register/register.do">registered</a> customers only) (OIT) supports certain <b>show</b>
commands. Use the OIT to view an analysis of <b>show</b> command output.<br />
<ul>
<li>
<b>show webvpn svc</b>—Displays the SVC images stored in the ASA flash
memory.<br />
<blockquote>
<pre>ciscoasa#<b>show webvpn svc</b>
<b>1. disk0:/anyconnect-win-2.0.0343-k9.pkg 1</b>
CISCO STC win2k+
2,0,0343
Mon 04/23/2007 4:16:34.63
<b>1 SSL VPN Client(s) installed</b>
</pre>
</blockquote>
</li>
<li>
<b>show vpn-sessiondb svc</b>—Displays the information about the current SSL
connections.<br />
<blockquote>
<pre>ciscoasa#<b>show vpn-sessiondb svc</b>
Session Type: SVC
Username : <b>ssluser1</b> Index : 12
Assigned IP : <b>192.168.10.1 </b> Public IP : <b>192.168.1.1</b>
Protocol : <b>Clientless SSL-Tunnel DTLS-Tunnel</b>
Encryption : <b>RC4 AES128</b> Hashing : <b>SHA1</b>
Bytes Tx : 194118 Bytes Rx : 197448
Group Policy : <b>clientgroup </b> Tunnel Group : <b>sslgroup</b>
Login Time : 17:12:23 IST Mon Mar 24 2008
Duration : 0h:12m:00s
NAC Result : Unknown
VLAN Mapping : N/A VLAN : none</pre>
</blockquote>
</li>
<li>
<b>show webvpn group-alias</b>—Displays the configured alias for various
groups.<br />
<blockquote>
<pre>ciscoasa#<b>show webvpn group-alias</b>
Tunnel Group: <b>sslgroup</b> Group Alias: <b>sslgroup_users enabled</b>
</pre>
</blockquote>
</li>
<li>
In ASDM, choose <b>Monitoring > VPN > VPN Statistics > Sessions</b>
in order to know the current WebVPN sessions in the ASA.<br />
<img alt="asa8x-split-tunnel-anyconnect-config31.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config31.gif" usemap="" /> </li>
</ul>
<h2>
Troubleshoot </h2>
This section provides information you can use to troubleshoot your
configuration. <br />
<ol type="1">
<li>
<b>vpn-sessiondb logoff name<span style="font-style: italic; font-weight: normal;"> <username></username></span>
</b>—Command to logoff the SSL VPN session for the particular username.<br />
<blockquote>
<pre>ciscoasa#<b>vpn-sessiondb logoff name ssluser1</b>
Do you want to logoff the VPN session(s)? [confirm] <b>Y</b>
<b>INFO: Number of sessions with name "ssluser1" logged off : 1
</b>
ciscoasa#<b>Called vpn_remove_uauth: success!
webvpn_svc_np_tear_down: no ACL
webvpn_svc_np_tear_down: no IPv6 ACL
np_svc_destroy_session(0xB000)</b>
</pre>
</blockquote>
Similarly, you can use the <b>vpn-sessiondb logoff svc</b> command in order
to terminate all the SVC sessions.</li>
<li>
<b>Note: </b>If the PC goes to standby or hibernate mode, then the SSL VPN
connection can be terminated.<br />
<blockquote>
<pre><b>webvpn_rx_data_cstp
webvpn_rx_data_cstp: got message
SVC message: t/s=5/16: Client PC is going into suspend mode (Sleep, Hibernate, e
tc)
Called vpn_remove_uauth: success!
webvpn_svc_np_tear_down: no ACL
webvpn_svc_np_tear_down: no IPv6 ACL
np_svc_destroy_session(0xA000)</b>
</pre>
</blockquote>
<blockquote>
<pre>ciscoasa#<b>show vpn-sessiondb svc</b>
INFO: There are presently no active sessions</pre>
</blockquote>
</li>
<li>
<b>debug webvpn svc <span style="font-style: italic; font-weight: normal;"><1-255><!--1-255--><!--1-255--></1-255></span>
</b>—Provides the real time webvpn events in order to establish the session.<br />
<blockquote>
<pre>Ciscoasa#<b>debug webvpn svc 7</b>
webvpn_rx_data_tunnel_connect
CSTP state = HEADER_PROCESSING
http_parse_cstp_method()
...input: 'CONNECT /CSCOSSLC/tunnel HTTP/1.1'
webvpn_cstp_parse_request_field()
...input: 'Host: 172.16.1.1'
Processing CSTP header line: 'Host: 172.16.1.1'
webvpn_cstp_parse_request_field()
...input: 'User-Agent: Cisco AnyConnect VPN Client 2, 0, 0343'
Processing CSTP header line: 'User-Agent: Cisco AnyConnect VPN Client 2, 0, 0343
'
Setting user-agent to: 'Cisco AnyConnect VPN Client 2, 0, 0343'
webvpn_cstp_parse_request_field()
...input: 'Cookie: webvpn=16885952@12288@1206098825@D251883E8625B92C1338D631B08B
7D75F4EDEF26'
Processing CSTP header line: 'Cookie: webvpn=16885952@12288@1206098825@D251883E8
625B92C1338D631B08B7D75F4EDEF26'
Found WebVPN cookie: 'webvpn=16885952@12288@1206098825@D251883E8625B92C1338D631B
08B7D75F4EDEF26'
WebVPN Cookie: 'webvpn=16885952@12288@1206098825@D251883E8625B92C1338D631B08B7D7
5F4EDEF26'
webvpn_cstp_parse_request_field()
...input: 'X-CSTP-Version: 1'
Processing CSTP header line: 'X-CSTP-Version: 1'
Setting version to '1'
webvpn_cstp_parse_request_field()
...input: 'X-CSTP-Hostname: tacweb'
Processing CSTP header line: 'X-CSTP-Hostname: tacweb'
Setting hostname to: 'tacweb'
webvpn_cstp_parse_request_field()
...input: 'X-CSTP-Accept-Encoding: deflate;q=1.0'
Processing CSTP header line: 'X-CSTP-Accept-Encoding: deflate;q=1.0'
webvpn_cstp_parse_request_field()
...input: 'X-CSTP-MTU: 1206'
Processing CSTP header line: 'X-CSTP-MTU: 1206'
webvpn_cstp_parse_request_field()
...input: 'X-CSTP-Address-Type: IPv4'
Processing CSTP header line: 'X-CSTP-Address-Type: IPv4'
webvpn_cstp_parse_request_field()
...input: 'X-DTLS-Master-Secret: CE151BA2107437EDE5EC4F5EE6AEBAC12031550B1812D40
642E22C6AFCB9501758FF3B7B5545973C06F6393C92E59693'
Processing CSTP header line: 'X-DTLS-Master-Secret: CE151BA2107437EDE5EC4F5EE6AE
BAC12031550B1812D40642E22C6AFCB9501758FF3B7B5545973C06F6393C92E59693'
webvpn_cstp_parse_request_field()
...input: 'X-DTLS-CipherSuite: AES256-SHA:AES128-SHA:DES-CBC3-SHA:DES-CBC-SHA'
Processing CSTP header line: 'X-DTLS-CipherSuite: AES256-SHA:AES128-SHA:DES-CBC3
-SHA:DES-CBC-SHA'
Validating address: 0.0.0.0
CSTP state = WAIT_FOR_ADDRESS
webvpn_cstp_accept_address: 192.168.10.1/0.0.0.0
CSTP state = HAVE_ADDRESS
No subnetmask... must calculate it
SVC: NP setup
np_svc_create_session(0x3000, 0xD41611E8, TRUE)
webvpn_svc_np_setup
SVC ACL Name: NULL
SVC ACL ID: -1
SVC ACL ID: -1
vpn_put_uauth success!
SVC IPv6 ACL Name: NULL
SVC IPv6 ACL ID: -1
SVC: adding to sessmgmt
SVC: Sending response
Unable to initiate NAC, NAC might not be enabled or invalid policy
CSTP state = <b>CONNECTED</b>
webvpn_rx_data_cstp
webvpn_rx_data_cstp: got internal message
Unable to initiate NAC, NAC might not be enabled or invalid policy</pre>
</blockquote>
</li>
<li>
In ASDM, choose <b>Monitoring > Logging > Real-time Log Viewer >
View</b> in order to see the real time events. <br />
<img alt="/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config32.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config32.gif" usemap="" /> <br />
This example shows that the SSL session has been established with the head
end device.<br />
<img alt="asa8x-split-tunnel-anyconnect-config33.gif" border="0" src="http://www.cisco.com/image/gif/paws/100936/asa8x-split-tunnel-anyconnect-config33.gif" usemap="" /> </li>
</ol>
<h2>
Related Information </h2>
<ul>
<li><b><a href="http://www.cisco.com/en/US/products/ps6120/tsd_products_support_series_home.html?referring_site=bodynav">Cisco 5500 Series Adaptive Security Appliance Support
Page</a> </b></li>
<li><b><a href="http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect20/release/notes/cvcrn200.html?referring_site=bodynav">Release Notes for AnyConnect VPN Client, Release 2.0</a>
</b></li>
<li><b><a href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080702999.shtml?referring_site=bodynav">ASA/PIX: Allow Split Tunneling for VPN Clients on the ASA
Configuration Example</a> </b></li>
<li><b><a href="http://www.cisco.com/en/US/products/hw/routers/ps274/products_configuration_example09186a0080819289.shtml?referring_site=bodynav">Router Allows VPN Clients to Connect IPsec and Internet
Using Split Tunneling Configuration Example</a> </b></li>
<li><b><a href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805734ae.shtml?referring_site=bodynav">PIX/ASA 7.x and VPN Client for Public Internet VPN on a
Stick Configuration Example</a> </b></li>
<li><b><a href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008071c428.shtml?referring_site=bodynav">SSL VPN Client (SVC) on ASA with ASDM Configuration
Example</a> </b></li>
<li content="0"><b><a href="http://www.cisco.com/cisco/web/support/index.html?referring_site=bodynav">Technical Support & Documentation - Cisco Systems</a>
</b></li>
</ul>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com3tag:blogger.com,1999:blog-4590944285337051043.post-9478502488043588672013-11-12T15:04:00.000-08:002016-06-02T06:04:06.093-07:00- Cisco Networking: Combating Botnets Using the Cisco ASA Botnet Traffic Filter<div class="pIntroCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 0pt 0pt 12pt; text-indent: 0pt;">
This paper discusses the nature of botnets, the threats they pose to today's networks, and how the Cisco<span class="cCMTDefault" style="font-weight: normal; vertical-align: super;">®</span> Botnet Traffic Filter enables Cisco ASA appliances to fight botnets and to handle their dynamic nature.</div>
<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Botnet Overview</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
A botnet is a collection of autonomous software robots (bots), typically malicious in nature, that operate as a network of compromised computers. An originator, also known as a "bot herder," typically controls the bots, and can launch them at will, using command and control communication between the controller and the bots.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Hackers typically use botnets as a way of gaining access to large distributed resources of computing power. The owner of a botnet determines which users are allowed to access their botnet. It is a common practice to even sell access to the botnet.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The following is a typical example of the operation of a botnet:</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• A botnet operator will infect computers by sending out viruses or worms through various infection vectors, such as email or compromised websites where the malicious application is the bot.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• The bot on the newly infected host will log into a command and control server and await commands. In many cases, the command and control server will be an IRC channel or a web server.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• A botnet user acquires access to the botnet from the botnet operator.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• Instructions are sent through the command and control channel to each bot in the botnet to execute actions, such as mass email spam, distributed denial of service (DDoS) attacks, or information theft.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
This is illustrated in Figure 1.</div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 1.</b> Botnet Infection Process</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/images/white_paper_c11-532091-01.jpg" height="298" hspace="0" id="wp3000001" style="border: 0px;" vspace="0" width="625" /></div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
According to the FBI, in the United States, one to five million hosts are controlled by botnets.<span style="vertical-align: super;"><a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/white_paper_c11-532091.html#wp9000001" style="color: #3366cc;"><sup class="Footnote">1</sup></a></span> The attack profile has evolved from spam and DoS attacks to attacking websites for profit, taking down rival networks, and blackmailing web host owners. There is a significant amount of money at stake. A single DoS attack on a gambling website can cost $50,000 a day for the business.<span style="vertical-align: super;"><a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/white_paper_c11-532091.html#wp9000002" style="color: #3366cc;"><sup class="Footnote">2</sup></a></span></div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Because the hosts and controllers in a botnet are operating from captured resources, botnets are dynamic and short-lived, which makes them difficult to defeat. As soon as you close down one botnet, it will show up in a different place with new addresses, operating like a network version of a morphing virus.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Botnets have become an important tool in the arsenal of hackers and other criminals that endeavor to profit and to bring financial ruin to companies and individuals with a presence on the Internet.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
For further reading on botnets, please refer to the following documents on <a href="http://www.cisco.com/" style="color: #3366cc;">http://www.cisco.com</a>(<a href="http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns171/ns441/networking_solutions_whitepaper0900aecd8072a537.html" style="color: #3366cc;">http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns171/ns441/networking_solutions_whitepaper0900aecd8072a537.html</a>).</div>
<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Cisco ASA Botnet Traffic Filter</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
This paper focuses on how Cisco Security Intelligence Operations relates to botnet threat identification, and its interaction with the Cisco ASA Botnet Traffic Filter. It is important to realize that a comprehensive security deployment should include Cisco Intrusion Prevention Systems (IPS) with its reputation based Global Correlation service and IPS signatures in conjunction with the security services provided by the ASA security appliance such as Botnet Traffic Filter.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Cisco Security Intelligence Operations</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Cisco Security Intelligence Operations Center provides customers with the benefits of an industry-unprecedented security center, centralizing information and threat signatures issued for all Cisco security technologies, including email filtering, web filtering and reputation, IPS/IDS filtering, and voluntary global threat statistics (Figure 2).</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Cisco Threat Operations Center provides human oversight of Cisco Security Intelligence Operations to ensure speed and accuracy of its threat data, including web and email reputation data, Cisco IPS global correlation data, and botnet database.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Cisco Security Intelligence Operations is the world's largest email and Web traffic monitoring network. With data on more than 25 percent of the world's Internet traffic, it provides an unprecedented real-time view into security threats from around the world. Cisco Security Intelligence Operations can be used like a "credit reporting service" for email and web threats, providing comprehensive data that ISPs and companies can use to differentiate legitimate senders from spammers and other attackers, and giving email administrators visibility into who is sending them email.</div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 2.</b> Cisco Security Intelligence Operations</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/images/white_paper_c11-532091-02.jpg" height="428" hspace="0" id="wp3000002" style="border: 0px;" vspace="0" width="628" /></div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Cisco ASA Botnet Traffic Filter Overview</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Cisco ASA 5500 Series Adaptive Security Appliances provide reputation-based control for an IP address or domain name, similar to the control that IronPort<span class="cCMTDefault" style="vertical-align: super;">®</span> SenderBase<span class="cCMTDefault" style="vertical-align: super;">®</span> provides for email and web servers. This has proved to be very successful in combating rogue email and web servers that typically use dynamic or changing IP addresses.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Cisco ASA Botnet Traffic Filter is integrated into all Cisco ASA appliances, and inspects traffic traversing the appliance to detect rogue traffic in the network. When internal clients are infected with malware and attempt to phone home across the network, the Botnet Traffic Filter alerts the system administrator of this though the regular logging process for manual intervention. This is an effective way to combat botnets and other malware that shares the same phone-home communications pattern.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Botnet Traffic Filter monitors all ports and performs a real-time lookup in its database of known botnet IP addresses and domain names. Based on this investigation, the Botnet Traffic Filter will determine if a connection attempt is benign and should be allowed, or if it is a risk and should be tagged for mitigation.<span style="vertical-align: super;"><a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/white_paper_c11-532091.html#wp9000003" style="color: #3366cc;"><sup class="Footnote">3</sup></a></span></div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Figure 3 shows how the Botnet Traffic Filter works.</div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 3.</b> Cisco ASA Botnet Traffic Filter Operation</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/images/white_paper_c11-532091-03.jpg" height="369" hspace="0" id="wp3000003" style="border: 0px;" vspace="0" width="626" /></div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Cisco ASA Botnet Traffic Filter has three main components:</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Dynamic and Administrator Blacklist Data</span></div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
The Botnet Traffic Filter uses a database of malicious domain names and IP addresses that is provided by Cisco Security Intelligence Operations. This database is maintained by Cisco Security Intelligence Operations and is downloaded dynamically from an update server. Administrators can also configure their own local blacklists and whitelists.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Traffic Classification and Reporting</span></div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
Botnet Traffic Filter traffic classification is configured through the dynamic-filter command as shown in Step 3 in the configuration section. The dynamic filter compares the source and destination addresses of traffic against the IP addresses that have been discovered for the various lists available (dynamic black, local white, local black), and logs and reports the hits against these lists accordingly.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Domain Name System (DNS) Snooping</span></div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
In order to map IP addresses to domain names that are contained in the dynamic database or local lists, the Botnet Traffic Filter uses DNS snooping in conjunction with DNS inspection. Dynamic Filter DNS snooping looks at User Datagram Protocol (UDP) DNS replies and builds a DNS reverse cache (DNSRC), which maps the IP addresses in those replies to the domain names they match. DNS snooping is configured via the Modular Policy Framework (MPF) policies.<span style="vertical-align: super;"><a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/white_paper_c11-532091.html#wp9000004" style="color: #3366cc;"><sup class="Footnote">4</sup></a></span></div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Classification</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Traffic that passes through the Botnet Traffic Filter is classified into four categories:</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Blacklist</span></div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
This is traffic to or from an IP address that is considered to be malicious. This IP address can be either an IP address/network entry in the dynamic blacklist or administrator-configured blacklist, or it can be a snooped IP address that was found in a DNS reply for a blacklisted domain.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Whitelist</span></div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
This is traffic to or from an IP address that is considered to be good. It is part of the administrator-configured lists.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Greylist</span></div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
A greylist IP address has been resolved to one or more blacklist entries as well as one or more unknown entries.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Unknown/None</span></div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
An IP address that does not map to a domain in either a blacklist or whitelist. No syslogs or statistics will be generated for this traffic.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Once an IP address is found for a blacklisted domain, a rule is added to the dynamic-filter ASP rule table and statistics are kept for the number of times that domain is hit, the client that was accessing it, and the TCP/UDP port that was used to connect. In addition, log messages are produced when a blacklisted IP address is hit that details the src/dst IP and ports as well as the domain name. A similar process is applied for white listed Fully Qualified Domain Names (FQDNs).</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Using the Botnet Traffic Filter, Cisco ASA administrators can get statistics for the overall number of blacklist, whitelist, and greylist hits for an interface, as well as summary reports for recent activity.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Dynamic Filter DNS Snooping</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Dynamic Filter DNS snooping feature looks at UDP DNS replies (A and CNAME records only) and builds a DNSRC that maps the IP addresses in those replies to the domain names they match.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
DNS snooping should only be enabled for DNS traffic. Failure to do so will result in non-DNS traffic being dropped because it is not adhering to the DNS protocol. DNS snooping should only be enabled for the interface that is facing the Internet, since the Botnet Traffic Filter database is aimed at addressing the external threat of botnets.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
It is also not a good practice to fill up your DNSRC with internal information, which can cause early flushing of external information.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
DNSRC housekeeping removes entries from the DNSRC on a regular basis.<span style="vertical-align: super;"><a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/white_paper_c11-532091.html#wp9000005" style="color: #3366cc;"><sup class="Footnote">5</sup></a></span> The amount of time that an entry stays in the DNSRC depends on the time to live (TTL) value in the DNS reply that was snooped.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Example of the Botnet Traffic Filter in Action</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The client attempts to connect to phone-home server "command-control.badguy.ru."</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
1. Client issues a DNS query for "command-control.badguy.ru."</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
2. The ASA DNS inspection snoops the query and the response to the DNS query and caches it for later use.</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
3. Client connects to IP address of "command-control.badguy.ru."</div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Botnet Traffic Filter resolves IP address in BTF DNS cache.</div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Botnet Traffic Filter looks up DNS name for connection in Botnet Traffic Filter block list.</div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– If peer address is found in Botnet Traffic Filter block list and is not in the manual whitelist, then alert via logging that an illegal connection was attempted.</div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– If peer address is not found, then allow connection to continue.</div>
<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Deployment Guidelines</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Cisco ASA appliance with the Botnet Traffic Filter should be deployed at the edge of the enterprise Internet edge, as the botnet database only contains information about external botnets. It is also best to address the external threat as close to the source as possible. This feature is restricted to IPv4 traffic.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Botnet Traffic Filter is supported in all firewall modes (single and multiple), and in routed and transparent modes.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Cisco ASA appliance supports Botnet Traffic Filter in High Availability (HA) mode (Active/Active and Active/Standby). It is essential to note that the DNSRC is not replicated between the ASA HA devices and must therefore be relearned upon a device failover event.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
A typical Botnet Traffic Filter deployment will be where the ASA appliance is deployed between the Internet and the corporate networks. The corporate networks in can be divided across multiple interfaces and will, from the Botnet Traffic Filter's point of view, be considered internal networks.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The following steps will need to be taken when configuring Botnet Traffic Filter dynamic filtering:</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
1. Enable DNS client on ASA to allow it to resolve the address of CSIO's updater service, so the dynamic filter update client to fetch updates.</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
2. Enable dynamic traffic filtering (Botnet Traffic Filter).</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
3. Enable the Botnet Traffic Filter database update.</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
4. Classify the traffic that will be subject to dynamic traffic filtering by creating an access control list (ACL) that matches the traffic to be filtered.</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
5. Enable dynamic filtering on the Internet-facing (external) interface by using the classification ACL defined in the previous step.</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
6. Enable DNS snooping on the external interface by adding to or modifying the DNS inspection policy map for the external interface.</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
7. Define local whitelists and/or blacklists if needed.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Configuration</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
In the following sections we show how the Botnet Traffic Filter is configured with CLI and with the Cisco Adaptive Security Device Manager (ASDM), which is the embedded device manager in Cisco ASA 5500 Series security appliances.</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
CLI Configuration</div>
<div class="pStep1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.37in; text-indent: -0.36in;">
<b>Step 1.</b> Enable DNS client<a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/white_paper_c11-532091.html#wp9000006" style="color: #3366cc;"><sup class="Footnote">6</sup></a> on ASA so the dynamic filter updater client can resolve the address of CSIO.</div>
<div class="pDefault" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 0pt 0pt 0pt 18pt; text-indent: 0pt;">
<span class="cCMTDefault">dns domain-lookup outside</span></div>
<div class="pDefault" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 0pt 0pt 0pt 18pt; text-indent: 0pt;">
<span class="cCMTDefault">dns server-group DefaultDNS</span></div>
<div class="pDefault" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 0pt 0pt 0pt 36pt; text-indent: 0pt;">
<span class="cCMTDefault">name-server</span> <span class="cCMTDefault">10.2.1.1</span></div>
<div class="pDefault" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 0pt 0pt 0pt 36pt; text-indent: 0pt;">
<span class="cCMTDefault">domain-name mydomain.cisco.com</span></div>
<div class="pDefault" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 0pt 0pt 0pt 18pt; text-indent: 0pt;">
<span class="cCMTDefault"></span></div>
<div class="pStep1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.37in; text-indent: -0.36in;">
<b>Step 2.</b> Enable dynamic-filter updater-client</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
dynamic-filter updater-client enable</div>
<div class="pStep1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.37in; text-indent: -0.36in;">
<b>Step 3.</b> Enable the use of the database downloaded from the update server</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
dynamic-filter use-database</div>
<div class="pStep1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.37in; text-indent: -0.36in;">
<b>Step 4.</b> Classify traffic for dynamic-filter on traffic for all protocols</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
access-list dynamic-filter_acl extended permit ip any any</div>
<div class="pStep1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.37in; text-indent: -0.36in;">
<b>Step 5.</b> Enable dynamic-filter classification on outside interface</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
dynamic-filter enable interface outside classify-list dynamic-filter_acl</div>
<div class="pStep1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.37in; text-indent: -0.36in;">
<b>Step 6.</b> Enable dynamic DNS snooping on outside interface</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
class-map dynamic-filter_snoop_class</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
match port udp eq domain</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
policy-map dynamic-filter_snoop_policy</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
class dynamic-filter_snoop_class</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
<span class="cCMTDefault" style="font-weight: bold;">inspect dns dynamic-filter-snoop</span></div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
<span class="cCMTDefault" style="font-weight: bold;"></span></div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
service-policy dynamic-filter_snoop_policy interface outside</div>
<div class="pStep1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.37in; text-indent: -0.36in;">
<b>Step 7.</b> Add entries to local blacklists and whitelists</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
dynamic-filter blacklist</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
name bad1.example.com</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
name bad2.example.com</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
address 10.1.1.1 255.255.255.0</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
dynamic-filter whitelist</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
name good.example.com</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
name great.example.com</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
name awesome.example.com</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 36pt; text-indent: 0pt;">
address 10.1.1.2 255.255.255.255</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Cisco ASDM Configuration</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Botnet Traffic Filter is configured in Cisco ASDM through the use of the Botnet Traffic Filter tab (Configuration > Firewall >Botnet Traffic Filter).</div>
<div class="pNoteCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 6pt 0pt 12pt 0.27in; text-indent: -0.27in;">
<b>Note:</b> It is still necessary to explicitly configure the DNS inspection for your external interface, through the firewall service policy rules.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Figures 4 and 5 show how to use Cisco ASDM to configure the Botnet Traffic Filter.</div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 4.</b> Data Download, Traffic Definitions, Exception Lists</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/images/white_paper_c11-532091-04.jpg" height="244" hspace="0" id="wp3000004" style="border: 0px;" vspace="0" width="458" /></div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 5.</b> Detailed Settings for Dynamic Filtering</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/images/white_paper_c11-532091-05.jpg" height="239" hspace="0" id="wp3000005" style="border: 0px;" vspace="0" width="457" /></div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Cisco ASDM provides a comprehensive set of reports and dashboards that will give you basic information about the operations of the Botnet Traffic Filter (Figures 6 through 8).</div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 6.</b> Top Botnet Sites and Ports</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/images/white_paper_c11-532091-06.jpg" height="356" hspace="0" id="wp3000006" style="border: 0px;" vspace="0" width="494" /></div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 7.</b> Top Infected Hosts</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/images/white_paper_c11-532091-07.jpg" height="357" hspace="0" id="wp3000007" style="border: 0px;" vspace="0" width="494" /></div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 8.</b> Integration of Botnet Traffic Filter Statistics into the ASDM Dashboard</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/images/white_paper_c11-532091-08.jpg" height="325" hspace="0" id="wp3000008" style="border: 0px;" vspace="0" width="494" /></div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Mitigation</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Mitigation is a critical step in the botnet detection and prevention process and security incident response cycle. The following steps can be taken to mitigate botnet infections once they have been identified by the Botnet Traffic Filter.</div>
<div class="pSubhead4CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Manual Process</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
1. Security administrator identifies infected hosts reported by BTF dashboard, and on Cisco ASDM or shown in syslog messages (as shown in the example in the next step). Next, a manual remediation process can be taken.</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
2. Block all transient traffic coming to and from infected hosts using "shun" or ACLs on the ASA appliance. An administrator can perform this by the use of Cisco ASDM<span style="vertical-align: super;"><a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/white_paper_c11-532091.html#wp9000007" style="color: #3366cc;"><sup class="Footnote">7</sup></a></span> or the CLI. Shun is preferred as it is dynamic and non-persistent and will block existing connections without interfering with the static security policy (ACLs).</div>
<div class="pNumListBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.14in;">
Example</div>
<div class="pNumListBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.14in;">
The following is a sample syslog message generated by the Botnet Traffic Filter when it detects an infected host that matches the Botnet Traffic Filter dynamic filtering database:</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
ASA-4-338002: Dynamic Filter permitted black listed TCP traffic from inside:10.1.1.45/6798 (209.165.201.1/7890) to outside:209.165.202.129/80 (209.165.202.129/80), destination 209.165.202.129 resolved from dynamic list: bad.example.com</div>
<div class="pNumListBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.14in;">
Here's how the resulting ACL entry would look:</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
access-list BLOCK_OUT extended deny ip host 10.1.1.45 host 209.165.202.129</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
access-list BLOCK_OUT extended permit ip any any access-group BLOCK_OUT out interface outside</div>
<div class="pNumListBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.14in;">
The above ACL effectively would block all IP traffic sourced from the infected host 10.1.1.45 when going to the botnet command and control server at 209.165.202.129. Specific source or destination port can be blocked for more granular control, as needed.</div>
<div class="pNumListBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 6pt 0.14in;">
Here's how the corresponding shun command that blocks communication with the same command and control server would look:</div>
<div class="pBodyTextIndentCMT" style="background-color: white; font-family: 'Courier New', Courier, mono; font-size: 9pt; margin: 4pt 0pt 4pt 18pt; text-indent: 0pt;">
shun 209.165.202.129</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
3. Manually identify ingress/access points of the network (e.g., what switchports infected hosts are plugged into). Disable the switchport(s) and notify end users that their PCs are infected. Dispatch IT person to perform a malware/bot cleanup or re-image the infected PC(s) as necessary.</div>
<div class="pNumList1CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 5px 0pt 3pt 0.13in; text-indent: -0.14in;">
4. Bring the disinfected hosts back online once the threats have been remediated.</div>
<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Conclusion</div>
<span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000010" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000011" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000012" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000013" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000014" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000015" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000016" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000017" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000019" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000020" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000021" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000022" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000023" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000024" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000025" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000026" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000027" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000028" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000029" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000030" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000031" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000032" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000033" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000034" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000035" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000036" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000037" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000038" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000039" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000040" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000041" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000042" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000043" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000044" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000045" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000046" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000047" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000048" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000049" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000050" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000051" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000052" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000053" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000054" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000055" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000056" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000057" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000059" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000060" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000061" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000062" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000063" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000064" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000065" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000066" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000067" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000068" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000069" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000070" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000071" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000072" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000073" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000074" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000075" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000076" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000077" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000078" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000079" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000080" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000081" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000082" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000083" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000084" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000085" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000086" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000087" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000088" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000089" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000090" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000091" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000092" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000093" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000094" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000095" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000096" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000097" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000098" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000100" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000101" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000103" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000104" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000106" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000107" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000109" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000110" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000111" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000113" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000114" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000115" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000116" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000117" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000119" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000120" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000121" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000122" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000123" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000124" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000125" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000126" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000127" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000128" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000129" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000130" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000131" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000132" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000133" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000134" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000135" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000136" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000137" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000138" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000139" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000140" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000141" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000142" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000143" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000144" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000145" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000146" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000147" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000148" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000150" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000151" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000152" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000154" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000155" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000156" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000158" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000159" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000160" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000162" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000163" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000164" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="http://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000165" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><br />
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The Cisco ASA Botnet Traffic Filter is an effective tool that enterprises can use to gain insights into one of today's leading threats. In conjunction with accurate threat data provided by Cisco Security Intelligence Operations and Cisco Global Correlation for IPS, the Botnet Traffic Filter provides an industry-leading solution to combat modern botnet threats in a dynamic environment.</div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-22771586614891353662013-11-12T14:57:00.001-08:002016-06-02T06:04:48.052-07:00- Cisco Networking: Threat Control and Containment - New Strategies for a Changed Threat Landscape<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Introduction</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Network security threats have the potential to significantly impede productivity, disrupt business and operations, and result in loss of information-which can lead to financial losses and potential non-compliance. Hackers continue to develop new techniques to gain access to information, for their own financial gain.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The evolution and complexity of threats must be addressed with proactive IT security strategies that maintain business continuity, provide infrastructure wide threat visibility and protection, and simplify day-to-day network management. The entire security infrastructure-network, systems, and management-must work in concert to proactively defend against a wide array of threats, and reduce the mean time to respond and mitigate during an event. Threat control solutions from Cisco<span class="cCMTDefault" style="vertical-align: super;">®</span> deliver comprehensive and proactive network defense, streamlined policy and system management, and business continuity.</div>
<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
The Changed Threat Landscape</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
At one time, fame was a primary incentive for hackers to take advantage of system and network vulnerabilities. Today, systems are increasingly exploited for financial gain. This change in motivation has resulted in a change in methods, which have made system exploits harder than ever to detect and mitigate (Figure 1).</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Hackers are adapting more quickly than software and operating system vendors can develop patches and workarounds; often, their exploits are so targeted that there are no signatures to stop them. And in addition to broad-scale worm and virus outbreaks, IT organizations need to protect against network threats that are specifically designed to avoid detection and bypass traditional defenses.</div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 1.</b> The Changed Threat Landscape</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns171/ns441/images/0900aecd805bae31_null_null_null_01_23_07-1.jpg" height="296" hspace="0" id="wp3000001" style="border: 0px;" vspace="0" width="482" /></div>
<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Adapting Policies and Technology to Combat Emerging Threats</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
New threats (often referred to as "day-zero" threats) can be more difficult to detect and mitigate, because of the lack of signatures or knowledge to prevent them. Unfortunately, many IT departments have few processes or tools available that can be automatically deployed to proactively prevent attacks, intrusions, or other system and application exploits. Additionally, the burden of daily system management, user calls and repairs, audit preparation, and a host of other details often impede an organization's ability to focus on threats that are more difficult to detect.</div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 2.</b></div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns171/ns441/images/0900aecd805bae31_null_null_null_01_23_07-2.jpg" height="322" hspace="0" id="wp3000002" style="border: 0px;" vspace="0" width="530" /></div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
As a result of the increase in financially motivated, targeted system attacks, IT departments require full visibility across the infrastructure to help minimize the time to respond during an event. Tools to capture policy violations, vulnerability exploits, and anomalous behavior are required to discern between suspicious and harmful traffic.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
360-Degree Threat Visibility and Protection</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Increased visibility, deeper into systems and broader across the infrastructure, is required to combat both emerging and well-defined threats. By capturing policy violations, vulnerability exploits, and anomalous behavior across the infrastructure, organizations can more rapidly identify threats.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Simplified Threat Control</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
IT departments are continually expanding their tool portfolios to combat threats, generally resulting in a larger toolkit to work with: more systems, more processes, and more alarms. Managing security policies across heterogeneous networks helps assure control over new vulnerabilities. Tight linkage between the security intelligence system and security policy management system is required for minimal delay in deploying new policies to adapt to immediate threats.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Business Continuity</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Hackers continue to find more entry points into the network. As a result, businesses need threat prevention strategies that are adaptable. Proactive threat defense requires not only defense in depth, but a strategy across all layers and elements of the infrastructure. Collaboration between endpoints, network, and management can enable faster response during events and can provide a far better level of security than discrete platforms.</div>
<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Threat Vectors</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Threats, both day-zero and well-defined, have numerous entry points into a network, all of which need to be considered for a comprehensive threat control policy and system management. Following is a brief overview of attack vectors, and some areas to consider as you continue to refine your threat control infrastructure.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Protecting Trusted Users from Internet Threats</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Stopping the introduction, execution, and spread of threats from trusted users and computers can have dramatic positive effects on user and IT productivity. In many cases, processes can be automated to assure maximum protection from well-understood threats, such as viruses. When dealing with worms and spyware, proactive protection mechanisms must be employed to detect and mitigate those threats before they cause damage to the organization.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
There are three primary entrance vehicles for a threat to enter a network: business communications, infected systems, and internal propagation.</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Business Communications</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
E-mail, Websites, file transfers, instant messaging, and other standard forms of business and personal communications have the potential to introduce myriad threats to unsuspecting users. Because many users assume that these methods of communications are completely secure, they do not take extra measures to protect themselves. In many cases, threats are "nuisances" and are handled by standard antivirus software. Spyware and data leakage, however, can be more difficult to detect and monitor; this is often a targeted exploit of unsuspecting users.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Businesses require a comprehensive approach to combat well-known threats in the most efficient manner possible, and a process to help ensure visibility into emerging threats. By preventing threats such as spyware, viruses, and spam from entering through the gateway in the first place, administrators can reduce the burden of full endpoint scanning and the resulting performance effects this causes.</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Infected Systems</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Whether online or offline, mobile and desktop PCs have the potential to pick up infections from various sources, and introduce these infections to their networks. This could happen when a mobile PC connects to the Internet using public Wi-Fi access and then returns to a corporate office or remote site, or connects over a VPN. Mobile PCs are also a common target for theft; this is another way that they can become infected. These PCs are also at risk because they are often used by people other than the intended employee, such as family members.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Assuring that endpoints are compliant with corporate policies and have an acceptable security posture is important in making sure new threats do not enter the network from otherwise trusted users and devices. By validating endpoint security posture before allowing a system to access the network, administrators can broadly implement these controls in a "low-touch" fashion and dramatically reduce threat introduction.</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Internal Propagation</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Despite best efforts at preventing the infection of an internal system, many malware programs still manage to bypass security controls and attempt to activate and distribute copies of themselves to other trusted systems. Proliferation from the "inside" is often much easier than penetrating systems from outside the network. The activation and distribution of threats can be prevented by controlling anomalous behavior and unwanted software installation and implementation on the host machines. Also, day-zero exploits can be prevented by validating system behavior, such as memory and network utilization.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Protecting Servers from Attacks and Intrusions</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Critical information assets, such as HR records, financial data, user databases, and virtually all other electronic business information, must be classified by risk and protected as defined by corporate governance policies. New threats have emerged that have made detection and mitigation of infiltrations increasingly difficult. Tools and policies are available that proactively detect a potential threat before a vulnerability can be exploited, that provide broader visibility, and that improve detection and mitigation. These tools and policies can help minimize risk and reduce the time to respond during an attack or intrusion. Figure 3 shows some of the processes these tools use to determine what type of traffic can be safely allowed into the network</div>
<div class="pFigureCaptionCMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 12pt 0pt 12pt 47pt; text-indent: -47pt;">
<b>Figure 3.</b></div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
<img border="0" src="http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns171/ns441/images/0900aecd805bae31_null_null_null_01_23_07-3.jpg" height="234" hspace="0" id="wp3000003" style="border: 0px;" vspace="0" width="513" /></div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Event Correlation and Reducing Information Overload</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Security, network, and host devices often generate tremendous volumes of information during security events of any scale. Processing this information manually can overload IT groups, making standard tools ineffective and making it nearly impossible to find real threats in real time. Maximizing the efficacy of the security infrastructure can be achieved by looking for patterns in threats, correlating those events into risk categories, and determining a best course of action to mitigate them. In some cases, this can reduce the time to identify and respond by 95 percent. Many IT groups can now isolate a threat in less than two hours, that would have previously taken them two days.</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Vulnerability and Attack Protection</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
In order to increase security visibility and reduce the time to respond, technology must be deployed to detect intrusion and vulnerability exploitation attempts at various points in the network. Preventing threats from compromising critical systems by rapidly detecting anomalous behavior and known threat signatures can be achieved by implementing intrusion detection and prevention at all points of entry to the network, and at various internal demarcation points within the intranet. Intrusion detection and prevention can identify different types of exploit attempts and can notify administrators immediately of an attempt to improperly access a system. Intrusion prevention can stop those attempts before they cause damage.</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
System Intrusion Prevention</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Operating system and application vulnerabilities can be exploited by various means, particularly when other network-layer defenses have been bypassed. After a system has been accessed, it is important to minimize any potential damage or loss. This means rapidly notifying administrators of a system breach, putting appropriate countermeasures along the attack path, and preventing the improper viewing or removal of information and potential damage caused to the system itself. Administrators can better protect server resources by employing endpoint intrusion prevention, helping minimize the effect of day-zero threats, and preventing further attack propagation. Endpoint intrusion prevention can prevent certain types of behavior, including binary manipulation, keystroke logging, improper network utilization, and other system behaviors.</div>
<div class="pSubhead2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Where to Begin</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Most organizations have tools in place that can be used as a starting point to develop a robust threat prevention architecture. Technology can be introduced in phases as the security strategy for the company is revised. Security processes should be periodically reviewed to assure the organization is adopting best practices. A comprehensive, proactive security strategy is a constantly evolving process; identifying the crucial points is an important first step.</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Maximize the Efficacy of Your Existing Security Infrastructure</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Most organizations have already deployed firewalls and antivirus solutions. These products help in the first and last lines of defense and can provide invaluable information to administrators as to the status of the network at any given time.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 1:</span> Deploy a threat correlation and alarm management system to maximize the effectiveness of alarms, policy violations, and logs. This will help minimize the amount of time IT staff must spend manually parsing log entries, and provides significant improvements into threat visibility.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> The Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS). For more information, visit <a href="http://www.cisco.com/go/mars" style="color: #3366cc;">http://www.cisco.com/go/mars</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 2:</span> Revisit your perimeter security technology and policies to assure that new attack vectors are being addressed, such as protocol anomalies, application-based attacks, and intrusions. This will not only help in addressing current needs based on the changed threat landscape, but will also help position the infrastructure for the inevitable changes that will come as new vulnerabilities, and the methods to exploit them, are discovered.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco ASA 5500 Series Adaptive Security Appliances. For more information, visit<a href="http://www.cisco.com/go/asa" style="color: #3366cc;">http://www.cisco.com/go/asa</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 3:</span> Consider obtaining services that can help distill the numerous security advisories and customize them to your business and organizational needs. This can help minimize the time the IT department spends on reviewing new threat alerts from groups such as CERT or SANS, so they can focus in on the threats that are directly relevant to your organization.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco IntelliShield Alert Manager. For more information, visit <a href="http://www.cisco.com/go/intellishield" style="color: #3366cc;">http://www.cisco.com/go/intellishield</a>.</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Fortify the Remote Sites of the Organization</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Remote sites, including branch and satellite offices, partner locations, and remote users, increase the chances that threats will be introduced into an organization. Wireless networks, proper access control (including into the facilities), and unmanaged devices can pose challenges when trying to protect critical information and end systems.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 1:</span> Deploy wireless authentication and rogue wireless detection to help assure that unauthorized users are not gaining unrestricted access to the infrastructure.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco wireless security solutions. For more information, visit: <a href="http://www.cisco.com/go/wirelesssecurity" style="color: #3366cc;">http://www.cisco.com/go/wirelesssecurity</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 2:</span> Consider performing a wireless vulnerability assessment that can identify exposure in your wireless infrastructure and can recommend solutions.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco Wireless Security Posture Assessments. For more information, visit:<a href="http://www.cisco.com/go/securityconsulting" style="color: #3366cc;">http://www.cisco.com/go/securityconsulting</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 3:</span> Make sure that endpoints are properly secured and are not propagating threats into the network, infecting other users, and potentially providing launching points for attacks and intrusions. Endpoints can be infected by threats that might not be recognized by antivirus and anti-spyware software. It is important to prevent endpoints from inadvertently implementing malicious code, gathering information and sending it to a hacker, or performing other behaviors that can be a threat to both the endpoint and the infrastructure at large.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco Security Agent Desktop. For more information, visit: <a href="http://www.cisco.com/go/csa" style="color: #3366cc;">http://www.cisco.com/go/csa</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 4:</span> Deploy branch intrusion prevention to prevent hackers from gaining entry to the corporate network through a remote site. Intrusion prevention systems (IPSs) can be deployed on branch routers and can help prevent against unauthorized entry and help protect the branch server infrastructure from being compromised.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco IOS<span class="cCMTDefault" style="vertical-align: super;">®</span> Software IPS. For more information, visit: <a href="http://www.cisco.com/go/ips" style="color: #3366cc;">http://www.cisco.com/go/ips</a>. Cisco Services for IPS provide ongoing signature file updates, operating system and application software updates, and hardware and software support to keep Cisco IPS solutions continually up to date. For more information, visit: [[add URL]].</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 5:</span> Deploy remote gateway antivirus, anti-spam, and anti-spyware software to protect the network's endpoints and infrastructure, particularly on devices that are unmanaged or where security controls have been turned off by the user. "Scrubbing" transmissions for infected code, such as viruses, spyware, and spam, can dramatically improve system security and network performance.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco ASA 5500 Series Anti-X Edition. For more information, visit: <a href="http://www.cisco.com/go/asa" style="color: #3366cc;">http://www.cisco.com/go/asa</a>.</div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Day-Zero Protection and Enhanced Threat Visibility</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Server, system, and application infrastructure protection should be fortified to protect against day-zero exploits and assure conformance to governance policies and regulations. Incremental changes to an organization's existing security technology can dramatically improve the security posture of the organization. These changes can also help increase the visibility into attack types and help IT groups reduce the time required to detect and respond to an event.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 1:</span> Review and update intrusion and attack protection mechanisms, accounting for both signature and traffic pattern anomaly detection. IPS signatures should be evaluated regularly; in many cases, these can be aided by third-party IPS signature services. Best practices should be followed with industry peers on preventing exploitation of system vulnerabilities. Both signature and anomaly detection should be employed to assure maximum coverage and detection accuracy.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco IPS 4200 Series Sensors, Cisco Catalyst 6500 Series Intrusion Detection System Module (IDSM-2), and Cisco ASA 5500 Series IPS Edition. For more information, visit:</div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Cisco IPS 4200 Series: <a href="http://www.cisco.com/go/ips" style="color: #3366cc;">http://www.cisco.com/go/ips</a></div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Cisco Catalyst IDSM-2: <a href="http://www.cisco.com/en/US/products/hw/modules/ps2706/ps5058/index.html" style="color: #3366cc;">http://www.cisco.com/en/US/products/hw/modules/ps2706/ps5058/index.html</a></div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Cisco ASA 5500 Series IPS Edition: <a href="http://www.cisco.com/go/asa" style="color: #3366cc;">http://www.cisco.com/go/asa</a></div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 2:</span> Deploy endpoint protection on servers and user computers to protect systems and provide threat details to administrators. Anomalous behavior at the endpoint, including inadvertent code implementation, keystroke logging, and information farming and transit, can be detected, accounted for, and stopped. Systems can use the same tools to report these threats back to central management consoles and can help refine signatures, dramatically improving signature fidelity and further reducing response times.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco Security Agent. For more information, visit: <a href="http://www.cisco.com/go/csa" style="color: #3366cc;">http://www.cisco.com/go/csa</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 3:</span> Examine policy management and threat correlation techniques to help minimize response times during an event. By reducing the amount of information to review and the steps needed to mitigate an attack or intrusion, IT administrators can reduce the time to respond-in some cases by 90 percent. Coordinated policy management and threat management tools are important in achieving that goal.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solutions:</span> Cisco Security Manager and Cisco Security MARS. For more information, visit:</div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Cisco Security Manager: <a href="http://www.cisco.com/go/csmanager" style="color: #3366cc;">http://www.cisco.com/go/csmanager</a></div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Cisco Security MARS: <a href="http://www.cisco.com/go/mars" style="color: #3366cc;">http://www.cisco.com/go/mars</a></div>
<div class="pSubhead3CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 9pt; margin: 14px 0pt 3px; text-indent: 0pt;">
Control Network Access and Endpoint Policy</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Access to internal systems, networks, and applications should be limited to trusted users, and care should be taken to validate the security posture of endpoints before access is granted. This can dramatically reduce the introduction, accidental or intentional, of threats to the infrastructure.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 1:</span> Deploy Network Admission Control (NAC) at wireless and public aggregation points. NAC helps prevent inadvertent admission over trusted links and allows greater flexibility in admissions for all users. Provisions should initially be made for wireless security from mobile PCs; next steps include moving to more comprehensive admission control of the device and user.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco NAC. For more information, visit: <a href="http://www.cisco.com/go/nac" style="color: #3366cc;">http://www.cisco.com/go/nac</a><span class="cCMTDefault">.</span></div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 2:</span> Review perimeter firewall infrastructure and account for new types of vulnerabilities. Firewall policies should be reviewed, taking into account new application-level and protocol-level exploits. Management should allow for the rapid deployment of new firewall policies and access lists to help contain day-zero threats.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution</span><span class="cCMTDefault" style="font-weight: bold;">:</span> <span class="cCMTDefault"></span><span class="cCMTDefault">Cisco Firewalls.</span> <span class="cCMTDefault"></span>For more information, visit: <a href="http://www.cisco.com/go/firewall" style="color: #3366cc;">http://www.cisco.com/go/firewall</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 3:</span> Review corporate LAN access policies and deploy intranet-wide NAC. With proper LAN-connected protection and perimeter controls in place, verify user access policies based on user role and access requirements by enforcing admission control policies for all intranet and extranet users.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco NAC. For more information, visit: <a href="http://www.cisco.com/go/nac" style="color: #3366cc;">http://www.cisco.com/go/nac</a>.</div>
<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
A Systems Approach to Threat Control and Containment</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
To effectively deploy a threat control solution, a lifecycle systems approach is recommended. The best way to manage network security risk and compliance requirements is through a systematic, architectural approach that addresses the entire lifecycle of the network, and that is built upon a standards-based network security infrastructure. The Cisco Lifecycle Services approach to security helps organizations realize the maximum benefits from network and security technologies, and helps them maintain comprehensive protection as their networks evolve.</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
Working with partners, Cisco provides a range of services based on proven methodologies and best practices to deploy threat control systems that are effectively designed, deployed, managed, and integrated into the infrastructure and business processes.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 1:</span> Understand the network's current security strengths and vulnerabilities. Cisco Security Services employ a range of methodologies to evaluate the network's ability to prevent, detect, and mitigate threats. Vulnerability assessments and security architecture reviews are effective tools for identifying vulnerabilities at the system and network level.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco Security Posture Assessments and Security Architecture Review Services. For more information, visit:<a href="http://www.cisco.com/go/securityconsulting" style="color: #3366cc;">http://www.cisco.com/go/securityconsulting</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 2:</span> Plan and design a threat control system based on an in-depth, systemwide methodology and accepted industry standards. A strong design and integration plan can increase the effectiveness of threat control solutions, shorten deployment time, and reduce overall integration costs. Cisco can provide expert design assistance in developing a strong threat control design.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco Security Design Services. For more information, visit: <a href="http://www.cisco.com/go/securityconsulting" style="color: #3366cc;">http://www.cisco.com/go/securityconsulting</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 3:</span> Deploy, configure, and integrate new threat control systems into the network infrastructure, based on an understanding of the overall security architecture. Multilayer defenses are necessary, but may increase the complexity of managing network security and make it more difficult to identify and mitigate threats. Bringing sound network integration expertise, Cisco can accelerate the successful implementation of threat control solutions.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solution:</span> Cisco Security Deployment Services. For more information, visit: <a href="http://www.cisco.com/go/securityconsulting" style="color: #3366cc;">http://www.cisco.com/go/securityconsulting</a>.</div>
<div class="pBulletCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in; text-indent: -0.07in;">
• <span class="cCMTDefault" style="font-weight: bold;">Recommendation 4:</span> Proactively manage your IT infrastructure by anticipating, identifying, and resolving issues quickly and accurately. A threat control system should include timely, accurate, and credible security intelligence combined with a threat correlation and alarm management system. Consider obtaining remote management services to proactively manage your threat control infrastructure.</div>
<div class="pBulletIndentCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.18in;">
<span class="cCMTDefault" style="font-weight: bold;">Cisco solutions:</span> Cisco Security Intellishield Alert Manager, Cisco Services for IPS, Cisco Remote Management Services. For more information, visit:</div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Cisco Security IntelliShield Alert Manager: <a href="http://www.cisco.com/go/intellishield" style="color: #3366cc;">http://www.cisco.com/go/intellishield</a></div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Cisco Services for IPS: <a href="http://www.cisco.com/en/US/products/ps6076/serv_group_home.html" style="color: #3366cc;">http://www.cisco.com/en/US/products/ps6076/serv_group_home.html</a></div>
<div class="pBullet2CMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 3pt 0.3in; text-indent: -0.13in;">
– Cisco Remote Management Services: <a href="http://www.cisco.com/go/ros" style="color: #3366cc;">http://www.cisco.com/go/ros</a></div>
<div class="pSubhead1CMT" style="background-color: white; color: #336666; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 10pt; font-weight: bold; margin: 14px 0pt 3px; text-indent: 0pt;">
Summary</div>
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
The threat landscape has changed. IT and security operations teams must control a vast array of threats to the network infrastructure and must simultaneously assure network access for all who need it. Managing the volume of alarms and information and assuring minimal damage during an event are crucial; as a result, IT and security operations teams are pressured to reduce their time to respond in a crisis.</div>
<span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000003" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000004" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000005" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000006" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000007" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000008" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000009" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000010" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000011" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000012" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000013" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000014" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000015" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000016" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000017" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000018" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000019" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000020" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000021" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000022" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000023" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000024" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000025" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000026" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000027" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000028" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000029" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000030" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000031" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000032" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000033" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000034" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000035" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000036" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000037" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000038" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000039" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000040" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000041" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000042" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000043" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000044" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000045" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000046" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000047" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000048" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000049" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000050" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000051" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000052" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000053" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000054" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000055" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000056" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000057" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000058" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000059" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000060" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000061" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000062" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000063" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000064" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000065" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000066" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000067" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000068" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000069" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000070" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000071" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000072" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000073" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000074" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000075" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000076" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000077" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000078" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000079" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000080" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000081" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000082" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000083" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000084" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000085" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000086" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000087" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000088" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000089" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000090" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000091" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000092" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000093" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000094" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000095" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000096" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000097" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000098" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000099" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000100" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000101" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000102" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><a href="https://www.blogger.com/blogger.g?blogID=4590944285337051043" name="wp9000103" style="background-color: white; font-family: arial, helvetica, sans-serif; font-size: 12px;"></a><span style="background-color: white; font-family: "arial" , "helvetica" , sans-serif; font-size: 12px;"></span><br />
<div class="pBodyCMT" style="background-color: white; font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 12px; margin: 0pt 0pt 7pt; text-indent: 0pt;">
From viruses to phishing to hijacking to intrusions, the evolution and complexity of threats must be addressed in a way that helps IT departments make rapid decisions based on all intelligence available across the entire IT infrastructure. The network itself must provide accurate, detailed threat analysis and must prevent, detect, and mitigate both emerging and well-defined threats to help ease the burden of information overload to the IT department and enable a shorter time to respond and remediate. The Cisco Self-Defending Network and Cisco threat control solutions help IT departments deal with the ever-changing landscape of threats and mitigate the damage these threats aim to cause.</div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-75047483801386275342013-11-07T05:08:00.003-08:002016-06-02T06:04:25.984-07:00- Cisco Networking: MAC address flooding attack<br />
<br />
MAC address
flooding attack is very common security attack. MAC address table
in a switch has the MAC addresses available on a given physical port of a switch
and the associated VLAN
parameters for each.<br />
MAC flooding attacks are sometimes called MAC address table overflow attacks.
To understand the mechanism of a MAC address table overflow attack we must
recall how does a switch work in the first place.<span id="more-668"></span><br />
<b>Switch before attack</b><br />
When switch receives a frame, the switch looks in the MAC address table
(sometimes called CAM table) for the destination MAC address. Cisco Catalyst
switch models use a MAC address table for Layer 2 switching. When frames arrive
on switch ports, the source MAC addresses are learned from Layer 2 packet header
and recorded in the MAC address table. If the switch has already learned the mac
address of the computer connected to his particular port then an entry exists
for the MAC address. In this case the switch forwards the frame to the MAC
address port designated in the MAC address table. If the MAC address does not
exist, the switch acts like a hub and forwards the frame out every other port on
the switch.<br />
<address>
<img alt="Switch as hub empty mac address table" class="size-medium wp-image-669 alignnone" src="http://howdoesinternetwork.com/wp-content/uploads/2011/12/1-Switch-as-hub-empty-mac-address-table-300x171.jpg" height="171" title="1 Switch as hub empty mac address table" width="300" /><br />Picture 1 - Switch acts as hub with empty mac address
table</address>
Computer A sends traffic to computer B. The switch receives the frames and
looks up the destination MAC address in its MAC address table. If the switch
does not have the destination MAC in the MAC address table, the switch then
copies the frame and sends it out every switch port like a broadcast. This means
that not only PC B receives the frame, PC C also receives the frame from host A to host B, but because the
destination MAC address of that frame is host B, host C drops that frame.<br />
<address>
<img alt="Switch learning mac address - populating table" class="alignnone size-medium wp-image-670" src="http://howdoesinternetwork.com/wp-content/uploads/2011/12/2-Switch-learning-mac-address-populating-table-300x171.jpg" height="171" title="2 Switch learning mac address - populating table" width="300" /><br />Picture 2 - Switch learns mac address from source MAC
address in the layer 2 headers from frames – switch is populating his mac
table</address>
<b>Normal switch function</b><br />
PC B receives the frame and sends a reply to PC A. The switch then learns
that the MAC address for PC B is located on port 2 and writes that information
into the MAC address table. From now on any frame sent by host A (or any other
host) to host B is forwarded to port 2 of the switch and not broadcast out every
port. The switch is working like it should. This is the main goal of switch
functionality, to have separate collision domain for
each port on the switch.<br />
<address>
<img alt="Switch acts like switch - mac address table complete" src="http://howdoesinternetwork.com/wp-content/uploads/2011/12/3-Switch-acts-like-switch-mac-address-table-complete-300x171.jpg" height="171" title="3 Switch acts like switch - mac address table complete" width="300" /><br />Picture 3 - When the switch learns about all MAC
addresses on his different ports switch acts like switch – mac address table
complete</address>
<b>Attack</b><br />
But this is where the attacker is coming into play. The key to understanding
how MAC address table overflow attacks work is to know that MAC address tables
are limited in size. MAC flooding makes use of this limitation to send to the
switch a whole bunch of fake source MAC addresses until the switch MAC address
table is fully loaded and can not save any more MAC address – Port mapping
entries. The switch then enters into a fail-open mode that means that it starts
acting as a hub. In this situation switch will broadcasts all received packets
to all the machines on the network. As a
result, the attacker (in our case “PC C”) can see all the frames sent from a
victim host to another host without a MAC address table entry.<br />
<br />
<address>
<img alt="Beginning of the Switch Mac flooding attack" class="alignnone size-medium wp-image-672" src="http://howdoesinternetwork.com/wp-content/uploads/2011/12/4-Switch-Mac-flooding-attack-300x125.jpg" height="125" title="4 Switch Mac flooding attack" width="300" /><br />Picture 4 - Switch Mac flooding attack will populate
the entire mac address table with bogus mac addresses</address>
In this case, an attacker will use legitimate tools for malicious actions.
The figure shows how an attacker can use the normal operating characteristics of
the switch to stop the switch from operating.<br />
Let’s get into more detail about filling up the MAC address table. To do this
attacker uses network attack
tools for MAC. The network intruder uses the attack tool to flood the switch
with a large number of invalid source MAC addresses until the MAC address table
fills up. When the MAC address table is full, the switch floods all ports with
incoming traffic because it cannot find the port number for a particular MAC
address in the MAC address table. The switch, in essence, acts like a hub.<br />
Network attack tools are generating about 160,000 MAC entries on a switch per
minute. Depending on the type of switch, the MAC address table size can be
different but is always vulnerable to the flood attack. Sooner or later the
table will be filled up. In the picture, the attack tool is running on the host
with MAC address C. This tool floods a switch with frames that contain random
bogus source and destination MAC and IP addresses. The attacker will need just a
little bit of time for the MAC address table to fill up. In this moment it
cannot accept new entries. When the MAC address table fills up with invalid
source MAC addresses, the switch begins to send all frames that it receives to
every port.<br />
<address>
<img alt="Switch mac address table full of bogus mac addresses acts like a hub" class="alignnone size-medium wp-image-673" src="http://howdoesinternetwork.com/wp-content/uploads/2011/12/5-Switch-mac-address-table-full-of-bogus-mac-addresses-acts-like-a-hub1-300x234.jpg" height="234" title="5 Switch mac address table full of bogus mac addresses acts like a hub" width="300" /><br />Pictures 5 - Switch mac address table full of bogus mac
addresses acts like a hub and is vulnerable to frames sniffing.</address>
<br />
As long as the network attack tool is running, the MAC address table on the
switch remains full. When this happens, the switch begins to broadcast all
received frames out every port so that frames sent from host A to host B are also broadcast
out of port 3 on the switch and the attacker can sniff them.Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-11594405348129394262013-10-28T12:53:00.003-07:002016-06-02T06:05:07.160-07:00- Cisco Networking: Advanced Zone-Base Firewall<div style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin-bottom: 1.3em; padding: 0px;">
<img alt="topology-38.png" class="img-center" src="http://meddane.e-monsite.com/medias/images/topology-38.png?fx=r_640_400" href="http://meddane.e-monsite.com/medias/images/topology-38.png" rel="iframe" style="border: 0px; display: block; margin: 5px auto; padding: 0px;" title="topology-38.png" /></div>
<div style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin-bottom: 1.3em; padding: 0px;">
</div>
<div style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin-bottom: 1.3em; padding: 0px;">
</div>
<div style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin-bottom: 1.3em; padding: 0px;">
<b style="margin: 0px; padding: 0px;">Advanced Zone-Based Firewall:</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">-Inside-to-Outside Traffic</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Create a zones :</b><br />
<br style="margin: 0px; padding: 0px;" />
zone security Inside<br />
description Inside network<br />
zone security Outside<br />
description Outside network<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">-Traffic permitted to any destination on the Internet (HTTP, HTTPS, FTP, ICMP)</b><br />
<b style="margin: 0px; padding: 0px;">-Traffic permitted to the Internet service provider’s (ISPs) servers (SMTP, POP3, DNS)</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">First create Class Map Matching the Internet Traffic:</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-any InternetTraffic<br />
match protocol http<br />
match protocol ftp<br />
match protocol icmp<br />
match protocol https<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Create class-map Matching Traffic Toward ISP Servers:</b><br />
<b style="margin: 0px; padding: 0px;">In the previous class-map ,we used the match-any and now for the traffic toward ISP Servers we use the match-all because we must specify two condition ,a list of protocol toward a set of IP Addresses so we need a match-all keyword, remember that:</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Match-any is the equivalent of OR Logic.</b><br />
<b style="margin: 0px; padding: 0px;">match-all is the equivalent of AND Logic</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">So we must create one class-map called ISPTraffic to specify a list of protocol to be inspected and another class-map called ToISP matching the class ISPTraffic and an access-list called ISPServers which define a list of ip addresses of the servers located at the ISP:</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-any ISPTraffic<br />
match protocol dns<br />
match protocol smtp<br />
match protocol pop3<br />
!<br />
class-map type inspect match-all ToISP<br />
match class-map ISPTraffic<br />
match access-group name ISPServers<br />
!<br />
ip access-list extended ISPServers<br />
permit ip any host 172.16.0.1<br />
permit ip any host 172.16.0.2<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Now we create an actin with a policy-map following the firewall policy as follow:</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">-Inspect all traffic in classes ToISP and InternetTraffic</b><br />
<b style="margin: 0px; padding: 0px;">-Drop and log all the other traffic</b><br />
<br style="margin: 0px; padding: 0px;" />
policy-map type inspect InsideToOutside<br />
class type inspect ToISP<br />
inspect<br />
class type inspect InternetTraffic<br />
inspect<br />
class class-default<br />
drop log<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Now we create a zone-pair to define the direction and the action or the policy-map we want apply as follow:</b><br />
<br style="margin: 0px; padding: 0px;" />
zone-pair security InsideToOutside source Inside destination Outside<br />
service-policy type inspect InsideToOutside<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Finally assign the interfaces to the zone:</b><br />
<br style="margin: 0px; padding: 0px;" />
interface FastEthernet0/0<br />
zone-member security Inside<br />
!<br />
interface Serial0/0<br />
zone-member security Outside<br />
<br style="margin: 0px; padding: 0px;" />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">With the dmz zone:</b><br />
<b style="margin: 0px; padding: 0px;">We create another zone:</b><br />
<b style="margin: 0px; padding: 0px;">zone security Dmz</b><br />
<b style="margin: 0px; padding: 0px;">description Dmz network</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Define the class maps matching the basic protocol sets (ping, web traffic, mail delivery, and network management)</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">One class-map to inspect the ICMP echo and echo-reply:</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-any ping<br />
match access-group name IcmpEcho<br />
!<br />
ip access-list extended IcmpEcho<br />
permit icmp any any echo<br />
permit icmp any any echo-reply<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">One class-map matching the web traffic, either http or https</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-any WebTraffic<br />
match protocol http<br />
match protocol https<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">One class-map matching FTP traffic for the file transfer:</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect FileTransfer<br />
match protocol ftp<br />
<br style="margin: 0px; padding: 0px;" />
One class-map for public management:<br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-any PublicManagement<br />
match protocol ftp<br />
match protocol ssh<br />
match protocol snmp<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">One class-map matching the protocol SMTP for mail:</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-any SMTP<br />
match protocol smtp extended<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">One class-map matching the DNS protocol :</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-any DNS<br />
match protocol dns<br />
<br style="margin: 0px; padding: 0px;" />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">we refined traffic class definitions where a specific protocol (for example SMTP) will be allowed in only a specific server (example the inside mail server):</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">First create a class-map matching the class-map defined for the SMTP protocol (configured above and called SMTP and and an access-list which define the internal mail server 10.0.0.10</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-all MailDelivery<br />
match class-map SMTP<br />
match access-group name InternalServer<br />
<br style="margin: 0px; padding: 0px;" />
ip access-list extended InternalServer<br />
permit ip any host 10.0.0.10<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Next we create a policy-map to match the class-map MailDelivery:</b><br />
<br style="margin: 0px; padding: 0px;" />
policy-map type inspect DmzToInside<br />
class type inspect MailDelivery<br />
inspect<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Next we create a zone pair to define the direction from the DMZ to Inside and the policy to be applied:</b><br />
<br style="margin: 0px; padding: 0px;" />
zone-pair security PerimeterToInside source DMZ destination Inside<br />
service-policy type inspect DmzToInside<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">we configure an access-list listing the DMZ Server 192.168.0.2:</b><br />
<br style="margin: 0px; padding: 0px;" />
ip access-list extended DmzServer<br />
permit ip any host 192.168.0.2<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">And we define a list of protocol in the following class-map:</b><br />
<b style="margin: 0px; padding: 0px;">Notice we just specify the classes configured above for each protocol and inject them in the class-map PublicProtocols with match class command ,instead of match protocols ,less tedious and more efficient than configuring each protocol with match protocol command:</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-any PublicProtocols<br />
match class-map SMTP<br />
match class-map WebTraffic<br />
match class-map DNS<br />
match class-map ping<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Next we create a class-map to match the list of protocols included in the class called PublicProtocols and the access-list called DmzServer,notice the match-all keyword used ,because we have two conditions:</b><br />
<br style="margin: 0px; padding: 0px;" />
class-map type inspect match-all PublicTraffic<br />
match class-map PublicProtocols<br />
match access-group name DmzServer<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Now we create the policies :</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">1- traffic from inside to outside:</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">the policy-map matches two classes , WebTraffic and FileTransfer with the inspect action:</b><br />
<br style="margin: 0px; padding: 0px;" />
policy-map type inspect InsideToOutside<br />
class type inspect WebTraffic<br />
inspect<br />
class type inspect FileTransfer<br />
inspect<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Then we create the zone-pair to define the direction from inside to outside and matching the policy map:</b><br />
<br style="margin: 0px; padding: 0px;" />
zone-pair security InsideToOutside source Inside destination Outside<br />
service-policy type inspect InsideToOutside<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">2-Traffic from inside to DMZ:</b><br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">The policy-map matches two classes ,PublicTraffic and PublicManagement with the inspect action:</b><br />
<br style="margin: 0px; padding: 0px;" />
policy-map type inspect InsideToDmz<br />
class type inspect PublicTraffic<br />
inspect<br />
class type inspect PublicManagement<br />
inspect<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Then create a zone-pair to specify the direction from inside to dmz and the service policy to define the policy-map:</b><br />
<br style="margin: 0px; padding: 0px;" />
zone-pair security InsideToDmz source Inside destination Dmz<br />
service-policy type inspect InsideToDmz<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">3-Traffic from DMZ to outside:</b><br />
<b style="margin: 0px; padding: 0px;">Create a policy-map matching the classes DNS SMTP and ping with the inspect action:</b><br />
<br />
policy-map type inspect DmzToOutside<br />
class type inspect DNS<br />
inspect<br />
class type inspect SMTP<br />
inspect<br />
class type inspect ping<br />
inspect<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Next create a zone pair to define the direction dmz to the outside and the policy-map:</b><br />
<br style="margin: 0px; padding: 0px;" />
zone-pair security DmzToOutside source Dmz destination Outside<br />
service-policy type inspect DmzToOutside<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">4-Traffic from outside to DMZ:</b><br />
<b style="margin: 0px; padding: 0px;">create a policy map matching the class-map PublicTraffic with the inspect action:</b><br />
<br style="margin: 0px; padding: 0px;" />
policy-map type inspect OutsideToDmz<br />
class type inspect PublicTraffic<br />
inspect<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Then create a zone-pair to define the direction from outside to DMZ :</b></div>
<div style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin-bottom: 1.3em; padding: 0px;">
<br style="margin: 0px; padding: 0px;" />
zone-pair security OutsideToDmz source Outside destination Dmz<br />
service-policy type inspect OutsideToDmz<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">5-Traffic from DMZ to inside:</b><br />
<b style="margin: 0px; padding: 0px;">Create a policy-map matching the class MailDelivery (Internal SMTP Server) with the inspect action:</b><br />
<br style="margin: 0px; padding: 0px;" />
policy-map type inspect DmzToInside<br />
class type inspect MailDelivery<br />
inspect<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Then create a zone-pair to define the direction from dmz to inside and the policy-map(or the action) we want apply:</b><br />
<br style="margin: 0px; padding: 0px;" />
zone-pair security DmzToInside source Dmz destination Inside<br />
service-policy type inspect DmzToInside<br />
<br style="margin: 0px; padding: 0px;" />
<b style="margin: 0px; padding: 0px;">Assign the interfaces to the zones:</b><br />
<br style="margin: 0px; padding: 0px;" />
interface FastEthernet0/0<br />
zone-member security Inside<br />
<br style="margin: 0px; padding: 0px;" />
interface FastEthernet0/1<br />
zone-member security Dmz<br />
!<br />
interface Serial0/0<br />
zone-member security Outside</div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-4582068217801191822013-10-28T12:48:00.002-07:002016-06-02T06:05:23.888-07:00- Cisco Networking: ASA 8.4,NAT and DMZ<div style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin-bottom: 1.3em; padding: 0px;">
<img alt="topology-60.png" class="img-center" src="http://www.meddane.com/medias/images/topology-60.png?fx=r_640_400" height="285" style="border: 0px; display: block; margin: 5px auto; padding: 0px;" width="640" /><i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;"></b></i></div>
<h5 class="uiStreamMessage userContentWrapper" data-ft="{"type":1,"tn":"K"}" style="background-color: white; color: #cc0000; font-family: Arial, Helvetica, sans-serif; font-size: 1.4em; margin: 0px 0px 20px; padding: 0px;">
<span style="color: black; margin: 0px; padding: 0px;"><i style="margin: 0px; padding: 0px;">Basics Configuration of ASA 8.4 with the new NAT using object-group:</i></span></h5>
<div style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 13px; margin-bottom: 1.3em; padding: 0px;">
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Configure the outside interface with the default security level of 0:</b></i><br />
ciscoasa(config)# int g0<br />
ciscoasa(config-if)# ip add<br />
ciscoasa(config-if)# ip address 209.165.200.226 255.255.255.248<br />
ciscoasa(config-if)# namei<br />
ciscoasa(config-if)# nameif outside<br />
INFO: Security level for "outside" set to 0 by default.<br />
ciscoasa(config-if)# no shutdown<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Configure the inside interface with the default security level of 100:</b></i><br />
ciscoasa(config-if)# int g1<br />
ciscoasa(config-if)# ip address 192.168.1.1 255.255.255.0<br />
ciscoasa(config-if)# nameif insi<br />
ciscoasa(config-if)# nameif inside<br />
INFO: Security level for "inside" set to 100 by default.<br />
ciscoasa(config-if)# no shutdown<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Configure the DMZ interface with the security level of 70:</b></i><br />
ciscoasa(config-if)# int g2<br />
ciscoasa(config-if)# ip address 192.168.2.1 255.255.255.0<br />
ciscoasa(config-if)# security-level 70<br />
ciscoasa(config-if)# nameif DMZ<br />
ciscoasa(config-if)# no shutdown<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Configure the privileged EXEC password:</b></i><br />
ciscoasa(config)# enable password cisco<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Create a Telnet / SSH password:</b></i><br />
ciscoasa(config)# password cisco<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Identify which inside host can connect to the ASA using Telnet:</b></i><br />
ciscoasa(config)# telnet 192.168.1.10 255.255.255.255 inside<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Create a local database entry:</b></i><br />
ciscoasa(config)# username admin password cisco<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Identify which inside host can connect to the ASA using SSH:</b></i><br />
ciscoasa(config)# ssh 192.168.1.10 255.255.255.255 inside<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Enable the HTTP server and Identify which inside host can connect to the ASA using HTTP:</b></i><br />
ciscoasa(config)# http server enable<br />
ciscoasa(config)# http 192.168.1.10 255.255.255.255 in<br />
ciscoasa(config)# http 192.168.1.10 255.255.255.255 inside<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Configure a default route toward the outside zone:</b></i><br />
ciscoasa(config)# route outside 0.0.0.0 0.0.0.0 209.165.200.225<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Ping the router R1:</b></i><br />
ciscoasa(config)# ping 209.165.200.225<br />
Type escape sequence to abort.<br />
Sending 5, 100-byte ICMP Echos to 209.165.200.225, timeout is 2 seconds:<br />
!!!!!<br />
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/14/40 ms<br />
ciscoasa(config)#<br />
<br style="margin: 0px; padding: 0px;" />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Configuration of Dynamic and Static NAT:</b></i><br />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">.Translate inside users to a public pool and permit outside users access to Server DMZ. </b></i><br />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">.Create the public pool network object called NAT-POOL.Assign the outside public pool IP addresses.</b></i><br />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">.Create the Dynamic NAT object called NAT.Identify the inside hosts to translate from.Dynamically translate traffic inside users to the NAT-POOL network object.</b></i><br />
<br style="margin: 0px; padding: 0px;" />
ciscoasa(config)# object network NAT-POOL<br />
ciscoasa(config-network-object)# range<br />
ciscoasa(config-network-object)# range 209.165.200.240 209.165.200.246<br />
ciscoasa(config-network-object)# exi<br />
ciscoasa(config)# obkect<br />
ciscoasa(config)# object net<br />
ciscoasa(config)# object network NAT<br />
ciscoasa(config-network-object)# subnet 192.168.1.0 255.255.255.0<br />
ciscoasa(config-network-object)# nat (inside,out<br />
ciscoasa(config-network-object)# nat (inside,outside) dyn<br />
ciscoasa(config-network-object)# nat (inside,outside) dynamic NAT-POOL<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Create the static NAT network object called DMZ-NAT.Identify the inside SERVER IP address.Statically map the public IP address to the identified SERVER address.</b></i><br />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Create an ACL called OUTSIDE-to-SERVER permitting outside users to access the DMZ SERVER.Apply the ACL to the outside interface.</b></i><br />
ciscoasa(config)# object network DMZ-NAT<br />
ciscoasa(config-network-object)# host<br />
ciscoasa(config-network-object)# host 192.168.2.3<br />
ciscoasa(config-network-object)# nat<br />
ciscoasa(config-network-object)# nat (DMZ,ou<br />
ciscoasa(config-network-object)# nat (DMZ,outside) sta<br />
ciscoasa(config-network-object)# nat (DMZ,outside) static 209.200.165.227<br />
ciscoasa(config-network-object)# exi<br />
ciscoasa(config)# access<br />
ciscoasa(config)# access-list<br />
ciscoasa(config)# access-list OUTSIDE-to-SERVER per<br />
ciscoasa(config)# access-list OUTSIDE-to-SERVER permit ip an<br />
ciscoasa(config)# access-list OUTSIDE-to-SERVER permit ip any hos<br />
ciscoasa(config)# access-list OUTSIDE-to-SERVER permit ip any host 192.168.2.3<br />
ciscoasa(config)# access<br />
ciscoasa(config)# access-gr<br />
ciscoasa(config)# access-group OUTSIDE-to-SERVER in in<br />
ciscoasa(config)# access-group OUTSIDE-to-SERVER in interface ou<br />
ciscoasa(config)# access-group OUTSIDE-to-SERVER in interface outside<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">1-Make sure we have connectivity to the ASA first:</b></i><br />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Ping from the Inside_Host to ASA:</b></i><br />
C:\Documents and Settings\Administrator>ping 192.168.1.1<br />
<br style="margin: 0px; padding: 0px;" />
Pinging 192.168.1.1 with 32 bytes of data:<br />
<br style="margin: 0px; padding: 0px;" />
Reply from 192.168.1.1: bytes=32 time=5ms TTL=255<br />
Reply from 192.168.1.1: bytes=32 time=1ms TTL=255<br />
Reply from 192.168.1.1: bytes=32 time=3ms TTL=255<br />
Reply from 192.168.1.1: bytes=32 time=3ms TTL=255<br />
<br style="margin: 0px; padding: 0px;" />
Ping statistics for 192.168.1.1:<br />
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),<br />
Approximate round trip times in milli-seconds:<br />
Minimum = 1ms, Maximum = 5ms, Average = 3ms<br />
<br style="margin: 0px; padding: 0px;" />
C:\Documents and Settings\Administrator><br />
<br style="margin: 0px; padding: 0px;" />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Ping from Server to ASA:</b></i><br />
C:\Users\user>ping 192.168.2.1<br />
<br style="margin: 0px; padding: 0px;" />
Pinging 192.168.2.1 with 32 bytes of data:<br />
Reply from 192.168.2.1: bytes=32 time=5ms TTL=255<br />
Reply from 192.168.2.1: bytes=32 time=1ms TTL=255<br />
Reply from 192.168.2.1: bytes=32 time=3ms TTL=255<br />
Reply from 192.168.2.1: bytes=32 time=3ms TTL=255<br />
<br style="margin: 0px; padding: 0px;" />
Ping statistics for 192.168.2.1:<br />
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),<br />
Approximate round trip times in milli-seconds:<br />
Minimum = 1ms, Maximum = 5ms, Average = 3ms<br />
<br style="margin: 0px; padding: 0px;" />
C:\Users\user><br />
<br style="margin: 0px; padding: 0px;" />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Ping from Outside_Host to ASA:</b></i><br />
C:\Documents and Settings\Administrator>ping 209.165.200.226<br />
<br style="margin: 0px; padding: 0px;" />
Pinging 209.165.200.226 with 32 bytes of data:<br />
<br style="margin: 0px; padding: 0px;" />
Reply from 209.165.200.226: bytes=32 time=18ms TTL=254<br />
Reply from 209.165.200.226: bytes=32 time=17ms TTL=254<br />
Reply from 209.165.200.226: bytes=32 time=13ms TTL=254<br />
Reply from 209.165.200.226: bytes=32 time=17ms TTL=254<br />
<br style="margin: 0px; padding: 0px;" />
Ping statistics for 209.165.200.226:<br />
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),<br />
Approximate round trip times in milli-seconds:<br />
Minimum = 13ms, Maximum = 18ms, Average = 16ms<br />
<br style="margin: 0px; padding: 0px;" />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">2-Other Pings:</b></i><br />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Ping from Inside_Host to Outside_Host:</b></i><br />
C:\Documents and Settings\Administrator>ping 10.1.1.10<br />
<br style="margin: 0px; padding: 0px;" />
Pinging 10.1.1.10 with 32 bytes of data:<br />
<br style="margin: 0px; padding: 0px;" />
Request timed out.<br />
Request timed out.<br />
Request timed out.<br />
Request timed out.<br />
<br style="margin: 0px; padding: 0px;" />
Ping statistics for 10.1.1.10:<br />
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),<br />
<br style="margin: 0px; padding: 0px;" />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Ping From Server to Outside_Host:</b></i><br />
C:\Users\user>ping 10.1.1.10<br />
<br style="margin: 0px; padding: 0px;" />
Pinging 10.1.1.10 with 32 bytes of data:<br />
Request timed out.<br />
Request timed out.<br />
Request timed out.<br />
Request timed out.<br />
<br style="margin: 0px; padding: 0px;" />
Ping statistics for 10.1.1.10:<br />
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">The default MPF ((modular policy framework)of ASA does not allow icmp echo-replies back through the firewall on the outside interface. .</b></i><br />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">A fixup protocol icmp is a good way to fix it.It adds the stateful inspection feature for the ICMP protocol to the default-inspection-traffic class map referenced in the global_policy policy map.</b></i><br />
<br style="margin: 0px; padding: 0px;" />
ciscoasa(config)# fixup protocol icmp<br />
INFO: converting 'fixup protocol icmp ' to MPF commands<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">Let's verify the policy:</b></i><br />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">it’s now added to the list</b></i><br />
ciscoasa# sh run policy-map<br />
!<br />
policy-map global_policy<br />
class inspection_default<br />
inspect icmp<br />
inspect icmp error<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">The ping works:</b></i><br />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Ping from Inside_Host to Outside_Host:</b></i><br />
C:\Documents and Settings\Administrator>ping 10.1.1.10<br />
<br style="margin: 0px; padding: 0px;" />
Pinging 10.1.1.10 with 32 bytes of data:<br />
<br style="margin: 0px; padding: 0px;" />
Reply from 10.1.1.10: bytes=32 time=22ms TTL=127<br />
Reply from 10.1.1.10: bytes=32 time=22ms TTL=127<br />
Reply from 10.1.1.10: bytes=32 time=13ms TTL=127<br />
Reply from 10.1.1.10: bytes=32 time=25ms TTL=127<br />
<br style="margin: 0px; padding: 0px;" />
Ping statistics for 10.1.1.10:<br />
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),<br />
Approximate round trip times in milli-seconds:<br />
Minimum = 13ms, Maximum = 25ms, Average = 20ms<br />
<br style="margin: 0px; padding: 0px;" />
<i style="margin: 0px; padding: 0px;"><b style="margin: 0px; padding: 0px;">-Ping From Server to Outside_Host:</b></i><br />
C:\Users\user>ping 10.1.1.10<br />
<br style="margin: 0px; padding: 0px;" />
Pinging 10.1.1.10 with 32 bytes of data:<br />
Reply from 10.1.1.10: bytes=32 time=16ms TTL=127<br />
Reply from 10.1.1.10: bytes=32 time=22ms TTL=127<br />
Reply from 10.1.1.10: bytes=32 time=22ms TTL=127<br />
Reply from 10.1.1.10: bytes=32 time=18ms TTL=127<br />
<br style="margin: 0px; padding: 0px;" />
Ping statistics for 10.1.1.10:<br />
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),<br />
Approximate round trip times in milli-seconds:<br />
Minimum = 16ms, Maximum = 22ms, Average = 19ms</div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-41491002861943926132013-09-28T16:13:00.002-07:002016-06-02T06:05:44.894-07:00- Cisco Networking: Campus Network Design Guideline<br />
<div class="jive-content-body">
<div class="jive-rendered-content">
<h1>
Introduction</h1>
Building a
Campus network is more than only interconnecting physical network
infrastructure devices. The most challenging and important part of it is
the planning and design phases where different technical variables and
technologies need to be considered that could even effect the product
selection and the design entirely. Also a good design is the key to the
capability of a network to scale. This guideline will discuss some of
the technologies and design considerations that need to be taken into
account during the planning and design phases to design a scalable
campus network<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Note:<br />
Although
this guideline is generated based on Cisco’s recommendations and best
practices, however it is not a Cisco’s official document. It is
recommended to refer to some of the cisco design guides referenced in
each section in this guideline for more details<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h2>
Campus Network Overview</h2>
A
campus network is generally the portion of the network infrastructure
that provides access to network communication services and resources to
end users and devices that spread over a single geographic location. It
might be a single floor, a building, or even a group of buildings spread
over an extended geographic area<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h3>
Common Campus network Hierarchical Design Models</h3>
Cisco’s
hierarchical network design model breaks the complex problem of network
design into smaller and more manageable. Each level, or tier in the
hierarchy is focused on specific set of roles. This helps the network
designer and architect to optimize and select the right network
hardware, software and features to perform specific roles for that
network layer<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
A typical enterprise hierarchical campus network design includes the following three layers:<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<ul>
<li><span style="background-color: white; line-height: 14.25pt;">The Core layer that provides optimal transport between sites and high performance routing</span></li>
</ul>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<ul>
<li><span style="background-color: white; line-height: 14.25pt;">The Distribution layer that provides policy-based connectivity and control boundary between the access and core layers</span></li>
</ul>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<ul>
<li><span style="background-color: white; line-height: 14.25pt;">The Access layer that provides workgroup/user access to the network</span></li>
</ul>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<span style="line-height: 0px;">The two proven hierarchical design architectures for campus networks are the three-tier layer and the two-tier layer models</span><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h5>
Three-tier layer model</h5>
This design model can be used in large campus networks where multiple distribution layer and buildings need to be interconnected<br />
<a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/107866/3-T.jpg"><img alt="3-T.jpg" class="jive-image" height="250" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/107866/88-250/3-T.jpg" style="display: block; margin-left: auto; margin-right: auto;" width="88" /></a><br />
<h5>
Two-tier layer model</h5>
This
model can be used in small and medium campus network where core and
distribution functions can be collapsed into one layer also known as
collapsed core/distribution model<br />
<a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/107867/2-T.jpg"><img alt="2-T.jpg" class="jive-image" height="155" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/107867/99-155/2-T.jpg" style="display: block; margin-left: auto; margin-right: auto;" width="99" /></a><br />
<div class="MsoNormal" style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h2>
Modular Campus Network Architecture</h2>
<span style="color: black; font-family: "calibri" , "sans-serif"; font-size: 11pt; line-height: 115%;">By
applying the hierarchical design model discussed above into multiple
blocks within the campus network this will result in a more scalable and
modular topology called “building blocks" which allow the network to
meet evolving business needs. The modular design makes the network more
scalable and manageable by promoting deterministic traffic patterns.
Network changes and upgrades can be performed in a controlled and staged
manner, allowing greater flexibility in the maintenance and operation
of the campus network</span><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<span style="color: black; font-family: "calibri" , "sans-serif"; font-size: 11pt; line-height: 115%;"><a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/107868/campus.jpg"><img alt="campus.jpg" class="jive-image" height="236" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/107868/247-236/campus.jpg" style="display: block; margin-left: auto; margin-right: auto;" width="247" /></a></span><br />
As it shown in the figure above, a typical large Cisco modular Campus network consists of the fowling building blocks:<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h5>
Core Block (required for large Networks only)</h5>
It
provides a very limited set of services and is designed to be highly
available and operate in an always-on mode. A separate core provides the
ability to scale the size of the campus network in a structured fashion
that minimizes overall complexity when the size of the network grows
and the number of interconnections required to tie the campus together
grow<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h5>
<span style="color: #333333;">Access</span>-Distribution Block</h5>
The
access-distribution block consists of two of the three hierarchical
tiers within the multi-layer campus architecture: the access and
distribution layers. There are currently three basic design models for
the access-distribution block:<br />
<ul>
<li>Multi-tier</li>
<li>Routed access</li>
<li>Virtual switch ( Recommended solution )</li>
</ul>
The main difference between the above models is where the Layer-2 and Layer-3 boundaries exist<br />
For more details please refer to the following link:<br />
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/campover.html#wp708886" rel="nofollow">http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/campover.html#wp708886</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h5>
Services Block</h5>
The
services block is a relatively new element to the campus design. As
campus network planners begin to consider migration to dual stack
IPv4/IPv6 environments, migrate to controller-based WLAN environments,
and continue to integrate more sophisticated Unified Communications
services, a number of real challenges lay ahead. It will be essential to
integrate these services into the campus smoothly—while providing for
the appropriate degree of operational change management and fault
isolation and continuing to maintain a flexible and scalable design. As a
example, IPv6 services can be deployed via an interim ISATAP overlay
that allows IPv6 devices to tunnel over portions of the campus that are
not yet native IPv6 enabled. Such an interim approach allows for a
faster introduction of new services without requiring a network-wide,
hot cutover.<br />
Examples of functions recommended to be located in a services block include:<br />
<ul>
<li><div style="margin-left: 18pt;">
Centralized LWAPP wireless controllers</div>
</li>
<li><div style="margin-left: 18pt;">
IPv6 ISATAP tunnel termination</div>
</li>
<li><div style="margin-left: 18pt;">
Local Internet edge</div>
</li>
<li><div style="margin-left: 18pt;">
Unified Communications services (Cisco Unified Communications Manager, gateways, MTP, and the like)</div>
</li>
<li><div style="margin-left: 18pt;">
Policy gateways</div>
</li>
</ul>
<div style="margin-left: 18pt; padding-left: 60px;">
<a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/107874/SRV.jpg"><img alt="SRV.jpg" class="jive-image" height="267" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/107874/241-267/SRV.jpg" style="display: block; margin-left: auto; margin-right: auto;" width="241" /></a></div>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
There
might be multiple services blocks depending on the scale of the
network, the level of geographic redundancy required, and other
operational and physical factors<br />
As described in Cisco’s Enterprise Campus 3.0 Architecture<br />
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/campover.html#wp708979" rel="nofollow">http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/campover.html#wp708979</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h5>
Data Center Block</h5>
The
Data Center block of a campus network also known as “ server farm” can
be considered as another block of the campus LAN that uses the same
hierarchical design model, however in the data center there are some
factors and design requirements that are different from a normal
access-distribution switches design such as port capacity, ~0% of
oversubsecription and more specialised services can be introduced like
firewalling and loadbalcing services. For small and medium data center
the collapsed design model ( two-Tier) can be used without the need to a
dedicated data center core<br />
Using Cisco's next generation data
cneter switches “Nexus Series Switches” can significantly improve the
performance, reliability and redundancy of the data center by providing<br />
<ul>
<li>High performance switching and software/hardware redundancy</li>
<li>Non-blocking end-to-end topology with vPC technology</li>
<li>Support for network virtualisation e.g. : <ul>
<li>Nexus 1000v virtual switch</li>
</ul>
</li>
</ul>
<div style="margin-left: 72pt;">
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/solutions/collateral/ns340/ns517/ns224/ns892/ns894/at_a_glance_c45-492852.pdf" rel="nofollow">http://www.cisco.com/en/US/solutions/collateral/ns340/ns517/ns224/ns892/ns894/at_a_glance_c45-492852.pdf</a></div>
<ul>
<li>support of Virtualized Multi-Tenant Data Center Services</li>
</ul>
<div style="margin-left: 72pt;">
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/VMDC/2.6/vmdcservicesaag.pdf" rel="nofollow">http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/VMDC/2.6/vmdcservicesaag.pdf</a></div>
<ul>
<li>High
port density 1G/10G Ethernet e.g. The Cisco Nexus® 7000 F2-Series
48-Port 1 and 10 Gigabit Ethernet Module enables the deployment of
high-density, low-latency, scalable data center architectures:</li>
</ul>
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9402/at_a_glance_c45-689339.pdf" rel="nofollow">http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9402/at_a_glance_c45-689339.pdf</a><br />
<ul>
<li>Support
of smart data cneter interconnect DCI technologies such as OTV that
provide the ability to expand layer 2 network over a layer link/cloud</li>
<li>Ability to provide end to end unified fabric of IP and fiber channel over Ethernet FCoE</li>
<li>Fabric
Extender Technology, Cisco Fabric Extender Technology comprises of
technologies that enable fabric extensibility with simplified management
enabling the switching access layer to extend and expand all the way to
the server hypervisor as the customer’s business grows</li>
</ul>
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps10110/at_a_glance_c45-701972.pdf" rel="nofollow">http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps10110/at_a_glance_c45-701972.pdf</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
For more detail about cisco data cneter switches refer to the following link:<br />
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/products/ps9441/Products_Sub_Category_Home.html" rel="nofollow">http://www.cisco.com/en/US/products/ps9441/Products_Sub_Category_Home.html</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h4>
Layer 3 Design considerations</h4>
In
a typical hierarchal campus network, the distribution layer/block is
considered as the demarcation point between layer 2 and layer 3 domains
where layer 3 uplinks participate in the campus core routing using an
interior routing protocol IGP which can help to interconnect multiple
campus distribution blocks together for end to end campus connectivity.
As a result the selection of the IGP is important to a redundant and
reliable IP/routing reachability within the campus taking into
consideration scalability and the ability of the network to grow with
minimal changes/impact to the network and routing design. Some of the
factors that can be considered for slecting an IGP for a campus LAN:<br />
<ul>
<li>Size of the network e.g. number of L3 hopes and expected future growth</li>
<li>Convergence time e.g. OSPF and EIGRP can converge during a link/path failure quicker than RIP</li>
<li>Authentication support</li>
<li>Support for variable length subnet mask (VLSM)</li>
<li>Support of route summarization</li>
</ul>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
For more details refer to the following link, cisco Borderless campus design, routing resign principles:<br />
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/Borderless_Campus_Network_1.0/BN_Campus_Technologies.html#wp1053601" rel="nofollow">http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/Borderless_Campus_Network_1.0/BN_Campus_Technologies.html#wp1053601</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h5>
First hop redundancy protocol (FHRP)</h5>
Network
devices/hosts connected to the access layer switches need to connect
via IP to a gateway that provides (FHRP). In a hierarchical campus
network if a virtual switch mechanism was not used at the distribution
layer such as Cisco VSS, then the distribution layer switches need to
provide the FHRP service e.g. HSRP.<br />
For more details around FHRP refer to the following link:<br />
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/products/ps6644/products_ios_protocol_option_home.html" rel="nofollow">http://www.cisco.com/en/US/products/ps6644/products_ios_protocol_option_home.html</a><br />
HSRP/VRRP/GLBP:<br />
<a class="jive-link-external-small" href="http://packetlife.net/media/library/3/First_Hop_Redundancy.pdf" rel="nofollow">http://packetlife.net/media/library/3/First_Hop_Redundancy.pdf</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h4>
Other Campus Design considerations</h4>
<h5>
Network Virtualization</h5>
In
a modern Campus network the demand on having multiple logical groups
such as users, services, applications..etc to be separated within the
campus network for security and other business requirements is
increasing. Network virtualization is the most suitable solution for
this type of requirements where multiple logical isolated networks can
be created over one common physical network.<br />
<a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/107870/VN.jpg"><img alt="VN.jpg" class="jive-image-thumbnail jive-image" height="113" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/107870/441-113/VN.jpg" style="display: block; margin-left: auto; margin-right: auto;" width="441" /></a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Cisco network virtualization divides the network into three main logical areas:<br />
<ul>
<li>Access Control</li>
<li>Path Isolation</li>
<li>Service Edge</li>
</ul>
For more details refer to the following link:<br />
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/solutions/collateral/ns340/ns517/ns431/ns658/net_implementation_white_paper0900aecd804a17c9.html" rel="nofollow">http://www.cisco.com/en/US/solutions/collateral/ns340/ns517/ns431/ns658/net_implementation_white_paper0900aecd804a17c9.html</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h5>
<span style="color: #333333;">Campus</span> Network high availability</h5>
The
need of a highly available network is not a new requirement, however
with the increased number of services and communications that utilise
the underlying IP network infrastructure systems and network,
availability become crucial and one of the main elements of the campus
network that need to be considered during planning and design phases.
The flowing three major network resiliency requirements as described by
Cisco Borderless design guide 1.0 cover most of the common types of
failure conditions. Depending on the LAN design tier, the resiliency
option appropriate to the role and network service type must be
deployed:<br />
<ul>
<li>Network resiliency: Provides redundancy during
physical link failures, such as fiber cut, bad transceivers, incorrect
cabling, and so on.</li>
<li>Device resiliency: Protects the network
during abnormal node failure triggered by hardware or software, such as
software crashes, a non-responsive supervisor, and so on.</li>
<li>Operational
resiliency: Enables resiliency capabilities to the next level,
providing complete network availability even during planned network
outages using In Service Software Upgrade (ISSU) features.</li>
</ul>
<div style="line-height: normal; margin-bottom: 0pt;">
Although
redundant components within a single device are valuable, however the
best availability ratio can be achieved with completely separate devices
and paths</div>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
For more details refer to the following link:<br />
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/Borderless_Campus_Network_1.0/BN_Campus_HA.html#wp1229178" rel="nofollow">http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/Borderless_Campus_Network_1.0/BN_Campus_HA.html#wp1229178</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h5>
Quality of Service QoS</h5>
According
to Cisco Medianet QoS campus design, the primary role of QoS in
medianet campus networks is not to control latency or jitter (as it is
in the WAN/VPN), but to manage packet loss. In GE/10GE campus networks,
it takes only a few milliseconds of congestion to cause instantaneous
buffer overruns resulting in packet drops. Medianet
applications—particularly HD video applications—are extremely sensitive
to packet drops, to the point where even 1 packet dropped in 10,000 is
discernible by the end-user.<br />
Classification, marking, policing,
queuing, and congestion avoidance are therefore critical QoS functions
that are optimally performed within the medianet campus network,<br />
Four strategic QoS design principles that apply to campus QoS deployments include:<br />
<ul>
<li>Always perform QoS in hardware rather than software when a choice exists.</li>
<li>Classify and mark applications as close to their sources as technically and administratively feasible.</li>
<li>Police unwanted traffic flows as close to their sources as possible.</li>
<li>Enable queuing policies at every node where the potential for congestion exists,</li>
</ul>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<div style="text-align: center;">
Medianet Campus Port QoS Roles</div>
<div style="padding-left: 120px; text-align: center;">
<a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/107873/qos.jpg"><img alt="qos.jpg" class="jive-image" height="285" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/107873/322-285/qos.jpg" width="322" /></a></div>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
For more details refer to the following link:<br />
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampusaag.html" rel="nofollow">http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampusaag.html</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h6>
References:</h6>
- Borderless Campus 1.0 Design guide<br />
- Campus Network for High Availability Design Guide<br />
- Medianet Campus QoS Design At-a-Glance</div>
</div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com1tag:blogger.com,1999:blog-4590944285337051043.post-76489201803218681322013-09-28T16:10:00.000-07:002016-06-02T06:13:19.145-07:00- Cisco Networking: Password recovery<h2>
<a href="https://supportforums.cisco.com/docs/DOC-8070/diff?secondVersionNumber=10" title="Click to view document history"><img alt="Click to view document history" class="jive-icon-sml jive-icon-search" src="https://supportforums.cisco.com/4.5.4/images/transparent.png" /></a>
</h2>
<div class="jive-content-body">
<div class="jive-rendered-content">
<h1>
<a class="jive-link-anchor-small" href="http://www.blogger.com/null" name="desc" rel="nofollow">Introduction</a></h1>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
This document describes the procedure for recovering an <b>enable password</b> or <b>enable secret</b> passwords. These passwords are used to protect access to privileged EXEC and configuration modes. The <b>enable password</b> password can be recovered but the <b>enable secret</b> password is encrypted and can only be replaced with a new password using the procedure below.<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<b>Note:</b> This password recovery procedure works for the following Cisco products:<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<table border="0" cellpadding="5" cellspacing="3" style="width: 67%px;"><tbody>
<tr><td width="25%"><ul>
<li>Cisco 806</li>
<li>Cisco 827</li>
<li>Cisco uBR900</li>
<li>Cisco 1003</li>
<li>Cisco 1004</li>
<li>Cisco 1005</li>
<li>Cisco 1400</li>
<li>Cisco 1600</li>
<li>Cisco 1700</li>
<li>Cisco 2600</li>
<li>Cisco 3600</li>
<li>Cisco 4500</li>
<li>Cisco 4700</li>
</ul>
</td><td width="25%"><ul>
<li>Cisco AS5x00</li>
<li>Cisco 6x00</li>
<li>Cisco 7000 (RSP7000)</li>
<li>Cisco 7100</li>
<li>Cisco 7200</li>
<li>Cisco 7500</li>
<li>Cisco uBR7100</li>
<li>Cisco uBR7200</li>
<li>Cisco uBR10000</li>
<li>Cisco 12000</li>
<li>Cisco LS1010</li>
<li>Catalyst 2948G-L3</li>
<li>Catalyst 4840G</li>
</ul>
</td><td width="45%"><ul>
<li>Catalyst 4908G-L3</li>
<li>Catalyst 5500 (RSM)</li>
<li>Catalyst 8510-CSR</li>
<li>Catalyst 8510-MSR</li>
<li>Catalyst 8540-CSR</li>
<li>Catalyst 8540-MSR</li>
<li>Cisco MC3810</li>
<li>Cisco NI-2</li>
<li>Cisco VG200 Analog Gateway</li>
<li>Route Processor Module</li>
</ul>
</td></tr>
</tbody></table>
<a class="jive-link-anchor-small" href="http://www.blogger.com/null" name="proc" rel="nofollow">#</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h2>
<b>Step-by-Step Procedure</b></h2>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<ol start="1">
<li>Attach a terminal or PC with terminal emulation to the console port of the router. Use the following terminal settings: <br />9600 baud rate <br />No parity <br />8 data bits <br />1 stop bit </li>
<li>If you still have access to the router, type <b>show version</b> and record the setting of the configuration register; it is usually 0x2102 or 0x102. </li>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<li>If
you don't have access to the router (because of a lost login or tacacs
password), you can safely consider that your configuration register is
set to 0x2102.</li>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<li>Using
the power switch, turn off the router and then turn it back on.
Important: To simulate step 4 on a Cisco 6400, pull out and then replace
the Node Route Processor (NRP) or Node Switch Processor (NSP) card.
Important: To simulate step 4 on a Cisco 6x00 using NI-2, pull out
and then replace the NI-2 card.</li>
</ol>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<span class="content"> </span> </div>
<ol start="5">
<li>Press
Break on the terminal keyboard within 60 seconds of the power-up to put
the router into ROMMON. If the break sequence doesn't work, see <a class="jive-link-external-small" href="http://www-tss.cisco.com/eservice/compass/common/activities/password_brk_key_seq.htm" rel="nofollow">Possible Key Combinations for Break Sequence During Password Recovery</a> for other key combinations.</li>
</ol>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<span class="content"> </span> </div>
<ol start="6">
<li>Type <b>confreg 0x2142</b> at the <tt>rommon 1></tt> prompt to boot from Flash without loading the configuration.</li>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<li>Type <b>reset</b> at the rommon 2> prompt. The router reboots but ignores its saved configuration. </li>
<li><span class="content">Type <b>enable</b> at the Router> prompt. You'll be in enable mode and see the Router# prompt. </span></li>
<li><span class="content"><b>Important:</b> Type <b>configure memory</b> or <b>copy startup-config running-config</b> to copy the nonvolatile RAM (NVRAM) into memory. </span></li>
<li><span class="content">Type <b>write terminal</b> or <b>show running-config</b>.
The show running-config and write terminal commands show the
configuration of the router. In this configuration you see under all the
interfaces the shutdown command, which means all interfaces are
currently shutdown. Also, you can see the passwords (enable password,
enable secret, vty, console passwords, and so on) either in encrypted or
unencrypted format.The unencrypted passwords can be re-used, the
encrypted ones will have to be changed with a new one. </span></li>
<li><span class="content">Type <b>configure terminal</b> and make the changes. The prompt is now <b>hostname(config)#</b>.</span></li>
<li><span class="content">Type <b>enable secret</b> <<b><i>password</i></b>> to change the <b>enable secret</b> password, for example. </span></li>
<li><span class="content">Issue the <b>no shutdown</b> command on every interface that is used. If you issue a <b>show ip interface brief </b>command, every interface that you want to use should be "up up". </span></li>
<li><span class="content">Type <b>config-register 0x2102</b>, or the value you recorded in <a class="jive-link-external-small" href="http://www-tss.cisco.com/eservice/compass/common/activities/password_1700.htm#record-config-reg" rel="nofollow">step 2</a>.</span></li>
<li><span class="content">Press <b>Ctrl-z</b> or <b>end</b> to leave the configuration mode.The prompt is now <code>hostname#</code>. </span></li>
<li><span class="content">Type <b>write memory</b> or <b>copy running-config startup-config</b> to commit the changes. </span></li>
<li><span class="content"> </span></li>
</ol>
<span class="content">Type <b>no</b> after each setup question or press <b>Ctrl-C </b>to skip the initial setup procedure. </span><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<a class="jive-link-anchor-small" href="http://www.blogger.com/null" name="sample" rel="nofollow">#</a><br />
<h3>
Example of Password Recovery Procedure</h3>
The
example below presents an actual password recovery procedure. We
created this example using a Cisco 2600. Even if you are not using a
Cisco 2600, this example will be almost exactly what you experience on
your product.<br />
<blockquote class="jive-quote">
Router><b>enable</b><br />
Password:<br />
Password:<br />
Password:<br />
% Bad secrets<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<a class="jive-link-anchor-small" href="http://www.blogger.com/null" name="showver" rel="nofollow">#</a>Router><b>show version</b>Cisco Internetwork Operating System Software<br />
IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)<br />
Copyright (c) 1986-1999 by cisco Systems, Inc.<br />
Compiled Tue 07-Dec-99 02:21 by phanguye<br />
Image text-base: 0x80008088, data-base: 0x80C524F8<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Router uptime is 3 minutes<br />
System returned to ROM by abort at PC 0x802D0B60<br />
System image file is "flash:c2600-is-mz.120-7.T"<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
cisco 2611 (MPC860) processor (revision 0x202) with 26624K/6144K bytes of memory.<br />
Processor board ID JAB031202NK (3878188963)<br />
M860 processor: part number 0, mask 49<br />
Bridging software.<br />
X.25 software, Version 3.0.0.<br />
Basic Rate ISDN software, Version 1.1.<br />
2 Ethernet/IEEE 802.3 interface(s)<br />
2 Serial(sync/async) network interface(s)<br />
1 ISDN Basic Rate interface(s)<br />
32K bytes of non-volatile configuration memory.<br />
8192K bytes of processor board System flash partition 1 (Read/Write)<br />
8192K bytes of processor board System flash partition 2 (Read/Write)<br />
<b>Configuration register is 0x2102</b>Router></blockquote>
<blockquote class="jive-quote">
<i style="color: #3333ff;">!--- The router was just powercycled and during bootup a<br />!--- break sequence was sent to the router.</i>!<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
*** System received an abort due to Break Key ***<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
signal= 0x3, code= 0x500, context= 0x813ac158<br />
PC = 0x802d0b60, Vector = 0x500, SP = 0x80006030<br />
rommon 1 > <b>confreg 0x2142</b><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
You must reset or power cycle for new config to take effect<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
rommon 2 > <b>reset</b><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)<br />
Copyright (c) 1999 by cisco Systems, Inc.<br />
TAC:Home:SW:IOS:Specials for info<br />
C2600 platform with 32768 Kbytes of main memory<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<br />
program load complete, entry point: 0x80008000, size: 0x6fdb4c<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Self decompressing the image : ###############################<br />
##############################################################<br />
##############################################################<br />
##############################################################<br />
############################### [OK]<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<br />
Restricted Rights Legend<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Use, duplication, or disclosure by the Government is<br />
subject to restrictions as set forth in subparagraph<br />
(c) of the Commercial Computer Software - Restricted<br />
Rights clause at FAR sec. 52.227-19 and subparagraph<br />
(c) (1) (ii) of the Rights in Technical Data and Computer<br />
Software clause at DFARS sec. 252.227-7013.<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
cisco Systems, Inc.<br />
170 West Tasman Drive<br />
San Jose, California 95134-1706<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Cisco Internetwork Operating System Software<br />
IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)<br />
Copyright (c) 1986-1999 by cisco Systems, Inc.<br />
Compiled Tue 07-Dec-99 02:21 by phanguye<br />
Image text-base: 0x80008088, data-base: 0x80C524F8<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
cisco 2611 (MPC860) processor (revision 0x202) with 26624K/6144K bytes of memory.<br />
Processor board ID JAB031202NK (3878188963)<br />
M860 processor: part number 0, mask 49<br />
Bridging software.<br />
X.25 software, Version 3.0.0.<br />
Basic Rate ISDN software, Version 1.1.<br />
2 Ethernet/IEEE 802.3 interface(s)<br />
2 Serial(sync/async) network interface(s)<br />
1 ISDN Basic Rate interface(s)<br />
32K bytes of non-volatile configuration memory.<br />
8192K bytes of processor board System flash partition 1 (Read/Write)<br />
8192K bytes of processor board System flash partition 2 (Read/Write)<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<br />
--- System Configuration Dialog ---<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Would you like to enter the initial configuration dialog? [yes/no]: <b>n</b><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Press RETURN to get started!<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Router><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Router><b>enable</b>Router#<b>copy startup-config running-config</b><br />
Destination filename [running-config]?<br />
1324 bytes copied in 2.35 secs (662 bytes/sec)<br />
Router#<br />
00:01:24: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0/0:1, changed state to down<br />
00:01:24: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0/0:2, changed state to down<br />
Router#<b>configure terminal</b>Enter configuration commands, one per line. End with CNTL/Z.<br />
Router(config)#<b>enable secret cisco</b><br />
Router(config)#<b>^Z</b><br />
00:01:54: %SYS-5-CONFIG_I: Configured from console by console<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Router#<b>show ip interface brief</b><br />
Interface IP-Address OK? Method Status Protocol<br />
Ethernet0/0 10.200.40.37 YES TFTP <b>administratively down</b> down<br />
Serial0/0 unassigned YES TFTP <b>administratively down</b> down<br />
BRI0/0 193.251.121.157 YES unset <b>administratively down</b> down<br />
BRI0/0:1 unassigned YES unset <b>administratively down</b> down<br />
BRI0/0:2 unassigned YES unset <b>administratively down</b> down<br />
Ethernet0/1 unassigned YES TFTP <b>administratively down</b> down<br />
Serial0/1 unassigned YES TFTP <b>administratively down</b> down<br />
Loopback0 193.251.121.157 YES TFTP up up<br />
Router#<b>configure terminal</b><br />
Enter configuration commands, one per line. End with CNTL/Z.<br />
Router(config)#<b>interface Ethernet0/0</b><br />
Router(config-if)#<b>no shutdown</b><br />
Router(config-if)#<br />
00:02:14: %LINK-3-UPDOWN: Interface Ethernet0/0, changed state to up<br />
00:02:15: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, changed state to up<br />
Router(config-if)#<b>interface BRI0/0</b><br />
Router(config-if)#<b>no shutdown</b><br />
Router(config-if)#<br />
00:02:26: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to down<br />
00:02:26: %LINK-3-UPDOWN: Interface BRI0/0:2, changed state to down<br />
00:02:26: %LINK-3-UPDOWN: Interface BRI0/0, changed state to up<br />
00:02:115964116991: %ISDN-6-LAYER2UP: Layer 2 for Interface BR0/0, TEI 68 changed to up<br />
Router(config-if)#<b>^Z</b><br />
Router#<br />
00:02:35: %SYS-5-CONFIG_I: Configured from console by console<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Router#<b>copy running-config startup-config</b><br />
Destination filename [startup-config]?<br />
Building configuration...<br />
[OK]<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Router#<b>show version</b><br />
Cisco Internetwork Operating System Software<br />
IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)<br />
<span class="content">--- output truncated ---</span><br />
2 Ethernet/IEEE 802.3 interface(s)<br />
2 Serial(sync/async) network interface(s)<br />
1 ISDN Basic Rate interface(s)<br />
32K bytes of non-volatile configuration memory.<br />
8192K bytes of processor board System flash partition 1 (Read/Write)<br />
8192K bytes of processor board System flash partition 2 (Read/Write)<br />
Configuration register is <b>0x2142</b>Router#<b>configure terminal</b><br />
Enter configuration commands, one per line. End with CNTL/Z.<br />
Router(config)#<b>config-register 0x2102</b><br />
Router(config)#<b>^Z</b><br />
00:03:20: %SYS-5-CONFIG_I: Configured from console by console<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Router#<b>show version</b><br />
Cisco Internetwork Operating System Software<br />
IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)<br />
--- output truncated ---<br />
2 Ethernet/IEEE 802.3 interface(s)<br />
2 Serial(sync/async) network interface(s)<br />
1 ISDN Basic Rate interface(s)<br />
32K bytes of non-volatile configuration memory.<br />
8192K bytes of processor board System flash partition 1 (Read/Write)<br />
8192K bytes of processor board System flash partition 2 (Read/Write)<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Configuration register is 0x2142 (will be <b>0x2102</b> at next reload)<br />
Router#<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-8070-10-2161/CiscoSystems.gif"><img alt="CiscoSystems.gif" class="jive-image-thumbnail jive-image" height="284" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-8070-10-2161/450-284/CiscoSystems.gif" width="450" /></a></blockquote>
</div>
</div>
<div class="jive-content-footer clearfix">
<span class="jive-content-footer-item">
</span><span class="jive-content-footer-item jive-content-footer-tags"><span class="jive-thread-post-details-tags" id="jive-thread-post-details-tags_d17j1S">
</span>
</span></div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-38965075520160280352013-09-28T15:51:00.001-07:002016-06-02T06:07:59.626-07:00- Cisco Networking: How to modify/change the background image of an IP Phone<h2>
</h2>
<div class="jive-content-header-version">
<br />
<br />
<a href="https://supportforums.cisco.com/docs/DOC-11493/diff?secondVersionNumber=35" title="Click to view document history"><img alt="Click to view document history" class="jive-icon-sml jive-icon-search" src="https://supportforums.cisco.com/4.5.4/images/transparent.png" /></a>
</div>
<div class="jive-content-body">
<div class="jive-rendered-content">
In this procedure I'm going to
start from scratch with an image and go step by step on how to tailor
it to size an 7965/7945's IP Phone display. At the end there is also a
troubleshooting section and links to other IP Phone model image
specifics.<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h1>
Components for this specific howto:</h1>
<ol start="1">
<li>7965/7945 IP Phone</li>
<li>CallManager Linux-based (5.x/6.x/7.x/8.x)</li>
<li>The Gimp editing software <ul>
<li>(Linux: Installed by default in Ubuntu / Windows: <a class="jive-link-external-small" href="http://www.gimp.org/windows/" rel="nofollow">http://www.gimp.org/windows/</a>)</li>
</ul>
</li>
<li>A picture file of your preference</li>
</ol>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<h1>
Prerequisites:</h1>
<ol start="1">
<li>Read the official guide: <a class="jive-link-external-small" href="http://tools.cisco.com/squish/4441e" rel="nofollow">http://tools.cisco.com/squish/4441e</a></li>
<li>CallManager Administrator and OS Administrator access </li>
</ol>
This document contains the step by step Procedures and the Video for Modifying the background Image of an IP Phone.<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
The Complete recording of the Video can be accessed here.<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<a href="https://supportforums.cisco.com/videos/1859" rel="nofollow"><img alt="Background image change.jpg" class="jive-image-thumbnail jive-image" height="218" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-17212/348-218/Background+image+change.jpg" width="348" /></a><br />
<h1>
Steps:</h1>
Open the picture with The Gimp<br />
<ol start="1">
<li>In my case, the image I selected is 225x168px, so it doesn't meet the size requirements (see Prerequisites).<br /><ol start="1">
<li><a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5260/screenshot_003.png"><img alt="screenshot_003.png" class="jive-image-thumbnail jive-image" height="330" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5260/450-330/screenshot_003.png" width="450" /></a></li>
<li>Go
to Image > Canvas Size (If your image is bigger than the specified
size, go to Image > Scale Image and follow next steps).</li>
<li><a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5279/screenshot_005.png"><img alt="screenshot_005.png" class="jive-image" height="556" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5279/384-556/screenshot_005.png" width="384" /></a></li>
<li>Click
the chain icon next to the pixels drop-down menu, and change the
canvas size (or image size if you are scaling it) to Width:320 /
Height:212</li>
<li>Click the "Center" button so that the image stays
centered on the new space, or drag the preview thumbnail to a corner of
your choice within the canvas' space (if you are scaling the image the
"Center" button and the drag option are not there)</li>
<li>Click Resize</li>
<li>Note the changes<a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5280/screenshot_006.png"><img alt="screenshot_006.png" class="jive-image" height="327" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5280/450-327/screenshot_006.png" width="450" /></a></li>
<li>Now we need to put a white background.</li>
<li>Right click the image layer on the layer window <a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5281/flatten.jpg"><img alt="flatten.jpg" class="jive-image" height="600" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5281/224-600/flatten.jpg" width="224" /></a></li>
<li>Click Flatten Image at the very bottom. </li>
<li>Now we need to make sure there are no more colors than the phone can accept. </li>
<li>Go to Colors > Posterize. <a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5283/screenshot_007.png"><img alt="screenshot_007.png" class="jive-image" height="179" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5283/416-179/screenshot_007.png" width="416" /></a>This
tool works with powers of 2. An IP Phone cannot display more than
65535 colors, so increase or decrease the posterize levels to no more
than 15, as 15 is the closest power of 2 to 65535 (2 to the power of 15
is 32768)</li>
<li>Click ok</li>
<li>Go to File > Save as > choose PNG as the file type</li>
<li><a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5282/screenshot_008.png"><img alt="screenshot_008.png" class="jive-image-thumbnail jive-image" height="497" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5282/450-497/screenshot_008.png" width="450" /></a></li>
<li>Click Save</li>
<li><a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5284/screenshot_010.png"><img alt="screenshot_010.png" class="jive-image" height="374" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5284/340-374/screenshot_010.png" width="340" /></a></li>
<li>Now lets fabricate the thumbnail</li>
<li>Go to Image > Scale Image and type 80 in the Width field</li>
<li>The Height field should automatically populate to 53</li>
<li>Save the image in PNG type just as we did before</li>
<li>Try to keep simple, short names like img.png and img-tmb.png</li>
</ol>
</li>
<li>Now we will tailor the XML file that lists the available images<ol start="1">
<li>Download this <a class="" href="https://supportforums.cisco.com/servlet/JiveServlet/download/11493-35-67349/List.xml" rel="nofollow">example List.xml</a>, or copy this content to a regular text file, and save it as an .xml archive: </li>
<span style="font-family: "courier new" , "courier";"><ciscoipphoneimagelist></ciscoipphoneimagelist></span><div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<span style="font-family: "courier new" , "courier";"><imageitem courier="" font-family:="" image="TFTP:Desktops/320x212x16/IMAGE</span><span style=" nbsp="" new="">-THUMB</imageitem></span><span style="font-family: "courier new" , "courier";">.png" <br />URL="TFTP:Desktops/320x212x16/IMAGE.png"/> </span></ol>
</li>
</ol>
</div>
</div>
<br />
<br />
<br />
<li><span style="font-family: "arial" , "helvetica" , sans-serif;">Replace IMAGE-THUMB.png </span><span style="font-family: "arial" , "helvetica" , sans-serif;">in the code</span><span style="font-family: "arial" , "helvetica" , sans-serif;"> wih </span><span style="font-family: "courier new" , "courier";"><span style="font-family: "arial" , "helvetica" , sans-serif;">the </span><span style="font-family: "arial" , "helvetica" , sans-serif;">name chosen for your preview size image. Don't forget the double quotes at the end.</span></span></li>
<li><span style="font-family: "courier new" , "courier";"><span style="font-family: "arial" , "helvetica" , sans-serif;">Replace IMAGE.png in this code with the </span><span style="font-family: "arial" , "helvetica" , sans-serif;">name chosen for your full size image. Don't forget the double quotes at the end.</span></span></li>
<li><span style="font-family: "arial" , "helvetica" , sans-serif;">Save the file so that it reads: List.xml (case sensitive)</span></li>
<li><span style="font-family: "arial" , "helvetica" , sans-serif;">If
you need to present more than 1 image options to your users, copy/paste
the <imageitem ....="" 2="" 3="" an="" and="" as="" block="" br="" image="" in="" names="" other="" replace="" step="" the="" with=""></imageitem></span></li>
<li><span style="font-family: "arial" , "helvetica" , sans-serif;">Time to upload all 3 files to the TFTP server</span><ol start="1">
<li><span style="font-family: "arial" , "helvetica" , sans-serif;">Go to Cisco OS Administration > Software Upgrades > TFTP File Management</span><a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5261/screenshot_009.png"><img alt="screenshot_009.png" class="jive-image-thumbnail jive-image" height="98" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5261/450-98/screenshot_009.png" width="450" /></a></li>
<li><br /></li>
<li>Click on Upload File</li>
<li><a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5285/screenshot_012.png"><img alt="screenshot_012.png" class="jive-image-thumbnail jive-image" height="272" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5285/450-272/screenshot_012.png" width="450" /></a></li>
<li>In the Upload File field enter the path where your full size image, thumbnail image and List.xml files are</li>
<li>In the Directory field, enter: /Desktops/320x212x16 (include the forward slashes and delete any white space at the end)<a href="https://supportforums.cisco.com/docs/docs/DOC-11492/"><img src="https://supportforums.cisco.com/docs/docs/DOC-11492/" /></a></li>
<li>Hit the Upload file button for each individual file you are transferring</li>
<li>Back at the TFTP File Management window, type the name of your files and click Find to verify they are there.</li>
<li>Go
to Cisco Unified Serviceability > Tools > Control Center -
Feature Center > Select the Cisco TFTP radio button and restart the
service by clicking the green triangle button at the top of the page, or
the Restart button near the end</li>
<li><a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5287/screenshot_013.png"><img alt="screenshot_013.png" class="jive-image" height="511" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5287/450-511/screenshot_013.png" width="450" /></a></li>
</ol>
</li>
<li>On
the IP Phone, go to Settings > User Preferences > Background
Images, and choose the thumbnail that you want to apply. They should be
there now</li>
<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<span style="font-size: 18pt;"><b>Troubleshooting:</b></span><br />
<b>NOTE: </b>When dealing with image difficulties, try restarting the TFTP after each file upload<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<b style="font-size: 12pt;">Problem: </b>you go to Phone settings, and there you can see other background options, but can't really see the picture<br />
<span style="font-size: 12pt;"><b>Solution: </b></span>it is most likely because of the color depth issue. Change the levels as mentioned in step 1-11<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<span style="font-size: 12pt;"><b>Problem: </b></span>you go to Phone settings, and there are no options to change the image<br />
<span style="font-size: 12pt;"><b>Solution 1:</b></span>
After saving the file with some text editors, eventhough you specify an
.xml extension, the program might add a .txt at the end. Erase it.<br />
<span style="font-size: 12pt;"><b>Solution 2:</b></span>
open an SSH session to the CallManager node where the XML and PNG files
were uploaded. run this command, make sure the files were correctly
uploaded:<br />
<ul>
<li><span style="font-family: "courier new" , "courier";">file list activelog cm/tftpdata/Desktops/320x212x16</span></li>
</ul>
<span style="font-family: "courier new" , "courier";"><br /></span>
If not, then you uploaded them to another node, or there is something wrong with the TFTP transaction<br />
<span style="font-size: 12pt;"><b>Solution 3:</b></span>
open the List.xml file with a browser. If it shows a syntax error, then
there is a quote, bracket or other mistake in the XML syntax. No files
will be shown in the phone. A good syntax should look like this in your
browser:<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<a href="https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-11493-35-5286/good-xml.jpg"><img alt="good-xml.jpg" class="jive-image-thumbnail jive-image" height="95" src="https://supportforums.cisco.com/servlet/JiveServlet/downloadImage/102-11493-35-5286/450-95/good-xml.jpg" width="450" /></a><br />
<br />
<span style="font-size: 12pt;"><b>Problem:</b></span> You can see the thumbnail just fine, but when you select it, it shows "FILE NOT FOUND" error message.<br />
<span style="font-size: 12pt;"><b>Solution 1:</b></span>
At this point we are sure the XML file is ok, because the thumbnail is
there, but the path or the name of the full-size image is incorrect.
Open the XML list and make sure the image extension is lower case png
and not GIF, JPG or other format, and that the name is correct.<br />
<span style="font-size: 12pt;"><b>Solution 2: </b></span>see solution 2 from previous Problem<br />
<b style="font-size: 12pt;">Solution 3:</b>
it has happened that the TFTP transaction flow is affected somehow, so
you might correct the XML file, save it, but when you go to the upload
step you are actually uploading an old version of it, still pointing to a
JPG image or to an older image name. In order to verify the contents of
the file you just uploaded, run this command from an SSH Session, and
check if the syntax is ok and pointing to the correct file:<br />
<ul>
<li><span style="font-family: "courier new" , "courier";">file view activelog cm/tftpdata/Desktops/320x212x16/List.xml</span></li>
</ul>
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<span style="font-size: 14pt;"><b style="font-size: 12pt;">Problem:</b> <span style="font-size: 10pt;">You
go to the Background Images menu on your IP Phone, but the "Selections
Unavailable" message comes up, some phones may show the thumbnails just
fine.</span></span><br />
<span style="font-size: 12pt;"><b>Solution 1:</b></span>
After saving the file with some text editors, eventhough you specify
an .xml extension, the program might add a .txt at the end. Erase it.<br />
<span style="font-size: 12pt;"><b>Solution 2:</b></span>
open an SSH session to the CallManager node where the XML and PNG
files were uploaded. run this command, make sure the files were
correctly uploaded:<br />
<ul>
<li><span style="font-family: "courier new" , "courier";">file list activelog cm/tftpdata/Desktops/320x212x16</span></li>
</ul>
<span style="font-family: "courier new" , "courier";"><br /></span>
If not, then you uploaded them to another node, or there is something wrong with the TFTP transaction<br />
<span style="font-size: 12pt;"><b>Solution 3:</b></span>
open the List.xml file with a browser. If it shows a syntax error,
then there is a quote, bracket or other mistake in the XML syntax. No
files will be shown in the phone. A good syntax should look like this
in your browser:<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
<span style="font-size: 18pt;"><b>Image specifications for other models:</b></span><br />
These
same instructions may be used with different phone models, however the
TFTP directory path may change according to the display size of your
model. Please verify the specifics.<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
7911: Desktops/95x34x1 . The background dimensions are 95x34, the thumbnail is 24x9.<br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
7941/7961: <a class="jive-link-external-small" href="http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cuipph/7962g_7961g_7961g-ge_7942g_7941g_7941g-ge/7_1/english/administration/guide/62614241cus.html#wp1030672" rel="nofollow">http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cuipph/7962g_7961g_7961g-ge_7942g_7941g_7941g-ge/7_1/english/administration/guide/62614241cus.html#wp1030672</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
7942/7962: <a class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7962g_7942g/7_0/english/administration/guide/7962cus.html#wp1030672" rel="nofollow">http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7962g_7942g/7_0/english/administration/guide/7962cus.html#wp1030672</a><br />
<br />
7970/7971/IP Communicator: <a class="jive-link-external-small" href="http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cuipph/7970g_7971g-ge/english/5_1/sip/english/adminstraton/guide/7970cst.html#wp1088046" rel="nofollow">http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cuipph/7970g_7971g-ge/english/5_1/sip/english/adminstraton/guide/7970cst.html#wp1088046</a><br />
<br />
7975: <a class="jive-link-external-small" href="http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cuipph/7975g/6_0/english/administration/guide/7975cst.html#wp1088046" rel="nofollow">http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cuipph/7975g/6_0/english/administration/guide/7975cst.html#wp1088046</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
7985: <a class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7985g/4_1/english/administration/guide/7985adm2.pdf" rel="nofollow">http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7985g/4_1/english/administration/guide/7985adm2.pdf</a><br />
<div style="height: 8pt; min-height: 8pt; padding: 0px;">
<br /></div>
Update:<br />
Latest setting for Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and 7945G based on CUCM 8.5:<br />
<a class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7975G_7971g-ge_7970g_7965g_7945g/8_5/english/admin_guide/7970cst.html" rel="nofollow">http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7975G_7971g-ge_7970g_7965g_7945g/8_5/english/admin_guide/7970cst.html</a>Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com0tag:blogger.com,1999:blog-4590944285337051043.post-50626987059765041682013-05-22T12:11:00.001-07:002016-06-02T06:10:49.254-07:00- Cisco Networking: EIGRP and Diffusing Update Algorithm (DUAL)<br />
<br />
<br />
<b>Diffusing Update Algorithm – An Introduction</b><br />
<b><br /></b>
Diffusing Update Algorithm (DUAL) is the convergence algorithm used by EIGRP instead of the Bellman-Ford or Ford Fulkerson algorithms used by other distance vector routing protocols, like RIP. DUAL is based on research conducted at SRI International, using calculations that were first proposed by E.W. Dijkstra and C.S. Scholten. The most prominent work with DUAL has been done by J.J. Garcia-Luna-Aceves.<br />
Routing loops, even temporary ones, can be extremely detrimental to network performance. Distance vector routing protocols such as RIP prevent routing loops with hold-down timers and split horizon. Although EIGRP uses both of these techniques, it uses them somewhat differently; the primary way that EIGRP prevents routing loops is with the DUAL algorithm.<br />
The DUAL algorithm is used to obtain loop-freedom at every instant throughout a route computation. This allows all routers involved in a topology change to synchronize at the same time. Routers that are not affected by the topology changes are not involved in the recomputation. This method provides EIGRP with faster convergence times than other distance vector routing protocols. <br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9D4Ua0hyphenhyphenZNu09Yd_IOkn1vs1uDihh_Q853tLDH2-sKFZ81WQaWFP_29EIQYHet-SLu2RGGSaDgPglghAPGys-dubBTh2Qp-ZLTfDr2f2UGETCcWQzC7PjikJxIg79mxhjdtam79Au3Ni-/s1600/FIGURE4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9D4Ua0hyphenhyphenZNu09Yd_IOkn1vs1uDihh_Q853tLDH2-sKFZ81WQaWFP_29EIQYHet-SLu2RGGSaDgPglghAPGys-dubBTh2Qp-ZLTfDr2f2UGETCcWQzC7PjikJxIg79mxhjdtam79Au3Ni-/s1600/FIGURE4.jpg" /></a></div>
<br />
<br />
<br />
<br />
The decision process for all route computations is done by the DUAL Finite State Machine. In general terms, a finite state machine (FSM) is a model of behavior composed of a finite number of states, transitions between those states, and events or actions that create the transitions.<br />
The DUAL FSM tracks all routes, uses its metric to select efficient, loop-free paths, and selects the routes with the least cost path to insert into the routing table. <br />
Because recomputation of the DUAL algorithm can be processor-intensive, it is advantageous to avoid recomputation whenever possible. Therefore, DUAL maintains a list of backup routes it has already determined to be loop-free. If the primary route in the routing table fails, the best backup route is immediately added to the routing table.<br />
Administrative distance (AD) is the trustworthiness (or preference) of the route source. EIGRP has a default administrative distance of 90 for internal routes and 170 for routes imported from an external source, such as default routes. When compared to other interior gateway protocols (IGPs), EIGRP is the most preferred by the Cisco IOS because it has the lowest administrative distance. <br />
Notice in the figure that EIGRP has a third AD value, of 5, for summary routes. Later in this chapter, you will learn how to configure EIGRP summary routes.<br />
<br />
<br />
<br />
<b>Basic EIGRP configuration </b><br />
<b>AutonomousSystem</b><br />
<br />
An autonomous system (AS) is a collection of networks under the administrative control of a single entity that presents a common routing policy to the Internet. In the figure, companies A, B, C, and D are all under the administrative control of ISP1. ISP1 "presents a common routing policy" for all of these companies when advertising routes to ISP2. <br />
The guidelines for the creation, selection, and registration of an autonomous system are described in RFC 1930. AS numbers are assigned by the Internet Assigned Numbers Authority (IANA), the same authority that assigns IP address space. You learned about IANA and its Regional Internet Registries (RIRs) in a previous course. The local RIR is responsible for assigning an AS number to an entity from its block of assigned AS numbers. Prior to 2007, AS numbers were 16-bit numbers, ranging from 0 to 65535. Now 32-bit AS numbers are assigned, increasing the number of available AS numbers to over 4 billion. <br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghyphenhyphenhMvZkTKdCxePm0NTYqimVzfYgEnis2ENhngDtx3VuJerDM6u7ECFSZagEAiKKukmVO0v3TIYTFf_id3vJl-w9dnAGxwmlp-65uHoWaifRdoCk0ssuwPOhdj784Yc9Cq5bgMPdld23Qz/s1600/FIGURE5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghyphenhyphenhMvZkTKdCxePm0NTYqimVzfYgEnis2ENhngDtx3VuJerDM6u7ECFSZagEAiKKukmVO0v3TIYTFf_id3vJl-w9dnAGxwmlp-65uHoWaifRdoCk0ssuwPOhdj784Yc9Cq5bgMPdld23Qz/s1600/FIGURE5.jpg" /></a></div>
<br />
<br />
<br />
Who needs an autonomous system number? Usually ISPs (Internet Service Providers), Internet backbone providers, and large institutions connecting to other entities that also have an AS number. These ISPs and large institutions use the exterior gateway routing protocol Border Gateway Protocol, or BGP, to propagate routing information. BGP is the only routing protocol that uses an actual autonomous system number in its configuration.<br />
The vast majority of companies and institutions with IP networks do not need an AS number because they come under the control of a larger entity such as an ISP. These companies use interior gateway protocols such as RIP, EIGRP, OSPF, and IS-IS to route packets<br />
<br />
<br />
within their own networks. They are one of many independent and separate networks within the autonomous system of the ISP. The ISP is responsible for the routing of packets within its autonomous system and between other autonomous systems.<br />
<br />
<b>Process ID </b><br />
<b><br /></b>
Both EIGRP and OSPF use a process ID to represent an instance of their respective routing protocol running on the router. <br />
<br />
<b>Router(config)#router eigrp autonomous-system</b><br />
<b><br /></b>
Although EIGRP refers to the parameter as an "autonomous-system" number, it actually functions as a process ID. This number is not associated with an autonomous system number discussed previously and can be assigned any 16-bit value. <br />
<br />
<b>Router(config)#router eigrp 1</b><br />
<b><br /></b>
In this example, the number 1 identifies this particular EIGRP process running on this router. In order to establish neighbor adjacencies, EIGRP requires all routers in the same routing domain to be configured with the same process ID. Typically, only a single process ID of any routing protocol would be configured on a router.<br />
<br />
<b>The network Command with a Wildcard Mask</b><br />
<b><br /></b>
By default, when using the network command and a classful network address such as 172.16.0.0, all interfaces on the router that belong to that classful network address will be enabled for EIGRP. However, there may be times when the network administrator does not want to include all interfaces within a network when enabling EIGRP. To configure EIGRP to advertise specific subnets only, use the wildcard-mask option with the network command:<br />
<br />
<b>Router(config-router)#network network-address [wildcard-mask] </b><br />
<b><br /></b>
Think of a wildcard mask as the inverse of a subnet mask. The inverse of subnet mask 255.255.255.252 is 0.0.0.3. To calculate the inverse of the subnet mask, subtract the subnet mask from 255.255.255.255:<br />
<br />
<br />
<br />
255.255.255.255 <br />
-255.255.255.252<br />
Subtract the subnet mask<br />
---------------<br />
0. 0. 0. 3 Wildcard mask<br />
In the figure, R2 is configured with the subnet 192.168.10.8 and the wildcard mask 0.0.0.3.<br />
<br />
<b>R2(config-router)#network 192.168.10.8 0.0.0.3</b><br />
<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWjn7iln8WJJg_OvRPJl3ocrx6we3SlDT4Ip0k28IvDOWaRohHhmSsdVbbueBMnYbz5e3scr5Vqc2eWPZ2Mo5NtdTu72-ZMGRmYZeVpL4_0e-miNyT9niBMYIrxwZAtfOaKnczE74_WSwe/s1600/FIGURE6.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWjn7iln8WJJg_OvRPJl3ocrx6we3SlDT4Ip0k28IvDOWaRohHhmSsdVbbueBMnYbz5e3scr5Vqc2eWPZ2Mo5NtdTu72-ZMGRmYZeVpL4_0e-miNyT9niBMYIrxwZAtfOaKnczE74_WSwe/s1600/FIGURE6.jpg" /></a></div>
<br />
<br />
<br />
Some IOS versions will also let you simply enter the subnet mask. For example, you might enter the following:<br />
<br />
<br />
<b>R2(config-router)#network 192.168.10.8 255.255.255.252 </b><br />
<b><br /></b>
However, the IOS will then convert the command to the wildcard mask format, as can be verified with the show run command:<br />
<br />
R2#show run <some omitted="" output=""> ! router eigrp 1 network 172.16.0.0 network 192.168.10.8 0.0.0.3 auto-summary ! </some><br />
<br />
The figure also shows the configuration for R3. As soon as the classful network 192.168.10.0 is configured, R3 establishes adjacencies with both R1 and R2.<br />
<br />
<b><br /></b>
<b>Verifying EIGRP Operation </b><br />
<b><br /></b>
Before any updates can be sent or received by EIGRP, routers must establish adjacencies with their neighbors. EIGRP routers establish adjacencies with neighbor routers by exchanging EIGRP Hello packets. <br />
Use the show ip eigrp neighbors command to view the neighbor table and verify that EIGRP has established an adjacency with its neighbors. For each router, you should be able to see the IP address of the adjacent router and the interface that this router uses to reach that EIGRP neighbor. In the figure, we can verify that all routers have established the necessary adjacencies. Each router has two neighbors listed in the neighbor table.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbotmUt8or4mHHTkpOFcXMTxvCWiah17TIgt1urZqvqG2WqRcR_0G3-pqqfqmmnbTA4i6_Jsjd9wDPTqRNw2n5ayMWZgkXMArdexfAplFZ4SpOB9kqk4lcNvYkz8jELm-1WJwHqoLnQeR2/s1600/FIGURE7.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbotmUt8or4mHHTkpOFcXMTxvCWiah17TIgt1urZqvqG2WqRcR_0G3-pqqfqmmnbTA4i6_Jsjd9wDPTqRNw2n5ayMWZgkXMArdexfAplFZ4SpOB9kqk4lcNvYkz8jELm-1WJwHqoLnQeR2/s1600/FIGURE7.jpg" /></a></div>
<br />
<br />
<br />
<br />
The output from the show ip eigrp neighbor command includes:<br />
H column -Lists the neighbors in the order they were learned. Address -The IP address of the neighbor. Interface -The local interface on which this Hello packet was received. Hold -The current hold time. Whenever a Hello packet is received, this value is reset to the maximum hold time for that interface and then counts down to zero. If zero is reached, the neighbor is considered "down". Uptime - Amount of time since this neighbor was added to the neighbor table. SRTT (Smooth Round Trip Timer) and RTO (Retransmit Interval) - Used by RTP to manage reliable EIGRP packets. Queue Count - Should always be zero. If more than zero, then EIGRP packets are waiting to be sent. Sequence Number - Used to track updates, queries, and reply packets.<br />
The show ip eigrp neighbors command is very useful for verifying and troubleshooting EIGRP.<br />
Another way to verify that EIGRP and other functions of the router are configured properly is to examine the routing tables with the show ip route command.<br />
By default, EIGRP automatically summarizes routes at the major network boundary. We can disable the automatic summarization with the no auto-summary command, just as we did in RIPv2. We will examine this in more detail in a later section.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgW19TIJXK9aNRMGeXwFKlTNzmKqlIhejwUFFJTgzjN21TTUPj-NiWBdi6QRqLjt34Cay4JWBkzpN16DzHgfe1YdKC8XAfUCk82dmqVQUJEq2KqHCdFfkVfdTyN3QhNlF3njNkIQx4mKwEO/s1600/FIGURE8.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgW19TIJXK9aNRMGeXwFKlTNzmKqlIhejwUFFJTgzjN21TTUPj-NiWBdi6QRqLjt34Cay4JWBkzpN16DzHgfe1YdKC8XAfUCk82dmqVQUJEq2KqHCdFfkVfdTyN3QhNlF3njNkIQx4mKwEO/s1600/FIGURE8.jpg" /></a></div>
<br />
<br />
<br />
<br />
<br />
Notice that EIGRP routes are denoted in the routing table with a D, which stands for DUAL.<br />
Remember, because EIGRP is a classless routing protocol (includes the subnet mask in the routing update), it supports VLSM and CIDR. We can see in the routing table for R1 that the 172.16.0.0/16 parent network is variably subnetted with three child routes using either a /24 or /30 mask.<br />
<br />
<br />
<b>EIGRP Composite Metric and the K value </b><br />
<b><br /></b>
EIGRP uses the following values in its composite metric to calculate the preferred path to a network:<br />
Bandwidth Delay Reliability Load<br />
The figure 9 shows the composite metric formula used by EIGRP. The formula consists of values K1 through K5, known as EIGRP metric weights. By default, K1 and K3 are set to 1, and K2, K4, and K5 are set to 0. The result is that only the bandwidth and delay values are used in the computation of the default composite metric.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY8cV4jaoySsp8DFWPm0PEeU15ctxnC_RPxK01XOa-s8eYZYsF_afCCE3gAXNTDT1aNiA33ksQpLzHtwmOzNgBmv0UsSKPDyU_P_ZMWQ0yqW6-lMPzgT438xVh88tiwlutOCW0fgGOHZlp/s1600/FIGURE9.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY8cV4jaoySsp8DFWPm0PEeU15ctxnC_RPxK01XOa-s8eYZYsF_afCCE3gAXNTDT1aNiA33ksQpLzHtwmOzNgBmv0UsSKPDyU_P_ZMWQ0yqW6-lMPzgT438xVh88tiwlutOCW0fgGOHZlp/s1600/FIGURE9.jpg" /></a></div>
<br />
<br />
The figure shows the composite metric formula used by EIGRP. The formula consists of values K1 through K5, known as EIGRP metric weights. By default, K1 and K3 are set to 1, and K2, K4, and K5 are set to 0. The result is that only the bandwidth and delay values are used in the computation ofthe default composite metric.<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<br />
<br />
The default K values can be changedwith the EIGRP router command:<br />
<br />
<b>Router(config-router)#metric weights tos k1 k2 k3 k4 k5</b><br />
<b><br /></b>
The show ip protocols command is used to verify the K values. The command output for R1 is shown in the figure. Notice that the K values on R1 are set to the default. Again, changing these values to other than the default is not recommended unless the network administrator has a very good reason to do so.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXfb61iQrvTLKzFRn8yqp1KuOwdArDt-Qo6vnDIasy9fVOnfXthw3NNOHmXILvjW_gbVdmPRdunrvYX1JZtXq9NmVU5Hmu8kyeLkL8qZHWNha-Mr1zbdfbjAyVotNW3rmXE8asqaBYfpr2/s1600/FIGURE10.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXfb61iQrvTLKzFRn8yqp1KuOwdArDt-Qo6vnDIasy9fVOnfXthw3NNOHmXILvjW_gbVdmPRdunrvYX1JZtXq9NmVU5Hmu8kyeLkL8qZHWNha-Mr1zbdfbjAyVotNW3rmXE8asqaBYfpr2/s1600/FIGURE10.jpg" /></a></div>
<br />
<br />
<br />
<br />
You now know the defaults for the K values. By using the show interface command we can examine the actual values used for bandwidth, delay, reliability, and load in the computation of the routing metric.<br />
The output in the figure 11 shows the values used in the composite metric for the Serial 0/0/0 interface on R1.<br />
<br />
<b>MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,</b><br />
<b>reliability 255/255, txload 1/255, rxload 1/255</b><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEina3S84wY5hAQskTh1DKVhAKCEVGjfq2EG4YFIF4Jrc-kA1bZAIaCEVoj5ojegyEsD7RySFbjnHj3CBi47ttpKkQo9FHeA0HU7OBatb_mFpGvzob4fyCExC6nByBYyw6Djq8cXBKD48kfp/s1600/FIGURE11.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEina3S84wY5hAQskTh1DKVhAKCEVGjfq2EG4YFIF4Jrc-kA1bZAIaCEVoj5ojegyEsD7RySFbjnHj3CBi47ttpKkQo9FHeA0HU7OBatb_mFpGvzob4fyCExC6nByBYyw6Djq8cXBKD48kfp/s1600/FIGURE11.jpg" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
The bandwidth metric (1544 Kbit) is a static value used by some routing protocols such as EIGRP and OSPF to calculate their routing metric. The bandwidth is displayed in Kbit (kilobits). Most serial interfaces use the default bandwidth value of 1544 Kbit or 1,544,000 bps (1.544 Mbps). This is the bandwidth of a T1 connection. However, some serial interfaces use a different default bandwidth value. Always verify bandwidth with the show interface command.<br />
The value of the bandwidth may or may not reflect the actual physical bandwidth of the interface. Modifying the bandwidth value does not change the actual bandwidth of the link. If actual bandwidth of the link differs from the default bandwidth value, then you should modify the bandwidth value, as we will see in a later section.<br />
Delay is a measure of the time it takes for a packet to traverse a route. The delay (DLY) metric is a static value based on the type of link to which the interface is connected and is expressed in microseconds. Delay is not measured dynamically. In other words, the router does not actually track how long packets are taking to reach the destination. The delay value, much like the bandwidth value, is a default value that can be changed by the network administrator.<br />
<br />
<br />
<b>MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,</b><br />
<b>reliability 255/255, txload 1/255, rxload 1/255</b><br />
<br />
The table in the figure 12 shows the default delay values for various interfaces. Notice that the default value is 20,000 microseconds for Serial interfaces and 100 microseconds for FastEthernet interfaces.<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge2Ghxfeli1jxV6-BMTWYunvmjQDHMHLS5aBe7gYvDaxJLOjRQ8LW_1HPDT6vonXyWT0VfCCC0OtC_WS066gHOJfo7SLtixT_paesn3S5j73Ni7_rSNjCBxSul8CRDscn7yREbhaKxqkmG/s1600/FIGURE12.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge2Ghxfeli1jxV6-BMTWYunvmjQDHMHLS5aBe7gYvDaxJLOjRQ8LW_1HPDT6vonXyWT0VfCCC0OtC_WS066gHOJfo7SLtixT_paesn3S5j73Ni7_rSNjCBxSul8CRDscn7yREbhaKxqkmG/s1600/FIGURE12.jpg" /></a></div>
<br />
Reliability (reliability) is a measure of the probability that the link will fail or how often the link has experienced errors. Unlike delay, Reliability is measured dynamically with a value between 0 and 255, with 1 being a minimally reliable link and 255 one hundred percent reliable. Reliability is calculated on a 5-minute weighted average to avoid the sudden impact of high (or low) error rates.<br />
Reliability is expressed as a fraction of 255 -the higher the value, the more reliable the link. So, 255/255 would be 100 percent reliable, whereas a link of 234/255 would be 91.8 percent reliable.<br />
Load (load) reflects the amount of traffic utilizing the link. Like reliability, load is measured dynamically with a value between 0 and 255. Similar to reliability, load is expressed as a fraction of 255. However, in this case a lower load value is more desirable because it indicates less load on the link. So, 1/255 would be a minimally loaded link. 40/255 is a link at 16 percent capacity, and 255/255 would be a link that is 100 percent saturated.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4HsT5O9OJpQICGFck5A8UV9PE1kvompEW5PndwzBGHln-atUrztZmbjRDo5l1wZUTousXgUs6ltlqmiFCIepKyArAqr03qrVupz1HFvTffP10gqvNWIkIWmckp6JUX4IPOjp0D1D_SGDd/s1600/FIGURE13.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4HsT5O9OJpQICGFck5A8UV9PE1kvompEW5PndwzBGHln-atUrztZmbjRDo5l1wZUTousXgUs6ltlqmiFCIepKyArAqr03qrVupz1HFvTffP10gqvNWIkIWmckp6JUX4IPOjp0D1D_SGDd/s1600/FIGURE13.jpg" /></a></div>
<br />
<br />
<br />
<br />
Load is displayed as both an outbound, or transmit, load value (txload) and an inbound, or receive, load value (rxload). This value is calculated on a 5-minute weighted average to avoid the sudden impact of high (or low) channel usage.<br />
<br />
<b><br /></b>
<b>Calculating the EIGRP Metric</b><br />
<b><br /></b>
The figure 14 shows the composite metric used by EIGRP. Using the default values for K1 and K3, we can simplify this calculation to: the slowest bandwidth (or minimum bandwidth) plus the cumulative sum of all of the delays.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNGKhcHV83I4Jtg3rS0Kqd4p5EVE1PJD3hSEaG-4glJcLNjk7QZ1QbV_2H_tCwkJuF7xUHAgHz65qUIt-3ZQeyjSE9LlpIpntb-iy5737mvjolBl_pZ_acqbDWZbkzhiHx6V3R9xgKgJy0/s1600/FIGURE14.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNGKhcHV83I4Jtg3rS0Kqd4p5EVE1PJD3hSEaG-4glJcLNjk7QZ1QbV_2H_tCwkJuF7xUHAgHz65qUIt-3ZQeyjSE9LlpIpntb-iy5737mvjolBl_pZ_acqbDWZbkzhiHx6V3R9xgKgJy0/s1600/FIGURE14.jpg" /></a></div>
<br />
<br />
<br />
In other words, by examining the bandwidth and delay values for all of the outgoing interfaces of the route, we can determine the EIGRP metric. First, determine the link with the slowest bandwidth. That bandwidth is used for the (10,000,000/bandwidth) * 256 portion of the formula. Next, determine the delay value for each outgoing interface on the way to the destination. Sum the delay values and divide by 10 (sum of delay/10) and then multiply by 256 (* 256). Add the bandwidth and sum of delay values to obtain the EIGRP metric.<br />
<br />
The routing table output for R2 shows that the route to 192.168.1.0/24 has an EIGRP metric of 3,014,400. Let's see exactly how EIGRP calculated this value.<br />
<br />
Because EIGRP uses the slowest bandwidth in its metric calculation, we can find the slowest bandwidth by examining each interface between R2 and the destination network 192.168.1.0. The Serial 0/0/1 interface on R2 has a bandwidth of 1,024 Kbps or 1,024,000 bps. The FastEthernet 0/0 interface on R3 has a bandwidth of 100,000 Kbps or 100 Mbps. Therefore, the slowest bandwidth is 1024 Kbps and is used in the calculation of the metric.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjRy0Is9bwXHzlVXc1_B_55su-uPkdY_62MysgI88GvUk9wHgcZI2qMCk-y9gwR4SYD3o_RX9vvssi0yUfX9YYf0XTZ91domfmK4cNePUG3aTGc5xl3b5h4BpwUcp6XN8e8bHVE6042IuG/s1600/FIGURE15.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="308" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjRy0Is9bwXHzlVXc1_B_55su-uPkdY_62MysgI88GvUk9wHgcZI2qMCk-y9gwR4SYD3o_RX9vvssi0yUfX9YYf0XTZ91domfmK4cNePUG3aTGc5xl3b5h4BpwUcp6XN8e8bHVE6042IuG/s640/FIGURE15.jpg" width="640" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
EIGRP takes the reference bandwidth value of 10,000,000 and divides it by the bandwidth value in kbps. This will result in higher bandwidth values receiving a lower metric and lower bandwidth values receiving a higher metric. <br />
10,000,000 is divided by 1024. If the result is not a whole number, then the value is rounded down. In this case, 10,000,000 divided by 1024 equals 9765.625. The .625 is dropped before multiplying by 256. The bandwidth portion of the composite metric is 2,499,840.<br />
<br />
<br />
<br />
<br />
<b>Dual Concepts </b><br />
As stated in a previous section, DUAL (Diffusing Update Algorithm) is the algorithm used by EIGRP. This section will discuss how DUAL determines the best loop-free path and loop-free backup paths.<br />
DUAL uses several terms which will be discussed in more detail throughout this section:<br />
Successor Feasible Distance (FD) Feasible Successor (FS) Reported Distance (RD) or Advertised Distance (AD)<br />
A successor is a neighboring router that is used for packet forwarding and is the least-cost route to the destination network. The IP address of a successor is shown in a routing table entry right after the word via. <br />
Feasible distance (FD) is the lowest calculated metric to reach the destination network. FD is the metric listed in the routing table entry as the second number inside the brackets. As with other routing protocols this is also known as the metric for the route.<br />
The successor, feasible distance, and any feasible successors with their reported distances are kept by a router in its EIGRP topology table or topology database. As shown in the figure, the topology table can be viewed using the show ip eigrp topology command. The topology table lists all successors and feasible successors that DUAL has calculated to destination networks.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiRzympG_aWMlTCqPtNuyrRVmRnOXxnGuiTlZ5EbMTf5wj_ZRwiJWGasAeSc_eUe2BFzhTM2gmlZ5lFhMlp3AtrBTfhHR66fMtOhjUYO841DT8cNWB-LO11MA9F6cGaooBR7-tjVOkgmQv/s1600/FIGURE16.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiRzympG_aWMlTCqPtNuyrRVmRnOXxnGuiTlZ5EbMTf5wj_ZRwiJWGasAeSc_eUe2BFzhTM2gmlZ5lFhMlp3AtrBTfhHR66fMtOhjUYO841DT8cNWB-LO11MA9F6cGaooBR7-tjVOkgmQv/s1600/FIGURE16.jpg" /></a></div>
<br />
<br />
<br />
<b>DUAL Finite State Machine (FSM) </b><br />
<b><br /></b>
The centerpiece of EIGRP is DUAL and its EIGRP route-calculation engine. The actual name of this technology is DUAL Finite State Machine (FSM). This finite state machine contains all of the logic used to calculate and compare routes in an EIGRP network. The figure shows a simplified version of the DUAL FSM. <br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEdQsPAeJxCwjB1hhzNcDLYdeUlIVX9gIXjfrbA9nmp0C5vWxn4LlOeS1Jezb0JP83Yq6BddOx-wwqywqM1YpmJUjJvS8S2xHXCzXSV0tqw42s2FnMnl1Ivm0vneL7BW52Prn64DZgeXDq/s1600/FIGURE17.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEdQsPAeJxCwjB1hhzNcDLYdeUlIVX9gIXjfrbA9nmp0C5vWxn4LlOeS1Jezb0JP83Yq6BddOx-wwqywqM1YpmJUjJvS8S2xHXCzXSV0tqw42s2FnMnl1Ivm0vneL7BW52Prn64DZgeXDq/s1600/FIGURE17.jpg" /></a></div>
<br />
<br />
<br />
A finite state machine is an abstract machine, not a mechanical device with moving parts. FSMs define a set of possible states that something can go through, what events cause those states, and what events result from those states. Designers use FSMs to describe how a device, computer program, or routing algorithm will react to a set of input events. Finite state machines are beyond the scope of this course; however, we introduce the concept in order to examine some of the output from EIGRP's finite state machine using debug eigrp fsm. Let's use the command to watch what DUAL does when a route is removed from the routing table.<br />
<br />
<br />
<br />
<div>
<br /></div>
Ciro Tammarohttp://www.blogger.com/profile/06547815648328206115noreply@blogger.com1