Microsoft.AzLocal.CSSTools

1.2607.16.2249

modules/AzStack.Insights/rules/MocArb.ArbVMVlanId.ps1

                                <#

.SYNOPSIS

    Check the ARB VM network configuration for VLAN drift

.DESCRIPTION

    Detects Management VLAN ID drift between the host management adapter and the ARB VM

    by comparing the effective VLAN from multiple sources:

    - ATC intent ManagementVLAN

    - Host management vNIC effective VLAN

    - ARB VM network adapter effective VLAN

    The effective VLAN for each adapter is resolved the same way the virtual switch

    applies it: VLAN isolation ports carry the VLAN in DefaultIsolationID (AccessVlanId

    reads 0), while access ports carry it in AccessVlanId. Resolving both sides the same

    way avoids a false mismatch when the ARB port is in VLAN isolation mode (SDN / ARC-SDN).

#>

[CmdletBinding()]

param()

# Import localization strings from the locale directory

# this will natively import the psd1 file that has the same name as the script

# and the locale folder that matches the current culture of the user running the script

Import-LocalizedData -BindingVariable 'localizedData' -BaseDirectory "$PSScriptRoot\locale" -UICulture $PSUICulture

$insightRule = Initialize-InsightRule -Id $localizedData.Id -Properties $localizedData.Insight

<# START INSIGHT RULE LOGIC #>

try {

    [System.String] $failureCode = "UNDEFINED"

    # 1. Get the management ATC intent

    $netIntents = Get-NetIntent -ErrorAction Stop

    $mgmtIntent = $netIntents | Where-Object { $_.IsManagementIntentSet -eq $true } | Select-Object -First 1

    if (-not $mgmtIntent) {

        Write-InsightLog -Level:Warning -Message "No management NetworkATC intent found on this node"

        $failureCode = "NoMgmtIntentFound"

        $insightRule.Status = [InsightStatus]::WARNING

        $insightRule.ErrorMessage = $localizedData.Insight.ErrorMessage.NoMgmtIntentFound

        $insightRule.Properties = @([PSCustomObject]@{

            Node   = $env:COMPUTERNAME

            Result = "No management ATC intent found"

        })

    }

    else {

        $intentName = $mgmtIntent.IntentName

        $atcVlanId = $mgmtIntent.ManagementVLAN

        $expectedSwitchName = "ConvergedSwitch($intentName)"

        Write-InsightLog -Level:Informational -Message "Management intent: '$intentName', ManagementVLAN: $atcVlanId, Expected VMSwitch: '$expectedSwitchName'"

        # 2. Get host management vNIC VLAN, resolving the effective VLAN the same way

        #    the virtual switch applies it (isolation DefaultIsolationID or AccessVlanId).

        $mgmtVnicName = "vManagement($intentName)"

        $hostEffectiveVlanId = $null

        $hostVlanSource = $null

        try {

            $hostVlanInfo = Get-VMNetworkAdapterVlan -ManagementOS -VMNetworkAdapterName $mgmtVnicName -ErrorAction SilentlyContinue

            $hostIsolationInfo = Get-VMNetworkAdapterIsolation -ManagementOS -VMNetworkAdapterName $mgmtVnicName -ErrorAction Stop

            $hostEffective = Get-EffectiveVlanId -VlanInfo $hostVlanInfo -IsolationInfo $hostIsolationInfo

            $hostEffectiveVlanId = $hostEffective.EffectiveVlanId

            $hostVlanSource = $hostEffective.Source

            Write-InsightLog -Level:Informational -Message "Host vNIC '$mgmtVnicName' effective VLAN: $hostEffectiveVlanId (source: $hostVlanSource, IsolationMode: $($hostEffective.IsolationMode), DefaultIsolationID: $($hostEffective.DefaultIsolationID), AccessVlanId: $($hostEffective.AccessVlanId))"

        }

        catch {

            Write-InsightLog -Level:Warning -Message "Failed to get VLAN for host vNIC '$mgmtVnicName': $($_.Exception.Message)"

        }

        # 3. Find ARB VM on local node (same pattern as ArbVmRunningState)

        $arbVMs = Get-ArbControlPlaneVMs

        if (-not $arbVMs) {

            # ARB VM is not on this node; defer to the hosting node

            $insightRule.Properties = @([PSCustomObject]@{

                Node   = $env:COMPUTERNAME

                Result = "ARB VM is not hosted on this node. Validation deferred to the hosting node."

            })

        }

        else {

            $driftDetails = @()

            $hasDrift = $false

            $results = @()

            foreach ($vm in $arbVMs) {

                $arbVmName = $vm.Name

                $arbEffectiveVlanId = $null

                $arbVlanSource = $null

                $arbEffective = $null

                $arbSwitchName = $null

                Write-InsightLog -Level:Informational -Message "ARB VM '$arbVmName' found on local node"

                try {

                    $arbAdapters = @(Get-VMNetworkAdapter -VM $vm -ErrorAction Stop)

                    # Prefer the adapter on the expected management switch.

                    $arbAdapter = $arbAdapters | Where-Object { $_.SwitchName -eq $expectedSwitchName } | Select-Object -First 1

                    if (-not $arbAdapter) {

                        # No adapter on the expected switch. With a single adapter this is the

                        # only candidate; with several it is a guess, so warn and list the

                        # switches seen so the selection is diagnosable from the log.

                        if ($arbAdapters.Count -gt 1) {

                            $availableSwitches = ($arbAdapters | ForEach-Object { $_.SwitchName }) -join ', '

                            Write-InsightLog -Level:Warning -Message "ARB VM '$arbVmName' has no adapter on expected management switch '$expectedSwitchName'; available switches: [$availableSwitches]. Falling back to the first adapter."

                        }

                        $arbAdapter = $arbAdapters | Select-Object -First 1

                    }

                    $arbSwitchName = $arbAdapter.SwitchName

                    Write-InsightLog -Level:Informational -Message "ARB VM '$arbVmName' selected adapter on switch '$arbSwitchName' (expected '$expectedSwitchName')"

                    # Resolve the effective VLAN the same way as the host side. SDN / ARC-SDN

                    # managed ARB ports run in VLAN isolation mode (AccessVlanId = 0, real VLAN

                    # in DefaultIsolationID); access-mode ports carry it in AccessVlanId.

                    $arbVlanInfo = Get-VMNetworkAdapterVlan -VMNetworkAdapter $arbAdapter -ErrorAction SilentlyContinue

                    $arbIsolationInfo = Get-VMNetworkAdapterIsolation -VMNetworkAdapter $arbAdapter -ErrorAction SilentlyContinue

                    $arbEffective = Get-EffectiveVlanId -VlanInfo $arbVlanInfo -IsolationInfo $arbIsolationInfo

                    $arbEffectiveVlanId = $arbEffective.EffectiveVlanId

                    $arbVlanSource = $arbEffective.Source

                }

                catch {

                    Write-InsightLog -Level:Warning -Message "Failed to query ARB VM '$arbVmName' network adapter: $($_.Exception.Message)"

                }

                Write-InsightLog -Level:Informational -Message "ARB VM '$arbVmName': effective VLAN=$arbEffectiveVlanId (source: $arbVlanSource)"

                # 4. Compare effective VLAN IDs from all sources (normalize to [int]).

                #    Each side is reduced to the VLAN the switch actually applies, so an

                #    isolation-mode port and an access-mode port on the same VLAN match.

                $vlanValues = @()

                if ($null -ne $atcVlanId) { $vlanValues += @{ Source = "ATC Intent '$intentName' ManagementVLAN"; Value = [int]$atcVlanId } }

                if ($null -ne $hostEffectiveVlanId) { $vlanValues += @{ Source = "Host vNIC '$mgmtVnicName' effective VLAN"; Value = [int]$hostEffectiveVlanId } }

                if ($null -ne $arbEffectiveVlanId) { $vlanValues += @{ Source = "ARB VM '$arbVmName' effective VLAN"; Value = [int]$arbEffectiveVlanId } }

                $uniqueVlanValues = @($vlanValues | ForEach-Object { $_.Value } | Select-Object -Unique)

                $vlanDrift = ($vlanValues.Count -ge 2 -and $uniqueVlanValues.Count -gt 1)

                if ($vlanDrift) {

                    $hasDrift = $true

                    $vlanDetail = ($vlanValues | ForEach-Object { "$($_.Source) = $($_.Value)" }) -join '; '

                    $driftDetails += "VLAN ID mismatch: $vlanDetail"

                    Write-InsightLog -Level:Error -Message "VLAN ID drift detected on '$arbVmName': $vlanDetail"

                }

                $results += [PSCustomObject]@{

                    Node                  = $env:COMPUTERNAME

                    ARBVMName             = $arbVmName

                    ATCIntentName         = $intentName

                    ATCManagementVLAN     = $atcVlanId

                    ARBVMSwitchName       = $arbSwitchName

                    HostVnicEffectiveVLAN = $hostEffectiveVlanId

                    ARBVMEffectiveVLAN    = $arbEffectiveVlanId

                    ARBVMVlanSource       = $arbVlanSource

                    ARBVMAccessVlanId     = $(if ($null -ne $arbEffective) { $arbEffective.AccessVlanId } else { $null })

                    ARBVMIsolationVLAN    = $(if ($null -ne $arbEffective) { $arbEffective.DefaultIsolationID } else { $null })

                    ARBVMOperationMode    = $(if ($null -ne $arbEffective) { $arbEffective.OperationMode } else { $null })

                    VLANDrift             = $vlanDrift

                }

            }

            $insightRule.Properties = $results

            if ($hasDrift) {

                $insightRule.Status = [InsightStatus]::FAILURE

                $failureCode = "VlanIdDriftDetected"

                $insightRule.ErrorMessage = ($localizedData.Insight.ErrorMessage.VlanIdDriftDetected -f ($driftDetails -join ' | '))

            }

        }

    }

}

catch {

    $_ | Write-InsightLog -Level 'Exception'

    $insightRule.ScriptStackTrace = Get-FormattedException -Exception $_.Exception

    $insightRule.Status = [InsightStatus]::UNKNOWN

}

<# END INSIGHT RULE LOGIC #>

# if the status is FAILURE or WARNING, set the failure code and remediation message

if ($insightRule.Status -eq [InsightStatus]::FAILURE -or $insightRule.Status -eq [InsightStatus]::WARNING) {

    $insightRule.ErrorCode = $localizedData.Insight.ErrorCode -f $failureCode

    switch ($failureCode) {

        "NoMgmtIntentFound" {

            $insightRule.Remediation = $localizedData.Insight.Remediation.NoMgmtIntentFound

        }

        "VlanIdDriftDetected" {

            $insightRule.Remediation = $localizedData.Insight.Remediation.VlanIdDriftDetected

        }

        default {

            # Should not come here, but keep it safe by providing a generic remediation and error message for unknown failure codes

            $insightRule.Remediation = $localizedData.Insight.Remediation.UnknownError

            $insightRule.ErrorMessage = $localizedData.Insight.ErrorMessage.UnknownError

        }

    }

}

$insightRule.Duration = New-TimeSpan -Start $insightRule.OccurrenceTimeUTC -End $([System.DateTime]::UtcNow)

Write-InsightEvent -Insight $insightRule

return $insightRule

# SIG # Begin signature block

# MIInSQYJKoZIhvcNAQcCoIInOjCCJzYCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBZgiXKn97BqZaL

# H6gId1flz5HXRxvujGunM9wjVDUOWqCCDLowggX1MIID3aADAgECAhMzAAACHU0Z

# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1

# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8

# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg

# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4

# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R

# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk

# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw

# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg

# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh

# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9

# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H

# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3

# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n

# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs

# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo

# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb

# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6

# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z

# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v

# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs

# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA

# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow

# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo

# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh

# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h

# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd

# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp

# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t

# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5

# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs

# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK

# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5

# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW

# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ

# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC

# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI

# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4

# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh

# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q

# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU

# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb

# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z

# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u

# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW

# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV

# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10

# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnlMIIZ4QIBATBuMFcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv

# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w

# DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK

# KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIE0ZnkrA

# weA98nC90hwQZfkO5uDo2nTRZuZc5FFxpMpXMEIGCisGAQQBgjcCAQwxNDAyoBSA

# EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w

# DQYJKoZIhvcNAQEBBQAEggEAf40LZ6hg/ytNzzOXs5JjdlKG9aCbwOs5Oie/0JCo

# DbHdRX0oE+E0JU3CoYv/Ii5kPAI5jv3QetMxm/vNW5IHTbl4pK1IgwkMzLlsYnO/

# QjTbFOqCM3G8RTiQk72qWw+feeQaZxcSFbBa0iv6Yj5I4k2Y5qgoo/jPqhVhWzSM

# D6nJpm+UhJ3S8ugIbs9gsCBNmM4T3/2VxsmycWZ7+qvqhuBFo4UXaulbIVxT9Ziv

# L664ncM8trOthCb13Nanf3Fwivq5qbYBmUTCP+ytMJPuUPO6z2efX0CygZh8wuhb

# 2lvqIpFmyn50a8GWTI0vSCDN3uYmZLhrGRzgoeLABAoE4qGCF5cwgheTBgorBgEE

# AYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUD

# BAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoD

# ATAxMA0GCWCGSAFlAwQCAQUABCB7FXyLpGEOOGirCNAXFoOCs897990qgjtlKR3+

# REimKAIGajGeHCERGBMyMDI2MDcxNjIyNTQwMi40NzFaMASAAgH0oIHRpIHOMIHL

# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk

# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN

# aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT

# UyBFU046MzcwMy0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgITMwAAAh86cGnkojAulQABAAAC

# HzANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAe

# Fw0yNjAyMTkxOTM5NTFaFw0yNzA1MTcxOTM5NTFaMIHLMQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj

# YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzcwMy0wNUUw

# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDLO8XFOcfGqAqgiz0+AmQmFl3d

# Z0aTG4UFJkqqNdMHy28DaheCBs6ONufukye5x42CWkzgRIy9kE2VWwEntZ8Zkgyr

# ykC0bIqsID7+6FxguseTXf1Vwvm1D8104VmetoBJlJ4uGbuyJZUvXDx55nVh50yg

# LTzZ24WkQsnPpvRZv2kPc39f3bhLyHVtnHsa/W/86Vrftd+AfFveA+qN/EY+XGj5

# c/DPMXCYECb0arYb92dDJWtwzpyBrp4gfHlgY1UEpc4l4AGELrf2J4wrxTzTW+SM

# 8XhV1dOOPrYjD080IbZqL8B+IF0RCdn269YXrGK6QIHipznKZcCS8jN30YAHnTJV

# N5Zzs6t/2YsqBGDquvDad7934FFTwzvUcO3VoIyd93XWwvP8/SCFVJh21W8oGQTp

# tGHyly+Fl4henVMVZF1v6osOtirX8GFTiEhnf8nRdOg7yZYAJ0xy9CtDfbXaTn/c

# f3Lq3N/GCYKFjC+5mUCE+AJhmxMuMdvSUGmKiAFdiPAjUTqsWWBBZJm0eCwgeGJF

# mmQA+V7/98BKcE+gUL7O9eWRDQwKeAcvo6rxNv2Y4jKrHA6Z/wi3a/fKUhLCNZES

# 8qGdrpDAm7qh+6FjYxytAbkiKM6uTNy/ULPlwtlYZoAJDDQP7eYCywwVbNTbHXRB

# SS+NccC0sSB4W7U67wIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFNk72sGDlH0r5Dwv

# fGR5XwJI8B7bMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud

# HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js

# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr

# BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv

# bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw

# MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw

# DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQBlbu3IoynnPz0K1iPb

# eNnsej2b15l5sdl2FAFBBGT9lRdc2gNV8LAIusPYHHhUvRDcsx4lbMNhVKPGu4TD

# LaqNt/CI+SFtGuqdRLpVP1XE9cCLyKrKPpcJFJCqPpV+efoAtYBmIUQcxxwT7WIQ

# 7gag8+rkKvrMkCoRqKS0mKv8J1sKfi85+G2uhZ/1RteSVdYZOZOj+Sb4wzonTCTj

# 7EtgMN/BX35W5dTzd7wJdGepYkVi871dSrC2Tr1ZFzAR7S44drCWZpJ6phJabVNO

# sNxFJKgSykugOGWzQ318Rr3MTPg2s3Bns+pUPVgMijd4bUOH2BlEsLMMwOcolTTZ

# qg1HYrdY1jxpUAI9ipjBQRINL/O705Z+/f2LjNmJQooCVJVX24adpZ519SsfazGo

# qXGt91bmqKo0fI09Il4sUHh4ih6rpiQDBlyL7vmvCejwVxYevY4qVwTZ/o3gvl+R

# 0lFxYS9feIM4NeG0+WsDZ7jLci5MFeuNwosQY3z26Xg1oj0U9u+ncR9uTU+xBmJ8

# BtlCdhQ13RNMX5P+krRYPB3XCp9Jm6XaO1995q32AIZm1mzBGI6yHlviXaEC5TzG

# iO1LXuPtXZU2X93oQJbMoe3v8+5CPKrQalGWyYuh2a3V1pwbj+W0FEmEFPpu8TI+

# qYO1IIQWUSRvFjXth5Ob02hMMjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA

# AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow

# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl

# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd

# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA

# A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX

# 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q

# UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d

# q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN

# pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k

# rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d

# Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS

# Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8

# QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm

# gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF

# ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID

# AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU

# KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1

# GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0

# bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA

# QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL

# j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p

# Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w

# Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz

# LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU

# tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN

# 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU

# 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5

# KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy

# qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6

# 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE

# AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp

# AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd

# FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb

# atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd

# VTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR

# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p

# Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg

# T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjM3MDMtMDVFMC1E

# OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEw

# BwYFKw4DAhoDFQBLIMg1P7sNuCXpmbH2IXT2tXeEEKCBgzCBgKR+MHwxCzAJBgNV

# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w

# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m

# dCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7gOlXDAiGA8y

# MDI2MDcxNjE4NDU0OFoYDzIwMjYwNzE3MTg0NTQ4WjB3MD0GCisGAQQBhFkKBAEx

# LzAtMAoCBQDuA6VcAgEAMAoCAQACAgExAgH/MAcCAQACAhgqMAoCBQDuBPbcAgEA

# MDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAI

# AgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAKuS1Z2mJYUhI3pbE2XZRyjTMKT0

# uy9oz+N1AOweQTds1ghpd9BndR3xxto2f29RgYN0qVKnjjPJ5IoU+LWv62Y2jYyU

# AV3QGZY2UbwHXnEfONxyvZBBKuguBp1mgSuOGN0ePu20UIL/BLLL5LcV+pGbCGfd

# HtxHYaxnrZ8yyHngdiKz+jUCpelryq/sHmAhAYCylefGOH1ZnUTtM9fKw2dKed1i

# 8TsUPD+zwV8cU7A7QDNScJ/d3+QQWIT7WdjSSLN9P5ekPofSNabsq4NUrGPRFo0C

# MlF4EzPIh2w8LsR2e6iv6FwKzh6eUCM9IF+5ZuPzfevqnACqD8uj7nnfYLsxggQN

# MIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ

# MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u

# MSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAh86

# cGnkojAulQABAAACHzANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0G

# CyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCAj1etLKR1bh58EjaX7Bt17/Rtn

# 0aZXzguLpcf43LOokzCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EILAkCt9W

# kCsMtURkFu6TY0P3UXdRnCiYuPZhe3ykLfwUMIGYMIGApH4wfDELMAkGA1UEBhMC

# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV

# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp

# bWUtU3RhbXAgUENBIDIwMTACEzMAAAIfOnBp5KIwLpUAAQAAAh8wIgQglH4HVg8d

# FXAUMDgS9Y8/WwswsJEuOzt35CXPvZEU/uwwDQYJKoZIhvcNAQELBQAEggIAsifk

# c/Zr1zcH0Ea0psNZs4yE32oz0xHPC9ypcvPnOZRPh+u1gtHcbwV8hF62d/D+YJgv

# R2szOj03GF4dyTYLczjTo8EAlCVdncJVbqxcUXk9qoPBWX2Yshm9VwTGmZjnm5nJ

# MCmrVdRaX55hLTD3TMjAzrXsGo8xlDwOQBRx6NOYrYFLQEJm0EsHp/HGhXO9lXnu

# 03ZoMWvVMpsqn4CrHlYmDTFcmAVvPrfYCvL8n/WDNrkWL9o/g3TeAnYvlrn9E4z/

# PmrK0fWAsUHlNz1bmUw5Nhl1Co3EL0oglWFBFXAsmaeYmXHvOGQJHxcJAetp0UGm

# JYgplIYAXyk7CLneuY2lezH6EsHIl2YrCrtcwz+Rxq9/w7JWfzFQgXg0xr915+rU

# dV2ggDdUlaaRssHDrzqwHjGuLtwV39SAPBjK5wtCG+9+SaqPOWIjiICdctr64Eiz

# iTfqe3eueWwbo6NkjHmgSvmW0VEW2G94VaWm+n8+rDyCUwrvxbo5XE4C6OkVpZ84

# IMObGOb/uGGybDoFweXW+7UDHDaKJOeXRe2k+iTONJRBVzGJIjpAynrF7Z7JuP/0

# kHMdBDnjJWb2RG73tBRJro5reJ84Ka/LOUOnONL+A47/yZ/UbdHds9v6uDFhyCrf

# KcrDKHNsRwahj+LWpIC4i0WwYwkZSMoB0UoX9zo=

# SIG # End signature block