packages/SdnDiagnostics.4.2607.14.122/modules/Test-SdnExpressBgp.psm1
|
# -------------------------------------------------------------- # Copyright © Microsoft Corporation. All Rights Reserved. # Microsoft Corporation (or based on where you live, one of its affiliates) licenses this sample code for your internal testing purposes only. # Microsoft provides the following sample code AS IS without warranty of any kind. The sample code arenot supported under any Microsoft standard support program or services. # Microsoft further disclaims all implied warranties including, without limitation, any implied warranties of merchantability or of fitness for a particular purpose. # The entire risk arising out of the use or performance of the sample code remains with you. # In no event shall Microsoft, its authors, or anyone else involved in the creation, production, or delivery of the code be liable for any damages whatsoever # (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) # arising out of the use of or inability to use the sample code, even if Microsoft has been advised of the possibility of such damages. # --------------------------------------------------------------- # BGP-4 implementation # RFCs: # RFC 4271 BGP-4 # RFC 3392 Capabilities Advertisement with BGP-4 # RFC 2918 Route Refresh for BGP-4 # Slightly implemented (extra data shouldn't break): # RFC 4760 Multiprotocol Extensions for BGP-4 # TODO: # Detect RAS BGP, temporarily disable with -force. # Usage Examples: # # computer already has NIC: # Test-SdnExpressBGP -RouterIPAddress 10.10.182.3 -LocalIPAddress 10.10.182.7 -LocalASN 64628 -verbose -ComputerName sa18n22mux02 # computer does not have NIC: # $h = New-SdnExpressBGPHost -computername sa18n22-2 -localipaddress "10.10.182.20" -prefixlength 26 -vlanid 11 # $h | Test-SdnExpressBGP -RouterIPAddress "10.10.182.3" -LocalASN 64628 # $h | Remove-SdnExpressBGPHost function GetBGPPathAttributeType { param( [int] $code ) if ($code -lt $BGP_PATH_ATTRIBUTE_TYPES.count) { return $BGP_PATH_ATTRIBUTE_TYPES[$code] } else { return "$code" } } function CapabilityCodeLookup { param( [int] $code ) switch ($code) { 0 { return "Reserved" } 1 { return "Multiprotocol Extensions for BGP-4" } 2 { return "Route Refresh Capability for BGP-4" } 3 { return "Outbound Route Filtering Capability" } 4 { return "Multiple routes to a destination capability (deprecated)" } 5 { return "Extended Next Hop Encoding" } 6 { return "BGP Extended Message" } 7 { return "BGPsec Capability" } 8 { return "Multiple Labels Capability" } 9 { return "BGP Role (TEMPORARY)" } { $_ -in 10..63 } { return "Unassigned" } 64 { return "Graceful Restart Capability" } 65 { return "Support for 4-octet AS number capability" } 66 { return "Deprecated" } 67 { return "Support for Dynamic Capability (capability specific)" } 68 { return "Multisession BGP Capability" } 69 { return "ADD-PATH Capability" } 70 { return "Enhanced Route Refresh Capability" } 71 { return "Long-Lived Graceful Restart (LLGR) Capability" } 72 { return "Routing Policy Distribution" } 73 { return "FQDN Capability" } { $_ -in 74..127 } { return "Unassigned" } 128 { return "Prestandard Route Refresh (deprecated)" } 129 { return "Prestandard Outbound Route Filtering (deprecated)" } 130 { return "Prestandard Outbound Route Filtering (deprecated)" } 131 { return "Prestandard Multisession (deprecated)" } { $_ -in 132..183 } { return "Unassigned" } 184 { return "Prestandard FQDN (deprecated)" } 185 { return "Prestandard OPERATIONAL message (deprecated)" } { $_ -in 186..238 } { return "Unassigned" } { $_ -in 239..254 } { return "Reserved for Experimental Use" } 255 { return "Reserved" } } } function GetBytes { param( [byte[]] $bytes, [int] $offset, [int] $count ) return $bytes[$offset..($offset + $count - 1)] } function GetInt32 { param( [byte[]] $bytes, [int] $offset ) return [System.Int64]($bytes[$offset] * [Math]::pow(2, 24)) + ($bytes[$offset + 1] * [Math]::pow(2, 16)) + ($bytes[$offset + 2] * [Math]::pow(2, 8)) + $bytes[$offset + 3] } function GetInt16 { param( [byte[]] $bytes, [int] $offset ) return [Int]($bytes[$offset] * 256) + $bytes[$offset + 1] } function GetInt8 { param( [byte[]] $bytes, [int] $offset ) return [Int]$bytes[$offset] } function SetInt8 { param( [byte[]] $bytes, [int] $offset, [int] $value ) $bytes[$offset] = $value return $bytes } function SetInt16 { param( [byte[]] $bytes, [int] $offset, [int] $value ) $bytes[$offset] = [byte](($value -shr 8) -band [Byte] 0xFF) $bytes[$offset + 1] = [byte]( $value -band [Byte] 0xFF) return $bytes } function SetInt32 { param( [byte[]] $bytes, [int] $offset, [int] $value ) $bytes[$offset] = $value -band 0xFF $bytes[$offset + 1] = ($value -shr 8) -band 0xFF $bytes[$offset + 2] = ($value -shr 16) -band 0xFF $bytes[$offset + 3] = ($value -shr 24) -band 0xFF return $bytes } function AddInt8 { param( [byte[]] $bytes, [int] $value ) $bytes += [byte] $value return $bytes } function AddInt16 { param( [byte[]] $bytes, [int] $value ) $bytes += [byte] (($value -shr 8) -band [byte] 0xFF) $bytes += [byte] ($value -band [byte] 0xFF) return $bytes } function AddInt32 { param( [byte[]] $bytes, [System.Int64] $value ) $bytes += [byte]($value -band [byte]0xFF) $bytes += [byte](($value -shr 8) -band [byte]0xFF) $bytes += [byte](($value -shr 16) -band [byte]0xFF) $bytes += [byte](($value -shr 24) -band [byte]0xFF) return $bytes } function Get-BGPHeader { param( [byte[]] $bytes ) $header = @{} $header.Marker = GetBytes $bytes $BGP_HEADER_MARKER_OFFSET 16 $header.Length = GetInt16 $bytes $BGP_HEADER_LENGTH_OFFSET $header.Type = $BGP_TYPES[(GetInt8 $bytes $BGP_HEADER_TYPE_OFFSET)] return $header } function New-BGPOpen { [byte[]] $bytes = @() for ($i = 0; $i -lt 16; $i++) { $bytes += [byte] 0xFF } $bytes = AddInt16 $bytes 0 $bytes = AddInt8 $bytes 1 #OPEN $bytes = AddInt8 $bytes 4 $bytes = AddInt16 $bytes $LocalASN #64628 $bytes = AddInt16 $bytes 180 $bytes = AddInt32 $bytes (([IPAddress] $localIPAddress).Address) #Uncomment if no optional params: #$bytes = AddInt8 $bytes 0 #opt parms - hardcoded for now to include: $bytes = AddInt8 $bytes 12 #opt params len $bytes = AddInt8 $bytes 2 #type: capability code $bytes = AddInt8 $bytes 10 #len # 1 - Multiprotocol extensions for BGP-4: 0101 $bytes = AddInt8 $bytes 1 #capability code $bytes = AddInt8 $bytes 4 #len $bytes = AddInt8 $bytes 0 $bytes = AddInt8 $bytes 1 $bytes = AddInt8 $bytes 0 $bytes = AddInt8 $bytes 1 # 2 - Route Refresh Capability for BGP-4 $bytes = AddInt8 $bytes 2 #capability code $bytes = AddInt8 $bytes 0 #len # 128 - Prestandard Route Refresh (deprecated) $bytes = AddInt8 $bytes 128 #capability code $bytes = AddInt8 $bytes 0 #len $bytes = SetInt16 $bytes $BGP_HEADER_LENGTH_OFFSET (29 + (GetInt8 $bytes $BGP_OPEN_OPTPARMLEN_OFFSET)) return $bytes } function New-BGPKeepalive { [byte[]] $bytes = @() for ($i = 0; $i -lt 16; $i++) { $bytes += [byte] 0xFF } $bytes = AddInt16 $bytes 19 $bytes = AddInt8 $bytes 4 #KEEPALIVE return $bytes } function Get-BGPUpdate { param( [byte[]] $bytes ) $update = @{} $TotalLen = GetInt16 $bytes $BGP_HEADER_LENGTH_OFFSET $WithdrawnRoutesLen = GetInt16 $bytes $BGP_UPDATE_WITHDRAWN_OFFSET $PathAttributesLen = GetInt16 $bytes ($BGP_UPDATE_WITHDRAWN_OFFSET + $withdrawnRoutesLen + 2) $NetworkLayerLen = $TotalLen - 23 - $PathAttributesLen - $WithdrawnRoutesLen $WithdrawnRoutesStart = $BGP_UPDATE_WITHDRAWN_OFFSET $PathAttributesStart = $WithdrawnRoutesStart + 2 + $WithdrawnRoutesLen $NetworkLayerStart = $PathAttributesStart + 2 + $PathAttributesLen Write-Verbose "Total length: $TotalLen" Write-Verbose "Withdrawn routes start: $WithdrawnRoutesStart" Write-Verbose "Withdrawn routes len: $WithdrawnRoutesLen" Write-Verbose "Path Attributes start: $PathAttributesStart" Write-Verbose "Path Attributes len: $PathAttributesLen" Write-Verbose "Network Layer start: $NetworkLayerStart" Write-Verbose "Network Layer len: $NetworkLayerLen" Write-Verbose "Parsing Withdrawn Routes" $update.WithdrawnRoutes = @() $index = $WithdrawnRoutesStart + 2 while ($index -lt $PathAttributesStart) { $PrefixBits = GetInt8 $bytes $index $PrefixBytes = [math]::ceiling($PrefixBits / 8) if ($PrefixBytes -gt 0) { $subnetBytes = GetBytes $bytes ($index + 1) $PrefixBytes for ($i = $PrefixBytes; $i -lt 4; $i++) { $subnetBytes += 0 } $subnet = ([ipaddress] [byte[]]$subnetBytes).ipaddresstostring $update.WithdrawnRoutes += "$subnet/$prefixBits" } else { $update.WithdrawnRoutes += "0.0.0.0/0" } $index += $PrefixBytes + 1 } Write-Verbose "Parsing Path Attributes" $update.PathAttributes = @() $index = $PathAttributesStart + 2 while ($index -lt $NetworkLayerStart) { $PA = @{} $AttrFlags = GetInt8 $bytes ($index) $PA.Optional = [bool]($AttrFlags -band 128) $PA.Transitive = [bool]($AttrFlags -band 64) $PA.Partial = [bool]($AttrFlags -band 32) $PA.ExtendedLength = [bool]($AttrFlags -band 16) $PA.AttrType = GetBGPPathAttributeType(GetInt8 $bytes ($index + 1)) if ($PA.ExtendedLength) { $AttrLen = GetInt16 $bytes ($index + 2) $AttrLenLen = 2 } else { $AttrLen = GetInt8 $bytes ($index + 2) $AttrLenLen = 1 } switch ($PA.AttrType) { "ORIGIN" { $PA.Value = $BGP_PATH_ATTRIBUTE_ORIGIN_VALUE[(GetInt8 $bytes ($index + 2 + $AttrLenLen))] } "AS_PATH" { $PA.ASPath = @() $pathindex = 0 while ($pathindex -lt $AttrLen) { $AttrValue = @{} $AttrValue.PathSegmentType = $BGP_PATH_ATTRIBUTE_AS_PATH_SEGMENT_TYPE[(GetInt8 $bytes ($index + $pathindex + 2 + $AttrLenLen))] $ASPaths = GetInt8 $bytes ($index + $pathindex + 4) $ASIndex = 0 $AttrValue.ASes = @() while ($ASIndex -lt $ASPaths) { $AttrValue.ASes += GetInt16 $bytes ($index + $pathindex + 4 + $AttrLenLen + $ASIndex * 2) $ASIndex += 1 } $PA.ASPath += $AttrValue $PathIndex += 2 + $ASPaths * 2 } #<path segment type (1oct), path segment length (1oct), path segment value> #types: 1 AS_SET, 2 AS_SEQUENCE #value: set of ASes (Int16 ea) } "NEXT_HOP" { $PA.NextHop = ([ipaddress] (GetInt32 $bytes ($index + 2 + $AttrLenLen))).ipaddresstostring } { $_ -in "MULTI_EXIT_DISC", "LOCAL_PREF" } { $PA.Value = (GetInt32 $bytes ($index + 2 + $AttrLenLen)) } "ATOMIC_AGGREGATE" { #Intentionally blank, no Attr Value } "AGGREGATOR" { $PA.AS = (GetInt16 $bytes ($index + 2 + $AttrLenLen)) $PA.IPAddress = ([ipaddress] (GetInt32 $bytes ($index + 4 + $AttrLenLen))).ipaddresstostring } default { $PA.AttrValue = GetBytes $Bytes ($index + 2 + $AttrLenLen) $AttrLen } } $update.PathAttributes += $PA $index += $AttrLen + 2 + $AttrLenLen } Write-Verbose "Parsing Network Layer Reachability" $update.Prefixes = @() $index = $NetworkLayerStart while ($index -lt $TotalLen) { $PrefixBits = GetInt8 $bytes $index $PrefixBytes = [math]::ceiling($PrefixBits / 8) if ($PrefixBytes -gt 0) { $subnetBytes = GetBytes $bytes ($index + 1) $PrefixBytes for ($i = $PrefixBytes; $i -lt 4; $i++) { $subnetBytes += 0 } $subnet = ([ipaddress] [byte[]]$subnetBytes).ipaddresstostring $update.Prefixes += "$subnet/$prefixBits" } else { $update.Prefixes += "0.0.0.0/0" } $Index += $PrefixBytes + 1 } return $update } function Get-BGPOpen { param( [byte[]] $bytes ) $open = @{} $open.Version = GetInt8 $bytes $BGP_OPEN_VERSION_OFFSET $open.AS = GetInt16 $bytes $BGP_OPEN_AS_OFFSET $open.HoldTime = GetInt16 $bytes $BGP_OPEN_HOLDTIME_OFFSET $open.BGPID = ([ipaddress] (GetInt32 $bytes $BGP_OPEN_BGPID_OFFSET)).ipaddresstostring $OptParmLen = GetInt8 $bytes $BGP_OPEN_OPTPARMLEN_OFFSET if ($optParmLen -gt 0) { $OptParms = GetBytes $bytes $BGP_OPEN_OPTPARM_OFFSET $OptParmLen $open.OptParams = @() $index = 0 while ($index -lt $OptParmLen) { $newparam = @{} $newparamType = GetInt8 $OptParms ($index) $newparam.Type = $BGP_OPEN_OPTPARAM_TYPES[$newparamType] $newparamLength = GetInt8 $OptParms ($index + 1) $ParmValue = GetBytes $OptParms ($index + 2) ($newparamLength) $newparam.values = @() if ($newparamType -eq 2) { $capindex = 0 while ($capindex -lt $newparamlength) { $newcap = @{} $newcap.Code = CapabilityCodeLookup (GetInt8 $ParmValue ($capindex)) $newcapLength = GetInt8 $ParmValue ($capindex + 1) if ($newcaplength -gt 0) { $newcap.value = GetBytes $ParmValue ($capindex + 2) ($newcaplength) } $newparam.values += $newcap $capindex += $newcapLength + 2 } } $open.OptParams += $newparam $index += $newparamLength + 2 } } return $open } function Get-BGPNotification { param( [byte[]] $bytes ) $notification = @{} $notification.ErrorCode = $BGP_ERROR_CODES[(GetInt8 $bytes $BGP_NOTIFICATION_CODE_OFFSET)] if ((GetInt8 $bytes $BGP_NOTIFICATION_CODE_OFFSET) -eq 1) { #Message $notification.ErrorSubcode = $BGP_ERROR_SUBCODE_MESSAGE[(GetInt8 $bytes $BGP_NOTIFICATION_SUBCODE_OFFSET)] } elseif ((GetInt8 $bytes $BGP_NOTIFICATION_CODE_OFFSET) -eq 2) { #OPEN $notification.ErrorSubcode = $BGP_ERROR_SUBCODE_OPEN[(GetInt8 $bytes $BGP_NOTIFICATION_SUBCODE_OFFSET)] } elseif ((GetInt8 $bytes $BGP_NOTIFICATION_CODE_OFFSET) -eq 6) { #CEASE $notification.ErrorSubcode = $BGP_ERROR_SUBCODE_CEASE[(GetInt8 $bytes $BGP_NOTIFICATION_SUBCODE_OFFSET)] } else { $notification.ErrorSubcode = GetInt8 $bytes $BGP_NOTIFICATION_SUBCODE_OFFSET } $notification.Data = GetInt16 $bytes $BGP_NOTIFICATION_DATA_OFFSET ((GetInt16 $bytes $BGP_HEADER_LENGTH_OFFSET) - 21) return $notification } function Set-BGPState { param( [BGPState] $State ) Write-Verbose "BGP state change from $($Script:BGPState) to $State" $Script:bgpState = $State } function Get-BGPState { return $Script:bgpState } enum BGPOptParamType { Authentication Capabilities } enum BGPState { Idle Connect Active OpenSent OpenConfirm Established Custom } enum BGPOrigin { EGP IGP Incomplete } class BGPCapability { [String] $Code [byte[]] $Value [string]ToString() { return ($this.code) } } class BGPOptParam { [BGPOptParamType] $Type [BGPCapability[]] $Capabilities [string]ToString() { return ($this.type) } } class BGPPath { [string] $prefix [string] $NextHop [Int32[]] $Path [String] $LocPrf [Int32] $Metric [BGPOrigin] $Origin [string]ToString() { return ($this.prefix) } } class BGPPeer { [string] $LocalIPAddress [int32] $LocalAS [string] $RouterIPAddress [int32] $RouterAS [int16] $HoldTime [int16] $Version [string] $BGPID [BGPState] $State [BGPOptParam[]] $OptParams [BGPPath[]] $Routes } class BGPHost { [string] $ComputerName [string] $LocalIPAddress } function New-SdnExpressBGPHost { [CmdletBinding()] param( [String] $ComputerName = "localhost", [string] $SwitchName = "", [String] $LocalIPAddress, [Int32] $PrefixLength, [Int32] $VLANID = 0 ) #TODO: remember gateway parameter and during test add /32 route only if needed #TODO: test for hyper-v and Hyper-v powershell PS if ([String]::IsNullorEmpty($ComputerName) ) { Write-Verbose "Running locally." $Session = @{} } else { Write-Verbose "Running on $ComputerName." $Session = @{ session = new-pssession -computername $ComputerName } } Invoke-Command @session -ArgumentList $SwitchName, $LocalIPAddress, $PrefixLength, $VLANID { param( [string] $SwitchName, [String] $LocalIPAddress, [Int32] $PrefixLength, [Int32] $VLANID ) if ([string]::IsNullOrEmpty($SwitchName)) { $vmswitch = Get-vmswitch if ($null -ieq $vmswitch) { throw "No virtual switch found." } if ($vmswitch.count -gt 1) { throw "Hyper-V host contains more than one virtual switch. Use SwitchName parameter to select a virtual switch." } $SwitchName = $vmswitch.name } Get-vmnetworkadapter -managementos -Name BGP -erroraction silentlycontinue | remove-vmnetworkadapter Add-vmnetworkadapter -ManagementOS -SwitchName $SwitchName -Name "BGP" | out-null Set-VMNetworkAdapterVlan -ManagementOS -VMNetworkAdaptername "BGP" -VlanId $VLANID -Access | out-null Set-NetIPInterface -InterfaceAlias "vEthernet (BGP)" -Dhcp Disabled | out-null Set-dnsclient -InterfaceAlias "vEthernet (BGP)" -RegisterThisConnectionsAddress $False | out-null new-NetIPAddress -IPAddress $LocalIPAddress -InterfaceAlias "vEthernet (BGP)" -PrefixLength $PrefixLength | out-null } $BGPHost = [BGPHost]::New() $BGPhost.Computername = $ComputerName $BGPhost.LocalIPAddress = $LocalIPAddress return $BGPHost } function Remove-SdnExpressBGPHost { [CmdletBinding()] param( [string] $ComputerName = $null, [Parameter(Mandatory = $false, ValueFromPipeline = $true)] [BGPHost] $BGPHost = $null ) if ($BGPHost) { $computername = $BGPHost.ComputerName } if ([String]::IsNullorEmpty($Computername) ) { Write-Verbose "Running locally." $Session = @{} } else { Write-Verbose "Running on $ComputerName." $Session = @{ session = new-pssession -computername $ComputerName } } Invoke-Command @session { Get-vmnetworkadapter -managementos -Name BGP -erroraction silentlycontinue | remove-vmnetworkadapter } } function Test-SdnExpressBGP { [CmdletBinding()] param( [String] $RouterIPAddress, [String] $LocalIPAddress, [String] $LocalASN, [int32] $Wait = 3, [String] $ComputerName = "localhost", [Switch] $force, [Parameter(Mandatory = $false, ValueFromPipeline = $true)] [BGPHost] $BGPHost = $null ) if ($BGPHost) { $ComputerName = $BGPHost.ComputerName $LocalIPAddress = $BGPHost.LocalIPAddress } if ([String]::IsNullorEmpty($Computername) ) { Write-Verbose "Running locally." $Session = @{} } else { Write-Verbose "Running on $ComputerName." $Session = @{ session = new-pssession -computername $ComputerName } } $BGP_HEADER_LEN = 19 $BGP_HEADER_MARKER_OFFSET = 0 $BGP_HEADER_LENGTH_OFFSET = 16 $BGP_HEADER_TYPE_OFFSET = 18 $BGP_TYPES = @("", "OPEN", "UPDATE", "NOTIFICATION", "KEEPALIVE", "ROUTEREFRESH") $BGP_OPEN_VERSION_OFFSET = $BGP_HEADER_LEN + 0 $BGP_OPEN_AS_OFFSET = $BGP_HEADER_LEN + 1 $BGP_OPEN_HOLDTIME_OFFSET = $BGP_HEADER_LEN + 3 $BGP_OPEN_BGPID_OFFSET = $BGP_HEADER_LEN + 5 $BGP_OPEN_OPTPARMLEN_OFFSET = $BGP_HEADER_LEN + 9 $BGP_OPEN_OPTPARM_OFFSET = $BGP_HEADER_LEN + 10 $BGP_OPEN_OPTPARAM_TYPES = @("", "Authentication (deprecated)", "Capabilities") $BGP_ERROR_CODES = @("", "Message Header Error", "OPEN Message Error", "UPDATE Message Error", "Hold Timer Expired", "Finite State Machine Error", "Cease") $BGP_ERROR_SUBCODE_MESSAGE = @("", "Connection Not Synchronized.", "Bad Message Length.", "Bad Message Type.") $BGP_ERROR_SUBCODE_OPEN = @("", "Unsupported Version Number.", "Bad Peer AS.", "Bad BGP Identifier.", "Unsupported Optional Parameter.", "5 [Deprecated]", "Unacceptable Hold Time.") $BGP_ERROR_SUBCODE_CEASE = @("", "Maximum Number of Prefixes Reached.", "Administrative Shutdown.", "Peer De-configured.", "Administrative Reset.", "Connection Rejected.", "Other Configuration Change.", "Connection Collision Resolution.", "Out of Resources.") $BGP_NOTIFICATION_CODE_OFFSET = $BGP_HEADER_LEN + 0 $BGP_NOTIFICATION_SUBCODE_OFFSET = $BGP_HEADER_LEN + 1 $BGP_NOTIFICATION_DATA_OFFSET = $BGP_HEADER_LEN + 2 $BGP_UPDATE_WITHDRAWN_OFFSET = $BGP_HEADER_LEN $BGP_PATH_ATTRIBUTE_TYPES = @("", "ORIGIN", "AS_PATH", "NEXT_HOP", "MULTI_EXIT_DISC", "LOCAL_PREF", "ATOMIC_AGGREGATE", "AGGREGATOR") $BGP_PATH_ATTRIBUTE_ORIGIN_VALUE = @("IGP", "EGP", "INCOMPLETE") $BGP_PATH_ATTRIBUTE_AS_PATH_SEGMENT_TYPE = @("", "AS_SET", "AS_SEQUENCE") [BGPState] $Script:bgpState = [BGPState]::Idle Set-BGPState Idle $Results = [BGPPeer]::new() $results.LocalIPAddress = $LocalIPAddress $results.LocalAS = $LocalASN $results.RouterIPAddress = $RouterIPAddress try { Write-Verbose "Attempting BGP connection from $localIPAddress to $RouterIPAddress" Invoke-Command @Session -argumentlist $LocalIPAddress,$RouterIPAddress,$wait,$force { param( $LocalIPAddress, $RouterIPAddress, $wait, $force ) $port = "179" $RestoreMuxState = $false $mux = Get-Service -Name 'SlbMux' -ErrorAction SilentlyContinue if ($mux) { $muxstartup = $mux.starttype $muxstatus = $mux.status if (($muxstatus -ne "Stopped") -or ($Muxstartup -ne "Disabled")) { if ($force) { $RestoreMuxState = $true Set-Service -Name 'SlbMux' -StartupType Disabled Stop-Service -Name 'SlbMux' } else { throw "SLB Mux service is active. Use -force to temporarily disable it during test." } } } else { $muxStatus = $null } $IPEndpoint = New-object System.Net.IPEndPoint([IPAddress]$LocalIPAddress, 0) try { $tcp = New-Object System.Net.Sockets.TcpClient($IPEndpoint) } catch { throw "Local IP address $LocalIPAddress not found on computer $(hostname)." } try { $tcp.Connect($routerIPAddress, $Port) } catch { throw "BGP Listener not found at RouterIPAddress $RouterIPAddress." } $tcpstream = $tcp.GetStream() $reader = New-Object System.IO.BinaryReader($tcpStream) $writer = New-Object System.IO.BinaryWriter($tcpStream) $reader.BaseStream.ReadTimeout = $Wait * 1000 } Set-BGPState -State Connect $IsConnected = Invoke-Command @Session { $tcp.connected } if ($IsConnected) { Write-Verbose "BGP Connection Initiated." #Send OPEN $chars = new-BGPOpen Write-Verbose "Sending BGP OPEN" Write-Verbose "Write bytes[$($chars.count)] $chars" Invoke-Command @Session -argumentlist (, $chars) { param( [byte[]] $chars ) $writer.Write([byte[]]$chars) $writer.Flush() } Write-Verbose "Write complete." Set-BGPState OpenSent Write-Verbose "Entering read loop." do { try { $chars = Invoke-Command @Session { try { $chars = @() $chars = @($reader.Readbyte()) while (($reader.PeekChar() -ne -1) -or ($tcp.Available)) { $chars += $reader.Readbyte() } return $chars } catch { #return @() if ($_.Exception.InnerException.InnerException.NativeErrorCode -eq 10060) { #timedout throw "Timeout" } else { throw $_ } } } } catch { Write-Verbose "Caught. $($_)" if ($_.exception.Message -eq "Timeout") { #timedout NativeErrorCode 10060 if (!$bytesRemain) { Write-Verbose "Timeout, no updates recieved within $Wait seconds. Exiting." break } } else { $err = "Connection closed. BGP active at routerIPAddress, but session rejected by remote based on localIPAddress." Write-Verbose $err Set-BGPState Idle throw $err } } $bytesRemain = $chars.count while ($bytesremain -gt 0) { Write-Verbose "Received data, parsing header. Buffer contains $bytesRemain bytes." Write-Verbose "Buffer bytes[$($chars.count)] $chars" $header = Get-BGPHeader $chars Write-Verbose ($header | ConvertTo-Json -Depth 10) $bytesRemain -= $header.Length Write-Verbose "$bytesRemain bytes remain to parse." switch ($header.Type) { "OPEN" { Write-Verbose "Parsing OPEN message." $open = Get-BGPOpen $chars Write-Verbose ($open | ConvertTo-Json -Depth 10) $Results.RouterAS = $open.AS $Results.HoldTime = $open.HoldTime $Results.Version = $open.Version $Results.BGPID = $open.BGPID foreach ($optparam in $open.optparams) { $op = [BGPOptParam]::New() $op.Type = $optparam.type foreach ($cap in $optparam.values) { $c = [BGPCapability]::new() $c.Code = $cap.Code $c.Value = $cap.value $op.Capabilities += $c } $results.OptParams += $op } Set-BGPState OpenConfirm } "KEEPALIVE" { if ((Get-BGPState) -in [BGPState]::OpenConfirm, [BGPState]::Established) { $chars = New-BGPKeepalive Write-Verbose "Sending BGP Keepalive" Write-Verbose "Write bytes[$($chars.count)] $chars" Invoke-Command @Session -argumentlist (, $chars) { param( $chars ) $writer.Write([byte[]]$chars) $writer.Flush() } Set-BGPState -State Established Write-Verbose "Success, BGP session established!" } else { Write-Verbose "Out of order Keepalive received in state $(Get-BGPState)." } } "NOTIFICATION" { Write-Verbose "Parsing NOTIFICATION message." $open = Get-BGPNotification $chars Write-Verbose ($open | ConvertTo-Json -Depth 10) Write-Verbose "BGP peer found, but connection refused." Set-BGPState -State Idle throw "BGP peer found, but connection refused. ErrorCode: $($open.Errorcode), ErrorSubcode: $($open.ErrorSubcode)" } "UPDATE" { Write-Verbose "Parsing UPDATE message." $update = Get-bgpupdate $chars Write-Verbose ($update | ConvertTo-Json -Depth 10) $NextHop = ($Update.PathAttributes | where-object { $_.AttrType -eq "NEXT_HOP" }).NextHop $ASPath = ($Update.PathAttributes | where-object { $_.AttrType -eq "AS_PATH" }).ASPath.ASes $Origin = ($Update.PathAttributes | where-object { $_.AttrType -eq "ORIGIN" }).Value $LocPrf = ($Update.PathAttributes | where-object { $_.AttrType -eq "LOCAL_PREF" }).Value $Metric = ($Update.PathAttributes | where-object { $_.AttrType -eq "MULTI_EXIT_DISC" }).Value foreach ($prefix in $Update.Prefixes) { $BGPRoute = [BGPPath]::New() $BGPRoute.Prefix = $Prefix $BGPRoute.NextHop = $NextHop $BGPRoute.Path = $ASPath $BGPRoute.LocPrf = $LocPrf $BGPRoute.Metric = $Metric $BGPRoute.Origin = $Origin $Results.Routes += $BGPRoute } } "ROUTEREFRESH" { Write-Verbose "Parsing ROUTEREFRESH message." Set-BGPState Custom } } $chars = getBytes $chars ($header.length) $bytesremain Write-Verbose "BGP State: $(Get-BGPState)" Write-Verbose "Returning to read loop, waiting up to $wait seconds for more data." } } until ((Get-BGPState) -in [BGPState]::Custom, [BGPState]::Idle) } else { Write-Verbose "Not connected." throw "Listener found at BGP port 179 of $RouterIPAddress, but it closed the connection from $LocalIPAddress." } } finally { Invoke-Command @Session { if ($null -ne $reader) { $reader.Close() } if ($null -ne $writer) { $writer.Close() } if ($null -ne $tcp) { $tcp.Close() } if ($RestoreMuxState) { Set-Service -Name SlbMux -StartupType $MuxStartup if ($MuxStatus -eq "Running") { Start-Service -Name SlbMux } } } if (![String]::IsNullorEmpty($Computername) ) { remove-pssession $session.session } } $results.State = (Get-BGPState) $results } Export-ModuleMember -Function Test-SdnExpressBGP Export-ModuleMember -Function New-SdnExpressBGPHost Export-ModuleMember -Function Remove-SdnExpressBGPHost # SIG # Begin signature block # MIInRAYJKoZIhvcNAQcCoIInNTCCJzECAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAFy7uG6K5iDN3Q # PqVLwNywqitiiRQscR3bfpBmoaAjZKCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghngMIIZ3AIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEILUq68kew0+s1IjXVzWON64VtMRnJxXU46h9L1RhLiJ0MEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAqJEMMu1NaweApQ34 # t3w7Zq5sBIRDuU1kdAhckvSKXacB9ruKxhihAjVLrGzmrH+teziFYjQwDI6MTSta # XKPcj3iuAEIUoTI5lv04yMCyCkNqbxvzXDgrdbTk7cKL3XdBapc5gtGRSVFstO4h # +2vP+gOXoET2wbSyBRpn2jh+cFJZn2WPpOD+knKSkSpTK9BWRHUNARYdPer/VFAW # VpAXUS/1DSSPbIp3fKql7TGba2sfxrXazSROF6IwJM54sx8E9fTdvmnVNdqvCEzq # PNGKKwCuWdV3k0w7Wb6wqDPCxPTHeIls3kBQqH2sa1sWCEYkuUq6gt1zxr1gNs7h # tdDLTKGCF7AwghesBgorBgEEAYI3AwMBMYIXnDCCF5gGCSqGSIb3DQEHAqCCF4kw # gheFAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFF # MIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCCFaCngA+IXDq/j # emzBpCNhdLX7E2q0EQjmuLcqYmfhawIGaomFu2dVGBMyMDI2MDkwMjE1MjU0MS4x # ODdaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp # bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo1OTFBLTA1RTAtRDk0NzEl # MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEf4wggcoMIIF # EKADAgECAhMzAAACFI3NI0TuBt9yAAEAAAIUMA0GCSqGSIb3DQEBCwUAMHwxCzAJ # BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv # c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgxOFoXDTI2MTEx # MzE4NDgxOFowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # LTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEn # MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjU5MUEtMDVFMC1EOTQ3MSUwIwYDVQQD # ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEF # AAOCAg8AMIICCgKCAgEAyU+nWgCUyvfyGP1zTFkLkdgOutXcVteP/0CeXfrF/66c # hKl4/MZDCQ6E8Ur4kqgCxQvef7Lg1gfso1EWWKG6vix1VxtvO1kPGK4PZKmOeoeL # 68F6+Mw2ERPy4BL2vJKf6Lo5Z7X0xkRjtcvfM9T0HDgfHUW6z1CbgQiqrExs2NH2 # 7rWpUkyTYrMG6TXy39+GdMOTgXyUDiRGVHAy3EqYNw3zSWusn0zedl6a/1DbnXIc # vn9FaHzd/96EPNBOCd2vOpS0Ck7kgkjVxwOptsWa8I+m+DA43cwlErPaId84GbdG # zo3VoO7YhCmQIoRab0d8or5Pmyg+VMl8jeoN9SeUxVZpBI/cQ4TXXKlLDkfbzzSQ # riViQGJGJLtKS3DTVNuBqpjXLdu2p2Yq9ODPqZCoiNBh4CB6X2iLYUSO8tmbUVLM # MEegbvHSLXQR88QNICjFoBBDCDydoTo9/TNkq80mO77wDM04tPdvbMmxT01GTod6 # 0JJxUGmMTgseghdBGjkN+D6GsUpY7ta7hP9PzLrs+Alxu46XT217bBn6EwJsAYAc # 9C28mKRUcoIZWQRb+McoZaSu2EcSzuIlAaNIQNtGlz2PF3foSeGmc/V7gCGs8AHk # iKwXzJSPftnsH8O/R3pJw2D/2hHE3JzxH2SrLX1FdI7Drw145PkL0hbFL6MVCCkC # AwEAAaOCAUkwggFFMB0GA1UdDgQWBBTbX/bs1cSpyTYnYuf/Mt9CPNhwGzAfBgNV # HSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5o # dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBU # aW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwG # CCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRz # L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNV # HRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIH # gDANBgkqhkiG9w0BAQsFAAOCAgEAP3xp9D4Gu0SH9B+1JH0hswFquINaTT+RjpfE # r8UmUOeDl4U5uV+i28/eSYXMxgem3yBZywYDyvf4qMXUvbDcllNqRyL2Rv8jSu8w # clt/VS1+c5cVCJfM+WHvkUr+dCfUlOy9n4exCPX1L6uWwFH5eoFfqPEp3Fw30irM # N2SonHBK3mB8vDj3D80oJKqe2tatO38yMTiREdC2HD7eVIUWL7d54UtoYxzwkJN1 # t7gEEGosgBpdmwKVYYDO1USWSNmZELglYA4LoVoGDuWbN7mD8VozYBsfkZarOyrJ # YlF/UCDZLB8XaLfrMfMyZTMCOuEuPD4zj8jy/Jt40clrIW04cvLhkhkydBzcrmC2 # HxeE36gJsh+jzmivS9YvyiPhLkom1FP0DIFr4VlqyXHKagrtnqSF8QyEpqtQS7wS # 7ZzZF0eZe0fsYD0J1RarbVuDxmWsq45n1vjRdontuGUdmrG2OGeKd8AtiNghfnab # VBbgpYgcx/eLyW/n40eTbKIlsm0cseyuWvYFyOqQXjoWtL4/sUHxlWIsrjnNarNr # +POkL8C1jGBCJuvm0UYgjhIaL+XBXavrbOtX9mrZ3y8GQDxWXn3mhqM21ZcGk83x # SRqB9ecfGYNRG6g65v635gSzUmBKZWWcDNzwAoxsgEjTFXz6ahfyrBLqshrjJXPK # fO+9Ar8wggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3 # DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G # A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIw # MAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAx # MDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVT # MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l # LVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA # 5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/ # XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1 # hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7 # M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3K # Ni1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy # 1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF80 # 3RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQc # NIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahha # YQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkL # iWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV # 2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIG # CSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUp # zxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBT # MFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jv # c29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYI # KwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGG # MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186a # GMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3Br # aS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsG # AQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29t # L3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcN # AQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1 # OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYA # A7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbz # aN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6L # GYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3m # Sj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0 # SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxko # JLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFm # PWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC482 # 2rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7 # vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDWTCC # AkECAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp # bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo1OTFBLTA1RTAtRDk0NzEl # MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsO # AwIaAxUA2RysX196RXLTwA/P8RFWdUTpUsaggYMwgYCkfjB8MQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt # ZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO5Cg5QwIhgPMjAyNjA5 # MDIxMTE0MjhaGA8yMDI2MDkwMzExMTQyOFowdzA9BgorBgEEAYRZCgQBMS8wLTAK # AgUA7kKDlAIBADAKAgEAAgIRYAIB/zAHAgEAAgISzjAKAgUA7kPVFAIBADA2Bgor # BgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAID # AYagMA0GCSqGSIb3DQEBCwUAA4IBAQBxVJrTqdxHUT6M3grWUezZi2bluOTvfbGN # wLixka6hdDLNM3b+Im1pCCNWtg/pS2pgPbH6TKckElY/bu3VqkUOhbcUIibGQ5aa # Ko5R16Ea03AJHWurDWtwbf8skis+KEJAojTFw4n6FuMkRkyxgwkzDcpVVsjgf4YX # zSJ9rPLBRYgwtaN615LegHY3uGlzKFSR3TpVI00FYSNaeOVrIZZv0pr2uk0v2tR9 # UPcT9XrPKFYUumnq/qcVFsI1LTy/qOLIQa0/Te+ZTRlNcUenajCgLULGCCIvD7wM # Y1yrBZBmGO+uK0CFwcxBDu7iSAujSK797CiHDXOzhvXnynJwkZD0MYIEDTCCBAkC # AQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV # BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQG # A1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIUjc0jRO4G # 33IAAQAAAhQwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG # 9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQg4k7dUqJ3iNyMDRQ2R/pRiZ3gD+3nbMb7 # 7e6flvASSWcwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCA2eKvvWx5bcoi4 # 3bRO3+EttQUCvyeD2dbXy/6+0xK+xzCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0 # YW1wIFBDQSAyMDEwAhMzAAACFI3NI0TuBt9yAAEAAAIUMCIEIAj3FrJ6dtM9HGN2 # FjKA6w/5tNLhRf9MoardedLgGlx2MA0GCSqGSIb3DQEBCwUABIICACVmPw5PYZsV # VzcvWk+66g1M58DKnZ8v+S6CndyKXujqtjgC1uXcQGa2Jkpm/K8NDPOGfMuFOg/I # 7ZMkn/62qQJKAWXhSLSlVFJ2iqCyXT51w3LJ2UNGMUL3E3GVflQDexIfy78i1jvE # EK3zD0dwSAX2liLZ1WgBDaF7YZ87QcLT8+yf9ccKA3SAorV0MHlpQLMcZUjpJbdv # rwN4L/m8zpGDNhCuCuFSh/GI+QWKijFg0Qg22aWtY0X1Z6r9LzGVjIcl+xHOJzdL # 7WsXGbhwTkMhDs3ft4pBTkY2kR5Z+tcDXEiDXywMMR09V5DMyzhbg0MStFED0yxX # piUb6Izm7v42GmCqge+r2BgNhj2dMXg2k6FUmVYzHACsXSxsu2vab6jJj3tP+W85 # /L5aigYR7Nmf4ASYyy/NCPtTlNOMwQzaenBfLSb+VU9jW2U1ei3L6ul/6n+L3wgd # GI7HibIW1rHDRtC1Yxncbo2iT7rB+z3USSVJ2xGJDuqbgNRMydY+llh4vaLU5CBp # 6/RCIn4YDTmEypNHlz+UqgDf2ZONNcdcYcgQ7VEVVEXIsMim2Z56Nr/tGZx98F0V # 4TUZiO2GxuVzAR7e1CZmmnMZvoKSdtX3RUKu+EmajzWRawkTvkCeXRfwiVfH+CHZ # 2cDbONON7tBtKg1Rvs0A8heKwukernk6 # SIG # End signature block |