[Fail2Ban] SSH: banned 61.147.103.72

Hi,<br /><br><br /><br>The IP 61.147.103.72 has just been banned by Fail2Ban after<br /><br>5 attempts against SSH.<br /><br><br /><br><br /><br>Here are more information about <a href="http://61.147.103.72">61.147.103.72</a>:<br /><br><br /><br>[Querying <a href="http://whois.apnic.net">whois.apnic.net</a>]<br /><br>[<a href="http://whois.apnic.net">whois.apnic.net</a>]<br /><br>% [<a href="http://whois.apnic.net">whois.apnic.net</a>]<br /><br>% Whois data copyright terms <a href="http://www.apnic.net/db/dbcopyright.html">http://www.apnic.net/db/dbcopyright.html</a><br /><br><br /><br>% Information related to '61.147.0.0 - 61.147.255.255'<br /><br><br /><br>inetnum: 61.147.0.0 - 61.147.255.255<br /><br>netname: CHINANET-JS<br /><br>descr: CHINANET jiangsu province network<br /><br>descr: China Telecom<br /><br>descr: A12,Xin-Jie-Kou-Wai Street<br /><br>descr: Beijing 100088<br /><br>country: CN<br /><br>admin-c: CH93-AP<br /><br>tech-c: CJ186-AP<br /><br>mnt-by: MAINT-CHINANET<br /><br>mnt-lower: MAINT-CHINANET-JS<br /><br>mnt-routes: maint-chinanet-js<br /><br>changed: <a href="mailto:hostmaster@ns.chinanet.cn.net">hostmaster@ns.chinanet.cn.net</a> 20020209<br /><br>changed: <a href="mailto:hostmaster@ns.chinanet.cn.net">hostmaster@ns.chinanet.cn.net</a> 20030306<br /><br>status: ALLOCATED non-PORTABLE<br /><br>source: APNIC<br /><br><br /><br>role: CHINANET JIANGSU<br /><br>address: 260 Zhongyang Road,Nanjing 210037<br /><br>country: CN<br /><br>phone: +86-25-86588231<br /><br>phone: +86-25-86588745<br /><br>fax-no: +86-25-86588104<br /><br>e-mail: <a href="mailto:ip@jsinfo.net">ip@jsinfo.net</a><br /><br>remarks: send anti-spam reports to <a href="mailto:spam@jsinfo.net">spam@jsinfo.net</a><br /><br>remarks: send abuse reports to <a href="mailto:abuse@jsinfo.net">abuse@jsinfo.net</a><br /><br>remarks: times in GMT+8<br /><br>admin-c: CH360-AP<br /><br>tech-c: CS306-AP<br /><br>tech-c: CN142-AP<br /><br>nic-hdl: CJ186-AP<br /><br>remarks: <a href="http://www.jsinfo.net">www.jsinfo.net</a><br /><br>notify: <a href="mailto:ip@jsinfo.net">ip@jsinfo.net</a><br /><br>mnt-by: MAINT-CHINANET-JS<br /><br>changed: <a href="mailto:dns@jsinfo.net">dns@jsinfo.net</a> 20090831<br /><br>changed: <a href="mailto:ip@jsinfo.net">ip@jsinfo.net</a> 20090831<br /><br>changed: <a href="mailto:hm-changed@apnic.net">hm-changed@apnic.net</a> 20090901<br /><br>source: APNIC<br /><br>changed: <a href="mailto:hm-changed@apnic.net">hm-changed@apnic.net</a> 20111114<br /><br><br /><br>person: Chinanet Hostmaster<br /><br>nic-hdl: CH93-AP<br /><br>e-mail: <a href="mailto:anti-spam@ns.chinanet.cn.net">anti-spam@ns.chinanet.cn.net</a><br /><br>address: No.31 ,jingrong street,beijing<br /><br>address: 100032<br /><br>phone: +86-10-58501724<br /><br>fax-no: +86-10-58501724<br /><br>country: CN<br /><br>changed: <a href="mailto:dingsy@cndata.com">dingsy@cndata.com</a> 20070416<br /><br>mnt-by: MAINT-CHINANET<br /><br>source: APNIC<br /><br><br /><br>% Information related to '<a href="http://61.147.0.0/16AS23650">61.147.0.0/16AS23650</a>'<br /><br><br /><br>route: <a href="http://61.147.0.0/16">61.147.0.0/16</a><br /><br>descr: CHINANET jiangsu province network<br /><br>country: CN<br /><br>origin: AS23650<br /><br>mnt-by: MAINT-CHINANET-JS<br /><br>changed: <a href="mailto:ip@jsinfo.net">ip@jsinfo.net</a> 20030414<br /><br>source: APNIC<br /><br><br /><br>% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)<br /><br><br /><br>Regards,<br /><br><br /><br>Fail2Ban

[Fail2Ban] SSH: banned 61.147.103.72

Hi, The IP 61.147.103.72 has just been banned by Fail2Ban after 5 attempts against SSH. Here are more information about 61.147.103.72 : [Que...

Read more »

liberacion de moviles octubre 2013 orange movistar yoigo vodafone

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;">El método más recomendable, fiable, rápido y seguro es el de realizar el<b>desbloqueo del terminal mediante el código IMEI,</b> un código único e identificativo de 15 cifras pregrabado en los teléfonos móviles. Además, este método mantiene la garantía. Ese número está registrado en la parte de atrás del móvil cuando se retira la batería y se puede obtener tecleando *#60#.</div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;"><b>Vodafone</b></div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;">En Vodafone llaman a este <b>servicio de desbloqueo ‘Simlock’,</b> y está disponible para clientes con contrato o tarjeta prepago. Para obtener el citado código hay que ser cliente de esta compañía, estar al corriente de pago y que se haya finalizado el periodo la permanencia. Para conseguirlo hay que llamar al número 123 y proporcionarle al agente el código IMEI, algo que incurre un gasto de 8 euros más impuestos por ‘costes de gestión’.</div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;"><br /></div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;"><b>Orange</b></div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;">Desbloquear un terminal en Orange se lleva a cabo a través del número 902 879 009, activo de lunes a viernes de 9.00 a 22.00 horas. El coste de la llamada es de 0,48 cts/min (impuestos indirectos no incluidos) y el <b>coste del servicio es de 9 euros</b> en caso de que la línea sea de contrato y 5 euros si es de prepago. Siembre con el contrato de permanencia expirado, sino los gastos se disparan.</div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;"><br /></div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;"><b>Movistar</b></div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;">La solicitud de desbloqueo con esta operadora hay que hacerlo llamando al teléfono de información 1004 y proporcionar una serie de datos, como la marca y el modelo del terminal a liberar, el número de teléfono, los <b>datos personales y el código IMEI.</b> Tiene un coste estimado de entre 15 y 20 euros.</div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;"><br /></div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;"><b>Yoigo</b></div><div style="font-family: arial, verdana; font-size: 14px; line-height: 22px; margin-bottom: 13px; padding: 0px 0px 10px;">Desde Yoigo aseguran que facilitan el código de liberación de forma ‘gratuita’ a aquellos que comprasen un teléfono con contrato y hayan cumplido la permanencia. El primer paso es enviar un mensaje de texto gratis al 622 para recibirlo. Aunque ya advierten de que <b>cuentan con una empresa externa, doctorSIM, </b>que es la que gestiona la liberalización y establece unas tarifas propias.</div></div>

liberacion de moviles octubre 2013 orange movistar yoigo vodafone

El método más recomendable, fiable, rápido y seguro es el de realizar el desbloqueo del terminal mediante el código IMEI,  un código único e...

Read more »

How Set Witless Network

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><a href="http://www.ipv4-ipv6.blogspot.com/" target="_blank">How Set Witless Network</a><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-3VZc9XtTyCbCVr73Z3Rc-p5wbOVdOM_Xs2En-NE2idpkEu1lq3nmWLlk-YZU6HgglvYEKhR8pLkBwfl9YfxAQSoBaVVdsGAhkTQosuNaYn9Cui-UppM6Mdt7JCjWANUpuCYbmMzO4Ok/s1600/ASRAFUL.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-3VZc9XtTyCbCVr73Z3Rc-p5wbOVdOM_Xs2En-NE2idpkEu1lq3nmWLlk-YZU6HgglvYEKhR8pLkBwfl9YfxAQSoBaVVdsGAhkTQosuNaYn9Cui-UppM6Mdt7JCjWANUpuCYbmMzO4Ok/s1600/ASRAFUL.jpg" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPHJxEKkO-eHtbocWxGH9uuMpK7lorD2piBAnrnDHODojwSe2ds3mBgkLmjyNORIC-8k-7T9wzlnP7Pqrdn-UG4oMUBdo2p_siV-jVwADiUtsV2mf-ETJXD4_CR4mSJ8o0u9DjD-xHMqc/s1600/imm_2013_09_24_22_31_28_202.JPG" imageanchor="1"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPHJxEKkO-eHtbocWxGH9uuMpK7lorD2piBAnrnDHODojwSe2ds3mBgkLmjyNORIC-8k-7T9wzlnP7Pqrdn-UG4oMUBdo2p_siV-jVwADiUtsV2mf-ETJXD4_CR4mSJ8o0u9DjD-xHMqc/s1600/imm_2013_09_24_22_31_28_202.JPG" width="320" /></a></div><span style="background-color: blue;"></span><br /><h4> www.ipv4-ipv6.blogspot.com</h4></div>FreeBSD Handbook Prev Chapter 32 Advanced Networking Next for access to site <span style="color: lime;"><u><a href="http://www.ipv4-ipv6.blogspot.com/">www.ipv4-ipv6.blogspot.com</a></u></span>________________________________________ 32.3 Wireless Networking Loader, Marc Fonvieille, and Murray Stokely. 32.3.1 Wireless Networking Basics Most wireless networks are based on the IEEE® 802.11 standards. A basic wireless network consists of multiple stations communicating with radios that broadcast in either the 2.4GHz or 5GHz band (though this varies according to the locale and is also changing to enable communication in the 2.3GHz and 4.9GHz ranges). 802.11 networks are organized in two ways: in infrastructure mode one station acts as a master with all the other stations associating to it; the network is known as a BSS and the master station is termed an access point (AP). In a BSS all communication passes through the AP; even when one station wants to communicate with another wireless station messages must go through the AP. In the second form of network there is no master and stations communicate directly. This form of network is termed an IBSS and is commonly known as an ad-hoc network. 802.11 networks were first deployed in the 2.4GHz band using protocols defined by the IEEE 802.11 and 802.11b standard. These specifications include the operating frequencies, MAC layer characteristics including framing and transmission rates (communication can be done at various rates). Later the 802.11a standard defined operation in the 5GHz band, including different signalling mechanisms and higher transmission rates. Still later the 802.11g standard was defined to enable use of 802.11a signalling and transmission mechanisms in the 2.4GHz band in such a way as to be backwards compatible with 802.11b networks. Separate from the underlying transmission techniques 802.11 networks have a variety of security mechanisms. The original 802.11 specifications defined a simple security protocol called WEP. This protocol uses a fixed pre-shared key and the RC4 cryptographic cipher to encode data transmitted on a network. Stations must all agree on the fixed key in order to communicate. This scheme was shown to be easily broken and is now rarely used except to discourage transient users from joining networks. Current security practice is given by the IEEE 802.11i specification that defines new cryptographic ciphers and an additional protocol to authenticate stations to an access point and exchange keys for doing data communication. Further, cryptographic keys are periodically refreshed and there are mechanisms for detecting intrusion attempts (and for countering intrusion attempts). Another security protocol specification commonly used in wireless networks is termed WPA. This was a precursor to 802.11i defined by an industry group as an interim measure while waiting for 802.11i to be ratified. WPA specifies a subset of the requirements found in 802.11i and is designed for implementation on legacy hardware. Specifically WPA requires only the TKIP cipher that is derived from the original WEP cipher. 802.11i permits use of TKIP but also requires support for a stronger cipher, AES-CCM, for encrypting data. (The AES cipher was not required in WPA because it was deemed too computationally costly to be implemented on legacy hardware.) Other than the above protocol standards the other important standard to be aware of is 802.11e. This defines protocols for deploying multi-media applications such as streaming video and voice over IP (VoIP) in an 802.11 network. Like 802.11i, 802.11e also has a precursor specification termed WME (later renamed WMM) that has been defined by an industry group as a subset of 802.11e that can be deployed now to enable multi-media applications while waiting for the final ratification of 802.11e. The most important thing to know about 802.11e and WME/WMM is that it enables prioritized traffic use of a wireless network through Quality of Service (QoS) protocols and enhanced media access protocols. Proper implementation of these protocols enable high speed bursting of data and prioritized traffic flow. FreeBSD supports networks that operate using 802.11a, 802.11b, and 802.11g. The WPA and 802.11i security protocols are likewise supported (in conjunction with any of 11a, 11b, and 11g) and QoS and traffic prioritization required by the WME/WMM protocols are supported for a limited set of wireless devices. 32.3.2 Basic Setup 32.3.2.1 Kernel Configuration To use wireless networking, you need a wireless networking card and to configure the kernel with the appropriate wireless networking support. The latter is separated into multiple modules so that you only need to configure the software you are actually going to use. The first thing you need is a wireless device. The most commonly used devices are those that use parts made by Atheros. These devices are supported by the ath(4) driver and require the following line to be added to /boot/loader.conf: if_ath_load="YES" The Atheros driver is split up into three separate pieces: the proper driver (ath(4)), the hardware support layer that handles chip-specific functions (ath_hal(4)), and an algorithm for selecting which of several possible rates for transmitting frames (ath_rate_sample here). When this support is loaded as kernel modules, these dependencies are automatically handled for you. If, instead of an Atheros device, you had another device you would select the module for that device; e.g.: if_wi_load="YES" for devices based on the Intersil Prism parts (wi(4) driver). Note: In the rest of this document, we will use an ath(4) device, the device name in the examples must be changed according to your configuration. A list of available wireless drivers and supported adapters can be found in the FreeBSD Hardware Notes. Copies of these notes for various releases and architectures are available on the Release Information page of the FreeBSD Web site. If a native FreeBSD driver for your wireless device does not exist, it may be possible to directly use the Windows® driver with the help of the NDIS driver wrapper. With that, you will need the modules that implement cryptographic support for the security protocols you intend to use. These are intended to be dynamically loaded on demand by the wlan(4) module but for now they must be manually configured. The following modules are available: wlan_wep(4), wlan_ccmp(4) and wlan_tkip(4). Both wlan_ccmp(4) and wlan_tkip(4) drivers are only needed if you intend to use the WPA and/or 802.11i security protocols. If your network does not use encryption, you will not need wlan_wep(4) support. To load these modules at boot time, add the following lines to /boot/loader.conf: wlan_wep_load="YES" wlan_ccmp_load="YES" wlan_tkip_load="YES" With this information in the system bootstrap configuration file (i.e., /boot/loader.conf), you have to reboot your FreeBSD box. If you do not want to reboot your machine for the moment, you can load the modules by hand using kldload(8). Note: If you do not want to use modules, it is possible to compile these drivers into the kernel by adding the following lines to your kernel configuration file: device wlan # 802.11 support device wlan_wep # 802.11 WEP support device wlan_ccmp # 802.11 CCMP support device wlan_tkip # 802.11 TKIP support device wlan_amrr # AMRR transmit rate control algorithm device ath # Atheros pci/cardbus NIC's device ath_hal # pci/cardbus chip support options AH_SUPPORT_AR5416 # enable AR5416 tx/rx descriptors device ath_rate_sample # SampleRate tx rate control for ath With this information in the kernel configuration file, recompile the kernel and reboot your FreeBSD machine. When the system is up, we could find some information about the wireless device in the boot messages, like this: ath0: <atheros 5212=""> mem 0x88000000-0x8800ffff irq 11 at device 0.0 on cardbus1 ath0: [ITHREAD] ath0: AR2413 mac 7.9 RF2413 phy 4.5 32.3.3 Infrastructure Mode The infrastructure mode or BSS mode is the mode that is typically used. In this mode, a number of wireless access points are connected to a wired network. Each wireless network has its own name, this name is called the SSID of the network. Wireless clients connect to the wireless access points. 32.3.3.1 FreeBSD Clients 32.3.3.1.1 How to Find Access Points To scan for networks, use the ifconfig command. This request may take a few moments to complete as it requires that the system switches to each available wireless frequency and probes for available access points. Only the super-user can initiate such a scan: # ifconfig wlan0 create wlandev ath0 # ifconfig wlan0 up scan SSID/MESH ID BSSID CHAN RATE S:N INT CAPS dlinkap 00:13:46:49:41:76 11 54M -90:96 100 EPS WPA WME freebsdap 00:11:95:c3:0d:ac 1 54M -83:96 100 EPS WPA Note: You must mark the interface up before you can scan. Subsequent scan requests do not require you to mark the interface up again. The output of a scan request lists each BSS/IBSS network found. Beside the name of the network, SSID, we find the BSSID which is the MAC address of the access point. The CAPS field identifies the type of each network and the capabilities of the stations operating there: Table 32-1. Station Capability Codes Capability Code Meaning E Extended Service Set (ESS). Indicates that the station is part of an infrastructure network (in contrast to an IBSS/ad-hoc network). I IBSS/ad-hoc network. Indicates that the station is part of an ad-hoc network (in contrast to an ESS network). P Privacy. Data confidentiality is required for all data frames exchanged within the BSS. This means that this BSS requires the station to use cryptographic means such as WEP, TKIP or AES-CCMP to encrypt/decrypt data frames being exchanged with others. S Short Preamble. Indicates that the network is using short preambles (defined in 802.11b High Rate/DSSS PHY, short preamble utilizes a 56 bit sync field in contrast to a 128 bit field used in long preamble mode). s Short slot time. Indicates that the 802.11g network is using a short slot time because there are no legacy (802.11b) stations present. One can also display the current list of known networks with: # ifconfig wlan0 list scan This information may be updated automatically by the adapter or manually with a scan request. Old data is automatically removed from the cache, so over time this list may shrink unless more scans are done. 32.3.3.1.2 Basic Settings This section provides a simple example of how to make the wireless network adapter work in FreeBSD without encryption. After you are familiar with these concepts, we strongly recommend using WPA to set up your wireless network. There are three basic steps to configure a wireless network: selecting an access point, authenticating your station, and configuring an IP address. The following sections discuss each step. 32.3.3.1.2.1 Selecting an Access Point Most of time it is sufficient to let the system choose an access point using the builtin heuristics. This is the default behaviour when you mark an interface up or otherwise configure an interface by listing it in /etc/rc.conf, e.g.: wlans_ath0="wlan0" ifconfig_wlan0="DHCP" If there are multiple access points and you want to select a specific one, you can select it by its SSID: wlans_ath0="wlan0" ifconfig_wlan0="ssid your_ssid_here DHCP" In an environment where there are multiple access points with the same SSID (often done to simplify roaming) it may be necessary to associate to one specific device. In this case you can also specify the BSSID of the access point (you can also leave off the SSID): wlans_ath0="wlan0" ifconfig_wlan0="ssid your_ssid_here bssid xx:xx:xx:xx:xx:xx DHCP" There are other ways to constrain the choice of an access point such as limiting the set of frequencies the system will scan on. This may be useful if you have a multi-band wireless card as scanning all the possible channels can be time-consuming. To limit operation to a specific band you can use the mode parameter; e.g.: wlans_ath0="wlan0" ifconfig_wlan0="mode 11g ssid your_ssid_here DHCP" will force the card to operate in 802.11g which is defined only for 2.4GHz frequencies so any 5GHz channels will not be considered. Other ways to do this are the channel parameter, to lock operation to one specific frequency, and the chanlist parameter, to specify a list of channels for scanning. More information about these parameters can be found in the ifconfig(8) manual page. 32.3.3.1.2.2 Authentication Once you have selected an access point your station needs to authenticate before it can pass data. Authentication can happen in several ways. The most common scheme used is termed open authentication and allows any station to join the network and communicate. This is the authentication you should use for test purpose the first time you set up a wireless network. Other schemes require cryptographic handshakes be completed before data traffic can flow; either using pre-shared keys or secrets, or more complex schemes that involve backend services such as RADIUS. Most users will use open authentication which is the default setting. Next most common setup is WPA-PSK, also known as WPA Personal, which is described below. Note: If you have an Apple® AirPort® Extreme base station for an access point you may need to configure shared-key authentication together with a WEP key. This can be done in the /etc/rc.conf file or using the wpa_supplicant(8) program. If you have a single AirPort base station you can setup access with something like: wlans_ath0="wlan0" ifconfig_wlan0="authmode shared wepmode on weptxkey 1 wepkey 01234567 DHCP" In general shared key authentication is to be avoided because it uses the WEP key material in a highly-constrained manner making it even easier to crack the key. If WEP must be used (e.g., for compatibility with legacy devices) it is better to use WEP with open authentication. More information regarding WEP can be found in the Section 32.3.3.1.4. 32.3.3.1.2.3 Getting an IP Address with DHCP Once you have selected an access point and set the authentication parameters, you will have to get an IP address to communicate. Most of time you will obtain your wireless IP address via DHCP. To achieve that, edit /etc/rc.conf and add DHCP to the configuration for your device as shown in various examples above: wlans_ath0="wlan0" ifconfig_wlan0="DHCP" At this point, you are ready to bring up the wireless interface: # service netif start Once the interface is running, use ifconfig to see the status of the interface ath0: # ifconfig wlan0 wlan0: flags=8843<up> mtu 1500 ether 00:11:95:d5:43:62 inet 192.168.1.100 netmask 0xffffff00 broadcast 192.168.1.255 media: IEEE 802.11 Wireless Ethernet OFDM/54Mbps mode 11g status: associated ssid dlinkap channel 11 (2462 Mhz 11g) bssid 00:13:46:49:41:76 country US ecm authmode OPEN privacy OFF txpower 21.5 bmiss 7 scanvalid 60 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 5 protmode CTS wme burst The status: associated means you are connected to the wireless network (to the dlinkap network in our case). The bssid 00:13:46:49:41:76 part is the MAC address of your access point; the authmode OPEN part informs you that the communication is not encrypted. 32.3.3.1.2.4 Static IP Address In the case you cannot obtain an IP address from a DHCP server, you can set a fixed IP address. Replace the DHCP keyword shown above with the address information. Be sure to retain any other parameters you have set up for selecting an access point: wlans_ath0="wlan0" ifconfig_wlan0="inet 192.168.1.100 netmask 255.255.255.0 ssid your_ssid_here" 32.3.3.1.3 WPA WPA (Wi-Fi Protected Access) is a security protocol used together with 802.11 networks to address the lack of proper authentication and the weakness of WEP. WPA leverages the 802.1X authentication protocol and uses one of several ciphers instead of WEP for data integrity. The only cipher required by WPA is TKIP (Temporary Key Integrity Protocol). TKIP is a cipher that extends the basic RC4 cipher used by WEP by adding integrity checking, tamper detection, and measures for responding to any detected intrusions. TKIP is designed to work on legacy hardware with only software modification; it represents a compromise that improves security but is still not entirely immune to attack. WPA also specifies the AES-CCMP cipher as an alternative to TKIP and that is preferred when possible; for this specification the term WPA2 (or RSN) is commonly used. WPA defines authentication and encryption protocols. Authentication is most commonly done using one of two techniques: by 802.1X and a backend authentication service such as RADIUS, or by a minimal handshake between the station and the access point using a pre-shared secret. The former is commonly termed WPA Enterprise with the latter known as WPA Personal. Since most people will not set up a RADIUS backend server for their wireless network, WPA-PSK is by far the most commonly encountered configuration for WPA. The control of the wireless connection and the authentication (key negotiation or authentication with a server) is done with the wpa_supplicant(8) utility. This program requires a configuration file, /etc/wpa_supplicant.conf, to run. More information regarding this file can be found in the wpa_supplicant.conf(5) manual page. 32.3.3.1.3.1 WPA-PSK WPA-PSK, also known as WPA-Personal, is based on a pre-shared key (PSK) generated from a given password and that will be used as the master key in the wireless network. This means every wireless user will share the same key. WPA-PSK is intended for small networks where the use of an authentication server is not possible or desired. Warning: Always use strong passwords that are sufficiently long and made from a rich alphabet so they will not be guessed and/or attacked. The first step is the configuration of the /etc/wpa_supplicant.conf file with the SSID and the pre-shared key of your network: network={ ssid="freebsdap" psk="freebsdmall" } Then, in /etc/rc.conf, we indicate that the wireless device configuration will be done with WPA and the IP address will be obtained with DHCP: wlans_ath0="wlan0" ifconfig_wlan0="WPA DHCP" Then we can bring up the interface: # service netif start Starting wpa_supplicant. DHCPDISCOVER on wlan0 to 255.255.255.255 port 67 interval 5 DHCPDISCOVER on wlan0 to 255.255.255.255 port 67 interval 6 DHCPOFFER from 192.168.0.1 DHCPREQUEST on wlan0 to 255.255.255.255 port 67 DHCPACK from 192.168.0.1 bound to 192.168.0.254 -- renewal in 300 seconds. wlan0: flags=8843<up> mtu 1500 ether 00:11:95:d5:43:62 inet 192.168.0.254 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet OFDM/36Mbps mode 11g status: associated ssid freebsdap channel 1 (2412 Mhz 11g) bssid 00:11:95:c3:0d:ac country US ecm authmode WPA2/802.11i privacy ON deftxkey UNDEF AES-CCM 3:128-bit txpower 21.5 bmiss 7 scanvalid 450 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 5 protmode CTS wme burst roaming MANUAL Or you can try to configure it manually using the same /etc/wpa_supplicant.conf above, and run: # wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf Trying to associate with 00:11:95:c3:0d:ac (SSID='freebsdap' freq=2412 MHz) Associated with 00:11:95:c3:0d:ac WPA: Key negotiation completed with 00:11:95:c3:0d:ac [PTK=CCMP GTK=CCMP] CTRL-EVENT-CONNECTED - Connection to 00:11:95:c3:0d:ac completed (auth) [id=0 id_str=] The next operation is the launch of the dhclient command to get the IP address from the DHCP server: # dhclient wlan0 DHCPREQUEST on wlan0 to 255.255.255.255 port 67 DHCPACK from 192.168.0.1 bound to 192.168.0.254 -- renewal in 300 seconds. # ifconfig wlan0 wlan0: flags=8843<up> mtu 1500 ether 00:11:95:d5:43:62 inet 192.168.0.254 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet OFDM/36Mbps mode 11g status: associated ssid freebsdap channel 1 (2412 Mhz 11g) bssid 00:11:95:c3:0d:ac country US ecm authmode WPA2/802.11i privacy ON deftxkey UNDEF AES-CCM 3:128-bit txpower 21.5 bmiss 7 scanvalid 450 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 5 protmode CTS wme burst roaming MANUAL Note: If /etc/rc.conf has an ifconfig_wlan0 entry with the DHCP string (like ifconfig_wlan0="DHCP"), dhclient will be launched automatically after wpa_supplicant associates with the access point. If DHCP is not possible or desired, you can set a static IP address after wpa_supplicant has authenticated the station: # ifconfig wlan0 inet 192.168.0.100 netmask 255.255.255.0 # ifconfig wlan0 wlan0: flags=8843<up> mtu 1500 ether 00:11:95:d5:43:62 inet 192.168.0.100 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet OFDM/36Mbps mode 11g status: associated ssid freebsdap channel 1 (2412 Mhz 11g) bssid 00:11:95:c3:0d:ac country US ecm authmode WPA2/802.11i privacy ON deftxkey UNDEF AES-CCM 3:128-bit txpower 21.5 bmiss 7 scanvalid 450 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 5 protmode CTS wme burst roaming MANUAL When DHCP is not used, you also have to manually set the default gateway and the nameserver: # route add default your_default_router # echo "nameserver your_DNS_server" >> /etc/resolv.conf 32.3.3.1.3.2 WPA with EAP-TLS The second way to use WPA is with an 802.1X backend authentication server. In this case WPA is called WPA-Enterprise to differentiate it from the less secure WPA-Personal with its pre-shared key. Authentication in WPA-Enterprise is based on the Extensible Authentication Protocol (EAP). EAP does not come with an encryption method. Instead, it was decided to embed EAP inside an encrypted tunnel. There are many EAP authentication methods, but EAP-TLS, EAP-TTLS, and EAP-PEAP are the most common. EAP-TLS (EAP with Transport Layer Security) is a very well-supported authentication protocol in the wireless world since it was the first EAP method to be certified by the Wi-Fi alliance. EAP-TLS will require three certificates to run: the CA certificate (installed on all machines), the server certificate for your authentication server, and one client certificate for each wireless client. In this EAP method, both authentication server and wireless client authenticate each other in presenting their respective certificates, and they verify that these certificates were signed by your organization's certificate authority (CA). As previously, the configuration is done via /etc/wpa_supplicant.conf: network={ ssid="freebsdap" proto=RSN key_mgmt=WPA-EAP eap=TLS identity="loader" ca_cert="/etc/certs/cacert.pem" client_cert="/etc/certs/clientcert.pem" private_key="/etc/certs/clientkey.pem" private_key_passwd="freebsdmallclient" } This field indicates the network name (SSID). Here, we use RSN (IEEE 802.11i) protocol, i.e., WPA2. The key_mgmt line refers to the key management protocol we use. In our case it is WPA using EAP authentication: WPA-EAP. In this field, we mention the EAP method for our connection. The identity field contains the identity string for EAP. The ca_cert field indicates the pathname of the CA certificate file. This file is needed to verify the server certificate. The client_cert line gives the pathname to the client certificate file. This certificate is unique to each wireless client of the network. The private_key field is the pathname to the client certificate private key file. The private_key_passwd field contains the passphrase for the private key. Then add the following lines to /etc/rc.conf: wlans_ath0="wlan0" ifconfig_wlan0="WPA DHCP" The next step is to bring up the interface: # service netif start Starting wpa_supplicant. DHCPREQUEST on wlan0 to 255.255.255.255 port 67 interval 7 DHCPREQUEST on wlan0 to 255.255.255.255 port 67 interval 15 DHCPACK from 192.168.0.20 bound to 192.168.0.254 -- renewal in 300 seconds. wlan0: flags=8843<up> mtu 1500 ether 00:11:95:d5:43:62 inet 192.168.0.254 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet DS/11Mbps mode 11g status: associated ssid freebsdap channel 1 (2412 Mhz 11g) bssid 00:11:95:c3:0d:ac country US ecm authmode WPA2/802.11i privacy ON deftxkey UNDEF AES-CCM 3:128-bit txpower 21.5 bmiss 7 scanvalid 450 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 5 protmode CTS wme burst roaming MANUAL As previously shown, it is also possible to bring up the interface manually with both wpa_supplicant and ifconfig commands. 32.3.3.1.3.3 WPA with EAP-TTLS With EAP-TLS both the authentication server and the client need a certificate, with EAP-TTLS (EAP-Tunneled Transport Layer Security) a client certificate is optional. This method is close to what some secure web sites do , where the web server can create a secure SSL tunnel even if the visitors do not have client-side certificates. EAP-TTLS will use the encrypted TLS tunnel for safe transport of the authentication data. The configuration is done via the /etc/wpa_supplicant.conf file: network={ ssid="freebsdap" proto=RSN key_mgmt=WPA-EAP eap=TTLS identity="test" password="test" ca_cert="/etc/certs/cacert.pem" phase2="auth=MD5" } In this field, we mention the EAP method for our connection. The identity field contains the identity string for EAP authentication inside the encrypted TLS tunnel. The password field contains the passphrase for the EAP authentication. The ca_cert field indicates the pathname of the CA certificate file. This file is needed to verify the server certificate. In this field, we mention the authentication method used in the encrypted TLS tunnel. In our case, EAP with MD5-Challenge has been used. The “inner authentication” phase is often called “phase2”. You also have to add the following lines to /etc/rc.conf: wlans_ath0="wlan0" ifconfig_wlan0="WPA DHCP" The next step is to bring up the interface: # service netif start Starting wpa_supplicant. DHCPREQUEST on wlan0 to 255.255.255.255 port 67 interval 7 DHCPREQUEST on wlan0 to 255.255.255.255 port 67 interval 15 DHCPREQUEST on wlan0 to 255.255.255.255 port 67 interval 21 DHCPACK from 192.168.0.20 bound to 192.168.0.254 -- renewal in 300 seconds. wlan0: flags=8843<up> mtu 1500 ether 00:11:95:d5:43:62 inet 192.168.0.254 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet DS/11Mbps mode 11g status: associated ssid freebsdap channel 1 (2412 Mhz 11g) bssid 00:11:95:c3:0d:ac country US ecm authmode WPA2/802.11i privacy ON deftxkey UNDEF AES-CCM 3:128-bit txpower 21.5 bmiss 7 scanvalid 450 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 5 protmode CTS wme burst roaming MANUAL 32.3.3.1.3.4 WPA with EAP-PEAP Note: PEAPv0/EAP-MSCHAPv2 is the most common PEAP method. In the rest of this document, we will use the PEAP term to refer to that method. PEAP (Protected EAP) has been designed as an alternative to EAP-TTLS, and is the most used EAP standard after EAP-TLS. In other words, if you have a network with mixed OSes, PEAP should be the most supported standard after EAP-TLS. PEAP is similar to EAP-TTLS: it uses a server-side certificate to authenticate clients by creating an encrypted TLS tunnel between the client and the authentication server, which protects the ensuing exchange of authentication information. In terms of security, the difference between EAP-TTLS and PEAP is that PEAP authentication broadcasts the username in the clear, with only the password sent in the encrypted TLS tunnel. EAP-TTLS will use the TLS tunnel for both username and password. We have to edit the /etc/wpa_supplicant.conf file and add the EAP-PEAP related settings: network={ ssid="freebsdap" proto=RSN key_mgmt=WPA-EAP eap=PEAP identity="test" password="test" ca_cert="/etc/certs/cacert.pem" phase1="peaplabel=0" phase2="auth=MSCHAPV2" } In this field, we mention the EAP method for our connection. The identity field contains the identity string for EAP authentication inside the encrypted TLS tunnel. The password field contains the passphrase for the EAP authentication. The ca_cert field indicates the pathname of the CA certificate file. This file is needed to verify the server certificate. This field contains the parameters for the first phase of authentication (the TLS tunnel). According to the authentication server used, you will have to specify a specific label for authentication. Most of the time, the label will be “client EAP encryption” which is set by using peaplabel=0. More information can be found in the wpa_supplicant.conf(5) manual page. In this field, we mention the authentication protocol used in the encrypted TLS tunnel. In the case of PEAP, it is auth=MSCHAPV2. The following must be added to /etc/rc.conf: wlans_ath0="wlan0" ifconfig_wlan0="WPA DHCP" Then we can bring up the interface: # service netif start Starting wpa_supplicant. DHCPREQUEST on wlan0 to 255.255.255.255 port 67 interval 7 DHCPREQUEST on wlan0 to 255.255.255.255 port 67 interval 15 DHCPREQUEST on wlan0 to 255.255.255.255 port 67 interval 21 DHCPACK from 192.168.0.20 bound to 192.168.0.254 -- renewal in 300 seconds. wlan0: flags=8843<up> mtu 1500 ether 00:11:95:d5:43:62 inet 192.168.0.254 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet DS/11Mbps mode 11g status: associated ssid freebsdap channel 1 (2412 Mhz 11g) bssid 00:11:95:c3:0d:ac country US ecm authmode WPA2/802.11i privacy ON deftxkey UNDEF AES-CCM 3:128-bit txpower 21.5 bmiss 7 scanvalid 450 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 5 protmode CTS wme burst roaming MANUAL 32.3.3.1.4 WEP WEP (Wired Equivalent Privacy) is part of the original 802.11 standard. There is no authentication mechanism, only a weak form of access control, and it is easily cracked. WEP can be set up with ifconfig: # ifconfig wlan0 create wlandev ath0 # ifconfig wlan0 inet 192.168.1.100 netmask 255.255.255.0 \ ssid my_net wepmode on weptxkey 3 wepkey 3:0x3456789012 • The weptxkey means which WEP key will be used in the transmission. Here we used the third key. This must match the setting in the access point. If you do not have any idea of which key is used by the access point, try 1 (i.e., the first key) for this value. • The wepkey selects one of the WEP keys. It should be in the format index:key. Key 1 is used by default; the index only needs to be set if we use a key other than the first key. Note: You must replace the 0x3456789012 with the key configured for use on the access point. You are encouraged to read the ifconfig(8) manual page for further information. The wpa_supplicant facility also can be used to configure your wireless interface with WEP. The example above can be set up by adding the following lines to /etc/wpa_supplicant.conf: network={ ssid="my_net" key_mgmt=NONE wep_key3=3456789012 wep_tx_keyidx=3 } Then: # wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf Trying to associate with 00:13:46:49:41:76 (SSID='dlinkap' freq=2437 MHz) Associated with 00:13:46:49:41:76 32.3.4 Ad-hoc Mode IBSS mode, also called ad-hoc mode, is designed for point to point connections. For example, to establish an ad-hoc network between the machine A and the machine B, we will just need to choose two IP addresses and a SSID. On the box A: # ifconfig wlan0 create wlandev ath0 wlanmode adhoc # ifconfig wlan0 inet 192.168.0.1 netmask 255.255.255.0 ssid freebsdap # ifconfig wlan0 wlan0: flags=8843<up> metric 0 mtu 1500 ether 00:11:95:c3:0d:ac inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <adhoc> status: running ssid freebsdap channel 2 (2417 Mhz 11g) bssid 02:11:95:c3:0d:ac country US ecm authmode OPEN privacy OFF txpower 21.5 scanvalid 60 protmode CTS wme burst The adhoc parameter indicates the interface is running in the IBSS mode. On B, we should be able to detect A: # ifconfig wlan0 create wlandev ath0 wlanmode adhoc # ifconfig wlan0 up scan SSID/MESH ID BSSID CHAN RATE S:N INT CAPS freebsdap 02:11:95:c3:0d:ac 2 54M -64:-96 100 IS WME The I in the output confirms the machine A is in ad-hoc mode. We just have to configure B with a different IP address: # ifconfig wlan0 inet 192.168.0.2 netmask 255.255.255.0 ssid freebsdap # ifconfig wlan0 wlan0: flags=8843<up> metric 0 mtu 1500 ether 00:11:95:d5:43:62 inet 192.168.0.2 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <adhoc> status: running ssid freebsdap channel 2 (2417 Mhz 11g) bssid 02:11:95:c3:0d:ac country US ecm authmode OPEN privacy OFF txpower 21.5 scanvalid 60 protmode CTS wme burst Both A and B are now ready to exchange information. 32.3.5 FreeBSD Host Access Points FreeBSD can act as an Access Point (AP) which eliminates the need to buy a hardware AP or run an ad-hoc network. This can be particularly useful when your FreeBSD machine is acting as a gateway to another network (e.g., the Internet). 32.3.5.1 Basic Settings Before configuring your FreeBSD machine as an AP, the kernel must be configured with the appropriate wireless networking support for your wireless card. You also have to add support for the security protocols you intend to use. For more details, see Section 32.3.2. Note: The use of the NDIS driver wrapper and the Windows drivers do not currently allow AP operation. Only native FreeBSD wireless drivers support AP mode. Once wireless networking support is loaded, you can check if your wireless device supports the host-based access point mode (also known as hostap mode): # ifconfig wlan0 create wlandev ath0 # ifconfig wlan0 list caps drivercaps=6f85edc1<sta>cryptocaps=1f<wep>This output displays the card capabilities; the HOSTAP word confirms this wireless card can act as an Access Point. Various supported ciphers are also mentioned: WEP, TKIP, AES, etc. This information is important to know what security protocols can be used on the Access Point. The wireless device can only be put into hostap mode during the creation of the network pseudo-device, so a previously created device must be destroyed first: # ifconfig wlan0 destroy then regenerated with the correct option before setting the other parameters: # ifconfig wlan0 create wlandev ath0 wlanmode hostap # ifconfig wlan0 inet 192.168.0.1 netmask 255.255.255.0 ssid freebsdap mode 11g channel 1 Use ifconfig again to see the status of the wlan0 interface: # ifconfig wlan0 wlan0: flags=8843<up> metric 0 mtu 1500 ether 00:11:95:c3:0d:ac inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap> status: running ssid freebsdap channel 1 (2412 Mhz 11g) bssid 00:11:95:c3:0d:ac country US ecm authmode OPEN privacy OFF txpower 21.5 scanvalid 60 protmode CTS wme burst dtimperiod 1 -dfs The hostap parameter indicates the interface is running in the host-based access point mode. The interface configuration can be done automatically at boot time by adding the following lines to /etc/rc.conf: wlans_ath0="wlan0" create_args_wlan0="wlanmode hostap" ifconfig_wlan0="inet 192.168.0.1 netmask 255.255.255.0 ssid freebsdap mode 11g channel 1" 32.3.5.2 Host-based Access Point Without Authentication or Encryption Although it is not recommended to run an AP without any authentication or encryption, this is a simple way to check if your AP is working. This configuration is also important for debugging client issues. Once the AP configured as previously shown, it is possible from another wireless machine to initiate a scan to find the AP: # ifconfig wlan0 create wlandev ath0 # ifconfig wlan0 up scan SSID/MESH ID BSSID CHAN RATE S:N INT CAPS freebsdap 00:11:95:c3:0d:ac 1 54M -66:-96 100 ES WME The client machine found the Access Point and can be associated with it: # ifconfig wlan0 inet 192.168.0.2 netmask 255.255.255.0 ssid freebsdap # ifconfig wlan0 wlan0: flags=8843<up> metric 0 mtu 1500 ether 00:11:95:d5:43:62 inet 192.168.0.2 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet OFDM/54Mbps mode 11g status: associated ssid freebsdap channel 1 (2412 Mhz 11g) bssid 00:11:95:c3:0d:ac country US ecm authmode OPEN privacy OFF txpower 21.5 bmiss 7 scanvalid 60 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 5 protmode CTS wme burst 32.3.5.3 WPA Host-based Access Point This section will focus on setting up FreeBSD Access Point using the WPA security protocol. More details regarding WPA and the configuration of WPA-based wireless clients can be found in the Section 32.3.3.1.3. The hostapd daemon is used to deal with client authentication and keys management on the WPA enabled Access Point. In the following, all the configuration operations will be performed on the FreeBSD machine acting as AP. Once the AP is correctly working, hostapd should be automatically enabled at boot with the following line in /etc/rc.conf: hostapd_enable="YES" Before trying to configure hostapd, be sure you have done the basic settings introduced in the Section 32.3.5.1. 32.3.5.3.1 WPA-PSK WPA-PSK is intended for small networks where the use of an backend authentication server is not possible or desired. The configuration is done in the /etc/hostapd.conf file: interface=wlan0 debug=1 ctrl_interface=/var/run/hostapd ctrl_interface_group=wheel ssid=freebsdap wpa=1 wpa_passphrase=freebsdmall wpa_key_mgmt=WPA-PSK wpa_pairwise=CCMP TKIP This field indicates the wireless interface used for the Access Point. This field sets the level of verbosity during the execution of hostapd. A value of 1 represents the minimal level. The ctrl_interface field gives the pathname of the directory used by hostapd to stores its domain socket files for the communication with external programs such as hostapd_cli(8). The default value is used here. The ctrl_interface_group line sets the group (here, it is the wheel group) allowed to access to the control interface files. This field sets the network name. The wpa field enables WPA and specifies which WPA authentication protocol will be required. A value of 1 configures the AP for WPA-PSK. The wpa_passphrase field contains the ASCII passphrase for the WPA authentication. Warning: Always use strong passwords that are sufficiently long and made from a rich alphabet so they will not be guessed and/or attacked. The wpa_key_mgmt line refers to the key management protocol we use. In our case it is WPA-PSK. The wpa_pairwise field indicates the set of accepted encryption algorithms by the Access Point. Here both TKIP (WPA) and CCMP (WPA2) ciphers are accepted. CCMP cipher is an alternative to TKIP and that is strongly preferred when possible; TKIP should be used solely for stations incapable of doing CCMP. The next step is to start hostapd: # service hostapd forcestart # ifconfig wlan0 wlan0: flags=8843<up> mtu 2290 inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255 inet6 fe80::211:95ff:fec3:dac%ath0 prefixlen 64 scopeid 0x4 ether 00:11:95:c3:0d:ac media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap> status: associated ssid freebsdap channel 1 bssid 00:11:95:c3:0d:ac authmode WPA2/802.11i privacy MIXED deftxkey 2 TKIP 2:128-bit txpowmax 36 protmode CTS dtimperiod 1 bintval 100 The Access Point is running, the clients can now be associated with it, see Section 32.3.3.1.3 for more details. It is possible to see the stations associated with the AP using the ifconfig wlan0 list sta command. 32.3.5.4 WEP Host-based Access Point It is not recommended to use WEP for setting up an Access Point since there is no authentication mechanism and it is easily to be cracked. Some legacy wireless cards only support WEP as security protocol, these cards will only allow to set up AP without authentication or encryption or using the WEP protocol. The wireless device can now be put into hostap mode and configured with the correct SSID and IP address: # ifconfig wlan0 create wlandev ath0 wlanmode hostap # ifconfig wlan0 inet 192.168.0.1 netmask 255.255.255.0 \ ssid freebsdap wepmode on weptxkey 3 wepkey 3:0x3456789012 mode 11g • The weptxkey means which WEP key will be used in the transmission. Here we used the third key (note that the key numbering starts with 1). This parameter must be specified to really encrypt the data. • The wepkey means setting the selected WEP key. It should in the format index:key, if the index is not given, key 1 is set. That is to say we need to set the index if we use keys other than the first key. Use again ifconfig to see the status of the wlan0 interface: # ifconfig wlan0 wlan0: flags=8843<up> metric 0 mtu 1500 ether 00:11:95:c3:0d:ac inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255 media: IEEE 802.11 Wireless Ethernet autoselect mode 11g <hostap> status: running ssid freebsdap channel 4 (2427 Mhz 11g) bssid 00:11:95:c3:0d:ac country US ecm authmode OPEN privacy ON deftxkey 3 wepkey 3:40-bit txpower 21.5 scanvalid 60 protmode CTS wme burst dtimperiod 1 -dfs From another wireless machine, it is possible to initiate a scan to find the AP: # ifconfig wlan0 create wlandev ath0 # ifconfig wlan0 up scan SSID BSSID CHAN RATE S:N INT CAPS freebsdap 00:11:95:c3:0d:ac 1 54M 22:1 100 EPS The client machine found the Access Point and can be associated with it using the correct parameters (key, etc.), see Section 32.3.3.1.4 for more details. 32.3.6 Using Both Wired and Wireless Connection Wired connection provides better performance and reliability, while wireless connection provides flexibility and mobility, users of laptop computers usually want to combine these together and roam seamlessly between the two. On FreeBSD, it is possible to combine two or even more network interfaces together in a “failover” fashion, that is, to use the most preferred and available connection from a group of network interfaces, and have the operating system switch automatically when the link state changes. We will cover link aggregation and failover in Section 32.6 where an example for using both wired and wireless connection is also provided at Example 32-3. 32.3.7 Troubleshooting If you are having trouble with wireless networking, there are a number of steps you can take to help troubleshoot the problem. • If you do not see the access point listed when scanning be sure you have not configured your wireless device to a limited set of channels. • If you cannot associate to an access point verify the configuration of your station matches the one of the access point. This includes the authentication scheme and any security protocols. Simplify your configuration as much as possible. If you are using a security protocol such as WPA or WEP configure the access point for open authentication and no security to see if you can get traffic to pass. • Once you can associate to the access point diagnose any security configuration using simple tools like ping(8). The wpa_supplicant has much debugging support; try running it manually with the -dd option and look at the system logs. • There are also many lower-level debugging tools. You can enable debugging messages in the 802.11 protocol support layer using the wlandebug program found in /usr/src/tools/tools/net80211. For example: • # wlandebug -i ath0 +scan+auth+debug+assoc • net.wlan.0.debug: 0 => 0xc80000<assoc auth="" scan="">can be used to enable console messages related to scanning for access points and doing the 802.11 protocol handshakes required to arrange communication. There are also many useful statistics maintained by the 802.11 layer; the wlanstats tool will dump this information. These statistics should identify all errors identified by the 802.11 layer. Beware however that some errors are identified in the device drivers that lie below the 802.11 layer so they may not show up. To diagnose device-specific problems you need to refer to the drivers' documentation. If the above information does not help to clarify the problem, please submit a problem report and include output from the above tools. ________________________________________ Prev Home Next Gateways and Routes Up Bluetooth • Home • Comptia • Window • LINUX • Cisco • Tips and Tricks • Careers You are here: Home // Cisco // CCNA // Study Guide 640 - 802 // Wireless networking on Cisco Router // How to Configure Wireless Network Step by Step guides AAA How to Configure Wireless Network Step by Step guides We have covered all CCNA exam topics in our wireless networking section. As its new topic in CCNA exam so you have very little chance to get simulated base question on wireless networking. Still we recommended you to get familiar with some basic wireless configuration. Step by Step guides For wireless configuration Download this topology and load it in packet tracer Download File In this topology we have three pc connected with Linksys Wireless routers. • DHCP is configured and enabled on Wireless router • IP pool for DHCP is 192.168.0.100 to 192.168.0.150 • PC are configured to receive IP from DHCP Server • No security is configured • Default SSID is configured to Default • Topology is working on infrastructure mode • Default user name and password is admin • IP of wireless is set to 192.168.0.1 Now your task is to:- • Configure Static IP on PC and Wireless Router • Change SSID to MotherNetwork • Change IP address of router to 10.0.0.1 and 10.0.0.2 of PC0 10.0.0.3 of PC1 10.0.0.4 of PC2 • Secure your network by configuring WAP key on Router • Connect PC by using WAP key To complete these tasks follow this step by step guide of how to configure wireless network As given in question our network is running on 192.168.0.0 network and all PC's are DHCP clients and functioning properly. So we will first connect to Wireless router to off DHCP. Double click on PC and select Web Browser. As given in question IP of Wireless router is 192.168.0.1 so give it in Web browser and press enter, now it will ask for authentication which is also given in question. Give user name admin and Password to admin This will bring GUI mode of Wireless router. Scroll down screen to Network Step and Select Disable DHCP Go in end of page and click on Save setting this will save setting click on continue for further setting Now select Administration from top Manu and change password to test and go in the end of page and Click on Save Setting Click on continue for further setting. This time it will ask you to authenticate again give new password test this time Now click on wireless tab and set default SSID to MotherNetwork Now Select wireless security and change Security Mode to WEP Set Key1 to 0123456789 Again go in the end of page and Click on Save Setting Now we have completed all given task on Wireless router. Now configure the static IP on all three PC's Double click on pc select Desktop tab click on IP configuration select Static IP and set IP as given below PC IP Subnet Mask Default Gateway PC0 192.168.0.2 255.255.255.0 192.168.0.1 PC1 192.168.0.3 255.255.255.0 192.168.0.1 PC2 192.168.0.4 255.255.255.0 192.168.0.1 Now it's time to connect PC's from Wireless router. To do so click PC select Desktop click on PC Wireless Click on connect tab and click on Refresh button As you can see in image that Wireless device is accessing MotherNetwork on CH 6 and signal strength is 100%. In left side you can see that WEP security is configured in network. Click on connect button to connect MotherNetwork It will ask for WAP key insert 0123456789 and click connect It will connect you with wireless router. As you can see in image below that system is connected. And PCI card is active. Repeat same process on PC1 and PC2. We have covered all CCNA exam topics in our wireless networking section. As its new topic in CCNA exam so you have very little chance to get simulated base question on wireless networking. Still we recommended you to get familiar with some basic wireless configuration. Step by Step guides For wireless configuration Download this topology and load it in packet tracer Download File In this topology we have three pc connected with Linksys Wireless routers. • DHCP is configured and enabled on Wireless router • IP pool for DHCP is 192.168.0.100 to 192.168.0.150 • PC are configured to receive IP from DHCP Server • No security is configured • Default SSID is configured to Default • Topology is working on infrastructure mode • Default user name and password is admin • IP of wireless is set to 192.168.0.1 Now your task is to:- • Configure Static IP on PC and Wireless Router • Change SSID to MotherNetwork • Change IP address of router to 10.0.0.1 and 10.0.0.2 of PC0 10.0.0.3 of PC1 10.0.0.4 of PC2 • Secure your network by configuring WAP key on Router • Connect PC by using WAP key To complete these tasks follow this step by step guide of how to configure wireless network As given in question our network is running on 192.168.0.0 network and all PC's are DHCP clients and functioning properly. So we will first connect to Wireless router to off DHCP. Double click on PC and select Web Browser. As given in question IP of Wireless router is 192.168.0.1 so give it in Web browser and press enter, now it will ask for authentication which is also given in question. Give user name admin and Password to admin This will bring GUI mode of Wireless router. Scroll down screen to Network Step and Select Disable DHCP Go in end of page and click on Save setting this will save setting click on continue for further setting Now select Administration from top Manu and change password to test and go in the end of page and Click on Save Setting Click on continue for further setting. This time it will ask you to authenticate again give new password test this time Now click on wireless tab and set default SSID to MotherNetwork Now Select wireless security and change Security Mode to WEP Set Key1 to 0123456789 Again go in the end of page and Click on Save Setting Now we have completed all given task on Wireless router. Now configure the static IP on all three PC's Double click on pc select Desktop tab click on IP configuration select Static IP and set IP as given below PC IP Subnet Mask Default Gateway PC0 192.168.0.2 255.255.255.0 192.168.0.1 PC1 192.168.0.3 255.255.255.0 192.168.0.1 PC2 192.168.0.4 255.255.255.0 192.168.0.1 Now it's time to connect PC's from Wireless router. To do so click PC select Desktop click on PC Wireless Click on connect tab and click on Refresh button As you can see in image that Wireless device is accessing MotherNetwork on CH 6 and signal strength is 100%. In left side you can see that WEP security is configured in network. Click on connect button to connect MotherNetwork It will ask for WAP key insert 0123456789 and click connect It will connect you with wireless router. As you can see in image below that system is connected. And PCI card is active. Repeat same process on PC1 and PC2. </assoc></hostap></up></hostap></up></up></hostap></up></wep></sta></adhoc></up></adhoc></up></up></up></up></up></up></up></up></atheros><br /><atheros 5212=""><up><up><up><up><up><up><up><up><adhoc><up><adhoc><sta><wep><up><hostap><up><up><hostap><up><hostap><assoc auth="" scan="">Good by ................. </assoc></hostap></up></hostap></up></up></hostap></up></wep></sta></adhoc></up></adhoc></up></up></up></up></up></up></up></up></atheros></div>

How Set Witless Network

How Set Witless Network  www.ipv4-ipv6.blogspot.com FreeBSD Handbook Prev Chapter 32 Advanced Networking Next for access to site www.ipv4-ip...

Read more »

[Fail2Ban] SSH: banned 114.112.69.45

Hi,<br /><br><br /><br>The IP 114.112.69.45 has just been banned by Fail2Ban after<br /><br>5 attempts against SSH.<br /><br><br /><br><br /><br>Here are more information about <a href="http://114.112.69.45">114.112.69.45</a>:<br /><br><br /><br>[Querying <a href="http://whois.arin.net">whois.arin.net</a>]<br /><br>[Redirected to <a href="http://whois.apnic.net">whois.apnic.net</a>]<br /><br>[Querying <a href="http://whois.apnic.net">whois.apnic.net</a>]<br /><br>[<a href="http://whois.apnic.net">whois.apnic.net</a>]<br /><br>% [<a href="http://whois.apnic.net">whois.apnic.net</a>]<br /><br>% Whois data copyright terms <a href="http://www.apnic.net/db/dbcopyright.html">http://www.apnic.net/db/dbcopyright.html</a><br /><br><br /><br>% Information related to '114.112.32.0 - 114.112.95.255'<br /><br><br /><br>inetnum: 114.112.32.0 - 114.112.95.255<br /><br>netname: CDSNET<br /><br>descr: Beijing capitalonline data service co.,LTD<br /><br>descr: Rm.16c£¬Bldg.2#A,Jinyuan times business Centre£¬<br /><br>descr: No.2,Landianchang-East Rd.£¬<br /><br>descr: Haidian District£¬Beijing<br /><br>country: CN<br /><br>admin-c: MH1-AUTO<br /><br>tech-c: LT1-AUTO<br /><br>mnt-by: MAINT-AP-CNISP<br /><br>mnt-irt: IRT-CNISP-CN<br /><br>status: allocated non-portable<br /><br>changed: <a href="mailto:ip@cnisp.org.cn">ip@cnisp.org.cn</a> 20130814<br /><br>source: APNIC<br /><br><br /><br>irt: IRT-CNISP-CN<br /><br>address: CNISP-Union Technology (Beijing) Co., Ltd<br /><br>e-mail: <a href="mailto:ip@cnisp.org.cn">ip@cnisp.org.cn</a><br /><br>abuse-mailbox: <a href="mailto:ip@cnisp.org.cn">ip@cnisp.org.cn</a><br /><br>admin-c: DY1-AUTO<br /><br>tech-c: WF1-AUTO<br /><br>auth: # Filtered<br /><br>mnt-by: MAINT-AP-CNISP<br /><br>changed: <a href="mailto:ip@cnisp.org.cn">ip@cnisp.org.cn</a> 20101109<br /><br>changed: <a href="mailto:hm-changed@apnic.net">hm-changed@apnic.net</a> 20101111<br /><br>source: APNIC<br /><br><br /><br>person: Li Tao<br /><br>nic-hdl: LT1-AUTO<br /><br>e-mail: <a href="mailto:tao.li@yun-idc.com">tao.li@yun-idc.com</a><br /><br>address: Rm.16c£¬Bldg.2#A,Jinyuan times business Centre£¬<br /><br>address: No.2,Landianchang-East Rd.£¬<br /><br>address: Haidian District£¬Beijing<br /><br>phone: +86-10-51997733<br /><br>country: CN<br /><br>changed: <a href="mailto:ip@cnisp.org.cn">ip@cnisp.org.cn</a> 20130822<br /><br>mnt-by: MAINT-AP-CNISP<br /><br>source: APNIC<br /><br><br /><br>person: Meng Hong<br /><br>nic-hdl: MH1-AUTO<br /><br>e-mail: <a href="mailto:hong.meng@yun-idc.com">hong.meng@yun-idc.com</a><br /><br>address: Rm.16c£¬Bldg.2#A,Jinyuan times business Centre£¬<br /><br>address: No.2,Landianchang-East Rd.£¬<br /><br>address: Haidian District£¬Beijing<br /><br>phone: +86-10-51997733<br /><br>country: CN<br /><br>changed: <a href="mailto:ip@cnisp.org.cn">ip@cnisp.org.cn</a> 20130822<br /><br>mnt-by: MAINT-AP-CNISP<br /><br>source: APNIC<br /><br><br /><br>% This query was served by the APNIC Whois Service version 1.68 (UNDEFINED)<br /><br><br /><br>Regards,<br /><br><br /><br>Fail2Ban

[Fail2Ban] SSH: banned 114.112.69.45

Hi, The IP 114.112.69.45 has just been banned by Fail2Ban after 5 attempts against SSH. Here are more information about 114.112.69.45 : [Que...

Read more »

Latest Microsoft 70-480J of exam practice questions and answers 「70-480日本語版」

<p>Dear candidates, have you thought to participate in any Microsoft <strong>70-480J</strong> exam training courses? In fact, you can take steps to pass the certification. ITCertMaster Microsoft <strong>70-480J</strong> exam training materials bear with a large number of the exam questions you need, which is a good choice. The training materials can help you pass the certification. </p><p>ITCertMaster help you to find real Microsoft <strong>70-480J</strong> exam preparation process in a real environment. If you are a beginner, and if you want to improve your professional skills, ITCertMaster Microsoft <strong>70-480J</strong> exam braindumps will help you to achieve your desire step by step. If you have any questions about the exam, ITCertMaster the Microsoft <a href="http://www.itcertmaster.com/70-480J.html" target="_blank">70-480J</a> will help you to solve them. Within a year, we provide free updates. Please pay more attention to our website. </p><p>To help you prepare for <strong>70-480J</strong> examination certification, we provide you with a sound knowledge and experience. The questions designed by ITCertMaster can help you easily pass the exam. The ITCertMaster Microsoft <strong>70-480J</strong> practice including <strong>70-480J</strong> exam questions and answers, <strong>70-480J</strong> test, <strong>70-480J</strong> books, <strong>70-480J</strong> study guide. </p><p>Now in such society with a galaxy of talents, stabilizing your job position is the best survival method. But stabilizing job position is not so easy. When others are fighting to improve their vocational ability, if you still making no progress and take things as they are, then you will be eliminated. In order to stabilize your job position, you need to constantly improve your professional ability and keep up with the pace of others to let you not fall far behind others.</p><p>Exam Code: <A href="http://www.itcertmaster.com/70-480J.html" target="_blank">70-480J</A><br/>Exam Name: <a href="http://www.itcertmaster.com/Microsoft_index.html" target="_blank">Microsoft</a> (Programming in HTML5 with JavaScript and CSS3 (70-480日本語版))<br/>Guaranteed success with practice guides, No help, Full refund!<br/>71 Questions and Answers<br/>Updated: 2013-09-29</p><p><strong><strong>70-480J</strong> Free Demo Download</strong>: <a href="http://www.itcertmaster.com/70-480J.html" target="_blank">http://www.itcertmaster.com/70-480J.html</a></p><p>NO.1 JavaScript で次の 変数の値をテストしています。<br />var height = "300";<br />以下の条件に該当する場合、コードのブロックが実行する必要があります。<br />- 高さの変数は 300 に 設定されます。<br />- 高さの変数はタイプ? ストリングです。<br />テストを実 行する ため にコードを 実装す る必 要がありま す。 どの コード行を 使用し なけ れ<br />ばなりませんか。<br />A. if (height == 300)<br />B. if (height == "300")<br />C. if (height ! "300")<br />D. if (height != 300)<br />Answer: B<br /><br /><strong>Microsoft exam simulations</strong>   <a href="http://www.itcertmaster.com/70-480J.html">70-480J</a>   <strong>70-480J</strong>   <strong>70-480J</strong><br /><br />NO.2 ロゴの ID を備え た要素を持っている HTML5 ページを開発し ています。 ページは次の<br />HTML を含んでいます。<br /><div><br />Logo:<br><br /><div id="logo"><br /></div><br /></div><br />5 つのピクセルによってページのより低いロゴ要素を移動させる必要があります。<br />どのコード行を使用しなければなりませんか。 ( 正解はそれぞれ解決策の一部を示します。<br />2 つ選んでください。)<br />A. document.getElementById("logo") .style.position = "relative";<br />B. document.getElementByld("logo").Style.top = "5px";<br />C. document.getElementById("logo").style.top = "-5px";<br />D. document.getElementById("logo").style.position = "absolute";<br />Answer: AB<br /><br /><a href="http://www.itcertmaster.com/Microsoft_index.html">Microsoft dumps</a>   <a href="http://www.itcertmaster.com/70-480J.html">70-480J original questions</a>   <strong>70-480J dumps</strong>   <strong>70-480J practice test</strong><br />Explanation:<br />http://www.w3schools.com/cssref/pr_class_position.asp<br />http://www.w3schools.com/cssref/pr_pos_top.asp<br /><br />NO.3 あなたは、サ ー ドパーテ ィ? アプリ ケ ーション からサ ービス を消費す るウェ ブ? ア プリ<br />ケーションを開発しています。<br />ウェブワ ーカ ーは、 バ ックグラ ウン ドでサ ー ドパーテ ィ? アプ リケ ーション の要 請を処 理 し<br />ます。<br />アプリケーションのページは、Web ワーカ ープロセスをインスタンス化します。Web ワー<br />カープロセスとページの間の双方向通信を確立する必要があります。 どの 2 つのアクショ<br />ンがこのゴールを達成するでしょうか。<br />（それぞれの正解は完全なソリューションを提供します。2 つ選択してください。 ）<br />A. ウェブワーカーからイベントをキャプチ ャするには、メインページの onconnect イ ベン<br />トハンドラを使用する。<br />B. メインページから イベントをキャプチャするには、Web ワーカーのの onMessage イベ ン<br />トハンドラを使用する。<br />C. ウェブワーカーか らイベントをキャプチャするには、メインページの onMessage イ ベン<br />トハンドラを使用する。<br />D. メインページから イベントをキャプチャするには、Web ワーカーの onconnect イベ ント<br />ハンドラを使用する。<br />Answer: BC<br /><br /><strong>Microsoft</strong>   <strong>70-480J dumps</strong>   <strong>70-480J</strong>   <strong>70-480J</strong><br />Explanation:<br />http://www.w3schools.com/html/html5_serversentevents.asp<br />http://www.html5rocks.com/en/tutorials/workers/basics/<br /><br />NO.4 HTML5 ページを 開発しています。<br />あなたは著者と著作権の情報を加える必要があります。<br />どのタグを使うべきでしょうか。<br />A. <aside><br />B. <header><br />C. <footer><br />D. <section><br />Answer: C<br /><br /><strong>Microsoft</strong>   <strong>70-480J</strong>   <strong>70-480J test answers</strong><br /><br />NO.5 あなたは、HTML5 と C5S3 を使用して ウェブ? ページを開発しています。ページには、<br />検証するために設定された ID を持つ<div> タ グが含まれています。ページがレンダリングさ<br />れるときは、<div> タグの内容はそれの上下 コンテンツから別の行 に表示されます。レン ダ<br />リングされたページは次の図に似ています。<br />タグが別のコンテンツから分離することは強いられないように、 ページはレンダリングする<br />必要があります。<br />次のグラフィックは正確にレンダリング された出力を示します。<br />あ な た は 、 ペ ー ジ が 要 件 を 満 た す た め に レ ン ダ リ ン グ さ れ る こ と を 確 認 す る 必 要 が あ り ま<br />す。どのコード行を使わなければなりませんか。<br />A. document.getElementById("validate").style.display = "inline";<br />B. document.getElementById("validate").style.margin = "0";<br />C. document.getElementById("validate").style.padding = "0";<br />D. document.getElementSyId("validate").style.display = "block";<br />Answer: A<br /><br /><strong>Microsoft</strong>   <strong>70-480J test answers</strong>   <strong>70-480J practice test</strong>   <strong>70-480J</strong><br />Explanation:<br />http://www.w3schools.com/cssref/pr_class_display.asp<br /><br />NO.6 ウェブ? ページ上の HTML5 CANVAS オ ブジェクトから抽出されたイメージを処理する<br />ために、Web ワーカーを使用するウェブ? アプリケーションを開発しています。<br />Web ワーカーと Web ページの間でメッセージを渡す必要があります。<br />どの 3 つのタイプのオブジェクトを使用しなければなりませんか。 ( 正解はそれぞれ完全解<br />を示します。3 つ選んでください。)<br />A. JSON<br />B. Window<br />C. Parent<br />D. String<br />E. JavaScript<br />F. DOM<br />Answer: ADE<br /><br /><strong>Microsoft questions</strong>   <strong>70-480J test answers</strong>   <strong>70-480J</strong><br /><br />NO.7 あなたはテキス トやイラス ト を含むペ ージを開発し ています 。 ウェブ? ペー ジは次 の<br />イメージに似ています。<br />次の要件があります。<br />* イラストは、ページの中央にあることが必要です。<br />* テキストは、例示の左、右、上、下の周りに流れなければなりません。<br />あなたは、 ウェブ? ペー ジのレイアウトが必要条件を満たすことを保証する必要があります。<br />どのコード行を使用 しなければなりませんか。<br />A. -ms-wrap-side: both;<br />B. -ms-wrap-side: clear;<br />C. -ms-wrap-side: maximum;<br />D. -ms-wrap-side: auto;<br />Answer: A<br /><br /><strong>Microsoft</strong>   <strong>70-480J</strong>   <strong>70-480J</strong>   <strong>70-480J</strong>   <strong>70-480J test questions</strong><br />Explanation:<br />http://msdn.microsoft.com/en-us/library/ie/hh673558(v=vs.85).aspx<br />http://dev.w3.org/csswg/css3-exclusions/<br /><br /></p><p>ITCertMaster offer the latest <A href="http://www.itcertmaster.com/000-087.html" target="_blank">000-087 Practice Test</A> and high-quality <A href="http://www.itcertmaster.com/CUR-009.html" target="_blank">CUR-009 PDF</A> Exam Questions training material. Our <a href="http://www.itcertmaster.com/ICGB.html" target="_blank">ICGB VCE</a> testing engine and <A href="http://www.itcertmaster.com/70-462.html" target="_blank">70-462 dumps</A> can help you pass the real exam. High-quality <A href="http://www.itcertmaster.com/MB7-700.html" target="_blank">MB7-700 Exam</A> Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.</p><p>Article Link: <A href="http://www.itcertmaster.com/70-480J.html" target="_blank">http://www.itcertmaster.com/70-480J.html</A></p>

Latest Microsoft 70-480J of exam practice questions and answers 「70-480日本語版」

Dear candidates, have you thought to participate in any Microsoft 70-480J exam training courses? In fact, you can take steps to pass the c...

Read more »

Microsoft MB3-700 training and testing

<p>ITCertMaster is a convenient website to provide training resources for IT professionals to participate in the certification exam. ITCertMaster have different training methods and training courses for different candidates. With these ITCertMaster's targeted training, the candidates can pass the exam much easier. A lot of people who participate in the IT professional certification exam was to use ITCertMaster's practice questions and answers to pass the exam, so ITCertMaster got a high reputation in the IT industry.</p><p>Take advantage of the ITCertMaster's Microsoft training materials to prepare for the exam, let me feel that the exam have never so easy to pass. This is someone who passed the examination said to us. With ITCertMaster Microsoft <strong>MB3-700</strong> exam certification training, you can sort out your messy thoughts, and no longer twitchy for the exam. ITCertMaster have some questions and answers provided free of charge as a trial. If I just said, you may be not believe that. But as long as you use the trial version, you will believe what I say. You will know the effect of this exam materials. </p><p>In order to allow you to safely choose ITCertMaster, part of the best Microsoft certification <strong>MB3-700</strong> exam materials provided online, you can try to free download to determine our reliability. We can not only help you pass the exam once for all, but also can help you save a lot of valuable time and effort. ITCertMaster can provide you with the real Microsoft certification <strong>MB3-700</strong> exam practice questions and answers to ensure you 100% pass the exam. When having passed Microsoft certification <strong>MB3-700</strong> exam your status in the IT area will be greatly improved and your prospect will be good.</p><p>Exam Code: <A href="http://www.itcertmaster.com/MB3-700.html" target="_blank">MB3-700</A><br/>Exam Name: <strong>Microsoft</strong> (Microsoft Dynamics GP 2013 Installation & Configuration)<br/>Guaranteed success with practice guides, No help, Full refund!<br/>75 Questions and Answers<br/>Updated: 2013-09-29</p><p>ITCertMaster's Microsoft <strong>MB3-700</strong> exam training materials are the necessities of each of candidates who participating in the IT certification. With this training material, you can do a full exam preparation. So that you will have the confidence to win the exam. ITCertMaster's Microsoft <a href="http://www.itcertmaster.com/MB3-700.html" target="_blank">MB3-700</a> exam training materials are highly targeted. Not every training materials on the Internet have such high quality. Only ITCertMaster could be so perfect. </p><p>Those who want to prepare for the IT certification exam are helpless. But they have to do it. So they have restless state of mind. However, With ITCertMaster Microsoft <strong>MB3-700</strong> exam training materials, the kind of mentality will disappear. With ITCertMaster's Microsoft <strong>MB3-700</strong> exam training materials, you can be brimming with confidence, and do not need to worry the exam. Of course, you can also face the exam with ease. This is not only psychological help, but more importantly, it allows you to pass the exam and to help you get a better tomorrow. </p><p>In the recent few years, Microsoft <strong>MB3-700</strong> exam certification have caused great impact to many people. But the key question for the future is that how to pass the Microsoft <strong>MB3-700</strong> exam more effectively. The answer of this question is to use ITCertMaster's Microsoft <a href="http://www.itcertmaster.com/MB3-700.html" target="_blank">MB3-700</a> exam training materials, and with it you can pass your exams. So what are you waiting for? Go to buy ITCertMaster's Microsoft <strong>MB3-700</strong> exam training materials please, and with it you can get more things what you want. </p><p>You can free download part of ITCertMaster's exercises and answers about Microsoft certification <strong>MB3-700</strong> exam as a try, then you will be more confident to choose our ITCertMaster's products to prepare your Microsoft certification <strong>MB3-700</strong> exam. Please add ITCertMaster's products in you cart quickly.</p><p><strong><strong>MB3-700</strong> Free Demo Download</strong>: <strong>http://www.itcertmaster.com/MB3-700.html</strong></p><p>NO.1 Which network protocol must be enabled to allow Microsoft Dynamics GP to connect to the<br />SQL server?<br />A. Virtual Interface Adapter (VIA)<br />B. Shared Memory<br />C. Named Pipes<br />D. TCP/IP<br />Answer: D<br /><br /><strong>Microsoft</strong>   <strong>MB3-700 exam simulations</strong>   <strong>MB3-700</strong><br /><br />NO.2 Which network protocol is required by Microsoft Dynamics GP?<br />A. Named Pipes<br />B. Shared Memory<br />C. Virtual Interface Adapter (VIA)<br />D. TCP/IP<br />Answer: D<br /><br /><strong>Microsoft braindump</strong>   <strong>MB3-700 dumps</strong>   <strong>MB3-700 test</strong>   <strong>MB3-700</strong><br /><br />NO.3 A company initializes the system database and creates the company database by using<br />Microsoft Dynamics GP Utilities. Which two items can be changed? (Each correct answer presents a<br />complete solution. Choose two.)<br />A. Account Framework<br />B. Company Database ID<br />C. Account Format<br />D. Company Name<br />Answer: C,D<br /><br /><strong>Microsoft original questions</strong>   <strong>MB3-700</strong>   <strong>MB3-700</strong><br /><br />NO.4 You are planning a Microsoft Dynamics GP installation.<br />You need to configure the SQL Server to use a RAID (redundant array of independent disks)<br />configuration that provides mirroring and parity striping.<br />Which RAID configuration should you use?<br />A. RAID 0<br />B. RAID 1<br />C. RAID 5<br />D. RAID 10<br />Answer: D<br /><br /><strong>Microsoft</strong>   <strong>MB3-700 dumps</strong>   <strong>MB3-700</strong>   <strong>MB3-700</strong>   <strong>MB3-700</strong><br /><br />NO.5 What type of records does the dexsql.log file contain?<br />A. SQL statements and Dexterity messages only<br />B. Open Database Connectivity (ODBC) messages and Dexterity messages only<br />C. Dexterity messages, SQL statements, and Open Database Connectivity (ODBC) messages<br />D. SQL statements and Open Database Connectivity (ODBC) messages only<br />Answer: D<br /><br /><a href="http://www.itcertmaster.com/Microsoft_index.html">Microsoft</a>   <strong>MB3-700 questions</strong>   <strong>MB3-700</strong>   <strong>MB3-700</strong><br /><br />NO.6 Which two statements regarding using Terminal Server and virtualization with Microsoft<br />Dynamics GP are true? (Each correct answer presents a complete solution. Choose two.)<br />A. Software virtualization is not supported.<br />B. Remote Desktop Services is supported in a WAN environment.<br />C. RAM requirements are less in a virtual environment.<br />D. Terminal Server is supported only for Microsoft Dynamics GP clients.<br />Answer: B,D<br /><br /><strong>Microsoft</strong>   <strong>MB3-700</strong>   <strong>MB3-700 original questions</strong><br /><br />NO.7 You install a system database that uses a name other than DYNAMICS. Which statement about<br />the system database name is true?<br />A. The system database must begin with a numeric character.<br />B. The system database must not exceed ten characters.<br />C. The system database must have at least five characters.<br />D. The system database must contain special characters.<br />Answer: B<br /><br /><strong>Microsoft original questions</strong>   <strong>MB3-700</strong>   <strong>MB3-700</strong>   <a href="http://www.itcertmaster.com/MB3-700.html">MB3-700 exam dumps</a>   <strong>MB3-700</strong>   <strong>MB3-700 exam dumps</strong><br /><br />NO.8 Which two SQL Server features are required for Microsoft Dynamics GP? (Each correct<br />answer presents a complete solution. Choose two.)<br />A. Database Engine Services<br />B. Client Tools Connectivity<br />C. Integration Services<br />D. Data Quality Client<br />Answer: A,B<br /><br /><strong>Microsoft</strong>   <strong>MB3-700 study guide</strong>   <strong>MB3-700</strong><br />Explanation:<br />Next select the required features. For Microsoft Dynamics GP select the Database Engine<br />Services(A)and and Client Tools Connectivity(B)from the Shared Features list.<br /><br />NO.9 Which two SQL Server sort orders are supported by Microsoft Dynamics GP? (Each correct<br />answer presents a complete solution. Choose two.)<br />A. Alternate dictionary (sort order 61)<br />B. Mixed dictionary (sort order 120)<br />C. Binary (sort order 50)<br />D. Dictionary (sort order 52)<br />Answer: C,D<br /><br /><a href="http://www.itcertmaster.com/Microsoft_index.html">Microsoft exam dumps</a>   <a href="http://www.itcertmaster.com/MB3-700.html">MB3-700 certification</a>   <strong>MB3-700 exam</strong><br />Explanation:<br />Database Requirementsinclude: Supported Microsoft SQL Server Collation 1.<br />Dictionary Order Case Insensitive - Sort Order 52 or 2.Binary - Sort Order 50<br /><br />NO.10 What are two effects of initializing the system database for Microsoft Dynamics GP? (Each<br />correct answer presents a complete solution. Choose two.)<br />A. Logins for LessonUser1 and LessonUser2 are created.<br />B. rpt roles are created.<br />C. The DYNSA login is created.<br />D. The TWO company database is created.<br />Answer: C,D<br /><br /><strong>Microsoft</strong>   <strong>MB3-700 test</strong>   <strong>MB3-700 certification</strong><br />Explanation:<br />All GP SQL databases are owned by the DYNSA user. This is what allows the DYNSA user to perform<br />most administrative and maintenance tasks without requiring the 'sa' user.<br />By default*, certain administrative tasks requiring system-level SQL permissions such as adding new<br />users and adding new companies are not available to DYNSA.<br />D: There is a Fabrikam (TWO) company database.<br /><br /></p><p>ITCertMaster offer the latest <A href="http://www.itcertmaster.com/700-101.html" target="_blank">700-101 Practice Test</A> and high-quality <A href="http://www.itcertmaster.com/MB5-858.html" target="_blank">MB5-858 PDF</A> Exam Questions training material. Our <A href="http://www.itcertmaster.com/EX0-118.html" target="_blank">EX0-118 VCE</A> testing engine and <A href="http://www.itcertmaster.com/LOT-441.html" target="_blank">LOT-441 dumps</A> can help you pass the real exam. High-quality <a href="http://www.itcertmaster.com/00M-617.html" target="_blank">00M-617 Exam</a> Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.</p><p>Article Link: <A href="http://www.itcertmaster.com/MB3-700.html" target="_blank">http://www.itcertmaster.com/MB3-700.html</A></p>

Microsoft MB3-700 training and testing

ITCertMaster is a convenient website to provide training resources for IT professionals to participate in the certification exam. ITCertMast...

Read more »

Free download of the best Microsoft certification 070-482J exam training materials 「070-482日本語版」

<p>ITCertMaster is a professional website. It can give each candidate to provide high-quality services, including pre-sales service and after-sales service. If you need ITCertMaster's Microsoft <strong>070-482J</strong> exam training materials, you can use part of our free questions and answers as a trial to sure that it is suitable for you. So you can personally check the quality of the ITCertMaster Microsoft <strong>070-482J</strong> exam training materials, and then decide to buy it. If you did not pass the exam unfortunately, we will refund the full cost of your purchase. Moreover, we can give you a year of free updates until you pass the exam. </p><p>Having a Microsoft certification <strong>070-482J</strong> exam certificate can help people who are looking for a job get better employment opportunities in the IT field and will also pave the way for a successful IT career for them.</p><p>ITCertMaster has special training tools for Microsoft certification <strong>070-482J</strong> exam, which can make you do not need to spend a lot of time and money but can get a lot of knowledge of IT technology to enhance your skills in a short time. And soon you will be able to prove your expertise knowledge and technology in IT industry. ITCertMaster's training courses for Microsoft certification <strong>070-482J</strong> exam is developed by the study of ITCertMaster experts team to use their knowledge and experience.</p><p>Since Microsoft <a href="http://www.itcertmaster.com/070-482J.html" target="_blank">070-482J</a> certification is so popular and our ITCertMaster can not only do our best to help you pass the exam, but also will provide you with one year free update service, so to choose ITCertMaster to help you achieve your dream. For tomorrow's success, is right to choose ITCertMaster. Selecting ITCertMaster, you will be an IT talent.</p><p>Exam Code: <a href="http://www.itcertmaster.com/070-482J.html" target="_blank">070-482J</a><br/>Exam Name: <strong>Microsoft</strong> (Advanced Windows Store App Dev using HTML5 and JavaScript (070-482日本語版))<br/>Guaranteed success with practice guides, No help, Full refund!<br/>70 Questions and Answers<br/>Updated: 2013-09-29</p><p>Nowadays in this talented society IT professionals are very popular, but the IT area are also very competitive. So many IT professionals through passing difficult IT certification exams to stabilize themselves. ITCertMaster is websites specifically provide convenience for candidates participating in the IT certification exams.</p><p>ITCertMaster to provide you with the real exam environment to help you find the real Microsoft <strong>070-482J</strong> exam preparation process. If you are a beginner or want to improve your professional skills, ITCertMaster Microsoft <strong>070-482J</strong> will help you, let you approached you desire step by step. If you have any questions on the exam question and answers, we will help you solve it. Within a year, we will offer free update. </p><p><strong><strong>070-482J</strong> Free Demo Download</strong>: <strong>http://www.itcertmaster.com/070-482J.html</strong></p><p>NO.1 あなたは、HTML5 と JavaScript を使用 して Windows ストア? アプリを開発しています。<br />アプリには HEADER、NAV および SECTION 要 素があります。<br />SECTION 要素はレ コー ドのリストを 表示しま す。 アプリによって 、ユーザーが 複数回ソ ー<br />トすることができます。<br />アプリは以下の必要条件を満たさなければなりません。<br />ユーザがソートを実行するたびに、 ソートされたレコードと SECTION 要素のコンテンツを交<br />換します。<br />SECTION 要 素 に ソ ー ト さ れ た レ コ ー ド を ス ラ イ ド す る こ と に よ っ て 更 新 さ れ た コ ン テ ン ツ<br />をアニメーション化します。<br />SECTION 要素にアニメ ーションを適用するために WinJS ライブラリを使用する必要がありま<br />す。 どの機能を使用しなければなりませんか。<br />A. enterPage()<br />B. enterContent()<br />C. createExpandAnimation()<br />D. createExpandAnimation()<br />Answer: B<br /><br /><a href="http://www.itcertmaster.com/Microsoft_index.html">Microsoft test</a>   <strong>070-482J demo</strong>   <strong>070-482J exam prep</strong><br /><br />NO.2 既 存の WinJS ツー ル チッ プ? コン ト ロー ル から 継承 する カスタ ム? ツ ール チッ プ? コン<br />トロールを 開発し てい ます。 カスタム コン トロールは 、機能 を拡 張するベー スコン トロ ー<br />ルの open （）のメソ ッドをオーバーライドします。次のコ ード· セグメントは、メソッドの<br />オーバーライドの構造を示します。<br />Open: function (type) {<br />}<br />基本メソッドはオーバーライドの開始時に実行されることを確認する必要があります。<br />基本メソッドを呼び出すためにどのコードセグメントを使用しなければなりませんか。<br />A. this.base.open();<br />B. this.super.open();<br />C. base.open();<br />D. this.prototype.open();<br />Answer: B<br /><br /><strong>Microsoft</strong>   <strong>070-482J exam prep</strong>   <strong>070-482J</strong>   <strong>070-482J certification training</strong>   <strong>070-482J questions</strong><br /><br />NO.3 あなたは、 次の コード· セグメント を使用して Contoso とい うカスタムコントロールを<br />作成しています。 （行番号は参照のみのために含まれています。 ）<br />Contoso.UI = {<br />showMe: function () { ... }<br />}<br />名前空間を定義する必要があります。<br />01 行目にどのコード セグメントを挿入しなければなりませんか。<br />A. WinJS.Namespace.define("Contoso");<br />B. WinJS.Namespace.defineWithParent("Contoso");<br />C. WinJS.Class.define("Contoso");<br />D. WinJS.Class.defineWithParent("Contoso");<br />Answer: A<br /><br /><strong>Microsoft questions</strong>   <strong>070-482J</strong>   <strong>070-482J braindump</strong>   <strong>070-482J</strong>   <strong>070-482J</strong><br />4. あなたは JavaScript を使用して 2 つの Windows ストア? スタイル? アプリを開発してい<br />ます。ソ ース アプリ は 顧客の機 密情 報を格 納 します。 ター ゲット? アプリは 検証 とさら な る<br />処理のために格納された情報を検索します。 ソースアプリは、 秘密鍵と公開鍵のペアを使用<br />してデー タを 保護す る 必要があ りま す。タ ー ゲット? ア プリだ けは ソースア プリ によっ て 確<br />保されているデータを 利用することができなければなりません。<br />あなたは、データのセキュリティが侵害されないことを保証する必要があります。<br />何を行わなければなりませんか。<br />A. 非対称のアルゴリズムを使用してデータを暗号化し、解読する。<br />B. 対称のアルゴリズ ムを使用してデータを暗号化し、解読する。<br />C. 非対称アルゴリズ ムを使用してデータ を 暗号化する。対称ア ル ゴリズムを用いてデ ー タ<br />を解読する。<br />D. Base64 の文字列に データをエンコードし、文字列からデータを解読する。<br />Answer: A<br /><br /><strong>Microsoft test questions</strong>   <a href="http://www.itcertmaster.com/070-482J.html">070-482J exam</a>   <strong>070-482J test questions</strong>   <strong>070-482J</strong>   <strong>070-482J</strong><br />5. あなたは Windows ストア? アプリを開 発しています。無料試用期間を許可するために<br />アプリを構成します。<br />あなたは、 試用期間が終了するときに、 ユーザーがアプリの完全版を購入することを促す必<br />要があります。<br />何をしなければなりませんか。<br />A. Call the getAppReceiptAsync() method of the Windows.ApplicationModel.Store.CurrentApp<br />object.<br />B. Call the getProductReceiptAsync() method of the Windows.ApplicationModel.Store.CurrentApp<br />object and provide the app's product ID as an argument.<br />C. Call the requestProductPurchaseAsync() method of the<br />Windows.ApplicationModel.Store.CurrentApp object and provide the app's product ID as an<br />argument.<br />D. Call the requestAppPurchaseAsync() method of the<br />Windows.ApplicationModel.Store.CurrentApp object.<br />Answer: B<br /><br /><strong>Microsoft braindump</strong>   <strong>070-482J exam prep</strong>   <a href="http://www.itcertmaster.com/070-482J.html">070-482J</a>   <strong>070-482J</strong><br />6. あなたは JavaScript を使用して Windows ストア? アプリを開発 しています。 アプリは 複<br />数の地理的な場所で使用されます。アプリは文字のグループ化を実装します。<br />あなたは、 アプリは最初の文字のグループだけにアクセスできることを確認する必要があり<br />ます。<br />どのコードセグメントを使うべき でしょうか。<br />A. var item = new Windows.Globalization.Collation.CharacterGroupings().getAt (1);<br />B. var item = new Windows.Globalization.Collation.CharacterGroupings().lookup("1");<br />C. var item = new Windows.Globalization.Collation.CharacterGroupings().first();<br />D. var item = new Windows.Globalization.Collation.CharacterGrouping().first;<br />Answer: C<br /><br /><strong>Microsoft certification training</strong>   <strong>070-482J braindump</strong>   <strong>070-482J</strong><br />7. DLNA 互換デバイ スを検索し、登録する必要があります。 PL16 行目にどのコードセグ<br />メントを挿入しなければなりませんか。<br />A. var player = Windows.Media=Devices.AudioDeviceController();<br />B. var player = Windows.Media.Devices.DLNADeviceController( );<br />C. var player = Windows-Media,PlayTo.PlayToManager.getForCurrentView();<br />player.addsventListener("sourcerequested", sourceRequestHandler, false);<br />D. var player = Windows.Media.PlayTo.PlayToManager.showPlayToUI();<br />player-addEventListener("sourcerequested", sourceRequestHandler, false);<br />Answer: C<br /><br /><strong>Microsoft exam prep</strong>   <strong>070-482J exam</strong>   <strong>070-482J</strong>   <strong>070-482J test questions</strong><br /><br /></p><p>ITCertMaster offer the latest <A href="http://www.itcertmaster.com/NS0-155.html" target="_blank">NS0-155 Practice Test</A> and high-quality <a href="http://www.itcertmaster.com/70-466.html" target="_blank">70-466 PDF</a> Exam Questions training material. Our <A href="http://www.itcertmaster.com/70-583.html" target="_blank">70-583 VCE</A> testing engine and <A href="http://www.itcertmaster.com/000-400.html" target="_blank">000-400 dumps</A> can help you pass the real exam. High-quality <A href="http://www.itcertmaster.com/644-068.html" target="_blank">644-068 Exam</A> Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.</p><p>Article Link: <a href="http://www.itcertmaster.com/070-482J.html" target="_blank">http://www.itcertmaster.com/070-482J.html</a></p>

Free download of the best Microsoft certification 070-482J exam training materials 「070-482日本語版」

ITCertMaster is a professional website. It can give each candidate to provide high-quality services, including pre-sales service and after-s...

Read more »