����JFIFXX�����    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222����"��4�� ���,�PG"Z_�4�˷����kjز�Z�,F+��_z�,�© �����zh6�٨�ic�fu���#ډb���_�N�?��wQ���5-�~�I���8����TK<5o�Iv-�����k�_U_�����~b�M��d����Ӝ�U�Hh��?]��E�w��Q���k�{��_}qFW7HTՑ��Y��F�?_�'ϔ��_�Ջt��=||I ��6�έ"�����D���/[�k�9���Y�8ds|\���Ҿp6�Ҵ���]��.����6�z<�v��@]�i%��$j��~�g��J>��no����pM[me�i$[����s�o�ᘨ�˸ nɜG-�ĨU�ycP�3.DB�li�;��hj���x7Z^�N�h������N3u{�:j�x�힞��#M&��jL P@_���� P��&��o8������9�����@Sz6�t7#O�ߋ �s}Yf�T���lmr����Z)'N��k�۞p����w\�Tȯ?�8`�O��i{wﭹW�[�r�� ��Q4F�׊���3m&L�=��h3����z~��#�\�l :�F,j@�� ʱ�wQT����8�"kJO���6�֚l����}���R�>ډK���]��y����&����p�}b��;N�1�m�r$�|��7�>e�@B�TM*-iH��g�D�)� E�m�|�ؘbҗ�a��Ҿ����t4���o���G��*oCN�rP���Q��@z,|?W[0�����:�n,jWiE��W��$~/�hp\��?��{(�0���+�Y8rΟ�+����>S-S����VN;�}�s?.����� w�9��˟<���Mq4�Wv'��{)0�1mB��V����W[�����8�/<� �%���wT^�5���b��)iM� pg�N�&ݝ��VO~�q���u���9� ����!��J27����$O-���! �:�%H��� ـ����y�ΠM=t{!S�� oK8������t<����è:a������[�����ա�H���~��w��Qz`�po�^ ����Q��n� �,uu�C�$ ^���,������8�#��:�6��e�|~���!�3�3.�\0��q��o�4`.|� ����y�Q�`~;�d�ׯ,��O�Zw�������`73�v�܋�<���Ȏ�� ـ4k��5�K�a�u�=9Yd��$>x�A�&�� j0� ���vF��� Y�|�y��� ~�6�@c��1vOp�Ig����4��l�OD���L����� R���c���j�_�uX6��3?nk��Wy�f;^*B� ��@�~a�`��Eu������+���6�L��.ü>��}y���}_�O�6�͐�:�YrG�X��kG�����l^w���~㒶sy��Iu�!� W ��X��N�7BV��O��!X�2����wvG�R�f�T#�����t�/?���%8�^�W�aT��G�cL�M���I��(J����1~�8�?aT ���]����AS�E��(��*E}� 2��#I/�׍qz��^t�̔���b�Yz4x���t�){ OH��+(E��A&�N�������XT��o��"�XC��'���)}�J�z�p� ��~5�}�^����+�6����w��c��Q�|Lp�d�H��}�(�.|����k��c4^�"�����Z?ȕ ��a<�L�!039C� �Eu�C�F�Ew�ç ;�n?�*o���B�8�bʝ���'#Rqf���M}7����]����s2tcS{�\icTx;�\��7K���P���ʇ Z O-��~��c>"��?�������P��E��O�8��@�8��G��Q�g�a�Վ���󁶠�䧘��_%#r�>�1�z�a��eb��qcPѵ��n���#L��� =��׀t� L�7�`��V���A{�C:�g���e@�w1 Xp3�c3�ġ����p��M"'-�@n4���fG��B3�DJ�8[Jo�ߐ���gK)ƛ��$���� ���8�3�����+���� �����6�ʻ���� ���S�kI�*KZlT _`���?��K����QK�d����B`�s}�>���`��*�>��,*@J�d�oF*����弝��O}�k��s��]��y�ߘ��c1G�V���<=�7��7����6�q�PT��tXԀ�!9*4�4Tހ3XΛex�46���Y��D ����� �BdemDa����\�_l,��G�/���֌7���Y�](�xTt^%�GE�����4�}bT���ڹ�����;Y)���B�Q��u��>J/J �⮶.�XԄ��j�ݳ�+E��d ��r�5�_D�1 ��o�� �B�x�΢�#���<��W�����8���R6�@g�M�.��� dr�D��>(otU��@x=��~v���2� ӣ�d�oBd��3�eO�6�㣷�����ݜ6��6Y��Qz`��S��{���\P�~z m5{J/L��1������<�e�ͅPu�b�]�ϔ���'������f�b� Zpw��c`"��i���BD@:)ִ�:�]��hv�E�w���T�l��P���"Ju�}��وV J��G6��. J/�Qgl߭�e�����@�z�Zev2u�)]կ�����7x���s�M�-<ɯ�c��r�v�����@��$�ޮ}lk���a���'����>x��O\�ZFu>�����ck#��&:��`�$�ai�>2Δ����l���oF[h��lE�ܺ�Πk:)���`�� $[6�����9�����kOw�\|���8}������ބ:��񶐕��I�A1/�=�2[�,�!��.}gN#�u����b��� ~��݊��}34q����d�E��Lc��$��"�[q�U�硬g^��%B �z���r�pJ�ru%v\h1Y�ne`ǥ:g���pQM~�^�Xi� ��`S�:V29.�P���V�?B�k�� AEvw%�_�9C�Q����wKekPؠ�\�;Io d�{ ߞo�c1eP����\� `����E=���@K<�Y���eڼ�J���w����{av�F�'�M�@/J��+9p���|]�����Iw &`��8���&M�hg��[�{��Xj��%��Ӓ�$��(����ʹN���<>�I���RY���K2�NPlL�ɀ)��&e����B+ь����( � �JTx���_?EZ� }@ 6�U���뙢ط�z��dWI�n` D����噥�[��uV��"�G&Ú����2g�}&m��?ċ�"����Om#��������� ��{�ON��"S�X��Ne��ysQ���@Fn��Vg���dX�~nj�]J�<�K]:��FW��b�������62�=��5f����JKw��bf�X�55��~J �%^����:�-�QIE��P��v�nZum� z � ~ə ���� ���ة����;�f��\v���g�8�1��f24;�V���ǔ�)����9���1\��c��v�/'Ƞ�w�������$�4�R-��t���� e�6�/�ġ �̕Ecy�J���u�B���<�W�ַ~�w[B1L۲�-JS΂�{���΃������A��20�c#��@ 0!1@AP"#2Q`$3V�%45a6�FRUq��� ����^7ׅ,$n�������+��F�`��2X'��0vM��p�L=������5��8������u�p~���.�`r�����\���O��,ư�0oS ��_�M�����l���4�kv\JSd���x���SW�<��Ae�IX����������$I���w�:S���y���›R��9�Q[���,�5�;�@]�%���u�@ *ro�lbI �� ��+���%m:�͇ZV�����u�̉����θau<�fc�.����{�4Ա� �Q����*�Sm��8\ujqs]{kN���)qO�y�_*dJ�b�7���yQqI&9�ԌK!�M}�R�;������S�T���1���i[U�ɵz�]��U)V�S6���3$K{�ߊ<�(� E]Զ[ǼENg�����'�\?#)Dkf��J���o��v���'�%ƞ�&K�u�!��b�35LX�Ϸ��63$K�a�;�9>,R��W��3�3� d�JeTYE.Mϧ��-�o�j3+y��y^�c�������VO�9NV\nd�1 ��!͕_)a�v;����թ�M�lWR1��)El��P;��yوÏ�u 3�k�5Pr6<�⒲l�!˞*��u־�n�!�l:����UNW ��%��Chx8vL'��X�@��*��)���̮��ˍ��� ���D-M�+J�U�kvK����+�x8��cY������?�Ԡ��~3mo��|�u@[XeY�C�\Kp�x8�oC�C�&����N�~3-H���� ��MX�s�u<`���~"WL��$8ξ��3���a�)|:@�m�\���^�`�@ҷ)�5p+��6���p�%i)P M���ngc�����#0Aruz���RL+xSS?���ʮ}()#�t��mˇ!��0}}y����<�e� �-ή�Ԩ��X������ MF���ԙ~l L.3���}�V뽺�v�����멬��Nl�)�2����^�Iq��a��M��qG��T�����c3#������3U�Ǎ���}��לS�|qa��ڃ�+���-��2�f����/��bz��ڐ�� �ݼ[2�ç����k�X�2�* �Z�d���J�G����M*9W���s{��w���T��x��y,�in�O�v��]���n����P�$�JB@=4�OTI�n��e�22a\����q�d���%�$��(���:���: /*�K[PR�fr\nڙdN���F�n�$�4�[�� U�zƶ����� �mʋ���,�ao�u 3�z� �x��Kn����\[��VFmbE;�_U��&V�Gg�]L�۪&#n%�$ɯ�dG���D�TI=�%+AB�Ru#��b4�1�»x�cs�YzڙJG��f��Il��d�eF'T� iA��T���uC�$����Y��H?����[!G`}���ͪ� �纤Hv\������j�Ex�K���!���OiƸ�Yj�+u-<���'q����uN�*�r\��+�]���<�wOZ.fp�ێ��,-*)V?j-kÊ#�`�r��dV����(�ݽBk�����G�ƛk�QmUڗe��Z���f}|����8�8��a���i��3'J�����~G_�^���d�8w������ R�`(�~�.��u���l�s+g�bv���W���lGc}��u���afE~1�Ue������Z�0�8�=e�� f@/�jqEKQQ�J��oN��J���W5~M>$6�Lt�;$ʳ{���^��6�{����v6���ķܰg�V�cnn �~z�x�«�,2�u�?cE+Ș�H؎�%�Za�)���X>uW�Tz�Nyo����s���FQƤ��$��*�&�LLXL)�1�" L��eO��ɟ�9=���:t��Z���c��Ž���Y?�ӭV�wv�~,Y��r�ۗ�|�y��GaF�����C�����.�+� ���v1���fήJ�����]�S��T��B��n5sW}y�$��~z�'�c ��8 ��� ,! �p��VN�S��N�N�q��y8z˱�A��4��*��'������2n<�s���^ǧ˭P�Jޮɏ�U�G�L�J�*#��<�V��t7�8����TĜ>��i}K%,���)[��z�21z ?�N�i�n1?T�I�R#��m-�����������������1����lA�`��fT5+��ܐ�c�q՝��ʐ��,���3�f2U�եmab��#ŠdQ�y>\��)�SLY����w#��.���ʑ�f��� ,"+�w�~�N�'�c�O�3F�������N<���)j��&��,-� �љ���֊�_�zS���TǦ����w�>��?�������n��U仆�V���e�����0���$�C�d���rP �m�׈e�Xm�Vu� �L��.�bֹ��� �[Դaզ���*��\y�8�Է:�Ez\�0�Kq�C b��̘��cө���Q��=0Y��s�N��S.���3.���O�o:���#���v7�[#߫ ��5�܎�L���Er4���9n��COWlG�^��0k�%<���ZB���aB_���������'=��{i�v�l�$�uC���mƎҝ{�c㱼�y]���W�i ��ߧc��m�H� m�"�"�����;Y�ߝ�Z�Ǔ�����:S#��|}�y�,/k�Ld� TA�(�AI$+I3��;Y*���Z��}|��ӧO��d�v��..#:n��f>�>���ȶI�TX��� 8��y����"d�R�|�)0���=���n4��6ⲑ�+��r<�O�܂~zh�z����7ܓ�HH�Ga롏���nCo�>������a ���~]���R���̲c?�6(�q�;5%� |�uj�~z8R=X��I�V=�|{v�Gj\gc��q����z�؋%M�ߍ����1y��#��@f^���^�>N�����#x#۹��6�Y~�?�dfPO��{��P�4��V��u1E1J �*|���%���JN��`eWu�zk M6���q t[�� ��g�G���v��WIG��u_ft����5�j�"�Y�:T��ɐ���*�;� e5���4����q$C��2d�}���� _S�L#m�Yp��O�.�C�;��c����Hi#֩%+) �Ӎ��ƲV���SYź��g |���tj��3�8���r|���V��1#;.SQ�A[���S������#���`n�+���$��$I �P\[�@�s��(�ED�z���P��])8�G#��0B��[ى��X�II�q<��9�~[Z멜�Z�⊔IWU&A>�P~�#��dp<�?����7���c��'~���5 ��+$���lx@�M�dm��n<=e�dyX��?{�|Aef ,|n3�<~z�ƃ�uۧ�����P��Y,�ӥQ�*g�#먙R�\���;T��i,��[9Qi歉����c>]9�� ��"�c��P�� �Md?٥��If�ت�u��k��/����F��9�c*9��Ǎ:�ØF���z�n*�@|I�ށ9����N3{'��[�'ͬ�Ҳ4��#}��!�V� Fu��,�,mTIk���v C�7v���B�6k�T9��1�*l� '~��ƞF��lU��'�M ����][ΩũJ_�{�i�I�n��$���L�� j��O�dx�����kza۪��#�E��Cl����x˘�o�����V���ɞ�ljr��)�/,�߬h�L��#��^��L�ф�,íMƁe�̩�NB�L�����iL����q�}��(��q��6IçJ$�W�E$��:������=#����(�K�B����zђ <��K(�N�۫K�w��^O{!����)�H���>x�������lx�?>Պ�+�>�W���,Ly!_�D���Ō�l���Q�!�[ �S����J��1��Ɛ�Y}��b,+�Lo�x�ɓ)����=�y�oh�@�꥟/��I��ѭ=��P�y9��� �ۍYӘ�e+�p�Jnϱ?V\SO%�(�t� ���=?MR�[Ș�����d�/ ��n�l��B�7j� ��!�;ӥ�/�[-���A�>�dN�sLj ��,ɪv��=1c�.SQ�O3�U���ƀ�ܽ�E����������̻��9G�ϷD�7(�}��Ävӌ\�y�_0[w ���<΍>����a_��[0+�L��F.�޺��f�>oN�T����q;���y\��bՃ��y�jH�<|q-eɏ�_?_9+P���Hp$�����[ux�K w�Mw��N�ی'$Y2�=��q���KB��P��~������Yul:�[<����F1�2�O���5=d����]Y�sw:���Ϯ���E��j,_Q��X��z`H1,#II ��d�wr��P˂@�ZJV����y$�\y�{}��^~���[:N����ߌ�U�������O��d�����ؾe��${p>G��3c���Ė�lʌ�� ת��[��`ϱ�-W����dg�I��ig2��� ��}s ��ؤ(%#sS@���~���3�X�nRG�~\jc3�v��ӍL��M[JB�T��s3}��j�Nʖ��W����;7��ç?=X�F=-�=����q�ߚ���#���='�c��7���ڑW�I(O+=:uxq�������������e2�zi+�kuG�R��������0�&e�n���iT^J����~\jy���p'dtG��s����O��3����9* �b#Ɋ�� p������[Bws�T�>d4�ۧs���nv�n���U���_�~,�v����ƜJ1��s�� �QIz��)�(lv8M���U=�;����56��G���s#�K���MP�=��LvyGd��}�VwWBF�'�à �?MH�U�g2�� ����!�p�7Q��j��ڴ����=��j�u��� Jn�A s���uM������e��Ɔ�Ҕ�!)'��8Ϣ�ٔ��ޝ(��Vp���צ֖d=�IC�J�Ǡ{q������kԭ�߸���i��@K����u�|�p=..�*+����x�����z[Aqġ#s2a�Ɗ���RR�)*HRsi�~�a &f��M��P����-K�L@��Z��Xy�'x�{}��Zm+���:�)�) IJ�-i�u���� ���ܒH��'�L(7�y�GӜq���� j��� 6ߌg1�g�o���,kر���tY�?W,���p���e���f�OQS��!K�۟cҒA�|ս�j�>��=⬒��˧L[�� �߿2JaB~R��u�:��Q�] �0H~���]�7��Ƽ�I���(}��cq '�ήET���q�?f�ab���ӥvr� �)o��-Q��_'����ᴎo��K������;��V���o��%���~OK ����*��b�f:���-ťIR��`B�5!RB@���ï�� �u �̯e\�_U�_������� g�ES��3�������QT��a����x����U<~�c?�*�#]�MW,[8O�a�x��]�1bC|踤�P��lw5V%�)�{t�<��d��5���0i�XSU��m:��Z�┵�i�"��1�^B�-��P�hJ��&)O��*�D��c�W��vM��)����}���P��ܗ-q����\mmζZ-l@�}��a��E�6��F�@��&Sg@���ݚ�M����� ȹ 4����#p�\H����dYDo�H���"��\��..R�B�H�z_�/5˘����6��KhJR��P�mƶi�m���3�,#c�co��q�a)*Pt����R�m�k�7x�D�E�\Y�閣_X�<���~�)���c[[�BP����6�Yq���S��0����%_����;��Àv�~�| VS؇ ��'O0��F0��\���U�-�d@�����7�SJ*z��3n��y��P����O���������m�~�P�3|Y��ʉr#�C�<�G~�.,! ���bqx���h~0=��!ǫ�jy����l�O,�[B��~��|9��ٱ����Xly�#�i�B��g%�S��������tˋ���e���ې��\[d�t)��.+u�|1 ������#�~Oj����hS�%��i.�~X���I�H�m��0n���c�1uE�q��cF�RF�o���7� �O�ꮧ� ���ۛ{��ʛi5�rw?׌#Qn�TW��~?y$��m\�\o����%W� ?=>S�N@�� �Ʈ���R����N�)�r"C�:��:����� �����#��qb��Y�. �6[��2K����2u�Ǧ�HYR��Q�MV��� �G�$��Q+.>�����nNH��q�^��� ����q��mM��V��D�+�-�#*�U�̒ ���p욳��u:�������IB���m���PV@O���r[b= �� ��1U�E��_Nm�yKbN�O���U�}�the�`�|6֮P>�\2�P�V���I�D�i�P�O;�9�r�mAHG�W�S]��J*�_�G��+kP�2����Ka�Z���H�'K�x�W�MZ%�O�YD�Rc+o��?�q��Ghm��d�S�oh�\�D�|:W������UA�Qc yT�q������~^�H��/��#p�CZ���T�I�1�ӏT����4��"�ČZ�����}��`w�#�*,ʹ�� ��0�i��課�Om�*�da��^gJ݅{���l�e9uF#T�ֲ��̲�ٞC"�q���ߍ ոޑ�o#�XZTp����@ o�8��(jd��xw�]�,f���`~�|,s��^����f�1���t��|��m�򸄭/ctr��5s��7�9Q�4�H1꠲BB@l9@���C�����+�wp�xu�£Yc�9��?`@#�o�mH�s2��)�=��2�.�l����jg�9$�Y�S�%*L������R�Y������7Z���,*=�䷘$�������arm�o�ϰ���UW.|�r�uf����IGw�t����Zwo��~5 ��YյhO+=8fF�)�W�7�L9lM�̘·Y���֘YLf�큹�pRF���99.A �"wz��=E\Z���'a� 2��Ǚ�#;�'}�G���*��l��^"q��+2FQ� hj��kŦ��${���ޮ-�T�٭cf�|�3#~�RJ����t��$b�(R��(����r���dx� >U b�&9,>���%E\� Ά�e�$��'�q't��*�א���ެ�b��-|d���SB�O�O��$�R+�H�)�܎�K��1m`;�J�2�Y~9��O�g8=vqD`K[�F)k�[���1m޼c��n���]s�k�z$@��)!I �x՝"v��9=�ZA=`Ɠi �:�E��)`7��vI��}d�YI�_ �o�:ob���o ���3Q��&D&�2=�� �Ά��;>�h����y.*ⅥS������Ӭ�+q&����j|UƧ����}���J0��WW< ۋS�)jQR�j���Ư��rN)�Gű�4Ѷ(�S)Ǣ�8��i��W52���No˓� ۍ%�5brOn�L�;�n��\G����=�^U�dI���8$�&���h��'���+�(������cȁ߫k�l��S^���cƗjԌE�ꭔ��gF���Ȓ��@���}O���*;e�v�WV���YJ\�]X'5��ղ�k�F��b 6R�o՜m��i N�i����>J����?��lPm�U��}>_Z&�KK��q�r��I�D�Չ~�q�3fL�:S�e>���E���-G���{L�6p�e,8��������QI��h��a�Xa��U�A'���ʂ���s�+טIjP�-��y�8ۈZ?J$��W�P� ��R�s�]��|�l(�ԓ��sƊi��o(��S0��Y� 8�T97.�����WiL��c�~�dxc�E|�2!�X�K�Ƙਫ਼�$((�6�~|d9u+�qd�^3�89��Y�6L�.I�����?���iI�q���9�)O/뚅����O���X��X�V��ZF[�یgQ�L��K1���RҖr@v�#��X�l��F���Нy�S�8�7�kF!A��sM���^rkp�jP�DyS$N���q��nxҍ!U�f�!eh�i�2�m���`�Y�I�9r�6� �TF���C}/�y�^���Η���5d�'��9A-��J��>{�_l+�`��A���[�'��յ�ϛ#w:݅�%��X�}�&�PSt�Q�"�-��\縵�/����$Ɨh�Xb�*�y��BS����;W�ջ_mc�����vt?2}1�;qS�d�d~u:2k5�2�R�~�z+|HE!)�Ǟl��7`��0�<�,�2*���Hl-��x�^����'_TV�gZA�'j� ^�2Ϊ��N7t�����?w�� �x1��f��Iz�C-Ȗ��K�^q�;���-W�DvT�7��8�Z�������� hK�(P:��Q- �8�n�Z���܃e貾�<�1�YT<�,�����"�6{/ �?�͟��|1�:�#g��W�>$����d��J��d�B��=��jf[��%rE^��il:��B���x���Sּ�1հ��,�=��*�7 fcG��#q� �eh?��2�7�����,�!7x��6�n�LC�4x��},Geǝ�tC.��vS �F�43��zz\��;QYC,6����~;RYS/6���|2���5���v��T��i����������mlv��������&� �nRh^ejR�LG�f���? �ۉҬܦƩ��|��Ȱ����>3����!v��i�ʯ�>�v��オ�X3e���_1z�Kȗ\<������!�8���V��]��?b�k41�Re��T�q��mz��TiOʦ�Z��Xq���L������q"+���2ۨ��8}�&N7XU7Ap�d�X��~�׿��&4e�o�F��� �H����O���č�c�� 懴�6���͉��+)��v;j��ݷ�� �UV�� i��� j���Y9GdÒJ1��詞�����V?h��l����l�cGs�ځ�������y�Ac�����\V3�? �� ܙg�>qH�S,�E�W�[�㺨�uch�⍸�O�}���a��>�q�6�n6����N6�q������N ! 1AQaq�0@����"2BRb�#Pr���3C`��Scst���$4D���%Td�� ?���N����a��3��m���C���w��������xA�m�q�m���m������$����4n淿t'��C"w��zU=D�\R+w�p+Y�T�&�պ@��ƃ��3ޯ?�Aﶂ��aŘ���@-�����Q�=���9D��ռ�ѻ@��M�V��P��܅�G5�f�Y<�u=,EC)�<�Fy'�"�&�չ�X~f��l�KԆV��?�� �W�N����=(� �;���{�r����ٌ�Y���h{�١������jW����P���Tc�����X�K�r��}���w�R��%��?���E��m�� �Y�q|����\lEE4���r���}�lsI�Y������f�$�=�d�yO����p�����yBj8jU�o�/�S��?�U��*������ˍ�0������u�q�m [�?f����a�� )Q�>����6#������� ?����0UQ����,IX���(6ڵ[�DI�MNލ�c&���υ�j\��X�R|,4��� j������T�hA�e��^���d���b<����n�� �즇�=!���3�^�`j�h�ȓr��jẕ�c�,ٞX����-����a�ﶔ���#�$��]w�O��Ӫ�1y%��L�Y<�wg#�ǝ�̗`�x�xa�t�w��»1���o7o5��>�m뭛C���Uƃߜ}�C���y1Xνm�F8�jI���]����H���ۺиE@I�i;r�8ӭ����V�F�Շ| ��&?�3|x�B�MuS�Ge�=Ӕ�#BE5G�����Y!z��_e��q�р/W>|-�Ci߇�t�1ޯќd�R3�u��g�=0 5��[?�#͏��q�cf���H��{ ?u�=?�?ǯ���}Z��z���hmΔ�BFTW�����<�q�(v� ��!��z���iW]*�J�V�z��gX֧A�q�&��/w���u�gYӘa���; �i=����g:��?2�dž6�ى�k�4�>�Pxs����}������G�9��3 ���)gG�R<>r h�$��'nc�h�P��Bj��J�ҧH� -��N1���N��?��~��}-q!=��_2hc�M��l�vY%UE�@|�v����M2�.Y[|y�"Eï��K�ZF,�ɯ?,q�?v�M 80jx�"�;�9vk�����+ ֧�� �ȺU��?�%�vcV��mA�6��Qg^M����A}�3�nl� QRN�l8�kkn�'�����(��M�7m9و�q���%ޟ���*h$Zk"��$�9��: �?U8�Sl��,,|ɒ��xH(ѷ����Gn�/Q�4�P��G�%��Ա8�N��!� �&�7�;���eKM7�4��9R/%����l�c>�x;������>��C�:�����t��h?aKX�bhe�ᜋ^�$�Iհ �hr7%F$�E��Fd���t��5���+�(M6�t����Ü�UU|zW�=a�Ts�Tg������dqP�Q����b'�m���1{|Y����X�N��b �P~��F^F:����k6�"�j!�� �I�r�`��1&�-$�Bevk:y���#yw��I0��x��=D�4��tU���P�ZH��ڠ底taP��6����b>�xa����Q�#� WeF��ŮNj�p�J* mQ�N����*I�-*�ȩ�F�g�3 �5��V�ʊ�ɮ�a��5F���O@{���NX��?����H�]3��1�Ri_u��������ѕ�� ����0��� F��~��:60�p�͈�S��qX#a�5>���`�o&+�<2�D����: �������ڝ�$�nP���*)�N�|y�Ej�F�5ټ�e���ihy�Z �>���k�bH�a�v��h�-#���!�Po=@k̆IEN��@��}Ll?j�O������߭�ʞ���Q|A07x���wt!xf���I2?Z��<ץ�T���cU�j��]��陎Ltl �}5�ϓ��$�,��O�mˊ�;�@O��jE��j(�ا,��LX���LO���Ц�90�O �.����a��nA���7������j4 ��W��_ٓ���zW�jcB������y՗+EM�)d���N�g6�y1_x��p�$Lv:��9�"z��p���ʙ$��^��JԼ*�ϭ����o���=x�Lj�6�J��u82�A�H�3$�ٕ@�=Vv�]�'�qEz�;I˼��)��=��ɯ���x �/�W(V���p�����$ �m�������u�����񶤑Oqˎ�T����r��㠚x�sr�GC��byp�G��1ߠ�w e�8�$⿄����/�M{*}��W�]˷.�CK\�ުx���/$�WPw���r� |i���&�}�{�X� �>��$-��l���?-z���g����lΆ���(F���h�vS*���b���߲ڡn,|)mrH[���a�3�ר�[1��3o_�U�3�TC�$��(�=�)0�kgP���� ��u�^=��4 �WYCҸ:��vQ�ר�X�à��tk�m,�t*��^�,�}D*� �"(�I��9R����>`�`��[~Q]�#af��i6l��8���6�:,s�s�N6�j"�A4���IuQ��6E,�GnH��zS�HO�uk�5$�I�4��ؤ�Q9�@��C����wp�BGv[]�u�Ov���0I4���\��y�����Q�Ѹ��~>Z��8�T��a��q�ޣ;z��a���/��S��I:�ܫ_�|������>=Z����8:�S��U�I�J��"IY���8%b8���H��:�QO�6�;7�I�S��J��ҌAά3��>c���E+&jf$eC+�z�;��V����� �r���ʺ������my�e���aQ�f&��6�ND��.:��NT�vm�<- u���ǝ\MvZY�N�NT��-A�>jr!S��n�O 1�3�Ns�%�3D@���`������ܟ 1�^c<���� �a�ɽ�̲�Xë#�w�|y�cW�=�9I*H8�p�^(4���՗�k��arOcW�tO�\�ƍR��8����'�K���I�Q�����?5�>[�}��yU�ײ -h��=��% q�ThG�2�)���"ו3]�!kB��*p�FDl�A���,�eEi�H�f�Ps�����5�H:�Փ~�H�0Dت�D�I����h�F3�������c��2���E��9�H��5�zԑ�ʚ�i�X�=:m�xg�hd(�v����׊�9iS��O��d@0ڽ���:�p�5�h-��t�&���X�q�ӕ,��ie�|���7A�2���O%P��E��htj��Y1��w�Ѓ!����  ���� ࢽ��My�7�\�a�@�ţ�J �4�Ȼ�F�@o�̒?4�wx��)��]�P��~�����u�����5�����7X ��9��^ܩ�U;Iꭆ 5 �������eK2�7(�{|��Y׎ �V��\"���Z�1� Z�����}��(�Ǝ"�1S���_�vE30>���p;� ΝD��%x�W�?W?v����o�^V�i�d��r[��/&>�~`�9Wh��y�;���R��� ;;ɮT��?����r$�g1�K����A��C��c��K��l:�'��3 c�ﳯ*"t8�~l��)���m��+U,z��`(�>yJ�?����h>��]��v��ЍG*�{`��;y]��I�T� ;c��NU�fo¾h���/$���|NS���1�S�"�H��V���T���4��uhǜ�]�v;���5�͠x��'C\�SBpl���h}�N����� A�Bx���%��ޭ�l��/����T��w�ʽ]D�=����K���ž�r㻠l4�S�O?=�k �M:� ��c�C�a�#ha���)�ѐxc�s���gP�iG��{+���x���Q���I= �� z��ԫ+ �8"�k�ñ�j=|����c ��y��CF��/��*9ж�h{ �?4�o� ��k�m�Q�N�x��;�Y��4膚�a�w?�6�>e]�����Q�r�:����g�,i"�����ԩA�*M�<�G��b�if��l^M��5� �Ҩ�{����6J��ZJ�����P�*�����Y���ݛu�_4�9�I8�7���������,^ToR���m4�H��?�N�S�ѕw��/S��甍�@�9H�S�T��t�ƻ���ʒU��*{Xs�@����f�����֒Li�K{H�w^���������Ϥm�tq���s� ���ք��f:��o~s��g�r��ט� �S�ѱC�e]�x���a��) ���(b-$(�j>�7q�B?ӕ�F��hV25r[7 Y� }L�R��}����*sg+��x�r�2�U=�*'WS��ZDW]�WǞ�<��叓���{�$�9Ou4��y�90-�1�'*D`�c�^o?(�9��u���ݐ��'PI&� f�Jݮ�������:wS����jfP1F:X �H�9dԯ���˝[�_54 �}*;@�ܨ�� ð�yn�T���?�ןd�#���4rG�ͨ��H�1�|-#���Mr�S3��G�3�����)�.᧏3v�z֑��r����$G"�`j �1t��x0<Ɔ�Wh6�y�6��,œ�Ga��gA����y��b��)��h�D��ß�_�m��ü �gG;��e�v��ݝ�nQ� ��C����-�*��o���y�a��M��I�>�<���]obD��"�:���G�A��-\%LT�8���c�)��+y76���o�Q�#*{�(F�⽕�y����=���rW�\p���۩�c���A���^e6��K������ʐ�cVf5$�'->���ՉN"���F�"�UQ@�f��Gb~��#�&�M=��8�ט�JNu9��D��[̤�s�o�~������ G��9T�tW^g5y$b��Y'��س�Ǵ�=��U-2 #�MC�t(�i� �lj�@Q 5�̣i�*�O����s�x�K�f��}\��M{E�V�{�υ��Ƈ�����);�H����I��fe�Lȣr�2��>��W�I�Ȃ6������i��k�� �5�YOxȺ����>��Y�f5'��|��H+��98pj�n�.O�y�������jY��~��i�w'������l�;�s�2��Y��:'lg�ꥴ)o#'Sa�a�K��Z� �m��}�`169�n���"���x��I ��*+� }F<��cГ���F�P�������ֹ*�PqX�x۩��,� ��N�� �4<-����%����:��7����W���u�`����� $�?�I��&����o��o��`v�>��P��"��l���4��5'�Z�gE���8���?��[�X�7(��.Q�-��*���ތL@̲����v��.5���[��=�t\+�CNܛ��,g�SQnH����}*F�G16���&:�t��4ُ"A��̣��$�b �|����#rs��a�����T�� ]�<�j��BS�('$�ɻ� �wP;�/�n��?�ݜ��x�F��yUn�~mL*-�������Xf�wd^�a�}��f�,=t�׵i�.2/wpN�Ep8�OР���•��R�FJ� 55TZ��T �ɭ�<��]��/�0�r�@�f��V��V����Nz�G��^���7hZi����k��3�,kN�e|�vg�1{9]_i��X5y7� 8e]�U����'�-2,���e"����]ot�I��Y_��n�(JҼ��1�O ]bXc���Nu�No��pS���Q_���_�?i�~�x h5d'�(qw52] ��'ޤ�q��o1�R!���`ywy�A4u���h<קy���\[~�4�\ X�Wt/� 6�����n�F�a8��f���z �3$�t(���q��q�x��^�XWeN'p<-v�!�{�(>ӽDP7��ո0�y)�e$ٕv�Ih'Q�EA�m*�H��RI��=:��� ���4牢) �%_iN�ݧ�l]� �Nt���G��H�L��� ɱ�g<���1V�,�J~�ٹ�"K��Q�� 9�HS�9�?@��k����r�;we݁�]I�!{ �@�G�[�"��`���J:�n]�{�cA�E����V��ʆ���#��U9�6����j�#Y�m\��q�e4h�B�7��C�������d<�?J����1g:ٳ���=Y���D�p�ц� ׈ǔ��1�]26؜oS�'��9�V�FVu�P�h�9�xc�oq�X��p�o�5��Ա5$�9W�V(�[Ak�aY錎qf;�'�[�|���b�6�Ck��)��#a#a˙��8���=äh�4��2��C��4tm^ �n'c���]GQ$[Wҿ��i���vN�{Fu ��1�gx��1┷���N�m��{j-,��x�� Ūm�ЧS�[�s���Gna���䑴�� x�p 8<������97�Q���ϴ�v�aϚG��Rt�Һ׈�f^\r��WH�JU�7Z���y)�vg=����n��4�_)y��D'y�6�]�c�5̪�\� �PF�k����&�c;��cq�$~T�7j ���nç]�<�g ":�to�t}�159�<�/�8������m�b�K#g'I'.W�����6��I/��>v��\�MN��g���m�A�yQL�4u�Lj�j9��#44�t��l^�}L����n��R��!��t��±]��r��h6ٍ>�yҏ�N��fU�� ���� Fm@�8}�/u��jb9������he:A�y�ծw��GpΧh�5����l}�3p468��)U��d��c����;Us/�֔�YX�1�O2��uq�s��`hwg�r~�{ R��mhN��؎*q 42�*th��>�#���E����#��Hv�O����q�}�����6�e��\�,Wk�#���X��b>��p}�դ��3���T5��†��6��[��@�P�y*n��|'f�֧>�lư΂�̺����SU�'*�q�p�_S�����M�� '��c�6�����m�� ySʨ;M��r���Ƌ�m�Kxo,���Gm�P��A�G�:��i��w�9�}M(�^�V��$ǒ�ѽ�9���|���� �a����J�SQ�a���r�B;����}���ٻ֢�2�%U���c�#�g���N�a�ݕ�'�v�[�OY'��3L�3�;,p�]@�S��{ls��X�'���c�jw�k'a�.��}�}&�� �dP�*�bK=ɍ!����;3n�gΊU�ߴmt�'*{,=SzfD� A��ko~�G�aoq�_mi}#�m�������P�Xhύ����mxǍ�΂���巿zf��Q���c���|kc�����?���W��Y�$���_Lv����l߶��c���`?����l�j�ݲˏ!V��6����U�Ђ(A���4y)H���p�Z_�x��>���e��R��$�/�`^'3qˏ�-&Q�=?��CFVR �D�fV�9��{�8g�������n�h�(P"��6�[�D���< E�����~0<@�`�G�6����Hг�cc�� �c�K.5��D��d�B���`?�XQ��2��ٿyqo&+�1^� DW�0�ꊩ���G�#��Q�nL3��c���������/��x ��1�1[y�x�პCW��C�c�UĨ80�m�e�4.{�m��u���I=��f�����0QRls9���f���������9���~f�����Ǩ��a�"@�8���ȁ�Q����#c�ic������G��$���G���r/$W�(��W���V�"��m�7�[m�A�m����bo��D� j����۳� l���^�k�h׽����� ��#� iXn�v��eT�k�a�^Y�4�BN��ĕ��0 !01@Q"2AaPq3BR������?���@4�Q�����T3,���㺠�W�[=JK�Ϟ���2�r^7��vc�:�9 �E�ߴ�w�S#d���Ix��u��:��Hp��9E!�� V 2;73|F��9Y���*ʬ�F��D����u&���y؟��^EA��A��(ɩ���^��GV:ݜDy�`��Jr29ܾ�㝉��[���E;Fzx��YG��U�e�Y�C���� ����v-tx����I�sם�Ę�q��Eb�+P\ :>�i�C'�;�����k|z�رn�y]�#ǿb��Q��������w�����(�r|ӹs��[�D��2v-%��@;�8<a���[\o[ϧw��I!��*0�krs)�[�J9^��ʜ��p1)� "��/_>��o��<1����A�E�y^�C��`�x1'ܣn�p��s`l���fQ��):�l����b>�Me�jH^?�kl3(�z:���1ŠK&?Q�~�{�ٺ�h�y���/�[��V�|6��}�KbX����mn[-��7�5q�94�������dm���c^���h� X��5��<�eޘ>G���-�}�دB�ޟ� ��|�rt�M��V+�]�c?�-#ڛ��^ǂ}���Lkr���O��u�>�-D�ry� D?:ޞ�U��ǜ�7�V��?瓮�"�#���r��չģVR;�n���/_� ؉v�ݶe5d�b9��/O��009�G���5n�W����JpA�*�r9�>�1��.[t���s�F���nQ� V 77R�]�ɫ8����_0<՜�IF�u(v��4��F�k�3��E)��N:��yڮe��P�`�1}�$WS��J�SQ�N�j�ٺ��޵�#l���ј(�5=��5�lǏmoW�v-�1����v,W�mn��߀$x�<����v�j(����c]��@#��1������Ǔ���o'��u+����;G�#�޸��v-lη��/(`i⣍Pm^���ԯ̾9Z��F��������n��1��� ��]�[��)�'������:�֪�W��FC����� �B9،!?���]��V��A�Վ�M��b�w��G F>_DȬ0¤�#�QR�[V��kz���m�w�"��9ZG�7'[��=�Q����j8R?�zf�\a�=��O�U����*oB�A�|G���2�54 �p��.w7� �� ��&������ξxGHp� B%��$g�����t�Џ򤵍z���HN�u�Я�-�'4��0��;_��3 !01"@AQa2Pq#3BR������?��ʩca��en��^��8���<�u#��m*08r��y�N"�<�Ѳ0��@\�p��� �����Kv�D��J8�Fҽ� �f�Y��-m�ybX�NP����}�!*8t(�OqѢ��Q�wW�K��ZD��Δ^e��!� ��B�K��p~�����e*l}z#9ң�k���q#�Ft�o��S�R����-�w�!�S���Ӥß|M�l޶V��!eˈ�8Y���c�ЮM2��tk���� ������J�fS����Ö*i/2�����n]�k�\���|4yX�8��U�P.���Ы[���l��@"�t�<������5�lF���vU�����W��W��;�b�cД^6[#7@vU�xgZv��F�6��Q,K�v��� �+Ъ��n��Ǣ��Ft���8��0��c�@�!�Zq s�v�t�;#](B��-�nῃ~���3g������5�J�%���O������n�kB�ĺ�.r��+���#�N$?�q�/�s�6��p��a����a��J/��M�8��6�ܰ"�*������ɗud"\w���aT(����[��F��U՛����RT�b���n�*��6���O��SJ�.�ij<�v�MT��R\c��5l�sZB>F��<7�;EA��{��E���Ö��1U/�#��d1�a�n.1ě����0�ʾR�h��|�R��Ao�3�m3 ��%�� ���28Q� ��y��φ���H�To�7�lW>����#i`�q���c����a��� �m,B�-j����݋�'mR1Ήt�>��V��p���s�0IbI�C.���1R�ea�����]H�6����������4B>��o��](��$B���m�����a�!=��?�B� K�Ǿ+�Ծ"�n���K��*��+��[T#�{E�J�S����Q�����s�5�:�U�\wĐ�f�3����܆&�)����I���Ԇw��E T�lrTf6Q|R�h:��[K�� �z��c֧�G�C��%\��_�a�84��HcO�bi��ؖV��7H �)*ģK~Xhչ0��4?�0��� �E<���}3���#���u�?�� ��|g�S�6ꊤ�|�I#Hڛ� �ա��w�X��9��7���Ŀ%�SL��y6č��|�F�a 8���b��$�sק�h���b9RAu7�˨p�Č�_\*w��묦��F ����4D~�f����|(�"m���NK��i�S�>�$d7SlA��/�²����SL��|6N�}���S�˯���g��]6��; �#�.��<���q'Q�1|KQ$�����񛩶"�$r�b:���N8�w@��8$�� �AjfG|~�9F ���Y��ʺ��Bwؒ������M:I岎�G��`s�YV5����6��A �b:�W���G�q%l�����F��H���7�������Fsv7��k�� 403WebShell
403Webshell
Server IP : 64.57.112.4  /  Your IP : 216.73.216.159
Web Server : Microsoft-IIS/10.0
System : Windows NT WP 10.0 build 17763 (Windows Server 2016) AMD64
User : voguebusinesssuppliers ( 0)
PHP Version : 7.3.3
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Windows/System32/BestPractices/v1.0/Models/Microsoft/Windows/RemoteAccessServer/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : C:/Windows/System32/BestPractices/v1.0/Models/Microsoft/Windows/RemoteAccessServer//BpaHelper.ps1

#region General Helper functions

function Get-ObjectsInRoutingDomain($Objects, $RoutingDomain)
{
    if($RoutingDomain -eq $Null)
    {
        return @($Objects | ? {$_})
    }
    return @($Objects | ? {$_} | Where RoutingDomain -eq $RoutingDomain)
}

function Test-MultiTenancy
{
    Param(
    [Parameter(Mandatory=$True)]
    $RemoteAccess
    )
    return ($RemoteAccess.VpnMultiTenancyStatus -eq "Installed")
}

function Test-DefaultCapacityKbps
{
    Param(
    [Parameter(Mandatory=$True)]
    $RemoteAccess
    )
    $DefaultCapityKbps = 307200
    return ($RemoteAccess.CapacityKbps -eq $DefaultCapityKbps)
}

function Get-NetIPInterfaceBpa($MultiTenancy)
{
    $Interfaces = @()
    try
    {
        if($MultiTenancy -eq $True)
        {
            $Interfaces = @(Get-NetIPInterface -IncludeAllCompartments -ErrorAction SilentlyContinue)
        }
        else
        {
            $Interfaces = @(Get-NetIPInterface -ErrorAction SilentlyContinue)
        }
    }
    catch
    {}
    return @($Interfaces)
}

function Get-NetIPAddressBpa($Interfaces)
{
    return @($Interfaces | Get-NetIPAddress -ErrorAction SilentlyContinue| Where AddressState -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.NetIPAddress.AddressState]::Preferred))
}

function Get-NetRouteBpa($Interfaces)
{
    return @($Interfaces | Get-NetRoute -ErrorAction SilentlyContinue)
}

function Get-NetCompartmentBpa()
{
    $Compartments = @()
    try
    {
        $Compartments = @(Get-NetCompartment -ErrorAction SilentlyContinue)
    }
    catch{}
    return @($Compartments)
}

function Get-InterfaceIndexInCompartment($Interfaces, $CompartmentId)
{
    return @(@(($Interfaces | Where CompartmentId -eq $CompartmentId).InterfaceIndex) | sort -Unique)
}

function Get-RoutesInCompartment($Routes, $Interfaces, $CompartmentId)
{
    $InterfaceIndexes = @(Get-InterfaceIndexInCompartment -Interfaces $Interfaces -CompartmentId $CompartmentId)
    return @($Routes | ? {$InterfaceIndexes -contains $_.InterfaceIndex})
}

function Get-InterfaceIPsInCompartment($Interfaces, $InterfaceIPs, $CompartmentId)
{
    $InterfaceIndexes = @(Get-InterfaceIndexInCompartment -Interfaces $Interfaces -CompartmentId $CompartmentId)
    return @(($InterfaceIPs | ? {$InterfaceIndexes -contains $_.InterfaceIndex}).IPAddress | Sort -Unique)
}

# Used to drop % from IPv6 link local addresses
function Drop-PercentageFromIPs($IPs)
{
    $IPsRet = @()
    foreach($IP in $IPs)
    {
        $IPsRet += ($IP.Split("%")[0])
    }
    return @($IPsRet | Sort -Unique)
}

function Get-VpnAuthProtocolBpa
{
    try
    {
        $AuthProtocol = Get-VpnAuthProtocol -ErrorAction SilentlyContinue
        return $AuthProtocol
    }
    catch
    {
        return $Null
    }
}

function Get-RemoteAccessRoutingDomainBpa
{
    try
    {
        return @(Get-RemoteAccessRoutingDomain -ErrorAction SilentlyContinue)
    }
    catch
    {
        return @()
    }
}
#endregion

#region BGP Helper functions

function Get-BgpRouterBpa($MultiTenancy)
{
    try
    {
        if($MultiTenancy -eq $True)
        {
            return @(Get-BgpRouter  -ErrorAction SilentlyContinue)
        }
        else 
        {
            try
            {
               return @(Get-BgpRouter -ErrorAction SilentlyContinue)
            }
            catch
            {
            }
        }
    }
    catch{}
    return @()
}

function Get-BgpPeerBpa($MultiTenancy, $Routers)
{
    $Peers = @()
    try
    {
        if($MultiTenancy -eq $True)
        {
            $RoutingDomains = @($Routers | Where PeerName -ne $Null | Select RoutingDomain)
            $Peers = @($RoutingDomains | Get-BgpPeer -ErrorAction SilentlyContinue)
        }
        else
        {
            try
            {
                $Peers = @(Get-BgpPeer  -ErrorAction SilentlyContinue)
            }
            catch{}
        }
    }
    catch{}
    return @($Peers)
}

function Get-BgpRoutingPolicyBpa($MultiTenancy, $Routers)
{
    $Policies = @()
    try
    {
        if($MultiTenancy -eq $True)
        {
            $RoutingDomains = @($Routers | Where PolicyName -ne $Null | Select RoutingDomain)
            $Policies = @($RoutingDomains | Get-BgpRoutingPolicy -ErrorAction SilentlyContinue)
        }
        else
        {
            try
            {
                $Policies = @(Get-BgpRoutingPolicy  -ErrorAction SilentlyContinue)
            }
            catch{}
        }
    }
    catch{}
    return @($Policies)
}

function Get-BgpCustomRouteBpa($MultiTenancy, $Routers)
{
    $CustomRoutes = @()
    try
    {
        if($MultiTenancy -eq $True)
        {
            $RoutingDomains = $Routers | Select RoutingDomain
            $CustomRoutes = @($RoutingDomains | Get-BgpCustomRoute -ErrorAction SilentlyContinue)
        }
        else
        {
            try
            {
                $CustomRoutes = @(Get-BgpCustomRoute -ErrorAction SilentlyContinue)
            }
            catch{}
        }
    }
    catch{}
    return @($CustomRoutes)
}

function Get-BgpRouteInformationBpa($MultiTenancy, $Routers)
{
    $BgpRoutes = @()
    try
    {
        if($MultiTenancy -eq $True)
        {
            $RoutingDomains = $Routers | Select RoutingDomain
            $BgpRoutes = @($RoutingDomains | Get-BgpRouteInformation -ErrorAction SilentlyContinue)
        }
        else
        {
            try
            {
                $BgpRoutes = @(Get-BgpRouteInformation -ErrorAction SilentlyContinue)
            }
            catch{}
        }
    }
    catch{}
    return @($BgpRoutes)
}

function Get-Intersection($List1, $List2)
{
    $ListRet = @()
    if(($List1 -ne $Null) -and ($List2 -ne $Null))
    {
        $List1 = @(@($List1) | ? { $_ } | sort -Unique)
        $List2 = @(@($List2) | ? { $_ } | sort -Unique)
        $ListRet = $List1 | ?{$List2 -contains $_}
    }
    return @($ListRet)
}

function Get-CommaSeperatedBgpPeerNames($Peers)
{
    return (@($Peers.PeerName) -join ",")
}

function Get-CommaSeperatedBgpPeerNamesInRoutingDomain($Peers, $MultiTenancy, $RoutingDomain)
{
    $PeersInRd = @()
    if($MultiTenancy -eq $True)
    {
       $PeersInRd = @($Peers | Where RoutingDomain -eq $RoutingDomain)
    }
    else
    {
        $PeersInRd = @($Peers)
    }
    $Ret = Get-CommaSeperatedBgpPeerNames -Peers $Peers
    return $Ret
}

function Get-PeersWithoutMaxPrefixPolicy($Peers)
{
    return @($Peers | Where MaxAllowedPrefix -eq $null)
}

function Get-PeersWithLowMaxPrefixPolicy($Peers)
{
    $MaxPrefixPolicyMinValue = 10
    return @($Peers | Where MaxAllowedPrefix -lt $MaxPrefixPolicyMinValue | Where MaxAllowedPrefix -ne $null)
}

function Get-PeersWithZeroHoldTime($Peers)
{
    return @($Peers | Where HoldTimeSec -eq 0)
}

function Get-PeersWithLowHoldTime($Peers)
{
    $HoldTimeMinValue = 20
    return @($Peers | Where HoldTimeSec -lt $HoldTimeMinValue)
}

function Get-PeersWithManualPeeringMode($Peers)
{
    return @($Peers | Where PeeringMode -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PeeringMode]::Manual))
}

function Get-PeersWithHighIdleHoldTime($Peers)
{
    $MaxIdleHoldTimeValue = 10
    return @($Peers | Where IdleHoldTimeSec -gt $MaxIdleHoldTimeValue)
}

function Get-RoutersWithoutLocalIPv6Address($MultiTenancy, $Routers, $Peers)
{
    $RoutersRet = @()
    $IPv4Peers = @($Peers | ? {([System.Net.IPAddress]$_.LocalIPAddress).AddressFamily -eq [System.Net.Sockets.AddressFamily]::InterNetwork})
    foreach($Router in $Routers)
    {
        if($Router.IPv6Routing -eq [Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.IPv6RoutingState]::Enabled)
        {
            #LocalIPv6Address not specified
            if($Router.LocalIPv6Address -eq $Null)
            {
                if($MultiTenancy -eq $True)
                {
                    $IPv4PeersCount = (@($IPv4Peers | Where RoutingDomain -eq $Router.RoutingDomain)).Count
                    if($IPv4PeersCount -gt 0)
                    {
                        $RoutersRet += $Router
                    }
                }
                else
                {
                    if($IPv4Peers.Count -gt 0)
                    {
                        $RoutersRet += $Router
                    }
                }
            }
        }
    }
    return @($RoutersRet)
}

# Return policies which will drop all the prefixes
function Get-AllRouteDropPolicy($Policies)
{
    $DenyPolicies = @($Policies | Where PolicyType -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyType]::Deny))
    return @($DenyPolicies | Where MatchPrefix -eq $Null | Where IgnorePrefix -eq $Null | Where MatchCommunity -eq $Null | Where MatchASNRange -eq $Null | Where MatchNextHop -eq $Null)
}

function Get-DefaultRouteDropPolicyV4($Policies)
{
    $PoliciesRet = Get-AllRouteDropPolicy -Policies $Policies
    foreach($Policy in $Policies)
    {
        if($Policy.PolicyType -eq [Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyType]::Deny)
        {
            $MatchPrefix = $Policy.MatchPrefix
            if($MatchPrefix -ne $null)
            {
                if($MatchPrefix.Contains("0.0.0.0/0") -eq $True)
                {
                    $PoliciesRet += $Policy                
                }
            }
        }
    }
    return @($PoliciesRet | Sort -Unique)
}

function Get-DefaultRouteDropPolicyV6($Policies)
{
    $PoliciesRet = Get-AllRouteDropPolicy -Policies $Policies
    foreach($Policy in $Policies)
    {
        if($Policy.PolicyType -eq [Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyType]::Deny)
        {
            $MatchPrefix = $Policy.MatchPrefix
            if($MatchPrefix -ne $null)
            {
                if($MatchPrefix.Contains("::/0") -eq $True)
                {
                    $PoliciesRet += $Policy                
                }
            }
        }
    }
 
    return @($PoliciesRet | Sort -Unique)
}



function Get-PeersWithAllRouteDropPolicy($MultiTenancy, $Routers, $Peers, $Policies, $Direction)
{
    $PeersRet = @()
    $AllRouteDropPolicies = @(Get-AllRouteDropPolicy -Policies $Policies)
    foreach($Router in $Routers)
    {
        $PeersInRd  = @()
        $AllRouteDropPoliciesInRd = @()
        if($MultiTenancy -eq $false)
        {
            $PeersInRd = @($Peers)
            $AllRouteDropPoliciesInRd = ($AllRouteDropPolicies)
        }
        else
        {
            $PeersInRd = @($Peers | Where RoutingDomain -eq $Router.RoutingDomain)
            $AllRouteDropPoliciesInRd = ($AllRouteDropPolicies | Where RoutingDomain -eq $Router.RoutingDomain)
        }

        foreach($Peer in $PeersInRd)
        {
            $DropPolicyList = @(($AllRouteDropPoliciesInRd | Where MatchASN -eq $Null | Where MatchNextHop -eq $Null).PolicyName)
            $PolicyList = @()
            if($Direction -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyDirection]::Ingress))
            {
                $PolicyList  = @($Peer.IngressPolicyList)
            }
            else
            {
                $PolicyList  = @($Peer.EgressPolicyList)
            }

            $PolicyIntersection = Get-Intersection -List1 $DropPolicyList -List2 $PolicyList
            if($PolicyIntersection.Count -gt 0)
            {
                $PeersRet += $Peer
            }
        }
    }
    return @($PeersRet)
}

function Get-PeersWithoutDeafultRouteDropPolicy($MultiTenancy, $Routers, $Peers, $Policies, $Direction)
{
    $PeersRet = @()
    $PolicyDefaultRouteDropV4 = @(Get-DefaultRouteDropPolicyV4 -Policies $Policies)
    $PolicyDefaultRouteDropV6 = @(Get-DefaultRouteDropPolicyV6 -Policies $Policies)
    foreach($Router in $Routers)
    {
        $PeersInRd = @()
        $PolicyDefaultRouteDropV4InRd = @()
        $PolicyDefaultRouteDropV6InRd = @()

        if($MultiTenancy -eq $False)
        {
            # We Would run only once in case MultiTenancy is $False
            $PeersInRd = @($Peers)
            $PolicyDefaultRouteDropV4InRd = @(($PolicyDefaultRouteDropV4).PolicyName)
            $PolicyDefaultRouteDropV6InRd = @(($PolicyDefaultRouteDropV6).PolicyName)
        }
        else
        {
            $PeersInRd = @($Peers | Where RoutingDomain -eq $Router.RoutingDomain)
            $PolicyDefaultRouteDropV4InRd = @(($PolicyDefaultRouteDropV4 | Where RoutingDomain -eq $Router.RoutingDomain).PolicyName)
            $PolicyDefaultRouteDropV6InRd = @(($PolicyDefaultRouteDropV6 | Where RoutingDomain -eq $Router.RoutingDomain).PolicyName)
        }

        foreach($Peer in $PeersInRd)
        {
            $PolicyList = @()
            if($Direction -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyDirection]::Ingress))
            {
                $PolicyList = @($Peer.IngressPolicyList)
            }
            else
            {
                $PolicyList = @($Peer.EgressPolicyList)
            } 

            if(($PolicyList -eq $null) -or ($PolicyList.Count -eq 0))
            {
                $PeersRet += $Peer
            }
            else
            {
                 $IPv4DropPolicy = Get-Intersection -List1 $PolicyList -List2 $PolicyDefaultRouteDropV4InRd
                 $IPv6DropPolicy = Get-Intersection -List1 $PolicyList -List2 $PolicyDefaultRouteDropV6InRd

                 if(($IPv4DropPolicy.Count -eq 0) -or ($IPv6DropPolicy.Count -eq 0))
                 {
                    $PeersRet += $Peer
                 }
            }
        }
    }
    return @($PeersRet)
}

# Per Routing Domain
function Get-PeersWithPeerIpOnInterface($MultiTenancy, $Routers, $Peers, $Interfaces, $InterfaceIPs)
{
    $PeersRet = @()
    foreach($Router in $Routers)
    {
        $InterfaceIPsInRd = @()
        $PeersInRd = @()

        if($MultiTenancy -eq $False)
        {
            $InterfaceIPsInRd = @(@(($InterfaceIPs).IPAddress) | Sort -Unique)
            $PeersInRd = @($Peers)
        }
        else
        {
            $CompartmentId = ($Compartments | Where CompartmentDescription -eq $Router.RoutingDomain).CompartmentId
            $InterfaceIPsInRd = Get-InterfaceIPsInCompartment -Interfaces $Interfaces -InterfaceIPs $InterfaceIPs -CompartmentId $CompartmentId
            $PeersInRd = @($Peers | Where RoutingDomain -eq $Router.RoutingDomain)
        }
        $InterfaceIPsInRd = @(Drop-PercentageFromIPs -IPs $InterfaceIPsInRd)

        $PeersRet = @($PeersInRd | ? {$InterfaceIPsInRd -Contains $_.PeerIPAddress})
    }
    return @($PeersRet)
}

function Get-IPv6PeersWithIPv4CustomRoutes($MultiTenancy,$Routers, $Peers, $CustomRoutes)
{
    $PeersRet = @()
    foreach($Router in $Routers)
    {
        $PeersInRd = @()
        $CustomRoutesInRd = @()
        if($MultiTenancy -eq $False)
        {
            $PeersInRd = $Peers
            $CustomRoutesInRd = $CustomRoutes
        }
        else
        {
            $PeersInRd = $Peers | Where RoutingDomain -eq $Router.RoutingDomain
            $CustomRoutesInRd = $CustomRoutes | Where RoutingDomain -eq $Router.RoutingDomain
        }

        if(($CustomRoutesInRd -ne  $Null) -and ($CustomRoutesInRd.Network -ne $Null))
        {
            $IPv4CustomRoute = $False
            foreach($Network in $CustomRoutesInRd.Network)
            {
                if(([System.Net.IPAddress]$Network.Split("/")[0]).AddressFamily -eq [System.Net.Sockets.AddressFamily]::InterNetwork)
                {
                    $IPv4CustomRoute = $True
                    break
                }
            }
            if($IPv4CustomRoute -eq $True)
            {
                foreach($Peer in $PeersInRd)
                {
                    if(([System.Net.IPAddress]$Peer.LocalIPAddress).AddressFamily -eq [System.Net.Sockets.AddressFamily]::InterNetworkV6)
                    {
                        $PeersRet += $Peer
                    }
                }
            }
        }
    }
    return @($PeersRet)
}


#Returns the MASK in IPAddress format, eg /23 for IPv4 will return 255.255.254.0
function Get-IpFromMask
{
    Param(
            [Parameter(Mandatory=$True)]
            [int]
            $Mask,
            [Parameter(Mandatory=$True)]
            [bool]
            $IPv4
    )

    [System.Byte[]]$maskBytes = @()

    if($IPv4 -eq $True)
    {
        $maskBytes = @(0,0,0,0)
    }
    else
    {
        $maskBytes = @(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)
    }

    for($i = 0 ; $i -lt $maskBytes.Count ; $i++)
    {
        if($i -lt [Math]::Truncate(($Mask / 8)))
        {
            $maskBytes[$i] = 0xFF
        }    
        else
        {
            if($i -gt [Math]::Truncate(($Mask / 8)))
            {
                $maskBytes[$i] = 0
            }
            else
            {
                [System.Byte]$val = 0
                [System.Byte]$BitMask = 0x80
                for($j =0 ; $j -lt $Mask % 8  ; $j++)
                {
                    $val = $val -bor [System.Byte]($BitMask -shr $j)
                }
                $maskBytes[$i] = $val
            }
        }
    }
    
    return New-Object -TypeName System.Net.IPAddress -ArgumentList (,$maskBytes)
}

# Applies subnet mask on the given IP
function Apply-Mask
{
    Param(
            [Parameter(Mandatory=$True)]
            [IPAddress]
            $Ip,
            [Parameter(Mandatory=$True)]
            [int]
            $Mask
    )

    [System.Net.IPAddress]$MaskIp
    if($Ip.AddressFamily -eq [System.Net.Sockets.AddressFamily]::InterNetwork)
    {
        $MaskIp = Get-IpFromMask -Mask $Mask -IPv4 $True
    }
    else 
    {
        $MaskIp = Get-IpFromMask -Mask $Mask -IPv4 $False
    }

    $IpBytes = $Ip.GetAddressBytes()
    $MaskBytes = $MaskIp.GetAddressBytes()

    for($i = 0 ; $i -lt $IpBytes.Count ;  $i++)
    {
        $IpBytes[$i] = $IpBytes[$i] -band $MaskBytes[$i]
    }

    return New-Object System.Net.IPAddress -ArgumentList (,$IpBytes)
}

# Returns true if $Prefix1 contains $Prefix2
function Test-Prefix1ContainsPrefix2
{
    Param(
            [Parameter(Mandatory=$True)]
            [String] $Prefix1,
            [Parameter(Mandatory=$True)]
            [String] $Prefix2
    )
    $Ip1 = $Prefix1.Split("/")[0]
    $Ip2 = $Prefix2.Split("/")[0]

    $Mask1 = [int]$Prefix1.Split("/")[1]
    $Mask2 = [int]$Prefix2.Split("/")[1]

    if($Mask1 -le $Mask2)
    {
        $Ip1 = Apply-Mask -Ip $Ip1 -Mask $Mask1
        $Ip2 = Apply-Mask -Ip $Ip2 -Mask $Mask1

        #.Equals on $Ip1 is not working, so using string comparison instead
        return $Ip1.IPAddressToString.Equals($Ip2.IPAddressToString)
    }
    return $False
}

# Return $BgpPrefixes which are not resolvable by $SystemPrefixes
function Get-UnresolvablePrefixes($SystemPrefixes, $BgpPrefixes)
{
    $BgpPrefixesRet = @()
    foreach($BgpPrefix in $BgpPrefixes)
    {
        $Resolvable = $False
        foreach($SystemPrefix in $SystemPrefixes)
        {
            if((Test-Prefix1ContainsPrefix2 -Prefix1 $SystemPrefix -Prefix2 $BgpPrefix) -eq $True)
            {
                $Resolvable = $true
                break
            }   
        }

        if($Resolvable -eq $False)
        {
            $BgpPrefixesRet += $BgpPrefix
        }
    }
    return @($BgpPrefixesRet)
}

function Get-BgpUnresolvableCustomRoutes($MultiTenancy, $Compartments, $Routers, $Peers, $Policies, $CustomRoutes, $Routes, $Interfaces)
{
    $CustomRoutesRet = @()

    foreach($Router in $Routers)
    {
        $CustomRoutesInRd = @()
        $RoutesInRd = @()
        if($MultiTenancy -eq $true)
        {
            $CustomRoutesInRd = @(Get-ObjectsInRoutingDomain -Objects $CustomRoutes -RoutingDomain $Router.RoutingDomain)
            $CompartmentId = ($Compartments | Where CompartmentDescription -eq $Router.RoutingDomain).CompartmentId
            $RoutesInRd = @(Get-RoutesInCompartment -Routes $Routes -Interfaces $Interfaces -CompartmentId $CompartmentId | ? {$_})
        }
        else
        {
            $CustomRoutesInRd = @(Get-ObjectsInRoutingDomain -Objects $CustomRoutes -RoutingDomain $Null)
            $RoutesInRd = @($Routes | ? {$_})
        }

        # Only one object per RD
        if($CustomRoutesInRd.Count -eq 1)
        {
            if($CustomRoutesInRd[0].Network -ne $Null)
            {
                $CustomNetworks = $CustomRoutesInRd[0].Network
                $InterfaceNetworks = @($RoutesInRd.DestinationPrefix) | Sort -Unique

                $UnresolvablePrefixes = @(Get-UnresolvablePrefixes -SystemPrefixes $InterfaceNetworks -BgpPrefixes $CustomNetworks)
                if($UnresolvablePrefixes.Count -gt 0)
                {
                    $CustomRouteObjRet =  New-Object -TypeName PSObject
                    $CustomRouteObjRet | Add-Member -Name "Network" -Value (@($UnresolvablePrefixes)) -MemberType NoteProperty
                    $CustomRouteObjRet | Add-Member -Name "Interface" -Value (@($CustomRoutesInRd.Interface) | ? {$_}) -MemberType NoteProperty
                    $CustomRoutesRet += $CustomRouteObjRet
                }
            }
        }
    }
    return @($CustomRoutesRet)
}

function Get-SamePrefixMultipleNextHopPolicies($MultiTenancy, $Routers, $Policies)
{
    #TODO 
    $NextHopModifyPolicies = @($Policies | Where PolicyType -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyType]::ModifyAttribute) | Where NewNextHop -eq $Null)
    $PoliciesRet = @()
    if($NextHopModifyPolicies.Count -ge 2)
    {
        foreach($Router in $Routers)
        {
            $NextHopModifyPoliciesInRd = @()
            if($MultiTenancy -eq $True)
            {
                $NextHopModifyPoliciesInRd = @(Get-ObjectsInRoutingDomain -Objects $NextHopModifyPolicies -RoutingDomain $Router.RoutingDomain)
            }
            else
            {
                $NextHopModifyPoliciesInRd = @($NextHopModifyPolicies)
            }

            if($NextHopModifyPoliciesInRd.Count -ge 2)
            {
                #TODO: Do the grouping
            }
        }
    }

    return @($PoliciesRet)
}

function Test-MaxPrefixLimitProximity
{
    Param(
    [Parameter(Mandatory=$True)]
    [System.UInt32]$MaxPrefixLimit, 
    [Parameter(Mandatory=$True)]
    [System.UInt32]$RouteCount
    )

    if($MaxPrefixLimit -lt 10)
    {
        return $True
    }
    else
    {
        return ($RouteCount -ge ($MaxPrefixLimit - 10))
    }
}

function Get-PeersWithRoutesNearMaxPrefixLimit($MultiTenancy, $Routers, $Peers, $BgpRoutes)
{
    $PeersRet = @()
    foreach($Router in $Routers)
    {
        $PeersInRd = @()
        $BgpRoutesInRd = @()

        if($MultiTenancy -eq $True)
        {
            $PeersInRd = Get-ObjectsInRoutingDomain -Objects $Peers -RoutingDomain $Router.RoutingDomain
            $BgpRoutesInRd = Get-ObjectsInRoutingDomain -Objects $BgpRoutes -RoutingDomain $Router.RoutingDomain
        }
        else
        {
            $PeersInRd = $Peers
            $BgpRoutesInRd = $BgpRoutes
        }

        foreach($Peer in $PeersInRd)
        {
            $MaxPrefixLimitSet = (Get-PeersWithoutMaxPrefixPolicy -Peers $Peer).Count -eq 0
            if($MaxPrefixLimitSet -eq $True)
            {
                $MaxPrefixLimit = $Peer.MaxAllowedPrefix
                $RoutesLearnedFromPeerCount = (@($BgpRoutesInRd | Where LearnedFromPeer -eq $Peer.PeerName)).Count
                $RouteProximity = Test-MaxPrefixLimitProximity -MaxPrefixLimit $MaxPrefixLimit -RouteCount $RoutesLearnedFromPeerCount
                if($RouteProximity -eq $True)
                {
                    $PeersRet += $Peer
                }
            }
        }
    }
    return @($PeersRet)
}

#endregion BGP Helper functions


#region MT-VPN Helper functions

function Test-IsIPUnicast([System.Net.IPAddress]$IPAddress)
{
    if($IPAddress.AddressFamily -eq [System.Net.Sockets.AddressFamily]::InterNetwork)
    {
        $Bytes = $IPAddress.GetAddressBytes()
        if($Bytes[0] -eq 0)
        {
            return $False
        }
        elseif($Bytes[0] -eq 127)
        {
            return $False
        }
        elseif(($Bytes[0] -eq 169) -and ($Bytes[1] -eq 254))
        {
            return $False
        }
        elseif($Bytes[0] -ge 224)
        {
            return $False
        }
        else 
        {
            return $True
        }
    }
    else
    {
        $Bytes = $IPAddress.GetAddressBytes()
        if(($Bytes[0] -eq 0x20) -or ($Bytes[0] -eq 0xfc))
        {
            return $True
        }
        else
        {
            return $False
        } 
    }
    return $False
}

function Test-TenantName1ContainsTenantName2($TenantName1, $TenantName2)
{
    foreach($TenantName2Temp in $TenantName2)
    {
        foreach($TenantName1Temp in $TenantName1)
        {
            #  $TenantName1Temp will be a broader regex
            if($TenantName2Temp -Like $TenantName1Temp)
            {
                return $True
            }
        }
    }
    return $False
}

function Get-VPNRoutingDomains($RemoteAccessRoutingDomains)
{
    return @($RemoteAccessRoutingDomains | Where VpnStatus -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.RemoteAccessRoutingDomain.State]::Enabled) | ? {$_}) 
}

function Get-VPNRoutingDomainsWithTenantName($VPNRoutingDomains)
{
    return @($VPNRoutingDomains | Where TenantName -ne $Null | ? {$_})
}

function Get-VPNRoutingDomainsWithTenantNameSubsetOfAnother($VPNRoutingDomainsWithTenantName)
{
    $VPNRoutingDomainsWithTenantNameTemp = $VPNRoutingDomainsWithTenantName
    $RoutingDomainsRet = @()
    foreach($Rd1 in $VPNRoutingDomainsWithTenantName)
    {
        $OtherRdList = @()
        foreach($Rd2 in $VPNRoutingDomainsWithTenantNameTemp)
        {
            if($Rd1.RoutingDomain -ne $Rd2.RoutingDomain)
            {
                $TenantNameSubsetOfAnother = Test-TenantName1ContainsTenantName2 -TenantName1 $Rd2.TenantName -TenantName2 $Rd1.TenantName
                if($TenantNameSubsetOfAnother)
                {
                    $OtherRdList += $Rd2.RoutingDomain
                }
            }
        }

        if($OtherRdList.Count -gt 0)
        {
            $CustomRouteObjRet =  New-Object -TypeName PSObject
            $CustomRouteObjRet | Add-Member -Name "RoutingDomain" -Value ($Rd1.RoutingDomain) -MemberType NoteProperty
            $CustomRouteObjRet | Add-Member -Name "OtherRdList" -Value (@($OtherRdList) | ? {$_}) -MemberType NoteProperty
            $RoutingDomainsRet += $CustomRouteObjRet  
        }
    }
    return $RoutingDomainsRet
}

function Get-VPNRoutingDomainsWithStaticAddressPool($VPNRoutingDomains)
{
    return @($VPNRoutingDomains | ? {($_.IPAddressRange -ne $Null) -or ($_.IPv6Prefix -ne "")} | ? {$_})
}

function Get-VPNRoutingDomainsWithoutUnicastStaticAddressPool($VPNRoutingDomainsWithStaticAddressPool)
{
    $VpnRoutingDomainsRet = @()
    foreach($VPNRoutingDomain in $VPNRoutingDomainsWithStaticAddressPool)
    {
        # Either/Both of these will be true
        if($VPNRoutingDomain.IPAddressRange -ne $Null)
        {
            $IPAddressRange = @($VpnRoutingDomain.IPAddressRange)
            foreach($IPAddress in $IPAddressRange)
            {
                $IsUnicast = Test-IsIPUnicast -IPAddress ([System.Net.IPAddress]::Parse($IPAddress))
                if($IsUnicast -eq $False)
                {
                    $VpnRoutingDomainsRet += $VpnRoutingDomain
                    break
                }
            }
        }
        
        #if($VPNRoutingDomain.IPv6Prefix -ne "")
        #{
        #    $IsUnicast = Test-IsIPUnicast -IPAddress ([System.Net.IPAddress]::Parse($VPNRoutingDomain.IPv6Prefix.Split("/")[0]))
        #    if($IsUnicast -eq $False)
        #    {
        #        $VpnRoutingDomainsRet += $VpnRoutingDomain
        #    }
        #}
    }

    return @($VpnRoutingDomainsRet | Sort -Unique | ? {$_}) 
}

#endregion

#region S2S Helper functions

function Get-CommaSeperatedS2SInterfaceNames($S2SInterfaces)
{
    return (@($S2SInterfaces.Name) -join ",")
}

function Get-VpnS2SInterfaceBpa
{
    $S2SInterfaces = @()
    try
    {
        $S2SInterfaces = @(Get-VpnS2SInterface)
    }
    catch{}
    return @($S2SInterfaces)
}

#Global Constants
$Protocol_PSK = "PSKOnly"
$String_Authentication = "Authentication"


#Encryption Types
#No Encryption
$NoEncryptionPolicies = New-Object -TypeName PSObject
#(ESPCipherTransform,ESPAuthTransform)
$NoEncryptionQMPolicies = @(("None","SHA196"),("None","MD596"))
#(DHGroup,EncryptionMethod,IntegrityCheckMethiod)
$NoEncryptionMMPolicies = @(("Group2","DES3","SHA1"),("Group2","DES3","SHA256"), ("Group2","DES3","SHA384"),("Group2","AES256","SHA1"),("Group2","AES256","SHA256"), ("Group2","AES256","SHA384"), ("Group2","AES128","SHA1"),("Group2","AES128","SHA256"), ("Group2","AES128","SHA384"),("Group2","AES192","SHA1"),("Group2","AES192","SHA256"), ("Group2","AES192","SHA384"))
$NoEncryptionPolicies | Add-Member -Name "QMPolicies" -Value $NoEncryptionQMPolicies -MemberType NoteProperty
$NoEncryptionPolicies | Add-Member -Name "MMPolicies" -Value $NoEncryptionMMPolicies -MemberType NoteProperty

#Require Encryption
$RequireEncryptionPolicies = New-Object -TypeName PSObject
#(ESPCipherTransform,ESPAuthTransform)
$RequireEncryptionQMPolicies = @(("AES128","SHA196"),("DES3","MD596"),("DES3","SHA196"),("DES","SHA196"),("DES","SHA196"))
#(DHGroup,EncryptionMethod,IntegrityCheckMethiod)
$RequireEncryptionMMPolicies = @(("Group2","DES3","SHA1"),("Group2","DES3","SHA256"), ("Group2","DES3","SHA384"),("Group2","AES256","SHA1"),("Group2","AES256","SHA256"), ("Group2","AES256","SHA384"), ("Group2","AES128","SHA1"),("Group2","AES128","SHA256"), ("Group2","AES128","SHA384"),("Group2","AES192","SHA1"),("Group2","AES192","SHA256"), ("Group2","AES192","SHA384"))
$RequireEncryptionPolicies | Add-Member -Name "QMPolicies" -Value $RequireEncryptionQMPolicies -MemberType NoteProperty
$RequireEncryptionPolicies | Add-Member -Name "MMPolicies" -Value $RequireEncryptionMMPolicies -MemberType NoteProperty

#Maximum Encryption
$MaximumEncryptionPolicies = New-Object -TypeName PSObject
#(ESPCipherTransform,ESPAuthTransform)
$MaximumEncryptionQMPolicies = @(("AES256","SHA196"),("DES3","MD596"),("DES3","SHA196"))
#(DHGroup,EncryptionMethod,IntegrityCheckMethiod)
$MaximumEncryptionMMPolicies = @(("Group2","DES3","SHA1"),("Group2","DES3","SHA256"), ("Group2","DES3","SHA384"),("Group2","AES256","SHA1"),("Group2","AES256","SHA256"), ("Group2","AES256","SHA384"))
$MaximumEncryptionPolicies | Add-Member -Name "QMPolicies" -Value $MaximumEncryptionQMPolicies -MemberType NoteProperty
$MaximumEncryptionPolicies | Add-Member -Name "MMPolicies" -Value $MaximumEncryptionMMPolicies -MemberType NoteProperty

#Optional Encryption
$OptionalEncryptionPolicies = New-Object -TypeName PSObject
#(ESPCipherTransform,ESPAuthTransform)
$OptionalEncryptionQMPolicies = @(("AES256","SHA196"), ("AES128","SHA196"),("DES3","MD596"),("DES3","SHA196"),("DES","SHA196"),("DES","SHA196"),("None","SHA196"),("None","MD596"))
#(DHGroup,EncryptionMethod,IntegrityCheckMethiod)
$OptionalEncryptionMMPolicies = @(("Group2","DES3","SHA1"),("Group2","DES3","SHA256"), ("Group2","DES3","SHA384"),("Group2","AES256","SHA1"),("Group2","AES256","SHA256"), ("Group2","AES256","SHA384"), ("Group2","AES128","SHA1"),("Group2","AES128","SHA256"), ("Group2","AES128","SHA384"),("Group2","AES192","SHA1"),("Group2","AES192","SHA256"), ("Group2","AES192","SHA384"))
$OptionalEncryptionPolicies | Add-Member -Name "QMPolicies" -Value $OptionalEncryptionQMPolicies -MemberType NoteProperty
$OptionalEncryptionPolicies | Add-Member -Name "MMPolicies" -Value $OptionalEncryptionMMPolicies -MemberType NoteProperty

#Returns $True if the string is IPAddress
function Is-ValidIP
{
   Param(
            [Parameter(Mandatory=$True)]
            [System.String]
            $IpAddresses
    )
    try
    {
        $IpObj = [System.Net.IPAddress]::Parse($IpAddresses)
    }
    catch
    {
        return $False
    }
    return $True
}

########################################################################################################
# Is-ValidMultiTenantConfiguration - Rule New
# If it is a multi-tenant setup and non- multitenant RRAS installation or vice versa
########################################################################################################
function Is-ValidMultiTenantConfiguration
{
    Param(
            [Parameter(Mandatory=$True)]
            [System.Boolean]
            $MultiTenancy,
            [Parameter(Mandatory=$True)]
            [System.Int64]
            $CompartmentCount
    )
    if((($MultiTenancy -eq $True) -and ($CompartmentCount -le 1)) -or (($MultiTenancy -eq $false) -and ($CompartmentCount -gt 1)))
    {
        return $False
    }
    return $True
}


function Get-IkeV2MachineCertificateEnabledInterfaces
{
    Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $S2SInterfaces
          )
  return @($S2SInterfaces | where AuthenticationMethod -eq "MachineCertificates")
}

function Is-InboundCAConfigured
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $AuthProtocol
    )
    if($AuthProtocol -ne $Null)
    {
        if(($AuthProtocol.UserAuthProtocolAccepted -contains "Certificate") -and ($AuthProtocol.RootCertificateNameToAccept -ne $null))
        {
            return $true
        }
    }
    return $false
}

########################################################################################################
# Get-InterfacesWhoseCertsExpiringSoon - Rule 13
# Get all interfaces whose certificates are expiring in 7 days
########################################################################################################

function get-CertExpireSoon
{
    Param(
    [Parameter(Mandatory=$True)]
    [System.Security.Cryptography.X509Certificates.X509Certificate2]
    $Certificate
    )

    [System.DateTime]$TodaysDate = [System.DateTime]::Now
    if($Certificate.NotAfter -le $TodaysDate.AddDays(7))
    {   
        return $true
    }
    return $false
}

function Get-InterfacesWhoseCertsExpiringSoon
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $S2SInterfaces
    )
    $S2SInterfacesRet = @()
    foreach($S2SInterface in $S2SInterfaces)
    {
        if($S2SInterface.Certificate -ne $null)
        {
            $IsExpiring = get-CertExpireSoon -Certificate $S2SInterface.Certificate
            if($IsExpiring -eq $true)
            {
                $S2SInterfacesRet += $S2SInterface
            }
        }
    }
    return @($S2SInterfacesRet)
}

function Get-RootCertificate
{
    Param(
            [Parameter(Mandatory=$True)]
            [System.Security.Cryptography.X509Certificates.X509Certificate2[]]
            $RootCertList,
            [Parameter(Mandatory=$True)]
            [System.Security.Cryptography.X509Certificates.X509Certificate2] 
            $Certificate
        )
        #cert chain
        $chain = [System.Security.Cryptography.X509Certificates.X509Chain]::Create()
        $temp = $chain.Build($Certificate)

        foreach ($chainElement in $chain.ChainElements)
        {
            foreach($rootCert in $RootCertList)
            {
                if($rootCert.Thumbprint -eq $chainElement.Certificate.Thumbprint)
                {
                    return $rootCert
                }
            }
        }
        return $null
}

########################################################################################################
# Get-InterfacesWhoseRootCertsAreInvalid - Rule 14
# Get all interfaces whose certificates are expiring in 7 days
########################################################################################################
function Get-InterfacesWhoseRootCertsAreInvalid
{
    Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $S2SInterfaces,
            [Parameter(Mandatory=$True)]
            [System.Security.Cryptography.X509Certificates.X509Certificate2[]]
            $RootCertList
    )
    $NoRootCerInterfaces = @()
    $RootCertExpiringInterfaces = @()
    foreach($S2SInterface in $S2SInterfaces)
    {
        if($S2SInterface.Certificate -ne $null)
        {
            $rootCert = Get-RootCertificate -RootCertList $RootCertList -Certificate $S2SInterface.Certificate
            if($rootCert -eq $null)
            {
               $NoRootCerInterfaces += $S2SInterface
            }
            else
            {
                $IsExpiring = get-CertExpireSoon -Certificate $rootCert
                if($IsExpiring -eq $true)
                {
                    $RootCertExpiringInterfaces += $S2SInterface
                }
            }
        }
    }
    $returnValue = New-Object -TypeName PSObject
    $returnValue | Add-Member -Name "S2SInterfacesWithoutRootCertificate" -Value @($NoRootCerInterfaces) -MemberType NoteProperty
    $returnValue | Add-Member -Name "S2SInterfacesWithRootCertificateAboutToExpire" -Value @($RootCertExpiringInterfaces) -MemberType NoteProperty
    return $returnValue
}


########################################################################################################
# Is-ServerCertificateValid - Rule 15, 16
# Server certificate CN must have atleast one IP address
# Server certificate CN must have atleast one public IP address
########################################################################################################
function Is-ServerCertificateValid
{
    Param(
            [Parameter(Mandatory=$True)]
            [System.Security.Cryptography.X509Certificates.X509Certificate2]
            $ServerCertificate
    )
    $returnValue = New-Object -TypeName PSObject
    $hasOneIp = $false
    $hasOnePublicIP = $false
    $allStrings = $ServerCertificate.Subject.Split(",")
    foreach ($tempString in $allStrings)
    {
        if($tempString.Contains("CN="))
        {
            $ResolvableString = $tempString.Split("=")[1]

            $isValidIp = Is-ValidIP -IpAddresses $ResolvableString
            if($isValidIp -eq $true)
            {
                $hasOneIp = $true
                $address = [System.Net.IPAddress]::Parse($ResolvableString)
                if(($address.AddressFamily -eq "InterNetwork") -and ((Is-Publicv4IP -IPAddress $address) -eq $true))
                {
                    $hasOnePublicIP = $true
                }
                elseif(($address.AddressFamily -eq "InterNetworkV6") -and ((Is-Publicv6IP -IPAddress $address) -eq $true))
                {
                    $hasOnePublicIP = $true
                }
                if($hasOnePublicIP -eq $hasOneIp)
                {
                    $returnValue | Add-Member -Name "HasOneIPAtleast" -Value $hasOneIp -MemberType NoteProperty
                    $returnValue | Add-Member -Name "HasOnePublicIPAtleast" -Value $hasOneIp -MemberType NoteProperty
                    return $returnValue
                }
            }

        }
    }
    $returnValue | Add-Member -Name "HasOneIPAtleast" -Value $hasOneIp -MemberType NoteProperty
    $returnValue | Add-Member -Name "HasOnePublicIPAtleast" -Value $hasOneIp -MemberType NoteProperty
    return $returnValue
}


function Is-EAPBasedAuthConfigured
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $AuthProtocol
    )
    return ($AuthProtocol.UserAuthProtocolAccepted -contains "EAP")
}

function Is-LocalRadiusConfigured
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $LocalIpAddresses
    )
    $returnValue = $true
    $radiusObjs = @(Get-RemoteAccessRadius | where Purpose -eq $String_Authentication)

    if($radiusObjs -ne $null)
    {
        $returnValue = $false
        foreach($radiusObj in $radiusObjs)
        {
            #First check if is a valid IP
            if(Is-ValidIP -IpAddresses $radiusObjs.ServerName)
            {
                $returnValue = $LocalIpAddresses | Where IPAddress -eq $radiusObjs.ServerName
                if($returnValue -eq $true)
                {
                    return $returnValue
                }
            }
            else
            {
                #Compare it with the hostname
                $dnsRecords = @(Resolve-DNSName $radiusObjs.ServerName -ErrorAction SilentlyContinue)
                if($dnsRecords -ne $null)
                {
                    #Get all the IP's
                    foreach($dnsRecord in $dnsRecords)
                    {
                        $returnValue = $LocalIpAddresses | Where IPAddress -eq $dnsRecord.IPAddress
                        if($returnValue -eq $true)
                        {
                            return $returnValue
                        }
                    }
                }                
            }
        }
    }
    return $returnValue
}

function Get-AllEnabledDialInLocalAccounts()
{
    return @(Get-WmiObject -Namespace root\cimv2 -ComputerName localhost -Class Win32_UserAccount | ? {($_.LocalAccount -eq $true) -and ($_.Disabled -eq $False) -and ($_.Lockout -eq $False)} | ? {Is-DialInEnabled -UserName $_.Name})
}


function Get-EAPInterfacesWhoseNamesAreInvalid
{
    Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $S2SInterfaces,
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $AllEnabledDialInUserNames
    )
    return @($S2SInterfaces | Where AuthenticationMethod -eq "EAP" | ? {$AllEnabledDialInUserNames -notcontains $_.Name})
}

########################################################################################################
# Get-InterfacesWithDefaultRateLimitingSettings - Rule 19
# Get all interfaces whose destainations are same
########################################################################################################
function Get-InterfacesWithDefaultRateLimitingSettings
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $S2SInterfaces
    )
    $DefaultTxBandwidthKbps = 5120
    $DefaultRxBandwidthKbps = 5120
    return @($S2SInterfaces | ? {($_.RxBandwidthKbps -eq $DefaultRxBandwidthKbps) -and ($_.TxBandwidthKbps -eq $DefaultTxBandwidthKbps)})
}

function Get-InterfacesWithInValidRateLimitingParams
{
    Param(
        [Parameter(Mandatory=$True)]
        [AllowNull()]
        $S2SInterfaces
        )
    
    $S2SInterfacesRet = @()
    foreach($S2SInterface in $S2SInterfaces)
    {
        $LowValue = $S2SInterface.RxBandwidthKbps

        if($LowValue -gt $S2SInterface.TxBandwidthKbps)
        {
            $LowValue = $S2SInterface.TxBandwidthKbps
            $HighValue = $S2SInterface.RxBandwidthKbps
        }
        else
        {
            $HighValue = $S2SInterface.TxBandwidthKbps
        }

        $DiffPercent = ($LowValue * 100) / $HighValue

        if($DiffPercent -lt 30.0)
        {
            $S2SInterfacesRet += $S2SInterfaces;
        }
    }
    return @($S2SInterfacesRet)
}

########################################################################################################
# Get-PSKInterfacesWithSameDestination - Rule 22
# Get all PSK interfaces whose destainations are same
########################################################################################################
function Get-PSKInterfacesWithSameDestination
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $S2SInterfaces
    )
    return  @($S2SInterfaces | where AuthenticationMethod -eq "PSKOnly" | Group-Object Destination | where Count -gt 1)
}


########################################################################################################
# Get-PSKInterfacesWithFQDN - Rule 23
# Get all interfaces who doesnt have IP as their destination
########################################################################################################
function Get-PSKInterfacesWithFQDN
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $S2SInterfaces
    )
    $PSKS2SInterfaces = @($S2SInterfaces | where AuthenticationMethod -eq "PSKOnly")
    $S2SInterfacesRet = @()
    foreach($S2SInterface in $PSKS2SInterfaces)
    {
        $HasValidIP = $false
        foreach ($Destination in $S2SInterface.Destination)
        {
            $HasValidIP = Is-ValidIP -IpAddresses $Destination
            if($HasValidIP -eq $true)
            {
                break
            }
        }
        if($HasValidIP -eq $false)
        {
            $S2SInterfacesRet += $S2SInterface
        }
    }
    return @($S2SInterfacesRet)
}



########################################################################################################
# Is a V4 public IP
########################################################################################################
function Is-Publicv4IP()
{
    Param(
            [Parameter(Mandatory=$True)]
            [string]
            $IPAddress
            )
    $v4Address = [System.Net.IPAddress]$IPAddress
    #Skip the following
    #0.0.0.0/8
    #127/8
    #10/8
    #169.254/8
    #172.16/12
    #192.168/16
    if([System.Net.IPAddress]::IsLoopback($v4Address) -eq $false)
    {
        $AddressBytes = $v4Address.GetAddressBytes()
        if(($AddressBytes[0] -eq 10 -or ($AddressBytes[0] -eq 169 -and $AddressBytes[1] -eq 254) -or ($AddressBytes[0] -eq 172 -and ($AddressBytes[1] -ge 16 -and $AddressBytes[1] -le 31 ) ) -or ($AddressBytes[0] -eq 192 -and $AddressBytes[1] -eq 168) ))
        {
            return $false
        }
    }
    return $True
}

########################################################################################################
# Is a V6 public IP
########################################################################################################
function Is-Publicv6IP()
{
    Param(
            [Parameter(Mandatory=$True)]
            [string]
            $IPAddress
            )
    $v6Address = [System.Net.IPAddress]$address.IPv6Address
    #Discard the following IPv6 addresses
    #V4MappedToV6
    #LinkLocal
    #Multicast
    #SiteLocal
    #Teredo
    #Loopback
    if($v6Address.IsIPv4MappedToIPv6 -eq $false -and $v6Address.IsIPv6LinkLocal -eq $false -and $v6Address.IsIPv6Multicast -eq $false -and $v6Address.IsIPv6SiteLocal -eq $false -and $v6Address.IsIPv6Teredo -eq $false -and [System.Net.IPAddress]::IsLoopback($v6Address) -eq $false)
    {
        return $true
    }
    return $false
}

function Is-PublicIP
{
    Param(
        [Parameter(Mandatory=$True)]
        [String]
        $IPAddressString
    )

    $IPAddress = [System.Net.IPAddress]::Parse($IPAddressString)
    if($IPAddress.AddressFamily -eq ([System.Net.Sockets.AddressFamily]::InterNetwork))
    {
        return Is-Publicv4IP -IPAddress $IPAddressString   
    }
    else
    {
        return Is-Publicv6IP -IPAddress $IPAddressString
    }
}

########################################################################################################
# Is MultiplePublicAddressesAvailable- Rule 24
# Test if the default compartment has multiple public addresses
########################################################################################################
function Is-MultiplePublicAddressesAvailable
{
    Param(
    [Parameter(Mandatory=$True)]
    $InterfaceIPs
    )

    #Ignoring all TunnelType interfaces from default compartment
    $DefaultComparrmentInterfaceAliases = @(([System.Net.NetworkInformation.NetworkInterface]::GetAllNetworkInterfaces() | where NetworkInterfaceType -ne "Tunnel" | where NetworkInterfaceType -ne "LoopBack").Name)
    $DefaultCompartmentIPs = @(@($InterfaceIPs | ? {$DefaultComparrmentInterfaceAliases -contains $_.InterfaceAlias}).IPAddress | ? {$_} | sort -Unique)
    $DefaultCompartmentIPs = @(Drop-PercentageFromIPs -IPs $DefaultCompartmentIPs | Sort -Unique)
    $DefaultCompartmentPublicIPs = @($DefaultCompartmentIPs | ? {Is-PublicIP -IPAddressString $_.ToString()})

    return ($DefaultCompartmentPublicIPs.Count -gt 1)
}

function Get-InterfacesWithoutSourceIp
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $S2SInterfaces
    )
    return @($S2SInterfaces | ? {($_.SourceIpAddress -eq $Null) -or ($_.SourceIpAddress -eq "")})
}

########################################################################################################
# Get-InterfacesWhoseCustomPoliciesAreNotSubsetOfGlobalPolicy - Rule 25
# 
########################################################################################################
function Is-SubsetPolicy
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $Interface,
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $GlobalPolicy
     )
     $customPolicyFound = $false
     #first check QMPolicies (CipherTransform,AuthTransform)
     foreach($policy in $GlobalPolicy.QMPolicies)
     {
        if($policy[0] -eq $Interface.CipherTransformConstants.ToString() -and $policy[1] -eq $Interface.AuthenticationTransformConstants.ToString())
        {
            $customPolicyFound = $true
            break
        }
     }

     #Check MMPolicy only if QM is found
     if($customPolicyFound -eq $true)
     {
         foreach($policy in $GlobalPolicy.MMPolicies)
         {
            if($policy[0] -eq $Interface.DHGroup.ToString() -and $policy[1] -eq $Interface.EncryptionMethod.ToString() -and $policy[2] -eq $Interface.IntegrityCheckMethod.ToString() )
            {
                return $true
            }
         }
     }

     return $false
}

function Get-InterfacesWhoseCustomPoliciesAreNotSubsetOfGlobalPolicy
{
     Param(
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $RoutingDomains,
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $InterfaceList,
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $IPSecConfig
        )
    $InvalidInterfaces = @()
    foreach($interface in $InterfaceList)
    {
        #Does interface has custompolicy?
        if($interface.PSObject.Properties.Match('CustomPolicy').Count)
        {
            $routingDomain = $RoutingDomains | where RoutingDomain -eq $interface.RoutingDomain 
            # if routing domain custom policy is available... 
            if($routingDomain -ne $null -and $routingDomain.PSObject.Properties.Match('CustomPolicy').Count)
            {
                if((($interface.AuthenticationTransformConstants.ToString() -eq $routingDomain.AuthenticationTransformConstant.ToString()) -and ($interface.CipherTransformConstants.ToString() -eq $routingDomain.CipherTransformConstant.ToString()) -and ($interface.DHGroup.ToString() -eq $routingDomain.DHGroup.ToString()) -and ($interface.EncryptionMethod.ToString() -eq $routingDomain.EncryptionMethod.ToString()) -and ($interface.IntegrityCheckMethod.ToString() -eq $routingDomain.IntegrityCheckMethod.ToString()) -and ($interface.PFSgroup.ToString() -eq $routingDomain.PFSgroup.ToString())) -eq $false)
                {
                    $InvalidInterfaces = $InvalidInterfaces + $interface
                }
            }
            elseif($IPSecConfig.PSObject.Properties.Match('CustomPolicy').Count)
            {
                #If the custom policy is enabled at the server level
                if((($interface.AuthenticationTransformConstants.ToString() -eq $IPSecConfig.AuthenticationTransformConstants.ToString()) -and ($interface.CipherTransformConstants.ToString() -eq $IPSecConfig.CipherTransformConstants.ToString()) -and ($interface.DHGroup.ToString() -eq $IPSecConfig.DHGroup.ToString()) -and ($interface.EncryptionMethod.ToString() -eq $IPSecConfig.EncryptionMethod.ToString()) -and ($interface.IntegrityCheckMethod.ToString() -eq $IPSecConfig.IntegrityCheckMethod.ToString()) -and ($interface.PFSgroup.ToString() -eq $IPSecConfig.PFSgroup.ToString())) -eq $false)
                {
                    $InvalidInterfaces = $InvalidInterfaces + $interface
                }
            }
            else
            {
                $isSubsetofGlobal = $false
                switch($IPSecConfig.EncryptionType)
                {
                    "MaximumEncryption"  {$isSubsetofGlobal = Is-SubsetPolicy -Interface $interface -GlobalPolicy $MaximumEncryptionPolicies }
                    "NoEncryption"       {$isSubsetofGlobal = Is-SubsetPolicy -Interface $interface -GlobalPolicy $NoEncryptionPolicies }
                    "OptionalEncryption" {$isSubsetofGlobal = Is-SubsetPolicy -Interface $interface -GlobalPolicy $OptionalEncryptionPolicies }
                    "RequireEncryption"  {$isSubsetofGlobal = Is-SubsetPolicy -Interface $interface -GlobalPolicy $RequireEncryptionPolicies }
                }
                if($isSubsetofGlobal -eq $false)
                {
                    $InvalidInterfaces = $InvalidInterfaces + $interface
                }
            }  
        }
    }
    return $InvalidInterfaces
}

########################################################################################################
# Is Port Limit exceeded - Rule 26
# If the number of VPN Connections + S2S Interfaces < SSTP + IKev2 ports or S2SInterfaces < Ikev2 Ports
########################################################################################################
function Is-PortLimitExceeded
{
     Param(
            [Parameter(Mandatory=$True)]
            [int]
            $S2SInterfacesCount,
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $IpSecConfig,
            [Parameter(Mandatory=$True)]
            [AllowNull()]
            $RemoteAccessRoutingDomains
    )
    $VpnConnectionsCount = ($RemoteAccessRoutingDomains | Measure-Object MaximumVpnConnections -Sum).Sum + 0
    $TotalCount = $VpnConnectionsCount + $S2SInterfacesCount + 0
    $TotalPorts = $IpSecConfig.Ikev2Ports + $IpSecConfig.SstpPorts + 0

    if(($TotalPorts -lt $TotalCount) -or ($IpSecConfig.Ikev2Ports -lt $S2SInterfacesCount ))
    {
        return $true
    }
    return $false
}

function Get-S2SInterfacesWithoutTriggeringRoute
{
    Param(
    [Parameter(Mandatory=$True)]
    $S2SInterfaces
    )
    return @($S2SInterfaces | ? {($_.IPv4Subnet -eq $Null) -and ($_.IPv6Subnet -eq $Null)})
}

function Get-MaskFromTriggerSubnet
{
    Param(
    [Parameter(Mandatory=$True)]
    [String]
    $Subnet
    )

    return [System.Int32]$Subnet.Split("/")[1].Split(":")[0]
}

#Returns S2S Interfaces which have triggering route other than /32 or /128
function Get-S2SInterfacesWithoutHostTriggeringRoute
{
    Param(
    [Parameter(Mandatory=$True)]
    $S2SInterfaces
    )
    $S2SInterfacesRet = @()
    foreach($S2SInterface in $S2SInterfaces)
    {
        foreach($IPv4Subnet in $S2SInterface.IPv4Subnet)
        {
            if((Get-MaskFromTriggerSubnet -Subnet $IPv4Subnet) -ne 32)
            {
                $S2SInterfacesRet += $S2SInterface
                break
            }
        }

        foreach($IPv6Subnet in $S2SInterface.IPv6Subnet)
        {
            if((Get-MaskFromTriggerSubnet -Subnet $IPv6Subnet) -ne 128)
            {
                $S2SInterfacesRet += $S2SInterface
                break
            }
        }
    }
    return @($S2SInterfacesRet | ? {$_} | Sort -Unique)
}

function Get-AllRootcerts()
{
   return @(Get-ChildItem -Path Cert:\LocalMachine\Root)
}


function Test-DoesFilterBlockBGPTraffic([String]$Filter, $AddressFamily)
{
    if($AddressFamily -eq [Microsoft.PowerShell.Cmdletization.GeneratedTypes.RemoteAccessIpFilter.AddressFamily]::IPv4)
    {
        $FilterParts = $Filter.Split(":")
        if($FilterParts.Count -eq 5)
        {
            # "IP/MASK:IP/MASK:Protocol(TCP/UDP/TCPEstablished):SrcPort:DstPort"
            if($FilterParts[2].Contains("TCP") -eq $True) #TODO
            {
                if(($FilterParts[3] -eq 179) -or ($FilterParts[4] -eq 179))
                {
                    return $True
                }
            }
            return $False
        }
        elseif($FilterParts.Count -eq 4)
        {
            # "IP/MASK:IP/MASK:Protocol(Other):ProtocolNo"
            if($FilterParts[3] -eq 6)
            {
                return $True
            }
            else
            {
                return $False
            }
        }
        elseif($FilterParts.Count -eq 3)
        {
            # "IP/MASK:IP/MASK:Any"
            return $True
        }
    }
    elseif($AddressFamily -eq [Microsoft.PowerShell.Cmdletization.GeneratedTypes.RemoteAccessIpFilter.AddressFamily]::IPv6)
    {
        # We need only last three parts in all cases
        $FilterParts = $Filter.Split(":")
        $FilterParts = @($FilterParts[$FilterParts.Count -3],$FilterParts[$FilterParts.Count - 2],$FilterParts[$FilterParts.Count -1])

    }
    return $False
}


function Get-RemoteAccessIpFiltersWhichBlockBGP($RemoteAccessIPFilters)
{
    $RemoteAccessIPFiltersDeny = $RemoteAccessIPFilters | Where Action -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.RemoteAccessIpFilter.Action]::Deny)
    foreach($RemoteAccessIPFilter in $RemoteAccessIPFiltersDeny)
    {
        foreach($List in $RemoteAccessIPFilter.List)
        {
            Test-DoesFilterBlockBGPTraffic -Filter $List -AddressFamily $RemoteAccessIPFilter.AddressFamily
        }
    }
}

#endregion


#region Function to fill rules for windows server 2012 R2 in $RRASObj in BPA
function Update-RRASConfigForV2
{
    Param(
    [Parameter(Mandatory=$True)]
    [RRASServiceConfig.RRASService]
    [ref]
    $RRASConfig
    )

    if($RRASConfig -ne $Null)
    {       
            
        #TODO: These may return exception, handle them
        $RemoteAccess = Get-RemoteAccess
        $MultiTenancy = Test-MultiTenancy $RemoteAccess
        $RemoteAccessRoutingDomains = @()
        $Compartments = @(Get-NetCompartmentBpa)
        if($MultiTenancy)
        {   
            $RemoteAccessRoutingDomains = @(Get-RemoteAccessRoutingDomainBpa)
        }

        $RRASConfig.MultiTenancyEnabled = $MultiTenancy
        $RRASConfig.RRAS.IsInstallationValid = Is-ValidMultiTenantConfiguration -MultiTenancy $MultiTenancy -CompartmentCount $Compartments.Count

        if($RRASConfig.RRAS.IsInstallationValid -eq $True)
        {
            $S2SInterfaces = @(Get-VpnS2SInterfaceBpa)
            $IpSecConfig = $Null 
            
            try
            {
                $IpSecConfig = Get-VpnServerIPsecConfiguration -ErrorAction SilentlyContinue
            }
            catch{}

            try
            {
                $AuthProtocol = Get-VpnAuthProtocol
                $RootCerts = @(Get-AllRootCerts)

                if($AuthProtocol.CertificateAdvertised -ne $null)
                {

                    $ServerRootCerts = @()
                    if($RootCerts.Count -ge 1)
                    {
                        $ServerRootCerts = @(Get-RootCertificate -RootCertList $RootCerts -Certificate $AuthProtocol.CertificateAdvertised | ? {$_})
                    }

                    if($ServerRootCerts.Count -eq 0)
                    {
                        $RRASConfig.RRAS.ServerCertHasNoRootCertificate = $True
                    }
                    else
                    {
                        $ServerRootCertExpiring = $False
                        foreach($ServerRootCert in $ServerRootCerts)
                        {
                            $ServerRootCertExpiring = get-CertExpireSoon -Certificate $ServerRootCert
                            if($ServerRootCertExpiring)
                            {
                                break
                            }
                        }

                        $RRASConfig.RRAS.ServerRootCertificateAboutToExpire = $ServerRootCertExpiring
                    }

                    $ServerCertExpiring = @(get-CertExpireSoon -Certificate $AuthProtocol.CertificateAdvertised | ? {$_})
                    if($ServerCertExpiring.Count -ne 0)
                    {
                        $RRASConfig.RRAS.ServerCertificateAboutToExpire = $True
                    }

                    $ServerCertValid = @(Is-ServerCertificateValid -ServerCertificate $AuthProtocol.CertificateAdvertised | ? {$_})
                    if($ServerCertValid.Count -eq 1)
                    {
                        $RRASConfig.RRAS.ServerCertificateHasAtleastOneIPInCN = $ServerCertValid[0].HasOnePublicIPAtleast
                    }
                }

                if($AuthProtocol.RootCertificateNameToAccept -ne $null)
                {
                    $RootCertToAccpet = @(get-CertExpireSoon -Certificate $AuthProtocol.RootCertificateNameToAccept | ? {$_})
                    if($RootCertToAccpet.Count -ne 0)
                    {
                        $RRASConfig.RRAS.RootCertificateToAcceptAboutToExpire = $True
                    }
                }

                $RRASConfig.RRAS.IsInboundCAConfigured = Is-InboundCAConfigured -AuthProtocol $AuthProtocol
                $RRASConfig.RRAS.EAPAuthenticationEnabled = Is-EAPBasedAuthConfigured -AuthProtocol $AuthProtocol
                $RRASConfig.RRAS.CertAuthenticationEnabled = $AuthProtocol.UserAuthProtocolAccepted -contains "Certificate"
            }
            catch {}
            
            if($MultiTenancy -eq $True)
            {
                $CompartmentGuids = @(($Compartments | Sort |? {$_.CompartmentDescription -ne "Default Compartment"} | ? {$_}).CompartmentGuid)
                $RemoteAccessRoutingDomainGuids = @(@($RemoteAccessRoutingDomains.RoutingDomainID) | Sort | ? {$_}) 
                $RoutingDomainGuidIntersection = @(Get-Intersection -List1 $CompartmentGuids -List2 $RemoteAccessRoutingDomainGuids)
                if($RoutingDomainGuidIntersection.Count -eq $CompartmentGuids.Count)
                {
                    $RRASConfig.RRAS.AllCompartmentsEnabled = $True
                }
                else
                {
                    $RRASConfig.RRAS.DisabledCompartmentsName = @(@(($Compartments | ? {$_.CompartmentDescription -ne "Default Compartment"} | ? {$RoutingDomainGuidIntersection -notcontains $_.CompartmentGuid}).CompartmentDescription) | ?{$_}) -join ","
                }
            }

            $RRASConfig.RRAS.DefaultCapacityParams = Test-DefaultCapacityKbps -RemoteAccess $RemoteAccess
            $RRASConfig.RRAS.PortLimitExceeded = Is-PortLimitExceeded -S2SInterfacesCount $S2SInterfaces.Count -IpSecConfig $IpSecConfig -RemoteAccessRoutingDomains $RemoteAccessRoutingDomains

            $PskWithSameDestinationGroups = @(Get-PSKInterfacesWithSameDestination -S2SInterfaces $S2SInterfaces)
            if($PskWithSameDestinationGroups.Count -gt 0)
            {
                $RRASConfig.RRAS.PSKBasedS2SInterfacesWithSameDestination = $True
                $RRASConfig.RRAS.PSKBasedS2SInterfacesWithSameDestinationList = @(@($PskWithSameDestinationGroups.Group).Name) -join ","
            }

            $AtleastOnePortExceptPPTP = $False

            foreach($Port in $RRASConfig.RRAS.Port)
            {
                if($Port.Protocol -eq "L2TP")
                {
                    if($IpSecConfig.L2tpPorts -ne $Null)
                    {
                        $Port.PortCount = $IpSecConfig.L2tpPorts
                    }
                }
                elseif($Port.Protocol -eq "SSTP")
                {
                    if($IpSecConfig.SstpPorts -ne $Null)
                    {
                        $Port.PortCount =  $IpSecConfig.SstpPorts
                    }
                }
                elseif($Port.Protocol -eq "IKEv2")
                {
                    if($IpSecConfig.Ikev2Ports -ne $Null)
                    {
                        $Port.PortCount =  $IpSecConfig.Ikev2Ports
                    }
                }

                if($Port.PortCount -gt 0)
                {
                    $AtleastOnePortExceptPPTP = $True
                }
            }

            if($RRASConfig.RRAS.AllPortsDisabledSpecified -eq $True)
            {
                if($RRASConfig.RRAS.AllPortsDisabled -eq $True)
                {
                    $RRASConfig.RRAS.AllPortsDisabled = $AtleastOnePortExceptPPTP -ne $True
                    if($RRASConfig.RRAS.AllPortsDisabled -eq $False)
                    {
                        $RRASConfig.RRAS.AllPortsDisabledSpecified = $False
                    }
                }
            }

            $RoutingDomains = Get-RoutingDomainsBpa -RemoteAccess $RemoteAccess -IpSecConfigObj $IpSecConfig -S2SInterfaces $S2SInterfaces -Compartments $Compartments -RemoteAccessRoutingDomains $RemoteAccessRoutingDomains
            if(($RoutingDomains -ne $Null) -and ($RoutingDomains.Count -ge 1))
            {
                $RRASConfig.RRAS.RoutingDomain = $RoutingDomains
            }

            $DisabledCompartments = @()
            foreach($RoutingDomain in $RRASConfig.RRAS.RoutingDomain)
            {
                if($RoutingDomain.Enabled -eq $False)
                {
                    $DisabledCompartments += $RoutingDomain.Name
                }
            }

            if($DisabledCompartments.Count -gt 0)
            {
                $RRASConfig.RRAS.DeletedCompartments = $True
                $RRASConfig.RRAS.DeletedCompartmentNames = $DisabledCompartments -join ","
            }
        }
    }
}

#endregion

#region Function to generate RoutingDomain objects for BPA


function Get-RoutingDomainsBpa
{
    Param(
    [Parameter(Mandatory=$true)]
    $RemoteAccess, #Output from Get-RemoteAccess
    [Parameter(Mandatory=$True)]
    $IpSecConfigObj,
    [Parameter(Mandatory=$True)]
    $S2SInterfaces,
    [Parameter(Mandatory=$True)]
    $Compartments,
    [Parameter(Mandatory=$True)]
    $RemoteAccessRoutingDomains
    )

    if($RemoteAccess -eq $Null)
    {
        return @()
    }
    else
    {        
        $RoutingDomains = @()
        $RoutingDomainsBpa = @()
        $MultiTenancy = Test-MultiTenancy -RemoteAccess $RemoteAccess
        $RootCerts = @(Get-AllRootcerts)

        if($MultiTenancy -eq $True)
        {
            $RoutingDomains = @($RemoteAccessRoutingDomains.RoutingDomain | ? {$_})
        }
        else
        {
            $RoutingDomains = @($Null)
        }

        #region Fetch All the information at once

        #Fetch System Information
        $Interfaces = @(Get-NetIPInterfaceBpa -MultiTenancy $MultiTenancy)
        $InterfaceIPs = @(Get-NetIPAddressBpa -Interfaces $Interfaces)
        $InterfaceRoutes = @(Get-NetRouteBpa -Interfaces $Interfaces)
        $AllEnabledDialInUserAccounts = @(Get-AllEnabledDialInLocalAccounts)
  

        # BGP information
        $BgpRouters = @(Get-BgpRouterBpa -MultiTenancy $MultiTenancy)
        $BgpPeers = @(Get-BgpPeerBpa -MultiTenancy $MultiTenancy -Routers $BgpRouters)
        $BgpRoutingPolicies = @(Get-BgpRoutingPolicyBpa -MultiTenancy $MultiTenancy -Routers $BgpRouters)
        $BgpCustomRoutes = @(Get-BgpCustomRouteBpa -MultiTenancy $MultiTenancy -Routers $BgpRouters)
        $BgpRoutes = @(Get-BgpRouteInformationBpa -MultiTenancy $MultiTenancy -Routers $BgpRouters)

        #endregion Fetch All the information at once


        #region Evaluate BPA rules for all objects and get the result

        #Evaluate S2S Rules
        #TODO S2SInterfacesWithoutValidCertificate
        $S2SInterfacesWithCertificateAboutToExpire = @(Get-InterfacesWhoseCertsExpiringSoon -S2SInterfaces $S2SInterfaces)
        $ObjForInvalidRootCert = Get-InterfacesWhoseRootCertsAreInvalid -S2SInterfaces $S2SInterfaces -RootCertList $RootCerts
        $S2SInterfacesWithoutRootCertificate = @($ObjForInvalidRootCert.S2SInterfacesWithoutRootCertificate | ? {$_})
        $S2SInterfacesWithRootCertificateAboutToExpire = @($ObjForInvalidRootCert.S2SInterfacesWithRootCertificateAboutToExpire | ? {$_})
        $S2SInterfacesWithInvalidNameForEAP = @(Get-EAPInterfacesWhoseNamesAreInvalid -S2SInterfaces $S2SInterfaces -AllEnabledDialInUserNames (@($AllEnabledDialInUserAccounts.Name)))
        $S2SInterfacesWithDefaultRateLimitingParams = @(Get-InterfacesWithDefaultRateLimitingSettings -S2SInterfaces $S2SInterfaces)
        $S2SInterfacesWithInValidRateLimitingParams = @(Get-InterfacesWithInValidRateLimitingParams -S2SInterfaces $S2SInterfaces)
        $S2SInterfacesWithInvalidDestinationsForPSK = @(Get-PSKInterfacesWithFQDN -S2SInterfaces $S2SInterfaces)
        $S2SInterfacesWithoutSourceIp = @(Get-InterfacesWithoutSourceIp -S2SInterfaces $S2SInterfaces)
        $MultiplePublicIps = Is-MultiplePublicAddressesAvailable -InterfaceIPs $InterfaceIPs
        $S2SInterfacesWithCustomPolicyDiffFromGlobalPolicies = Get-InterfacesWhoseCustomPoliciesAreNotSubsetOfGlobalPolicy -RoutingDomains $RemoteAccessRoutingDomains -InterfaceList $S2SInterfaces -IPSecConfig IpSecConfigObj
        $S2SInterfacesWithoutTriggeringRoutes = @(Get-S2SInterfacesWithoutTriggeringRoute -S2SInterfaces $S2SInterfaces)
        $S2SInterfacesWithoutHostTriggeringRoutes = @(Get-S2SInterfacesWithoutHostTriggeringRoute -S2SInterfaces $S2SInterfaces)

        #Evalue MT-VPN Rules
        $VPNRoutingDomains = @(Get-VPNRoutingDomains -RemoteAccessRoutingDomains $RemoteAccessRoutingDomains)
        $VPNRoutingDomainsWithStaticAddressPool = @(Get-VPNRoutingDomainsWithStaticAddressPool -VPNRoutingDomains $VPNRoutingDomains)
        $VPNRoutingDomainsWithoutUnicastStaticAddressPool = @(Get-VPNRoutingDomainsWithoutUnicastStaticAddressPool -VPNRoutingDomainsWithStaticAddressPool $VPNRoutingDomainsWithStaticAddressPool)
        $VPNRoutingDomainsWithTenantName = @(Get-VPNRoutingDomainsWithTenantName -VPNRoutingDomains $VPNRoutingDomains)
        $VPNRoutingDomainsWithTenantNamePartOfOther = @(Get-VPNRoutingDomainsWithTenantNameSubsetOfAnother -VPNRoutingDomainsWithTenantName $VPNRoutingDomainsWithTenantName)


        #Evaluate BGP rules
        $BgpPeersWithoutDefaultRouteDropEgress = @(Get-PeersWithoutDeafultRouteDropPolicy -MultiTenancy $MultiTenancy -Routers $BgpRouters -Peers $BgpPeers -Policies $BgpRoutingPolicies -Direction ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyDirection]::Egress))
        $BgpPeersWithoutDefaultRouteDropIngress = @(Get-PeersWithoutDeafultRouteDropPolicy -MultiTenancy $MultiTenancy -Routers $BgpRouters -Peers $BgpPeers -Policies $BgpRoutingPolicies -Direction ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyDirection]::Ingress))
        $BgpPeersWithPeerIpOnLocalInterface = @(Get-PeersWithPeerIpOnInterface -MultiTenancy $MultiTenancy -Routers $BgpRouters -Peers $BgpPeers -Interfaces $Interfaces -InterfaceIPs $InterfaceIPs)
        $BgpRoutersIPv6EnabledIPv4PeersNoLocalIPv6Address = @(Get-RoutersWithoutLocalIPv6Address -MultiTenancy $MultiTenancy -Routers $BgpRouters -Peers $BgpPeers)
        $BgpUnreachableCustomRoutes = @(Get-BgpUnresolvableCustomRoutes -MultiTenancy $MultiTenancy -Routers $BgpRouters -Compartments $Compartments -Peers $BgpPeers -Policies $BgpRoutingPolicies -CustomRoutes $BgpCustomRoutes -Routes $InterfaceRoutes -Interfaces $Interfaces)
        $BgpSamePrefixWithMultipleNextHop = @(Get-SamePrefixMultipleNextHopPolicies -MultiTenancy $MultiTenancy -Routers $BgpRouters -Policies $BgpRoutingPolicies)
        $BgpPeersWithZeroHoldTime = @(Get-PeersWithZeroHoldTime -Peers $BgpPeers)
        $BgpPeersWithLowHoldTime = @(Get-PeersWithLowHoldTime -Peers $BgpPeers)
        $BgpPeersAllIngressRoutesDropped = @(Get-PeersWithAllRouteDropPolicy -MultiTenancy $MultiTenancy -Routers $BgpRouters -Peers $BgpPeers -Policies $BgpRoutingPolicies -Direction ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyDirection]::Ingress))
        $BgpPeersAllEgressRoutesDropped = @(Get-PeersWithAllRouteDropPolicy -MultiTenancy $MultiTenancy -Routers $BgpRouters -Peers $BgpPeers -Policies $BgpRoutingPolicies -Direction ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.Bgp.PolicyDirection]::Egress))
        $BgpPeersManualMode = @(Get-PeersWithManualPeeringMode -Peers $BgpPeers)
        $BgpPeersIPv6WithIPv4CustomRoutes = @(Get-IPv6PeersWithIPv4CustomRoutes -MultiTenancy $MultiTenancy -Routers $BgpRouters -Peers $BgpPeers -CustomRoutes $BgpCustomRoutes)
        $BgpPeersHighIdleHoldTime = @(Get-PeersWithHighIdleHoldTime -Peers $BgpPeers)
        $BgpPeersWithoutMaxPrefixLimit = @(Get-PeersWithoutMaxPrefixPolicy -Peers $BgpPeers)
        $BgpPeersWithRoutesNearMaxPrefixLimit = @(Get-PeersWithRoutesNearMaxPrefixLimit -MultiTenancy $MultiTenancy -Routers $BgpRouters -Peers $BgpPeers -BgpRoutes $BgpRoutes)
    

        #endregion Evaluate BPA rules for all objects and get the result

        foreach($RoutingDomain in $RoutingDomains)
        {
            $RoutingDomainBpa = New-Object RRASServiceConfig.RoutingDomain

            # Intialize the $RoutingDomainBpa Object
            # Intialization is specific to MT or ST deployment
            if($MultiTenancy -eq $True)
            {
                $RoutingDomainBpa.Name = $RoutingDomain
                $RemoteAccessRoutingDomain = Get-ObjectsInRoutingDomain -Objects $RemoteAccessRoutingDomains -RoutingDomain $RoutingDomain
                if(($RemoteAccessRoutingDomain -eq $Null) -or ($RemoteAccessRoutingDomain.RoutingDomainStatus -ne "Enabled and Available"))
                {
                    $RoutingDomainBpa.Enabled = $False
                }
                else
                {
                    $RoutingDomainBpa.Enabled = $true
                    $RoutingDomainBpa.S2SEnabled = $RemoteAccessRoutingDomain.VpnS2SStatus -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.RemoteAccessRoutingDomain.State]::Enabled)
                    $RoutingDomainBpa.VpnEnabled = $RemoteAccessRoutingDomain.VpnStatus -eq ([Microsoft.PowerShell.Cmdletization.GeneratedTypes.RemoteAccessRoutingDomain.State]::Enabled)

                    if($RoutingDomainBpa.VpnEnabled -eq $True)
                    {
                        $RoutingDomainBpa.VPN = New-Object RRASServiceConfig.VPN
                        $RoutingDomainBpa.VPN.MTVPN = New-Object RRASServiceConfig.MTVPN

                        $RoutingDomainBpa.VPN.MTVPN.StaticAddressPoolConfigured = (Get-ObjectsInRoutingDomain -Objects $VPNRoutingDomainsWithStaticAddressPool -RoutingDomain $RoutingDomain) -ne $Null
                        if($RoutingDomainBpa.VPN.MTVPN.StaticAddressPoolConfigured)
                        {
                            $RoutingDomainBpa.VPN.MTVPN.StaticAddressPoolIsUnicast = (Get-ObjectsInRoutingDomain -Objects $VPNRoutingDomainsWithoutUnicastStaticAddressPool -RoutingDomain $RoutingDomain) -eq $Null
                        }
                        $RoutingDomainBpa.VPN.MTVPN.TenantNameConfigured = (Get-ObjectsInRoutingDomain -Objects $VPNRoutingDomainsWithTenantName -RoutingDomain $RoutingDomain) -ne $Null
                        $PartOfOtherRd = @(Get-ObjectsInRoutingDomain -Objects $VPNRoutingDomainsWithTenantNamePartOfOther -RoutingDomain $RoutingDomain)
                        if($PartOfOtherRd.Count -gt 0)
                        {
                            $RoutingDomainBpa.VPN.MTVPN.TenantNameSubsetOfAnotherRD = $True
                            $RoutingDomainBpa.VPN.MTVPN.TenantNameSubsetOfAnotherRDList = $PartOfOtherRd[0].OtherRdList
                        }
                    }
                }
            }
            else
            {
                $RoutingDomainBpa.Enabled = $True
                $RoutingDomainBpa.S2SEnabled = $RemoteAccess.VpnS2SStatus -eq "Installed"
                $RoutingDomainBpa.VpnEnabled = $RemoteAccess.VpnStatus -eq "Installed"

                if($RoutingDomainBpa.VpnEnabled -eq $True)
                {
                    #Just for the sake of clarity in sch
                    $RoutingDomainBpa.VPN = New-Object RRASServiceConfig.VPN
                }
            }

            if($RoutingDomainBpa.Enabled -eq $true)
            {
                $BgpConfigured = (Get-ObjectsInRoutingDomain -Objects $BgpRouters -RoutingDomain $RoutingDomain) -ne $Null
                $RoutingProtocolsConfigured = $BgpConfigured
                if($RoutingProtocolsConfigured -eq $True)
                {
                    $RoutingProtocols = New-Object RRASServiceConfig.RoutingProtocols
                    if($BgpConfigured -eq $true)
                    {
                        $RoutingProtocols.BGP = New-Object RRASServiceConfig.BGP
                        $RoutingProtocols.BGPConfigured = $True        

                        # Rule 1: The Default route should not be advertised to the peers
                        $BgpPeersWithoutDefaultRouteDropEgressInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersWithoutDefaultRouteDropEgress -RoutingDomain $RoutingDomain)
                        if($BgpPeersWithoutDefaultRouteDropEgressInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.DefaultGatewayAdvertised = $True
                            $RoutingProtocols.BGP.DefaultGatewayAdvertisedPeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersWithoutDefaultRouteDropEgressInRd
                        }

                        #Rule 2: The Default route should not be accepeted
                        $BgpPeersWithoutDefaultRouteDropIngressInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersWithoutDefaultRouteDropIngress -RoutingDomain $RoutingDomain)
                        if($BgpPeersWithoutDefaultRouteDropIngressInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.DefaultGatewayAccepted = $True
                            $RoutingProtocols.BGP.DefaultGatewatAcceptedPeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersWithoutDefaultRouteDropIngressInRd
                        }

                        #Rule 3: BGP Peer IP is assigned to a local interface
                        $BgpPeersWithPeerIpOnLocalInterfaceInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersWithPeerIpOnLocalInterface -RoutingDomain $RoutingDomain)
                        if($BgpPeersWithPeerIpOnLocalInterfaceInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.PeerIpAssignedToLocalInterface = $True
                            $RoutingProtocols.BGP.PeerIPAssignedToLocalInterfacePeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersWithPeerIpOnLocalInterfaceInRd
                        }

                        # Rule 4: If IPv6 Routing is enabled while peering over IPv4 Addresses, Local IPv6 Address must be configured on the BGP Router
                        $BgpRoutersIPv6EnabledIPv4PeersNoLocalIPv6AddressInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpRoutersIPv6EnabledIPv4PeersNoLocalIPv6Address -RoutingDomain $RoutingDomain)
                        if($BgpRoutersIPv6EnabledIPv4PeersNoLocalIPv6AddressInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.IPv6EnabledIPv4PeersNoLocalIPv6Address = $true
                        }

                        #Rule 5: Unresolvable Custom Routes
                        $BgpUnreachableCustomRoutesInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpUnreachableCustomRoutes -RoutingDomain $RoutingDomain)
                        if($BgpUnreachableCustomRoutesInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.CustomRoutesNotReachable = $true
                            $RoutingProtocols.BGP.CustomRoutesNotReachableList = (@(@($BgpUnreachableCustomRoutesInRd.Network) | Sort) -join ",")
                        }

                        #Rule 6: Same prefix with multiple next hops
                        $BgpSamePrefixWithMultipleNextHopInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpSamePrefixWithMultipleNextHop -RoutingDomain $RoutingDomain)
                        if($BgpSamePrefixWithMultipleNextHopInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.RoutesWithMultipleNextHops = $true
                            $RoutingProtocols.BGP.RoutesWithMultipleNextHopsList = (@($BgpSamePrefixWithMultipleNextHopInRd.MatchPrefix) | ? {$_} | Sort -Unique | join ",")
                        }

                        #Rule 7: Peers with zero hold time
                        $BgpPeersWithZeroHoldTimeInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersWithZeroHoldTime -RoutingDomain $RoutingDomain)
                        if($BgpPeersWithZeroHoldTimeInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.HoldTimeSecZero = $true
                            $RoutingProtocols.BGP.HoldTimeSecLowValuePeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersWithZeroHoldTimeInRd
                        }

                        # Rule 8: Peers with low value of Hold Time
                        $BgpPeersWithLowHoldTimeInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersWithLowHoldTime -RoutingDomain $RoutingDomain)
                        if($BgpPeersWithLowHoldTimeInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.HoldTimeSecLowValue = $true
                            $RoutingProtocols.BGP.HoldTimeSecLowValuePeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersWithLowHoldTimeInRd
                        }

                        # Rule 9: Peers with all ingress routes dropped
                        $BgpPeersAllIngressRoutesDroppedInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersAllIngressRoutesDropped -RoutingDomain $RoutingDomain)
                        if($BgpPeersAllIngressRoutesDroppedInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.AllIngressRoutesRejected = $true
                            $RoutingProtocols.BGP.AllIngressRoutesRejectedPeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersAllIngressRoutesDroppedInRd
                        }

                        #Rule 10: Peers with all egress routes dropped
                        $BgpPeersAllEgressRoutesDroppedInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersAllEgressRoutesDropped -RoutingDomain $RoutingDomain)
                        if($BgpPeersAllEgressRoutesDroppedInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.AllEgressRoutesRejected = $true
                            $RoutingProtocols.BGP.AllEgressRoutesRejectedPeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersAllEgressRoutesDroppedInRd
                        }

                        # Rule 11: Manual Mode peers
                        $BgpPeersManualModeInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersManualMode -RoutingDomain $RoutingDomain)
                        if($BgpPeersManualModeInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.ManualModePeers = $true
                            $RoutingProtocols.BGP.ManualModePeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersManualModeInRd
                        }

                        # Rule 12: IPv6 peers with IPv4 custom routes
                        $BgpPeersIPv6WithIPv4CustomRoutesInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersIPv6WithIPv4CustomRoutes -RoutingDomain $RoutingDomain)
                        if($BgpPeersIPv6WithIPv4CustomRoutesInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.IPv6PeersWithIPv4CustomRoutes = $true
                            $RoutingProtocols.BGP.IPv6PeersWithIPv4CustomRoutesPeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersIPv6WithIPv4CustomRoutesInRd
                        }

                        #Rule 13: High Idle hold time 
                        $BgpPeersHighIdleHoldTimeInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersHighIdleHoldTime -RoutingDomain $RoutingDomain)
                        if($BgpPeersHighIdleHoldTimeInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.IdleHoldTimeSecHighValue = $true
                            $RoutingProtocols.BGP.IdleHoldTimeSecHighValuePeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersHighIdleHoldTimeInRd
                        }

                        #Rule 14: Peers without Max Prefix Limit
                        $BgpPeersWithoutMaxPrefixLimitInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersWithoutMaxPrefixLimit -RoutingDomain $RoutingDomain)
                        if($BgpPeersWithoutMaxPrefixLimitInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.PeersWithoutMaxPrefixLimit = $true
                            $RoutingProtocols.BGP.PeersWithoutMaxPrefixLimitNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersWithoutMaxPrefixLimitInRd
                        }

                        #Rule 15: Peers for which routes learned are near max prefix limit
                        $BgpPeersWithRoutesNearMaxPrefixLimitInRd = @(Get-ObjectsInRoutingDomain -Objects $BgpPeersWithRoutesNearMaxPrefixLimit -RoutingDomain $RoutingDomain)
                        if($BgpPeersWithRoutesNearMaxPrefixLimitInRd.Count -gt 0)
                        {
                            $RoutingProtocols.BGP.PrefixCountNearMaxLimit = $true
                            $RoutingProtocols.BGP.PrefixCountNearMaxLimitPeerNames = Get-CommaSeperatedBgpPeerNames -Peers $BgpPeersWithRoutesNearMaxPrefixLimitInRd
                        }
                    }

                    $RoutingDomainBpa.RoutingProtocolsConfigured = $True
                    $RoutingDomainBpa.RoutingProtocols = $RoutingProtocols
                }

                if($RoutingDomainBpa.S2SEnabled -eq $True)
                {
                    $RoutingDomainBpa.S2S = New-Object RRASServiceConfig.S2S


                    $S2SInterfacesWithCertificateAboutToExpireInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithCertificateAboutToExpire -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithCertificateAboutToExpireInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.S2SInterfacesWithCertificateAboutToExpire = $true
                        $RoutingDomainBpa.S2S.S2SInterfacesWithCertificateAboutToExpireList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithCertificateAboutToExpireInRd
                    }

                    $S2SInterfacesWithoutRootCertificateInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithoutRootCertificate -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithoutRootCertificateInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.S2SInterfacesWithoutRootCertificate = $true
                        $RoutingDomainBpa.S2S.S2SInterfacesWithoutRootCertificateList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithoutRootCertificateInRd
                    }

                    $S2SInterfacesWithRootCertificateAboutToExpireInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithRootCertificateAboutToExpire -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithRootCertificateAboutToExpireInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.S2SInterfacesWithRootCertificateAboutToExpire = $true
                        $RoutingDomainBpa.S2S.S2SInterfacesWithRootCertificateAboutToExpireList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithRootCertificateAboutToExpireInRd
                    }

                    $S2SInterfacesWithInvalidNameForEAPInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithInvalidNameForEAP -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithInvalidNameForEAPInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.EAPBasedS2SInterfacesWithInValidName = $True
                        $RoutingDomainBpa.S2S.EAPBasedS2SInterfacesWithInvalidNameList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithInvalidNameForEAPInRd
                    }

                    $S2SInterfacesWithDefaultRateLimitingParamsInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithDefaultRateLimitingParams -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithDefaultRateLimitingParamsInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.DefaultRateLimitingParams = $true
                        $RoutingDomainBpa.S2S.DefaultRateLimitingParamsList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithDefaultRateLimitingParamsInRd
                    }

                    $S2SInterfacesWithInValidRateLimitingParamsInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithInValidRateLimitingParams -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithInValidRateLimitingParamsInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.S2SInterfacesWithInValidRateLimitingParams = $True
                        $RoutingDomainBpa.S2S.S2SInterfacesWithInValidRateLimitingParamsList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithInValidRateLimitingParamsInRd
                    }

                    $S2SInterfacesWithInvalidDestinationsForPSKInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithInvalidDestinationsForPSK -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithInvalidDestinationsForPSKInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.PSKBasedS2SInterfacesWithInvalidDestination = $true
                        $RoutingDomainBpa.S2S.PSKBasedS2SInterfacesWithInvalidDestinationList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithInvalidDestinationsForPSKInRd
                    }
                   
                    if($MultiplePublicIps)
                    {
                        $S2SInterfacesWithoutSourceIpInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithoutSourceIp -RoutingDomain $RoutingDomain)
                        if($S2SInterfacesWithoutSourceIpInRd.Count -gt 0)
                        {
                            $RoutingDomainBpa.S2S.S2SInterfacesRequireSourceIpConfiguration = $True
                            $RoutingDomainBpa.S2S.S2SInterfacesRequireSourceIpConfigurationList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithoutSourceIpInRd 
                        }
                    }
                    
                    $S2SInterfacesWithCustomPolicyDiffFromGlobalPoliciesInRd = @(Get-ObjectsInRoutingDomain -Ob $S2SInterfacesWithCustomPolicyDiffFromGlobalPolicies -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithCustomPolicyDiffFromGlobalPoliciesInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.S2SInterfacesWithCustomPolicyDiffFromGlobalPolicies = $True
                        $RoutingDomainBpa.S2S.S2SInterfacesWithCustomPolicyDiffFromGlobalPoliciesList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithCustomPolicyDiffFromGlobalPoliciesInRd
                    }

                    $S2SInterfacesWithoutTriggeringRoutesInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithoutTriggeringRoutes -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithoutTriggeringRoutesInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.S2SInterfacesWithoutTriggeringRoute = $True
                        $RoutingDomainBpa.S2S.S2SInterfacesWithoutTriggeringRouteList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithoutTriggeringRoutesInRd
                    }
                    
                    $S2SInterfacesWithoutHostTriggeringRoutesInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithoutHostTriggeringRoutes -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithoutHostTriggeringRoutesInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.S2SInterfacesWithoutHostTriggeringRoute = $True
                        $RoutingDomainBpa.S2S.S2SInterfacesWithoutHostTriggeringRouteList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithoutHostTriggeringRoutesInRd
                    } 
                }        

                # For Rules Specific to BGP and S2S Deployment
                if(($BgpConfigured -eq $True) -and ($RoutingDomainBpa.S2SEnabled -eq $True))
                {
                    $S2SInterfacesWithoutHostTriggeringRoutesInRd = @(Get-ObjectsInRoutingDomain -Objects $S2SInterfacesWithoutHostTriggeringRoutes -RoutingDomain $RoutingDomain)
                    if($S2SInterfacesWithoutHostTriggeringRoutesInRd.Count -gt 0)
                    {
                        $RoutingDomainBpa.S2S.S2SInterfacesWithoutHostTriggeringRoute = $True
                        $RoutingDomainBpa.S2S.S2SInterfacesWithoutHostTriggeringRouteList = Get-CommaSeperatedS2SInterfaceNames -S2SInterfaces $S2SInterfacesWithoutHostTriggeringRoutesInRd
                    }
                }

                # For Rules specific to BGP and VPN Deployment
                if(($BgpConfigured -eq $True) -and ($RoutingDomainBpa.VpnEnabled -eq $True))
                {

                }
            }
            $RoutingDomainsBpa += $RoutingDomainBpa
        }
        return @($RoutingDomainsBpa)
    }
}

#endregion Function to generate RoutingDomain objects for BPA

Youez - 2016 - github.com/yon3zu
LinuXploit