2010 S2 CVEN 2101 - Wk 9-2 (2 slides)
CVE-2010-3333漏洞分析
CVE-2010-3333的漏洞分析实验环境:win xp+word 2003+Ollydbg打开poc就可以看到万能跳转(jmp esp)地址的存在。
如图1所示。
图1那么该漏洞的调试就可以从这个地址入手了。
打开OD后,载入winword.exe,ctrl+g给7ffa4512下断点。
如图2所示图2找到该地址后,由于该地址的特殊性,只能给它下硬件断点。
随后按下F9执行该程序。
几秒后,打开了word.exe程序,然后点击“文件”->“打开”,载入我们的POC。
程序停在了我们所设置断点的地方,如图3所示。
图3这是我们可以观察寄存器的值,很明显是发生了溢出才导致了这些不正常值的出现。
按F8单步执行下去后,我们就可以看到程序跳进了shellcode区域去执行。
这个时候我们观察栈区的数据,或许可以发现程序的调用。
图4从图4中可以看出,在跳转到jmp esp地址之前,word程序调用了mso模块中的地址为:30f4ccb1的函数,难道就是该函数发生了问题??我们在此地址下下断点,来看看!如图5图5找到该地址,然后下断点。
然后重新载入该程序。
图6果断程序妥妥的停在了我们刚设置断点的地址,如图6。
这个时候,我们继续观察战中的变化,看shellcode是否已经被copy到栈区。
图7从图7中可以看到,shellcode已经被拷贝到了栈区,那么也就是说明溢出的过程和这个函数无关。
我们只能继续往上寻找,查找在调用这个函数之前是哪个函数出了问题。
这个时候我们发现,在它上面有个函数调用,难道是这个函数的问题?图8为了验证图8中的问题,我们对该函数调用的任意一行指令下断点。
看那时候栈区的情况,如图9。
图9然后重新载入程序。
图10同样,在此时,栈区数据又已经被shellcode所覆盖.如图10。
没办法,我们只能继续往上走。
我将断点设置在此处,如图11。
图11重新载入程序后运行。
然后我们发现发现这个时候shellcode并未覆盖该栈区。
2102文档
21021. General descriptionThe SSL2102 is a Switched Mode Power Supply (SMPS) controller IC that operates in combination with a phase cut dimmer directly from rectified mains. It is designed to driveLED devices. The device includes a high-voltage power switch and a circuit to allow direct start-up from the rectified mains voltage. Furthermore the device includes high-voltage circuitry to supply the phase cut dimmer.For dimmer applications, integrated dedicated circuitry optimizes the dimming curve.SSL2102是一个开关电源(电子)控制电路,设有结合阶段切直接从纠正调电源。
它是用来驱动LED器件。
该装备包括一个高压电源开关和一个电路回路,来实现整流电源电压的直接启动。
此外,本装置还包括高压电路,能够逐步调节亮度。
对于调光器的应用,有综合和专用的电路来完善调变曲线。
2. Features⏹ Easy migration to existing lighting control infrastructure, TRIAC and transistor dimmers⏹ Supports majority of available dimming solutions⏹ Valley switching efficiency is optimized by dedicated built-in circuitry⏹ Built-in demagnetization detection⏹ The IC has Over Temperature Protection (OTP) built-in⏹ Short-Winding Protection (SWP) and Over Current Protection (OCP)⏹ The IC has internal V CC generation that allows start-up from rectified mains voltage⏹ Natural dimming curve by logarithmic correction⏹ Limited external components required due to high integration level⏹ Thermal enhanced SO20 wide body package.易迁移到现有的照明控制基础设施,TRIAC和晶体管调光器支持大部分的可用调光措施有专用内置电路对Valley转换效率进行了优化内置的退磁检测集成电路有内置过温度保护(网)绕组短路保护及电流过载流保护(OCP)。
SSL2101
最初,IC从经过整流的市电电压上自行供电。一旦管脚VCC上的电压超过VCC(启动) 电平,IC马上开始切换,来自市电电压的供电停止,变压器的辅助绕组能够马上接管 供电,以实现高效率工作。或者,IC也能通过连接到高压的泄放电阻器来供电。不过, 需要注意IC的最大VCC电压额定值。 如果由于某些原因使得辅助电源不够用,那么高压电源也能给IC供电。一旦管脚VCC 上的电压下降到低于VCC(UVLO)电平,且内部提供的电流足够,IC会马上停止切换并 重新开始从经过整流的市电电压上供电。
-0.4 -0.4
-0.4 -0.4 -20 -10
-2 -2 0 0
+40
V
+3
V
+3
V
+5V+5来自V+5V
+600 V
+600 V +600 V
+5
mA
+5
mA
+2
A
+2
A
40
mA
25
mA
总的功率损耗 贮存温度 环境温度 结点温度 静电放电电压
Tamb=70 C
人体模型;[1] 管脚16,1,2 所有其它管脚
8.2 振荡器
IC内部振荡器为开关转换器逻辑提供计时。
振荡器的频率由管脚RC和管脚RC2上的外部电阻器和电容器设定。外部电容器被快 速充电到VRC(最大)电平;然后,从新的初级励磁开始,它放电到VRC(最小)电平。 因为放电是指数关系,所以在低占空比时,占空比对调节电压的相对敏感度几乎等于 高占空比时的敏感度。与具有线性锯齿振荡器的PWM系统相比,这在占空比范围内 导致了比较恒定的增益。在低占空比下的稳定操作容易实现。当V亮度高时,可以使用 公式1来估计转换器的频率:
8.9 过温保护
ReOS V10.3版本介绍
功能变化 功能描述
动态端口(LAN、WAN口互换) 会话收集(NAT会话日志、HTTP及MAIL日志、网页日 志)
备注
仅510与520支持 仅网安系列支持,与安 装有艾泰自主研发的 Xport HiPER Manager软 件的SYSLOG服务器合用
行为管理(增加5款股票软件管理、1款IM软件管理、 所有型号 6款P2P软件管理、2款游戏软件管理、2个游戏网站。) QQ白名单配置数量与该型号产品允许IP/MAC绑定的最 所有支持QQ白名单的型 大数量一致 号 增加DNS服务器地址 增加支持PPPoE计费功能的型号 所有型号 商睿系列支持PPPoEServer功能的型号
行为管理-皮皮影视
禁止频道的搜索
资讯窗口还可以弹出, 点击窗口的播放链接, 还能看视频
行为管理-风行影视
禁止资源的搜索,对已有的资源无法禁止
行为管理-电驴
只能禁止官网资源的搜索
对已有的资源下载无法禁止
QQ白名单
在 上网管理 -> QQ白名单页面,调整各个产品型号允许配置的QQ白名单数。 QQ白名单允许配置的数量为该型号产品允许IP/MAC绑定的最大数量。 以网安UTT3640为例: IP/MAC绑定的最大数量是350个,QQ白名单允许配置的数量也是350个。
升级说明
VSTART V10.3、2008 V10.3 时: HiPER 4210G、HiPER 4240G、HiPER 4521、HiPER 4840必须先升级到 ReOS V10.3过渡版本,UTT 3640必须先升级到2008pV2版本,然后在该 版本的基础上升级到ReOS V10.3的正式版本。(从ReOS V10.3版本可以直 接降回到之前版本,建议降级之前先保存配置。) 2008pV2、2009、V10、V10.1、V10.2 V10.3 时: 可以直接升级
“极光”扫描操作系统漏洞
绿盟科技“极光”远程安全评估系统评估报告 (10.144.171.213) 1 综述2 端口漏洞列表允许ICMP timestamp远端HTTP服务器类型和版本信息泄漏DCE/RPC可通过NetBIOS名字服务端口远程获取系统信息远程注册表可通过通过检测到目标主机上管理员组帐号存在简单口令目标主机没有安装目标主机没有安装目标主机没有安装Microsoft DirectShow MPEG2TuneRequestMicrosoft IE目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装MicrosoftMicrosoft IE CSSMicrosoft IE Tabular Data Control ActiveXMicrosoft IEMicrosoft IEMicrosoft IE onreadystatechangeMicrosoft IEMicrosoft IEOutlook ExpressWindowsMicrosoftMicrosoft IEMicrosoft Windows SChannel Microsoft WindowsMicrosoft IE CSSMicrosoft Windows目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装Microsoft Windows WINS Server Microsoft Windows Print Spooler目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装Microsoft Windows EOTMicrosoft WindowsMicrosoft Windows #GP猜测出远程可登录的存在可写共享目录目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机尚未安装目标主机没有安装目标主机没有安装目标主机没有安装Microsoft Windows win32k.sysMicrosoft Windows win32k.sys Microsoft Windows win32k.sys Microsoft Windows xxxCreateWindowEx()MicrosoftMicrosoft IEMicrosoft Windows Win32k.sys Microsoft Windows OTFMicrosoftMicrosoft Windows DHTMLWindowsMicrosoft Windows SearchMicrosoft目标主机没有安装目标主机没有安装目标主机没有安装利用可通过空会话访问远程主机利用主机主机利用利用远程注册表可通过利用利用利用利用利用利用利用存在口令永不过期的帐号存在从未成功登录过的本地帐号存在被禁用的帐号利用利用目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装Microsoft IEMicrosoft IE Anchor可以获取远端Windows非本地登录的用户能够共享访问非本地登录的用户能够共享访问软盘未设置策略设置了用户信任证书缓存策略Windows主机未启用策略目标主机存在Conficker蠕虫漏洞【精确扫描】Microsoft Windows远程桌面协议中间人攻击漏洞检测到远端绿盟科技“极光”远程安全评估系统评估报告(10.144.171.217)1 综述允许ICMP timestamp远端HTTP服务器类型和版本信息泄漏DCE/RPC服务器服务正在运行通过远程注册表可通过检测到目标主机上管理员组帐号存在简单口令Microsoft DirectShow MPEG2TuneRequest目标主机没有安装目标主机没有安装Microsoft IEMicrosoft IE CSSMicrosoft IEMicrosoft IEMicrosoftMicrosoft IEMicrosoft IEMicrosoft IE onreadystatechange目标主机没有安装Outlook Express目标主机没有安装目标主机没有安装目标主机没有安装WindowsMicrosoft Windows SChannelMicrosoft WindowsMicrosoft WindowsMicrosoft目标主机没有安装目标主机没有安装Microsoft IE CSSMicrosoft IE Tabular Data Control ActiveXMicrosoft IE目标主机没有安装目标主机没有安装目标主机没有安装Microsoft Windows WINS ServerMicrosoft Windows Print Spooler目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装Microsoft Windows EOTMicrosoft WindowsMicrosoft Windows #GP目标主机没有安装Microsoft IE目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机尚未安装目标主机没有安装Microsoft Windows win32k.sys Microsoft Windows win32k.sys Microsoft Windows win32k.sys Microsoft Windows xxxCreateWindowEx()MicrosoftMicrosoft Windows Win32k.sys Microsoft Windows OTF目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装存在可写共享目录猜测出远程可登录的Microsoft Windows DHTMLMicrosoftMicrosoft Windows SearchWindowsMicrosoft IE AnchorMicrosoft IEMicrosoft目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装利用存在从未成功登录过的本地帐号存在口令永不过期的帐号存在被禁用的帐号利用利用主机远程注册表可通过利用利用利用利用利用利用利用利用利用主机利用可通过空会话访问远程主机可以获取远端Windows未设置策略设置了用户信任证书缓存策略非本地登录的用户能够共享访问软盘主机未启用策略非本地登录的用户能够共享访问Windows目标主机存在Conficker蠕虫漏洞【精确扫描】检测到目标主机上运行着Windows终端服务ApacheApache Tomcat WAR远端检测到远端绿盟科技“极光”远程安全评估系统评估报告(10.144.171.216)1 综述2端口漏洞列表允许ICMP timestamp远端HTTP服务器类型和版本信息泄漏DCE/RPC服务器服务正在运行检测到目标主机上管理员组帐号存在简单口令远程注册表可通过通过Microsoft DirectShow MPEG2TuneRequest目标主机没有安装目标主机没有安装目标主机没有安装Microsoft IEMicrosoft IE CSSMicrosoft IEMicrosoftMicrosoft IEMicrosoft IEMicrosoft IE onreadystatechangeMicrosoft IE目标主机没有安装Outlook Express目标主机没有安装目标主机没有安装目标主机没有安装WindowsMicrosoft Windows SChannelMicrosoft WindowsMicrosoft WindowsMicrosoft目标主机没有安装目标主机没有安装Microsoft IE CSSMicrosoft IE Tabular Data Control ActiveXMicrosoft IE目标主机没有安装目标主机没有安装目标主机没有安装Microsoft Windows WINS ServerMicrosoft Windows Print Spooler目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装Microsoft Windows EOTMicrosoft WindowsMicrosoft Windows #GPMicrosoft IE目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机尚未安装目标主机没有安装Microsoft Windows win32k.sysMicrosoft Windows win32k.sysMicrosoft Windows win32k.sysMicrosoft Windows xxxCreateWindowEx()MicrosoftMicrosoft Windows Win32k.sys Microsoft Windows OTF目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装猜测出远程可登录的存在可写共享目录Microsoft Windows DHTML MicrosoftMicrosoft Windows Search WindowsMicrosoft IEMicrosoft IE Anchor利用Microsoft目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装利用主机利用利用利用利用可通过空会话访问远程主机利用存在从未成功登录过的本地帐号存在口令永不过期的帐号存在被禁用的帐号利用利用主机远程注册表可通过利用利用利用利用Windows非本地登录的用户能够共享访问主机未启用策略非本地登录的用户能够共享访问软盘可以获取远端Windows未设置策略设置了用户信任证书缓存策略远程主机的LDAP服务允许匿名查询目标主机存在利用利用利用Microsoft WindowsWindows检测到目标主机上运行着检测到远端NetBackup正在运行中绿盟科技“极光”远程安全评估系统评估报告(10.144.171.240)1 综述2 端口漏洞列表允许ICMP timestamp远端HTTP服务器类型和版本信息泄漏DCE/RPC可通过NetBIOS名字服务端口远程获取系统信息可通过空会话访问远程主机利用利用可以获取远端利用SMB会话可以获取RDR所管理的传输层协议信息远端远程Microsoft Windows远程桌面协议中间人攻击漏洞检测到远端NetBackup正在运行中绿盟科技“极光”远程安全评估系统评估报告(10.144.171.233)1 综述2 端口漏洞列表ICMP timestamp允许微软DCOM接口缓冲区溢出漏洞(MS03-026/MS03-039)服务器服务正在运行可通过工作站服务正在运行Windows Browser检测到目标主机上管理员组帐号存在简单口令目标主机没有安装MS04-011/KB835732补丁目标主机没有安装MS05-053/KB896424补丁多个图形处理安目标主机没有安装MS08-032/KB950760补丁WindowsMicrosoft Windows Server利用利用利用Oracle数据库PITRIG_DROPMETADATA过程远程溢出漏洞检测到目标主机上运行着Microsoft WindowsWindows绿盟科技“极光”远程安全评估系统评估报告(10.144.171.239)1 综述2 端口漏洞列表允许ICMP timestampDCE/RPC服务器服务正在运行可通过空会话访问远程主机利用利用可以获取远端利用SMB会话可以获取RDR所管理的传输层协议信息Microsoft SQL Server 2000Microsoft SQL ServerMS SQL Server远端HTTP服务器类型和版本信息泄漏Microsoft WindowsWindows检测到目标主机上运行着检测到远端绿盟科技“极光”远程安全评估系统评估报告(10.144.171.247)1 综述2 端口漏洞列表允许ICMP timestamp远端DCE/RPC服务器服务正在运行检测到目标主机上管理员组帐号存在简单口令远程注册表可通过通过Microsoft IE目标主机没有安装目标主机没有安装目标主机没有安装Microsoft DirectShow MPEG2TuneRequestMicrosoft IE CStyleSheetMicrosoft IEMicrosoft IE CSSMicrosoft IEMicrosoft IE onreadystatechangeMicrosoft IEMicrosoft IEMicrosoft IEMicrosoft IE CSSMicrosoft IE Tabular Data Control ActiveX目标主机没有安装目标主机没有安装MicrosoftMicrosoft WindowsMicrosoft WindowsWindowsMicrosoft Windows SChannelOutlook Express目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装Microsoft Windows Print SpoolerMicrosoft Windows WINS Server目标主机没有安装目标主机没有安装目标主机没有安装Microsoft WindowsMicrosoft Windows #GPMicrosoft Windows EOT目标主机没有安装目标主机没有安装目标主机没有安装Microsoft IE目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装Microsoft Windows OTFMicrosoft Windows Win32k.sysMicrosoftMicrosoft Windows xxxCreateWindowEx() Microsoft Windows win32k.sys Microsoft Windows win32k.sys Microsoft Windows win32k.sys目标主机尚未安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装存在可写共享目录猜测出远程可登录的Microsoft Windows Workstation Microsoft Windows DHTMLMicrosoft Windows SearchWindowsMicrosoft IE Anchor Microsoft IE目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装目标主机没有安装Microsoft利用利用主机利用利用利用利用利用利用利用利用远程注册表可通过存在从未成功登录过的本地帐号存在口令永不过期的帐号存在被禁用的帐号利用利用主机利用可通过空会话访问远程主机Windows非本地登录的用户能够共享访问主机未启用策略未设置策略设置了用户信任证书缓存策略非本地登录的用户能够共享访问软盘Windows可以获取远端IMAP服务信息可被获取目标主机存在利用利用利用检测到目标主机上运行着Windows终端服务。
VigorACS 2 Quick Start Guide
V i g o r A C S2U n i f i e d M a n a g e m e n t S y s t e mManual Version: 1.0Software Version: V2.3.1Date: August 17, 2018Table of Contents1. Platform for Windows 7 or 10 (5)1.1 Installation for Java (5)1.2 Installation for MariaDB (9)1.3 Installation for VigorACS 2 (14)1.4 StartMySQL/MariaDB Databse (23)1.5 Start VigorACS (23)2. Platform for Linux (25)2.1 Installation for MariaDB, Java and VigorACS (25)2.2 Start MySQL/MariaDB Databse (31)2.3 Start VigorACS (31)2.4 Edit VigorACS IP (31)3. Registering VigorACS 2 (32)3.1 Registration for VigorACS via Windows Platform (32)4. Configuration on CPE Device (37)4.1 Set ACS URL on CPE (37)4.2 Invoke Remote Management for CPE (39)4.3 Enable WAN Connection on CPE (40)5. Troubleshooting (42)1.P l a t f o r m f o r W i n d o w s7o r10Please follow the procedure listed below to install VigorACS 2 completely. The installation for different platforms might be different.T o start up the VigorACS, the normal procedure is listed as follows:(I)Installation for Java(II)Installation for MariaDB(III)Installation for VigorACS 2(IV)Start MySQL/MariaDB Database.(V)Edit VigorACS IP.(VI)Start VigorACS.Info VigorACS 2 can be operated only by a host with 64-bit operation system.1.1I n s t a l l a t i o n f o r J a v a1.Install Java by clicking “java-1.8.0-openjdk-1.8.1.151-1.b12…” to execute the installation.2.The first page will be shown as follows. Click Next to get into next page.3.Then, check “I accept the terms…” and click the Next button.4.In this page, optional features will be listed for you to specify the destination folder forJAVA driver installation. Choose the one you need and click Next.5.In the following page, just click Install.6.Wait for a while to install the required features.7.When the following page appears, the installation is completed. Click Finish to exit theinstalling program.1.2I n s t a l l a t i o n f o r M a r i a D B1.Install MariaDB by clicking “mariadb-10.2.10-winx64” (based on your PC condition) it toexecute the installation.2.When the welcome screen appears, please click Next for next step.3.On this dialog box, check the box of “I accept the terms….” and click Next.4.Select the way for the features to be installed. Then click Next.5.If you want to configure password for MariaDB server, please check Modify password… andtype the password. It depends on your request. Otherwise, simply click Next.6.Modify the default instance properties if required. Then click Next.7.On this dialog box, click Next.8.On this dialog box, click Install.9.The installation program starts to install required files for MariaDB to your computer. Waitfor several seconds.10.After finishing the configuration, please click Finish to exit the wizard.1.3I n s t a l l a t i o n f o r V i g o r A C S2It is time to install VigorACS main program. Follow the steps below.1.Click Setup to run VigorACS 2 setup wizard.2.When the following dialog appears, choose Local Database / Remote Database and clickNext.3.Select the directory that MariaDB being installed (done in 1.2) and click Next4.In this dialog box, choose Rebuild Database (for rebuilding the VigorACS database) orUpgrade Database (for upgrading the database). For the first time using, please choose Rebuild Database. Then click Next.5.Click Next. If you have configured MySQL/MariaDB previously and specified password for it,you have to type the password in this page and then click Next.6.Set the maximum memory and minimum memory. Click Next.7.Setup ACS HTTP and HTTPS port, we'll suggest using others port instead of default 80 and443 port to prevent conflict.Info The port number defined here will be used for opening VigorACS later.8.Determine the home path and click Next. The default directory used by this program isC:\Users. You can modify it if you want and please make sure the length of directory is not over 100 characters, otherwise you might encounter problem of VigorACS in installation.9.Determine the destination folder and click Next. The default directory used by thisprogram is C:\Program Files\VigorACS. You can modify it if you want and please make sure the length of directory is not over 100 characters, otherwise you might encounter problem of VigorACS in installation.10.Determine the start menu folder and click Next. The default directory used by thisprogram is VigorACS. You can modify it if you want and please make sure the length of directory is not over 100 characters, otherwise you might encounter problem of VigorACS in installation.11.In this dialog, check the box of “Create a desktop shortcut” for your necessity. Click Next.12.Now, the program is ready to install necessary features and files to your computer. Pleaseclick Install to start.13.Please wait for a while to complete the installation.14.While installing, the following screen will appear to show that MariaDB has been activated.Please wait for next dialog appearing.15.Now the program has completed the installation of VigorACS 2. Click Finish to exit it.1.4S t a r t M y S Q L/M a r i a D B D a t a b s eAfter installing VigorACS, install program will register MySQL/MariaDB to Windows Service.MySQL /MariaDB will startup automatically after installing VigorACS or rebooting system.Normally, you don't need to worry about this step on Windows. But if you find any problems on VigorACS, you should check mysql/mariadb first. Please go to Windows Service check theMySQL/MariaDB Service starts or not.1.5S t a r t V i g o r A C S1.Login VigorACS. Use a web browser and type “localhost:portnumber”. Note that the portnumber must be the one defined for HTTP and HTTPS port while installing VigorACS. Forexample, if HTTPS is defined as 8011, then the URL will be “localhost:8011”.2.The login page of VigorACS will be shown as the following. Please type “root” as user nameand “admin123” as password and type the authentication code. Then click Login.3.For the first time to access into the web user interface, a warning message appears first.Please click the Change password button to change the default password for networksecurity. If not, click Cancel to access into the web user interface of VigorACS and changethe password later.4.After clicking Login, main screen of VigorACS 2 will be shown as below.2.P l a t f o r m f o r L i n u xT o start up the VigorACS under Linux, please execute"/usr/local/vigoracs/VigorACS/bin/vigoracs.sh" instruction. A list of menu items will be shown as follows.1.Start mysql/mariadb2.Shutdown mysql/mariadb3.Start VigorACS4.Shutdown VigorACS5.Edit bind IP of VigorACS Server (please key in IP or server name)6.Set the Max. and Min. memory value of running java (it will be valid after restartingVigorACS)7.View the Max. and Min. memory value of running java8.exit2.1I n s t a l l a t i o n f o r M a r i a D B,J a v a a n d V i g o r A C SFollow the steps listed below to install VigorACS under Linux:1.Login Linux with root or the root privilege.2.Download the ACS installation tar.bz2 package and extract it via below command:#bzip2 -cd VigorACS_Unix_Like_xxxxxx_xxxxx.tar.bz2 | tar xvf -or#tar -jxv -f VigorACS_Unix_Like_xxxxxx_xxxxx.tar.bz23.Decompress the setup packagesbzip2 -cd VigorACS_Unix_Like_xxxxxx_xxxxx.tar.bz2 |tar xvf –4.Change the permissions mode of install.sh and uninstall.sh.chmod 755 install.shchmod 755 uninstall.sh5.Execute ./install.sh installation file.Please make sure you have /usr/bin/sh first. If you don't have /usr/bin/sh, please enter the command:#ln -s /bin/sh /usr/bin/sh6.The system will ask to create vigoracs, enter “y” to proceed.7.Next, the system will ask you to install xfonts-base and fontconfig, just enter “y” toproceed.8.Next, please select the item number which you want to execute. Note that VigorACSsupports Linux OS. The program will detect the system you have in your computer.(1) Install mysql/mariadb(2) Change root password and security configuration of mysql/mariadb(3) Install or Upgrade java(4) Install VigorACS(5) Upgrade VigorACS(6) Redirect the database path of VigorACS to remote host (7) Exitinput select num:InfoIf your computer has installed MariaDB and java previously, ignore theinstallation of them. Otherwise, install all the required items (MariaDB, Java and VigorACS) for your system. Item number 5 is used to upgrade VigorACS, so it is not necessary for you to execute for the first time of installation.9. Input 1 to install MariaDB first. Notice that it will setup blank as default password. You canchange the password by using the following command.#/usr/local/mysql/bin/mysqladmin--defaults-file=/usr/local/mysql/f -u root password 'newpassword'InfoThe password configured by the command above will be effective onlywhen there is no password set for database root before.Follow the instructions on the screen to finish the MariaDB installation.ter, input 2 to change root password and security configuration of mysql/mariadb.Info The password set in this step is used for VigorACS 2 to login database.11.Input 3 to install Java.Follow the instructions on the screen to finish the Java installation.12.Input 4 to install VigorACS. It is suggested to use ACS customized MariaDB database. Whenasked to enter MariaDB password, press “Enter” if you haven’t changed the password via the command. Then, confirm that TR-069 database has been installed successfully.Wait and follow the instructions on the screen to finish the installation.13. Now, input 6 to redirect the database path of VigorACS to remote host. For remotedatabase, please execute such step on remote host.14. Input 7 to finish and exit the installation.Info 1 Step 13 is required for establishing remote database only . You can ignore it while building local database.Info 2T o prevent port conflicts, we'll suggest that using other ports for HTTP and HTTPS instead of default 80 and 443.2.2S t a r t M y S Q L/M a r i a D B D a t a b s eAfter installing VigorACS, mysql/mariadb daemon has started. You can to see it using "ps-ef|grep mysql" instruction. Use the menu item 1 / 2 to start / shutdown mysql/mariadb.2.3S t a r t V i g o r A C SAfter installing VigorACS, access “/usr/local/vigoracs/VigorACS/bin”, execute “./vigoracs.sh”.Select item 3 to start VigorACS.If you ever reboot the machine after installing VigorACS, just select item 1 to startmysql/mariadb first. Then, select item 3 to start VigorACS.2.4E d i t V i g o r A C S I PWhen starting the VigorACS at first time on Linux, startup program will ask you input Server IP or input Enter key by using the IP address of the host. Once you input the IP address, VigorACS will keep it on startway.txt. Next time, if you want to change it, you can select item 5 to editstartway.txt using vi editor.3. R e g i s t e r i n g V i g o r A C S 2For the first time to activate VigorACS 2, the system will ask you to register VigorACS 2 onto DrayT ek MyVigor server . Refer to the following sections to register VigorACS 2 on differentplatforms.Info 1 While installing VigorACS, install program will register MySQL/MariaDB toWindows Service. MySQL/MariaDB will startup automatically after installingVigorACS or rebooting system. Normally , you don't need to worry about this step on Windows. But if you find any problems on VigorACS, you should checkmysql/mariadb first. Please go to Windows Service check the MySQL/MariaDB Service starts or not.Info 2After installing VigorACS, the software will startup automatically . Normally ,you don't need to worry about this step on Windows. But, if you find any problem on VigorACS, you could shut down VigorACS and start VigorACS again. 3.1 R e g i s t r a t i o n f o r V i g o r A C S v i a W i n d o w s P l a t f o r mBelow shows the steps to register VigorACS 2:1. Login VigorACS. Use a web browser and type “localhost:portnumber”. Note that the portnumber must be the one defined for HTTP and HTTPS port while installing VigorACS. For example, if HTTPS is defined as 8011, then the URL will be “localhost:8011”.2. The login page of VigorACS will be shown as the following. Please type “root” as user nameand “admin123” as password and type the authentication code. Then click Login.Info“root” and “admin123” are default settings.3. A License Error dialog appears as follows. Simply click Active.4. A login page for MyVigor web site will be popped up automatically . Type your account (username) and password in this page. Then, click Login.InfoIf you do not have any account, simply click Create an account now to create a new one for using the service provided by MyVigor web site.5.MyVigor will verify and authenticate if the user account you typed is allowed to access intothe web site. If yes, the following screen will appear.6.Type a nickname for VigorACS and click Add.7.After clicking Add, you can see the following screen. Click OK.8.You will get a device information page as shown below. If you are the new user of VigorACS,you can get a free charge of 30-day service of VigorACS. Simply click the Trial button.9.From the following screen, check the box of “I have read and accept the above….” andclick Next.10.In the page below, click Register.11.When the VigorACS License Information page appears, the service is ready for you to use.Click Login to ACS to use VigorACS service.12.The login page will appear as follows. Type the default settings of User Name (root) andPassword (admin123) and type the authentication code. Then, click Login.13.Now, the main screen of VigorACS will be shown as follows.4.C o n f i g u r a t i o n o n C P E D e v i c e4.1S e t A C S U R L o n C P ET o manage CPEs through VigorACS, you have to set ACS URL on CPE first and set username and password for VigorACS.1.Connect one CPE (e.g., Vigor2862 series).2.Open a web browser (for example, IE, Mozilla Firefox or Netscape) on your computer andtype http://192.168.1.1.3.Please type username and password on the window. If you don’t know the correctusername and password, please consult your dealer to get them. In this section, we takethe figures displayed on Windows as examples.4.Go to System Maintenance -> TR-069.•Please set URL as the following and type username and password for ACS server,for the connected CPE with authentication:http://{IP address of VigorACS}:80/ACSServer/services/ACSServlet•Please set URL as the following, for the connected CPE without authentication: http://{IP address of VigorACS}:80/ACSServer/services/UnAuthACSServlet•Please set URL as the following, for the connected CPE with authentication and the data transmission between CPE and VigorACS 2 with encryption (SSL).https://{IP address of VigorACS}:443/ACSServer/services/ACSServlet•Please set URL as the following, for the connected CPE without authentication but the data transmission between CPE and VigorACS 2 with encryption (SSL)https://{IP address of VigorACS}:443/ACSServer/services/UnAuthACSServlet5.Fill Username and Password for VigorACS 2 Server for authentication. Please enter as thefollowing:Username: acsPassword: password6.For the username and password of CPE client, it is not necessary for you to type them.7.Click Enable for Periodic Inform Settings.4.2I n v o k e R e m o t e M a n a g e m e n t f o r C P EYou have to make sure that the CPE device you want to connect supports VigorACS 2 features.Please consult your dealer if you have no idea in it.1.Suppose WAN IP of CPE device has been setup successfully. And you can access into Internetwithout difficulty.2.Login the device (e.g., Vigor2862) by web.3.Go to System Maintenance>>Management.4.Check Allow management from the Internet to set management access control.4.3E n a b l e W A N C o n n e c t i o n o n C P EYou have to make sure the CPE device you want to connect has been configured properly and can access into Internet.1.Login the device (e.g., Vigor2862) by web.2.Open WAN>>Internet Access.3.Choose Static or Dynamic IP as Access Mode and click Details Page for WAN2.4.The following web page appears. Click Enable and Specify an IP address. Enter correctWAN IP address, subnet mask and gateway IP address for your CPE. Then click OK.VigorACS 2 Quick Start Guide41InfoReboot the CPE device and re-log into VigorACS 2. CPE which has registered to VigorACS 2 will be captured and displayed on the home page of VigorACS 2.VigorACS 2 Quick Start Guide42 5. T r o u b l e s h o o t i n gWhen you try to invoke VigorACS 2 and get the following error message, please locate the file of “server .log ” from C:/Program Files/VigorACS/server/default/log and send the file to yourdealer for further assistance.For Linux system, please locate the file of “server .log ” from/usr/local/vigoracs/VigorACS/server/default/log/ and send the file to your dealer for further assistance.。
Ruckus Wireless R710 Access Point Quick Setup Guid
Before deploying Ruckus Wireless products, please check for the latest software and the release documentation. • User Guides and Release Notes are available at
Step 1: Collecting Setup Requirements, Hardware, and Tools
• A computer running Windows 7 (procedures for common operating systems are similar).
• One Cat 5e (or better) Ethernet cable. • A Ruckus Wireless 902-0169-xx00 AC power adapter (sold
included stainless steel clamps, and hand tools to tighten the clamps. Continue with Step 2: Connecting Your Computer to the AP.
Step 2: Connecting Your Computer to the AP
secure mounting bracket kit, then you need an electric drill with 4.75mm (3/16”) drill bits. • If you are mounting the AP on a pipe or pole using the secure mounting bracket kit, then you will also need a 38.1mm to 63.5mm (1.5" to 2.5") pipe or pole, two
cve-2002-20001修复方法
cve-2002-20001修复方法CVE-2002-2001漏洞是一种由Microsoft Internet Information Services(IIS)vyst提供的Web服务器的缺陷造成的安全漏洞。
这种漏洞允许未经授权的用户访问具有特权的Windows资源,甚至在GET,HEAD,POST和利用IIS执行任意脚本中某些操作上实现远程代码执行(RCE)。
CVE-2002-2001漏洞的修复方法主要集中于正确配置IIS服务器以限制客户端对操作系统资源的访问。
有以下几种修正措施可以用来修复CVE-2002-2001漏洞:1、禁用或删除Visual Studio用于发布IIS应用程序的功能,这将禁止客户端操作系统中的服务器端脚本(SSC)的执行。
2、查找IIS服务器中的netid,确认其用于分配访问控制列表(ACL)的ISAPI过滤器。
3、使用访问控制列表(ACL)来更新ISAPI过滤器,以限制可以访问服务器资源的用户,并防止未经授权的访问。
4、更新IIS中的SSL加密配置,确保服务器上的数据传输安全编码,以防止被恶意用户拦截。
5、启用IIS的安全模式,以确保Web应用程序中的脚本代码不可以被执行。
6、禁用操作系统的可写权限,以防止恶意用户上传WEB应用程序。
7、使用限制访问控制列表(ACL)来限制操作系统文件夹的访问权限,以防止恶意用户篡改任意文件以及执行任意脚本。
8、更新操作系统和IIS中的安全补丁,确保操作系统程序不存在任何漏洞,以免被恶意用户利用。
以上就是关于CVE-2002-2001漏洞修复方法的介绍,以正确配置IIS服务器及正确使用访问控制列表(ACL)尤其重要,这样可以有效地防止未经授权的访问和执行任意脚本的漏洞,从而保证服务器的安全可靠。
Mellanox ConnectX-2 Dual Port 10 GbE Adapter for I
Mellanox ConnectX-2 Dual Port 10 GbE Adapter for IBM System xProduct Guide (withdrawn product)The Mellanox ConnectX-2 Dual Port 10 GbE Adapter for IBM System x delivers high-bandwidth and industry leading low latency 10 GbE connectivity. With industry-leading performance, power-efficiency, integration and feature set, ConnectX-2 EN with RDMAoE (RDMA over Ethernet) adapters provide an optimized, low-latency solution for high-transaction databases, financial services, cloud computing, and virtualized server and storage data center environments. The ConnectX-2 Dual-Port 10 GbE Adapter improves network performance by increasing available bandwidth to the CPU and providing enhanced performance especially in virtualized server environments.The adapter is shown in Figure 1.Figure 1. Mellanox ConnectX-2 Dual Port 10 GbE Adapter for IBM System xDid you know?Click here to check for updatesDid you know?The Mellanox ConnectX-2 Dual Port 10GbE Adapter for IBM System x is a a high-performance, dual-port network adapter for 10Gb/s Ethernet (10GbE) networks with performance requirements for low latency. It provides an ideal solution for all servers needing high- performance, low-latency data transfer in LAN connectivity for mission-critical applications. This network adapter provides support for 10GbE networking with optical or copper connectivity.Part number informationThe part number to order this card is shown in Table 1.Table 1. Ordering part number and feature codeDescription Part number Feature code Mellanox ConnectX-2 Dual Port 10 GbE Adapter for IBM System x81Y9990A1M4The adapter has two empty SFP+ cages that support either SFP+ SR transceivers or twin-ax direct-attached copper (DAC) cables as listed in Table 2.Table 2. Supported transceivers and direct-attach copper (DAC) cablesDescription Part number Feature code Optical TransceiversQLogic 10Gb SFP+ SR Optical Transceiver49Y42180064Brocade 10Gb SFP+ SR Optical Transceiver49Y42160069IBM SFP+ SR Transceiver46C34475053Active Direct-attach copper (DAC) cables1m IBM Active DAC SFP+ Cable95Y0323A25A3m IBM Active DAC SFP+ Cable95Y0326A25B5m IBM Active DAC SFP+ Cable95Y0329A25CPassive Direct-attach copper (DAC) cables0.5m IBM Passive DAC SFP+ Cable00D6288A3RG1m IBM Passive DAC SFP+ Cable90Y9427A1PH3m IBM Passive DAC SFP+ Cable90Y9430A1PJ5m IBM Passive DAC SFP+ Cable90Y9433A1PK7m IBM Passive DAC SFP+ Cable00D6151A3RH Features and benefitsSupported serversThe adapter is supported in the IBM System x servers listed in Table 3.Table 3. Supported System x servers (Part 1)Mellanox ConnectX-2 Dual Port 10 GbE AdapterN N N N N N N N Y N N N Y N NTable 3. Supported System x servers (Part 2)Mellanox ConnectX-2 Dual Port 10 GbE AdapterY Y Y N N N Y N Y N Y N N Y YSupported operating systemsTrademarksLenovo and the Lenovo logo are trademarks or registered trademarks of Lenovo in the United States, other countries, or both. A current list of Lenovo trademarks is available on the Web athttps:///us/en/legal/copytrade/.The following terms are trademarks of Lenovo in the United States, other countries, or both:Lenovo®Intelligent ClusterServerProven®System x®The following terms are trademarks of other companies:Linux® is the trademark of Linus Torvalds in the U.S. and other countries.Microsoft®, Windows Server®, and Windows® are trademarks of Microsoft Corporation in the United States, other countries, or both.Other company, product, or service names may be trademarks or service marks of others.Mellanox ConnectX-2 Dual Port 10 GbE Adapter for IBM System x (withdrawn product)11。
KDS USB FW Update User Manual
111-38-URM-011KDS USB FW UpdateUser ManualKDS USB FW Update 111-38-URM-011Table of Contents1. Introduction (3)2. Process under Microsoft Windows (4)3. Process under Mac OS (5)KDS USB FW Update 111-38-URM-0111. IntroductionThe Epson Kitchen Display System (henceforth KDS) is preferably updated using the KDS Utility. However, an alternate update method using a USB flash drive can be employed as fallback if required, and is typically faster than with the KDS Utility, albeit at the cost of losing any configuration from the KDs device. This document describes the typical process to set up a USB flash drive for the firmware update.The same firmware update process is used for printers and controllers (henceforth called display box). Once set up, the USB flash drive can be used to sequentially update multiple devices.IMPORTANT NOTES:i. Before you proceed, note that updating the KDS using this method erases allconfiguration from the target device(s). The KDS Utility may be used to re-configure the system.ii. There are certain flash drives that may not work with this method and would fail the update process verification step in the procedures. Some models tested include:a. Kingston DataTraveler 8GB/16GBb. Transcend JetFlash V70 16GBc. Axiom Stealth 2 USBFD2 2GBd. SanDisk Cruzer Dial USB 16GBe. Misc. brands like AData, Samsung, Verbatim, Sony etc. USB 2.0 flash drivesKDS USB FW Update 111-38-URM-0112. Process under Microsoft WindowsThe following process has been verified under Microsoft Windows 7 and Windows 10. Most failures with the method can be attributed to user permissions (inability to modify USB flash drive) incompatible or corrupted USB flash drives.Here are the basic instructions for flashing the printer/display box FW:1. Get a USB flash drive of 1GB or more with no contents you care about, as everything on it will beerased.2. Plug the USB flash drive into a Windows PC.3. Run dd_win.exe (provided in the firmware update package)o Click on “File select…” and browse to the file “usb_boot_image_v26.ubi”o Click on “Drive select…” and specify the drive letter of the USB sticko Hit 'Run' and wait until completed.4. ***IMPORTANT*** Safely eject the USB flash drive from Windows, then unplug it, wait a fewseconds, then plug it back in again.5. Unzip the “KDS Image.zip” file onto the USB flash drive. The final layout of the USB stick should be:\|- autooperation|- uImage|- BOOT.BIN|- images\|-- control.tar.gz|-- hibdrv|-- hibernation|-- hibernationinfo|-- rootfs|-- uImage|-- writable-region6. Eject the USB stick from the PC again.7. Label the USB stick with ‘KDS Image’ to indicate what image is on it in case it is requ ired for otherdisplay boxes/printers or in future.Follow these instructions for each printer/display box that needs to be updated:1. With the printer/display box turned off, plug the USB flash drive into the Interface card at the back.2. Use a pen or paper clip to press the button on the BACK of the printer/display box, and keep itpressed while turning the board on. Keep holding the button down for three or four seconds until the LED near the button goes out.3. The LED light will then show orange for about 45 seconds, and then green for about 5 seconds, thenflash orange for about 60 seconds. Once the FW update is complete, the LED will flash green.4. Turn off the printer.5. Remove the USB flash drive from the back.6. Turn the printer/display box back on and wait for it to boot up; the LED on the back turns solid green.The KDS splash screen will show the new FW version on the attached monitor.7. The system should be ready to go.KDS USB FW Update 111-38-URM-0113. Process under Mac OSThe following process has been verified under Mac OS 10 and 11. Most failures with the method can be attributed to user permissions (inability to modify USB flash drive) incompatible or corrupted USB flash drives.Here are the basic instructions for flashing the printer/display box FW:1. Save the firmware update package (which includes the file usb_boot_image_v26.ubi) in the Desktopor Downloads folder.2. Get a USB flash drive of 1GB or more with no contents you care about, as everything on it will beerased. Do NOT plug it in yet.3. On the Mac, open a new terminal (iTerm).4. Type the command “diskutil list”to get the current list of devices.5. Now plug the USB flash drive into the Mac.6. Type the command “diskutil list”again and note the additional device, which is the USB flashdrive (e.g. /dev/disk2).7. Type the command “diskutil unmountDisk /dev/diskX”, where X is the number from Step 5.8. Type the following command:sudo dd if=$(find ~ -name usb_boot_image_v26.ubi | head -n 1) of=/dev/diskX bs=1m(again, substitute the X in the command with the number you learned from Step 5.)Please note:i. The command above will ask for the user (or administrator) password once; this is normal.ii. The command, when run for the first time, will trigger several pop-up dialogs requesting access to some folders. See Figure 3.1.iii. The command will output several lines with the text “Operation not permitted” when trying to search certain inaccessible folders; this is normal.Figure 3.1: Mac OS pop-ups requesting user permission to access some folders.(c ontinued…)KDS USB FW Update 111-38-URM-0119. ***IMPORTANT*** Safely eject the USB stick from the Mac, then unplug it, wait a fewseconds, then plug it back in again.10. Unzip the KDS Image.zip file into USB stick. This means the final layout for the USB stick should be:\|- autooperation|- uImage|- BOOT.BIN|- images\|-- control.tar.gz|-- hibdrv|-- hibernation|-- hibernationinfo|-- rootfs|-- uImage|-- writable-region11. Eject the USB stick from the Mac again.12. Label the USB stick with ‘KDS Image’ to indicate what image is on it in case it is required for otherdisplay boxes/printers or in future.Follow these instructions for each printer/display box that needs to be updated:1. With the printer/display box turned off, plug the USB flash drive into the Interface card at the back.2. Use a pen or paper clip to press the button on the BACK of the printer/display box, and keep itpressed while turning the board on. Keep holding the button down for three or four seconds until the LED near the button goes out.3. The LED light will then show orange for about 45 seconds, and then green for about 5 seconds, thenflash orange for about 60 seconds. Once the FW update is complete, the LED will flash green.4. Turn off the printer.5. Remove the USB flash drive from the back.6. Turn the printer/display box back on and wait for it to boot up; the LED on the back turns solid green.The KDS splash screen will show the new FW version on the attached monitor.7. The system should be ready to go.KDS USB FW Update 111-38-URM-011This page intentionally left blank.KDS USB FW Update 111-38-URM-011。
Transition Networks SISTG1040-2x2-LRT 产品说明书
SISTG1040-2x2-LRT Quick Start GuideIntroductionTransition Networks’ SISTG1040-242-LRT and SISTG1040--282-LRT are Industrial Unmanaged GbESwitches suitable for industrial Ethernet applications. See the SISTG1040-2x2-LRT Install Guide forimportant Cautions, Warnings, Features, Specifications, Front & Back Panel, LEDs, RESET button,Installation, Package Contents, and Troubleshooting, Warranty, Support & Compliance information.Unpack and Install1.Check package contents: verify that you have received the Switch, Quick Start Guide, Terminal Block, and Mountingkit. Two optional Power Supply models are available (sold separately).2.Unpack the contents in install location, and continue with Desktop, DIN Rail, or Wall mounting; see the Install Guide.3.Review the front panel description the Install Guide. Use the front panel grounding screw as required; see chapter 3of the Install Guide.4.Install SFP modules. Refer to the specific SFP manual for cautions and warnings. Note: The SFP ports should use ULListed Optional Transceiver product, Rated 3.3Vdc, Laser Class 1.5.Connect to Network / Devices: the switches provide eight or four 10M/100M/1G RJ45 ports. Use Cat 5e or betterunshielded twisted pair (UTP) cable terminated with an RJ-45 connector.6.Connect to 12-48V DC Power. Caution: Before applying power from an AC outlet, insert terminal connectors into theSISTG1040-2x2-LRT switch and verify all connections. Plugging in power connection after energizing power supply(s) may damage the switch. a) Connect the wires between the +P1 and –P1 terminals on the switch terminal block and the +V and -V terminals on the power supply. Optionally, connect the wires between the +P2 and –P2 terminals on the switch terminal block and the +V and -V terminals on the power supply if redundant power is to be used.b) Use a small Phillips screwdriver to tighten the wire-clamp screws. c) Connect the three wires (e.g., green, black,white) of the power cord to the Ground (), N, and L clamp connections respectively. Use a small Phillipsscrewdriver to tighten the wire-clamp screws. d) Connect the plug end of the power cord into a live AC outlet.e) Verify that the Power Supply front panel DC OK LED is lit. See the Install Guide for more details.7.Check the SYS LED. If it is lit, the power connection is correct. If not, see the Install Guide.LED Descriptions: three front panel LEDs allow switch status checking and monitoring:•Power LEDs indicate if the switch is powered up correctly.•System LED indicates if the system is ready.•Port Status LEDs indicates the current status of each port. Check these LEDs to understand the port status.RESET ButtonPress the RESET button to reboot the switch. The front panel LEDs flash and the switch is reset.Front PanelsSISTG1040-242-LRT SISTG1040-282-LRT LED SummaryLED Color FunctionSYS (System) Green On = the switch is ready. Of = the switch is not ready.P1 (Power 1) Green Input Power source 1 supplying power. P2 (Power 2) Green Input Power source 2 supplying power.Link/Act/Speed Green/AmberLight off: port disconnected or link failed.Green Light on: 1G Link Present, No Activity.Amber Light on: 100M/10M Link Present, No Activity.Green Blinking: 1G Activity. Port is sending or receiving data.Amber Blinking: 100M/10M Activity. Port is sending or receiving data.Link/Act/Speed Green/AmberLNK: Amber/Green (Two Color)Light off: port disconnected or link failedAmber Light on: link-up (100M)Green Light on: link-up (1G)Blinking: activity (receiving or transmitting data)Contact UsFor Transition Networks Drivers, Firmware, etc. go to the Product Support webpage (logon required).For Manuals, Application Notes, Brochures, Data Sheets, Specifications, etc. go to the Support Library (no logon required).Transition Networks | 10900 Red Circle Drive | Minnetonka, MN 55343, U.S.A.Technical Support: Technical support is available 24-hours a day. US and Canada: 1-800-260-1312;International: 00-1-952-941-7600. | tel: +1.952.941.7600 | toll free: 1.800.526.9267 | fax: 952.941.2322 ******************** | ************************** | ******************************。
OpenSSH堆缓冲区溢出漏洞
OpenSSH roaming_common.c堆缓冲区溢出漏洞(CVE-2016-0778)详细描述OpenSSH是SSH协议的开源实现。
OpenSSH 5.x, 6.x, 7.1p2之前的7.x版本,启用了某些代理及转发选项后,roaming_common.c 内的函数roaming_read及roaming_write未正确保留连接文件描述符,这可使远程服务器造成拒绝服务(堆缓冲区溢出)。
<*来源:OpenSSH*>解决办法厂商补丁:OpenSSH-------目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:/txt/release-7.1p2威胁分值9.8危险插件否发现日期2016-01-15CVE编号CVE-2016-0778NSFOCUS 32264CNNVD编号 CNNVD-201601-250CNCVE编号 CNCVE-20160778CVSS评分9.8Openssh MaxAuthTries限制绕过漏洞(CVE-2015-5600)详细描述OpenSSH(OpenBSD Secure Shell)是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。
该工具是SSH协议的开源实现,支持对所有的传输进行加密,可有效阻止窃听、连接劫持以及其他网络级的攻击。
OpenSSH 6.9及之前版本的sshd中的auth2-chall.c文件中的‘kbdint_next_device’函数存在安全漏洞,该漏洞源于程序没有正确限制处理单链接中的keyboard-interactive设备。
远程攻击者可借助ssh -oKbdInteractiveDevices选项中较长且重复的列表利用该漏洞实施暴力破解攻击,或造成拒绝服务(CPU消耗)。
<*来源:OpenSSH*>解决办法厂商补丁:OpenSSH-------目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载://cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42&r2=1.43&f= h威胁分值8.5危险插件否发现日期2015-08-23CVE编号CVE-2015-5600NSFOCUS 30549CNNVD编号 CNNVD-201508-001CNCVE编号 CNCVE-20155600CVSS评分8.5OpenSSH J-PAKE授权问题漏洞(CVE-2010-4478)详细描述OpenSSH是SSH协议组的实现,可为各种服务提供加密的认证传输,包括远程shell访问。
详细图教程)利用小雨伞进行备份SHSH 以及开启虚拟验证服务器刷固件的方法
小伞这次更新之后窗口变得大了,历史动态日志框不再像老版本那样直接在下面就能看得见了,也改变了部分英文按钮的名称,现在我先上图,小伞和Java 请到/zh_CN/下载对应版本!!没有的请自己搜索官方版本进行操作。
大家不要看图片上的版本,图我是从别的地方找来的,方法是我写的。
先打开小伞,转到设置那个画面就是第三张图然后按照图上的设置打钩,至于SHSH保存在本地什么地方大家自己选,或者是默认的也行,然后保存!!连上iPhone小伞自动识别你的机器型号固件版本等,不像老版本还得自己选,识别好后就点保存所有的shsh (save all SHSH)耐心的等待吧,或者调出历史动态日志框,就是点一下log 就可以看见备份的进度了,当小伞自动查找到已有备份的SHSH在本地的时候,这时shsh就是已经备份完毕了!!!到你刚才设置的保存shsh备份的文件夹下把备份好的SHSH考到U盘里留个最保险的备份吧!!!!好了shsh备份完了,现在说一下开启小伞的虚拟验证服务器来刷固件的方法,就拿我自己的电话来举例子了,大家在图上已经看到了我备份了4个固件版本的shsh,我现在用的是ios4.2.1最新版本的固件,我就以我要降级到4.1固件来写教程,现在苹果已经关闭了对4.1固件的验证,如果这时候不开小伞而直接用iTunes来降级的话会提示1013错误,还有一个就是1013错误,我先说一下这两个错误的原因第一:1013错误,只有一个原因就是苹果关闭了验证,解决方法小伞虚拟验证。
第二:1013错误,这个错误有点蛋疼,在苹果不关闭验证的情况下用iTunes刷机遇到这个提示就说明你的电脑里有小伞工具,并且使用过它,启动小伞之后它会对你电脑里的hosts文件进行修改只要再改回默认的就好了,hosts文件在哪?怎么打开呢?它在C:\Windows\System32\drivers\etc这个文件夹里,用记事本来打开双击它,它会让你选择打开方式,找到记事本双击或确定我把原始内容发出来给你们打开之后直接把你里面的删除掉,把下面的复制进去重启iTunes就行了~~~# Copyright (c) 1993-2009 Microsoft Corp.## This is a sample HOSTS file used by Microsoft TCP/IP for Windows.## This file contains the mappings of IP addresses to host names. Each# entry should be kept on an individual line. The IP address should# be placed in the first column followed by the corresponding host name.# The IP address and the host name should be separated by at least one# space.## Additionally, comments (such as these) may be inserted on individual# lines or following the machine name denoted by a '#' symbol.## For example:## 102.54.94.97 # source server# 38.25.63.10 # x client host# localhost name resolution is handled within DNS itself.# 127.0.0.1 localhost# ::1 localhost这是在苹果没关闭验证的境况下,当关闭了验证的情况下提示这个的话,也是说明hosts被小伞改过了,但是正常境况下iTunes应该显示的是1013错误,就是在hosts文件没被修改,而是原始的状态时,显示1013说明你的hosts文件是原始的,但是这时用原始的过不了验证这一关,必须改,启动小伞就自动修改了,也就是说每次启动小伞的时候hosts都会被修改,这时修改过的就不会再出现1013错误但会出现1013 这就是下面我们要讲的,在苹果关闭了验证情况下怎么能绕开验证不过和怎么跳过1004错误来自建验证服务器刷机,降级!!!!!现在(上面说了以我的4.2.1降回4.1为蓝本)打开小伞(iTunes是关掉的而且必须关掉)查看shsh,确保有你要降到的固件的shsh,我有4.1的shsh,这时不要不管他,有就可以了,连接iPhone(iTunes 也必须是关闭的)自动启动iTunes的关掉,在回到小伞,等小伞识别出你的iPhone时点击右上角,注意看图,图上有,start TSS Server(启动虚拟验证服务器)点击之后把小伞最小化,或者放在一边,不要关闭,这时打开iTunes,把手机进入DFU模式这个都会吧?不解释了,iTunes就会找到一个要恢复的设备,这时点确定后,按住键盘上的shift键是按住,不是点一下就完了,按住后用鼠标点击iTunes上的恢复,选择你要恢复的固件文件,我要恢复4.1 我就选择4.1 之后就开始恢复了,iTunes上面显示解包,验证(验证在这时已经绕过去了)等等······大概手机上的进度条到3分之2时,这时会跳出1013错误,这时不要关闭iTunes,点1013错误上的那个确定后,iTunes 检测到一台要恢复的设备,点确定,然后直接调出你的小伞,注意不是重新打开,是刚才不是最小化了嘛?现在让它出现在你的视野里,先点一下已连接的设备,就是最左上角的connected devices 然后在回到右上角点击exit recovery (退出恢复)然后关闭小伞,这时你看看iTunes出现什么了?你的电话出现什么了?到此iPhone降级成功!!!还有就是关于保留基带升级的,刚才下面一位锋友提到了,保基带升级我发个链接得了,有锋友早就写好教程了~~/read-htm-tid-1074777.html对了已经会了的同学看看帮顶一下,写这个的原因是昨晚在等越狱的时候好多童鞋一直在问有关上面的问题·······有的说在论坛里搜索不到教程,虽然不太可能,但是为了方便一下新手,也就写了,不好之处大家都提意见和建议,谢谢了~分少的可怜,请大家给小飞点分数吧。
LINKSYS SPA2102 说明书
1-866-736-1303 yak.caThe Linksys SPA2102 adapter from Yak will include the following: the Linksys SPA2102 analogue telephone adapter (ATA), an Ethernet cable and a power adapter.You will need an analogue phone, a cable or DSL modem, high speed Internet service and an Ethernet cable that should currently connect your computer to your modem.A) ATA CONNECTED TO A MODEM – RECOMMENDED INSTALLATIONIn this configuration, if DSL is being used it is highly recommended to use the modem in bridge mode and use the ATA for PPPoE authentication. Configuration of the ATA in that way is described in section C.1.D isconnect the power from your cable or DSL modem and computer. 2.C onnect one end of an Ethernet cable into the INTERNET port on the phone adapter (ATA) and the other end into your Cable/DSL modem.3. C onnect another Ethernet cable from your computer or router WAN/INTERNET port to the ETHERNET port onthe phone adapter (ATA). If you are using a home router then connect your PC(s) to the free router ports usingseparate Ethernet cables.4. Connect your analogue telephone to the LINE 1 port of the ATA Phone Adapter.5. Connect the power to the Cable/DSL modem and power it up.6. Plug the power adapter into the phone adapter (ATA).7.W ait about two minutes for the Cable/DSL modem to boot up and for the status indicators to be lit. The Linksys ATA Phone Adapter’s red status light will blink in sequence until it has fully connected to the Yak Digital Phoneservice. Do not interrupt the configuration process by unplugging the power or lifting the receiver on your phoneduring the startup process. The Power, Ethernet and Phone LEDs will be solidly lit when the phone adapter isready for use.Power AdapterDSL/CableModemComputer Telephone PHONE1PHONE 2ETHERNET INTERNETPOWERY ou may power up your computer and/or router although it does not need to be on to make phone calls.8.9. Pick up your telephone receiver and listen for a dial tone.B) ATA CONNECTED TO A ROUTER – NOT RECOMMENDEDAs we cannot account for the programming of each possible home router, we are unable to support the installation of the ATA to home routers.You might have to review your router manfacturer’s instructions on how to avoid VoIP issues. Also, you may review the information at on how to configure VoIP with your specific type of router. Yak High Speed Internet users may review the Thompson Modem device instructions provided with the X-Lite (softphone) documentation for some advice on router issues.In this scenario, the phone adapter obtains the public IP address.C onnect an Ethernet cable into the INTERNET port on the ATA phone adapter and connect the other end to an1.open port on the home router.2. Connect a telephone to the PHONE 1 port of the ATA Phone Adapter using a standard phone line.C onnect the power cable provided with the Linksys ATA Phone Adapter to the POWER port on the Linksys ATA3.Phone Adapter. Wait about two minutes for the Cable/DSL modem to boot up and for the status indicators to belit. The Linksys ATA Phone Adapter’s red status light will blink in sequence until it has fully connected to the YakDigital Phone service. Do not interrupt the configuration process by unplugging the power or lifting the receiveron your phone during the startup process. The Power, Ethernet and Phone LEDs will be solidly lit when the phone adapter is ready for use.4. Pick up your telephone receiver and listen for a dial tone.C) CONFIGURING YOUR DSL CREDENTIALS ON THE ATAYak supports the installation of the ATA when plugged in front of your modem as in section A. This means that the Linksys SPA2102 ATA must obtain an IP address from the DSL network rather than your modem. Therefore you may need to program the ATA with your DSL username / password. In this configuration the modem is in bridge mode, meaning that the ATA manages the DSL authentication and holds the assigned public address.Here is how you would program the ATA:1. Determine the IP address of the ATAM ost commonly you can access the ATA configuration web page by pointing your web browser toa.http://192.168.0.1. but this not always the case and depends on the home network configuration.T he most reliable way of determining the IP address of the ATA is to use the on board interactive voiceb.response menu. You can use this method once you have an analogue phone connected to the ATA.i.U se a telephone connected to the PHONE port of the Phone Adapter. (You can only accessthe Interactive Voice Response Menu through an analogue telephone, not any of theInternet phones.)1-866-736-1303 yak.ca Over 10 years of Canadian Customer Service ii.P ress **** (in other words, press the star key four times). Wait until you hear the “Linksys configuration menu – please enter the option followed by the pound (#) key or hang up to exit” response.iii.P ress 130# and listen to the IP address being read out. Enter the IP address in your web browser to access the ATA.iv. Press # (pound) key. To exit the menu, hang up the telephone.2. Open a browser. Enter the ATA IP address, and click the GO button or hit ENTER.3. Click on the Wan Setup tab.4. Change the connection type from DHCP to PPPOE.5.E nter your DSL user name is the PPPOE Login Name field and your DSL password into the PPPOE Login Password field6. Click “Submit All Changes” at the bottom of the screen.7.O nce the changes have been accepted, reboot all your devices or power off and proceed to verify internet connectivity.Internet Connection SettingsStatic IP SettingsStatus Wan Setup Lan Setup Application PPPoE SettingsRouterVoice User Login basic | advanced Connection Type:Static IP:Gateway:PPPOE Login Name:PPPOE Service Name:DHCPNetMask:PPPOE Login Password:。
系统安全加固方案-3
系统安全加固方案文档说明1. Microsoft Windows远程桌面协议中间人攻击漏洞(CVE-2005-1794)【原理扫描】4.1漏洞清单3/104.2加固方案1、安装此补丁WindowsServer2003-KB2621440-x86-CHS.exe即可解决安全此安全漏洞问题。
4.3回退方案在控制面板-添加/删除程序中卸载该补丁即可4.4加固结果已经加固4/102. Microsoft远程桌面协议RDP远程代码可执行漏洞(CVE-2012-0002)(MS12-020)【原理扫描】漏洞1.1漏洞清单5/101.2加固方案Windows2008和windows2003分别安装此补丁WindowsServer2003-KB2621440-x86-CHS.exe和Windows6.1-KB2621440-x64.msu 即可解决安全此安全漏洞问题。
1.3回退方案在控制面板-添加/删除程序中卸载该补丁即可1.4加固结果已经加固3. Mongodb未授权访问漏洞【原理扫描】2.1漏洞清单6/107/102.2加固方案在ers中添加用户,启动认证。
#在admin 数据库中创建用户!xjyd 密码为xjyd!!20161、[mongodb@rac3 bin]$ ./mongo 127.0.0.1:27017MongoDB shell version: 2.0.1connecting to: 127.0.0.1:27017/test> use adminswitched to db admin>> db.addUser("supper", "sup"){ "n" : 0, "connectionId" : 4, "err" : null, "ok" : 1 }{"user" : "supper","readOnly" : false,"pwd" : "51a481f72b8b8218df9fee50b3737c44","_id" : ObjectId("4f2bc0d357a309043c6947a4") }> db.auth("supper","sup")18/10> exitbye2、在ers中添加用户,启动认证。
盛博主机M-PMI2
技术手册
版本 1.6
盛博科技Biblioteka 序感谢您使用 SBS 嵌入式 PC/104 产品。
PC/104 是嵌入式 PC 的机械电气标准。它的制定,为嵌入式应用 提供了标准的系统平台,它秉承了 IBM-PC 开放式总线结构的优点,为设 计应用系统的工程师提供了标准的、高可靠的、功能强大的、方便使用的 系统组件,从而将人力从繁琐的基于芯片的设计中解放出来。
盛博科技是国内首家国际化嵌入式计算机专业公司,不断推出高 品质的嵌入式 PC 模块,这些嵌入式 PC 模块被广泛用于各种高可靠的智 能设备中,它的超小尺寸、超低功耗、宽温特性、推荐的单 +5V 供电, 以及一系列针对嵌入式应用的功能扩展,使工程师可将它视为一个超级芯 片,为应用系统的设计引入“面向对象”的方法,也为了系统日后的维护、 升级带来更大的方便。
第三章 软件设置...........................................................................................................................13 3.1 BIOS Setup 的主画面.......................................................................................................13 3.1.1 Standard CMOS Features (标准 CMOS 参数设置) ..............................................13 3.1.2 Advanced BIOS Features (扩展 BIOS 特性设置).................................................16 3.1.3 Advanced Chipset Features(芯片组特性设置)......................................................20 3.1.4 Integrated Peripherals(在板集成设备) ..................................................................22 3.1.5 Power Management Setup (能源管理参数设置) ..................................................26 3.1.6 PnP/PCI Configurations (即插即用与 PCI 参数设置) .........................................28 3.1.7 PC Health Status (电脑健康状态) .........................................................................29 3.1.8 Frequency/Voltage Control (频率和电压控制) .....................................................30 3.1.9 Load Fail-Safe Defaults (载入最安全的缺省值) ..................................................31 3.1.10 Load Optimized Defaults (装入最优化的缺省值)..............................................31 3.1.11 Set Supervisor Password (设置超级用户密码)...................................................31 3.1.12 Set User Password (设置用户密码) ....................................................................31 3.1.13 Save & Exit Setup (保存并退出设置程序).........................................................31 3.1.14 Exit Without Saving (退出设置程序,不更新 CMOS 内容).............................31 3.2 LPCGPIO 设置 .................................................................................................................31
趋势科技OfficeScan 10荣获NSS Labs“推荐”
型 的算法 FS SG高 出近 3 0 . 2个 百分 点。 同时 对 于 网络 上
收稿 日期 : 。 。 4 。 一。 —2
趋 势科技 O f e en 1 fi S a e 0荣获 N S L b 推 荐’ S a s“ ’
近 日 , 趋 势 科 技 在 N SS 产品集体 测试报 告 今 年 , 趋 势 科 技 的 企 业 级 终 势科 技 云 安 全 ( ma t r tci n S r P o eto La 2 1 bS 0 0年 第 二 季 度 终 端 防 护 端 安 全 产 品 0f i e C 1获 选 为 最 Ne W0 k fC S a 3 t r )为技术后盾 。通过每天 ( EndPO nt 能 防 止 社 交 工 程 恶 意 程 序 的 产 品 。 扫 描 、过 滤 、关 联 分 析 超 过 4 0亿 i 5
截 新 的 恶 意 网 站 , 趋 势 科 技 只 需 几 均 拦 截 反 应 时 间 为 五 小 时 内 ,远 快 何 的 更 新 , 不 必 等 待 下 一 次 下 载 ,
小 时 就 能 迅 速 响 应 。 这 项 未 受 任 何 于 所 有 产 品 的平 均 值 4 8 小 时 ( 客 户 就 能 立 即 获 得 保 护 。 而 且 每 一 5.
安 全 厂 商 赞 助 的 NSS bS独 立 将 近 二 天 ) L a 。拦 截 反 应 时 间是 从 第 一 位 新 的 趋 势 科 技 客 户 ,也 都 会 自动
测 试 采 用 模 拟 使 用 者 的 真 实 情 境 , 次 遇 到 新 的 威 胁 开 始 ,到 网 络 安 全 加 入其 他数 百万 趋势科技 客户 的回 锁 定 该 实 验 室 通 过 大 规 模 搜 集 来 活 厂 商 能 够 拦 截 为 止 的 平均 反 应时 间 。 馈 行 列 , 共 同 为 创 造 更 优 质 的 云 安 跃 的互联 网威胁进 行测试 。
NEC SL2100 多线终端使用手册
Warning!!Telephone receivers produce magnetic fields that can attract small metallic objects such as pins or staples. To avoid injury, do not place the handset where such objects can be picked up.Please read this manual carefully before operatingthis product and save this manual for future use.Thank you for purchasing NEC SL2100 system. Due to the flexibility built into the system, your Dialing Codes and Feature Capacities may differfrom those in this guide. Check with your NEC Authorized Supplier / System Administrator and make a note of any differences.When installing the handset :1. Make sure the handset cord is plugged into the handset jack on the telephone base.2. The line cord routes through the channel on the telephone base.3. Alternatively the line cord can route through the channel on the telephone legs.To set the low viewing angle position:1. Fold the legs all the way back.To set the high viewing angle position:1. Flip up the two leg supports.2. Fold the legs back until the supports contact the base.* 12 Programmable Function Keys are available for IP7WW-12TXH-B1 TEL. 24 Programmable Function Keys are available for IP7WW-24TXH-B1 TEL. ** The illustration shows IP7WW-24TXH-B1 TEL.Dial Keys monitoring. LED on key lights whenkey is active. Redial Key Volume (UP) Key orVolume (DOWN) KeySpeakerCall Indicator LampThis lamp flashes fast when a call is ringing and flashes slower when a message has been left.Alphanumeric DisplayThe LCD has 3 lines, 24 characters with backlight.Soft Keys **The Soft Keys show the available features for your current activity. Any feature shown at the bottom of the LCD is available.Help KeyThe user can press this key followed by a programmable key to check what Line or Programmable Feature is assigned on the key.Programmable Function KeysFlexible Line keys or Feature Keys assigned by the System Administrator.Flash KeyPress key to finish an outside call and hear the dial tone.Transfer KeyAllows the extension user to transfer established calls to another extension.DND Key (Do Not Disturb)Setup a Do Not Disturb during a call or in idle state.Mute (Microphone) KeyMute handset or Handsfree Microphone. LED lights when microphone is muted.Clear/Back KeyPress this key to cancel the current action or delete a character.Cursor KeyAccess various features with simple operation.Handsfree Options- Handsfree lets you place and answer calls by pressing “Speaker” instead of using the handset. - With Automatic Handsfree, you can press a Speaker Key without lifting the handset. Normally, you have Automatic Handsfree.- Use Handsfree Answerback to answer a voice-announced Intercom call by speaking toward your phone without lifting the handset.• To change the Trunk Access Code, Ask your NEC Authorized Supplier for the details.• In the default setting, Programmable Function Key No. 1 to 12 is assigned as “Trunk” Key. If you want to assign DSS Keys at the unused Trunk Keys, these unused keys should be erased by “752 + 000” operation before the above operation.• For the DSS Key, the extension status can be indicated on the BLF . (idle : extinguished, Busy : lit)• When you register a telephone number, the Trunk Access Code should be added in front of the number. • Up to 36 digits dialing can be registered, but the name can not be registered.• If you want to continue the operation, press Programmable Function Key instead of Speaker Key to finish. • One-Touch Keys can be assigned by Soft Key operation as well.⏹ Programmable Function KeysProgrammable Function Keys can be assigned as “Trunk” Key and/or other Function Keys. You can just press the function key to activate the assigned function without dialing the Service Code. Function Code & Add Data• There are 2 levels of Function Keys. (General Keys : assigned by 751, Appearance Keys : assigned by 752)• Appearance Keys have priority. You can overwrite the Appearance Key at the General Key.• If you want to overwrite the General Key at the Appearance Key, you have to erase the Appearance Key by dialing “752 + 000” before General Key assignment.• In the default setting, Programmable Function Key No. 1 to 12 is assigned as “Trunk” Key. If you want to assign Function Keys (General) at the unused Trunk Keys, these unused keys should be erased by “752 + 000” operation.• Programmable Function Keys can be erased by dialing “752 + 000” or “751 + 00”. • Programmable Function Keys can be assigned by Soft Key operation as well.⏹ DSS / One-Touch Keys Programmable Function Keys can be assigned as DSS (Direct Station Selection) or One-Touch Keys. You can place an Outside / Intercom Call by just pressing this key without dialing the number.725715??71510?????90• The number of digits dialed for Bin No. depends on the system setting. (0-9<Only Group ABB> / 00-99 / 000-999)• System setting is necessary for Group ABB function. Ask your NEC Authorized Supplier for the details. • Name can be entered by Dial Pad Keys. (See below)• Up to 36 digits dialing can be registered, and up to 12 characters can be registered as name. • If you want to continue the operation, dial Bin No. instead of Speaker Key to finish. • You can skip to enter the name. (No enter any character, then press “Hold” Key).• You can erase the registered number & name by pressing “Exit” Key after dialing Bin No.. • Common Abbreviated Dial can be registered using Soft Key / Cursor Key operations.• Alternatively the SL2100 built-in Web Programming can be used to program Abbreviated dial bins (Common Speed Dials). Ask your NEC Authorized Supplier for the detailsWhen you enter a name, use Dial Pad Keys to enter letters as below. For example, press “2” key once for “A”, ⏹ Entering Alphanumeric Characters735745?????????1234567890#⏹ Place an Outside Call <Quick Access>⏹ Place an Intercom Call <Dial Access>• Listen to the Dial Tone before dialing a Telephone Number.• You can have function keys for Trunks or Trunk Groups. Ask your NEC Authorized Supplier for the details.⏹ Place an Outside Call <Access by Code> Telephone NumberTrunk Access CodeTrunk Group No.• To change the Trunk Access Code, Ask your NEC Authorized Supplier for the details. • Listen to the Dial Tone before dialing a Telephone Number.• If the Trunk Group number is greater than 10, you should enter 2 digits (e.g. 11: Group 11) after dialing “704”. Ask your NEC Authorized Supplier for the details.• Ask your NEC Authorized Supplier for the Trunk Number dialing digits.• Your call will ring or voice-announce. If you hear ringing, wait for an answer. If you hear a beep, begin speaking. Dialing “1” changes voice/ring mode. (in case the destination is Multi-line Terminal)??????407??????909#0#⏹ Directory Dialing⏹ Last Number Dialing⏹ Callback by Received Number• The system retains the last 10 numbers dialed which can be reviewed and redialed. • To cancel the Redial List operation, press “Clear/Back” Key.• Caller-ID function is required to use this operation for outside calls. Ask your NEC Authorized Supplier formore details.• To cancel the Callback operation, press “Clear/Back” Key.• After searching the desired destination, press “Enter” Key to confirm the telephone number before lifting the handset, if necessary.• You can enter more Characters (up to 12) to make desired destination’s search even more specific. • You can also search the desired destination without entering the Characters. (press Cursor Keys only) • To cancel the Directory Dialing operation, press “Clear/Back” Key. • Directory Dialing can be activated by Soft Key operation as well.5#⏹Abbreviated (Speed) Dialing <for Outside>• The digit of Bin No. depends on the system setting. (0-9 <Only Group ABB> / 00-99 / 000-999) • Telephone Numbers shall be pre-registered to the system.• System setting is necessary for Group ABB function. Ask your NEC Authorized Supplier for the details.• When you assign the Common ABB Key on the Programmable Function Key, “Press HOLD” is required after dialing the Function Code 27.⏹ One-Touch / DSS Call • Telephone / Extension number should be pre-registered to a One-Touch / DSS Key. • Trunk Access Code should be added in front of the Telephone number.2#??⏹ Set Camp On / Callback• Camp OnIntercom Call - when you hear ringing, wait for the called party to answer. Outside Call - when you hear Dial Tone, begin telephone number dialing.• Callback Intercom Call - when your terminal starts the ringing, lift handset and wait for the called partyto answer.Outside Call - when your terminal starts the ringing, lift handset, hear Dial Tone, and begin telephone number dialing.• This function is applicable in case all trunks are busy condition. (not applicable for dialed outside party busy)⏹ Cancel Camp On / Callback ⏹ Repeat Dialing <Outside Call Only> • When the Repeat Dialing is set, Repeat Dial Key shall flash and the system automatically and periodically redials a call. Repeat duration is programmable. Ask your NEC Authorized Supplier for the details. • You should lift the handset when the called party answered. • Press flashing Repeat Dial Key to cancel.5777⏹Set a Message Waiting⏹ Cancel Message Waiting • When you set a MW, the called party’s Indicator displays as per setting.⏹ Answer a Message Waiting (Your terminal’s Indicator displays as per setting)177???377• When you answer a MW, the Indicator automatically goes off when the called party answers. • If multiple message are in queue, you can select the desired party by pressing Up key after dialing “, 0”, ifseveral number of Message Waiting has been set.⏹ Answering an Outside Call⏹ Picking up a Call for other ExtensionsExtension Number• System setting is necessary to create a Call Pickup Group. Ask your NEC Authorized Supplier for the details.• Confirm the status of Mute Key if you want to answer by Handsfree. (Mute On : LED On, Mute Off : LED Off)⏹ Answering an Intercom Call• Intercom Call Mode (Signal or Voice) can be set at your terminal by : “Signal”: Speaker -> 723 “Voice”: Speaker -> 721• Confirm the status of Mute Key if you want to answer by Handsfree. (Mute On : LED On, Mute Off : LED Off)#976??⏹ Holding a Call / Retrieving a Held Call• When on an Intercom, the call is held as “Exclusive Hold” on your terminal.• This operation puts your outside call on System Hold. Other extension users can take the call off Hold.⏹ Retrieve a Held Outside Call • Ask your NEC Authorized Supplier for the details about your Trunk Number dialing digits.⏹ Transferring a Call to the other Extension ⏹ Holding a Call Exclusively• This operation puts your outside call on Exclusive Hold. Other extension user can not take the call off Hold.???267??⏹ Do Not Disturb (DND)• When you set DND function, DND Key shall be lit and the Internal Dial Tone pattern shall be changed.• You can repeat this operation to add more parties.• You may be able to have up to 16 parties (include your terminal). You may need to adjust the volume level due to the Environment where calls are placed. Ask your NEC Authorized Supplier for the details.⏹ Conference12340???When you set Call Forward / Follow Me, the destination extension is displayed on the LCD, and the Internal Dial Tone pattern shall be changed (Call Forward / Follow Me can be set by Soft Key).Call Forwarding / Follow Me174???1274???1??????11374474Call Forwarding / Follow Me (Cont’d)??????67457411“Menu” Soft Key⏹ “Dir” Soft Key⏹ “VM” Soft Key (Option)“CL” Soft Key⏹ Soft Key Operations during Off-Hook condition⏹ Soft Key Operations during Intercom Calling⏹ Soft Key Operations after establishing an Intercom Call⏹ Soft Key Operations during Outside CallMenu Structure when PRG15-02-60 is set to Advanced Mode 1System setting is necessary to use Built-In Automated Attendant. Ask your NEC Authorized Supplier for the details.⏹ Record / Listen / Erase Answering Messages • Up to 100 types of messages can be recorded. • The Message length can not exceed 4 minutes.661???????753#Log-On to the In-Mail System setting is necessary to use In-Mail (Voice Mail) feature. Ask your NEC Authorized Supplier for the details.????????Call Forward to Voice Mail1???????????111474374274174⏹ Mailbox Greeting• Selected Greeting (one of three) shall be made active.⏹ Mailbox Security Code※ The type of Security Code can be assigned as below.- Dial 4 digits Security Code followed by “7”: Security Code for all log-on- Dial 4 digits Security Code followed by “6”: Security Code for remote log-on only • System Administrator can delete a Mailbox Security Code.4?753####6777???Listen to Left Messages in your Mailbox??5?????????5◆ Instruction Menu Message are used as the Automated Attendant Main Greetings (e.g. Day Mode greeting, Night Mode greeting, etc)▪To record an instruction Menu from the System Administrator Menu, dial the digit 4 (Instruction Menu Messages). Dial the mailbox number (001 – 032).-Press the digit 5 to Listen to the message. -Press the digit 7 to Record the message. -Press the digit 3 to Delete the message.-Press # to return to the System Administrator Menu.◆ Announcement Message are used to announce general information to callers such as directions, hours of operation, etc.▪To record an Announcement Message from the System Administrator Menu, dial the digit 2 (Announcement Messages). Dial the mailbox number (001 – 032). -Press the digit 5 to Listen to the message. -Press the digit 7 to Record the message. -Press the digit 3 to Delete the message.-Press # to return to the System Administrator Menu.◆ Distribution List is a list of extensions set to receive a single voice mail message. Any message left in the distribution mailbox will be sent to all extensions in the list.▪To review or modify the Distribution List from the System Administrator Menu, dial the digit 5 (Distribution List). Dial the mailbox number (001 – 032) to be modified.. ►Press the digit 6 to Review or Modify the list.-Press the digit 2 to Add an extension to the distribution list. -Press the digit 3 to Delete the current extension from the list. -Press the digit 6 to step to the Next entry.-Press # to return to the System Administrator Menu.►Press the digit 76 to record a Name for the distribution list. -Press the digit 5 to Listen to the name. -Press the digit 7 to Record a new name. The following administrative features are only available at the system administrator’s extension (extension 101 at default). Ask your NEC Authorized Supplier for details on how to become a system administrator..Log-In to the In-Mail ????????◆Subscriber Maintenance is used to modify the subscriber mailboxes.▪To modify a Subscriber Mailbox from the System Administrator Menu, dial the digit 7 (Subscriber Maintenance).Dial the extension number of the mailbox you wish to modify.-Press the digit 32 to Delete all messages.-Press the digit 34 to Delete the mailbox greeting.-Press the digit 36 to Delete to the mailbox name.-Press the digit 7 to Delete the security code.-Press the digit 6 to Record a new name.-Press # to return to the System Administrator Menu.◆Answer Schedule Override provides alternate answering for the Automated Attendant by sending calls to aspecified Override mailbox, when enabled. As an example you can use the Answering Schedule Override to provide Holiday and Bad Weather closing announcements.▪To modify the Answer Schedule Override from the System Administrator Menu dial 6 (Answer Scheduleoverride).Dial the answer table number (01-16) you wish to override.-Press the digit 6 to toggle On/Off the answer schedule table.-Press the digit 2 to enter a New answer schedule override mailbox. Enter the override mailbox number (001-032 or a valid subscriber extension). The override mailbox can be an announcement, call routing box, or asubscriber box.-Press # to return to the System Administrator Menu.◆Mailbox Announcement Message is a message recorded by the system administrator that plays to eachsubscriber when they log into their mailbox. This message will play each time the subscriber logs into their box until it expires, is deleted, or is made inactive by the system administrator.▪To record and modify the Mailbox Announcement Message from the System Administrator Menu, dial the digit 3 (Mailbox Announcement Message).-Press the digit 5 to Listen to the mailbox announcement message.-Press the digit 7 to Record a new mailbox announcement message.-Press the digit 3 to Delete the mailbox announcement message.-Press the digit 2 to Specify the amount of days the message is active. Enter * for an indefinite amount of days or enter 01-99 for 1-99 days.-Press # to return to the System Administrator Menu.◆Voice Mail Version will play a message indicating the software level of the voice mail.▪To hear the current Voice Mail Version from the System Administrator Menu, dial the digit 8 (Voice mail Version).Multiline TerminalUser Guide GVT-025183-401-00 AU。
- 1、下载文档前请自行甄别文档内容的完整性,平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益,请联系客服反馈,我们会尽快为您处理(人工客服工作时间:9:00-18:30)。
[CVEN 2101] Engineering Construction
Introduction to Concrete (Con’t)
•Be of proper workability so as to enable proper consolidation, prevent segregation, completely fill the forms, and provide achievement of a proper finish
•Slump-test
–Most widely used
–Measures the amount of slump from its original height
–/watch?v=higx_ktnKLI&feature=related
Introduction to Concrete (Con’t)•Concrete operation
–Batching the materials
–Mixing
–Transporting
–Placing
–Consolidating
–Finishing
Fi i hi
concrete is batched in a central batch plant and transported to the
p p job site in trucks
•/watch?v=0Aqq3a0GTjY&feature=related •Mixer output production rate
–Mixer size is measured by volume
–Mixer output is measured by m3/hr Æmixer size / mixer cycle time
–Mixer cycle time: loading time, mixing time, and discharging time
Transit mixed Central mixed
8[CVEN 2101] Engineering Construction
Mixing Concrete (Con’t)•Freefall mixers
–Mix concrete by lifting the ingredients with the aid of fixed blades inside a rotating
drum and then dropping the material
S i bl f h iff –Suitable for concretes that are not too stiff (about 5-6 cm of min. slump)
•Power mixers
–Blend concrete by rapid rotary motion of paddles moving in centric or eccentric
courses inside the mixing drum
–Require a shorter mixing time to obtain
R i h t i i ti t bt i
homogeneous, high-quality concrete,
resulting in greater output
•/watch?v=q49_3 ePR5kw
9[CVEN 2101] Engineering Construction
[CVEN 2101] Engineering Construction
–Remotely located projects
–Large scale projects
–Project located in busy, heavily trafficked urban areas •Smaller-scale self-contained concrete plant
–Operates similarly to a full-size permanent central plant
–Can be moved between sites either on trucks or in a trailer-mounted configuration
–Highly automated and can be operated by one worker
12[CVEN 2101] Engineering Construction
[CVEN 2101] Engineering Construction
–Complementary means on projects utilizing cranes or pumps
C l t j t tili i
–Additional expenses of building ramps, runways, and similar setups should be taken into account
–Recommended for distances less than 60m
–Motor-propelled buggies (power buggies) can traverse up to 300m 14[CVEN 2101] Engineering Construction
[CVEN 2101] Engineering Construction
–Proper belt size and speed should be considered
–Particular attention must be given to points where the concrete leaves one conveyor and either continues on another conveyor
or is discharged, as segregation can occur at these points
–Optimum concrete slump for conveyed concrete is 6.5 –7.5 cm 16[CVEN 2101] Engineering Construction
/hr (up to the 58th floor);
•Consolidation
–To remove these entrapped air voids and to ensure complete filling of the forms
–Normally achieved through the use of mechanical vibrators
19[CVEN 2101] Engineering Construction
•
Any work done to a concrete surface
after it has been consolidated will
weaken the surface strength
•Surface strength is very important on a
floor slab, sidewalk, or pavement
•Only the absolute minimum finishing
necessary to impart the desired texture
should be permitted
20[CVEN 2101] Engineering Construction
[CVEN 2101] Engineering Construction
Finishing Concrete (Con’t)•Troweling
–To create a smoother surface after floating with a steel trowel
–Motor-propelled (power trowels)are used Motor propelled (power trowels)
to smooth and finish large concrete surfaces
such as floor slabs and the upper face of
horizontally concreted precast element –Improves the density of the upper concrete layer and seals plastic cracks that
developed in the face of the concrete –Floating is aimed at removing protruding aggregate grains, leveling off swells, filling。