1300 wireless bridge secured data traffic encryption --high

   Hi All,
I am looking secured encrypt configuration for the 1300 bridge wireless network . i have below configuration please suggest any change or modification on the configuration .
network topology
R1--------------SW1<-----------------> root bride-1 <---------------------------> Non-root bridge-1 <------------------------ >SW2( remote office)--------LAN hosts
SW1- Gi0/0- 10.200.32.1/29            BVI- 32.2/29                               BVI - 32.3/29                                   SW2-GI0/0 - 32.4/29
network setup : SW1 - LAN port to root bridge connection -- Gi 0/0 - ip address configured -10.200.32.1/29
                         Root-brdge -------------------------------------------- BVI 10.200.32.2/29 -----
                         Non root bridge----------------------------------------BVI 10.200.32.3/29
                         SW2 LAN port-Non root bridge ----------------- Gi0/0 10.200.32.4/29
both bridge have only BVI configured and no VLAN or subniterface on the both bridge .
SW1 and SW2 port connected to bridges are not part of vlan , ports configured with specfic IP address
Below is bridge configration . I would like to know with this below configuration data traffic will get compelete encrytion ??? or any security threat ?? . please suggest
dot11 ssid
   authentication open
   authentication key-management wpa
   wpa-psk ascii 7 123456
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers aes-ccm
station-role root bridge
bridge-group 1
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
hold-queue 80 in
interface BVI1
ip address 10.200.32.2 255.255.255.248
no ip route-cache
ip default-gateway 10.200.32.1
ip http server
no ip http secure-server
control-plane
bridge 1 route ip
************************************Configuration on non root bridge.******************************************************************
dot11 ssid
   authentication open
   authentication key-management wpa
   wpa-psk ascii 7 123456
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers aes-ccm
bridge-group 1
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
hold-queue 80 in
interface BVI1
ip address 10.200.32.3 255.255.255.248
no ip route-cache
ip default-gateway 10.200.32.2
ip http server
no ip http secure-server
control-plane
bridge 1 route ip

Thanks Scott. We can go as high as we need to clear the fresnel zone. There is nothing but an empty parking lot in between the 2 building and about 1500 - 2000 feet of space but I have not done a site survey to see about the 2.4Ghz. I think we are going to need different antennae as well correct? I think the internal ones only go about 626 feet or so. I was thinking about using AIR-ANT3338. your thoughts.
Thanks in advance!

Similar Messages

Aironet 1300 wireless Bridges connection loss, help!

Hi,
We have 2 Cisco Aironet 1300 wireless bridges with yaggi antennas.
The connection drops sometimes (every 2 or 3 days) and never comes up again.
When we reboot the non-root bridge the connection works again. We swapped the complete unit but still the same.
For logs see attached file.
What can be the problem? The antennas are not aligned correctly?
Thx in advance
greetings,
Marc

How long is the path and what were the results of the survey?
Were the connectors waterproofed?
Please describe the sytem from the bridge to the antenna including cable type, length, path, outdoors, indoors etc.

1300 Wireless Bridge

I have been using two 1310 wireless bridges for about six months now. They have been working very well. However this morning they stoped connecting and one says that the Software status is disabled and the hardware status is down.
in the configuration the Radio is enabled and one is set to root the other to non-rooot. Nothing changed just stopped working. I even tried switching witch is root and Non-Root. The problem stays with the Non-Root.
Thanks
Phillip

Try this link. Should help you:
http://www.cisco.com/en/US/products/hw/wireless/ps5279/products_tech_note09186a0080508551.shtml

Secure wireless bridge

I want to establish a secure wireless bridge (with a root bridge and one non root bridge). I can set in the non-root which is the MAC address of the parent, but how can I set in the root bridge with MAC is the non-root one ? I want to avoid other non root bridges can connect to the parent
Thanks

Have an encryption running between the bridges. This way even if a unknown nonroot gets associated to the root, you will not be able to transmit or recevie data if the encryption keys are incorrect, and we have control over the encryption keys

Share network traffic between 2 parallel wireless bridges - What kit?

Dear All,
I'm a technology professional, but mainly in electronic design rather than high end networking. Hence my request for your advice.
I wish to specify some items of kit that I can ask a networking professional to fit and configure to solve my particular application.
I would like to use (and already have in place) two parallel wireless bridges between 2 buildings. One is on 2.4GHz and the other is on 5GHz. In my simple testing so far (of each link in turn), they both work brilliantly. So far, these are in place just for test purposes, but soon I will be required to make the system "live".
The reason I'm doing this is to split network traffic over both links (to possibly get enhanced bandwidth) but to mainly build in redundancy should one link fail.
What kit is required to do this (apart from the 4 access points configured as bridges)?
I imagine I may need a load balancing device(s) or possibly something more suitable for this task.
I'd like the solution to be very transparent to the rest of the system, I'd like it to "look" like it's a simple wireless bridge (but really it's a highly robust dual bridge). I hope my waffle makes sense.
Any thoughts?
Best regards,
L.O.

You can certainly copy the addresses from one machine to the other - the contact files are held in user/Library/Application Support/AddressBook. Copy all files into the same respective location on the other machine (they will overwrite any existing contacts).
If you want the address books kept in sync, take a look at SyncTogether or SeeCard Rendezvous.
Matt

Wireless bridge - encrypting all VLANs

I'm bridging two VLANs across a wireless bridge link. I have the following configuration:
dot11 ssid bridge
vlan 1
authentication open
interface Dot11Radio1
ssid bridge
station-role root bridge
interface Dot11Radio1.1
encapsulation dot1Q 1 native
bridge-group 1
interface Dot11Radio1.2
encapsulation dot1Q 2
bridge-group 2
interface FastEthernet0
interface FastEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
interface FastEthernet0.2
encapsulation dot1Q 2
bridge-group 2
If I want to encrypt this link with WEP on all vlans, which configuration would apply?
this?
int dot11radio1
encryption key 1 size 128bit 7 63D14E186CB92CC74122FD345E51 transmit-key
encryption mode wep mandatory
this?
int dot11radio1
encryption vlan 1 key 1 size 128bit 7 803EC038BBEA5C207F4663056E3B transmit-key
encryption vlan 1 mode wep mandatory
or this?
int dot11radio1
encryption vlan 1 key 1 size 128bit 7 803EC038BBEA5C207F4663056E3B transmit-key
encryption vlan 1 mode wep mandatory
encryption vlan 2 key 1 size 128bit 7 803EC038BBEA5C207F4663056E3B transmit-key
encryption vlan 2 mode wep mandatory

if anyone's interested, it appears that this config is enough:
int dot11radio1
encryption vlan 1 key 1 size 128bit 7 803EC038BBEA5C207F4663056E3B transmit-key
encryption vlan 1 mode wep mandatory
apparently, all VLANs become encrypted just with this config. WEP configuration for additional VLANs is ignored. I configured mismatching keys for vlan 2 on both sides, I could still bridge vlan 2 traffic.
This of course applies to bridging only. AP configuraiton would require correct keys for all vlans.

Enable AES encryption on 1310 Wireless bridge

Hi All,
I have requirment to enable the AES encryption on the management VLAN traffic between connected root and non root bridges . can any one share the configuration guidelines please ??
below is the network setup .
Router<---->SW1 ( main office)--> Root-bridge < ---------->non root-bride------SW2 ( remote end site)
Apart from the specific configuration on the wireless bridge is any extra configuration required on the Switch interfaces??
Regards
Lerner

Hello,
1. Make sure you are running version 12.3(7)JA or later since WPA2/AES was not always available for the 1310.
2. How do you currently have the root/non-root configured?
Ideally, adding AES shoudl be fairly straight forward. Keep in mind we recommend using WPA2 with AES.
configured on your root AND non-root:
dot11 ssid
authentication open
authentication key-management wpa version 2
interface do1
encryption mode ciphers aes-ccm

Very high data traffic generated by Nokia Messagin...

Is anyone else seeing really high data use on their phone log following last week's Messaging outage?
Up until last week's outage, the data traffic generated by Messaging was about 5kb an hour (with no new emails sent or received). Presumably this small amount of data traffic results from the Nokia email server "pinging" the phone periodically to keep the connection open.
But after last week's outage and issues with passwords being requested etc etc, I saw that the data traffic generated by the Messaging app has gone through the roof - about 400 - 500kb an hour! Again, this is with no new emails sent or received - so theoretically is just the server pinging the phone to keep the idle connection open!
I reinstalled Nokia Messaging on my phone (E61i) - no difference - the data generated by the Messaging app is still 400 - 500 kb an hour (it stops when I take Messaging offline).
I have friends roaming in Ireland and their phone has had the same problem - the data traffic generated by their Messaging app is sky high and they have had to shut it down because of the high cost of data whilst roaming.
I also newly installed Messaging on another phone (N95) that I have, using a brand new email account and a new T-mobile SIM card, and guess what - that phone also has sky high data traffic due to Messaging.
What is going on?? Can someone at Nokia Messaging please sort this out? Anyone roaming with Nokia Messaging enabled is facing hugh data charges from their network.

The data traffic occurs in phones which are on a home network (mine in the UK) and on a roaming network (my friends traveling in Ireland). Interestingly, I've now checked with another friend who is roaming in Italy and they also use Messaging but haven't seen any high packet data issues with their phone.
The data traffic shows up in the Packet Log, as well as on the actual T-Mobile network account (plus the charges for the data!) Accessing a T-Mobile UK account online shows all packet data use - in this case, 120-150 kb every 15 minutes, whereas before last week it was 1-2kb every 15 minutes.
When I "Go Offline" with Nokia Messaging, the high data traffic stops, both on the Packet Log and network account, so I am 100% certain this is due to Messaging.

High performance wireless bridge

We have two buildings 300 feet apart with perfect line of sight.
Price aside, what is the best point-to-point wireless bridge avalable from Cisco at this time? 54 Mbps max with 802.11a on a 1400 series wireless bridge is nowhere near acceptable for the services we plan on running over the bridge.
Thank you

Cisco doesn't have wireless bridges anymore.
If you can hide you APs from the environment (ie install APs inside of the building) then you can use something like 2602e with external antennas that will give you something close to 300mbps (provided you will use directional 3-element antennas).
I edited my message as it was wrong. Certainly 1552 can also provide 300mbps data rates.

Vlan traffic is not passing through Wireless Bridge

Hi,
Recently we have placed wireless bridge in our network (Cisco AIR-BR1410A-E-K9 model). Now after installing the bridge we are facing the issue like only the management interface traffic is reachable through bridge, but not able to reach other vlan traffic.
like management range is in vlan 1 (which inlcudes AP' Switch and router) and the bridge IP's are also in Vlan 1.
Switch port is kept in trunk mode both ends of bridge. still other vlan traffic is not reachable, do we have to place any special configuration for this ?
all the business users are in Vlan 3
all the sale team users are in vlan 123.
now problem is other end switches are reachable for me through bridge that is in vlan 1, but vlan 3 and vlan 123 are not reachable for me.users are not getting IP's, when we assigned the static ip address and tested still it is not working.
i am attaching my wireless bridge configuration in the discussion, please help on this issue.
Root Bridge ---- Non--Rootbridge--- Cisco Switch--Cisco Switch..
now i am able to those two switch also, but not able to reach the vlan 3 users who are connected to that switches.

Hi,
infrastructure-ssid has been placed at both end still not able to get IP's to the devices.
I am not able to attach txt files in the reply, could you please let me know your email ID so that i will send the config files to your ID.

WAP200E wireless bridge not passing data

Just setup two WAP200E's, the bridge is "Connected" as I look Status > System Performance in both WAP's. However, I cannot get to the LAN from one network to the next. Cannot even ping the WAP's from either side.
I already have two WAP200E's on this network, that have been working well for month (164 day uptime), and they are configured with a wireless bridge between them, both networks on the same LAN (same 192.168.2.x network on either side). The bridge names are different, different from the main WiFi in the building, too (if it makes a difference), and the static IPs the WAPs have don't appear to have any conflicts on the network.
This is actually three buildings, one is the main one with a Cisco SR520 for a router, and a Cisco SF 200-24P switch. So two WAP200E's go into this switch now, and I see them both fine when going into the management interface. Then each of the other buildings has one WAP200E, and a small Netgear 8 port PoE gigabit switch at each building to power the WAP.
The Netgear switches aren't managed, and I've made sure any features like STP, VLANs, etc. are turned off. And the Cisco SF 200 switch is set at auto and all the defaults mostly, particularly for the ports. I tried doing a SmartPort for this latest WAP200E and that didn't change anything, tried disabling STP for it too, and no change. The PoE port for the working WAP200E is identical in config to the PoE port for the new WAP200E, and both show forwarding, all VLANs admitted (none are enabled, no VLAN tagging, etc.).
So now I am wondering if I can have two WAP200E's into one switch? Or two bridges on the same LAN subnet? Or is there something else I am missing or should configure?

I just resolved this after reading through the community posts on people not pinging across a wireless bridge. After reading one of them it was suggested to try another channel. Seemed odd since I would see success in and packets and bytes being sent and received in the WAPs.
I ended up changing the SSID name to some a little different an changed the channel from 3 to 10 in both units. Worked instantly and has been rock solid now.
Sent from Cisco Technical Support iPhone App

Wireless Bridge aironet 1410

We have a site with couple of consumer level bridged AP's. We have been recommended a Cisco 1410 wireless bridge but it is very expensive. What are the added features of this bridge and is someone using it? We originally were thinking of replacing the AP's with cisco 1231 AP's and bridging them as it would be cheaper.
Is there a benefit to using a 1410?

The Cisco Aironet 1400 Series Wireless Bridge is the premier high-speed, high-performance outdoor bridging solution for line-of-sight applications, providing features such as:
a) Support for both point-to-point or point-to-multipoint configurations
b) Industry leading range and throughput, supporting data rates up to 54 Mbps
c) Enhanced security mechanisms based on 802.11 and 802.11i standards
d) Ruggedized enclosure optimized for harsh outdoor environments with extended operating temperature range
e) Integrated or optional external antennas for flexibility in deployment
f) Designed specifically for ease-of-installation and operation
More information on the 1400 bridge is available in the data sheet at http://cisco.com/en/US/products/hw/wireless/ps5279/products_data_sheet09186a008018495c.html

Wireless Bridge Help

Hi all,
I have a Wireless P2P bridge set up between two buildings. They are about 450 feet apart, Root bridge has a 16dbi Yagi antenna (ebay) and nonroot has a 12dbi Flat Panel antenna. Both bridges are 1231G APs set to Root and Nonroot mode, respectively. I have a few questions. Right now the link is working and is reliably connected. My data rates right now are 1.0 , 2.0 , 5.5 , 6.0 , 9.0 , 11.0 , 12.0 , 18.0 , 24.0 , 36.0 , 48.0 , 54.0                                   Mb/sec on both sides. I consistenly get on the lower end of the scale, usually hovering around 5.5-12mb/sec range on the nonroot side. Root is typically transmitting at 48 or 54 mb.
My signal should be pretty good at -61 and 34-37 SNR, right?
At work we have a wireless bridge (1310 hardware) and it is set to :::speed basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0::: so I went into mine (1231G hardware) and set it to the same. Voila! I connected at 24-54mb. All seemed well - until I noticed that now that I wasnt using the B rates, I had a spotty connection that was going up and down. Changed it back to all rates, and I again have a stable connection.
What can I do to stabilize and set the connection to OFDM rates so it will be fast and reliable? The distance really shouldnt be an issue, and I can see from one antenna to the other. Would 2 panel antennas be better? Should I find higher gain antennas? Should I switch to the 1310 hardware because it is designed as a bridge? HELP!!!
Here is the output from the Root side:
Root#sh dot11 associations all-client
Address           : 0014.a86f.2b50     Name             : NonRoot
IP Address        : 10.10.81.3         Interface        : Dot11Radio 0
Device            : 11g-bridge         Software Version : 12.3
CCX Version       : NONE
State             : EAP-Assoc          Parent           : self
SSID              : WT3342NET
VLAN              : 0
Hops to Infra     : 1                  Association Id   : 160
Clients Associated: 1                  Repeaters associated: 0
Tunnel Address    : 0.0.0.0
Key Mgmt type     : NONE               Encryption       : WEP
Current Rate      : 54.0               Capability       : WMM ShortHdr ShortSlot
Supported Rates   : 1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates       : disabled
Signal Strength   : -61 dBm           Connected for    : 925 seconds
Signal to Noise   : 34 dB            Activity Timeout : 28 seconds
Power-save        : Off                Last Activity    : 2 seconds ago
Apsd DE AC(s)     : NONE
Packets Input     : 7521               Packets Output   : 4241
Bytes Input       : 2893219            Bytes Output     : 650362
Duplicates Rcvd   : 0                  Data Retries     : 1375
Decrypt Failed    : 0                  RTS Retries      : 0
MIC Failed        : 0                  MIC Missing      : 0
Packets Redirected: 0                  Redirect Filtered: 0
Session timeout   : 0 seconds
Reauthenticate in : never
And here is the output from the NonRoot side:
NonRoot#sh dot11 associations all-client
Address           : 0013.c365.6190     Name             : Root
IP Address        : 10.10.81.2         Interface        : Dot11Radio 0
Device            : 11g-bridge         Software Version : 12.3
CCX Version       : NONE
State             : EAP-Assoc          Parent           : Our Parent
SSID              : WT3342NET
VLAN              : 0
Hops to Infra     : 0                  Association Id   : 143
Tunnel Address    : 0.0.0.0
Key Mgmt type     : NONE               Encryption       : WEP
Current Rate      : 5.5                Capability       : WMM ShortHdr ShortSlot
Supported Rates   : 1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates       : disabled
Signal Strength   : -60 dBm           Connected for    : 1012 seconds
Signal to Noise   : 37 dB            Activity Timeout : 15 seconds
Power-save        : Off                Last Activity    : 0 seconds ago
Apsd DE AC(s)     : NONE
Packets Input     : 14106              Packets Output   : 7646
Bytes Input       : 2176272            Bytes Output     : 2908380
Duplicates Rcvd   : 0                  Data Retries     : 3136
Decrypt Failed    : 0                  RTS Retries      : 661
MIC Failed        : 0                  MIC Missing      : 0
Packets Redirected: 0                  Redirect Filtered: 0

Hi George,
Tonight I installed a matching panel antenna (l-com HP2414) on my side, and have similar results (actually worse results at first). I upped my side transmit to CCK 30 and OFDM 30 from 20/20 and now have about the same performance (see red below). I have a question - how important is it to have the wifi antenna clear? I have it mounted on the same mast as our TV antenna- see pic attached. Should I move it to it's own mast? I can mount another one on a second chimney if necessary, or raise the TV antenna up a few feet.
I am also not past sticking a yagi at both sides if that will improve my signal to noise ratio...connection still is around 36-54mb, but download speeds on the other side are still only 6mb, not the full 25 we get on the wire off the core, or even the 16 I got on the test nonroot bridge I set up at the same side as the root.
NonRoot#sh dot11 associations all
Address           : 0013.c365.6190     Name             : Root
IP Address        : 10.10.81.2         Interface        : Dot11Radio 0
Device            : 11g-bridge         Software Version : 12.3
CCX Version       : NONE
State             : EAP-Assoc          Parent           : Our Parent
SSID              : WT3342NET
VLAN              : 0
Hops to Infra     : 0                  Association Id   : 199
Tunnel Address    : 0.0.0.0
Key Mgmt type     : NONE               Encryption       : WEP
Current Rate      : 54.0               Capability       : WMM ShortHdr ShortSlot
Supported Rates   : 1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
Voice Rates       : disabled
Signal Strength   : -65 dBm           Connected for    : 9517 seconds
Signal to Noise   : 32 dB            Activity Timeout : 15 seconds
Power-save        : Off                Last Activity    : 0 seconds ago
Apsd DE AC(s)     : NONE
Packets Input     : 95379              Packets Output   : 10182
Bytes Input       : 15774260           Bytes Output     : 2163933
Duplicates Rcvd   : 0                  Data Retries     : 7927
Decrypt Failed    : 0                  RTS Retries      : 168
MIC Failed        : 0                  MIC Missing      : 0
Packets Redirected: 0                  Redirect Filtered: 0

Wireless Authentication/Security Design questions

Wireless newbie here...I was required to quicky stand up a wireless deployment at a new warehouse/office building. I have the basic network up and working. My remote AP's have associated with the 2106 in the main office and users can associate and authenticate with the 1130G AP's and can access the office network. I did the basic configs and am now looking to tighten up security. My questions are as follows:
1) The user clients are Dell Laptops with integrated wireless. They authenticate using LEAP..how do I migrate to EAP or do I need to. I have a Cisco ACS doing RADIUS authentication now.
2) Should I be using some kind of supplicant client on the laptops?
3) How do I filter mac's so rogue AP's and rogue clients cant try and associate.
4) Am I correct in assuming the connections between the 1130 AP's and 2106 are secured and if so do I need to tweak anything to tighten them up?
5) I have an AP in the main office building that I want to setup to detect rogue AP's. Do I have it associate as a regular AP and push some kind of policy to turn it into a detector?
I have attached a diagram to help explain. Any help would be appreciated.
v/r
Chad

1. LEAP is a form of EAP, so you must already have something terminating your EAP sessions. The WLC can do this to some extent, or ACS. Which one you chose will be based upon your requirements for manageability, scalability and feature-richness. I would suggest that PEAP-MSCHAPv2 provides a good balance of usability and security, and is significantly better than LEAP.
2. No, stick with Windows XP SP2 supplicant. This can be configured using domain policy (2k3 SP1 or better) and is pretty good. Just make sure your laptops have new Intel drivers on them. Dell in particular have been quite bad with sending out old drivers in the builds.
3. MAC authentication is now lergely regarded as a waste of time. It is so easy to spoof a MAC address it's ridiculous, and it's a fair amount of work for the admin(s).
4. The LWAPP tunnel encrypts all management / config / security related traffic between the AP and WLC, while user data is simply encapsulated in LWAPP, so it can potentially be read if packets are captured.
5. All APs will do rogue detection, don't really need to have dedicated APs unless you're REALLY paranoid. Main benefit is quicker detection, but drawback is that the 'detector' AP won't serve clients.
Regards,
Richard

Voice vlan priority across wireless bridge network

Hello,
If you have a separate voice vlan across a wireless bridged network, how could you configure qos to put the entire voice vlan in priority over the data vlan ?
Thanks.

Hi Antonis,
Have a look at these docs. Hopefully they will help get you started;
Cisco Aironet 1300 Series Outdoor Access Point/Bridge Software Configuration Guide, 12.3(4) JA
Chapter 14 - Configuring QoS
This chapter describes how to configure quality of service (QoS) on your access point/bridge. With this feature, you can provide preferential treatment to certain traffic at the expense of others. Without QoS, the access point/bridge offers best-effort service to each packet, regardless of the packet contents or size. It sends the packets without any assurance of reliability, delay bounds, or throughput.
From this doc;
http://www.cisco.com/en/US/products/ps5861/products_configuration_guide_chapter09186a00804158a6.html
Giving Priority to Voice Traffic
This section demonstrates how you can apply a QoS policy to your wireless network's voice VLAN to give priority to wireless phone traffic.
In this example, the network administrator creates a policy named voice_policy that applies voice class of service to traffic from Spectralink phones (protocol 119 packets). The user applies the voice_policy to the incoming and outgoing radio ports and to the outgoing Ethernet port for VLAN 77.
Use the Apply Policies to Interface/VLANs drop-down menus to apply policies to the access point Ethernet and radio ports. If VLANs are configured on the access point, drop-down menus for each VLANs' virtual ports appear in this section. If VLANs are not configured on the access point, drop-down menus for each interface appear.
From this doc;
http://www.cisco.com/en/US/products/ps5861/products_configuration_guide_chapter09186a00804158a6.html#wp1047736
Hope this helps!
Rob
Please remember to rate helpful posts.......

1300 wireless bridge secured data traffic encryption --high

Similar Messages

Maybe you are looking for