Managing ACLs (7600, CRS IOS-XR, GSR) – advise on automation tools for SP

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-fareast-language:EN-US;}
Hello All,
There are many wonderful Service Provider infrastructure hardening documents available from Cisco CCO and CiscoPress.
I have seen many over my life. Sample documents are:
Mannaging ACLs (7600, CRS IOS-XR, GSR) - automation tools, Document ID: 13608
Network Core Infrastructure Best Practices, Yusuf Bhaiji
Cisco Guide to Harden Cisco IOS XR Devices
Each service provider is recommended to enable and configure rACLs, CoPP, block unnecessary control protocols over the edge, Protect BGP peering with interface ACLs and many many more. Unfortunately there is no tool available from Cisco to configure and maintain all those features.
I would like to ask question to NetPro community. Have you seen any working products from Cisco or Cisco partners for ACL management. Lets keep Cisco Security Manager (CSM) aside. CSM is enterprise oriented tool and supporting routers up to 6500/7600.
I’m looking for this tool for few years already. Looks like other Service Providers are using home made developments. Google recently partially published own tool capirca to a public domain (do search on “ACL Management @ Google” or capirca). This is good start but I is missing ACL deployment module (it is not released by google).
Please share you experience!
Cheers!

Similar Messages

  • I use an Iphone 3 GS managed to upgrade to ios 6.1 and now i am unable to activate my phone... what shall i do

    I use an Iphone 3 GS managed to upgrade to ios 6.1 and now i am unable to activate my phone... what shall i do

    How did you update,
    Did you download the firmware sepratly, then installed or just by cliking update?

  • HT201210 Hi, I have managed to upgrade to ios 5 but after backing up etc...

    Hi guys, I am having a nightmare! Managed to upgrade to ios 5 version, but my Apps, and all my files and work has disappeared????? This is after saving in library backing up etc... All my music, my go to doc files, contacts, iBooks etc...!!!! My books  and other apps ( empty) are in the library but not syncing with my iPad. Absolutely gutted!! Is there anything I can do to correct?

    restore your ipad to the backup you made. turn on manually manage music and videos. sign into icloud, your docs and whatnot, if they were saved to the cloud, should still be there.
    sorry this happened to you.

  • Misconfiguration of Management ACL on AP541N-A-K9

    Hello community,
    I hope one of you can help, I mistakenly mis-configured "Management ACL mode" on my AP541N.
    Administration>Administration Access Control>Managment ACL Mode
    I set this to "Enabled", the problem is I only entered 1 IP address, and that IP address is the SAME IP as the AP's own internal interface.  I was not thinking and entered that IP out of habit when I meant to enter my workstation's IP.  The FW does not have a safeguard against this.
    So, as you can see, this is a big problem, because now I have completely cut off all access (That I can think of) to the router.  I can never access the AP as that IP because if I set my workstation to that IP, 1) There will be an address conflict, 2) My computer won't route traffic to the AP out its NIC because it recognizes that IP as itself.
    Do any of you have any ideas of how I can get into the AP to correct this issue short of completely resetting the thing?
    Thanks,
    -Tim

    Unfortunately no, the reset is the only way to access the AP since the IP is overlapping.
    -Tom
    Please rate helpful posts

  • Managing Skype notification on iOS

    Hi Skype for iOS community,
    Since releasing Skype 4.17 for iOS we've seen a lot of feedback from you guys around notification frequency and management. We have created an FAQ article that explains how you are in control of the Skype notifications on your iOS device. Please have a look here: https://support.skype.com/faq/FA12404
    NB: You won't be able to receive call notifications if you "kill" the app using the iOS task manager. If you want to receive notifications about incoming calls please make sure you put the Skype app into background only using the "Home" button on your iOS device. IM notifications will work in both scenarios.
    Please share your feedback on the updated notification behaviour which we are continuing to improve in this topic. Thanks in advance.

    Claudius wrote:
    We understand your concerns and have been hard at work, for some months actually, to design a better system that addresses the things you outline. We understand that changing app behaviors is very upsetting for long time users, and are looking for ways to balance existing user habits with the expectations of newer users, steeped in current mobile application behavior. Our notification behaviour is aligning with the one common amongst chat apps on iOS. We don't think users should remember to switch on Skype app to be able to receive IM or calls. Just like you don't "go online" to receive normal phone calls or text messages. Instead we think you should be reachable for you contacts on Skype all the time. More info on that here: http://blogs.skype.com/2014/02/13/skypes-enhanced-chat-experience/ We continue to improve the multi device notification behaviour as well as the presence indicator when you switch off your device and your feedback here on the community has been very valuable so far to define the different user scenarios. We are not in a position to share any ETA for when these improvements will land in your hands, but rest assured we are working on it.Claudius, you seem to still not get it:
    This new offline instant messaging "feature" and message sync across devices may be a cool thing, at least for some brain dead, unaware users. For the rest of us you have broekn one of Skype's basic features, one it was born with: the ability to set your status to "offline" to show people you can't answer right now.
    You seem to not understand the seriousness of this - touting advantages of the new "feature" - but not understanding you just made Skype useless to millions of users who rely on Skype for serious and professional use!
    If I call somebody on the phone and the person isn't in or unable to answer, do I get his voice on the phone saying "Hi, it's Mark here"? Correct, I don't. So why is it that Skype indicates me as online when I have set my status to offline on all devices on which I run Skype? I have even logged out!
    It's invasive and utterly frustrating, and as many have indicated here it has already caused many unpleasant situations for thousands, probably millions of people.
    I keep being unable to understand how a software company with thousands of employees is capable of making such fundamental errors.

  • IOS 8 - pictures not uploading in safari for facebook and other websites?

    IOS 8 - pictures not uploading in safari for facebook and other websites? I just upgraded to IOS 8 on my iPad 3 retina display and when I try to upload pictures in safari for facebook, the picture upload just stalls and never completes. This happens in other sites as well. How can I fix this? Is anyone also experiencing this issue???

    Hi Hindhaughlee, <br />Thanks for the post.
    This may not be the best place to post such a solution but maybe some users will find it. If it turns out to be a major problem with a simple solution maybe we will manage to document it somewhere.
    Are you able to provide more details please:
    * exactly what software and software versions is the problem with ? <br /> You appear to be a Windows 8 user, but presumably the Kaspersky software may be applicable to other Windows versions, which Kaspersky software is this tested with ?
    * What is he exact error message or warning that Kaspersky generates in this situation ?
    * is the problem documented elsewhere, preferably in a public open site, if so maybe you could provide a link
    * can you detail simple but exact detailed Steps To Reproduce that will enable others to test out this problem and solution.
    Cheers
    John <br /> <sub>One of the forum moderators J99<sub>
    P.S. <br />
    Anyone with this problem finding that the solution works may wish to vote for this thread and solution. Or if someone else can produce links to examples of this or you are able to give precise Steps To Reproduce please add a post of your own.

  • Tools for tracking web management tasks

    Sorry this is off-topic, but this is one of the few web
    development forums I can post to from my work PC due to filtering
    restrictions. It's on-topic from the point of view that we are a
    Dreamweaver development team.
    I am looking for input on a job tracking tool for our web
    management team in a government agency. Ideally the tool would need
    to run on .NET (ASPX/MS-SQL). We currently use an old clunky Lotus
    tool that is being phased out.
    Our basic needs are:
    integration with LDAP/Active
    Directory
    customisable client job creating form
    with multiple file attachment
    email integration with Microsoft
    Outlook
    client area to check on progress of
    jobs via a browser
    developer area to view allocated
    jobs, advise progress and post replies
    admin area to get reports on job
    status, progress, etc
    ability to re-assign jobs based on
    status - e.g. development, QA, test, publish
    If anyone has found such a tool, I'd really appreciate a
    point in the right direction.
    Thanks
    Tony

    Hi Fangnaka,
    You can use JWDSP2.0 + Tomcat 5.X +Jdk1.5 to develop and deploy webservice.
    Better IDEA are Intellij or Eclipse for webservice code development.
    Cheers
    Rajesh R

  • I have updated to ios 7 and Microsoft outlook web access for work emails no longer works nor my remote access can you help

    I have updated to ios 7 and Microsoft outlook web access for work emails no longer works nor my remote access can you help

    This happened to me as well. I read somewhere else that resetting the network settings (General, Reset, Reset Network Settings) would help and it partially did. I get half (the folders) of the Web Access screen rather than a blank screen. I tried tihs a few more times and got the right half (the messages) on occasion but never the whole web page.

  • How to downgrade from iOS 8.1 to 7.1.2 for iPhone 5 ?

    Dear Experts
    How to downgrade from iOS 8.1 to 7.1.2 for iPhone 5 ?
    The situation is that in Hong Kong, I bought the iPhone 5 for my mainland China friend.
    The seller said that the iPhone 5 was brand new and was come from USA.
    I found that iPhone 5 was in iOS 8.1. I wonder that why brand new iPhone 5 would be installed in iOS8.1?
    My friend finds that the response of iPhone 5 is so late.
    He prefers to downgrade to iOS 7.1.2.
    Please reply.
    Thank you
    Regards
    Lawrence

    How to downgrade from iOS 8.2 to 7.1.2 for iPhone 5
    Asking the same question a 2nd time will not get a different answer.

  • HT4623 I have updated my iphone 5 with IOS7. Now there is an update 7.0.2 on my cell and the size of update file is showing around 21.0 MB. I tried to update it ITunes but it seems it is downloading the entire IOS. Is there any separate update for the sam

    I have updated my iphone 5 with IOS7. Now there is an update 7.0.2 on my cell and the size of update file is showing around 21.0 MB. I tried to update it ITunes but it seems it is downloading the entire IOS. Is there any separate update for the same or I have to download the entire IOS again?

    Well when you download the update with iTunes it will always download the whole new version (in your case 7.0.2) even if its just an bug fix. If you already have 7.0 download the update over-the-air.
    You already wrote that the update is only 21 MB, so its not the whole firmware package of 7.0.2 you get with iTunes.

  • The iOS 8.0.2 has been downloading for an hour on my iPad, is that normal?

    The iOS 8.0.2 has been downloading for an hour on my iPad, is that normal?

    Yes. Your product list shows that you're currently running iOS 7.1.2, and whenever you make a major update, i.e. iOS 7 to 8, it's a large file which can take a while to download.

  • Paperq: a tool for managing a reading queue of academic literature

    paperq is a command-line tool for managing a reading queue of academic literature.   It's usage is simple: you add files to the queue and then you run it without arguments to open the next file in the queue. The queue part of the code itself is rather simple but paperq also offers some other nice features:
    Add files (-a option)
    Remove a file (-r option)
    Display info on a file. Given a BibTeX file,  print the bibliographic information, otherwise print the file location (-i option)
    List all files (or bibliographic information) in the queue (-l option)
    Create an archive (tar.gz) of the papers in the queue, prepending the file names with the queue position (-z option)
    Operate on any file in the queue, instead of the head, via the -n option
    Peek at a file (open it, but don't remove it from the queue) via the -p option
    Print a file (-t option)
    Configurable file-opening command (xdg-open %s, by default)
    Documentation is available in the README file or on the website (see below). A man page is also included.
    I've been using it myself now that I finally stopped using Mendeley. I find it to be quite handy, so I've packaged it up to be shared with others.
    Screenshot showing the bibliographic info:
    Website
    AUR
    Last edited by jakobcreutzfeldt (2014-01-28 09:15:50)

    I just uploaded version 1.1.1.  I somehow missed a bug in which the first word of the author list was being chopped off. It's fixed.
    marttt wrote:Thanks very much for this! I can finally ditch some of my ugly scripts now. Have you considered adding other bibliographic data formats in the future? (Here is an interesting solution with YAML and Pandoc and, correspondingly, proper UTF-8 support.)
    Glad to hear it could be of use to you! Honestly, this also just started out as a quick script but little by little I started adding more handy features.
    As for other bibliographic formats, it could be possible. I'm mainly familiar with BibTeX, so I would need to see how the other formats look. 
    In all honesty, the bibliographic info printing could be greatly expanded: only journal articles are supported at the moment, and mathematical expressions in the titles aren't yet supported (i.e. greek characters).  It might be more efficient in the long run to write a dedicated biblio parsing program that loads some pre-written BibTeX-parsing library rather than all the crazy sed work that's going on in there right now. If that's the case, then it's just a  matter of loading some library for a different biblio file format in order to support it.

  • Tools for SAP development work management?

    Hi fellow SAP developers!
    As you know, in a big software company the management of development work can be a challenge. Everyone should be able to see quickly who is doing what, who is available for new work, how did some old requests get solved and where is their documentation. We are talking about more than just some simple ticket management system here. It would be a central repository and work management tool for years to come.
    I am interested to hear some suggestions for good tools that can be used for development work management in SAP world.
    - It should be a tool where development requests can be input, reviewed, approved, documented and stored.
    - It should support storing attachments
    - It should support a project structure, under which the development items are created.
    - It should be searchable and have different views to the development requests (for example by project, request raiser, developer, status etc.)
    - It should have some kind of approval system or workflow.
    - It should also support email notifications when the status or person assignment changes.
    - It should run on large corporate network (accessible in intranet, perhaps via browser).
    - A nice bonus would be a mobile client access for urgent cases
    I'm keen to hear any proposals, even if not all the points in the wishlist are fullfilled
    I'm interested to hear any comments on your exeperiences on various work  management tools. What worked and what not?

    Well, a SAP based product would be efficient as it is integrated and there would be no need for additional licenses etc.
    I have to investigate the Solution manager offerings more, if that indeed could handle this task. Have you got any further information or experience?
    Rally sounds interesting as well! Are there any other tools like that, proven good in SAP development?
    For simply using Abap workbench, I'm afraid that is not good enough for what I'm after. How would you manage for example work queues, project based issue views and extensive solution documentation with it? And everything would have to be searchable and visible for also for non-technical managers who do not log in to SAP.

  • Tool for project management

    Hi All,
    My project is about to commence.
    Can anybody suggest me if SOLMAN is more appropriate tool for project management?
    What are the limitations of saolution manager?
    Thanks.

    We use 3 major tools:
    1) MS Projects for Planning, WBS and capture major events. This is basically tracking tool.
    2) SAP Solman for Documentation. Lilke Business specs, Technical specs based on each process were documented, approved and stored in the SAP Solman. We also use SAP Solman to plan for Test Plan managements and Testing records thanks to the fantastic intergration of testing with Business documentation.
    3) MS Sharepoint for collobaration, storing the project relevant documents like Project meeting presentations, User Manauls, Team meeting status reviews and updates and yes Project event photos etc.,
    So in a nutshell there is no one tool can do everything for you especially when we are dealing with SAP Projects. SAP Solman have fine integration with SAP Project methods and System connection, but you need few other tools to keep track of whole Project.
    Hoep this helps. Good Luck

  • Commercial Tools for OAF Deployment Management?

    Are there any commercial tools for the automation and management of OAF project deployments?
    Thanks,
    Kurz

    Kurz,
    I think there is no such tool. We generally make zip of all our development and import it with the help of shell scripts.
    The other way is to FTP the related object on to server and run the import command if any.
    Finally bounce the appache.
    Thanks
    --Anil                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

Maybe you are looking for

  • Media center, clicktoflash, clicktoplugin - airplay problem

    Hi there - I use the clicktoplugin extensions, with the Media Center extension to watch youtube videos by airplay on my Apple TV2. This used to work, but now the video stops streaming after a couple of seconds all the time. It is very frustrating. Do

  • Scatter chart with lines between points

    In one of our Deski reports, we have a "funnel" chart.  This is essentially achieved with a scatter plot graph with lines drawn between the scatter points to resemble a line chart.  This allows us to draw odd lines, such as a funnels that don't reall

  • JavaScript not functioning in administrative deployment

    I've created an administrative installation of Adobe Reader 9 as per the instructions here: http://www.adobe.com/devnet/acrobat/pdfs/gpo_ad_9.pdf I've applied the patches in the order specified here: http://kb2.adobe.com/cps/498/cpsid_49880.html And

  • Firewall rule-based analyser

    I am managing a mixture of ASA and FWSM Firewalls. I there a cisco tool that can sanity check the rule base ... in terms of identifying redundant or shadowed rules etc., and other sub optimal configuration issues within the rule base? I have a lot of

  • HOW DO I CORRECT PICTURE QUALITY

    Hello-- I have just finished authoring my project in DVD Studio Pr 4 and all is perfect EXCEPT: the picture quality is poor. I started in Final Cut Pro, used Compressor at the Best Setting and it does not look good as the master. Any suggestions? I w