Security with mulitple organizations sharing an ONS backbone

Has anyone ever connected two organization's 15454s together with either a subtend ring or PTP and NOT allowed one another access to each others CTC? We want to use our respective systems to transport another parties traffic, but despite organizational trust, want to keep everyone honest.

Hi Jeff
If you only use in-band management, then just disable DCC on the links between the two organizations. We use this also as a security feature between different service providers. If the DCC is disabled, then no management traffic is sent in the SONET/SDH header frames. I do not really know how secure it is, but I never heard that a service provider was under attack on a SONET/SDH link by a management protokoll.
Cheers
Rene

Similar Messages

  • Is my airport network secure with Personal File Sharing on?

    I have my Airport Extreme connected to a cable modem. I have a G4 tower w/external hard drive connected by ethernet cable to the airport base station. I use a MacBook laptop wirelessly around the house to access the internet.
    Each computer is set up for multiple users but we don't use passwords with any of our user accounts. I have Personal File Sharing turned on in both computers and am able to access accounts and drives from the other computer in the house.
    I do have password protection (WPA/WPA2 personal) set up on the Airport network itself.
    Does the fact that I don't have passwords on the user accounts mean someone outside of my home could get into my home network and access my files?
    Does the afp address I use to access the other computer in the house afp://10.0.XXX mean it is restricted to people outside of my home?
    Any guidance someone could provide is appreciated.

    Does the fact that I don't have passwords on the user accounts mean someone outside of my home could get into my home network and access my files?
    No.
    WPA (with a strong non-dictionary password) is going to keep everyone off you network.
    If they could get on your network, then they would be able to access your files.

  • How can I create additional security with my ipad on a shared office network?

    How can I create additional security with my ipad on a shared office network?

    Haven't heard of any security explotes on the iPad.  That should tell you security has been built in.
    Great password.  Set up remote wipe in case iPad goes missing.  Backup iPad regularly.
    Robert

  • ICloud Calendar I created and share with a organization.

    I am not longer with this organization. They want to keep the calendar that we share via iCould and I want to "un-subscribe". As the creator of the calendar am I able to transfer the "ownership" to another person?
    Please help,
    Cotton

    We just did this at our organization, but ran into 2 problems:
    1) The appointments all displayed in the new ical correctly, but not in icloud. 
    2) Sharing the calendar with others - the appointments did not appear for anyone in either ical or icloud.
    Thoughts?

  • RAC with 10G using shared directories

    We want to test Oracle 10G with Real Applications Cluster, but we do not have a SAN yet, can we use a disk from a normal server, share this disk and create a map network drive in the two servers that i want to install in the RAC? and use them like a shared disk??

    This is the article about what I was refering:
    Setting Up Linux with FireWire-Based Shared Storage for Oracle9i RAC
    By Wim Coekaerts
    If you’re all fired up about FireWire and you want to set up a two-node cluster for development and testing purposes for your Oracle RAC (Real Application Clusters) database on Linux, here’s an installation and configuration QuickStart guide to help you get started. But first, a caveat: Neither Oracle nor any other vendor currently supports the patch; it is intended for testing and demonstration only.
    The QuickStart instructions step you through the installation of the Oracle database and the use of our patched kernel for configuring Linux for FireWire as well as the installation and configuration of Oracle Cluster File System (OCFS) on a FireWire shared-storage device. Oracle RAC uses shared storage in conjunction with a multinode extension of a database to allow scalability and provide failover security.
    The hardware typically used for shared storage (a fibre-channel system) is expensive (see my column on clustering with FireWire on Oracle Technology Network (OTN) for some background on shared-storage solutions and the new kernel patch). However, once you’ve installed and set up the kernel patch, you will be on your way to setting up a Linux cluster suitable for your development team to use for demo testing and QA—a solution that costs considerably less than the traditional ones.
    The patch is available to the Linux and open source community under the GNU General Public License (GPL). You can download it from the Linux Open Source Projects page, available from the Community Code section of OTN. See the Toolbox sidebar for more information.
    Figure 1: Two-node Linux cluster using FireWire shared drive
    By following this guide, you’ll install the patched kernel on each machine that will comprise a node of the cluster. You’ll basically build a two-node test configuration composed of two machines connected over a 10Base-T network, with each machine linked via FireWire to the drive used for shared storage, as shown in see Figure 1.
    If you haven’t used FireWire on either machine before, be sure to install and configure the FireWire interconnect in each machine and test it with a FireWire drive or other device before you get started, to ensure that the baseline system is working. The FireWire interconnects we tested are based on Texas Instruments (TI, one of the coauthors of the IEEE specification on which FireWire is based) chipsets, and we used a 120GB Western Digital External FireWire (IEEE 1394) hard drive.
    Table 1 lists the minimum hardware requirements per node for a two-node cluster and some of the additional requirements for clusters of more than two nodes. You can use a standard laptop equipped with a PCMCIA FireWire card for any of the nodes in the cluster. We’ve successfully tested a laptop-based cluster following the same installation process described in this article.
    As shown in Table 1, for more than two nodes, you must add a four- or five-port FireWire hub to the configuration, to support connections from the additional machines to the drive. Just plug each Linux box into a port in the hub, and plug the FireWire drive into the hub as well. Without a hub, the configuration won’t have enough power for the total cable length on the bus.
    The instructions in this article are for a two-node cluster configuration. To create a cluster of more than two nodes, configure each additional node (node 3, node 4) by repeating these steps for each of the additional nodes and also be sure to do the following:
    Modify the command syntax or script files to account for the proper node number, machine name, and other details specific to the node.
    Create an extra set of log files and undo tablespaces on the shared storage for each additional node.
    It’s not yet possible to use our patched FireWire drivers to build a cluster of more than four nodes.
    Step 1: Download Everything You Need
    Before you get started, spend some time downloading all the software you’ll need from OTN. If you’re not an OTN member, you’ll have to join first, but it’s free.
    Keep in mind that these Linux kernel FireWire driver patches are true open source projects. You can download the source code and customize it for your own implementations as long as you adhere to the GPL agreement.
    See "Toolbox" for a list of the software you should download and have available before you get started.
    Step 2. Install Linux
    Once you’ve downloaded or purchased the Red Hat Linux Advanced Server 2.1 distribution (or another distribution that you’ve already gotten to work with Oracle9i Database, Release 2), you can install Linux on the local hard drive of each node (this takes about 25 minutes per node). We’ll keep the configuration basic, but you should configure one of the network cards on each machine for a private LAN (this provides the interconnect between nodes in the cluster); for example:
    hostname: node1
    ip address: 192.168.1.50
    hostname: node2
    ip address: 192.168.1.51
    Because this is a private LAN, you don’t need "real" IP addresses. Just make sure that if you do hook up either of these machines to a live network, the IP addresses don’t conflict with those of other machines. Also, be sure you download all the software you need for these machines before configuring the private network if you haven’t also configured or don’t have a second network interface card (NIC) in the machines.
    Step 3. Install Oracle9i Database
    If you haven’t done so already, you must download the Oracle software set for Oracle9i Database Release 2 (9.2.0.1.0) for Linux, or if you’re an OTN TechTracks
    For each machine that will comprise a node in the cluster, you must do the following:
    Create a mount point, /oracle/home, for the Oracle software files on the local hard disk of each machine.
    Create a new user, oracle (in either the dba or the oracle group), in /home/oracle on each machine.
    Start the Oracle Universal Installer from the CD or the mount point on the local hard disk to which you’ve copied the installation files; that is, enter runInstaller. The Oracle Universal Installer menu displays.
    From the menu, choose Cluster Manager as the first product to install, and install it with only its own node name as public and private nodes for now. Cluster Manager is just a few megabytes, so installation should take only a minute or two.
    When the installation is complete, exit from the Oracle Universal Installer and restart it (using the runInstaller script). Choose the database installation option, and do a full software-only installation (don’t create a database).
    Step 4. Configure FireWire (IEEE 1394)
    If you haven’t done so already, download the patched Linux kernel file (fw-test-kernel-2.4.20-image.tar.gz) from OTN’s Community Code area.
    Assuming that fw-test-kernel-2.4.19-image.tar.gz is available at the root mount point on each node, now do the following:
    Log on to each machine as the root user and execute these commands to uncompress and unpack the files that comprise the modules:
    cd /
    tar zxvf /fw-test-kernel-2.4.19-image.tar.gz
    modify /etc/grub.conf
    If you’re using the lilo bootloader utility instead of grub, replace grub.conf in the last statement above with /etc/lilo.conf.
    To the bottom of /etc/grub.conf or /etc/lilo.conf, add the name of the new kernel:
    title FireWire Kernel (2.4.19)
    root (hd0,0)
    kernel /vmlinuz-2.4.19 ro root=/dev/hda3
    Now reboot the system by using this kernel on both nodes. To simplify the startup process so that you don’t have to modify the boot-up commands each time, you should also add the following statements to /etc/modules.conf on each node:
    options sbp2 sbp2_exclusive_login=0
    post-install sbp2 insmod sd_mod
    post-remove sbp2 rmmod sd_mod
    During every system boot, load the FireWire drivers on each node; for example:
    modprobe ohci1394
    modprobe sbp2
    If you use dmesg (display messages from the kernel ring buffer), you should see a log message similar to the following:
    Attached scsi disk sda at scsi0, channel 0, id 0, lun 0
    SCSI device sda: 35239680 512-byte hdwr sectors (18043 MB)
    sda: sda1 sda2 sda3
    This particular message indicates that the Linux kernel has recognized an 18GB disk with three partitions.
    The first time you use the FireWire drive, run fdisk from one of the nodes and partition the disk as you like. (If both nodes have the modules loaded while you’re running fdisk on one node, you should reboot the other system or unload and reload all the FireWire and SCSI modules to make sure the new partition table is loaded.)
    Step 5. Configure OCFS
    We strongly recommend that you use OCFS in conjunction with the patched kernel so that you don’t have to partition your disks manually. If you haven’t done so already, download the precompiled modules (fw-kernel-ocfs.tar.gz) from OTN’s Community Code area. (See the "Toolbox" sidebar for more information.)
    Untar the file on each node, and use ocfsformat on one node to format the file system on the shared disk, as in the following example:
    ocfsformat -f -l /dev/sda1 -c 128 -v ocfsvol
    -m /ocfs -n node1 -u 1011 -p 755 -g 1011
    where 1011 is the UID and GID of the Oracle account and 755 is the directory permission. The partition that we’ll use is /dev/sda1, and -c 128 means that we’ll use a 128KB cluster size; the cluster size can be 4, 8, 16, 32, 128, 256, 512, or 1,024KB.
    As the root user, create an /ocfs mountpoint directory on each node.
    To configure and load the kernel module on each node, create a configuration file /etc/ocfs.conf. For example:
    ipcdlm:
    ip_address = 192.168.1.50
    ip_port = 9999
    subnet_mask = 255.255.252.0
    type = udp
    hostname = node1 (on node2, put node2’s hostname here)
    active = yes
    Be sure that each node has the correct values with respect to IP addresses, subnet masks, and node names. Assuming that you’re using the example configuration, node 1 uses the IP address 192.168.1.50 ; while on node 2, put 192.168.1.51
    Use the insmod command to load the OCFS driver on each node. The basic syntax is as follows:
    insmod ocfs.o name=<nodename>
    For example:
    insmod /root/ocfs.o name=node1
    Each time the system boots, the module must be loaded on each node that comprises the cluster.
    To mount the OCFS partition, enter the following on each node:
    mount -t ocfs /dev/sda1 /ocfs
    You now have a shared file system, owned by user oracle, mounted on each node. The shared file system will be used for all data, log, and control files. The modules have also been loaded, and the Oracle database software has been installed.
    You’re now ready for the final steps—configuring the Cluster Manager software and creating a database. To streamline this process, you can create a small script (env.sh) in the Oracle home to set up the environment, as follows:
    export ORACLE_HOME=/home/Oracle/9i
    export ORACLE_SID=node1
    export LD_LIBRARY_PATH=/home/Oracle/9i/lib
    export PATH=$ORACLE_HOME/bin:$PATH
    You can do the same for the second node—just change the second line above to export ORACLE_SID=node2.
    Execute (source) this file (env.sh) when you log in or from .login scripts as root or oracle.
    Step 6. Configure Cluster Manager
    Cluster Manager maintains the status of the nodes and the Oracle instances across the cluster and runs on each node of the cluster.
    As user root or oracle, go to $ORACLE_HOME/oracm/admin on each node and create or change the cmcfg.ora and the ocmargs.ora files according to Listing 1.
    Be sure that the HostName in the cmcfg.ora file is correct for the machine — that is, node 1 has a file that contains node1, and node 2 has a file that contains node2.
    Before starting the database, make sure the Cluster Manager software is running. For convenience’s sake, add Cluster Manager to the rc script. As user root on each node, set up the Oracle environment variables (source env.sh):
    cd $ORACLE_HOME/oracm/bin
    ./ocmstart.sh
    The file ocmstart.sh is an Oracle-provided sample startup script that starts both the Watchdog daemon and Cluster Manager.
    Step 7. Configure Oracle init.ora, and Create a Database
    Listing 2 contains an example init.ora in $ORACLE_HOME/dbs. You can use it on each node to create initnode1.ora and initnode2.ora, respectively, by making the appropriate adjustments—that is, change node1 to node2 throughout the listing.
    You must now create the directories for the log files on node 1, as follows:
    cd $ORACLE_HOME
    mkdir admin ; cd admin ; mkdir node1 ; cd node1 ;
    mkdir udump ; mkdir bdump ; mkdir cdump
    Again, do the same for node 2, replacing node1 in the syntax example with node2.
    Make a link for the Oracle password file on each node (these files may not yet exist):
    cd $ORACLE_HOME/dbs
    ln -sf /ocfs/orapw orapw
    Now that you have the setup, the next step is to create a database. To simplify this process, use the shell script (create.sh) in Listing 3. Be sure to run the script from node 1 only, and be sure to run it only once. Run this script as user oracle, and if all has goes well, you will have created the database, added a second undo tablespace, and added and enabled a second log thread.
    You can start the database from either node in the cluster, as follows:
    sqlplus ’/ as sysdba’
    startup
    Finally, you can configure the Oracle listener, $ORACLE_HOME/network/admin/listener.ora, as you normally would on both nodes and start that as well.
    You should now be all set up!
    Wim Coekaerts ( [email protected]) is principal member of technical staff, Corporate Architecture, Development. His team works on continuing enhancements to the Linux kernel and publishes source code under the GPL in OTN’s Community Code section. For more information about Oracle and Linux, visit the OTN Linux Center or the Linux Forum.
    Toolbox
    Don’t tackle this as your first "getting to know Linux and Oracle project." This article is brief and doesn’t provide detailed, blow-by-blow instructions for beginners. You should be comfortable with the UNIX operating system and with Oracle database installation in a UNIX environment. You’ll need all the software and hardware items in this list:
    Oracle9i Database Release 2 (9.2.0.1.0) for Linux (Intel). Download the Enterprise Edition, which is required for Oracle RAC.
    Linux distribution. We recommend Red Hat Linux Advanced Server 2.1, but you can download Red Hat 8.0 free from Red Hat. (However, please note that Red Hat doesn’t support the downloaded version.)
    Linux kernel patch for FireWire driver support, available under the Firewire Patches section. (Note that we’re updating these constantly, so the precise name may have changed.)
    OCFS for Linux. OCFS is not strictly required, but we recommend that you use it because it simplifies installation and configuration of the storage for the cluster. The file you need is fw-kernel-ocfs.tar.gz.
    Two Intel-based PCs
    Two NICs in each machine (although we’re only concerned in these instructions with configuring the private LAN that provides the heartbeat communication between the nodes in the cluster)
    Two FireWire interconnect cards
    One large FireWire drive for shared storage
    To supplement this QuickStart, you should also take a look at the supporting documentation, especially these materials:
    Release Notes for Oracle9i for Linux (Intel)
    Oracle9i Real Application Clusters Setup and Configuration
    Oracle Cluster Management Software for Linux (Appendix F in the Oracle9i Administrator’s Reference Release 2 (9.2.0.1.0) for UNIX Systems)
    Table 1: Hardware inventory and worksheet for FireWire-based cluster
    Requirements Your configuration details:
    Per node minimum Node 1 Node 2
    Minimum CPU 500 MHz (Celeron, AMD, Pentium)
    Minimum RAM 256 MB
    Local hard drive free space 3 GB
    FireWire card 1 (TI chipset)
    Network interface card 2 (1 for node interconnect; 1 for public network)
    Per cluster minimum Your configuration details:
    FireWire hard drive 1 300-GB
    4-port FireWire hub Required for 3-node cluster
    5-port FireWire hub Required for 4-node cluster
    http://otn.oracle.com/oramag/webcolumns/2003/techarticles/coekaertsfirewiresetup.html
    Joel Pérez
    http://otn.oracle.com/experts

  • Web Service Security with SAML - Invalid XML signature

    Hello together,
    we want to build a scenario where we want to use Web Service Security  with SAML.
    The scenario will be
    WS Client (Java Application) -> WS Adapter -> Integration Engine ->  WS Adapter-> CRM (Web AS ABAP 7.01 SP 3)
    SAP PI release is 7.11 (SP Level 4)
    We want to use the SAML Authentification from WS Client to PI and from PI to Web AS ABAP.
    The SAML authentifications between the WS Client and PI works when there is no SAML auth between PI and CRM.
    But we get following error at calling the CRM system when we want to communicate with SAML:
      <E_TEXT>CX_WS_SECURITY_FAULT:Invalid XML signature</E_TEXT>
    Has somebody an idea of the possible reason for the error.
    Thanks in advance
    Stefan

    Error Messages in the Trace/Log Viewer:
    CX_WS_SECURITY_FAULT : Invalid XML signature | program: CL_ST_CRYPTO==================CP include: CL_ST_CRYPTO==================CM00G line: 48
    A SOAP Runtime Core Exception occurred in method CL_ST_CRYPTO==================CM00G of class CL_ST_CRYPTO==================CP at position id 48  with internal error id 1001  and error text CX_WS_SECURITY_FAULT:Invalid XML signature (fault location is 1  ).
    Invalid XML signature

  • HT202213 I have a new computer we set up with itunes home sharing. Can I add music to this new computer sync my iphone and ipod to it instead of the original computer. I'm not sure if it makes a difference if I have a different apple id than with our orig

    I have a new computer that we set up with itunes home sharing and I need some assistance. I also have my own apple id and would like to make the new computer the one I use for my music. Should I set up a whole new itunes library/account or still work with the home sharing?

    Correct. When you update via iTunes all synced media that is not in your iTunes library will be lost.
    As IO said before:
    You can redownload most iTunes pruchases by:
    Downloading past purchases from the App Store, iBookstore, and iTunes Store
    I do not think it included audio books.

  • Is it possible to create a customized survey with our organizations logo at the top?

    Is it possible to create a customized survey with our organizations logo at the top? I'm trying to create a survey for our members but instead of using a template we would like to use something simple with our logo included at the top.

    Just create a blank form and click Add Header at the top of the form page:

  • Is there a way to print a pdf, which is secured with password?

    I want to know a way to print pdf which is secured with password to print without throwing a error ?
    Instead it has to ask for a password and print..

    we need to have an associated application installed in the system for that particular fileYup.
    does javax.print api works for pdf files and word documents?Nope.
    There is something called (I think) iText which can handle PDF documents. No idea whether it includes a printing facility or not.
    db

  • How often does the Apple TV sync with updated home sharing playlists?

    I am trying to use several Apple TV's at my business for content management throughout our campus.  I want to be able to have a playlist of pictures and videos that is easy to update.  Can anyone tell me how often the Apple TV syncs with the home sharing network for an updated playlist?  It would be very inconvenient if the only way was to do a reboot on every device each time content was updated.

    Welcome to the Apple community.
    I can't really say for sure how often the Apple TV updates its shared libraries.
    I do however know that once the Apple TV as completed playing something, it will sync with the shared library in order to update the play count. So I'd be reasonably sure that the shared library is updated at least once every time something is played.

  • Is there a way to view Flash videos on my iMac without downloading Adobe Flash Player? I'm concerned about performance and security with Flash Player.

    Is there a way to view Flash videos on my iMac without downloading Adobe Flash Player? I'm concerned about performance and security with Adobe Flash Player.

    If the video is only available in a format that requires Flash player : then no.
    However, a great many can also be viewed in an HTML5 version, in which case http://hoyois.github.io/safariextensions/clicktoplugin/ or similar can be set up so that Flash never runs unless you specifically choose it to.

  • Nokia 6131 Sync with Lotus Organizer

    Hi
    I have a problem when syncronizing with Lotus Organizer, 50% of the time it will work but sometimes I get an error with the following:-
    Organiser 5.0/6.0
    Unable to initialize Organizer
    Unknown error :0
    Any help appretiated
    WIN XP
    SP2
    NOKIA PC SUITE VER 6.80.22
    BLUETOOTH CONNECTION

    Yes you can -- but you need a 3rd party plug in to sync to Outlook first -- then you sync Outlook with your iPhone.
    I don't believe Microsoft maintains a direct sync relationship with Lotus Organizer anymore without the 3rd party plug in. Do a google search for "sync Lotus Organizer with Outlook" and you will find a batch of programs that will do that.
    Each time you sync your iPhone with Outlook, you will then need to resync your Outlook with Lotus Organizer to keep it up to date - and vice versa. It won't automatically sync everything up.

  • Axis bank net secure with webpin not working on ipad2

    Hi,
    Axis bank net secure with webpin not working on ipad2
    Lt me know how to proceed

    Try using their App:
    https://itunes.apple.com/in/app/axis-bank-mobile-application/id517266358?mt=8

  • Data level Security with Oracle Apps as Source

    Hi all
    I am implementing Data level Security with Apps as Source(OLTP) on Single Sign On.(Oracle has provided the Vanila rpd & we are working on that)
    I need to Filter data based on Business Group, Users are created in Apps and they are registered with some Responsibilities.
    (for eg, OBI User CHINA is a Responsibility; Now he will get only Business Group ID for China)
    I have created Groups in rpd with same name as the responsibility in Apps.
    I have created Initialization Blocks from which I m getting only 1 business group ID for every :USER.(I tried the code in TOAD & I m getting the correct BG ID)
    I have created Group in WEB with the same name as the Group name in rpd.
    If I say show all Users and Groups in WEB, I m getting the APPS Users.
    I hv Reloaded the server metadata files and restarted the BI Server/WEB Server also...
    But in the Report, I m getting all the Business Group Ids,
    Plz advice if I m doing something wrong.
    ThanQ
    Anand

    You need to be creating your "business groups" as a group in the RPD, init blocks to retrieve the user business group at login. Filters in the Logical table sources to restrict data to relevant business groups only.
    Presentation 'Web Cat' groups with the same name as the RPD groups so a user inherits membership automatically.
    I'd suggest sourcing a vanilla OBIA rpd to see how it is implemented out of the box.

  • WPA Security with the F5D7230-4

    Hey,
    I've successfully bridged my Airport Express from my Belkin F5D7230-4 with WEP Security enabled and it worked very well. Well, I should actually rephrase that; it worked well for all the Macs. The only PC on the wireless network couldn't establish a consistent connection, so I had to change the security to WPA and now everybody's computers work very well (WPA is actually desired). The only problem with WPA is that I can't get WDS to work with it, in other words, the Airport Express won't connect to the Belkin. After configuring the settings the same way as before (except changing the security) the Airport Express will first stay solid yellow, turn green for 2 or 3 seconds, and then flash yellow again. I have tried changing the wireless channel, and telling the Airport Express to just join (not WDS) while the Airport Express next to the Belkin, but still nothing worked.
    Wireless bridging is infact enabled on the Belkin, and I've also tried allowing only certain access points to connect, but that didn't work either.
    Is it possible that I'm not able to use WPA security with WDS on this Belkin router?
    It's a F5D7230-4 Belkin Router with 4.05.03 firmware, and the latest firmware is on the Airport Express.
    Thanks for any help in advance.

    Do you mean to get into the network? I do have a password WPA password set, and that's why the Airport Express can't access it.
    I need WPA set because a: the PC on the network needs it in order to connect, and b: it's much more secure.
    I pretty much need to have the security because the Belkin has it on, and to my understanding, the Airport Express also needs to have it enabled to work.
    Is there any update or anything available that could help my problem, or am I pretty much out of luck?

Maybe you are looking for