text:
Bohol - Nuts Huts
Trip Start
Mar 26, 2008
Trip End
Mar 26, 2009
After getting off the jeepney by the side of the road it was a 10 minute gruelling walk with our heavey bags to nuts huts. When we arrived we found a final walk down what seemed like hundreds of steps to get to reception. Sweaty and tired we met one of the owners a dutch crazy lady who said we like the sort of people that make the walk thats why we dont make it easier to get here !. but the place was great, hammoks,, good food, and a brilliant view into the tree tops. Our hut on stilts was great at the bottom beside the river which i jumped straight into after the sweaty walk..it was amazing.
The place felt great, so relaxing, the sound of insects, fireflies at night. The next day we head out for the famous chocolate hills, but on the way we stop at the butterfly sanctury. I wasnt expecting much but it was great. The guide took us all the way around explaining about the different species and Fran got to hold some massive catipillars which were stunning and weird! We saw so many different butterflys, they were beautiful and at the end they put one in Frans hair ! lol
Then it was onto the iconic cholocalte hills. As we walked up the hill we could start to see the strange smooth green domes. We got to the entrance climed to few hundreds steps to the lookout and stepped to the edge.... wow, you have to see this for real. For a full 360 degrees and as far as the eye can see we gazed in amazement at the view. The hills are said to be formed from the tears of gods, they look so strange, smooth and hypnotic.
Our last day came and we signed up for a hike up the hill to a massive bat cave. The crazy owner told us it was easy and wouldnt be slippery.. she was a bit wrong. It was quite steep and as it rained slightly in the night was slippy! anyway we climbed up over a few hours and took in some amazing views. When we arrived we went into the mouth of the cave and immedietally saw hundreds of bats hanging from the roof of the huge cave. The guide made a sound and loads dropped and flew in our direction, it was amazing. As we tried to avoid the bat poo we climed through a long dark cave always covered by bats and two torches between 6 of us haha.
On our 3rd day we avoided teh walk back by taking a small boat to Loboc. Our stay at Nuts Huts was fantastic, 3 great days, and we did so much. Bohol was definitally one of our favourite islands of the Philippines. we went to Pangloa before leaving for Bohol but we only stayed 2 nights as it rained a lot and onto the next island Negros !


text: Find this wine Find this wine Bourgogne Blanc Chardonay 2009 Recommended Had this one a few times now and it's still fantastic. Paired with butternut squash. Pin It Tweet one year ago by Jeff and Ash More posts Bourgogne Blanc Chardonnay Bourgogne blanc, chardonay 2007 2 years ago by Frantisek S.

subset: commoncrawl


text:
Marcus Troy on Bentley, PUMA, Traveling & More
September 7, 2012 by Greg Weinstein , Posted in Style, Tagged
Marcus Troy
Marcus Troy recently sat down with JackThreads to discuss his recent projects with Bentley, PUMA and an upcoming one with Timberland. In the brief introductory interview the known blogger also speaks on his travel essentials and how he started blogging. Grab some tips below.
Similar posts
Live At Project | Day 01 Preview
January 17, 2012 -
The Mavericks Project Bespoke Session
June 14, 2011 -
"The Maverick Spirit" | Marcus Troy Interview
January 15, 2011 -
All I Bought for XMAS by Marcus Troy
December 21, 2010


text:
Plumasnews.com includes a sampling of stories that are featured in the weekly editions of Feather Publishing newspapers plus important breaking news as it happens. To get all the news that is important to Plumas County, subscribe to one of our weekly newspapers by calling 530-283-0800. |
-Headline News
That's precisely what Plumas Rural Services (PRS) is proposing to do with its time bank, Community Connections. The idea is elegant in its simplicity. Today, while you're still able-bodied, you provide services to others and bank your hours for your own time of need.
Read more: Outreach efforts to target seniors in Chester and Portola
Managing Editor
As Plumas Arts prepares for the eighth incarnation of its Mountain Harvest Festival fundraiser Saturday, October 15, 2011, organizers are trying to balance the best of the old with the new.
To that end, beer lovers can expect longtime favorites like Sierra Nevada Brewing Co. from Chico and Great Basin Brewing Co. of Reno along with newcomers like Loomis Basin Brewing Co., High Water Brewing from Redding and Feather Falls Casino Brewing Co. Beer makers from as far away as Ireland and Nova Scotia and as close as Blairsden will be pouring samples at the Plumas-Sierra County Fairgrounds (map) from 1 to 5 p.m. The gates open at Noon.
PASSAGES wants to remind Medicare beneficiaries that open enrollment to change or enroll in a Medicare prescription drug plan known as Part D begins October 15 and ends December 7. This is a date change from prior years. During this open enrollment, people will also be able to make changes to their health care coverage, such as enrolling in a Medicare Advantage plan.
Read more: Medicare's Part D open enrollment begins October 15
Staff Writer
Plumas County relies on the help of volunteers — at least 137 of them, according to a recent survey.
On Tuesday, Oct. 4, the Board of Supervisors approved a policy designed to standardize the training and background checks for people who volunteer their time and services to the county.
Read more: Plumas County supervisors approve volunteer policy
10/14/2011 update
PG&E spokesman Paul Moreno with an update for the power pole replacement at the Spanish Creek Bridge, "PG&E crews have made very good progress and we expect to complete repairs to this line by about 9 p.m. Thursday Oct. 13, and restore power to the 20 customers impacted. We were able to do this work by installing only two new poles. PG&E crews numbering more than a dozen workers installed the new poles and wires."
This should eliminate the need for controlled traffic at the construction site.
Read more: Traffic control update for Highway 70 near Keddie
More Articles...
Page 290 of 471
Sports Headlines
Chester girls lose final game of season
James Wilson
Sports Editor
"Well, we didn't really play that well the first half," said Chester girls' basketball coach John Potter on the Lady...
Tigers' season ends with loss to Modoc
James Wilson
Sports Editor
Portola, the No. 11 seed in the Division V basketball playoffs, traveled to sixth-seeded Modoc last Wednesday to compete in...
Special turkey hunting opportunities offered in CDFW's North Central Region
Feather Publishing 3/7/2014 Hunters seeking opportunities during the upcoming spring turkey season can visit the California Department of Fish and Wildlife's Upland...
Read More...


text:
See all blogs
Do you suffer from "Mommy or Daddy Brain?" Dr. Smith's knows that parents have a lot to balance - but dealing with diaper rash should be one less stress. Read more from Chicago moms and dads about how they handle mommy/daddy brain.
Real parents tackle real problems. Weigh in!
Have a business or parent resource? Get listed on ChicagoParent.com!
March 2014
Summer 2013
Chicago Parent is distributed free every month in the six-county area. Enter your ZIP code to find the nearest pick-up spot.
Oops! We don't have any magazines in the zip code.
Win tickets to Adventure Stage Chicago's "SPARK"
Think ancient myths are boring? You'd better think again. SPARK re-imagines the myths of Prometheus and Pandora, setting them in a fractured futuristic world - more "Divergent" than Dante. Two Chicago Parent readers will win a family five-pack to opening night of the show (4 p.m. April 12), which includes a post-show food, drink and game reception, at the Vittum Theater.
New exhibit uses interactive elements to help kids understand the links between prehistoric creatures and animals of today.
Events, coupons and contests by email
On the cover:
This Lincoln Park burger joint gives you endless varieties of sandwiches... even "just ketchup." Read more...
Take your kids to work and try one of these three places for lunch. Read more...
Entertainers/Party SuppliesNanniesHome-based businessResale


text:
Talkin' Boxing with Sergio Martinez Trainer Gabriel Sarmiento
- October 5th, 2010
You know Gabriel Sarmiento. He's the guy who always wears the shades, one of the best trainers in the business. Trains one of the top pound-for-pound fighters on the planet Sergio Martinez. Not well-known in boxing circles yet, the Spanish boxing trainer discusses how he started with Martinez, what attributes of Martinez most impressed him, why they will defeat Paul Williams in November, and much more…
BoxingInsider.com: First of all, why do you always wear the sunglasses indoors (he's wearing them again this afternoon at a New York restaurant)? Do you have some kind of an eye condition?
Gabriel Sarmiento: "When I first came here with Sergio for a fight, (international matchmaker) Sampson Lewkowicz said to wear them, so security would know I was part of the entourage. I did and kept on wearing them ever since."
BoxingInsider.com: When did you start working with Sergio?
Gabriel Sarmiento: "I started nine years ago in Spain with Sergio. I originally started in boxing with my brother Pablo who was an IBO champion. After the Margarito fight in 2000 it appeared Sergio's time in Argentina had finished. In 2002 Sergio came to Spain and got in contact with my brother who got us together."
BoxingInsider.com: Is Sergio an easy fighter to train – or are you an excellent boxing trainer?
Gabriel Sarmiento: "I took advantage. I got a dull diamond and I sharpened and shined that diamond. I took advantage of his talent and I need to continue to encourage that talent to fulfill."
BoxingInsider.com: Do you remember the qualities you first saw in Sergio that stood out to you and inspired you?
Gabriel Sarmiento: "Velocity and leg work. Without the legs he couldn't do what we're doing. He has very good defense. Then he attacks. But above all it's leg work we worked on first in order to go to other aspects."
BoxingInsider.com: You stated that Paul Williams was forced to take this fight. Does that mean you believe Williams doesn't really want this rematch fight with Sergio?
Gabriel Sarmiento: "His manager (George Peterson & Al Haymon) didn't want the fight. It's not the time. Williams fought (Kermit) Cintron and was supposed to knock him out and that didn't come out that way. Cintron was the winner of that fight."
(Note: Actually Williams won by technical win 4 after Cintron shockingly dove out of the ring after a missed punch and supposedly hurt his shoulder, with Williams ahead on two judges scorecards, though many media members thought Cintron was winning the fight.)
"Things didn't go right from then on for Williams. So this fight (rematch with Sergio) clearly isn't of any help to Williams. That's why the managers didn't want to go to this fight. They wouldn't accept it from the get-go."
BoxingInsider.com: Now we are here and the rematch will take place in November 20 in Atlantic City. The first fight last December was very close, most thought Paul won by a narrow margin over Sergio. Why are you so certain and confident Sergio will win this time?
Gabriel Sarmiento: "He (Williams) didn't win the first fight. Paul Williams didn't feel he was a victor in that fight either. Sergio is evolving and he will win this fight. He's a diamond in the rough, he needs to be polished but he will win this fight. Last time the trainer of Paul Williams predicted he was going to win the fight in the first round. He said Martinez will be knocked out. And if there were 20 seconds left in the first round after Sergio knocked down Paul Williams, Sergio would have had the knockout."
Translation by Carrie Sanchez
©2014 BoxingInsider LLC. All rights reserved. This material may not be published, broadcast, rewritten or redistributed with out written permission.
Comments Closed
- NBCSN Boxing Preview: Chilemba vs. Grachev, Adamek vs. Glazkov
- Floyd Mayweather Allegedly Involved In Kidnapping And Beating
- Tomasz Adamek And Czar Glazkov Prepare To Meet At The Crossroads
- Boxing Insider Notebook: Hopkins, Kovalev, Pacquiao, Rocky, Ali, Garcia, and more
- Miguel Cotto – Sergio Martinez Press Conference Exudes Heat
- Solo Boxeo Boxing Results: Jorge "Travieso" Arce's Comeback Continued
- Rock Steady: Battling Parkinson's Disease At Gleason's Gym
- Showtime PPV Results: Canelo Gives Angulo a Beat down in All Mexican Affaire!
- Canelo Dominates Angulo, Almost Saves Pay Per View Card
- ESPN Friday Night Fights Results: Dusty Harrison Remains Undefeated, Morales and Nugaev Win
- Jackie Kallen: Is Floyd Mayweather a Thug or a Target?
- Jackie Kallen: Defending Tony Weeks Canelo/Angulo Stoppage
- Floyd Mayweather Gives The Media A Very Strange "Moment."
- Rapacious Showtime Demanding $60 for Canelo Alvarez-Alfredo Angulo
- Alfredo "Perro" Angulo: Going against the Vegas Chalk and Picking Angulo to Win
- Is Canelo Alvarez an A-List Boxer – Or Just An A-List Celebrity?
- Canelo Alvarez vs. Alfredo Angulo by the Numbers
- The Top Boxing Fights That Need to Be Made From Matchmaker Ron Katz
- Jackie Kallen: Canelo/Angulo Undercard: Watch for Jermall Charlo
- Canelo Alvarez Likely to Dominate Alfredo Angulo, Who Leads with His Face


text:
Log In
My Passes
Sign Up
Learning Guides
Teacher Resources
Test Prep
College Readiness
Schools & Districts
All of Shmoop
Dr. Seuss
Algebra II
US History
AP Exams
En Español
Essay Lab
Literary Critics
Shmoop Shtuff
Cite This Page
To Go
Kindle: Learning Guide
Catching Fire
Suzanne Collins
Catching Fire
Chapter 13
Study Questions
Best of the Web
Brief Summary
Chapter Summaries
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Chapter 7
Chapter 8
Chapter 9
Chapter 10
Chapter 11
Chapter 12
Chapter 13
Chapter 14
Chapter 15
Chapter 16
Chapter 17
Chapter 18
Chapter 19
Chapter 20
Chapter 21
Chapter 22
Chapter 23
Chapter 24
Chapter 25
Chapter 26
Chapter 27
Table of Contents
Chapter 14 Summary
Chapter 12 Summary
AP English Language
AP English Literature
SAT Test Prep
ACT Exam Prep
Catching Fire Chapter 13 Summary
How It All Goes Down
Katniss has a visceral reaction to the terrible news and runs outside. She heads for the woods, but that's forbidden, so she ends up in the Victor's Village alone.
She has a hysterical fit.
This is the one fate she never saw coming, despite all the awful things she anticipated in her future.
She's reliving the moment where Snow read out the terrible news that's just changed her life. She's positive this wasn't the original plan, but a change meant to punish her specifically.
If the few people who've made it through the previous Games die, the districts will have no one to inspire or guide them.
Katniss realizes with horror that, in order to save her own life, she'll have to kill Peeta or Haymitch.
She has to go to the arena (there's no other female victors from 12 to choose between) and worries that Peeta will volunteer as the male tribute, in order to protect her.
She goes to find Haymitch, who's totally wasted. They commiserate, and she drinks too.
Haymitch reveals that Peeta will blackmail him into trading places. No matter what, Peeta will head to the arena because he loves Katniss.
Katniss feels horribly guilty.
They make a deal: during the last Games, Haymitch was ultimately on Katniss' side. This time, she wants them both to be on Peeta's side and to try to save his life.
She goes home, where Gale meets her. He says they should still try to run away, but she says they can't. Then she blacks out.
The next day she has a wicked hangover.
She bathes and goes back to bed. Her mother and Prim come to console, but she just breaks down again.
Later that day, Katniss finally pulls herself together. She goes to see Haymitch again, and this time Peeta joins them.
Peeta says he's keeping the two of them from getting their hands on any more alcohol. He has urgency and clarity and is determined that someone from their district will win this Quell. To do so, they'll need to be in control of all the mental power they possess.
They start training in earnest, watching previous Games, discussing strategies, and figuring out who their potential opponents are. They also start working out, hard.
Haymitch can't really keep up, but Katniss and Peeta feel somewhat better about things when they're training.
Their families and friends rally around them. Gale gives them instruction in making snares.
Gale pushes Katniss to think about what would happen to their relationship if Peeta were out of the picture, but she refuses. She wants to have a serious talk with Gale, but it doesn't work out.
Before she knows it, the time of the reaping arrives. It's really just a formality: Katniss is chosen as the female victor (she's the only choice), then Haymitch. But then Peeta steps in and Haymitch is out, pushed back into the role of mentor once again.
Then they're whisked away to the Capitol, with no time to talk to the people they love, and on their way back to start the Games all over again.
Next Page:
Chapter 14
Previous Page:
Chapter 12
Need help with College?


text:
A source connected to Britney Spears tells TMZ that one of Brit's drug tests has come back positive, but the source claims she actually passed. The source maintains it was a false reading.
Meanwhile, K-Fed's lawyer has contacted TMZ, telling us he will subpoena a story we aired about Britney running a red light. Kaplan wants the tape for an unscheduled court appearance on Wednesday.
The story, which ran Friday on TMZ TV, shows Britney -- her kids in the backseat and the court-appointed monitor in the front -- blowing a red light at an extremely dangerous intersection Thursday night on her way home. A close look at the video shows that she held her cell phone up to her face just seconds before running the light -- it appears she's texting.
Kaplan has already asked the judge to prohibit Spears from driving with the kids in the car. Commissioner Scott Gordon is set to rule on that motion on November 26. The latest development could accelerate that decision. The Commish has been troubled by Spears' driving -- the incident Thursday night could jeopardize her visitation.
If she was anybody else SHE would not be able to be around her children..She is a hazard to her self and of her children....Maybe she should realize having children DON'T make you a mom... She has the resources to get the help she needs...She needs to wake up,she is not a teenager anymore!!! Get it together,than be there for your kids!!!
Well, I wonder what caused the drug test failure. If she is claiming it was A.D.D. meds, she needs to quit them, they are not working. She exhibits behavior similar to being on X.
the real problem here is that her chldren hae no protection from the media. granted britney and kevin enjoythe limelight to keep their careers going, but when are the lawyers going to come up with a law to protect the children of these "po stars" their privacy is being violated and no oe is addressing t there should be a law that the media can snap pictures f celebs bt not their innocent children
Do you want us to remember your personal information for next time?
What this means: We place a cookie on your computer that stores your e-mail address and the non-unique name you have selected. Next time, these comment form fields will be automatically populated with your information. It saves you a couple of steps so you can quickly express your thoughts on the latest TMZ story
Keep the Brit blog going - we need your comments
Have a great Brit day
Sendto email@example.com
Harv is the man----------------------------
All you people who still like her, ya'll got issues, problems, and that's a major understatement! Role model? You gotta be kiddin me. If that's your role model, check into an insane asylum freaks!
She is nothing more than a good for nothing waste of space. All the money and makeup and hair extentions in the world can't hide the fact that she's a trashy slob with no respect for the society that she lives in. Her worthless music is nothing more than the vomiting up of complete crap. And your right, why would she care what anyone thinks? At least not in this lifetime. If she did, she'd stop setting such a crappy example for the young girls that are iggnorant enough to "look up to her". If my kid started acting like that, I would send her to a mental institute and I would take my grandkids before they grow up to be even more of a screw up than their mama. WHAT!
She probably was attempting to use a drug test cleanser like the ones found on http://www.drugtest.org.
When the hell is this chick going to get a clue. She should not be driving, nor should she have access to her kids. She is a bad mother and just a bad individual in general. Wake up Britany...enough is enough. Maybe if she quit getting so much attention she would get help. I sware that chick is bipolar. For the love of God......wake up!


text:
Author Archive
Articles by Zachary Roth | Email the Author
By Zachary Roth Oct 8, 2004 at 12:08 PM
Consider this passage from Howard Fineman's latest online dispatch for Newsweek on the current state of the campaign: This campaign... More
Moving Among the Hunters and the Hunted
By Zachary Roth Oct 7, 2004 at 12:14 PM
By Zachary Roth Cleveland, Ohio -- Hosting the vice presidential debate last Tuesday seemed to be the biggest thing that's... More
Reporters Flunk a (Global) Test
By Zachary Roth Oct 4, 2004 at 05:49 PM
In last week's presidential debate, John Kerry told Jim Lehrer that he would never involve the country in a pre-emptive... More
Facing Facts - At Last!
By Zachary Roth Oct 1, 2004 at 03:43 PM
The most encouraging part of the press coverage of last night's presidential debate has been the sudden flurry of fact-checking... More
Admitting the Problem Is Half the Battle
By Zachary Roth Sep 30, 2004 at 04:45 PM
As we gear up for tonight's showdown in the Sunshine State, it's not hard to identify the prevailing conventional wisdom... More
CNN Circles the Wagons on Polling
By Zachary Roth Sep 28, 2004 at 06:10 PM
Disputes over polling techniques, once the exclusive province of statistic geeks and partisan bloggers, heated up and spilled over to... More
CBS: From Trigger Happy to Gun-Shy
By Zachary Roth Sep 27, 2004 at 02:12 PM
CBS News will postpone a prepared segment questioning one of the Bush administration's rationales for invading Iraq, the New York... More
By Zachary Roth Sep 24, 2004 at 02:23 PM
CNN's "Anderson Cooper 360," aired at 7pm each night, has lately added a short segment called "Campaign Playbook." Cramming as... More
Clarify This
By Zachary Roth Sep 24, 2004 at 12:33 PM
Thanks to a reader for this one. The Associated Press reports today: "President Bush suggested on Thursday that he wanted... More
One Reporter Left Behind
By Zachary Roth Sep 23, 2004 at 04:51 PM
Covering a speech by President Bush in Latrobe, Penn., Raymond Hernandez of The New York Times this morning writes, "Mr.... More
Setting a Low Bar
By Zachary Roth Sep 22, 2004 at 03:36 PM
Yesterday Mickey Kaus, writing on Slate, referred to "this week's coming CW [conventional wisdom] sigh of relief that the campaign... More
Fixing Democracy, Flies on the Wall and Flirting in French
By Zachary Roth Sep 21, 2004 at 01:51 PM
Newsweek's political reporters are good at coming up with details that seem to offer readers a fly-on-the-wall glimpse inside the... More
Dick Cheney, Dennis Hastert, Bill Schneider - Three Peas in a Pod?
By Zachary Roth Sep 20, 2004 at 01:13 PM
At a campaign rally on Saturday with Vice President Cheney, House Speaker Dennis Hastert declared that al Qaeda "would like... More
Fueling the Debate
By Zachary Roth Sep 17, 2004 at 04:42 PM
James Ridgeway of The Village Voice makes a glaring error in his column urging John Kerry to just be himself.... More
Unused Tools
By Zachary Roth Sep 15, 2004 at 04:16 PM
David Sanger of The New York Times obviously hasn't bookmarked Factcheck.org. If he had, with the flick of a finger... More
Who cares if it's true? - Modern-day newsrooms reconsider their values
What Is Russia Today? - The Kremlin's propaganda outlet has an identity crisis
And from the left…Fox News - There's more to Fox News' strategy of hiring liberals than creating a public boxing match
Why Skype isn't safe for journalists - Here are some alternatives for secure voice calls to use instead
Placing a bet on USA Today - Gannett has long felt the television model could translate into print. Now it's using its flagship paper to double down on that idea.
Email blasts from CJR writers and editors
New York Times reporters haunted by unconquerable 'meat cloud'
"Several BizDay employees were suffering health effects, including burning eyes and breathing issues, from what had been dubbed a 'meat cloud'"
What Dave Weigel learned from political journalist and true-crime author Joe McGinniss
Upworthy partners with ProPublica and advocacy media groups on original content
Upworthy gets quality, exclusive journalism about income inequality; ProPublica gets a wider audience
Why Cosmos can't save public support for science
We're not in the Cold War anymore
President Obama on Between Two Ferns with Zach Galifianakis
"Is it going to be hard in two years when you are no longer President and people stop letting you win at basketball?"
CJR's Guide to Online News Startups
ACEsTooHigh.com – Reporting on the science, education, and policy surrounding childhood trauma
Who Owns What
The Business of Digital Journalism
A report from the Columbia University Graduate School of Journalism
Questions and exercises for journalism students.


text:
The Leading eBooks Store Online
for Kindle Fire, Apple, Android, Nook, Kobo, PC, Mac, Sony Reader ...
The Dialectical Behavior Therapy Skills Workbook for Anxiety
Breaking Free from Worry, Panic, PTSD, and Other Anxiety Symptoms
- iPhone / iPad
- Android phones & tablets
- Kindle Fire
- e-readers with Adobe Digital Editions installed
- Mac
This ebook is available for the following devices:
- iPhone
- iPad
- Android
- Kindle Fire
- Windows
- Mac
- Sony Reader
- Cool-er Reader
- Nook
- Kobo Reader
- iRiver Story
You can also read this ebook online in eb20 format without having to download anything.
Read Aloud
If you have an anxiety disorder or experience anxiety symptoms that interfere with your day-to-day life, you can benefit from learning four simple skills that therapists use with their clients. These easy-to-learn skills are at the heart of dialectical behavior therapy (DBT), a cutting-edge therapeutic approach that can help you better manage the panic attacks, worries, and fears that limit your life and keep you feeling stuck.
This book will help you learn these four powerful skills:
- Mindfulness helps you connect with the present moment and notice passing thoughts and feelings without being ruled by them.
- Acceptance skills foster self-compassion and a nonjudgmental stance toward your emotions and worries.
- Interpersonal effectiveness skills help you assert your needs in order to build more fulfilling relationships with others.
- Emotion regulation skills help you manage anxiety and fear before they get out of control.
In The Dialectical Behavior Therapy Skills Workbook for Anxiety, you'll learn how to use each of these skills to manage your anxiety, worry, and stress. By combining simple, straightforward instruction in the use of these skills with a variety of practical exercises, this workbook will help you overcome your anxiety and move forward in your life.
240 pages; ISBN 9781608826148
Read online, or download in EPUB or secure PDF format


text:
Sneaky ways to make the most of your time off this spring break
I'm not allowed to date, but guys ask me out. What do I say?
Spring clean your friendships
Divergent stars spill the biggest behind-the-scenes scoop
Get psyched for vacay! 10 ways to rock this weekend
3 ways to rock a slouchy sweater
Play up your pony! One super-cinchy trick to look chic
Why you just can't "let it go": the science of earworms
Do you know how to take charge?
Who do YOU want on GL's special 20th birthday cover?
GL Exclusive with Lea Michele: Part 1
More Friends = More Fun
GL Tweets !
11 HOURS AGO 7 cinchy ways to get more from your #workout: http://t.co/JHjRNHM87S (http://t.co/v6YvjixjFq)
14 HOURS AGO Soooo, who's excited for the @CherLloyd concert on 4/3?!?! Start your night in style at our #GLSpringFling pre-party: http://t.co/GEqhbPjQZJ
15 HOURS AGO This social media maven found her #LipSmacker flavor. Take this #quiz to spill your perfect pairing: http://t.co/HEbqeDgVEG #FlavorFridays
sponsored links
It's a DIY delivery!
CLICK HERE to snag a cute craft box filled with dazzling DIY materials, cinchy step-by-step instructions, awesome inspo and more—all delivered right to your door!


text:
Walking the Wire
In Jacobs we trust?
Sometimes in life there are things you just don't want to do.
You dread it. It feels wrong. You go over every other scenario in your head. But in the end, you keep reaching the same conclusion. So you suck it up and finally just do it.
For me, that thing is recommending Brandon Jacobs as a pickup.
The old bruiser looked done last season. The Giants only brought him back this year because David Wilson had a recurrence of his fumble-itis and Andre Brown broke his leg. Now with Wilson suffering from a possibly serious neck injury and backup Da'Rel Scott going down with an injury, Jacobs, who's coming off a 22-carry, 106-yard, two-score performance last Thursday, is the only real option in the Giants backfield.
Jacobs is going to be the starter next week against the Vikings, who have not fared well against running backs this year. Then he'll get another bad run defense against the Eagles in Week 8. No, Jacobs isn't going to match what he did in Week 6 against the Bears, but as long as Wilson's out the next two weeks, he certainly could provide flex value.
If Wilson's injury does indeed keep him out for several more weeks, then the other guy to consider is Andre Brown. While you never want to rely on a guy who has suffered two severe leg injuries in two years, Brown has more burst than Jacobs. If he gets back in Week 10, when he's eligible to come off the short-term IR, he could be the late-season answer at running back.
In the meantime, owners in need of a short-term answer are left with Jacobs as one of the better options this week. You won't like it, but you may have to suck it up and just pick up Jacobs.
Joseph Randle, RB, Cowboys. DeMarco Murray (knee) is out for at least a couple of weeks and Randle looks to be the first man up with Lance Dunbar (hamstring) looking unlikely for Week 7. Temper expectations accordingly for the rookie, who ran for just 17 yards on 11 carries Sunday night, but with the Eagles, Lions, Vikings and Saints coming up, Randle needs to be owned in all but the shallowest of leagues just in case he takes advantage of the matchups. If so, he would have flex value right away.
Michael Floyd, WR, Cardinals. Floyd actually had his second-fewest receiving yards of the season against the 49ers (44), but he hauled in his first score of the year, giving him a solid fantasy day. Floyd now has eight or more standard fantasy points in four of his six games this year despite only having one score. Grab him if he's available in your league and you'll have a solid option for your No. 3 wide receiver.
Nick Foles, QB, Eagles. Foles must like playing the Buccaneers, as he's now racked up 677 yards and seven touchdowns in two games against them. Sunday's performance was huge, as Foles has now looked solid in two straight games and could create a QB controversy in Philadelphia. Foles is worth a waiver pickup if for no other reason than his upcoming schedule against the Cowboys, Giants, Raiders, Packers and Redskins before the Week 12 bye.
Keenan Allen, WR, Chargers. Allen has announced his arrival on the fantasy landscape by posting two straight 100-yard games with a TD catch in each. The rookie has seized the opportunity to become the Chargers' No. 1 receiver and is a definite fantasy WR3 this week against the Jags. Allen is still available in almost two-thirds of Yahoo! leagues. I mentioned him as a hot pickup last week, so don't wait any longer -- grab him before it's too late.
Jarrett Boykin, WR, Packers. Randall Cobb (leg) is out for the next few weeks (and possibly beyond) and James Jones is very questionable after spraining his PCL. That could mean targets for Boykin as the Packers simply don't have anyone else at receiver after Jordy Nelson. We expect Nelson and Jermichael Finley to be the big beneficiaries of those injuries, but Boykin is worth a free-agent flier for those desperate at WR. The Packers offense is too good not to look at any player who is going to see significant snaps.
Percy Harvin, WR, Seahawks. Harvin (hip) isn't practicing with the Seahawks yet, but there are encouraging signs, albeit from the ultra-optimistic Pete Carroll. If you have the roster spot and can afford to sit on Harvin for the next few weeks, he's worth picking up. You aren't going to find another game breaker of his level at this point of the season.
Kris Durham, WR, Lions. Over the last two weeks, Durham has been targeted 21 times. He only has 11 catches in that span, but at least he grabbed eight of those on Sunday. There is opportunity here for Durham as Nate Burleson is out and Ryan Broyles has showed nothing this season. Plus, Patrick Edwards was waived on Monday. Durham is not a game-changer, but could be a fill-in at WR3 in points-per-reception leagues.
Khiry Robinson, RB, Saints. It's hard to get excited about Robinson for the same reason it's always hard to trust any Saints back not named Darren Sproles; their roles fluctuate too much from week to week in a crowded backfield. Robinson is limited to a short-yardage option and could have his role usurped when Mark Ingram returns from injury. With his upside capped, Robinson isn't worth a waiver claim. But he can be added for free to the end of your bench in deep leagues.
Two fliers at quarterback. Expectations have not been high for either Thaddeus Lewis or Mike Glennon, but both showed flashes Sunday. Lewis' performance was especially encouraging, considering he did it against a solid Bengals defense. Both are unlikely to make any impact in single-quarterback leagues. However, they should be on the radar in dual-quarterback leagues, where the bye-week wire can get pretty thin.
Saints wide receivers. Kenny Stills had his biggest game of the season in Week 6, picking up 64 yards and a score. Unfortunately, he had just three targets. Lance Moore has missed the last three weeks, but could return after the Saints' Week 7 bye. Neither would be much of an option normally, but the status of Jimmy Graham is up in the air. Should Graham have a multi-week injury, his targets would have to go somewhere. Both Stills and Moore would be worth speculative pickups if you need help at wide receiver.
Tight end options. Looking for a tight end for a bye week? The options on your wire may not be great, but there are a few guys you can look at. Buccaneers rookie Tim Wright picked up 91 yards on seven catches Sunday while seeing nine targets. That comes on the heels of a six-target, five-catch, 41-yard day in Week 4. He's less interesting if Mike Williams (hamstring) is able to go in Week 7, but hamstring injuries are never sure things. The Jets' Jeff Cumberland saw five targets this week and now has 138 yards receiving in his past two games. It's not great, but you're not going to get greatness out of a second tight end anyway. Cumberland could be in for more targets with Jets TE Kellen Winslow suspended.
Three touchdowns will get anyone's attention, and Joseph Fauria had the hat trick on just three targets last week. The key is that latter number, however. The catches and targets may increase in the future, but owners can't bet on big plays from guys getting so few looks. … Yes, the Ravens are banged up at wide receiver and, yes, he had huge catches in the playoffs last year, but Jacoby Jones has never been a good fantasy option. Seven years into his NFL career, Jones' high for receiving yards in a season is 562. There are better options out there. … Brandon LaFell has had a couple of big games this year, but he's inconsistent and isn't seeing enough targets to be a trustworthy fantasy option in most leagues. … Riley Cooper's huge day is an outlier. Leave him on the wire until we see more from him and Foles. … I said it last week, but owners can drop Tavon Austin at this point. There are better receivers on the wire.
Player | Tm | Tgt | Rec | Yds | TD |
Kris Durham | Det | 13 | 8 | 83 | 0 |
Keenan Allen | SD | 12 | 9 | 107 | 1 |
Chris Ogbonnaya | Cle | 12 | 7 | 61 | 1 |
Kyle Rudolph | Min | 11 | 9 | 97 | 1 |
Aaron Dobson | NE | 10 | 6 | 63 | 0 |
Tim Wright | TB | 9 | 7 | 91 | 0 |
Stephen Hill | NYJ | 8 | 3 | 46 | 0 |
Kendall Wright | Ten | 8 | 5 | 69 | 0 |
Marlon Brown | Bal | 7 | 3 | 71 | 0 |
Clyde Gates | NYJ | 7 | 5 | 36 | 0 |
Jeremy Kerley | NYJ | 7 | 2 | 19 | 0 |
Heath Miller | Pit | 7 | 6 | 84 | 0 |
Jerome Simpson | Min | 7 | 4 | 30 | 0 |
Rod Streater | Oak | 7 | 3 | 46 | 0 |
Player | Team | Touches | Scrim Yds | Scrim TD |
Brandon Jacobs | NYG | 23 | 114 | 2 |
Zac Stacy | StL | 20 | 90 | 0 |
BenJarvus Green-Ellis | Cin | 18 | 86 | 0 |
Joseph Randle | Dal | 13 | 32 | 1 |
Ben Tate | Hou | 13 | 28 | 1 |
Andre Ellington | Ari | 12 | 92 | 1 |
Chris Ogbonnaya | Cle | 12 | 85 | 1 |
Pierre Thomas | NO | 12 | 80 | 0 |
Willis McGahee | Cle | 11 | 39 | 0 |
Roy Helu Jr. | Was | 10 | 77 | 0 |
Mike Tolbert | Car | 10 | 47 | 2 |
Keenan Allen | SD | 9 | 107 | 1 |
Kyle Rudolph | Min | 9 | 97 | 1 |
Kris Durham | Det | 8 | 83 | 0 |
Bernard Pierce | Bal | 8 | 31 | 0 |
Browns RB Chris Ogbonnaya racked up 12 targets for seven catches and 61 yards Sunday. He totaled 12 touches for 85 yards. He's now had at least 10 touches in two of the last three games; the one game he didn't reach double-digits, he was sidelined by a concussion. Ogbonnaya is approaching bye-week flex status in PPR formats, and that should make him a free-agent pick up in deep leagues. … Aaron Dobson saw 10 targets Sunday. With Danny Amendola hurt again and Rob Gronkowski's return uncertain, Dobson should continue to see plenty of targets. … A reminder to grab Zac Stacy in your league if you haven't yet. He's the Rams' lead back for the foreseeable future.
MATCHMAKERS: Week 7
QB: Nick Foles, Eagles vs. DAL (28.1 fantasy points per game allowed to QBs)
WR: Terrance Williams, Cowboys at PHI (36.4 FPPG to WRs)
RB: Brandon Jacobs, Giants vs. MIN (23.9 FPPG to RBs)
TE: Tim Wright, Buccaneers at ATL (11.0 FPPG to TEs)
K: Ryan Succop, Chiefs vs. HOU (6.5 FPPG to Ks)
D/ST: San Diego Chargers at JAC (11.3 FPPG to D/ST)


text:
Eco Friendly Gifts for Adults - Food Gift Baskets
Gift Buzz
Know a foodie or someone who just loves trying new fare? These food-themed walking tours are a perfect way to discover new culinary delights, as well as learn about the rich history of our American cities. Read More »
Specialty fruit baskets are amazing gifts featuring the sweetest pears, golden apples and fruits of unsurpassed quality and selection. The perfect gift for any occasion, these are sure to delight anyone who receives them. Read More »
Earth Day is April 22nd and one exciting new trend that I am noticing is a lot of Eco-Friendly and stylish products for guys! Think: manly-man, or what I like to call "Macho-Eco." Guys don't have to sacrifice their machismo to do good anymore.... Read More »
When it comes to our children, nothing is ever good enough, right? This parental ideology extends to the toy box as well and as gift givers, we need to listen up. When it comes to the toys and games kids are playing with (and often times chewing... Read More »


text:
Download Preview | Edit or add effects |
by kjpargeter, Stock Photo 124965
art, background, binary, blue, bounce, cell, code, coding, communication, communications, computers, digit, digital, email, illustration, mobile, number, phone, programme, programming, space, technology, telephone, texture
Made with love in NYC.
Bigstock and Big Stock Photo are registered trademarks of Shutterstock. Bigstockphoto is a trademark of Shutterstock.
© 2004-2014 All rights reserved - Bigstock®


text:
Found 289 jobs matching your criteria
Order by: Newest first Salary
Part-Qualified Actuary
- Bristol
- Contract - £450-550
We are currently looking to recruit a number of Part-qualified actuaries to work on a long-term programme within Modelling/reporting. We are looking for a va...
Speciality Pricing Actuary / Modeller
- Bermuda
- £150000 - £250000 per annum
My client is looking for an experienced Actuary or Risk Modeller to work alongside the Underwriter on Marine / Speciality business. You will have experience...
Analytics Actuary/Statistician
- Surrey
- £50 - £90,000 + car + bonus + benefits
Our client a leading FTSE 100 life insurer has a requirement for 2 qualified Actuaries or Statisticians to work within the expanding longevity risk team.
Head of Pricing/Product Development.
- Scotland
- £100,000 to £120,000 plus car, bonus and benefits
Senior Qualified Actuary required to lead the Product Development Team.
Risk Actuary
- City of London
- £70 - £80,000 plus car plus Bonus plus Benefits
Our client a global life insurer have a requirement for a Risk Actuary to work within the group Risk Capital Management Team.
Technical Pricing Manager - Longevity
- City of London
- c£80,000 + Car + Bonus + Benefits
The role will be responsible for aspects of development, pricing and marketing of longevity products for clients in the UK and Ireland.
Interim IMAP Lead
- City of London
- c£1500/day
Fairbank Partners are currently assisting a leading insurer with the recruitment of an Interim IMAP lead.
Investment Reporting Actuary
- Surrey
- £55 - £72,000 plus Car plus Bonus plus Benefits
Our client a leading FTSE 100 Life Insurer has a requirement for an Investment Reporting Actuary
Reporting Actuary
- Surrey
- £75 - £85,000 + car + bonus + benefits
Our client, a niche Insurer have a requirement for a Qualified Reporting Actuary
Senior Actuarial Analyst
- London
- £40000 - £60000 per annum
A London Market Insurer is looking to bring in a part qualified actuarial student. They are looking for a talented individual to join their newly...
Pricing Actuary - Specialty Lines
- Zurich with travel
- CHF Excellent + bonus + benefits
Global reinsurer is seeking a qualified non-life actuary to be responsible for the pricing of reinsurance treaties for the Marine, Protection & Indemnity & S...
International Insurance Manager - Non-life
- Zurich
- CHF Excellent + bonus + benefits
Global financial services firm is seeking a qualified non-life actuary to join their Zurich-based team, where you will lead, manage and deliver a wide range ...
Investment Associate
- London
- up to £35k + bonus + benefits
Global financial services company has an exciting opportunity for a part-qualified investment actuary to undertake a wide range of tasks within the Consultin...
P & C Pricing Actuary
- Zurich
- CHF Excellent + bonus + benefits
Global financial services firm has an exciting opportunity for a part qualified or qualified non-life actuary to support the development and the daily mainte...
Life Risk Management Manager
- Hong Kong
- Excellent package + bonus + benefits
*Our client is seeking to hire a nearly/newly qualified actuary to work within a Hong Kong based regional function as the Regional Manager responsible for al...
R&D Acutary - London
- London
- Basic salary + benefits + bonus
*New Role - London: R&D Actuary - 'Out of the box' thinker Qualified ACTUARY*
Interim Life Pricing Actuary
- City of London
- c£700 to £900/day
Our client a leading Insurer based in the City of London have a requirement for an experienced qualified life pricing Actuary for a period of up to 1 year.
Interim Chief Actuary - Lloyds
- London
- £1,200-£1,500 per day
**Interim Chief Actuary** Lloyds** 12 month contract** £1,200-£1,500 per day**
Manager – Pensions - Zurich
- Zurich, Switzerland
- Up to £120,000 + bonus + benefits
Zurich based Manager – Pensions
Graduate - Actuarial Analyst
- London
- £25000 - £33000 per annum
This is a rare opportunity for a strong graduate to kick-start their career in the actuarial field. This is an opportunity to work within a small...


text:
Search Suggestions
Hello,Welcome to Play.com. . (Not youSign in?) | Create an account You've earned Save with SuperPoints
View Basket
Released on 24 October 2011
Featuring: David Gell, Bobby Chandler & Terry Dene
Format: Blu-ray | Rating: 15 years & over
Write a review
Condition: New
In stock Shipping now
£17.45 Free delivery
Earn 18 SuperPoints What are SuperPoints?
Available Delivery Options
Comment:All Stock is Brand New and ready for immediate shipping from Cheshire. Why wait for Channel Islands?
Average rating (0 reviews)
Help our customers make the best choices by telling everyone what you think about this product.


text:
These prehistoric polls are old news. Cast your vote in the latest and greatest Best of Citysearch Lunch Spot in Columbus!
Whoops! Something went wrong trying to count your new vote. Please try again.
4210 E Broad St, Columbus, OH
Vote for a Chance to Win a Dream Spa & Beauty Package! Voting automatically enters you into the drawing. Click here for more info.
Counting your vote...
Hey now! We're using Facebook to authenticate your vote. Making sure you've got a pulse and aren't Spammy MacSpambot. After you log-in, you'll be good to go. Thanks for voting! Please sign in with Facebook to vote
Mad Greek
You voted for
1250 Polaris Parkway, Columbus, OH
Olive Garden
475 S Third St, Columbus, OH
Katzinger's Delicatessen
980 W Broad St, Columbus, OH
Milo's Deli & Cafe
1299 Olentangy River Road, Columbus, OH
Cap City Fine Diner & Bar
1182 E Powell Dr, Lewis Center, OH
Wholly Joe's
183 Thurman Ave, Columbus, OH
Thurman Cafe
739 S 3rd St, Columbus, OH
Max & Erma's Restaurant
250 E Broad St, Columbus, OH
W G Grinders
2931 N. High St, Columbus, OH
Aladdin's Eatery


text:
Shop by
- Price
- Value:$0
- Remove This Item Category
- Other accessories(85)
- Cases(7)
- Digitizers(4)
- Bluetooth Headsets(2)
- Wired Headsets(1)
- Remove This Item Manufacturer
- Solio(1)
Newsletter Sign Up
Login or create an account to earn A4C Rewards Points for sharing!
Earn A4C Rewards Points for sharing!
Other Accessories
There are no products matching the selection.


text:
Jenkins Johnson GalleryIn November 2005 Jenkins Johnson Gallery opened a second location in Chelsea, New York. This major expansion has enlarged the gallerys roster of artists as well as its exposure and reach in the art community. The first solo exhibition of one of the most important photographers of the 20 th Century, Roy DeCarava received extraordinary press in: The New Yorker, ARTnews, The Wall Street Journal, The NY Sun, San Francisco Chronicle, The Star Ledger, Culture Catch, The Baltimore Sun. The exhibition was attended by leading American curators and collectors.Over the years the gallery has participated in the last five San Francisco International Art Exhibitions. Jenkins Johnson Gallery and its artists are constantly reviewed in many national and local publications like ARTnews, Art in America, American Artist, American Art Collector, ArtWeek, The San Francisco Chronicle, Southwest Art, The Oregonian, and The Art Newspaper among others.
Jenkins Johnson Gallery was last updated: 2008-07-07 Update general information for Jenkins Johnson Gallery with the Gallery Editor. Update shows at Jenkins Johnson Gallery with the Exhibition Manager. Update Jenkins Johnson Gallery inventory with the Inventory Manager. | ||||||||||||||||||||||||||||
| |||
| |||||||||||
| |||||||||||
| |||||||||||
You must be logged in to send emails | ||


text:
Table Of Contents
Release Notes for
Cisco IP Solution Center, 3.0Documentation Road Map for Cisco IP Solution Center
What Is New in Release 3.0 of ISC
Advanced Encryption Standard (AES)
Cisco CNS IE2100—All Device Communications Supported
Cisco CNS IE2100—CNS Identifier Other Than the Device Hostname Supported
Cisco CNS IE2100—Multiple CNS IE2100 Appliances Supported
Device Configuration Service (DCS) Replaces Telnet Gateway System (TGS)
Dynamic Component Properties Library (DCPL) Replaces csm.properties
Dynamic Crypto Map for Cisco IOS and PIX
Enhanced Interior Gateway Routing Protocol (EIGRP) Between CE - PE
Firewall Management (Cisco IOS and PIX)
Graphical User Interface (GUI) is Web-based
Installation Revised to a Java Installation Package
IPsec Features Porting from VPNSC 2.x
Layer 2 VPN (L2VPN) Management
Logging Service, Server and Task
MPLS Features Porting from VPNSC 2.x
MPLS VPN Management Schema Changes
NAT Management (Cisco IOS and PIX)
Network-based IPsec VPN: Mapping IPsec into MPLS VPN
Remote Access IPsec for Cisco IOS and PIX
Security Management Enhancements
Service Level Agreement (SLA) Configuration and Collection Task
Known Problems in Cisco IP Solution Center, Release 3.0
Obtaining Technical Assistance
Obtaining Additional Publications and Information
Release Notes for
Cisco IP Solution Center, 3.0
May 29, 2007
Note All documentation, including this Release Notes for Cisco IP Solution Center, 3.0 document and any or all of the parts of the Release 3.0 documentation set, may be upgraded.
The Cisco IP Solution Center software is referred to as ISC.
The information in this Release Notes for Cisco IP Solution Center, 3.0 document gives you an overview of this release and helps you understand it at a high level. Please read this document prior to reading any other manual for ISC.
All ISC patches are available at: http://www.cisco.com/cgi-bin/tablebuild.pl/isc (where in tablebuild.pl, the last character is the lower-case letter "l").
Note To use Netscape 7.0, please e-mail isc-crypto-info with the Subject line: Netscape7.0 to get a fix to a problem that was found late in the release cycle. You will receive a fix to allow you to use Netscape 7.0.
Note For information about downloading the Crypto package, please send an e-mail to email@example.com with the Subject line: Crypto Package.
Note To download and upload configuration files to and from the VPN 3000 concentrator, the only supported mechanism is SSH.
Note If one or more users is logged into a VPN 3000 concentrator through a web interface or through telnet, ISC cannot download to the VPN 3000. Prior to deploying a service request in ISC for a VPN 3000, you need to log out of all active sessions to this VPN 3000.
The information in this release note is organized into the following sections:
•Documentation Road Map for Cisco IP Solution Center
•What Is New in Release 3.0 of ISC
•Known Problems in Cisco IP Solution Center, Release 3.0
•Obtaining Technical Assistance
•Obtaining Additional Publications and Information
Cisco IP Solution Center (ISC), 3.0 is a follow-on release to Cisco VPN Solutions Center (VPNSC), 2.2.
This product extends the feature set for Multi Protocol Label Switching (MPLS) and Internet Protocol Security (IPsec) Virtual Private Networks (VPNs) from VPNSC, 2.2. ISC uses a new web-based GUI to improve usability and a new architecture to improve performance. The two solutions in VPNSC are now called MPLS VPN Management and Security Management, respectively, and as in VPNSC are distributed on the same product CD. Security Management is a combination of IPsec, the new Firewall feature, and the new Network Address Translation (NAT), all of which are individually licensed. The types of IPsec are all licensed as one: IPsec Site-to-Site; IPsec Remote Access; and IPsec to MPLS Mapping. These solutions all continue to provide features such as provisioning, auditing, and service level agreement (SLA) monitoring. These solutions provide network and service management for service providers. They allow service providers to seamlessly provision and manage intranet and extranet VPNs. The MPLS VPN Management and Security Management focus on provisioning, auditing, and monitoring the links between a customer's edge routers through the service provider's network.
This product introduces Layer 2 VPN (L2VPN) Management and access edge Quality of Service (QoS). L2VPN Management and QoS are also distributed on this one product CD and are licensed separately.
For more details, please see the "What Is New in Release 3.0 of ISC" section.
When you order the IP Solution Center product, you receive the following:
•Cisco IP Solution Center, 3.0 product CD-ROM
•Documentation CD-ROMs
•A minimum of three Right to Use (RTU) documents that each contains a license key
•The Documentation Guide for IP Solution Center, 3.0, (Part Number: 78-15765) is printed and distributed with all services.
The Documentation Guide for IP Solution Center, 3.0 and the other documents in the documentation set are available on CCO as follows. These documents are also available on the Documentation CD-ROM.
•Documentation Guide for Cisco IP Solution Center, 3.0 (Part Number: 78-15765) http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_0/docguide
•This document - Release Notes for Cisco IP Solution Center, 3.0 (Part Number: OL-4340) http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_0/relnotes
•Cisco IP Solution Center Installation Guide, 3.0 (Part Number: OL-4341) http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_0/install
•Cisco IP Solution Center Infrastructure Reference, 3.0 (Part Number: OL-4342) http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_0/infrastr
•Cisco IP Solution Center, 3.0: L2VPN Management User Guide, 3.0 (Part Number: OL-4343) http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_0/l2vpn
•Cisco IP Solution Center, 3.0: MPLS VPN Management User Guide, 3.0 (Part Number: OL-4344) http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_0/mpls
Note Prior to this release, the base for this service was Cisco VPN Solutions Center (VPNSC): MPLS Solution, 2.2, also known as the MPLS VPN Solution, 2.2.
•Cisco IP Solution Center, 3.0: Quality of Service Management User Guide, 3.0 (Part Number: OL-4345) http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_0/qos
•Cisco IP Solution Center, 3.0: Security Management User Guide, 3.0 (Part Number: OL-4346) http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_0/secmgmt
Note Prior to this release, the base for this service was Cisco VPN Solutions Center (VPNSC): IPsec Solution, 2.2, also known as the IPsec VPN Solution, 2.2.
API information is available in ISC_NBI_Distribution.zip. The APIs are licensed individually. To access this zip file, use one of the following paths:
1. ftp ftpeng.cisco.com
2. For the Name, enter anonymous
3. Follow the instructions to enter the Password.
4. bin
Note For security purposes, ls and dir do not work. Therefore, type commands exactly as specified, including the case.
5. cd /isc
6. get ISC30GAdoc.zip
1. In a browser, enter:
Note All documentation may be upgraded.
Documentation Road Map for Cisco IP Solution Center
This section describes documentation resources to help you find information about the Cisco IP Solution Center (ISC). The ISC Documentation Home is: http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/index.htm.
Note All documentation, printed and on CCO, may be upgraded.
We recommend you refer to the documentation in the following order. These are the documents that are common to all the services. All these documents are available on the Cisco Documentation CD-ROM, on CCO, and on the World Wide Web.
1. Documentation Guide for Cisco IP Solution Center, 3.0 (Part Number: 78-15765). The printed version of this document is shipped with the product. (http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/isc/3_0/docguide)
The contents of this document are:
- Product Documentation Set - URLs for all the documentation in this documentation set.
- Obtaining Documentation
- Obtaining Technical Assistance
- Obtaining Additional Publications and Information
2. Release Notes for Cisco IP Solution Center, 3.0 (Part Number: OL-4340)
The contents of this document are:
–Documentation Road Map for Cisco IP Solution Center
–What is New in Release 3.0 of ISC
–System Recommendations
–Known Problems in Cisco IP Solution Center, Release 3.0
–Obtaining Documentation
–Obtaining Technical Assistance
–Obtaining Additional Publications and Information
3. Cisco IP Solution Center Installation Guide, 3.0 (Part Number: OL-4341)
The contents of this document are:
–System Recommendations
–Installing and Logging Into ISC
–Setting Up Oracle for ISC
–Setting Up Cisco CNS IE2100 Appliances Running Cisco CNS Configuration Engine 1.3 Software with ISC
4. Cisco IP Solution Center Infrastructure Reference, 3.0 (Part Number: OL-4342)
The contents of this document are:
–Getting Started
–WatchDog Commands
–Structural Overview
–Service Inventory > Inventory and Connection Manager
–Service Inventory > Deployment Flow Manager and Service Inventory > Device Console
–Service Design
–CNS IE2100 Devices
The following documents are listed alphabetically. They are specific to services for which you purchase licenses. All these documents are available on the Cisco Documentation CD-ROM, on CCO, and on the World Wide Web.
•Cisco IP Solution Center, 3.0: L2VPN Management User Guide, 3.0 (Part number: OL-4343)
The contents of this document are:
–Introducing L2VPN Technology
–Setting Up the ISC Service
–Creating an L2VPN Policy
–Managing an L2VPN Service Request
•Cisco IP Solution Center, 3.0: MPLS VPN Management User Guide, 3.0 (Part number: OL-4344)
The contents of this document are:
–About Cisco IP Solution Center
–Setting Up the Network for ISC
–Discovering the Network
–Defining MPLS VPN Service Policies
–Managing MPLS VPN Service Requests
–Mapping IPsec to MPLS VPN
–The ISC Management Network
–Provisioning MPLS VPN Cable Services
–Service Request States
•Cisco IP Solution Center, 3.0: Quality of Service Management User Guide, 3.0 (Part number: OL-4345)
The contents of this document are:
–Quality of Service Concepts
–QoS Network Architecture
–QoS Service Model Overview
–Prerequisites and Assumptions
–QoS GUI Work Flow (or QoS GUI Process)
–QoS Policy Parameters
–Applying QoS Policies to ISC Services
–Auditing and Reports
–Sample Configurations
•Cisco IP Solution Center, 3.0: Security Management User Guide, 3.0 (Part number: OL-4346)
The contents of this document are:
–ISC Security Concepts
–Preparing for Security Provisioning
–Site-to-Site VPN Services
–Remote Access VPN Services
–NAT Services
–Firewall Services
–Provisioning Services
–Updating and Modifying Pre-shared Keys
If you are using the APIs, the API information is available in ISC_NBI_Distribution.zip. The APIs are licensed individually. To access this zip file, use one of the following paths:
1. ftp ftpeng.cisco.com
2. For the Name, enter anonymous
3. Follow the instructions to enter the Password.
4. bin
Note For security purposes, ls and dir do not work. Therefore, type commands exactly as specified, including the case.
5. cd /isc
6. get ISC30GAdoc.zip
1. In a browser, enter:
What Is New in Release 3.0 of ISC
The following topics (listed alphabetically) are new or the implementation was changed dramatically from VPNSC Release 2.2 to this ISC Release 3.0. Additionally, bug fixes are included in this release.
•Advanced Encryption Standard (AES)
•Cisco CNS IE2100—All Device Communications Supported
•Cisco CNS IE2100—CNS Identifier Other Than the Device Hostname Supported
•Cisco CNS IE2100—Multiple CNS IE2100 Appliances Supported
•Device Configuration Service (DCS) Replaces Telnet Gateway System (TGS)
•Dynamic Component Properties Library (DCPL) Replaces csm.properties
•Dynamic Crypto Map for Cisco IOS and PIX
•Enhanced Interior Gateway Routing Protocol (EIGRP) Between CE - PE
•Firewall Management (Cisco IOS and PIX)
•Graphical User Interface (GUI) is Web-based
•Installation Revised to a Java Installation Package
•IPsec Features Porting from VPNSC 2.x
•Layer 2 VPN (L2VPN) Management
•Logging Service, Server and Task
•MPLS Features Porting from VPNSC 2.x
•MPLS VPN Management Schema Changes
•NAT Management (Cisco IOS and PIX)
•Network-based IPsec VPN: Mapping IPsec into MPLS VPN
•Remote Access IPsec for Cisco IOS and PIX
•Security Management Enhancements
•Service Level Agreement (SLA) Configuration and Collection Task
Advanced Encryption Standard (AES)
Advanced Encryption Standard (AES) is a new addition to the list of encryption transforms for IPsec and Internet Key Exchange (IKE). In addition to 3DES and DES, which in VPNSC were the supported encryption transforms for IPsec, and encryption algorithms for IKE, ISC 3.0 also supports AES. AES is stronger than DES and more efficient than 3DES. AES can be configured for 128, 196, and 256 bit modes and is supported in Cisco IOS, PIX, and VPN 3000.
See the "Northbound APIs" section.
Architecture New for ISC 3.0
The new four-tier architecture provides the modular framework for implementation of the scalable system. The four tiers are:
Client Tier
Unlike previous VPNSC releases, this release has a web-based graphical user interface (GUI). The Client Tier consists of the user web browsers or client applications accessing ISC through the API. Customers do not have to use ISC through the GUI. The software can be driven fully through its northbound API.
Interface Tier
The Interface Tier consists of J2EE web servers that are responsible for interfacing with the ISC users. Each web server contains a servlet engine and each web server is installed on a separate physical machine. The number of web servers needed depends on the number of concurrent users the system needs to support.
When more than one web server is needed, a server load balancer can be used to direct traffic to the correct web server such that all the web servers together form a web farm. We do NOT recommend using the Domain Naming Service (DNS) to do round-robin address assignment, because it has some serious shortfalls: DNS caching makes real load balancing difficult; DNS update speed makes dynamic adding and removing of servers to the web farm difficult if not impossible; DNS load balance cannot be based on server load, traffic type, and session information.
We recommend using one of several excellent traffic load balancer appliances on the market. Typically a virtual IP address represents the whole web farm. The traffic load balancer then manipulates the IP packet's source and destination addresses to direct traffic according to the policy configured in the load balancer.
Note The Cisco CSS-11000 is a load balancer.
Control Tier
The Control Tier consists of the ISC repository (relational database) and the task scheduler. Other components include the master watchdog and system logger. At this time, there is only one Control Tier machine and it is called the master machine. The master machine is the nerve center of the whole infrastructure.
As in previous VPNSC releases, there are four repositories for ISC 3.0: Device Repository (previously called Directory Repository); Service Model Repository (previously called VPN Inventory Repository); Collection Repository; and Task Repository.
The database used previously in VPNSC has been replaced, which improves scalability and address bottlenecks. The system is coded with JDBC API and currently supports Oracle, Version 8.1.7 with US7ASCII and later and Sybase ASA, Version 8.
Distribution Tier
The Distribution Tier consists of the processing servers and collection servers. The processing servers execute tasks such as provisioning, auditing, SLA data collection, and so on. The collection servers are responsible for interacting with the network devices and each collection server owns a set of network devices. For example, configuration upload/download to a Cisco router is through its collection server.
Either the Processing Server or Collection Server can be installed and run on separate machines. ISC 3.0 has a distributed infrastructure that monitors and manages the processing servers and the collection servers.
Auto Discovery
Auto Discovery is new in ISC 3.0. There are two components: Physical Discovery and Service Discovery.
Physical Discovery discovers elements in your existing network (not the core) and the connections. In your existing network, you can discover devices and the physical connections, while providing seed devices and the number of hops you want to reach.
Service Discovery discovers the existing MPLS and L2VPN service requests in your network.
Browser Support
ISC 3.0 can be run on Internet Explorer Version 6.0 or later or Netscape 7.0 or later.
Catalyst OS (CAT OS)
VPNSC only supported PEs and CEs. In VPNSC, the PE and CE were directly connected. ISC 3.0 now supports Catalyst switches between the PE and CE. Each link can contain a list of PtToPtLinks when there are multiple switches between a CE and a PE that need to be provisioned by ISC as well.
Cisco CNS IE2100—All Device Communications Supported
In addition to integrating with Cisco CNS IE2100 for router configuration upload and download, as provided in VPNSC 2.2, in ISC 3.0 all device communications with Cisco CNS IE2100 are integrated. This includes: uploading a configuration file from a device; downloading a configlet to a device; executing a command on a device; and obtaining the result.
Cisco CNS IE2100—CNS Identifier Other Than the Device Hostname Supported
ISC 3.0 supports a CNS identifier other than the device hostname for the Cisco IOS devices using the Cisco CNS IE2100. This unique identifier is used to create the Cisco IOS device in the corresponding Cisco CNS IE2100 repository and for all Tibco event communications pertaining to this device. Any CNS identifier is valid. You can use the chassis serial number or any other identifier of your choosing.
Cisco CNS IE2100—Multiple CNS IE2100 Appliances Supported
ISC 3.0 supports multiple Cisco CNS IE2100 appliances, which are stored in the ISC repository. Each Cisco CNS IE2100 could potentially serve any Cisco IOS device. Each device using Cisco CNS IE2100-related features must be associated with a Cisco CNS IE2100 appliance through the GUI.
Control Center
Within the GUI is a new Control Center feature to manage the environment. Through the Control Center, you can monitor and configure all remote hosts in the ISC distributed environment, as follows:
•View and set any configuration of any server on any host
•View any server log on any host
•Assign and remove a Collection Server to a collection domain
•Add and remove a Processing Server to and from the system
•Start, stop, and restart any server on any host
•View the existence of any Master Server, Processing Server, Collection Server, and Interface Server
•View the machine statistics (server data, location of files, disk statistics, and collection zones) of a Master Server, Processing Server, Collection Server, or Interface Server
•View the collection zones assigned to each server
•View license information and install license keys
Database Change
ISC 3.0 uses a standard off-the-shelf relational database management system (RDBMS). With the use of the RDBMS, ISC 3.0 is more scalable and more reliable and gives better performance than the VPNSC releases.
Sybase ASA, Version 8 is bundled with this release. Oracle 8.1.7 and later with US7ASCII are also supported.
Device Configuration Service (DCS) Replaces Telnet Gateway System (TGS)
The Device Configuration Service (DCS), replaces the Telnet Gateway System (TGS).
•No more large memory footprint is required by the CORBA API and server, as before.
•Large resources are no longer needed to connect each router as a separate process.
•Performance is improved in terms of execution and communication with the rest of the system because the EXPECT script is no longer used.
Device Console
Device Console enables you to do the following functions to one or more devices:
•download commands
•issue EXEC commands
•reload devices
•download a template configlet
•manage a device configuration in the repository.
Distributed Architecture
See the "Architecture New for ISC 3.0" section.
Dynamic Component Properties Library (DCPL) Replaces csm.properties
With the Dynamic Component Properties Library (DCPL) in ISC, instead of the csm.properties file in VPNSC, the following advantages are in place:
•You no longer need to restart a component that takes a new value.
•Fine-grained control of the debug level is available on a component/subcomponent basis.
•You can specify a value type and range to check for correctness.
Note There are fewer DCPL properties than csm.properties.
Note The settings in csm.properties in VPNSC are not migrated to ISC 3.0. Settings need to be set in DCPL.
Dynamic Crypto Map for Cisco IOS and PIX
ISC 3.0 supports provisioning of dynamic crypto maps, which is critical for scenarios where some VPN nodes have a dynamically assigned IP address, such as DHCP or Point-to-Point Protocol over Ethernet (PPPoE). For example, if the spoke routers in a hub-and-spoke IPsec VPN have dynamically assigned IP addresses, the hub router must be provisioned with a dynamic crypto map because the IP address of the spokes will not be known to the hub. Furthermore, if there is a mix of spokes, some with dynamic and some with static IP addresses, then there is a user-configurable service request attribute to indicate whether dynamic crypto map should be used for all spokes, or a mixture of dynamic and static crypto maps. This feature in conjunction with the Cisco CNS IE2100 integration in ISC, enables ISC 3.0 to provide a complete management solution for the dynamic IP address devices.
Enhanced Interior Gateway Routing Protocol (EIGRP) Between CE - PE
Enhanced Interior Gateway Routing Protocol (EIGRP) is available for MPLS between CE and PE devices. The PE router must be running Cisco IOS Version 12.0(22)S or later or 12.2(15)T and later.
Firewall Management (Cisco IOS and PIX)
New in ISC 3.0 is policy-based Firewall management. The firewall policy contains a set of access rules, inspect rules, URL filtering rules, authentication proxy, and syslog attributes. The policy rule sets support the notion of network objects, which are variables used in the policy, and defined independently for each customer, site, or device. Firewall policy also supports a hierarchical model where a given policy inherits some behavior from its parent policy. The policy rules are device-independent and are translated to device-specific commands at the time the policy is applied to the devices. A firewall service request is used to apply a policy to a list of devices.
Graphical User Interface (GUI) is Web-based
The Graphical User Interface (GUI) is now web-based (HTML). See the "Browser Support" section.
Installation Revised to a Java Installation Package
A new Java Installation Package is used for ISC 3.0. This simplifies the installation from the script-based installation used in VPNSC 2.x.
With the new distributed environment, there are different ways to package the software and each of these can have the option of different management services (L2VPN Management, MPLS VPN Management, QoS Management, and Security Management):
•master machine installation
•interface tier machine installation
•processing server installation
•collection server installation
IPsec Features Porting from VPNSC 2.x
All VPNSC 2.x IPsec provisioning and auditing features are available in ISC 3.0, however, they use a new, lightweight data-driven provisioning engine. This new data-driven provisioning engine can easily be extended to support new commands, and thus has made it possible for ISC 3.0 to support the latest security features, such as Dynamic Multipoint Virtual Private Network (DMVPN) and VRF-aware IPsec. The new provisioning engine also supports multiple platforms such as Cisco IOS and PIX.
In VPNSC 2.x, the IPsec service model concentrated around IPsec tunnels, and thus creation or deployment of large service requests was time-consuming because each IPsec tunnel was represented in the repository. The new 3.0 IPsec service model was simplified to calculate the tunnels on the spot as needed.
IPsec Functional Audit
ISC 3.0 now supports functional auditing of IPsec service requests. This can be used after the service request has already been deployed. Functional auditing involves performing a PING operation among all the nodes of the IPsec VPN to ensure the tunnels are up and the VPN connectivity is there.
Layer 2 Access to MPLS VPNs
Multiple Layer 2 (L2) switches can exist between the CE and the PE to connect these two layer 3 (L3) devices in a CE-PE link. Provisioning of the L2 devices (Ethernet) that are Cisco IOS enabled is supported in this release.
Layer 2 VPN (L2VPN) Management
Layer 2 VPN (L2VPN) Management is new to ISC.
An L2VPN policy describes what you need to enter and what attributes are taken from the policy to be enforced across the service. An L2VPN service request is available to apply the policy to a set of devices through a set of EndToEndWire, which is an end-to-end layer 2 tunnel between two customer CPEs through the service provider's core network, between two PEs.
The ISC 3.0 licensing scheme supports the following. Note that at a minimum you must enter one Application License, an Activation License, and a VPN License.
•Application Licenses, as follows:
–L2VPN Management
–MPLS VPN Management
•API Licenses, as follows:
•Activation License (activates and sets the maximum global count of the services)
•VPN License (activates and sets the maximum number of VPNs)
Logging Service, Server and Task
In ISC 3.0, a general logging facility is used by all components, unlike in VPNSC 2.2, where each component outputs message and logging information in its own format. The new logging facility is based on the JDK 1.4 logger and integrated with DCPL to allow dynamic changing of the log level during runtime without the need to restart the components.
The server log viewer is provided by the ISC Control Center to view server logging output and status. The task log viewer should be part of the task management GUI.
MPLS Features Porting from VPNSC 2.x
The new data driven provisioning engine was used to make the VPNSC 2.x MPLS provisioning and auditing features available in the ISC 3.0 MPLS VPN Management. The new simplified service model and much lighter provisioning engine is expected to translate to much higher performance for MPLS provisioning compared to the VPNSC 2.x releases.
In VPNSC 2.x, the service model concentrated around the PE-CE link. Provisioning of the PE-CE link requires a service request and that the state is associated with the service request. In ISC 3.0 there is a paradigm shift; the 3.0 service model's service request can contain one or more MPLS-VPN links. Each MPLS-VPN link can contain multiple Layer 2 links. Thus, MPLS VPN is not restricted to a single hop PE-CE link but can also support multi-hop PE-CE links.
MPLS VPN Enhancements
The following enhancements have been added to the MPLS VPN Management since VPNSC, 2.2:
•"Enhanced Interior Gateway Routing Protocol (EIGRP) Between CE - PE" section
•"Layer 2 Access to MPLS VPNs" section
•"MPLS Features Porting from VPNSC 2.x" section
•"MPLS VPN Management Schema Changes" section
•"Multi-VRF CE Support" section
•"Network-based IPsec VPN: Mapping IPsec into MPLS VPN" section
•"PE Only Provisioning" section
MPLS VPN Management Schema Changes
The following are the major schema changes introduced in ISC 3.0:
•A service request is no longer just a CE-PE link. Each service request provisions a set of CE-PE links, called MPLS VPN Link.
•Each MPLS VPN Link can contain a list of PtToPtLinks when there are multiple switches in between CE-PE and that need to be provisioned by ISC as well.
•A new MPLS policy schema object specifies what attribute values you must enter and what attribute values are taken from the policy itself.
Multicast MPLS VPN
MPLS VPNs provide only unicast data service. If the customer sites have a multicast application, it would not work across the customer sites. For this support, the PE routers, with the help of the provider core network, must be able to route multicast control and data traffic from the customer networks. The approach Cisco IOS has selected to implement this feature tries to strike a balance between the amount of state that must be maintained in the provider core network and forwarding efficiency for the multicast traffic from customer networks.
ISC 3.0 provisions multicast support for MPLS/BGP VPNs. This results in customer multicast traffic being carried in the provider core with the help of multicast tunnels created in the provider core. To use this feature, the provider core network must be multicast enabled.
Multi-VRF CE Support
In VPNSC 2.2, multi-VRF CE support requires the creation of one service request with templates. In ISC 3.0 MPLS VPN Management, a single service request provisions a multi-VRF CE.
NAT Management (Cisco IOS and PIX)
Network Address Translation (NAT) is new in ISC 3.0. It supports static and dynamic address translation on Cisco IOS and PIX devices. The static translations can be either host-based, port-based, or network-based. The dynamic translations can use either an address pool or an interface name.
A NAT service request does network address translation on internet bound traffic and allows site-to-site traffic to do no-NAT. A NAT service request also supports sites with overlapping addresses, in which both internet bound and site-to-site traffic will be natted. In addition, for overlapping Cisco IOS devices, a NAT service request also supports alternative pools for site-to-site traffic, so that internet bound traffic and site-to-site traffic can use different address pools.
Network-based IPsec VPN: Mapping IPsec into MPLS VPN
ISC 3.0 supports mapping of IPsec tunnels into existing MPLS VPNs. This provides connectivity from off-net sites of a customer VPN across the internet through IPsec tunnels and mapping them into a customer's MPLS VPN. Similarly, this provides remote access into a given customer's MPLS VPN from an IPsec client connected to the internet, for example from a Microsoft® Windows workstation running a Cisco VPN client. The IPsec aggregator router resides on the service provider premises, and terminates IPsec tunnels from off-net customer CE routers or from IPsec remote clients.
The IPsec aggregator can be either a PE or a Multi-VRF CE router, and must run Cisco IOS release 12.2(15)T1 or later. The CE routers may run any Cisco IOS image 12.2(11)T or later. The IPsec remote client is Cisco VPN Client Release 3.0 or later.
Northbound APIs
Continuing the tradition of the VPNSC 2.x releases, northbound APIs drive ISC for all service provisioning that can occur through the GUI.
Note The MPLS API is also backwardly compatible to release 2.x.
ISC 3.0 API is based on the HTTP/HTTPS/XML/SOAP standard.
The following is the functionality provided by the APIs. Full lifecycle support (create, delete, modify, and view) is supported for the functionality.
–Device Groups
–Customer Sites
–CPE Devices
–Provider Regions
–PE Devices
–Access Domains
–Resource Pools
–CE/CLE-PE Links (NPC)
–PIX Firewall Device
•Service Design and Provisioning
–MPLS policy and service request
–QoS policy and service request (modify is not supported by API)
–L2VPN policy and service request
–Tasks (without modify support)
–Session login
–Error handling
–Role Based Access Control (RBAC)
PE Only Provisioning
In VPNSC 2.x, MPLS VPN Management required that a PE object and a CE object be created in VPNSC. In ISC 3.0, this setup is still valid, plus now you can manage an MPLS VPN link with just a PE, and a CE object is not required.
PING Monitoring
New in ISC 3.0 is the PING Monitoring tool, which enables you to select one or more MPLS service requests and perform VRF PING between the MPLS PE and CE, or perform regular PING among the CEs. The PING Monitoring tool then generates a report of the results of the PING operation. Similarly, you may select one or more IPsec service requests in the PING Monitoring tool and perform PING among the IPsec VPN nodes, either through the IPsec tunnels or outside the tunnels. The result is again provided in a report.
QoS Provisioning
New in ISC 3.0 is Quality of Service (QoS) provisioning. A QoS policy object records the details of the QoS information. A QoS service request object binds the QoS policy to a collection of access circuits. The QoSLink object denotes the access circuit between a CE and PE to which we want to apply the QoS policy.
Remote Access IPsec for Cisco IOS and PIX
In addition to Remote Access for the VPN 3000 Concentrator, available in VPNSC 2.1, this release adds Remote Access IPsec support for the Cisco IOS router and PIX firewall platforms. This enables remote users to use the Cisco VPN Client Release 3.0 or later to establish an IPsec tunnel from their workstation, for example a Microsoft® Windows workstation, to the IPsec gateway. Cisco IOS release 12.2(11)T or later is required for this.
Repository Import and Export
For ISC 3.0, only use your Sybase ASA or Oracle Import and Export tools.
Repository Migration
Caution Repositories used with VPNSC 1.x and 2.x releases, must be migrated to use them with ISC.
This is explained in Chapter 2, "Installing and Logging Into ISC," in the Cisco IP Solution Center Installation Guide, 3.0 (Part Number: OL-4341).
Security Management
Security Management replaces what was previously called IP security (IPsec) in previous VPNSC releases. The new features are listed separately. The services in this release are as follows:
•Site-to-Site IPsec, which supports:
–Cisco IOS Router (all four policies: IPsec; GRE + IPsec; DMVPN; and EZVPN)
–PIX Firewall (2 policies: IPsec and EZVPN)
–VPN 3000 Concentrator (1 policy: IPsec)
•Remote Access IPsec, which supports:
–Cisco IOS Router
–PIX Firewall
–VPN 3000 Concentrator
•Firewall, which supports:
–Cisco IOS Router
–PIX Firewall
•Network Access Translation (NAT), which supports:
–Cisco IOS Router
–PIX Firewall
Security Management Enhancements
The following enhancements have been added to Security Management since VPNSC, Release 2.2, when it was IPsec only:
•"Advanced Encryption Standard (AES)" section
•DMVPN provisioning support, see the "Site-to-Site IPsec" section
•"Dynamic Crypto Map for Cisco IOS and PIX" section
•Easy VPN provisioning support, see the "Site-to-Site IPsec" section
•"Firewall Management (Cisco IOS and PIX)" section
•"IPsec Features Porting from VPNSC 2.x" section
•"IPsec Functional Audit" section
•"NAT Management (Cisco IOS and PIX)" section
•"Remote Access IPsec for Cisco IOS and PIX" section
Service Level Agreement (SLA) Configuration and Collection Task
The Service Level Agreement (SLA) and the configuration and collection task were ported to take advantage of the new scalable architecture.
Additionally, collection is available more frequently than on the hourly boundary.
Site of Origin
Site of Origin (SOO) is a concept in MPLS VPN architecture that prevents the routing loops in a site that is multi-homed to the MPLS VPN backbone and in a site that uses AS-OVERRIDE. SOO is a BGP extended community attribute used to identify an IP address that originated from a site to prevent that IP address from being advertised back to the site. This attribute uniquely identifies the site from which the PE router learned the route. SOO is tagged at a PE in peering with BGP neighbors using an inbound route-map and works in conjunction with the BGP CE-PE routing protocol.
SOO must be unique for each customer site for each VPN. Therefore, the same value of SOO must be used on PE routers connected to the same CE router or to the same customer site. The following format can be used to address an SOO extended-community-value: <as number>:<value>.
Site-to-Site IPsec
What in previous releases of VPNSC was known as LAN-to-LAN is now known as Site-to-Site IPsec and there is now support for the following four policies:
•IPsec, which supports the Cisco IOS, PIX, and VPN 3000 platforms
•Generic Routing Encapsulation (GRE) + IPsec policy, which support only the Cisco IOS platform
•Dynamic Multipoint Virtual Private Network (DMVPN) policy, which supports only the Cisco IOS platform.
•Easy VPN (EZVPN), which supports the Cisco IOS, PIX, and VPN 3000 platforms on the EZVPN server side, and Cisco IOS and PIX on the EZVPN client side.
DMVPN and EZVPN are the two new site-to-site IPsec policies available in ISC 3.0.
DMVPN allows you to better scale large IPsec VPNs by combining multipoint GRE tunnels, IPsec, and Next Hop Resolution Protocol (NHRP). DMVPN supports dynamic tunnel creation for spoke-to-spoke tunnels. It also supports nodes with dynamically assigned IP addresses. To use DMVPN, Cisco IOS release 12.2(15)T or later is required. ISC 3.0 supports DMVPN provisioning.
EZVPN allows most VPN parameters to be defined on the IPsec server, which can be a VPN 3000 concentrator, a Cisco IOS router, or a PIX firewall. EZVPN client support on PIX requires PIX Release 6.3. The EZVPN client uses Cisco's unity client protocol to establish a tunnel with the server. ISC 3.0 supports provisioning both the server and the clients. It also supports both the network extension and client modes.
SNMP Service
The CORBA implementation of the poller is replaced by a pure Java implementation and fits into the new distributed infrastructure. All the generic MIB collections utilize the new poller implementation. Also, the MIB collection is extended (device, interface, module, and VLAN) for the QoS constraint engine to have enough information to generate a correct configuration.
Watchdog Distributed
The Watchdog manages and monitors components on all distributed servers. Through the GUI, you can manage all the remote servers from a central location. The configuration changes are made effective on the remote server through DCPL (see the "Dynamic Component Properties Library (DCPL) Replaces csm.properties" section). The master Watchdog in the control tier machine (see the "Control Tier" section) keeps track of the heartbeats from all the remote Watchdogs of remote hosts.
System Recommendations
The system recommendations and requirements are listed in Chapter 1, "System Recommendations" of the Cisco IP Solution Center Installation Guide, 3.0 (Part Number: OL-4341). The recommendation is to thoroughly review this list before even planning your installation, to be sure you have all the hardware and software you need to successfully install.
Known Problems in Cisco IP Solution Center, Release 3.0
To find known problems in Cisco IP Solution Center, use the following URL:
You need to log in to CCO.
You can search for specific bugs or search for a range by product name. This tool enables you to query for keywords, severity, range, or version.
The results display bug ID and title, found-in version, fixed-in version, and status. The bug ID is a hyperlink to detailed information for the bug ID's product, component, severity, first found-in, and release notes.
The results could be displayed in a feature matrix or spreadsheet.
Obtaining Documentation
Cisco provides several ways to obtain documentation, technical assistance, and other technical resources. These sections explain how to obtain technical information from Cisco Systems.
You can access the most current Cisco documentation on the World Wide Web at this URL:
You can access the Cisco website at this URL:
International Cisco web sites can be accessed from this URL:
Documentation CD-ROM
Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which may have shipped with your product. The Documentation CD-ROM is updated monthly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual subscription.
Registered Cisco.com users can order the Documentation CD-ROM (product number DOC-CONDOCCD=) through the online Subscription Store:
Ordering Documentation
You can find instructions for ordering documentation at this URL:
You can order Cisco documentation in these ways:
•Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Networking Products MarketPlace:
•Registered Cisco.com users can order the Documentation CD-ROM (Customer Order Number DOC-CONDOCCD=) through the online Subscription Store:
•Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, U.S.A.) at 408 526-7208 or, elsewhere in North America, by calling 800 553-NETS (6387).
Documentation Feedback
You can submit comments electronically on Cisco.com. On the Cisco Documentation home page, click Feedback at the top of the page.
You can e-mail your comments to firstname.lastname@example.com.
You can submit your comments by mail by using the response card behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Obtaining Technical Assistance
Cisco provides Cisco.com, which includes the Cisco Technical Assistance Center (TAC) Website, as a starting point for all technical assistance. Customers and partners can obtain online documentation, troubleshooting tips, and sample configurations from the Cisco TAC website. Cisco.com registered users have complete access to the technical support resources on the Cisco TAC website, including TAC tools and utilities.
Cisco.com offers a suite of interactive, networked services that let you access Cisco information, networking solutions, services, programs, and resources at any time, from anywhere in the world.
Cisco.com provides a broad range of features and services to help you with these tasks:
•Streamline business processes and improve productivity
•Resolve technical issues with online support
•Download and test software packages
•Order Cisco learning materials and merchandise
•Register for online skill assessment, training, and certification programs
To obtain customized information and service, you can self-register on Cisco.com at this URL:
Technical Assistance Center
The Cisco TAC is available to all customers who need technical assistance with a Cisco product, technology, or solution. Two levels of support are available: the Cisco TAC website and the Cisco TAC Escalation Center. The avenue of support that you choose depends on the priority of the problem and the conditions stated in service contracts, when applicable.
We categorize Cisco TAC inquiries according to urgency:
•Priority level 4 (P4)—You need information or assistance concerning Cisco product capabilities, product installation, or basic product configuration.
•Priority level 3 (P3)—Your network performance is degraded. Network functionality is noticeably impaired, but most business operations continue.
•Priority level 2 (P2)—Your production network is severely degraded, affecting significant aspects of business operations. No workaround is available.
•Priority level 1 (P1)—Your production network is down, and a critical impact to business operations will occur if service is not restored quickly. No workaround is available.
Cisco TAC Website
You can use the Cisco TAC website to resolve P3 and P4 issues yourself, saving both cost and time. The site provides around-the-clock access to online tools, knowledge bases, and software. To access the Cisco TAC website, go to this URL:
All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on the Cisco TAC website. Some services on the Cisco TAC website require a Cisco.com login ID and password. If you have a valid service contract but do not have a login ID or password, go to this URL to register:
If you are a Cisco.com registered user, and you cannot resolve your technical issues by using the Cisco TAC website, you can open a case online at this URL:
If you have Internet access, we recommend that you open P3 and P4 cases through the Cisco TAC website so that you can describe the situation in your own words and attach any necessary files.
Cisco TAC Escalation Center
The Cisco TAC Escalation Center addresses priority level 1 or priority level 2 issues. These classifications are assigned when severe network degradation significantly impacts business operations. When you contact the TAC Escalation Center with a P1 or P2 problem, a Cisco TAC engineer automatically opens a case.
To obtain a directory of toll-free Cisco TAC telephone numbers for your country, go to this URL:
Before calling, please check with your network operations center to determine the level of Cisco support services to which your company is entitled: for example, SMARTnet, SMARTnet Onsite, or Network Supported Accounts (NSA). When you call the center, please have available your service agreement number and your product serial number.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•The Cisco Product Catalog describes the networking products offered by Cisco Systems as well as ordering and customer support services. Access the Cisco Product Catalog at this URL:
•Cisco Press publishes a wide range of networking publications. Cisco suggests these titles for new and experienced users: Internetworking Terms and Acronyms Dictionary, Internetworking Technology Handbook, Internetworking Troubleshooting Guide, and the Internetworking Design Guide. For current Cisco Press titles and other information, go to Cisco Press online at this URL:
•Packet magazine is the Cisco monthly periodical that provides industry professionals with the latest information about the field of networking. You can access Packet magazine at this URL:
•iQ Magazine is the Cisco monthly periodical that provides business leaders and decision makers with the latest information about the networking industry. You can access iQ Magazine at this URL:
•Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in the design, development, and operation of public and private internets and intranets. You can access the Internet Protocol Journal at this URL:
•Training—Cisco offers world-class networking training, with current offerings in network training listed at this URL: