Hello Mark, I would do the same as you. I would place the policy-map under the "host" subinterface . Plus, i would also look at the title of the question. If it says Control Plane Protection, then i would do as you've done. If it says Policing, then i would do as Yusuf did.
I think that should be ok . We're paying $1400, the least they can do is go through our solution to see if it's correct or not ;) Cheers, TacACK
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
