Now you understand the difficulty with writing a good Solution Guide at times.
The documentation is very good but not perfect. Nor is the DSG. You get to learn from the difficulties we all go thru. Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: <mailto:[email protected]> [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: <http://www.ipexpert.com/chat> www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at <http://www.ipexpert.com/communities> www.ipexpert.com/communities and our public website at <http://www.ipexpert.com/> www.ipexpert.com From: [email protected] [mailto:[email protected]] On Behalf Of Richard Chan Sent: Tuesday, June 21, 2011 8:05 PM To: CCIE Security Maillist Subject: [OSL | CCIE_Security] Does User-Based Firewall use RADIUS attribute supplicant-group= or tag-name= IPX Vol 2 Lab 17 has a User-based firewall task. The solution sends the attribute "tag-name=PARTNERS" from ACS to NAD. However, DocCD seems to suggest using the attribute: supplicant-group= (http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_ user_fw_supp.html#wp1132816) while the tag-name= attribute is referenced in the "Tag and Template" section http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_t ag_template_ps6441_TSD_Products_Configuration_Guide_Chapter.html I don't think supplicant-group= worked for me; the solution in the DSG worked, so the documentation seems to be a bit confusing here. Richard
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
