Mostly you will need to use AND operation inside the condition set as there may be no need for more than one condition set.
OR operation inside the condition set may be required where there are many combination sets of PCs available inside the network like following: Cisco:PA:OS-Type = Windows XP Cisco:PA:PA-Version = 2.0.0.1 Cisco:PA:OS-Type = Windows 2003 Server Cisco:PA:PA-Version = 1.0.0.1 Now, you define two condition sets with OR operation inside the condition and ANP operation between the condition set. I don't think in lab, they will ask like this. They will give you three or two conditions and you may need to add one condition set. With regards Kings On Mon, Aug 29, 2011 at 9:22 PM, Jim Terry <[email protected]> wrote: > Hi all, > > Any takers on this post...? > > I am trying to check my logic on NAC policies > > Thanks, > > JT > > > > On Wed, Aug 24, 2011 at 10:44 PM, Jim Terry <[email protected]> wrote: > > > > hi all, > > > > I am comparing the NAC solution in lab 17 5.1 where the solution is done > by condition sets but in lab 11 5.2 there are multiple policies. Does this > main that multiple policies are always ANDed? > > > > Thanks in advance. > > > > JT > > > > > > On Tue, Aug 23, 2011 at 8:31 AM, Jim Terry <[email protected]> wrote: > >> > >> Ahh the lightbulb went off. > >> > >> Thank you. > >> > >> Jt > >> > >> > >> > >> On Tue, Aug 23, 2011 at 8:12 AM, Piotr Kaluzny <[email protected]> > wrote: > >>> > >>> Hi Jim, > >>> > >>> The difference is that in this case there are 3 condition sets, each > containing only one element. The other way to configure this would be to use > only one condition set and then you would use "AND inside" and "OR between". > Just another way of doing things. > >>> > >>> Regards, > >>> -- > >>> Piotr Kaluzny > >>> CCIE #25665 (Security), CCSP, CCNP > >>> Sr. Support Engineer - IPexpert, Inc. > >>> URL: http://www.IPexpert.com > >>> > >>> > >>> On Tue, Aug 23, 2011 at 4:58 AM, Jim Terry <[email protected]> > wrote: > >>>> > >>>> Hi all, > >>>> > >>>> I need assistance in understanding why the DSG says to move the radio > button from And to Or? > >>>> > >>>> In this case dont I want ANDs inside the condition set to make sure > that CTA, and XP, and version 2.0.0.30 are ALL matched? > >>>> > >>>> Please let me know, > >>>> > >>>> Thanks, > >>>> > >>>> JT > >>>> > >>>> > >>>> _______________________________________________ > >>>> For more information regarding industry leading CCIE Lab training, > please visit www.ipexpert.com > >>>> > >>>> Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > >>> > >> > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
