Re: [OSL | CCIE_Security] IPX lab 17 5.1 NAC and condition sets
Mostly you will need to use AND operation inside the condition set as there may be no need for more than one condition set. OR operation inside the condition set may be required where there are many combination sets of PCs available inside the network like following: Cisco:PA:OS-Type = Windows XP Cisco:PA:PA-Version = 2.0.0.1 Cisco:PA:OS-Type = Windows 2003 Server Cisco:PA:PA-Version = 1.0.0.1 Now, you define two condition sets with OR operation inside the condition and ANP operation between the condition set. I don't think in lab, they will ask like this. They will give you three or two conditions and you may need to add one condition set. With regards Kings On Mon, Aug 29, 2011 at 9:22 PM, Jim Terry jim0te...@gmail.com wrote: Hi all, Any takers on this post...? I am trying to check my logic on NAC policies Thanks, JT On Wed, Aug 24, 2011 at 10:44 PM, Jim Terry jim0te...@gmail.com wrote: hi all, I am comparing the NAC solution in lab 17 5.1 where the solution is done by condition sets but in lab 11 5.2 there are multiple policies. Does this main that multiple policies are always ANDed? Thanks in advance. JT On Tue, Aug 23, 2011 at 8:31 AM, Jim Terry jim0te...@gmail.com wrote: Ahh the lightbulb went off. Thank you. Jt On Tue, Aug 23, 2011 at 8:12 AM, Piotr Kaluzny pio...@ipexpert.com wrote: Hi Jim, The difference is that in this case there are 3 condition sets, each containing only one element. The other way to configure this would be to use only one condition set and then you would use AND inside and OR between. Just another way of doing things. Regards, -- Piotr Kaluzny CCIE #25665 (Security), CCSP, CCNP Sr. Support Engineer - IPexpert, Inc. URL: http://www.IPexpert.com On Tue, Aug 23, 2011 at 4:58 AM, Jim Terry jim0te...@gmail.com wrote: Hi all, I need assistance in understanding why the DSG says to move the radio button from And to Or? In this case dont I want ANDs inside the condition set to make sure that CTA, and XP, and version 2.0.0.30 are ALL matched? Please let me know, Thanks, JT ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
Re: [OSL | CCIE_Security] IPX lab 17 5.1 NAC and condition sets
Hi all, Any takers on this post...? I am trying to check my logic on NAC policies Thanks, JT On Wed, Aug 24, 2011 at 10:44 PM, Jim Terry jim0te...@gmail.com wrote: hi all, I am comparing the NAC solution in lab 17 5.1 where the solution is done by condition sets but in lab 11 5.2 there are multiple policies. Does this main that multiple policies are always ANDed? Thanks in advance. JT On Tue, Aug 23, 2011 at 8:31 AM, Jim Terry jim0te...@gmail.com wrote: Ahh the lightbulb went off. Thank you. Jt On Tue, Aug 23, 2011 at 8:12 AM, Piotr Kaluzny pio...@ipexpert.com wrote: Hi Jim, The difference is that in this case there are 3 condition sets, each containing only one element. The other way to configure this would be to use only one condition set and then you would use AND inside and OR between. Just another way of doing things. Regards, -- Piotr Kaluzny CCIE #25665 (Security), CCSP, CCNP Sr. Support Engineer - IPexpert, Inc. URL: http://www.IPexpert.com On Tue, Aug 23, 2011 at 4:58 AM, Jim Terry jim0te...@gmail.com wrote: Hi all, I need assistance in understanding why the DSG says to move the radio button from And to Or? In this case dont I want ANDs inside the condition set to make sure that CTA, and XP, and version 2.0.0.30 are ALL matched? Please let me know, Thanks, JT ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
Re: [OSL | CCIE_Security] IPX lab 17 5.1 NAC and condition sets
hi all, I am comparing the NAC solution in lab 17 5.1 where the solution is done by condition sets but in lab 11 5.2 there are multiple policies. Does this main that multiple policies are always ANDed? Thanks in advance. JT On Tue, Aug 23, 2011 at 8:31 AM, Jim Terry jim0te...@gmail.com wrote: Ahh the lightbulb went off. Thank you. Jt On Tue, Aug 23, 2011 at 8:12 AM, Piotr Kaluzny pio...@ipexpert.comwrote: Hi Jim, The difference is that in this case there are 3 condition sets, each containing only one element. The other way to configure this would be to use only one condition set and then you would use AND inside and OR between. Just another way of doing things. Regards, -- Piotr Kaluzny CCIE #25665 (Security), CCSP, CCNP Sr. Support Engineer - IPexpert, Inc. URL: http://www.IPexpert.com http://www.ipexpert.com/ On Tue, Aug 23, 2011 at 4:58 AM, Jim Terry jim0te...@gmail.com wrote: Hi all, I need assistance in understanding why the DSG says to move the radio button from And to Or? In this case dont I want ANDs inside the condition set to make sure that CTA, and XP, and version 2.0.0.30 are ALL matched? Please let me know, Thanks, JT ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com http://www.platinumplacement.com/ ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
Re: [OSL | CCIE_Security] IPX lab 17 5.1 NAC and condition sets
Hi Jim, The difference is that in this case there are 3 condition sets, each containing only one element. The other way to configure this would be to use only one condition set and then you would use AND inside and OR between. Just another way of doing things. Regards, -- Piotr Kaluzny CCIE #25665 (Security), CCSP, CCNP Sr. Support Engineer - IPexpert, Inc. URL: http://www.IPexpert.com On Tue, Aug 23, 2011 at 4:58 AM, Jim Terry jim0te...@gmail.com wrote: Hi all, I need assistance in understanding why the DSG says to move the radio button from And to Or? In this case dont I want ANDs inside the condition set to make sure that CTA, and XP, and version 2.0.0.30 are ALL matched? Please let me know, Thanks, JT ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
Re: [OSL | CCIE_Security] IPX lab 17 5.1 NAC and condition sets
Ahh the lightbulb went off. Thank you. Jt On Tue, Aug 23, 2011 at 8:12 AM, Piotr Kaluzny pio...@ipexpert.com wrote: Hi Jim, The difference is that in this case there are 3 condition sets, each containing only one element. The other way to configure this would be to use only one condition set and then you would use AND inside and OR between. Just another way of doing things. Regards, -- Piotr Kaluzny CCIE #25665 (Security), CCSP, CCNP Sr. Support Engineer - IPexpert, Inc. URL: http://www.IPexpert.com http://www.ipexpert.com/ On Tue, Aug 23, 2011 at 4:58 AM, Jim Terry jim0te...@gmail.com wrote: Hi all, I need assistance in understanding why the DSG says to move the radio button from And to Or? In this case dont I want ANDs inside the condition set to make sure that CTA, and XP, and version 2.0.0.30 are ALL matched? Please let me know, Thanks, JT ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com http://www.platinumplacement.com/ ___ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
