1 The VPN gateway <b>moon</b> controls the access to the hosts <b>alice</b> and
2 <b>venus</b> by means of wildcard parameters that must match the subject
3 <b>Distinguished Name</b> contained in the peer's X.509 certificate. Access to
4 <b>alice</b> is granted for DNs containing a OU=Research field whereas <b>venus</b>
5 can only be reached with a DN containing OU=Accounting. The roadwarriors
6 <b>carol</b> and <b>dave</b> belong to the departments 'Research' and 'Accounting',
7 respectively. Therefore <b>carol</b> can access <b>alice</b> and <b>dave</b>
8 can reach <b>venus</b>.