The VPN gateway <b>moon</b> controls the access to the hosts <b>alice</b> and
<b>venus</b> by means of <b>X.509 Attribute Certificates</b>. Access to <b>alice</b>
is granted to members of the group 'Research' whereas <b>venus</b> can only
be reached by members of the groups 'Accounting' and 'Sales'. The roadwarriors
<b>carol</b> and <b>dave</b> belong to the groups 'Research' and 'Accounting',
respectively. Therefore <b>carol</b> can access <b>alice</b> and <b>dave</b>
can reach <b>venus</b>.