3Com WX2200 3CRWX220095A, WXR100 3CRWXR10095A, WX4400 3CRWX440095A MAC Address Globs, Vlan Globs

CLI Conventions 31

Table 3 User Globs (continued)

User Glob	User(s) Designated
*@example.com	All users at example.com whose usernames do not
	contain periods—for example, jose@example.com
	and tamara@example.com, but not
	nin.wong@example.com, because nin.wong
	contains a period
*@marketing.example.com	All marketing users at example.com whose
	usernames do not contain periods
*.*@marketing.example.com	All marketing users at example.com whose
	usernames contain a period
*	All users with usernames that have no delimiters
EXAMPLE\*	All users in the Windows Domain EXAMPLE with
	usernames that have no delimiters
EXAMPLE\*.*	All users in the Windows Domain EXAMPLE whose
	usernames contain a period
**	All users

MAC Address Globs

A media access control (MAC) address glob is a similar method for matching some authentication, authorization, and accounting (AAA) and forwarding database (FDB) commands to one or more 6-byte MAC addresses. In a MAC address glob, you can use a single asterisk (*) as a wildcard to match all MAC addresses, or as follows to match from 1 byte to 5 bytes of the MAC address:

00:*

00:01:*

00:01:02:*

00:01:02:03:*

00:01:02:03:04:*

For example, the MAC address glob 02:06:8c* represents all MAC addresses starting with 02:06:8c. Specifying only the first 3 bytes of a MAC address allows you to apply commands to MAC addresses based on an organizationally unique identity (OUI).

VLAN Globs

A VLAN glob is a method for matching one of a set of local rules on a WX switch, known as the location policy, to one or more users. MSS compares the VLAN glob, which can optionally contain wildcard characters, against the VLAN-Name attribute returned by AAA, to determine whether to apply the rule.