Using the Command-Line Interface 23

number of characters up to, but not including, a delimiter character in the wildcard. Valid user wildcard delimiter characters are the at (@) sign and the period (.).

For example, the following wildcards identify the following users:

User Wildcard

User(s) Designated

jose@example.com

User jose at example.com

*@example.com

All users at example.com whose usernames do not contain

 

periods—for example, jose@example.com and

 

tamara@example.com, but not nin.wong@example.com,

 

because nin.wong contains a period

*@marketing.example.com

All marketing users at example.com whose usernames do

 

not contain periods

*.*@marketing.example.com

All marketing users at example.com whose usernames

 

contain periods

*

All users with usernames that have no delimiters

EXAMPLE\*

All users in the Windows Domain EXAMPLE with

 

usernames that have no delimiters

EXAMPLE\*.*

All users in the Windows Domain EXAMPLE whose

 

usernames contain periods

**

All users

MAC Address Wildcards

A media access control (MAC) address wildcard is a similar method for matching some authentication, autho- rization, and accounting (AAA) and forwarding database (FDB) commands to one or more 6-byte MAC addresses. In a MAC address wildcard, you can use a single asterisk (*) as a wildcard to match all MAC addresses, or as follows to match from 1 byte to 5 bytes of the MAC address:

00:*

00:01:*

00:01:02:*

00:01:02:03:*

00:01:02:03:04:*

For example, the MAC address wildcard 02:06:8c* represents all MAC addresses starting with 02:06:8c. Specifying only the first 3 bytes of a MAC address allows you to apply commands to MAC addresses based on an organizationally unique identity (OUI).

VLAN Wildcards

A VLAN wildcard is a method for matching one of a set of local rules on a WSS, known as the location policy, to one or more users. WSS Software compares the VLAN wildcard, which can optionally contain wildcard characters, against the VLAN-Name attribute returned by AAA, to determine whether to apply the rule.

Nortel WLAN—Security Switch 2300 Series Command Line Reference

Page 23
Image 23
Nortel Networks 2300 Series manual MAC Address Wildcards