Nortel Networks 2300 manual User Wildcards, MAC Address Wildcards, and Vlan Wildcards, 0001

Using the Command-Line Interface 39

User Wildcards, MAC Address Wildcards, and VLAN Wildcards

Name “globbing” is a way of using a wildcard pattern to expand a single element into a list of elements that match the pattern. WSS Software accepts user globs, MAC address globs, and VLAN globs. The order in which globs appear in the configuration is important, because once a wildcard is matched, processing stops on the list of globs

User Wildcards

A user wildcard is shorthand method for matching an authentication, authorization, and accounting (AAA) command to either a single user or a set of users.

A user wildcard can be up to 80 characters long and cannot contain spaces or tabs. The double-asterisk (**) wildcard characters with no delimiter characters match all usernames. The single-asterisk (*) wildcard character matches any number of characters up to, but not including, a delimiter character in the wildcard. Valid user wildcard delimiter characters are the at (@) sign and the period (.).

For example, the following globs identify the following users:

User Wildcard	User Designated
jose@example.com	User jose at example.com
*@example.com	All users at example.com whose usernames do not contain
	periods—for example, jose@example.com and
	tamara@example.com, but not nin.wong@example.com,
	because nin.wong contains a period
*@marketing.example.com	All marketing users at example.com whose usernames do
	not contain periods
*.*@marketing.example.com	All marketing users at example.com whose usernames
	contain a period
*	All users with usernames that have no delimiters
EXAMPLE\*	All users in the Windows Domain EXAMPLE with
	usernames that have no delimiters
EXAMPLE\*.*	All users in the Windows Domain EXAMPLE whose
	usernames contain a period
**	All users

MAC Address Wildcards

A media access control (MAC) address wildcard is a similar method for matching some authentication, autho- rization, and accounting (AAA) and forwarding database (FDB) commands to one or more 6-byte MAC addresses. In a MAC address wildcard, you can use a single asterisk (*) as a wildcard to match all MAC addresses, or as follows to match from 1 byte to 5 bytes of the MAC address:

00:*

00:01:*

Nortel WLAN Security Switch 2300 Series Configuration Guide