Using the command-line interface 47

Nortel WLAN—Security Switch 2300 Series Configuration Guide

User wildcards, MAC address wildcards, and VLAN wildcards

Name “wildcarding” is a way of using a wildcard pattern to expand a single element into a list of elements that
match the pattern. WSS Software accepts user wildcards, MAC address wildcards, and VLAN wildcards. The
order in which wildcards appear in the configuration is important, because once a wildcard is matched,
processing stops on the list of wildcards

User wildcards

A user wildcard is shorthand method for matching an authentication, authorization, and accounting (AAA)
command to either a single user or a set of users.
A user wildcard can be upto 80 characters long and cannot contain spaces or tabs. The double-asterisk (**)
wildcard characters with no delimiter characters match all usernames. The single-asterisk (*) wildcard
character matches any number of characters up to, but not including, a delimiter character in the wildcard.
Valid user wildcard delimiter characters are the at (@) sign and the period (.).
For example, the following wildcards identify the following users:

MAC address wildcards

A media access control (MAC) address wildcard is a similar method for matching some authentication, autho-
rization, and accounting (AAA) and forwarding database (FDB) commands to one or more 6-byte MAC
addresses. In a MAC address wildcard, you can use a single asterisk (*) as a wildcard to match all MAC
addresses, or as follows to match from 1 byte to 5 bytes of the MAC address:

00:*

00:01:*

User wildcard User(s) designated

jose@example.com User jose at example.com
*@example.com All users at example.com whose usernames do not contain
periods—for example, jose@example.com and
tamara@example.com, but not nin.wong@example.com,
because nin.wong contains a period
*@marketing.example.com All marketing users at example.com whose usernames do
not contain periods
*.*@marketing.example.com All marketing users at example.com whose usernames
contain a period
* All users with usernames that have no delimiters
EXAMPLE\* All users in the Windows Domain EXAMPLE with
usernames that have no delimiters
EXAMPLE\*.* All users in the Windows Domain EXAMPLE whose
usernames contain a period
** All users