3Com WX2200 3CRWX220095A Switch User Manual


 
CLI Conventions 31
MAC Address Globs
A media access control (MAC) address glob is a similar method for
matching some authentication, authorization, and accounting (AAA) and
forwarding database (FDB) commands to one or more 6-byte MAC
addresses. In a MAC address glob, you can use a single asterisk (*) as a
wildcard to match all MAC addresses, or as follows to match from 1 byte
to 5 bytes of the MAC address:
00:*
00:01:*
00:01:02:*
00:01:02:03:*
00:01:02:03:04:*
For example, the MAC address glob 02:06:8c* represents all MAC
addresses starting with 02:06:8c. Specifying only the first 3 bytes of a
MAC address allows you to apply commands to MAC addresses based on
an organizationally unique identity (OUI).
VLAN Globs
A VLAN glob is a method for matching one of a set of local rules on a WX
switch, known as the location policy, to one or more users. MSS
compares the VLAN glob, which can optionally contain wildcard
characters, against the VLAN-Name attribute returned by AAA, to
determine whether to apply the rule.
*@example.com All users at example.com whose usernames do not
contain periods—for example, jose@example.com
and tamara@example.com, but not
nin.wong@example.com, because nin.wong
contains a period
*@marketing.example.com All marketing users at example.com whose
usernames do not contain periods
*.*@marketing.example.com All marketing users at example.com whose
usernames contain a period
* All users with usernames that have no delimiters
EXAMPLE\* All users in the Windows Domain EXAMPLE with
usernames that have no delimiters
EXAMPLE\*.* All users in the Windows Domain EXAMPLE whose
usernames contain a period
** All users
Table 3 User Globs (continued)
User Glob User(s) Designated