Open as PDF
32 CHAPTER 1: USING THE COMMAND-LINE INTERFACE
To match all VLANs, use the double-asterisk (**) wildcard characters with
no delimiters. To match any number of characters up to, but not
including, a delimiter character in the glob, use the single-asterisk (*)
wildcard. Valid VLAN glob delimiter characters are the at (@) sign and the
For example, the VLAN glob bldg4.* matches bldg4.security and bldg4.hr
and all other VLAN names with bldg4. at the beginning.
Matching Order for Globs
In general, the order in which you enter AAA commands determines the
order in which MSS matches the user, MAC address, or VLAN to a glob.
To verify the order, view the output of the display aaa or display config
command. MSS checks globs that appear higher in the list before items
lower in the list and uses the first successful match.
Port Lists The physical Ethernet ports on a WX can be set for connection to MAPs,
authenticated wired users, or the network backbone. You can include a
single port or multiple ports in one MSS CLI command by using the
appropriate list format.
The ports on a WX are numbered 1 through as high as 22, depending on
the WX model. No port 0 exists on the WX. You can include a single port
or multiple ports in a command that includes port port-list. Use one of
the following formats for port-list:
A single port number. For example:
WX1200# set port enable 6
A comma-separated list of port numbers, with no spaces. For
WX1200# display port poe 1,2,4,6
A hyphen-separated range of port numbers, with no spaces. For
WX1200# reset port 1-8
Any combination of single numbers, lists, and ranges. Hyphens take
precedence over commas. For example:
WX1200# display port status 1-3,5