System information

4
DWS-1008 CLI Reference Guide
D-Link Systems, Inc.
Using the Command Line Interface
Wildcard Masks
Security access control lists (ACLs) use source and destination IP addresses and wildcard
masks to determine whether the switch filters or forwards IP packets. Matching packets are
either permitted or denied network access. The ACL checks the bits in IP addresses that
correspond to any 0s (zeros) in the mask, but does not check the bits that correspond to 1s
(ones) in the mask. You specify the wildcard mask in dotted decimal notation.
For example, the address 10.0.0.0 and mask 0.255.255.255 match all IP addresses that
begin with 10 in the first octet.
User Globs, MAC Address Globs, and VLAN Globs
Name “globbing” is a way of using a wildcard pattern to expand a single element into a list of
elements that match the pattern. MSS accepts user globs, MAC address globs, and VLAN
globs. The order in which globs appear in the configuration is important, because once a glob
is matched, processing stops on the list of globs.
User Globs
A user glob is shorthand method for matching an authentication, authorization, and accounting
(AAA) command to either a single user or a set of users.
A user glob can be up to 80 characters long and cannot contain spaces or tabs. The
double-asterisk (**) wildcard characters with no delimiter characters match all usernames.
The single-asterisk (*) wildcard character matches any number of characters up to, but not
including, a delimiter character in the glob. Valid user glob delimiter characters are the at (@)
sign and the period (.).
For example, the following globs identify the following users:
User Glob User(s) Designated
[e-mail] User jose at example.com
*@example.com All users at example.com whose usernames do not
contain periods for example, [e-mail] and
[e-mail], but not [e-mail],
because nin.wong contains a period.
*@marketing.example.com All marketing users at example.com whose usernames do
not contain periods.
*.*@marketing.example.com All marketing users at example.com whose usernames
contain periods.
* All users with usernames that have no delimiters.