CLI Reference Guide

282 CHAPTER 7: CONFIGURING AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING PARAMETERS
MAC Address Globs
A MAC address glob is a similar method for applying some AAA
commands to either a single 6-byte MAC address or a set of MAC
addresses. In a MAC address glob, you can use the asterisk (*) as follows
to match from 0 bytes to 5 bytes of the MAC address:
* (all MAC addresses)
00:*
00:01:*
00:01:02:*
00:01:02:03:*
00:01:02:03:04:*
For example, the MAC address glob 00:06:8c* represents all MAC
addresses starting with 00:06:8c. Specifying only the first three bytes of a
MAC address allows you to apply commands to MAC address based on
an organizationally unique identity (OUI).
VLAN Globs
A VLAN glob is a method for matching one of a set of local rules on a WX
switch, known as the location policy, to one or more users. MSS
compares the VLAN glob, which can optionally contain wildcard
characters, against the VLAN-Name attribute returned by AAA to
determine whether to apply the rule.
To match all VLANs, use the double-asterisk (**) wildcard characters with
no delimiters. To match any number of characters up to, but not
including, a delimiter character in the glob, use the single-asterisk (*)
wildcard. Valid VLAN glob delimiter characters are the at (@) sign and the
period (.).
For example, the VLAN glob bldg4.* matches bldg4.security and bldg4.hr
and all other VLAN names with bldg4. at the beginning.