Hub/Switch Reference Guide
Using the Command-Line Interface 23
Nortel WLAN—Security Switch 2300 Series Command Line Reference
number of characters up to, but not including, a delimiter character in the wildcard. Valid user wildcard
delimiter characters are the at (@) sign and the period (.).
For example, the following wildcards identify the following users:
MAC Address Wildcards
A media access control (MAC) address wildcard is a similar method for matching some authentication, autho-
rization, and accounting (AAA) and forwarding database (FDB) commands to one or more 6-byte MAC
addresses. In a MAC address wildcard, you can use a single asterisk (*) as a wildcard to match all MAC
addresses, or as follows to match from 1 byte to 5 bytes of the MAC address:
00:*
00:01:*
00:01:02:*
00:01:02:03:*
00:01:02:03:04:*
For example, the MAC address wildcard 02:06:8c* represents all MAC addresses starting with 02:06:8c.
Specifying only the first 3 bytes of a MAC address allows you to apply commands to MAC addresses based on
an organizationally unique identity (OUI).
VLAN Wildcards
A VLAN wildcard is a method for matching one of a set of local rules on a WSS, known as the location policy,
to one or more users. WSS Software compares the VLAN wildcard, which can optionally contain wildcard
characters, against the VLAN-Name attribute returned by AAA, to determine whether to apply the rule.
User Wildcard User(s) Designated
jose@example.com User jose at example.com
*@example.com All users at example.com whose usernames do not contain
periods—for example, jose@example.com and
tamara@example.com, but not nin.wong@example.com,
because nin.wong contains a period
*@marketing.example.com All marketing users at example.com whose usernames do
not contain periods
*.*@marketing.example.com All marketing users at example.com whose usernames
contain periods
* All users with usernames that have no delimiters
EXAMPLE\* All users in the Windows Domain EXAMPLE with
usernames that have no delimiters
EXAMPLE\*.* All users in the Windows Domain EXAMPLE whose
usernames contain periods
** All users










