Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 1125

Advertising
background image

Brocade Mobility RFS Controller CLI Reference Guide

1117

53-1003098-01

19

no captive-portal authentication-state

no use [ip-access-list|mac-access-list] [in|out] <IP/MAC-ACCESS-LIST-NAME>

precedence <1-100>

Usage Guidelines:

The

no

command negates any command associated with it. Wherever required, use the same

parameters associated with the command getting negated.

Example

The following example shows the Role Policy ‘test’ User Role ‘testing’

configuration before the ‘no’ commands are executed:

rfs7000-37FABE(config-role-policy-test-user-role-testing)#show context

user-role testing precedence 10

authentication-type eq kerberos

encryption-type eq wep128

br-location contains office

mu-mac 11-22-33-44-55-66

group contains testgroup

captive-portal authentication-state pre-login

city exact SanJose

company exact MotorolaSolutions

country exact America

department exact TnV

emailid exact [email protected]

employeeid contains TnVMoto

rfs7000-37FABE(config-role-policy-test-user-role-testing)#

rfs7000-37FABE(config-role-policy-test-user-role-testing)#no

authentication-type

rfs7000-37FABE(config-role-policy-test-user-role-testing)#no encryption-type

rfs7000-37FABE(config-role-policy-test-user-role-testing)#no group

rfs7000-37FABE(config-role-policy-test-user-role-testing)#no mu-mac

rfs7000-37FABE(config-role-policy-test-user-role-testing)#no br-location

rfs7000-37FABE(config-role-policy-test-user-role-testing)#no employeeid

The following example shows the Role Policy ‘test’ User Role ‘testing’

configuration after the ‘no’ commands are executed:

rfs7000-37FABE(config-role-policy-test-user-role-testing)#show context

no title

Removes the title filter

no user-defined

Removes the user-defined filter (an attribute defined in the AD or OpenLDAP server)

no captive-portal

Removes the captive portal based filter

authentication-state

Removes the authentication state filter

no use

Removes an IP or MAC access list from this user-defined role

[ip-access-list|
mac-access-list]
[in|out]

Removes the specified IP or MAC access list from a user group

in – Removes the list from being applied to incoming packets

out – Removes the list from being applied to outgoing packets

<IP/MAC-ACCESS-LIST-NAME> Specifies the IP or MAC access list name

precedence <1-100>

Specifies the access list precedence

<1-100> – Specify the precedence from 1 - 100.

Advertising