Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 1131)

Brocade Mobility RFS Controller CLI Reference Guide 1123
53-1003098-01
19
state exact active
use ip-access-list in test precedence 9
rfs7000-37FABE(config-role-policy-test-user-role-testing)#
Related Commands:
user-defined
user-role commands
Enables you to define a filter based on an attribute defined in the Active Directory or the OpenLDAP
server
Supported in the following platforms:
• Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point
• Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade
Mobility RFS7000
• Service Platforms — Brocade Mobility RFS9510
Syntax:
user-defined <ATTR-STRING> [any|contains|exact|not-contains]
user-defined <ATTR-STRING> [any|contains <WORD>|exact <WORD>|not-contains
<WORD>]
Parameters
user-defined <ATTR-STRING> [any|exact <WORD>|contains <WORD>|not-contains
<WORD>]
Example
rfs4000-229D58(config-role-policy-test-user-role-user1)#user-defined
office-location exact EcoSpace
no Removes an IP or MAC access list from use with a user role
user-defined
<ATTR-STRING> Specify a filter based on an attribute defined in the AD or OpenLDAP server.
•
<ATTR-NAME> – Specify the attribute string.
After specifying the attribute name, specify the match type.
any No specific string to match. This role can be applied to any wireless client. This is the default setting.
contains <WORD> The role is applied only when the user-defined attribute value, returned by the RADIUS server, contains the
string specified in the role.
•
<WORD> – Specify the string to match (this is case sensitive, and is compared against the value
returned by the RADIUS server). It should contain the provided expression.
exact <WORD> The role is applied only when the user-defined attribute value, returned by the RADIUS server, exactly
matches the string specified in the role.
•
<WORD> – Specify the exact string to match (this is case sensitive, and is compared against the
value returned by the RADIUS server). It should be an exact match.
not-contains <WORD> The role is applied only when the user-defined attribute value, returned by the RADIUS server, does not
contain the string specified in the role.
•
<WORD> – Specify the string not to match (this is case sensitive, and is compared against the value
returned by the RADIUS server). It should not contain the provided expression.