Nortel 2350 用户指南
Using the command-line interface 47
Nortel WLAN—Security Switch 2300 Series Configuration Guide
User wildcards, MAC address wildcards, and VLAN wildcards
Name “wildcarding” is a way of using a wildcard pattern to expand a single element into a list of elements that
match the pattern. WSS Software accepts user wildcards, MAC address wildcards, and VLAN wildcards. The
order in which wildcards appear in the configuration is important, because once a wildcard is matched,
processing stops on the list of wildcards
match the pattern. WSS Software accepts user wildcards, MAC address wildcards, and VLAN wildcards. The
order in which wildcards appear in the configuration is important, because once a wildcard is matched,
processing stops on the list of wildcards
User wildcards
A user wildcard is shorthand method for matching an authentication, authorization, and accounting (AAA)
command to either a single user or a set of users.
command to either a single user or a set of users.
A user wildcard can be up to 80 characters long and cannot contain spaces or tabs. The double-asterisk (**)
wildcard characters with no delimiter characters match all usernames. The single-asterisk (*) wildcard
character matches any number of characters up to, but not including, a delimiter character in the wildcard.
Valid user wildcard delimiter characters are the at (@) sign and the period (.).
wildcard characters with no delimiter characters match all usernames. The single-asterisk (*) wildcard
character matches any number of characters up to, but not including, a delimiter character in the wildcard.
Valid user wildcard delimiter characters are the at (@) sign and the period (.).
For example, the following wildcards identify the following users:
MAC address wildcards
A media access control (MAC) address wildcard is a similar method for matching some authentication, autho-
rization, and accounting (AAA) and forwarding database (FDB) commands to one or more 6-byte MAC
addresses. In a MAC address wildcard, you can use a single asterisk (*) as a wildcard to match all MAC
addresses, or as follows to match from 1 byte to 5 bytes of the MAC address:
rization, and accounting (AAA) and forwarding database (FDB) commands to one or more 6-byte MAC
addresses. In a MAC address wildcard, you can use a single asterisk (*) as a wildcard to match all MAC
addresses, or as follows to match from 1 byte to 5 bytes of the MAC address:
00:*
00:01:*
00:01:*
User wildcard
User(s) designated
jose@example.com
User jose at example.com
*@example.com
All users at example.com whose usernames do not contain
periods—for example, jose@example.com and
tamara@example.com, but not nin.wong@example.com,
because nin.wong contains a period
periods—for example, jose@example.com and
tamara@example.com, but not nin.wong@example.com,
because nin.wong contains a period
*@marketing.example.com
All marketing users at example.com whose usernames do
not contain periods
not contain periods
*.*@marketing.example.com
All marketing users at example.com whose usernames
contain a period
contain a period
*
All users with usernames that have no delimiters
EXAMPLE\*
All users in the Windows Domain EXAMPLE with
usernames that have no delimiters
usernames that have no delimiters
EXAMPLE\*.*
All users in the Windows Domain EXAMPLE whose
usernames contain a period
usernames contain a period
**
All users