Dell PowerConnect W-7200 Series Reference Manual page 605

Parameter
Operation
Operand
Action
Value
Total Hits
New Hits
To display derivation rules for a user group, include the user <name> parameter. You can also display a table of all
user rules by including the user parameter, but omitting the <name> parameter
(host) #show aaa derivation-rules user user44
User Rule Table
---------------
Priority Attribute
Description
-------- ---------
--
1 location
The following data columns appear in the output of this command:
Parameter
Priority
Attribute
Operation
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Description
and Operand match
This is the match method by which the string in Operand is matched with the attribute
value returned by the authentication server.
contains – The rule is applied if and only if the attribute value contains the string in
l
parameter Operand.
starts-with – The rule is applied if and only if the attribute value returned starts with the
l
string in parameter Operand.
ends-with – The rule is applied if and only if the attribute value returned ends with the
l
string in parameter Operand.
equals – The rule is applied if and only if the attribute value returned equals the string
l
in parameter Operand.
not-equals – The rule is applied if and only if the attribute value returned is not equal to
l
the string in parameter Operand.
value-of – This is a special condition. What this implies is that the role or VLAN is set to
l
the value of the attribute returned. For this to be successful, the role and the VLAN ID
returned as the value of the attribute selected must be already configured on the
controller when the rule is applied.
This is the string to which the value of the returned attribute is matched.
This parameter identifies whether the rule sets a server group role (set role) or a VLAN (set
vlan).
Sets the user role or VLAN ID to be assigned to the client if the condition is met.
Number of times the rule has been applied since the last server reboot.
Number of times the rule has been applied since the show aaa derivation-rules command
was last issued.
Operation Operand Action
--------- ------- ------
equals ap23
Description
The priority in which the rules are applied. Rules at the top of the list are applied before
rules at the bottom.
This is the attribute returned by the authentication server that is examined for Operation
and Operand match.
This is the match method by which the string in Operand is matched with the attribute
value returned by the authentication server.
Value Total Hits New Hits
----- ---------- --------
set role
guestrole1
show aaa derivation-rules | 605
------
guest 56