Table of Contents
Advertisement
24
C
1: U
HAPTER
SING THE
User Globs, MAC
Address Globs, and
VLAN Globs
C
-L
I
OMMAND
INE
NTERFACE
check the bits that correspond to 1s (ones) in the mask. You specify the
wildcard mask in dotted decimal notation.
For example, the address 10.0.0.0 and mask 0.255.255.255 match all IP
addresses that begin with 10 in the first octet.
Name "globbing" is a way of using a wildcard pattern to expand a single
element into a list of elements that match the pattern. MSS accepts user
globs, MAC address globs, and VLAN globs. The order in which globs
appear in the configuration is important, because once a glob is matched,
processing stops on the list of globs
User Globs
A user glob is shorthand method for matching an authentication,
authorization, and accounting (AAA) command to either a single user or
a set of users.
A user glob can be up to 80 characters long and cannot contain spaces or
tabs. The double-asterisk (**) wildcard characters with no delimiter
characters match all usernames. The single-asterisk (*) wildcard character
matches any number of characters up to, but not including, a delimiter
character in the glob. Valid user glob delimiter characters are the at (@)
sign and the period (.).
For example, in Table 3, the following globs identify the following users:
Table 3 User Globs
User Glob
jose@example.com
*@example.com
*@marketing.example.com
*.*@marketing.example.com
*
User(s) Designated
User jose at example.com
All users at example.com whose usernames do not
contain periods—for example, jose@example.com
and tamara@example.com, but not
nin.wong@example.com, because nin.wong
contains a period
All marketing users at example.com whose
usernames do not contain periods
All marketing users at example.com whose
usernames contain a period
All users with usernames that have no delimiters
Advertisement
Table of Contents
