Using User Globs And Mac Address Globs - 3Com 3CRWX120695A Reference Manual

Using User Globs and
MAC Address Globs
Configuring and Managing Access Rules for Administrative Users
When configuring authentication for console users, make sure that
there is a username and password defined in the local WX user
database that you can use to log in through the console. Also make
sure that you configure authentication for console users so that the
user glob includes at least one valid local user. Otherwise, you could
prevent anyone from being able to use the console to access the WX.
For any user, authorization uses the same method(s) as authentication for
that user.
"Globbing" allows you to use a wildcard pattern to expand a single
element into a list of elements that match the pattern. MSS and 3WXM
accept user globs and MAC address globs.
User Globs
A user glob is a shorthand method for applying an authentication,
authorization, and accounting (AAA) command to a single user or a set
of users.
A user glob can be up to 80 characters long and cannot contain spaces or
tabs. A single asterisk (*) wildcard character matches any characters up
to, but not including, a separator character in the user glob. Valid user
glob separators include the at sign (@) and period (.). The double-asterisk
(**) wildcard characters with no delimiters match all usernames
For example, the following user globs identify the following users:
jose@example.com — specifies the user jose at example.com
*@example.com — specifies all users at example.com whose
usernames do not contain periods (for example, jose@example.com
and tamara@example.com, but not nin.wong@example.com)
*@engineering.example.com — specifies all engineering users at
example.com whose names do not contain periods
*.*@engineering.example.com — specifies all engineering users
whose usernames contain periods
* — specifies all usernames that have no delimiters
EXAMPLE\* — specifies all users in the Windows Domain EXAMPLE
with usernames that have no delimiters
EXAMPLE\*.* — specifies all users in the Windows Domain EXAMPLE
whose usernames contain a period
317