Dell Powerconnect W-ClearPass Hardware Appliances User Manual page 349

The following table describes all the operator types:
Table 225:
Operator Types
Operator Description
EQUALS True if the run-time value of the attribute matches the configured value. For string data type, this is a
case-sensitive comparison.
E.g., RADIUS:IETF:NAS-Identifier EQUALS "SJ-VPN-DEVICE"
CONTAINS For string data type, true if the run-time value of the attribute is a substring of the configured value.
E.g., RADIUS:IETF:NAS-Identifier CONTAINS "VPN"
BEGINS_ For string data type, true if the run-time value of the attribute begins with the configured value.
WITH
E.g., RADIUS:IETF:NAS-Identifier BEGINS_WITH "SJ-"
ENDS_ For string data type, true if the run-time value of the attribute ends with the configured value.
WITH
E.g., RADIUS:IETF:NAS-Identifier ENDS_WITH "DEVICE"
BELONGS_ For string data type, true if the run-time value of the attribute matches a set of configured string
TO values.
E.g., RADIUS:IETF:Service-Type BELONGS_TO Login-User,Framed-User,
Authenticate-Only
For integer data type, true if the run-time value of the attribute matches a set of configured integer
values.
E.g., RADIUS:IETF:NAS-Port BELONGS_TO 1,2,3
For day data type, true if run-time value of the attribute matches a set of configured days of the week.
E.g., Date:Day-of-Week BELONGS_TO MONDAY,TUESDAY,WEDNESDAY
When Policy Manager is aware of the values that can be assigned to BELONGS_TO operator, it
populates the value field with those values in a multi-select list box; you can select the appropriate
values from the presented list. Otherwise, you must enter a comma separated list of values.
EQUALS_ For string data type, true if the run-time value of the attribute matches the configured value,
IGNORE_ regardless of whether the string is upper case or lower case.
CASE
E.g., RADIUS:IETF:NAS-Identifier EQUALS_IGNORE_CASE "sj-vpn-device"
MATCHES_ For string data type, true if the run-time value of the attribute matches the regular expression in the
REGEX configured value.
E.g., RADIUS:IETF:NAS-Identifier MATCHES_REGEX sj-device[1-9]-dev*
EXISTS For string data type, true if the run-time value of the attribute exists. This is a unary operator.
E.g., RADIUS:IETF:NAS-Identifier EXISTS
GREATER_ For integer, time and date data types, true if the run-time value of the attribute is greater than the
THAN configured value.
E.g., RADIUS:IETF:NAS-Port GREATER_THAN 10
GREATER_ For integer, time and date data types, true if the run-time value of the attribute is greater than or equal
THAN_OR_
EQUALS
E.g., RADIUS:IETF:NAS-Port GREATER_THAN_OR_EQUALS 10
LESS_ For integer, time and date data types, true if the run-time value of the attribute is less than the
THAN configured value.
Dell Networking W-ClearPass Policy Manager 6.0 | User Guide
to the configured value.
349