user-defined <ATTR-STRING> [any|contains|exact|not-contains]
user-defined <ATTR-STRING> [any|contains <WORD>|exact <WORD>|not-contains <WORD>]
user-defined <ATTR-STRING> [any|contains <WORD>|exact <WORD>|not-contains <WORD>]
| 
                         user-defined <ATTR-STRING>  | 
                     Specify a filter based on an attribute defined in
                        the AD or OpenLDAP server.
 After specifying the attribute name, specify the match type.  | 
                  
| 
                         any  | 
                     No specific string to match. This role can be applied to any wireless client. This is the default setting. | 
| 
                         contains <WORD>  | 
                     The role is applied only when the user-defined
                        attribute value, returned by the RADIUS server, contains the string
                        specified in the role.
  | 
                  
| 
                         exact <WORD>  | 
                     The role is applied only when the user-defined
                        attribute value, returned by the RADIUS server, exactly matches the string
                        specified in the role.
  | 
                  
| 
                         not-contains <WORD>  | 
                     The role is applied only when the user-defined
                        attribute value, returned by the RADIUS server, does not contain the string
                        specified in the role.
  | 
                  
nx9500-6C8809(config-role-policy-test-user-role-user1)#user-defined office-location exact EcoSpace
nx9500-6C8809(config-role-policy-test-user-role-user1)#show context user-role user1 precedence 1 employee-type exact consultant user-defined office-location exact EcoSpace nx9500-6C8809(config-role-policy-test-user-role-user1)#
| no | 
                         Removes the user-defined filter configured with this user role  |