country

Configures a wireless client filter based on the country name

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

country [any|contains|exact|not-contains]
country [any|exact <WORD>|contains <WORD>|not-contains <WORD>]

Parameters

country [any|exact <WORD>|contains <WORD>|not-contains <WORD>]

country

Specifies a wireless client filter based on how the ‘country‘ name, returned by the RADIUS server, matches the provided expression. Select one of the following options: any, contains, exact, or not-contains.

any

No specific country associated with this user-defined role. This role is applied to any wireless client from any country (no strings to match). This is the default setting.

contains <WORD>

The role is applied only when the country name, returned by the RADIUS server, contains the string specified in the role.
  • <WORD> – Specify the string to match (this is case sensitive, and is compared against the country name returned by the RADIUS server). It should contain the provided expression.

exact <WORD>

The role is applied only when the country name, returned by the RADIUS server, exactly matches the string specified in the role.
  • <WORD> – Specify the exact string to match (this is case sensitive, and is compared against the country name returned by the RADIUS server). It should be an exact match.

not-contains <WORD>

The role is applied only when the country name, returned by the RADIUS server, does not contain the string specified in the role.
  • <WORD> – Specify the string not to match (this is case sensitive, and is compared against the country name returned by the RADIUS server). It should not contain the provided expression.

Examples

nx9500-6C8809(config-role-policy-test-user-role-testing)#country exact America
nx9500-6C8809(config-role-policy-test-user-role-testing)#show context
 user-role testing precedence 10
  authentication-type eq kerberos
  ap-location contains office
  captive-portal authentication-state pre-login
  city exact SanJose
  company exact Examplecompany
  country exact America
nx9500-6C8809(config-role-policy-test-user-role-testing)#

Related Commands

no

Removes the country name configured with this user-defined role