Wireless Controller, Service Platform and Access Point CLI Reference Guide

Configures a wireless client filter based on the RADIUS group name

Supported in the following platforms:

Access Points — AP310i/e, AP410i/e, AP460i/e, AP560i/h, AP510i/e, AP505i, AP7522, AP7532, AP7562, AP7612, AP7632, AP7662, AP8432, AP8533
Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

group [any|contains|exact|not-contains]

group [any|contains <WORD>|exact <WORD>|not-contains <WORD>]

Parameters

group [any|contains <WORD>|exact <WORD>|not-contains <WORD>]


group	Specifies a wireless client filter based on how the RADIUS group name matches the provided expression. Select one of the following options: any, contains, exact, or not-contains.
any	This user-defined role can fit into any group (no strings to match). This is the default setting.
contains <WORD>	The role is applied only when the RADIUS group name contains the string specified in the role. <WORD> – Specify the string to match (this is case sensitive, and is compared against the group name returned by the RADIUS server). It should contain the provided expression.
exact <WORD>	The role is applied only when the RADIUS group name exactly matches the string specified in the role. <WORD> – Specify the exact string to match (this is case sensitive, and is compared against the group name returned by the RADIUS server). It should be an exact match.
not-contains <WORD>	The role is applied only when the RADIUS group name does not contain the string specified in the role. <WORD> – Specify the string not to match (this is case sensitive, and is compared against the group name returned by the RADIUS server). It should not contain the provided expression.

Examples

nx9500-6C8809(config-role-policy-test-user-role-testing)#group contains testgroup

nx9500-6C8809(config-role-policy-test-user-role-testing)#show context
 user-role testing precedence 10
  authentication-type eq kerberos
  encryption-type eq wep128
  ap-location contains office
  group contains testgroup
  captive-portal authentication-state pre-login
  city exact SanJose
  company exact Example_company
  country exact America
  department exact TnV
  emailid exact testing@examplecompany.com
  employeeid contains TnVTest1
nx9500-6C8809(config-role-policy-test-user-role-testing)#

Related Commands


no	Removes the group configured for this user-defined role