Wireless Controller, Service Platform and Access Point CLI Reference Guide

Configures a wireless client filter based on the employee ID

Supported in the following platforms:

Access Points — AP310i/e, AP410i/e, AP460i/e, AP560i/h, AP510i/e, AP505i, AP7522, AP7532, AP7562, AP7612, AP7632, AP7662, AP8432, AP8533
Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

employeeid [any|contains|exact|not-contains]

employeeid [any|exact <WORD>|contains <WORD>|not-contains <WORD>]

Parameters

employeeid [any|exact <WORD>|contains <WORD>|not-contains <WORD>]


employeeid	Specifies a wireless client filter based on how the ‘employee ID‘, returned by the RADIUS server, matches the provided expression. Select one of the following options: any, contains, exact, or not-contains.
any	No specific employee ID associated with this user-defined role. This role can be applied to any wireless client having any employee ID (no strings to match). This is the default setting.
contains <WORD>	The role is applied only when the employee ID, returned by the RADIUS server, contains the string specified in the role. <WORD> – Specify the string to match (this is case sensitive, and is compared against the employee ID returned by the RADIUS server). It should contain the provided expression.
exact <WORD>	The role is applied only when the employee ID, returned by the RADIUS server, exactly matches the string specified in the role. <WORD> – Specify the exact string to match (this is case sensitive, and is compared against the employee ID returned by the RADIUS server). It should be an exact match.
not-contains <WORD>	The role is applied only when the employee ID, returned by the RADIUS server, does not contain the string specified in the role. <WORD> – Specify the string not to match (this is case sensitive, and is compared against the employee ID returned by the RADIUS server). It should not contain the provided expression.

Examples

nx9500-6C8809(config-role-policy-test-user-role-testing)#employeeid contains TnVTest1

nx9500-6C8809(config-role-policy-test-user-role-testing)#show context
 user-role testing precedence 10
  authentication-type eq kerberos
  ap-location contains office
  captive-portal authentication-state pre-login
  city exact SanJose
  company exact ExampleCompany
  country exact America
  department exact TnV
  emailid exact testing@examplecompany.com
  employeeid contains TnVTest1
nx9500-6C8809(config-role-policy-test-user-role-testing)#

Related Commands


no	Removes the employee ID configured with this user-defined role