Wireless Controller, Service Platform and Access Point CLI Reference Guide

Configures a wireless client filter based on the department name

Supported in the following platforms:

Access Points — AP310i/e, AP410i/e, AP460i/e, AP560i/h, AP510i/e, AP505i, AP7522, AP7532, AP7562, AP7612, AP7632, AP7662, AP8432, AP8533
Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

department [any|contains|exact|not-contains]

department [any|exact <WORD>|contains <WORD>|not-contains <WORD>]

Parameters

department [any|exact <WORD>|contains <WORD>|not-contains <WORD>]


department	Specifies a wireless client filter based on how the ‘department‘ name, returned by the RADIUS server, matches the provided expression. Select one of the following options: any, contains, exact, or not-contains.
any	No specific department associated with this user-defined role. This role can be applied to any wireless client from any department (no strings to match). This is the default setting.
contains <WORD>	The role is applied only when the department name, returned by the RADIUS server, contains the string specified in the role. <WORD> – Specify the string to match (this is case sensitive, and is compared against the department name returned by the RADIUS server). It should contain the provided expression.
exact <WORD>	The role is applied only when the department name, returned by the RADIUS server, exactly matches the string specified in the role. <WORD> – Specify the exact string to match (this is case sensitive, and is compared against the department name returned by the RADIUS server). It should be an exact match.
not-contains <WORD>	The role is applied only when the department name, returned by the RADIUS server, does not contain the string specified in the role. <WORD> – Specify the string not to match (this is case sensitive, and is compared against the department name returned by the RADIUS server). It should not contain the provided expression.

Examples

nx9500-6C8809(config-role-policy-test-user-role-testing)#department exact TnV

nx9500-6C8809(config-role-policy-test-user-role-testing)#show context
 user-role testing precedence 10
  authentication-type eq kerberos
  ap-location contains office
  captive-portal authentication-state pre-login
  city exact SanJose
  company exact ExampleCompany
  country exact America
  department exact TnV
nx9500-6C8809(config-role-policy-test-user-role-testing)#

Related Commands


no	Removes the department name configured with this user-defined role