user-defined

Enables you to define a filter based on an attribute defined in the Active Directory or the OpenLDAP server

Supported on the following devices:

Syntax

user-defined <ATTR-STRING> [any|contains|exact|not-contains]
user-defined <ATTR-STRING> [any|contains <WORD>|exact <WORD>|not-contains <WORD>]

Parameters

user-defined <ATTR-STRING> [any|contains <WORD>|exact <WORD>|not-contains <WORD>]

user-defined <ATTR-STRING>

 Specify a filter based on an attribute defined in the AD or OpenLDAP server.

  • <ATTR-NAME> – Specify the attribute string.

After specifying the attribute name, specify the match type.

any

 No specific string to match. This role can be applied to any wireless client. This is the default setting.

contains <WORD>

 The role is applied only when the user-defined attribute value, returned by the RADIUS server, contains the string specified in the role.
  • <WORD> – Specify the string to match (this is case sensitive, and is compared against the value returned by the RADIUS server). It should contain the provided expression.

exact <WORD>

 The role is applied only when the user-defined attribute value, returned by the RADIUS server, exactly matches the string specified in the role.
  • <WORD> – Specify the exact string to match (this is case sensitive, and is compared against the value returned by the RADIUS server). It should be an exact match.

not-contains <WORD>

 The role is applied only when the user-defined attribute value, returned by the RADIUS server, does not contain the string specified in the role.
  • <WORD> – Specify the string not to match (this is case sensitive, and is compared against the value returned by the RADIUS server). It should not contain the provided expression.

Examples

nx9500-6C8809(config-role-policy-test-user-role-user1)#user-defined office-location exact EcoSpace
nx9500-6C8809(config-role-policy-test-user-role-user1)#show context
 user-role user1 precedence 1
  employee-type exact consultant
  user-defined office-location exact EcoSpace
nx9500-6C8809(config-role-policy-test-user-role-user1)#

Related Commands

no

Removes the user-defined filter configured with this user role
9037762-04 Rev AB