Users Guide

932 | Rules Editing and Namespaces Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
Attribute Type Operators
Day l BELONGS_TO
l NOT_BELONGS_TO
List (Example: Role) l EQUALS
l NOT_EQUALS
l MATCHES_ALL
l NOT_MATCHES_ALL
l MATCHES_ANY
l NOT_MATCHES_ANY
l MATCHES_EXACT
l NOT_MATCHES_EXACT
Group (Example: Calling-Station-Id, NAS-IP-
Address)
l BELONGS_TO_GROUP
l NOT_BELONGS_TO_GROUP
and all string data types
Table 472: Attribute Operators (Continued)
The following table describes all operator types:
Table 473: Operator Types
Operator Description
BEGINS_WITH For string data type, true if the run-time value of the attribute begins with the
configured value.
Example: RADIUS:IETF:NAS-Identifier BEGINS_WITH "SJ-"
BELONGS_TO For string data type, true if the run-time value of the attribute matches a set
of configured string values.
Example: RADIUS:IETF:Service-Type BELONGS_TO Login-User,Framed-
User,Authenticate-Only
For integer data type, true if the run-time value of the attribute matches a set
of configured integer values.
Example: RADIUS:IETF:NAS-Port BELONGS_TO 1,2,3
For day data type, true if run-time value of the attribute matches a set of
configured days of the week.
Example: Date:Day-of-Week BELONGS_TO MONDAY,TUESDAY,WEDNESDAY
When Policy Manager is aware of the values that can be assigned to
BELONGS_TO operator, it populates the value field with those values in a
multi-select list box; you can select the appropriate values from the presented
list. Otherwise, you must enter a comma separated list of values.
BELONGS_TO_GROUP For group data types, true if the run-time value of the attribute belongs to the
configured group (either a static host list or a network device group,
depending on the attribute).
Example: RADIUS:IETF:Calling-Station-Id BELONGS_TO_GROUP