Users Guide

321 Dell Networking W-ClearPass Policy Manager 6.2 | User Guide
Table 211: Attribute Operators
Attribute
Type
Operators
String EQUALS, NOT_EQUALS, CONTAINS, NOT_CONTAINS, BEGINS_WITH, NOT_
BEGINS_WITH, ENDS_WITH, NOT_ENDS_WITH, BELONGS_TO, NOT_BELONGS_TO,
EQUALS_IGNORE_CASE, NOT_EQUALS_IGNORE_CASE, MATCHES_REGEX, NOT_
MATCHES_REGEX, EXISTS, NOT_EXISTS
Integer EQUALS, NOT_EQUALS, GREATER_THAN, GREATER_THAN_OR_EQUALS, LESS_
THAN, LESS_THAN_OR_EQUALS, EXISTS, NOT_EXISTS, BELONGS_TO, NOT_
BELONGS_TO
Time or Date EQUALS, NOT_EQUALS, GREATER_THAN, GREATER_THAN_OR_EQUALS, LESS_
THAN, LESS_THAN_OR_EQUALS, IN_RANGE
Day BELONGS_TO, NOT_BELONGS_TO
List
(Example:
Role)
EQUALS, NOT_EQUALS, MATCHES_ANY, NOT_MATCHES_ANY, MATCHES_ALL,
NOT_MATCHES_ALL, MATCHES_EXACT, NOT_MATCHES_EXACT
Group
(Example:
Calling-
Station-Id,
NAS-IP-
Address)
BELONGS_TO_GROUP, NOT_BELONGS_TO_GROUP, and all string data types
The following table describes all the operator types:
Table 212: Operator Types
Operator Description
EQUALS True if the run-time value of the attribute matches the configured value. For string data
type, this is a case-sensitive comparison.
E.g., RADIUS:IETF:NAS-Identifier EQUALS "SJ-VPN-DEVICE"
CONTAINS For string data type, true if the run-time value of the attribute is a substring of the
configured value.
E.g., RADIUS:IETF:NAS-Identifier CONTAINS "VPN"
BEGINS_
WITH
For string data type, true if the run-time value of the attribute begins with the configured
value.
E.g., RADIUS:IETF:NAS-Identifier BEGINS_WITH "SJ-"
ENDS_
WITH
For string data type, true if the run-time value of the attribute ends with the configured
value.
E.g., RADIUS:IETF:NAS-Identifier ENDS_WITH "DEVICE"