Users Guide

460 | Rules Editing and Namespaces Dell Networking W-ClearPass Policy Manager 6.3 |User Guide
Operator Description
GREATER_THAN_OR_EQUALS For integer, time and date data types, true if the run-time value of
the attribute is greater than or equal to the configured value.
E.g., RADIUS:IETF:NAS-Port GREATER_THAN_OR_EQUALS 10
IN_RANGE For time and date data types, true if the run-time value of the
attribute is less than or equal to the first configured value and less
than equal to the second configured value.
E.g., Date:Date-of-Year IN_RANGE 2007-06-06,2007-06-12
LESS_THAN For integer, time and date data types, true if the run-time value of
the attribute is less than the configured value.
E.g., RADIUS:IETF:NAS-Port LESS_THAN 10
LESS_THAN_OR_EQUALS For integer, time and date data types, true if the run-time value of
the attribute is less than or equal to the configured value.
E.g., RADIUS:IETF:NAS-Port LESS_THAN_OR_EQUALS 10
MATCHES_ALL For list data types, true if all of the run-time values in the list are
found in the configured values.
E.g., Tips:Role MATCHES_ALL HR,ENG,FINANCE. In this
example, if the run-time values of Tips:Role are
HR,ENG,FINANCE,MGR,ACCT the condition evaluates to true.
MATCHES_ANY For list data types, true if any of the run-time values in the list match
one of the configured values.
E.g., Tips:Role MATCHES_ANY HR,ENG,FINANCE
MATCHES_EXACT For list data types, true if all of the run-time values of the attribute
match all of the configured values.
E.g., Tips:Role MATCHES_ALL HR,ENG,FINANCE. In this
example, if the run-time values of Tips:Role are
HR,ENG,FINANCE,MGR,ACCT the condition evaluates to false,
because there are some values in the configured values that are
not present in the run-time values.
MATCHES_REGEX For string data type, true if the run-time value of the attribute
matches the regular expression in the configured value.
E.g., RADIUS:IETF:NAS-Identifier MATCHES_REGEX sj-
device[1-9]-dev*