Users Guide

Operator Description
BELONGS_TO
For string data type, true if the run-time value of the attribute
matches a set of configured string values.
E.g., RADIUS:IETF:Service-Type BELONGS_TO Login-
User,Framed-User,Authenticate-Only
For integer data type, true if the run-time value of the attribute
matches a set of configured integer values.
E.g., RADIUS:IETF:NAS-Port BELONGS_TO 1,2,3
For day data type, true if run-time value of the attribute matches a
set of configured days of the week.
E.g., Date:Day-of-Week BELONGS_TO
MONDAY,TUESDAY,WEDNESDAY
When Policy Manager is aware of the values that can be assigned
to BELONGS_TO operator, it populates the value field with those
values in a multi-select list box; you can select the appropriate
values from the presented list. Otherwise, you must enter a comma
separated list of values.
BELONGS_TO_GROUP
For group data types, true if the run-time value of the attribute
belongs to the configured group (either a static host list or a network
device group, depending on the attribute).
E.g., RADIUS:IETF:Calling-Station-Id BELONGS_TO_GROUP
Printers.
CONTAINS
For string data type, true if the run-time value of the attribute is a
substring of the configured value.
E.g., RADIUS:IETF:NAS-Identifier CONTAINS "VPN"
ENDS_WITH For string data type, true if the run-time value of the attribute ends
with the configured value.
E.g., RADIUS:IETF:NAS-Identifier ENDS_WITH "DEVICE"
EQUALS True if the run-time value of the attribute matches the configured
value. For string data type, this is a case-sensitive comparison.
E.g., RADIUS:IETF:NAS-Identifier EQUALS "SJ-VPN-
DEVICE"
EQUALS_IGNORE_CASE For string data type, true if the run-time value of the attribute
matches the configured value, regardless of whether the string is
upper case or lower case.
E.g., RADIUS:IETF:NAS-Identifier EQUALS_IGNORE_CASE
"sj-vpn-device"
EXISTS For string data type, true if the run-time value of the attribute exists.
This is a unary operator.
E.g., RADIUS:IETF:NAS-Identifier EXISTS
GREATER_THAN For integer, time and date data types, true if the run-time value of
the attribute is greater than the configured value.
E.g., RADIUS:IETF:NAS-Port GREATER_THAN 10
Dell Networking W-ClearPass Policy Manager 6.3 | User Guide Rules Editing and Namespaces | 463