Users Guide

The following table describes all the operator types:
Table 225: Operator Types
Operator Description
EQUALS True if the run-time value of the attribute matches the configured value. For string data type, this is a
case-sensitive comparison.
E.g., RADIUS:IETF:NAS-Identifier EQUALS "SJ-VPN-DEVICE"
CONTAINS For string data type, true if the run-time value of the attribute is a substring of the configured value.
E.g., RADIUS:IETF:NAS-Identifier CONTAINS "VPN"
BEGINS_
WITH
For string data type, true if the run-time value of the attribute begins with the configured value.
E.g., RADIUS:IETF:NAS-Identifier BEGINS_WITH "SJ-"
ENDS_
WITH
For string data type, true if the run-time value of the attribute ends with the configured value.
E.g., RADIUS:IETF:NAS-Identifier ENDS_WITH "DEVICE"
BELONGS_
TO
For string data type, true if the run-time value of the attribute matches a set of configured string
values.
E.g., RADIUS:IETF:Service-Type BELONGS_TO Login-User,Framed-User,
Authenticate-Only
For integer data type, true if the run-time value of the attribute matches a set of configured integer
values.
E.g., RADIUS:IETF:NAS-Port BELONGS_TO 1,2,3
For day data type, true if run-time value of the attribute matches a set of configured days of the week.
E.g., Date:Day-of-Week BELONGS_TO MONDAY,TUESDAY,WEDNESDAY
When Policy Manager is aware of the values that can be assigned to BELONGS_TO operator, it
populates the value field with those values in a multi-select list box; you can select the appropriate
values from the presented list. Otherwise, you must enter a comma separated list of values.
EQUALS_
IGNORE_
CASE
For string data type, true if the run-time value of the attribute matches the configured value,
regardless of whether the string is upper case or lower case.
E.g., RADIUS:IETF:NAS-Identifier EQUALS_IGNORE_CASE "sj-vpn-device"
MATCHES_
REGEX
For string data type, true if the run-time value of the attribute matches the regular expression in the
configured value.
E.g., RADIUS:IETF:NAS-Identifier MATCHES_REGEX sj-device[1-9]-dev*
EXISTS For string data type, true if the run-time value of the attribute exists. This is a unary operator.
E.g., RADIUS:IETF:NAS-Identifier EXISTS
GREATER_
THAN
For integer, time and date data types, true if the run-time value of the attribute is greater than the
configured value.
E.g., RADIUS:IETF:NAS-Port GREATER_THAN 10
GREATER_
THAN_OR_
EQUALS
For integer, time and date data types, true if the run-time value of the attribute is greater than or equal
to the configured value.
E.g., RADIUS:IETF:NAS-Port GREATER_THAN_OR_EQUALS 10
LESS_
THAN
For integer, time and date data types, true if the run-time value of the attribute is less than the
configured value.
Dell Networking W-ClearPass Policy Manager 6.0 | User Guide 349