318 CHAPTER 7: C ONFIGURING AUTHENTICATION , AUTHORIZATION , AND ACCOUNTING PARAMETERSMAC Address GlobsA MAC address glob is a similar method for applying some AAAcommands to either a single 6-byte MAC address or a set of MACaddresses. In a MAC address glob, you can use the asterisk (*) as followsto match from 0 bytes to 5 bytes of the MAC address:* (all MAC addresses)00:*00:01:*00:01:02:*00:01:02:03:*00:01:02:03:04:*For example, the MAC address glob 00:06:8c* represents all MACaddresses starting with 00:06:8c. Specifying only the first three bytes of aMAC address allows you to apply commands to MAC address based onan organizationally unique identity (OUI).VLAN GlobsA VLAN glob is a method for matching one of a set of local rules on a WXswitch, known as the location policy, to one or more users. MSScompares the VLAN glob, which can optionally contain wildcardcharacters, against the VLAN-Name attribute returned by AAA todetermine whether to apply the rule.To match all VLANs, use the double-asterisk (**) wildcard characters withno delimiters. To match any number of characters up to, but notincluding, a delimiter character in the glob, use the single-asterisk (*)wildcard. Valid VLAN glob delimiter characters are the at (@) sign and theperiod (.).For example, the VLAN glob bldg4.* matches bldg4.security and bldg4.hrand all other VLAN names with bldg4. at the beginning.CreatingAdministrator andConsole Access RulesYou can set up administrator and console access rules, and theauthentication and accounting methods for administrator access.To set up administrator or console access rule properties1 Access the WX Switch wizard for the WX switch. (See “Accessing theModify Switch Wizard” on page 185.)2 Select AAA at the top of the wizard, if not already selected.
