204 CHAPTER 7: AAA COMMANDS
■ permit — Allows access to the network or to a specified VLAN,
and/or assigns a particular security ACL to users with characteristics
that match the location policy rule.
■ vlan vlan-name — Name of an existing VLAN to assign to users with
characteristics that match the location policy rule.
■ inacl inacl-name — Name of an existing security ACL to apply to
packets sent to the WX switch with characteristics that match the
location policy rule.
Optionally, you can add the suffix .in to the name.
■ outacl outacl-name — Name of an existing security ACL to apply to
packets sent from the WX switch with characteristics that match the
location policy rule.
Optionally, you can add the suffix .out to the name.
■ vlan operator vlan-glob — VLAN-Name attribute assigned by AAA
and condition by which to determine if the location policy rule applies.
Replace operator with one of the following operands:
■ eq — Applies the location policy rule to all users assigned VLAN
names matching vlan-glob.
■ neq — Applies the location policy rule to all users assigned VLAN
names not matching vlan-glob.
For vlan-glob, specify a VLAN name, use the double-asterisk wildcard
character (**) to specify all VLAN names, or use the single-asterisk
wildcard character (*) to specify a set of VLAN names up to or
following the first delimiter character, either an at sign (@) or a period
(.). (For details, see “VLAN Globs” on page 26.)
■ user operator user-glob — Username and condition by which to
determine if the location policy rule applies. Replace operator with
one of the following operands:
■ eq — Applies the location policy rule to all usernames matching
user-glob.
■ neq — Applies the location policy rule to all usernames not
matching user-glob.
For user-glob, specify a username, use the double-asterisk wildcard
character (**) to specify all usernames, or use the single-asterisk
wildcard character (*) to specify a set of usernames up to or following
the first delimiter character, either an at sign (@) or a period (.). (For
details, see “User Globs” on page 24.)
