Alcatel-Lucent IAP93 Podręcznik Użytkownika Pobierz pdf (Strona 184)

(Instant Access Point)(SSID Profile "Profile1")# set-vlan mac-address-and-dhcp-options matche

s-regular-expression ..link 100

(Instant Access Point)(SSID Profile "Profile1")# end

(Instant Access Point)# commit apply

Using Advanced Expressions in Role and VLAN Derivation Rules

For complex policies of role and VLAN derivation using device DHCP fingerprints, you can use a regular expression

to match against the combined string of the MAC address and the DHCP options. The combined string is formed by

concatenating the hexadecimal presentation of the MAC address and all of the DHCP options sent by a particular

device. The regular expression is a powerful pattern description language that can be used to perform advanced

pattern matching of the above string.

If the combined device fingerprint string matches the specified regular expression, the role or vlan can be set to the

WLAN client.

The following table lists some of the most commonly used regular expressions, which can be used in user role and

user VLAN derivation rules:

Operator Description

. Matches any character. For example, l..k matches lack, lark, link, lock, look, Lync and so on.

\ Matches the character that follows the backslash. For example, \192.\.0\.. matches IP addresses ranges

that starting with 192.0, such as 192.0.1.1. The expression looks only for the single characters that

match.

[] Matches any one character listed between the brackets. For example, [bc]lock matches block and clock.

\b Matches the words that begin and end with the given expression. For example, \bdown matches

downlink, linkdown, shutdown.

\B Matches the middle of a word. For example, \Bvice matches services, devices, serviceID, deviceID, and

so on.

^ Matches the characters at starting position in a string. For example, ^bcd matches bcde or bcdf, but not

abcd.

[^] Matches any characters that are not listed between the brackets. For example, [^u]link matches

downlink, link, but not uplink.

? Matches any one occurrence of the pattern. For example, ?est matches best, nest, rest, test and so on.

$ Matches the end of an input string. For example, eth$matches Eth, but not Ethernet.

* Matches the declared element multiple times if it exists. For example, eth* matches all occurrences of

eth, such as Eth, Ethernet, Eth0 and so on.

+ Matches the declared element one or more times. For example, aa+ matches occurrences of aa and

aaa.

() Matches nested characters. For example, (192)* matches any number of the character string 192.

| Matches the character patterns on either side of the vertical bar. You can use this expression to construct

a series of options.

\< Matches the beginning of the word. For example, \<wire matches wired, wireless and so on.

AOS-W Instant 6.3.1.1-4.0 | User Guide Roles and Policies | 184

1 2 ... 179 180 181 182 183 184 185 186 187 188 189 ... 334 335

Brak uwag

Alcatel-Lucent IAP93 Podręcznik Użytkownika Strona 184