Users Guide

524 | Rules Editing and Namespaces Dell Networking W-ClearPass Policy Manager 6.4 |User Guide
Variable Description
%{attribute-
name}
attribute-name is the alias name for an attribute that you have configured to
be retrieved from an authentication source. See Adding and Modifying
Authentication Sources on page 154.
%
{RADIUS:IETF:MAC-
Address-Colon}
MAC address of client in aa:bb:cc:dd:ee:ff format
%
{RADIUS:IETF:MAC-
Address-Hyphen}
MAC address of client in aa-bb-cc-dd-ee-ff format
%
{RADIUS:IETF:MAC-
Address-Dot}
MAC address of client in aabb.ccdd.eeff format
%
{RADIUS:IETF:MAC-
Address-NoDelim}
MAC address of client in aabbccddeeff format
Table 350: Policy Manager Variables
You can also use any other dictionary-based attributes (or namespace attributes) as variables in role mapping rules,
enforcement rules, enforcement profiles, and LDAP or SQL filters. For example, you can use %{RADIUS:IETF:Calling-
Station-ID}or %{RADIUS:Airespace:Airespace-Wlan-Id} in rules or filters.
Operators
The rules editing interface in Policy Manager supports a rich set of operators. The type of operators presented
are based on the data type of the attribute for which the operator is being used. Where the data type of the
attribute is not known, the attribute is treated as a string type.
The following table lists the operators presented for common attribute data types.