Dell PowerConnect W Clearpass 100 Software 3.9 Deployment Guide - Page 499

Table 64 Rewrite Module Configuration Settings (Continued) Value Description module.attr_rewrite.name.searchfor = not set A regular expression to use when determining if the attribute should be matched. See "Regular Expressions" in this chapter for information about the supported syntax for regular expressions. module.attr_rewrite.name.replacewith = not set The replacement value which will be used for the attribute value, if the attribute matches the "searchfor" regular expression. Backreferences to the matching components of the "searchfor" regular expression are supported: %{0} will contain the string for the entire regular expression match, and %{1} through %{8} contain the contents of the 1st through the 8th matching parenthesized groups. If the "new_attribute" item is set to yes, then this value is used as the contents of a new attribute. module.attr_rewrite.name.ignore_case = no If set to yes, matches the "searchfor" regular expression in a case-insensitive way. The default behavior is to match case-sensitively. module.attr_rewrite.name.new_attribute = no If set to yes, a new attribute will be created, containing the value of the "replacewith" item. The new attribute will be added to the "searchin" item (packet, reply, proxy, proxy_reply or config). In this case, the "searchfor", "ignore_case" and "max_matches" items are ignored. module.attr_rewrite.name.max_matches = 10 The maximum number of regular expression matches to be processed for the attribute. module.attr_rewrite.name.append = no If set to yes, then the "replacewith" string will be appended to the original attribute value. The default of "no" causes the entire attribute value to be replaced. List of Standard Radius Attributes Authentication Attributes These are the attributes the NAS uses in authentication packets and expects to get back in authentication replies. These can be used in matching rules.  User-Name: This attribute indicates the name of the user to be authenticated or accounted. It is used in Access-Request and Accounting packets.  Password: This attribute indicates the password of the user to be authenticated, or the user's input following an Access-Challenge. It is only used in Access-Request packets.  CHAP-Password: This attribute indicates the response value provided by a PPP Challenge-Handshake Authentication Protocol (CHAP) user in response to the challenge. It is only used in Access-Request packets.  NAS-IP-Address: This attribute indicates the IP address of the NAS which is requesting authentication of the user. It is only used in Access-Request packets.  NAS-Port-Id: This attribute indicates the physical port number of the NAS which is authenticating the user. It is only used in Access-Request packets. Note that this is using "port" in its sense of a physical connection on the NAS, not in the sense of a TCP or UDP port number. ClearPass Guest 3.9 | Deployment Guide Reference | 499