Filter - Cisco Nexus 7000 Series Command Reference Manual

F Commands

filter

To configure one or more certificate mapping filters within the filter map, use the filter command.
filter [subject-name subject-name| altname-email e-mail-ID| altname-upn user-principal-name]
Syntax Description
subject-name
subject-name
altname-email
e-mail-ID
altname-upn
user-principal-name
Command Default
None
Command Modes
Certificate mapping filter configuration
Command History
Release
5.0(2)
Usage Guidelines
To use this command, you must create a new filter map.
The validation passes if the certificate passes all of the filters configured in the map.
This command does not require a license.
(Optional) Specifies the subject name of the
certificate.
Required subject name in LDAP distinguished name
(DN) string format. For example:
cn=%username%,ou=PKI,o=Acme,c=US
(Optional) Specifies the e-mail ID as an alternate
name.
E-mail address that must be present in the certificate
as a subject alternative name. For example:
%username%@*
(Optional) Specifies the user principal name as an
alternate name.
Principal name that must be present in the certificate
as a subject alternative name. For example:
%username-without-domain%@%hostname%
Modification
This command was introduced.
Cisco Nexus 7000 Series Security Command Reference
filter
337