access-trigger(AAA domain view)

Function

The access-trigger command changes the period during which users can get online in loose mode after the system restarts.

The undo access-trigger command restores the default period during which users can get online in loose mode after the system restarts.

By default, users can get online in loose mode within 0 minute after the system restarts.

This command is supported only on the NetEngine 8000 F1A.

Format

access-trigger loose { loose-time | all-time }

undo access-trigger loose [ loose-time | all-time ]

Parameters

Parameter	Description	Value
loose-time	Period during which users can get online in loose mode after the system restarts.	The value is an integer ranging from 0 to 1440, in minutes. The default value is 0. 0 indicates that users cannot get online in loose mode after the system restarts.
all-time	Always loose mode for getting online after the system restarts.	-
loose	Loose mode for getting online after the system restarts.	-

Parameter

Description

Value

loose-time

Period during which users can get online in loose mode after the system restarts.

The value is an integer ranging from 0 to 1440, in minutes. The default value is 0. 0 indicates that users cannot get online in loose mode after the system restarts.

all-time

Always loose mode for getting online after the system restarts.

loose

Loose mode for getting online after the system restarts.

Views

AAA domain view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
aaa-access	write

Usage Guidelines

Usage Scenario

If getting online in loose mode is not enabled, after the device restarts due to an exception, users can get online again only after lease renewal fails (after the lease expires) or users' terminals restart.

Prerequisites

Getting online triggered by IP/ARP packets has been enabled on a BAS interface.

Configuration Impact

After this command is executed, the filtering function of the user information backup table does not take effect, and IP/ARP packets sent by users will trigger getting online requests. As a result, the device needs to process a large number of getting online request packets, which uses a lot of resources and affects common users' access.

After the device restarts, a large number of getting online request packets will increase the pressure on the DHCP server and RADIUS server.

Precautions

You need to check whether user access in loose mode is enabled for users in the authentication domain (pre-authentication domain for web and fast authentication users, and default authentication domain if no authentication domain is configured) bound to the BAS interface through which users are triggered to go online by sending IP/ARP packets.

Example

# Configure users in domain1 to go online always in loose mode.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain domain1
[~HUAWEI-aaa-domain-domain1] access-trigger loose all-time