access-trigger loose infinite-lease(AAA domain view)
Function
The access-trigger loose infinite-lease command enables users with an infinite lease in the authentication domain bound to the BAS interface to go online by sending IP/ARP packets when no abnormal logout backup entry is generated.
The undo access-trigger loose command disables users with an infinite lease in the authentication domain bound to the BAS interface from going online by sending IP/ARP packets when no abnormal logout backup entry is generated.
By default, users with an infinite lease in the authentication domain bound to the BAS interface cannot go online by sending IP/ARP packets when no abnormal logout backup entry is generated.
This command is supported only on the NetEngine 8000 F1A.
Usage Guidelines
Usage Scenario
To enable users with an infinite lease in the authentication domain bound to the BAS interface to go online by sending IP/ARP packets when no abnormal logout backup entry is generated, run the access-trigger loose infinite-lease command.
Prerequisites
User access triggered by IP/ARP packets has been enabled on the BAS interface.
Precautions
In VS mode, this command is supported only by the admin VS.
You need to check whether user access in loose mode is enabled for users with an infinite lease in the authentication domain (pre-authentication domain for web and fast authentication users, and default authentication domain if no authentication domain is configured) bound the BAS interface through which users are triggered to go online by sending IP/ARP packets.Example
<HUAWEI> system-view [~HUAWEI] aaa [~HUAWEI-aaa] domain domain1 [*HUAWEI-aaa-domain-domain1] commit [~HUAWEI-aaa-domain-domain1] access-trigger loose infinite-lease