lock drain(Bas IP address pool view)
Function
The lock drain command locks an IP address pool so that the address pool cannot be used to assign IP addresses to new users and DHCP Request messages for lease renewal from online users using the address pool are discarded. In the through packet phase, discover and request packets of online users are discarded.
The undo lock drain command unlocks an IP address pool.
By default, no address pool is locked.
This command is supported only on the NetEngine 8000 F1A.
Usage Guidelines
Usage Scenario
An IP address pool with an in-use IP address cannot be deleted. Therefore, lock an IP address pool before you delete the address pool. The address pool can be deleted after all online users using the address pool go offline upon lease expiry. To lock an IP address pool, run the lock drain command.The lock drain function of the address pool cannot be configured in the overlap address pool, but does not support PPPoE users.
After the bas remote address pool is configured and the undo dhcp-proxy command is run on the BAS interface, the BAS device does not process the lease renewal packets from the client and directly sends the packets to the server. In this case, the Drain function of the address pool is invalid.Configuration Impact
After the lock drain command is run, no IP address in the address pool can be assigned to new users and the Request messages sent at 1/2 and 7/8 of the lease from online users are discarded so that the users go offline due to lease renewal failures. To unlock an IP address pool, run the undo lock drain command. The address pool can be used again after being unlocked.
Precautions
- This command is supported only on the admin VS.
- The lock drain command does not take effect for overlapping address pools or PPPoE users.
- For a remote BAS address pool, if the undo dhcp-proxy enable command is run in the BAS interface view, the device directly sends Request messages for lease renewal from clients to the DHCP server instead of processing the messages. In this case, the lock drain command does not take effect for the remote BAS address pool.
- Users whose IP addresses are delivered by the RADIUS server from a locked address pool are not allowed to go online or renew the lease.
Example
<HUAWEI> system-view [~HUAWEI] ip pool pool1 bas local Info: It's successful to create an IP address pool [*HUAWEI-ip-pool-pool1] commit [~HUAWEI-ip-pool-pool1] undo lock drain
<HUAWEI> system-view [~HUAWEI] ip pool pool1 bas local Info: It's successful to create an IP address pool [*HUAWEI-ip-pool-pool1] commit [~HUAWEI-ip-pool-pool1] lock drain