Zero Touch Automation with Auto Config and RADIUS

Introduction

This application note will demonstrate how to support Zero Touch automation for bringing ONTs and ONT UNIs (User to network ports) online.  This tutorial will utilize three main features: 

• ONT Auto Config – ONT Auto Config will automatically accept ONTs and, using pre-configured ONT templates, will apply them to the ONT giving the ONT the desired settings.  ONT Templates can be configured per ONT type.
• ONT UNI Templates – UNI ports can be pre-configured with a Template to set all the profiles on the port at the time of ONT creation.
• RADIUS Policy Configuration – RADIUS can be used to authenticate the ports via 801.1x and/or MAB (MAC Authentication Bypass) and in addition to granting access to the port, RADIUS can send down service profiles and / or ACL profiles to assign to the port.  NAC appliances such as Cisco ISE, Aruba Clearpass, Forescout Counteract or Windows Policy server can be used to set the policies at the time of Authentication.  It can be based on the user logged in, the device certificate, or profiling of the device.

Applies To

• All OLT and EMS releases support 802.1x and RADIUS.  Newer releases support more features.

Video Tutorial