Data ports support 802.1X port-based access control via a Remote Access Dial-In User Service (RADIUS) server in the management network. This allows the network provider to authenticate the customer premises equipment (CPE) on a subscriber port before allowing traffic between the subscriber and the network.

The Port Authentication Entity (PAE) Menu Bar displays the PAE Status, Statistics, and Diagonistics information for a data subscriber port.

Access to PAE is located on the ONT UNI Port Menu Bar.

There are three PAE Metric Selections available for review.

Status

• AID - Indicates the Address Identifier (AID) of the selected port (i.e. ETH1-1-4-1-1)
• Available MAC - Media Access Control (MAC) address available on this port
• Authenticator PAE State - Displays the state of the authenticator PAE state machine. Possible values are:
  • Initialize - Generally a transient state. Can occur when the RADIUS server denies authentication, the port’s MAC is inoperable, or the state machine is initializing. Other transient states include Disconnected, Connecting, Authenticating, Aborting, and Held. If any of these states are not transient, contact your next level of support.
  • Authenticated and Force Authentication - These states allow traffic to flow.
  • Force Un authentication - blocks all traffic on the port.
• Backend Authentication State - Displays the back-end authentication state received from the RADIUS server. Avaiable values are:
  • Request - The RADIUS server received an authentication request.
  • Response - The RADIUS server has sent an authentication response.
  • Success - RADIUS authentication succeeded.
  • Fail - RADIUS authentication failed.
  • Timeout - Communication with the RADIUS server timed out.
  • Idle - Following its initialization, the authenticator PAE is idle. It hasn’t sent any authorization requests yet.
  • Initializing - The authenticator PAE is initializing.
• Authentication Controlled Port Status - Displays the authentication state of the subscriber port. For related information,
  • Authorized or Un-Authorized

Statistics

• Received Frame Counter
  • EAPOL - Number of valid Extensible Authentication Protocol over LANs (EAPOL) frames (of any type) that this authenticator has received. 
  • EAPOL Start - Number of EAPOL-Start frames that this authenticator has received.  
  • EAPOL Logoff - Number of EAPOL-Logoff frames that this authenticator has received. 
  • EAPOL Resp/Id - Number of EAP-Response/Identity frames that this authenticator has received. 
  • EAPOL Response - Number of EAP-Response frames (other than EAP-Response/Identity frames) that this authenticator has received.
  • Invalid EAPOL - Number of invalid EAPOL frames that this authenticator has received (i.e., the frame type is not recognized).  
  • EAP length error - Number of EAPOL frames received with an invalid packet body length field.  
• Transmitted Frame Counter
  • EAPOL - Number of valid EAPOL frames (of any type) that this authenticator has transmitted.  
  • EAPOL Req/Id - Number of EAP-Request/Identity frames that this authenticator has transmitted.  
  • EAPOL Request - Number of EAP-Request frames (other than EAP-Request/Identity frames) that this authenticator has transmitted. 
• Last EAPOL Frame Information
  • Version - The protocol version number carried in the most recently received EAPOL frame.  
  • Source - The source MAC address carried in the most recently received EAPOL frame. 

Diagnostics

• Authentication Counters
  • Authentication Enters Connecting - Total number of times that the state machine has transitioned to the CONNECTING state from any other state. 
  • Authentication EAP Logoffs While Connecting - Total number of times that the state machine has transitioned from CONNECTING to DISCONNECTED as a result of receiving an EAPOL-Logoff message. 
  • Authentication Enters Authenticating - Total number of times that the state machine has transitioned from CONNECTING to AUTHENTICATING as a result of receiving an EAP-Response/Identity message from the supplicant.  
  • Authentication Success While Authenticating - Total number of times that the state machine has transitioned from AUTHENTICATING to AUTHENTICATED as a result of the Backend Authentication state machine indicating a successful authentication of the supplicant. 
  • Authentication Timeout While Authenticating - Total number of times that the state machine has transitioned from AUTHENTICATING to ABORTING as a result of the Backend Authentication state machine indicating authentication timeout. 
  • Authentication Failure While Authenticating - Total number of times that the state machine has transitioned from AUTHENTICATING to HELD as a result of the Backend Authentication state machine indicating authentication failure. 
  • Re-authentication While Authenticating - Total number of times that the state machine has transitioned from AUTHENTICATING to ABORTING as a result of a re-authentication request. 
  • Authentication EAP-Starts While Authenticating - Total number of times that the state machine has transitioned from AUTHENTICATING to ABORTING as a result of receiving an EAPOL-Start message from the supplicant.  
  • Authentication EAP Logoff While Authenticating - Total number of times that the state machine has transitioned from AUTHENTICATING to ABORTING as a result of receiving an EAPOL-Logoff message from the supplicant.  
  • Re-authentication While Authenticated -Total number of times that the state machine has transitioned from AUTHENTICATED to CONNECTING as a result of a re-authentication request.  
  • Authentication EAP-Starts While Authenticated - Total number of times that the state machine has transitioned from AUTHENTICATED to CONNECTING as a result of receiving an EAPOL-Start message from the supplicant.  
  • Authentication EAP Logoff While Authenticated -Total number of times that the state machine has transitioned from AUTHENTICATED to DISCONNECTED as a result of receiving an EAPOL-Logoff message from the supplicant. 
  • Backend Responses - Total number of times that the state machine has sent an initial Access-Request packet to the authentication server. 
  • Backend Access Challenges - Total number of times that the state machine has received an initial Access-Challenge packet from the authentication server. 
  • Other Backend Requests to Supplicant - Total number of times that the state machine has sent an EAP-Request packet (other than an EAP-Identity, EAP-Notification, EAP-Success, or EAP-Failure) to the supplicant.  
  • Backend Non NAK Responses from Supplicant - Total number of times that the state machine has received a response (to an initial EAP-Request) from the supplicant, and the response was something other than EAP-NAK.  
  • Backend Authentication Successes - Total number of times that the state machine has received authentication successes from the supplicant.  
  • Backend Authentication Fails - Total number of times that the state machine has received authentication failures from the supplicant. 

---

Previous   |   Next