PAE

Port Authentication Entity (PAE) profiles assign attributes to OLTs, GPON cards, and GPON ports. The user is able to, to edit, duplicate or delete PAE profiles and monitor the status of the PAE profile.

Default Profile

Panorama PON initially creates one default PAE profile. This profile is assigned to all GPON ports on an OLT when they are initially provisioned.

The default profile can be edited but not deleted. New profiles can be defined and used as needed; the default profile does not have to be used.

However, lines that are associated with a non-default profile are automatically activated. Because a profile can be associated with multiple lines at once, this is the most efficient way to activate lines.

PAE Profile Attributes

The following PAE profile attributes are available for user editing.

Status

• Admin State - Administrative state. Enabled or Disabled. Default is Enabled. 
• Authentication Controlled Port Control - Allows administrative control over the ports authorization status. Options are Force Authorized, or ForceU nauthorized, or Auto. Default is Auto.
• Admin Controlled Directions - Determines whenever a controlled port that is unauthorized exerts control over communication in both directions or just in the incoming direction. Options are Both or Rx. Default is Both. 
• Maximum Authorized Supplicants - Defines the maximum number of authorized supplicants. Range is 1 through 8. Default is 1. 
• PAE Excessive Supplicant Violation - When selected, disables PAE for an excessive number of supplicants. Default is not selected. 
• PAE Auto-Start - When selected, causes force re authentication upon line recovery. Default is selected. 
• PAE Auto-Unauthenticate - When selected and authentication is enabled, line shall be unauthenticated upon line loss. Options are true or false. Selected is the default (true). 
• Enable Re-authentication - Defines whether regular reauthentication takes place on this port (true enables reauthentication; false disables reauthentication). Default is selected (true). 
• Re-authentication Period - Defines a non-zero number of seconds between periodic reauthentication of the Supplicant. Range is 30 to 8600 sec. Default is 3600 sec. 
• Quiet Period - A timer used by the Authenticator PAE state machine to define periods of time during which it does not attempt to acquire a Supplicant. Range is 0-65535 sec. Default is 60 sec. 
• Transmit Period - A timer used by the Authentication PAE state machine to determine when an EAPOL PDU is to be transmitted. Range is 1-65535 sec. Default is 30 sec.) 
• Supplicant Timeout - A timer used by the Backend Authentication PAE state machine in order to determine timeout conditions in the exchanges between the Authenticator and the Supplicant. Range is 1 to 65535 sec. Default value is 30 sec. 
• Server Timeout - A timer used by the Backend Authentication PAE state machine in order to determine timeout conditions in the exchanges between the Authenticator and the Authentication Server. Range is 1 to 65535 sec. Default value is 30 sec. 
• Maximum Requests - The maximum number of times that the state machine retransmits an EAP Request packet to the Supplicant before it times out the authentication session. Options are 1 to 10. Default value is 2.
• Assigned RADIUS Profiles - (not Implemented) Selecting an Available RADIUS Profile, then clicking Add, moves the available profile to the Assigned Profiles list. Selecting as Assigned RADIUS Profile, then clicking Remove, removes the profile from the assigned list.
• Default RADIUS Profile - Select the drop-down to assign a Default RADIUS Profile to this PAE Profile. 

Previous   |   Next