PANA allows dynamic service provider selection, supports various authentication methods, is suitable for roaming users, and is independent from the link layer mechanisms.
In addition, in some scenarios, the PAA entity has to do other message exchange with the AAA server in order to offer the PaC credentials to it.
If the credential check was successful, that packet contains access parameters, such as allowed bandwidth or IP configuration.
When the session expires, a re-authentication process is required for the PaC to regain network access.
Basically, an EP is a network node which drops packets according to some parameters provided as results of the authentication processes.