A Comparison Of Eap Relay And Eap Termination; Eap Relay - HP 6600 Security Configuration Manual

A comparison of EAP relay and EAP termination

Packet exchange method

EAP relay

EAP termination
EAP relay
Figure 35 shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5
is used.
Benefits
•
Supports various EAP
authentication methods.
•
The configuration and processing is
simple on the network access
device.
Works with any RADIUS server that
supports PAP or CHAP authentication.
79
Limitations
The RADIUS server must support the
EAP-Message and
Message-Authenticator attributes,
and the EAP authentication method
used by the client.
•
Supports only MD5-Challenge
EAP authentication and the
"username + password" EAP
authentication initiated by an HP
iNode 802.1X client.
•
The processing is complex on the
network access device.