A comparison of EAP relay and EAP termination
Packet exchange method
EAP relay
EAP termination
EAP relay
Figure 31
shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5
is used.
Benefits
•
Supports various EAP
authentication methods.
•
The configuration and processing is
simple on the network access
device
Works with any RADIUS server that
supports PAP or CHAP authentication.
70
Limitations
The RADIUS server must support the
EAP-Message and
Message-Authenticator attributes,
and the EAP authentication method
used by the client.
•
Supports only MD5-Challenge
EAP authentication and the
"username + password" EAP
authentication initiated by an HP
iNode 802.1X client.
•
The processing is complex on the
network access device.