Comparing Eap Relay And Eap Termination; Eap Relay - H3C S5830V2 Security Configuration Manual

Comparing EAP relay and EAP termination

Packet exchange method

EAP relay

EAP termination
EAP relay
Figure 29 shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5
is used.
Benefits
•
Supports various EAP
authentication methods.
•
The configuration and
processing is simple on the
network access device.
Works with any RADIUS server that
supports PAP or CHAP
authentication.
64
Limitations
The RADIUS server must support the
EAP-Message and
Message-Authenticator attributes, and
the EAP authentication method used by
the client.
•
Supports only MD5-Challenge EAP
authentication and the "username +
password" EAP authentication
initiated by an H3C iNode 802.1X
client.
•
The processing is complex on the
network access device.