Eap Over Radius - HP FlexNetwork NJ5000 User Manual

•
Data—Content of the EAP packet. This field appears only in a Request or Response EAP
packet. The Data field comprises the request type (or the response type) and the type data.
Type 1 (Identity) and type 4 (MD5-challenge) are two examples for the type field.
EAPOL packet format
Figure 266
Figure 266 EAPOL packet format
•
PAE Ethernet type—Protocol type. It takes the value 0x888E for EAPOL.
•
Protocol version—The EAPOL protocol version used by the EAPOL packet sender.
•
Type—Type of the EAPOL packet.
Hewlett Packard Enterprise implementation of 802.1X.
Table 96 Types of EAPOL packets
Value
0x00
0x01
0x02
•
Length—Data length in bytes, or length of the Packet body. If packet type is EAPOL-Start or
EAPOL-Logoff, this field is set to 0, and no Packet body field follows.
•
Packet body—Content of the packet. When the EAPOL packet type is EAP-Packet, the Packet
body field contains an EAP packet.

EAP over RADIUS

RADIUS adds two attributes, EAP-Message and Message-Authenticator, for supporting EAP
authentication. For the RADIUS packet format, see
EAP-Message
RADIUS encapsulates EAP packets in the EAP-Message attribute, as shown in
Type field takes 79, and the Value field can be up to 253 bytes. If an EAP packet is longer than 253
bytes, RADIUS encapsulates it in multiple EAP-Message attributes.
shows the EAPOL packet format.
Type
EAP-Packet
EAPOL-Start
EAPOL-Logoff
Table 96 lists the types of EAPOL packets supported by
Description
The client and the network access device uses EAP-Packets to
transport authentication information.
The client sends an EAPOL-Start message to initiate 802.1X
authentication to the network access device.
The client sends an EAPOL-Logoff message to tell the network
access device that it is logging off.
"Configuring
254
RADIUS."
Figure 267. The