Eap Relay - HP 5120 SI Series Security Configuration Manual

Packet exchange method
EAP termination

EAP relay

Figure 29 shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5
is used.
Figure 24 802.1X authentication procedure in EAP relay mode
1. When a user launches the 802.1X client software and enters a registered username and password,
the 802.1X client software sends an EAPOL-Start packet to the network access device.
2. The network access device responds with an Identity EAP-Request packet to ask for the client
username.
Benefits
Works with any RADIUS server that
supports PAP or CHAP authentication.
62
Limitations
•
Supports only MD5-Challenge
EAP authentication and the
"username + password" EAP
authentication initiated by an HP
iNode 802.1X client.
•
The processing is complex on the
network access device.