Eap Relay - HP 12500 Series Configuration Manual

Packet exchange method
EAP termination

EAP relay

Figure 29 shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5
is used.
Figure 29 802.1X authentication procedure in EAP relay mode
When a user launches the 802.1X client software and enters a registered username and password,
1.
the 802.1X client software sends an EAPOL-Start packet to the network access device.
The network access device responds with an Identity EAP-Request packet to ask for the client
2.
username.
In response to the Identity EAP-Request packet, the client sends the username in an Identity
3.
EAP-Response packet to the network access device.
Benefits
Works with any RADIUS server that
supports PAP or CHAP authentication.
73
Limitations
•
Supports only MD5-Challenge
EAP authentication and the
"username + password" EAP
authentication initiated by an
iNode 802.1X client.
•
The processing is complex on the
network access device.