Eap Encapsulation Over Lans - H3C S3610-28P Operation Manual

Operation Manual – 802.1x-HABP-MAC Authentication
H3C S3610&S5510 Series Ethernet Switches
After a user passes the authentication, the authentication server passes
information about the user to the authenticator, which then controls the status of
the controlled port according to the instruction of the authentication server.

1.1.3 EAP Encapsulation over LANs

I. EAPOL frame format
EAPOL, defined by 802.1x, is intended to carry EAP protocol packets between
supplicants and authenticators over LANs.
Figure 1-3 EAPOL frame format
PAE Ethernet type: Protocol type. It takes the value 0x888E.
Protocol version: Version of the EAPOL protocol supported by the EAPOL frame
sender.
Type: Type of the EAPOL frame.
frames.
Table 1-1 Types of EAPOL frames
EAP-Packet (a value of 0x00)
EAPOL-Start (a value of 0x01)
EAPOL-Logoff (a value of 0x02)
EAPOL-Key (a value of 0x03)
Type
1-4
Chapter 1 802.1x Configuration
Figure 1-3 shows the EAPOL frame format.
Table 1-1 shows the defined types of EAPOL
Description
Frame for carrying authentication information,
present between an authenticator system and
the authentication server.
A frame of this type is repackaged and
transferred by RADIUS to get through complex
networks to reach the authentication server.
Frame for initiating authentication, present
between a supplicant and an authenticator.
Frame for logoff request, present between a
supplicant and an authenticator.
Frame for carrying key information, present
between a supplicant and an authenticator.