Eap Over Radius - HP FlexFabric 5700 Series Security Configuration Manual

Code—Type of the EAP packet. Options include Request (1), Response (2), Success (3), or Failure
•
(4).
Identifier—Used for matching Responses with Requests.
•
Length—Length (in bytes) of the EAP packet. The EAP packet length is the sum of the Code, Identifier,
•
Length, and Data fields.
Data—Content of the EAP packet. This field appears only in a Request or Response EAP packet. The
•
Data field contains the request type (or the response type) and the type data. Type 1 (Identify) and
type 4 (MD5-challenge) are two examples for the type field.
EAPOL packet format
Figure 23 shows the EAPOL packet format.
Figure 23 EAPOL packet format
0
Protocol version
PAE Ethernet type—Protocol type. It takes the value 0x888E for EAPOL.
•
Protocol version—The EAPOL protocol version used by the EAPOL packet sender.
•
• Type—Type of the EAPOL packet.
implementation of 802.1X.
Table 4 Types of EAPOL packets
Value
0x00
0x01
0x02
Length—Data length in bytes, or length of the Packet body. If packet type is EAPOL-Start or
•
EAPOL-Logoff, this field is set to 0, and no Packet body field follows.
Packet body—Content of the packet. When the EAPOL packet type is EAP-Packet, the Packet body
•
field contains an EAP packet.

EAP over RADIUS

RADIUS adds two attributes, EAP-Message and Message-Authenticator, for supporting EAP
authentication. For the RADIUS packet format, see
7
PAE Ethernet type
Type
Length
Packet body
Type
EAP-Packet
EAPOL-Start
EAPOL-Logoff
15
2
4
6
N
Table 4 lists the types of EAPOL packets supported by HP
Description
The client and the access device use EAP-Packets to transport
authentication information.
The client sends an EAPOL-Start message to initiate 802.1X
authentication to the access device.
The client sends an EAPOL-Logoff message to tell the access device
that the client is logging off.
"Configuring
64
AAA."