HP FlexFabric 5700 Series Security Configuration Manual page 82

Figure 29 802.1X authentication procedure in EAP termination mode
In EAP termination mode, the access device rather than the authentication server generates an MD5
challenge for password encryption. The access device then sends the MD5 challenge together with the
username and encrypted password in a standard RADIUS packet to the RADIUS server.
70