Eap Types; Eap Packet Retransmission; Table 15: Supported Eap Types - Juniper JUNOSE 11.1.X - LINK LAYER CONFIGURATION 4-7-2010 Configuration Manual

JUNOSe 11.1.x Link Layer Configuration Guide
The JUNOSe software forwards or discards packets received from the backend
authentication router and the peer depending on the identifying code contained in
the packet.
The E Series router forwards:
The E Series router discards:
The JUNOSe software determines the outcome of the authentication based only on
the Accept or Reject indication sent by the RADIUS server

EAP Types

The JUNOSe software has been qualified to work with the EAP authentication
methods known as EAP types described in Table 15 on page 268. Other EAP
authentication methods have not been qualified with the JUNOSe software

Table 15: Supported EAP Types

EAP Packet Retransmission

PPP retransmits the EAP request packets to the peer. The RADIUS client retransmits
the EAP response packets to the RADIUS Server. The request packets to the peer are
268
Overview
Packets received from the peer with a Response code
Packets received from the backend authentication server with a Request, Success,
or Failure code
Packets received from the peer with a Request, Success, or Failure code
Packets received from the backend authentication server with a Response code
EAP Type Behavior
1 Identity When LCP negotiation completes, PPP sends an initial EAP identity
request packet to the peer. The EAP identity response packet received
from the peer is forwarded to AAA. AAA forwards the response as an
Access-Request to the RADIUS server hosted on the backend
authentication server.
2 Notification The JUNOSe software forwards Notification requests from the backend
authentication server to the peer and Notification responses from the
peer to the server. The JUNOSe software does not initiate any Notification
requests or responses.
3 NAK The JUNOSe software forwards the NAKs received from the peer to the
backend authentication server.
4 MD5-Challenge The JUNOSe software acts as a pass-through for the EAP-MD5-Challenge
negotiated between the peer and backend authentication server.
13 TLS The JUNOSe software acts as a pass-through for the EAP-TLS negotiated
between the peer and backend authentication server.