Eap Types; Eap Packet Retransmission; Table 15: Supported Eap Types - Juniper JUNOSE SOFTWARE 11.2.X - LINK LAYER CONFIGURATION GUIDE 7-7-2010 Configuration Manual

JunosE 11.2.x Link Layer Configuration Guide
264
Packets received from the peer with a Response code
Packets received from the backend authentication server with a Request, Success, or
Failure code
The E Series router discards:
Packets received from the peer with a Request, Success, or Failure code
Packets received from the backend authentication server with a Response code
The JunosE Software determines the outcome of the authentication based only on the
Accept or Reject indication sent by the RADIUS server

EAP Types

The JunosE Software has been qualified to work with the EAP authentication
methods—known as EAP types—described in Table 15 on page 264. Other EAP
authentication methods have not been qualified with the JunosE Software

Table 15: Supported EAP Types

EAP Type Behavior
1—Identity When LCP negotiation completes, PPP sends an initial EAP identity
request packet to the peer. The EAP identity response packet received
from the peer is forwarded to AAA. AAA forwards the response as an
Access-Request to the RADIUS server hosted on the backend
authentication server.
2—Notification The JunosE Software forwards Notification requests from the backend
authentication server to the peer and Notification responses from the
peer to the server. The JunosE Software does not initiate any Notification
requests or responses.
3—NAK The JunosE Software forwards the NAKs received from the peer to the
backend authentication server.
4—MD5-Challenge The JunosE Software acts as a pass-through for the EAP-MD5-Challenge
negotiated between the peer and backend authentication server.
13—TLS The JunosE Software acts as a pass-through for the EAP-TLS negotiated
between the peer and backend authentication server.

EAP Packet Retransmission

PPP retransmits the EAP request packets to the peer. The RADIUS client retransmits the
EAP response packets to the RADIUS Server. The request packets to the peer are governed
by nonconfigurable values for retransmission attempts and interval. The configuration
of the RADIUS client determines retransmission values for response packets to the
RADIUS server. The retransmission values are as follows:
PPP makes five attempts to retransmit an EAP request before the authentication
attempt is terminated. You cannot configure the number of retransmission attempts.
Copyright © 2010, Juniper Networks, Inc.