HP 3600 v2 Series

84
EAP termination
Figure 43 shows the basic 802.1X authentication procedure in EAP termination mode, assuming that
CHAP authentication is used.
Figure 43 802.1X authentication procedure in EAP termination mode
In EAP termination mode, it is the network access device rather than the authentication server generates
an MD5 challenge for password encryption (see Step 4). The network access device then sends the MD5
challenge together with the username and encrypted password in a standard RADIUS packet to the
RADIUS server.