HP A5830 Series

70
EAP termination
Figure 32 shows the basic 802.1X authentication procedure in EAP termination mode, assuming that
CHAP authentication is used.
Figure 32 802.1X authentication procedure in EAP termination mode
In EAP termination mode, it is the network access device rather than the authentication server that
generates an MD5 challenge for password encryption (see Step 4). The network access device then
sends the MD5 challenge together with the username and encrypted password in a standard RADIUS
packet to the RADIUS server.