67
Comparing EAP relay and EAP termination
Packet exchan
e method Benefits
Limitations
EAP relay
• Supports various EAP
authentication methods.
• The configuration and
processing are simple on the
access device.
The RADIUS server must support the
EAP-Message and
Message-Authenticator attributes, and
the EAP authentication method used by
the client.
EAP termination
Works with any RADIUS server that
supports PAP or CHAP
authentication.
• Supports only the following EAP
authentication methods:
{ MD5-Challenge EAP
authentication.
{ The username and password EAP
authentication initiated by an HP
iNode 802.1X client.
• The processing is complex on the
access device.
EAP relay
Figure 28 shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5
is used.