71
Figure 30 802.1X authentication procedure in EAP termination mode
In EAP termination mode, the access device rather than the authentication server generates an MD5
challenge for password encryption. The access device then sends the MD5 challenge together with
the username and encrypted password in a standard RADIUS packet to the RADIUS server.
EAPOL
RADIUS
(1) EAPOL-Start
(
2
) EAP
-Request
/
Identity
(3
) EAP
-
Response /
Identity
(4) EAP-Request
/
MD5
challenge
(8) EAP-Success
(5) EAP-Response / MD5 challenge
(9)
EAP-Request
/
Identity
(10) EAP-
Response/Identity
(11) EAPOL-Logoff
...
Client Device
Authentication server
Port authorized
Port unauthorized
(6) RADIUS Access-Request
(CHAP-Response/MD5 challenge)
(7) RADIUS Access-Accept
(
CHAP-Success)
(12) EAP-Failure
To Next Page
Loading...
