Zte ZXR10 2920 - Page 176

ZXR10 2920/2928/2952
(V1.0) Access Switch User Manual （Volume I）
162 Confidential and Proprietary Information of ZTE CORPORATION
FIGURE 31 USING CHAP MODE FOR IDENTITY AUTHENTICATION
EAPOL RADIUS
EAPOL-Start
EAP-Request/Identity
EAP-Response/Identity
EAP-Request/Challenge
EAP-Response/MD5-
Challenge
Access-Request/CHAP
Access-AcceptEAP-Success
User terminal system
Switch
Connection setup
Successful access
RADIUS server
EAP is an authentication method that transparently transmits
EAP packets .It includes EAP-MD5 and PEAP.The following
example explains EAP-MD5.
EAP-MD5 is a CHAP identity authentication mechanism used in
the EAP framework structure. Process of using the EAP-MD5
mode for identity authentication is shown in
FIGURE 32 USING EAP-MD5 MODE FOR IDENTITY AUTHENTICATION
EAPOL RADIUS
EAPOL-Start
EAP-Request/Identity
EAP-Response/Identity
EAP-Request/Challenge
EAP-Response/MD5-
Challenge
Access-Request
Access-AcceptEAP-Success
User terminal system
RADIUS server
Switch
Access-Request
Connection setup
Successful access
Access-Challenge
Extensible
Authentication
Protocol -
Message
Digest 5 (EAP-
MD5)