Comparing eap relay and eap termination, Eap relay – H3C Technologies H3C S12500-X Series Switches User Manual
Page 78

66
191B
Comparing EAP relay and EAP termination
Packet exchange method Benefits
Limitations
EAP relay
•
Supports various EAP
authentication methods.
•
The configuration and
processing is simple on the
network access device.
The RADIUS server must support the
EAP-Message and
Message-Authenticator attributes, and
the EAP authentication method used by
the client.
EAP termination
Works with any RADIUS server that
supports PAP or CHAP
authentication.
•
Supports only MD5-Challenge EAP
authentication and the "username +
password" EAP authentication
initiated by an H3C iNode 802.1X
client.
•
The processing is complex on the
network access device.
192B
EAP relay
758H
Figure 29
shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5
is used.
- H3C S5560 Series Switches H3C WX6000 Series Access Controllers H3C WX5000 Series Access Controllers H3C WX3000 Series Unified Switches H3C LSWM1WCM10 Access Controller Module H3C LSWM1WCM20 Access Controller Module H3C LSQM1WCMB0 Access Controller Module H3C LSRM1WCM2A1 Access Controller Module H3C LSBM1WCM2A0 Access Controller Module H3C S9800 Series Switches H3C S5130 Series Switches H3C S5120 Series Switches