beautypg.com

A comparison of eap relay and eap termination, Eap relay, Relay – H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 123

background image

109

A comparison of EAP relay and EAP termination

Packet exchange method

Benefits

Limitations

EAP relay

Supports various EAP

authentication methods.

The configuration and processing is

simple on the network access

device

The RADIUS server must support the
EAP-Message and

Message-Authenticator attributes,

and the EAP authentication method
used by the client.

EAP termination

Works with any RADIUS server that
supports PAP or CHAP authentication.

Supports only MD5-Challenge
EAP authentication and the

"username + password" EAP

authentication initiated by an
H3C iNode 802.1X client.

The processing is complex on the

network access device.

EAP relay

Figure 60

shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5

is used.