67
Comparing EAP relay and EAP termination
Packet exchange method Benefits
Limitations
EAP relay
•
Supports various EAP
authentication methods.
•
The configuration and
processing are simple on the
access device.
The RADIUS server must support the
EAP-Message and
Message-Authenticator attributes, and
the EAP authentication method used by
the client.
EAP termination
Works with any RADIUS server that
supports PAP or CHAP
authentication.
•
Supports only the following EAP
authentication methods:
{
MD5-Challenge EAP
authentication.
{
The username and password EAP
authentication initiated by an HP
iNode 802.1X client.
•
The processing is complex on the
access device.
EAP relay
shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5
is used.
