SNR S2940-8G-v2, Configuration Manual

Page: 309 / 420

SNR S2940-8G-v2 Switch Configuration Guide
802.1x Configuration
Code Identifier
Length
Data
0 7 15
2
4
N
Figure 45.4: the Format of EAP Data Packets
Code Identifier
0 7 N
Figure 45.5: the Format of Data Domain in Request and Response Packets
Identifier: to assist matching the Request and Response messages.
Length: the length of the EAP packet, covering the domains of Code, Identifier, Length and
Data, in byte.
Data: the content of the EAP packet, depending on the Code type.
45.1.4 The Encapsulation of EAP Attributes
RADIUS adds two attribute to support EAP authentication: EAP-Message and Message-Authenticator.
Please refer to the Introduction of RADIUS protocol in 'AAA-RADIUS-HWTACACS operation' to
check the format of RADIUS messages.
1. EAP-Message
As illustrated in the next figure, this attribute is used to encapsulate EAP packet, the type code
is 79, String domain should be no longer than 253 bytes. If the data length in an EAP packet is
larger than 253 bytes, the packet can be divided into fragments, which then will be encapsulated
in several EAP-Messages attributes in their original order.
Type Length
0 7 15
String
N
EAP packets
Figure 45.6: the Encapsulation of EAP-Message Attribute
2. Message-Authenticator
As illustrated in the next figure, this attribute is used in the process of using authentication
methods like EAP and CHAP to prevent the access request packets from being eavesdropped.
309