HP A5830 Series, Руководство по настройке

Страница: 73 / 280

65
•
Data —Content of the EAP packet. This field appears only in a Request or Response EAP packet.
The field comprises the request type (or the response type) and the type data. Type 1 (Identify) and
type 4 (MD5-challenge) are examples for the type field.
EAPOL packet format
Figure 26 shows the EAPOL packet format.
Figure 26 EAPOL packet format
•
PAE Ethernet type —Protocol type. It takes the value 0x888E for EAPOL.
•
Protocol version —The EAPOL protocol version used by the EAPOL packet sender.
•
Type —Type of the EAPOL packet. Table 5 lists the types of EAPOL packets that the HP
implementation of 802.1X supports.
Table 5 Types of EAPOL packets
Value Type Description
0x00 EAP-Packet
The client and the network access device uses EAP-
Packets to transport authentication information.
0x01 EAPOL-Start
The client sends an EAPOL-Start message to initiate
802.1X authentication to the network access device.
0x02 EAPOL-Logoff
The client sends an EAPOL-Logoff message to tell the
network access device that it is logging off.
•
Length —Data length in bytes, or length of the Packet body. If packet type is EAPOL-Start or EAPOL-
Logoff, this field is set to 0, and no Packet body field follows.
•
Packet body —Content of the packet. When the EAPOL packet type is EAP-Packet, the Packet body
field contains an EAP packet.
EAP over RADIUS
RADIUS adds two attributes, EAP-Message and Message-Authenticator, for supporting EAP
authentication. For the RADIUS packet format, see " Configuring AAA ."
EAP-Message
RADIUS encapsulates EAP packets in the EAP-Message attribute, as shown in Figure 27 . The Type field
takes 79, and the Value field can be up to 253 bytes. If an EAP packet is longer than 253 bytes,
RADIUS encapsulates it in multiple EAP-Message attributes.