HP FlexNetwork NJ5000, Руководство пользователя

Страница: 266 / 475

254
•
Data
—Content of the EAP packet. This field appears only in a Request or Response EAP
packet. The Data field comprises the request type (or the response type) and the type data.
Type 1 (Identity) and type 4 (MD5-challenge) are two examples for the type field.
EAPOL packet format
Figure 266 shows the EAPOL packet format.
Figure 266 EAPOL packet format
•
PAE Ethernet type
—Protocol type. It takes the value 0x888E for EAPOL.
•
Protocol version
—The EAPOL protocol version used by the EAPOL packet sender.
•
Type
—Type of the EAPOL packet. Table 96 lists the types of EAPOL packets supported by
Hewlett Packard Enterprise implementation of 802.1X.
Table 96 Types of EAPOL packets
Value Type Description
0x00 EAP-Packet
The client and the network access device uses EAP-Packets to
transport authentication information.
0x01 EAPOL-Start
The client sends an EAPOL-Start message to initiate 802.1X
authentication to the network access device.
0x02 EAPOL-Logoff
The client sends an EAPOL-Logoff message to tell the network
access device that it is logging off.
•
Length
—Data length in bytes, or length of the Packet body. If packet type is EAPOL-Start or
EAPOL-Logoff, this field is set to 0, and no Packet body field follows.
•
Packet body
—Content of the packet. When the EAPOL packet type is EAP-Packet, the Packet
body field contains an EAP packet.
EAP over RADIUS
RADIUS adds two attributes, EAP-Message and Message-Authenticator, for supporting EAP
authentication. For the RADIUS packet format, see "
Configuring RADIUS ."
EAP-Message
RADIUS encapsulates EAP packets in the EAP-Message attribute, as shown in Figure 267 . The
Type field takes 79, and the Value field can be up to 253 bytes. If an EAP packet is longer than 253
bytes, RADIUS encapsulates it in multiple EAP-Message attributes.