74
Table 8
Types of EAPOL packets
Value Type Description
0x00 EAP-Packet
Packet for carrying authentication information. A
packet of this type is repackaged and transferred by
RADIUS on the device to get through complex
networks to reach the authentication server.
0x01 EAPOL-Start
Packet for initiating authentication, present between a
client and a device.
0x02 EAPOL-Logoff
Packet for logoff request, present between a client and
a device.
•
Length
—Data length, or length of the Packet body field, in bytes. If this field is set to 0, no
subsequent data field is present.
•
Packet body
—Content of the packet. The format of this field varies with the value of the Type field.
EAP packet format
An EAPOL packet of the type of EAP-Packet carries an EAP packet in its Packet body field. The format of
the EAP packet is shown in
.
Figure 31
EAP packet format
0
15
Code
Data
Length
7
Identifier
2
4
N
•
Code
—Type of the EAP packet, which can be Request, Response, Success, or Failure.
•
Identifier
—One octet, used to match Responses with Requests.
•
Length
—Length (in bytes) of the EAP packet, which is the sum of the Code, Identifier, Length, and
Data fields.
•
Data
—Content of the EAP packet. This field is zero or more bytes, and its format is determined by
the Code field.
EAP over RADIUS
The RADIUS attributes EAP-Message and Message-Authenticator are for EAP authentication. For
information about the RADIUS packet format, see "
EAP-Message
The EAP-Message attribute is used to encapsulate EAP packets.
format. The value of the Type field is 79. The String field can be up to 253 bytes. If the EAP packet is
longer than 253 bytes, it can be fragmented and encapsulated into multiple EAP-Message attributes.