H3C Technologies H3C S12500-X Series Switches - Manual (Page 78)

66
191B
Comparing EAP relay and EAP termination
Packet exchange method Benefits Limitations
EAP relay
• Supports various EAP
authentication methods.
• The configuration and
processing is simple on the
network access device.
The RADIUS server must support the
EAP-Message and
Message-Authenticator attributes, and
the EAP authentication method used by
the client.
EAP termination
Works with any RADIUS server that
supports PAP or CHAP
authentication.
• Supports only MD5-Challenge EAP
authentication and the "username +
password" EAP authentication
initiated by an H3C iNode 802.1X
client.
• The processing is complex on the
network access device.
192B
EAP relay
758H
Figure 29 shows the basic 802.1X authentication procedure in EAP relay mode, assuming that EAP-MD5
is used.