Comparing EAP relay and EAP termination

Packet exchange method

Benefits

Limitations

EAP relay

  • Supports various EAP authentication methods.

  • The configuration and processing are simple on the access device.

The RADIUS server must support the EAP-Message and Message-Authenticator attributes, and the EAP authentication method used by the client.

EAP termination

Works with any RADIUS server that supports PAP or CHAP authentication.

  • Supports only the following EAP authentication methods:

    • MD5-Challenge EAP authentication.

    • The username and password EAP authentication initiated by an iNode 802.1X client.

  • The processing is complex on the access device.