A comparison of EAP relay and EAP termination

Packet exchange method

Benefits

Limitations

EAP relay

  • Supports various EAP authentication methods.

  • The configuration and processing is simple on the network access device

The RADIUS server must support the EAP-Message and Message-Authenticator attributes, and the EAP authentication method used by the client.

EAP termination

Works with any RADIUS server that supports PAP or CHAP authentication.

  • Supports only MD5-Challenge EAP authentication and the "username + password" EAP authentication initiated by an HPE iNode 802.1X client.

  • The processing is complex on the network access device.