In the 802.1X authentication scenario, the access device directly encapsulates the EAPoL packet sent by the 802.1X client into a RADIUS packet, without processing the data in the EAP. Which of the…

Question

Options

• AEAP termination
• BMAC-based authentication
• CInterface-based authentication
• DEAP relay

• A
  3% (1)
• B
  9% (3)
• C
  3% (1)
• D
  85% (28)

Explanation

EAP Relay (D) matches exactly because the access device acts as a transparent middleman - it wraps the EAPoL frame in a RADIUS packet and forwards it to the authentication server without ever inspecting or modifying the EAP payload. All EAP processing happens at the RADIUS server end.

EAP Termination (A) is the opposite: the access device does process the EAP data, terminates the EAP session itself, and converts the exchange to PAP/CHAP before forwarding credentials to the RADIUS server.

MAC-based authentication (B) doesn't use EAP at all - the client's MAC address serves as the credential, bypassing the EAP/EAPoL mechanism entirely.

Interface-based authentication (C) describes the scope of how 802.1X is applied (per-port vs. per-user), not how EAP data is handled between the authenticator and RADIUS server.

Memory tip: Think "relay race" - in EAP Relay, the access device just passes the baton (EAP data) unchanged to the next runner (RADIUS server). In EAP Termination, the access device catches the baton, opens it, repackages it, and then passes something different along.

No community discussion yet for this question.