Specifications
Glossary-9
EAPoL
EAPoverLAN.AnencapsulatedformoftheExtensibleAuthenticationProtocol(EAP),definedin
theIEEE802.1Xstandard,thatallowsEAPmessagestobecarrieddirectlybyaLANmediaaccess
control(MAC)servicebetweenawirelessclient(orsupplicant)andanauthenticator.EAPoLisalso
knownasEAPover
Wireless(EAPoW).SeealsoEAP.
EAP over LAN
SeeEAPoL.
EAP over Wireless
SeeEAPoL.
EAPoW
SeeEAPoL.
EAP-TLS
ExtensibleAuthenticationProtocolwithTransportLayerSecurity.AnEAPsubprotocolfor802.1X
authentication.EAP‐TLSsupportsmutualauthenticationandusesdigitalcertificatestofulfillthe
mutualchallenge.Whenauser(client)requestsaccess,theauthenticationserverrespondswitha
servercertificate.Theclientreplieswithitsowncertificateandalsovalidates
theservercertificate.
Fromthecertificatevalues,theEAP‐TLSalgorithmcanderivesessionencryptionkeys.After
validatingtheclientcertification,theauthenticationserversendsthesessionencryptionkeysfora
particularsessiontotheclient.ComparePEAP.
EAP type
AspecificExtensibleAuthenticationProtocol(EAP)authenticationmechanism.Boththewireless
client(orsupplicant)andtheauthenticatormustsupportthesameEAPtypeforsuccessful
authenticationtooccur.EAPtypessupportedinaEnterasysNetworksMobilitySystemwireless
LAN(WLAN)includeEAP‐MD5,EAP‐TLS,PEAP‐TLS,PEAP‐MS‐CHAP,
andTunneled
TransportLayerSecurity(TTLS).SeealsoMD5;MS‐CHAP‐V2;PEAP;TLS;TTLS.
EAP with Transport Layer Security
SeeEAP‐TLS.
EAPA™
EnterasysAccessPointAccess™protocol.Apoint‐to‐pointdatagramprotocol,developedby
Enterasys Networks,thatdefinesthewayeachAccessPoint(AP)communicateswitha
RoamAboutSwitchinanEnterasysNetworksMobilitySystem.BymeansofEAPA,APsannounce
theirpresencetotheRoamAboutSwitch,acceptconfigurationfromit,relaytraffic
toandfromit,
announcethearrivalanddepartureofusers(clients),andprovidestatisticstotheRoamAbout
Switchoncommand.
enabled access
PermissiontouseallMobilitySystemSoftware(MSS)command‐lineinterface(CLI)commands
requiredforconfigurationandtroubleshooting.Enabledaccessrequiresaseparateenable
password.Comparerestrictedaccess.
encryption
Anyprocedureusedincryptographytotranslatedataintoaformthatcanbereadbyonlyits
intendedreceiver.Anencryptedsignalmustbedecryptedtoberead.Seealsocryptography.
Enterasys Access Point Access Protocol
SeeEAPA™.