Operation Manual – 802.1x-HABP-MAC AuthenticationH3C S5500-EI Series Ethernet Switches Chapter 1 802.1x Configuration1-4z After a user passes the authentication, the authentication server passesinformation about the user to the authenticator, which then controls the status ofthe controlled port according to the instruction of the authentication server.1.1.3 EAP Encapsulation over LANsI. EAPOL frame formatEAPOL, defined by 802.1x, is intended to carry EAP protocol packets betweensupplicants and authenticators over LANs. Figure 1-3 shows the EAPOL frame format.Figure 1-3 EAPOL frame formatz PAE Ethernet type: Protocol type. It takes the value 0x888E.z Protocol version: Version of the EAPOL protocol supported by the EAPOL framesender.z Type: Type of the EAPOL frame. Table 1-1 shows the defined types of EAPOLframes.Table 1-1 Types of EAPOL framesType DescriptionEAP-Packet (a value of 0x00)Frame for carrying authenticationinformation, present between anauthenticator system and theauthentication server.A frame of this type is repackaged andtransferred by RADIUS to get throughcomplex networks to reach theauthentication server.EAPOL-Start (a value of 0x01) Frame for initiating authentication, presentbetween a supplicant and an authenticator.EAPOL-Logoff (a value of 0x02) Frame for logoff request, present betweena supplicant and an authenticator.EAPOL-Key (a value of 0x03) Frame for carrying key information, presentbetween a supplicant and an authenticator.
