eap state machines
Download
Skip this Video
Download Presentation
EAP State Machines

Loading in 2 Seconds...

play fullscreen
1 / 11

EAP State Machines - PowerPoint PPT Presentation


  • 188 Views
  • Uploaded on

EAP State Machines. IETF 56 - March 19, 2003 John Vollbrecht [email protected] Nick Petroni npetron[email protected] EAP State Machine. EAP State Machine page http://www.cs.umd.edu/~npetroni/EAP/ EAP State machine Draft http://www.ietf.org/internet-drafts/draft-vollbrecht-eap-state-01.ps

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'EAP State Machines' - raechel


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
eap state machines

EAP State Machines

IETF 56 - March 19, 2003

John Vollbrecht [email protected]

Nick Petroni [email protected]

eap state machine
EAP State Machine
  • EAP State Machine page

http://www.cs.umd.edu/~npetroni/EAP/

  • EAP State machine Draft
    • http://www.ietf.org/internet-drafts/draft-vollbrecht-eap-state-01.ps
    • http://www.ietf.org/internet-drafts/draft-vollbrecht-eap-state-01.txt
eap state machine topics
EAP State Machinetopics
  • State machine “style”
    • 802.1x coordination
  • Variables, transitions and states
  • EAP Mux model
  • Peer State Machine
  • Authenticator State Machine
  • Pass thru
  • Methods - silent discard vs NAK
  • Policy functions and decisions
state machine style
State Machine Style
  • 802.1x format to allow coordination with 802.1x state machine
  • Other formats have been tried
eap mux model
EAP MUX Model

peer

Authenticator

EAP method1

EAP method2

EAP method1

EAP method2

EAP Switch

EAP Switch

link

link

pass thru
Pass thru

Client

AP

AAA

EAP method

EAP method1

EAP method1

EAP method

passthru

EAP Switch

EAP Switch

EAP Switch

EAP Switch

link

link

RADIUS

RADIUS

methods silent discard vs nak
Methods - silent discard vs NAK
  • Should Requests for new method be accepted in the middle of another method
    • Talked about yesterday
    • In Peer machine see STRICT from method
    • Alternatively see Policy.allow if Strict is not used
  • Should Success/ Failure be Discarded in the middle of a method
  • Should Methods be able to do method Integrity Checks
  • Method State and implementations
    • Silent discard requires knowing “state” of method
policy functions
Policy Functions
  • Policy Functions determine
    • Policy.allow
      • What methods are allowed when
    • Policy.isSatisfied
      • Is Policy Successful and Complete
    • Policy.getNextMethod
      • Get next method
eap state machine next steps
EAP State Machine- next steps
  • Clean up depending on resolution of issues
  • Add policy function examples
  • Resolve issues with 2284 bis
    • Incorporate into 2284bis?
  • Add state machines for Pass-thru to 2869bis
  • Other?
ad