- authenticator Port Access Entity over controlled/uncontrolled port
- authenticator backend authentication entity with RADIUS interface
- supplicant Port Access Entity over controlled/uncontrolled port
- generic EAP interface for attaching arbitrary EAP modules
- generic portcontrol interface for controlling packet filtering mechanisms
- encapsulation over 802.3/Ethernet MACs
- EAP-over-LAN
- key transmission mechanism
- statistics collection
- management functionality
- authenticator diagnostics
additional features
- EAP-Transport Layer Security (TLS) according to RFC2716 included in supplicant and authenticator
- authenticator capable of forwarding EAP-TLS messages to backend authentication server
- authenticator capable of terminating EAP-TLS locally
- Protected-EAP according to draft-josefsson-pppext-eap-tls-eap-02.txt included in supplicant and authenticator
- authenticator capable of forwarding PEAP messages to backend authentication server
- authenticator capable of terminating PEAP locally
- implementation for small-size systems with low memory and processing capabilities
- ethernet filtering device for BSD-style systems for network traffic blocking on layer 2 optional available
features Protected-EAP
- PEAP part 1 - connection setup phase
- PEAP part 2 - encrypted EAP session
- TLS termination on EAP-Success/Failure
- master key derivation for external encryption
- version negotiation
- error handling
- retry behavior
- session resumption
- fragmentation and reassembly


