EAPoL (Extensible Authentication Protocol over LAN)


EAPoL is the abbreviation of Extensible Authentication Protocol over LAN. EAPoL is a network authentication protocol used in 802.1x (Port Based Natwork Access Control). In other words, it is the encapsulation protocol used between Supplicant and Authenticator.

As we have talked about before, in 802.1x and also in EAPoL architecture, there are three main components. These are :

• Supplicant
• Authenticator
• Authentication Server

Supplicant is the host device that need to be authenticated.

Authenticator is the relay device that connects Supplicant to the Authentication Server and controls the network access.

And the Authentication Server is the AAA Server (Radius Server etc.)


EAPoL Messages

There are five messages of EAPoL. Some of these EAPoL messages carries EAP, but some of them are used only for administrative facilities.

By the way, the Ether Type of EAPoL frames are 0x888E.

So, what are these EAPoL Messages? These EAPoL messages are :

• EAPoL Start
• EAPoL Key
• EAPoL Packet
• EAPoL Logoff
• EAPoL Encapsulated ASF Alert

EAPoL Start : At the beginning Supplicant do not know the MAC address of Authenticator. So, it sends this message to a multicast group to learn that if are there any Authenticator in the LAN.

EAPoL Key : This message is used by Authenticator to send encrypted keys.

Lesson tags: EAPoL
Back to: CCNP Enterprise 350-401 ENCOR > Wireless Security

Leave a Reply

Your email address will not be published. Required fields are marked *

IPCisco is the Winner of 2019 “Best Certification Study Journey” Category! We are also Finalist of 2020 & 2021 in Cisco IT Blog Awards!


CCNP Enterprise 350-401 ENCOR

IPCisco on Social Media!