Users Guide

EAP over RADIUS
802.1X uses RADIUS to transfer EAP packets between the authenticator and the authentication server. EAP messages are
encapsulated in RADIUS packets as an attribute of type, length, value (TLV) format—the type value for EAP messages is 79.
Configure 802.1X
You can configure and enable 802.1X on a port in a single process. OS10 supports 802.1X with EAP-MD5, EAP-TLS, and EAP-
TTLS. All platforms support RADIUS as the authentication server.
If the primary RADIUS server becomes unresponsive, the authenticator begins using a secondary RADIUS server if configured.
NOTE: 802.1X is not supported on port channels or port channel members.
526 Layer 2