Extensible Authentication Protocol Support in RADIUS

Document Type Expired Internet-Draft (radius WG)
Authors Allan Rubens  , Bernard Aboba  , Pat Calhoun 
Last updated 1998-05-13
Stream Internet Engineering Task Force (IETF)
Intended RFC status (None)
Expired & archived
pdf htmlized bibtex
Stream WG state WG Document
Document shepherd No shepherd assigned
IESG IESG state Expired
Consensus Boilerplate Unknown
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


The Extensible Authentication Protocol (EAP), described in [1], pro- vides a standard mechanism for support of additional authentication methods within PPP. Through the use of EAP, support for a number of authentication schemes may be added, including smart cards, Kerberos, Public Key, One Time Passwords, and others. In order to provide for support of EAP within RADIUS, two new attributes, EAP-Message and Sig- nature, were introduced as RADIUS extensions in [4]. This document describes how these new attributes may be used for providing EAP sup- port within RADIUS.


Allan Rubens (acr@merit.edu)
Bernard Aboba (Bernard_Aboba@hotmail.com)
Pat Calhoun (pcalhoun@cisco.com)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)