eap Mailing List: RE: Authenticator versus AAA client

[Nakhjiri Madjid-MNAKHJI1 (Madjid.Nakhjiri]

Hi Yoshiro,

Ok, thanks for the clarification. Agreed.

EAP pass-through authenticator does understand EAP Requests and
Responses for matching the Requests with Responses.  But EAP
path-through authenticator does not need to understand the content of
the Data field of the Requests and Responses.




AAA client receives the master keys from AAA server, but it just passes
the received keys to the EAP pass-through authenticator and never caches
the keys.  So I think the pass-through authenticator is the final
receiver of the master keys.

Madjid>> I can understand that this is a logical deduction, but is there
anywhere it is stated that AAA client cannot cache the keys, but
authenticator can?

Madjid

Yoshihiro Ohba

> 
> Any guidance?
> 
> Thanks,
> 
> Madjid Nakhjiri
> 
> _________________________________________________________________
> To unsubscribe or modify your subscription options, please visit:
> http://lists.frascone.com/mailman/listinfo/eap
> 
> Arhives: http://lists.frascone.com/pipermail/eap