eap Mailing List: RE: Re: Issue 348: Definition of Lower Layer

[Bernard Aboba (bernard_aboba]

I think IKEv2 would qualify, because it carries EAP between the peer and 
authenticator.  RADIUS (or Diameter) would not, because it carries EAP 
between the authenticator and backend server.

Based on the definition of lower layer in RFC 3748, it would seem that 
Section 3.1 applies only between the peer and authenticator, although some 
of the same requirements (no re-ordering) would also be relevant between the 
authenticator and backend server.

> So, by this definition, RADIUS or IKEv2, for e.g., would not be
> classified as a lower layer? I see that the pass through mode figure in
> RFC3748 alludes to this, but I thought for having the "lower layer" vs.
> the "AAA" text in the stack was because AAA is more or less standard on
> that link, while the "lower layer" between the peer and authenticator
> could differ.
>
> Section 3.1 of RFC3748 applies to all layers that carry EAP, not just
> between the peer and authenticator - isn't that right?
>
> Vidya