avoid EAP REQUEST ID

Jouni Malinen j
Wed Mar 5 06:18:09 PST 2008


On Mon, Mar 03, 2008 at 06:33:56PM +0100, fbernal at um.es wrote:

> I'm working with HOSTAP and I want to avoid the sending of the EAP  
> REQUEST ID message and to start directly with the first message of a  
> EAP METHOD. See the following example to clarify.

Are you referring to "hostapd" with "HOSTAP"? Are you using the embedded
EAP server implementation or an external RADIUS server?

> message interchange in the EAP MD5 method.
> 1) A-> P: eap request/id
> 2) P->A: eap response/id
> 3) A->P: eap-md5 request
> 4) P->A: eap-md5 response
> 5) A->P: eap success

> The idea is remove messages 1 and 2 when the mobile node attaches to  
> the access point.

While the change itself could be useful for some cases, EAP-MD5 is a bit
odd example for this since it does not negotiate identity like some
other EAP methods do.. How would the EAP-MD5 server know which identity
is used here?

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list