Cyber Security: Types of Encapsulation used with EAP’s

6/15/19

So I got to thinking, you can’t really have an article with just EAPS without talking about encapsulation.

The whole premise of these three articles is around 802.1X which is considered an encapsulation itself.

So with this being said, below are a few encapsulation types:

802.1X
- As discussed in another article at the bottom of this article, 802.1X is an encapsulation protocol. Essentially EAP encapsulation over IEEE 802 is what creates 802.1X, confusing I know. Click: here
RADIUS and Diameter
- These too are also used with IEEE 802 also known as 802.1X, defined better here
PEAP
- Protected Extensible Authentication Protocol (PEAP) encapsulated a EAP embedded inside of a TLS tunnel that, can be, encrypted and/or authenticated.
- Provides enhanced protection of communication when physical switching security is not ensured
- Similar to EAP-TTLS in the comparison of the fact that it too only requires the server to have a certificate to establish a secured TLS tunnel to protect authentication
- MS-CHAPv2 is widely used as the authentication protocol for PEAP

There are many other encapsulation types but these are the ones I’ve used extensively. 🙂

Cheers! 😀