1. EAP State Machines IETF 56 - March 19, 2003 John Vollbrecht jrv@umich.edu Nick Petroni npetroni@cs.umd.edu

2. EAP State Machine EAP State Machine page http://www.cs.umd.edu/~npetroni/EAP/ EAP State machine Draft – http://www.ietf.org/internet-drafts/draft-vollbrecht- eap-state-01.pshttp://www.ietf.org/internet-drafts/draft-vollbrecht- eap-state-01.ps –http://www.ietf.org/internet-drafts/draft-vollbrecht-eap- state-01.txthttp://www.ietf.org/internet-drafts/draft-vollbrecht-eap- state-01.txt

3. EAP State Machine topics State machine style –802.1x coordination Variables, transitions and states EAP Mux model Peer State Machine Authenticator State Machine Pass thru Methods - silent discard vs NAK Policy functions and decisions

4. State Machine Style 802.1x format to allow coordination with 802.1x state machine Other formats have been tried

5. EAP MUX Model EAP method2 EAP method1 EAP Switch link EAP Switch link peerAuthenticator EAP method2

6. Peer State Diagram (07)

7. Authenticator State Machine (07)

8. Pass thru EAP method1 EAP method EAP method1 EAP method passthru EAP Switch link EAP Switch linkRADIUS ClientAPAAA

9. Methods - silent discard vs NAK Should Requests for new method be accepted in the middle of another method –Talked about yesterday –In Peer machine see STRICT from method –Alternatively see Policy.allow if Strict is not used Should Success/ Failure be Discarded in the middle of a method Should Methods be able to do method Integrity Checks Method State and implementations –Silent discard requires knowing state of method

10. Policy Functions Policy Functions determine –Policy.allow What methods are allowed when –Policy.isSatisfied Is Policy Successful and Complete –Policy.getNextMethod Get next method

11. EAP State Machine- next steps Clean up depending on resolution of issues Add policy function examples Resolve issues with 2284 bis –Incorporate into 2284bis? Add state machines for Pass-thru to 2869bis Other?