Hello,
I am confused with the process of EAP when I compare it between wired and wireless. As much as I understand in order for EAP to work in case of wired 802.1x authentication, the client has to have an IP address on it in advance. In other words EAP process can't start without the IP address on the wired client. For the same reason probably we allow DHCP traffic to pass in low impact mode.
But when it comes to wireless it looks like EAP process can work without an IP address being required on the wireless client. Is my understanding correct? If yes, how can EAP process progress without an IP address on the client because there could be a scenario that RADIUS/ISE server might be available to client over a layer 3 network for 802.1x authentication.
Thanks in advance for clarifying this confusion. Also I'd appreciate any link to a good document covering this concept.
Regards,
Qamber
