local-eap-server authentication eap-phase-one enable
Function
The local-eap-server authentication eap-phase-one enable command enables the first phase of EAP authentication.
The undo local-eap-server authentication eap-phase-one enable command disables the first phase of EAP authentication.
By default, the first phase of EAP authentication is not performed.
Format
local-eap-server authentication eap-phase-one enable
undo local-eap-server authentication eap-phase-one enable
Usage Guidelines
The EAP authentication protocol provides many advantages, but its obvious disadvantage is that the user name is transmitted in plain text, namely, the plain-text user name of EAP-Identity can be seen when packets are captured. For security purposes, EAP authentication can be divided into two phases: The first phase is to establish the TLS secure tunnel. After the tunnel is established, exchange negotiation in the EAP certification is complete in the tunnel to improve security. After the first phase is complete, the second-phase user authentication is performed.
