Share via

3.2.5.4.4 Received PEAP Packet With Inner EAP Type As Identity

If the currentState variable is set to TUNNEL_ESTABLISHED, then:

  1. Get the Identity of the peer to be authenticated from the protocol to be tunneled. For an example, see [MS-CHAP] section 3.2.4, which explains how to get the Identity for the Extensible Authentication Protocol Method for the Microsoft Challenge Handshake Authentication Protocol (CHAP).

  2. Prepare an EAP Identity response packet [RFC3748] with the Identity obtained in step 1 as Type_Data value.

  3. Compress the EAP packet obtained in step 2 as specified in section 3.1.5.6, and then encrypt the compressed data by passing it to the TLS layer using the EncryptMessage method.

  4. Prepare a PEAP packet by keeping the encrypted data returned by the EncryptMessage method as the Data field of the PEAP packet. Then, send the PEAP packet to the server (see section 3.1.5.2.2).

  5. Change currentState to INNER_IDENTITY_SENT.

If currentState is not set to TUNNEL_ESTABLISHED, then the packet is ignored.