Which PNAC mechanism allows the use of EAP authentication when a host connects to an Ethernet switch?

Which PNAC mechanism allows the use of EAP authentication when a host connects to an Ethernet switch?

• A. Network access control (NAC)
• B. Implicit deny
• C. Screened subnet
• D. EAP over LAN (EAPoL)

Answer: (D)

Port-based network access control relies on 802.1X to gate a switch port. When a host connects, the switch acts as the authenticator and blocks access until the host (the supplicant) proves its identity by exchanging EAP messages with an authentication server. The mechanism that carries these EAP messages across the local network is EAP over LAN, encapsulating the EAP exchange in EAPOL frames between the host, the switch, and the authentication server. This is why EAP over LAN is the correct mechanism for enabling EAP authentication at the switch port. The other options describe broader concepts or different network designs, not the transport method for EAP on the LAN.

Port-based network access control relies on 802.1X to gate a switch port. When a host connects, the switch acts as the authenticator and blocks access until the host (the supplicant) proves its identity by exchanging EAP messages with an authentication server. The mechanism that carries these EAP messages across the local network is EAP over LAN, encapsulating the EAP exchange in EAPOL frames between the host, the switch, and the authentication server. This is why EAP over LAN is the correct mechanism for enabling EAP authentication at the switch port. The other options describe broader concepts or different network designs, not the transport method for EAP on the LAN.