802.1x authentication supports the relaying and termination of EAP packets.
The device PAE is responsible for relaying EAP packets between the client and the RADIUS server. In addition, the device PAE can re-encapsulate EAPoR packets into EAPoL packets and send them to the client or re-encapsulate EAPoL packets into EAPoR packets and send them to the RADIUS server. Information in a packet being relayed is unchangeable. EAPoL-Start, EAPoL-Logoff, EAPoL-Key, or EAP-Request/Identity packets do not need to be relayed.
The device PAE is responsible for terminating EAP packets between the client and the RADIUS server. In addition, the device PAE can map EAPoL packets into PAP/CHAP packets and send them to the RADIUS server or map PAP/CHAP packets into EAPoL packets and send them to the client. Information in a packet being terminated is unchangeable.