Forum

EAP frames are treated as upper layer data frames, because EAP was not part of the original 802.11 standard. By treating them as if they are data frames security is enhanced. A device must first be authenticated and associated before it is allowed to pass data onto the network. In the case of EAP use, and in addition to the open authentication and association that must occur, the device must also be EAP authenticated and EAP associated as well. If EAP frames were treated as management or control frames security using EAP would be weak.