Forum

That's correct - they are treated as data frames. I'm guessing that many people think that because 802.1X/EAP is a combination of port-based access control and authentication that EAP frames would be considered authentication frames. The 802.11 state machine only allows for 2 types of authentication mechanisms: open system and shared key. Once in state 3 (after auth and assoc), all data frame types are allowed by the AP. However, because of how 802.1X works, the AP then steps in after state 3 is reached and filters the traffic, allowing only an EAP authentication sequence until the authentication server (RADIUS) tells it otherwise.

Devinator