RFC 9930 - Tunnel Extensible Authentication Protocol (TEAP) Version 1

• Status: Proposed Standard
• Published: February 2026
• Stream: IETF
• Obsoletes: RFC 7170
• Updates: RFC 9427
• Errata: No Errata

Abstract

RFC 9930 defines Tunnel Extensible Authentication Protocol (TEAP) version 1. TEAP is a tunnel-based EAP method that uses TLS to establish a mutually authenticated tunnel and uses TLV objects inside that tunnel to carry authentication-related data. It obsoletes RFC 7170 and updates RFC 9427.

Contents

• 1. Introduction
• 2. Protocol Overview
• 3. TEAP Protocol
• 4. Message Formats
• 5. Limitations of TEAPv1
• 6. Cryptographic Calculations
• 7. IANA Considerations
• 8. Security Considerations
• 9. References
• Appendix A. Evaluation Against Tunnel-Based EAP Method Requirements
• Appendix B. Major Differences from EAP-FAST
• Appendix C. Examples
• Appendix D. Changes from RFC 7170
• Acknowledgments
• Contributors
• Author's Address

Related Resources

• Official Text: RFC 9930
• Official Page: RFC 9930 DataTracker
• Errata: RFC Editor Errata