Skip to main content

2. Terminology

An EAP Provisioning Identifier (EPI) is a strict subset of the NAI format from RFC 7542. The EPI is an NAI whose realm is under eap.arpa.

The distinction between these strings is critical:

  • eap.arpa is the NAI realm form and has no trailing period.
  • eap.arpa. is the DNS domain name form and includes the trailing period.
  • eap.arpa. MUST NOT be queried in DNS.

The NAI realm part is more restrictive than a DNS domain name and does not include the trailing period ".".

Key terms include EAP peer, EAP server, EAP authenticator, Network Access Identifier (NAI), EAP Provisioning Identifier (EPI), realm field, username field, limited network access, unauthenticated access, AAA routability, Master Session Key (MSK), Extended MSK (EMSK), on-path attacker, and impersonation.

Last updated on