EAP Invariants Mode Independence Identical key state on EAP authenticator, regardless of whether it operates in “stand-alone” or “pass-through” mode Media independence EAP methods agnostic about lower layers AAA server is lower layer agnostic Method independence Pass-through authenticator is method agnostic Ciphersuite independence EAP methods generate keying material, not session keys AAA server is ciphersuite agnostic |