In the CompTIA Network+ section Wess states that EAS is used to encapsulate a request to Authenticate to a RADIUS server.

---

Why does a Radius request get encapsulated in EAS and sent to the radius server if the AP shut off the port the request comes in on?

@Wayne-Seavolt that is a good question, 802.1x brings layer 1 port-based security. RADIUS did not require EAP, originally it was PAP, CHAP but with EAP however, you can create a protected tunnel between the RADIUS Client (not the access client) and the RADIUS server.

Okay that makes sense I knew about the CHAP part but did not know why the EAS was being used. So Gatekeeper escorts the request and if valid you gain entrance if not the remains closed. You sort of explained this in the WEP and WPA part in wireless but now I get it. Thank-you sir.