2.2.8 EAP Extensions Methods

PEAP introduces three new EAP methods: EAP TLV Extensions Method (section 2.2.8.1), SoH EAP Extensions Method (section 2.2.8.2), and Capabilities Negotiation Method (section 2.2.8.3). These methods, unlike traditional EAP methods, are not used to facilitate authentication, but are instead used to facilitate the exchange of TLVs between a PEAP peer and a PEAP server.

Given this special use of the EAP Extensions Method, these methods MUST be used only as inner EAP methods, so that the messages are protected by the secure tunnel established by the outer EAP method.