H3C SYSU East(802.1X)

# Login
---> Start
<--- Request, Identity
---> Response, Identity
<--- Request, EAP-MD5-CHALLENGE
---> Response, EAP-MD5-CHALLENGE
<--- Some unknown code
<--- Success

# Then enter random check loop
<--- Request, Identity
---> Response, Identity

# Logoff
# Not responding to random check loop also results in auto-logoff
---> Logoff
<--- Failure

Request ID, version hash + username

EAP-MD5-CHALLENGE, num + username

num is calculated by ( ordinal(first 16 character of case-sensitive password) xor ordinal(16 bytes md5 data converted to decimal) )

Tools

• scapy
• awesome-pcaptools

Reference

• 华为H3C iNode客户端802.1X协议的分析和破解
• 中山大学东校区校园网认证的客户端（非官方）YaH3C
• 西电北校区校园网客户端Linux CLI版 xd-h3c