The switch can do the RADIUS authentication on behalf of the client in the MAC-based Auth. port authentication mode. It can either present itself as a normal 802.1X client to the RADIUS Server and use EAP, supporting only the MD5-Challenge, or alternativly can use plain RADIUS with username / passwort authentification without EAP if this setting is disabled.