It provides an authentication mechanism to devices wishing to attach to a LAN , either establishing a point-to-point connection or preventing it if authentication fails .

It provides authentication to devices attached to a LAN port , establishing a point-to-point connection or preventing access from that port if authentication fails .
