In the IEEE 802.

To allow only authentication frames to flow between the Supplicant and Authentication Server

To block authentication traffic until the 4-Way Handshake completes

To pass general data traffic after the completion of 802.11 authentication and key management

To block unencrypted user traffic after a 4-Way Handshake completes