In what sense is EAP extensible?
EAP is considered extensible because it is easy to add new authentication methods to EAP (such as smart cards, MS-CHAP, Diffie-Helman, etc.) without modification of the general format of the underlying EAP messages. Only the contents are modified by the authentication method chosen.