The supplicant (i.e., client device) is not allowed access through the authenticator to the protected side of the network until the supplicant’s identity has been validated and authorized.
申请者（如客户端设备）不允许通过验证者访问到受保护一侧的网络，直到申请者的身分被验证和授权。