Original: It provides an authentication mechanism to devices wishing to attach to a LAN, either establishing a point-to-point connection or preventing it if authentication fails.
Simplified: It provides authentication to devices attached to a LAN port, establishing a point-to-point connection or preventing access from that port if authentication fails.