Advanced Operational Features41-001160-03, Rev 00, Releaes 2.4 6-31Configuring Advanced Operational Features802.1x SupportThe IP phones support the IEEE 802.1x protocol. The 802.1x protocol is astandard for passing Extensible Authentication Protocol (EAP) over a wired orwireless Local Area Network (LAN).The 802.1x protocol on the IP phone facilitates media-level access control, andoffers the capability to permit or deny network connectivity, control LAN access,and apply traffic policy, based on user or endpoint identity. This feature supportsboth the EAP-MD5 and EAP-TLS protocols.If 802.1x on the phone is enabled, the following screen displays during startup ofthe phone.If the 802.1x failed to authenticate with the server, the phone continues it's normalstartup process using DHCP. However, the network port on the phone may or maynot be disabled, depending on the switch configuration.Certificates and Private Key Information• If the certificates and private key are NOT stored in the phone:— the phone connects to an open unauthenticated VLAN and the certificatesare downloaded.or— the phone connects using EAP-MD5 to a restricted VLAN and thecertificates are downloaded.>> 10%802.1x Authenticating....Draft 1
