The IEEE 802.1X standard provides specifications for secure layer 2 network access. Phones implement 802.1X supplicant in unicast, multicast, and pass-through modes, and proxy logoff for the attached device on the PC port. You can use this procedure to set the operational modes.
Before you begin
Make the correct RADIUS server configuration and layer-2 network switch for 802.1X authentication.
If you require EAP-TLS, pre-install the required identity and trusted certificates on the phone. If you require EAP-PEAP, pre-install the required trusted certificate on the phone. If you require EAP-TTLS, pre-install the required identity and trusted certificates on the phone. For more information on certificates, see Certificate management.
You can use the DOT1XSTAT parameter to enable 802.1X with the phone settings file, phone administration menu, or web interface. Ensure to align this change with a layer-2 switch and the RADIUS server. You can perform this step in a staging environment before deploying the phones for production use.
Other:
Improper configuration of this feature can result in a site-wide outage of IP phones.
Press Main MenuAdministration.
In the Access code field, enter the admin menu password.
Press Enter.
Select 802.1X.
STEP RESULT:
The phone displays the following settings:
Supplicant
Pass-thru mode
Authentication method
Username
Password
TLS identity
Select the setting that you want to change.
Press the Toggle soft key or the Left and Right Arrow keys to cycle through the following settings:
For the 802.1X supplicant:
Disabled
Unicast
Multicast
For the Pass-thru mode:
Enabled
Enabled logoff
Disabled
For the Authentication method:
MD5
TLS
TTLS
PEAP
When you choose a password-based authentication method, configure the following if required:
