AudioCodes 400HD Series - Configuring 802.1 X Authentication; EAP MD5 Mode; EAP TLS Mode; Using the Phone Screen

Administrator's Manual 3. Manual Configuration of a Single IP Phone
Version 3.4.4 103 400HD IP Phones Series - Teams Compatible
3.5.5 Configuring 802.1X Authentication
802.1X Authentication is an IEEE Standard for port-based Network Access Control (PNAC).
It's part of the IEEE 802.1 group of networking protocols. It provides an authentication
mechanism for devices joining a LAN or WLAN.
The employee's PC negotiates 802.1X. Messages are sent transparent to the enterprise
switch. The IP phone is uninvolved in the negotiation, but if an employee's PC is
disconnected, their IP phone notifies the switch. If an employee's PC is disconnected from
the IP phone, a PROXY-EAP-LOGOFF mechanism lets the IP phone immediately log off the
port from the authentication server in order to not let anyone else connect to it.
The phone performs like this:
 IP phone and PC connected to IP phone's PC port successfully perform 802.1X
authentication. The authentication server records the IP phone and PC as authorized.
 If the PC is disconnected from IP phone's PC port, the phone sends an EAPoL-Logoff
message for the PC. The authentication server then records the PC as unauthorized.
 If the PC reconnects to the IP phone's PC port, the authentication server requests the
PC to perform 802.1X authentication again.
3.5.5.1 Using the Phone Screen
This section shows how to configure 802.1X from the phone screen.
 To configure 802.1X:
1. Open the 802.1X Settings screen (MENU key > Administration > Network Settings >
802.1X Settings).
2. Navigate to and select either:
• Disabled – disables the 802.1X feature
• EAP-MD5 – see Section 3.5.5.2
• EAP-TLS - see Section 3.5.5.3
3.5.5.2 EAP MD5 Mode
This section shows how to configure EAP (Extensible Authentication Protocol) MD5 mode
for 802.1X Authentication.
 To configure EAP MD5 mode for 802.1X:
1. Navigate to the EAP-MD5 option and press the Edit softkey:
2. Enter this information:
• Identity: User ID
• Password: MD5 password (optional)
3. Press the Save softkey; a message appears notifying you that the phone will restart.
4. Press Apply.
3.5.5.3 EAP TLS Mode
This section shows how to configure EAP TLS mode for 802.1X.
 To configure EAP TLS mode for 802.1X:
 Navigate to the EAP-TLS option and press the Save softkey.