The administrator can do the following:
• When EAP-MD5 is selected, the administrator is prompted to enter ID1 and Password.
• When EAP-PEAP is selected, the administrator is prompted to enter ID1, ID2 and Password. If
the administrator enters only ID1, then ID2 has the same value of ID1.
• When EAP-TLS is selected, the administrator is prompted to enter ID1. If SCEP is used to
install the device certificate, the administrator is required to enter the CA Server (URL of the
SCEP service), the Domain Name which the IP Deskphone belongs to, and the Hostname
(optional).
• When Disable is selected, the existing IDs and passwords are erased.
The following is a list of additional provisioning file parameters for EAP support in addition to the UI
parameters on the Device Settings screen
Table 85: EAP Provisioning Parameters
Parameter Purpose Default Allowed
EAP EAP mode DISABLED DISABLED/MD5/PEAP
EAPID1 Device ID1 Empty String (4 to 20
characters)
EAPID2 Device ID2 Empty String (4 to 20
characters)
EAPPWD Password Empty String (4 to 12
characters)
EAP Authentication failures are logged using event 1033.
The following is an example of a TLS authentication failure
1033 [Minor][FRI MAY 15 13:48:06 2009][10223][n:/fw/build/../bsp/vxWorks/
common/dot1x/Supplicant/moceap_tls.c:147] - EAP-TLS Failed to
Authenticate
The following sections describe the behavior of each method:
EAP Disabled
EAP disabled is the factory default setting. The IP Deskphone does not send a message to the
authenticator upon startup, and normal network access is attempted. If the IP Deskphone receives a
Request-Identity message from the Layer 2 switch, the Request-Identity is ignored. If the Layer 2
switch requires 802.1x authentication, the IP Deskphone is blocked from the network, and the
administrator must enable the EAP feature on the IP Deskphone and configure a DeviceID and
Password (if required) to access the network after the IP Deskphone is successfully authenticated.
Or, the administrator can plug the IP Deskphone to an EAP disabled port on the Layer 2 switch.
EAP Disabled
March 2015 SIP Software for Avaya 1200 Series IP Deskphones-Administration 267
Comments? infodev@avaya.com
To Next Page
Loading...
