Avaya 1230 - Eap-Mds

EAP-MDS
EAP-MD5 allows the IP Deskphone to authenticate to the RADIUS server before the IP Deskphone
can access the network. This procedure requires a user ID and password. If the IP Deskphone fails
to authenticate to the RADIUS server, the IP Deskphone displays a "EAP Authenticate-Fail"
message, and the IP Deskphone cannot access the network.
EAP-TLS
EAP-TLS allows the IP Deskphone to authenticate to the RADIUS server before the IP Deskphone
can access the network. This procedure requires a user ID, root certificate, and device certificate.
The root and device certificates must be installed on the IP Deskphone before using this feature.
The customer root certificate can be installed using SCEP or SIP configuration file. For more
information, see
Root certificate installation on page 245 and Table 77: SCEP provisioning
parameters on page 254.
The device certificate can be installed using one of two methods:
• SCEP on page 252
• PKCS 12 download on page 254
If the IP Deskphone fails to authenticate to the RADIUS server or to install the required certificates,
the IP Deskphone displays a "EAP Authenticate-Fail" message, and the IP Deskphone cannot
access the network.
EAP-PEAP
EAP-PEAP allows the IP Deskphone to authenticate to the RADIUS server before the IP Deskphone
can access the network. This procedure requires a user ID1, root certificate, user ID2, and
password. EAP-PEAP is the outer authentication protocol that requires a user ID1 and root
certificate to establish a TLS channel. EAP-MD5 is the inner authentication protocol that requires a
user ID2 and password to pass through this channel in a secure mode. The customer root certificate
can be installed using SCEP or SIP configuration file. For more information, see
Root certificate
installation on page 245.
If the IP Deskphone fails to authenticate to the RADIUS server or to install the required certificates,
the IP Deskphone displays a "EAP Authenticate-Fail" message, and the IP Deskphone cannot
access the network.
EAP Re-authentication
The re-authentication process proceeds in the background without disturbing the ongoing operation
of the IP Deskphone. If the re-authentication fails or times out, the IP Deskphone becomes
Certificate-based authentication
268 SIP Software for Avaya 1200 Series IP Deskphones-Administration March 2015
Comments? infodev@avaya.com