Avaya 9600 Series - Recording Your Mailbox Greeting

About this task
You must configure the 46xxsettings.txt file on the file server with the specified parameters to use
an identity certificate to authenticate the phones.
Procedure
Configure the following parameters in the 46xxsettings.txt file:
• SET MYCERTURL < URL for enrolling with a SCEP fronted Certificate Authority> for example,
http://149.49.44.53/certsrv/mscep/mscep.dll.
• SET MYCERTCN $MACADDR.
• SET MYCERTWAIT 1.
• SET TRUSTCERTS "root_ certificate".
Related links
EAP-TLS support for authentication on page 105
Activating EAP-TLS for authentication
Before you begin
To activate the 802.1x EAP-TLS mode, you must “SET DOT1XEAPS TLS on the 46xxsettings.txt
file of the file server.
About this task
You can use the EAP-TLS method to authenticate the phones with the call server. For
implementing this type of authentication, you must configure the EAP-TLS parameters in the
46xxsettings file and on the call server.
Procedure
1. SET MYCERTURL < URL for enrolling with a SCEP fronted Certificate Authority >.
URL Example: http://149.49.44.53/certsrv/mscep/mscep.dll.
2. SET MYCERTWAIT 1
3. SET MYCERTCN $MACADDR
4. SET DOT1XEAPS TLS
5. SET TRUSTCERTS & <Root CA Filename>
6. Connect the phone to a port that does not have 802.1x enabled. The phone receives the
settings from 46xxsettings.txt file.
The phone contacts the call server to activate the SCEP process.
7. Unplug the phone and connect the phone to a port that you have configured for EAP-TLS
and enable the supplicant on the phone through the CRAFT procedure. You can also
enable the supplicant by configuring the 46xxsettings.txt with SET DOT1XSTAT 2.
Administering Deskphone Options
March 2018 Administering Avaya 9608/9608G/9611G/9621G/9641G/9641GS IP Deskphones H.
323 106
Comments on this document? infodev@avaya.com