Cisco 8861 - Page 182

Cisco IP Phone 8861 and 8865 Wireless LAN Deployment Guide
182
• Under Identity, rules can be defined to match various conditions then determine which authorization profile to use.
SCEP RA Configuration
Currently only a Cisco IOS router running IOS version 15.1(4)M10 or later is supported as the SCEP RA.
Use the following guidelines to configure a Cisco IOS router as a SCEP RA.
• Enable HTTP server on the Cisco IOS router.
ISR_RA# configure terminal
ISR_RA(config)# ip http server
ISR_RA(config)# exit
• Configure a RADIUS server for device authentication.
ISR_RA# configure terminal
ISR_RA(config)# radius server MyRadius
ISR_RA(config-radius-server)# address ipv4 10.195.19.63 auth-port 1812 acct-port 1813
ISR_RA(config-radius-server)# key <REMOVED>
ISR_RA(config-radius-server)# exit
ISR_RA(config)# aaa authorization network PhoneList group radius
ISR_RA(config)# exit
• Configure a PKI trustpoint for the MIC’s CA chain to validate the phone’s MIC.