Avaya 9608 Administration page 123

interrupt screen is displayed when a response is transmitted, unless an 802.1X User Input
interrupt screen is already being displayed.
If an EAP-Failure frame is received after transmitting a response that contains an identity or a
password, an 802.1X User Input interrupt screen is displayed, unless an 802.1X User Input
interrupt screen is already being displayed. If an EAP-Failure frame is received after
transmitting a response that did not contain an identity or a password, an 802.1X Failure
interrupt screen is displayed.
The deskphone stores 802.1X credentials when successful authentication is achieved.
Post-installation authentication attempts occur using the stored 802.1X credentials, without
prompting the user for ID and password entry and the ID and password are not overwritten by
deskphone software downloads.
An IP deskphone can support several different 802.1X authentication scenarios, depending on
the capabilities of the Ethernet data switch to which it is connected. Some switches may
authenticate only a single device per switch port. This is known as single-host mode. These
switches typically send multicast 802.1X packets to authenticating devices.
These switches support the following three scenarios:
Standalone deskphone (Deskphone Only Authenticates) - When the deskphone is
●
configured for Supplicant Mode (DOT1X=2), the deskphone can support authentication
from the switch.
Deskphone with attached PC (Deskphone Only Authenticates) - When the deskphone is
●
configured for Supplicant Mode (DOT1X=2), the deskphone can support authentication
from the switch. The attached PC in this scenario gains access to the network without
being authenticated.
Deskphone with attached PC (PC Only Authenticates) - When the deskphone is
●
configured for Pass-Through Mode or Pass-Through Mode with Logoff (DOT1X=0 or 1),
an attached PC running 802.1X supplicant software can be authenticated by the data
switch. The deskphone in this scenario gains access to the network without being
authenticated.
Some switches support authentication of multiple devices connected through a single switch
port. This is known as multi-auth configuration. These switches typically send unicast 802.1X
packets to authenticating devices. These switches support the following two scenarios:
Standalone deskphone (Deskphone Only Authenticates) - When the deskphone is
●
configured for Supplicant Mode (DOT1X=2), the deskphone can support authentication
from the switch. When DOT1X is "0" or "1" the deskphone is unable to authenticate with
the switch.
Deskphone and PC Dual Authentication - Both the deskphone and the connected PC can
●
support 802.1X authentication from the switch. The deskphone may be configured for
Pass-Through Mode or Pass-Through Mode with Logoff (DOT1X=0 or 1). The attached
PC must be running 802.1X supplicant software.
About IEEE 802.1X
Issue 3 January 2014 119