Avaya 1110 Fundamentals page 371

The connected PC operates as normal if MHMA is properly configured on the Layer 2 switch
and if the PC successfully authenticates using EAP. Otherwise, the PC disconnects from the
network, as well.
If EAP is enabled, multihost must be configured on the Layer 2 switch or PC cannot connect.
If MHMA is properly configured, the PC must authenticate, as well. If MHSA is configured, the
IP Phone and the PC cannot authenticate and the PC is blocked.
Authentication methods
Table 74: IP Phone authentication methods
and the IP Phone it supports.
Table 74: IP Phone authentication methods
Authentication method
EAP MD5
EAP PEAP, EAP TLS
EAP-TLS requires root and device certificates while EAP-PEAP requires a root certificate
only.
If you configure EAP-TLS, then the root and device certificate must first be installed on the
phone. The Certificate Authority (CA), Domain Name, and Hostname (optional) must be
configured on the phone. After configuration, the phone uses Simple Certificate Enrollment
Protocol (SCEP) to request the root and devices certificates from the CA Server. To install the
root certificate, you can be prompted to accept the root certificate fingerprint. You can
permanently save the root certificate and the device certificate in the trusted certificate store.
It is possible to install more than one customer root certificate on the phone if more than once
Certificate Authority is used.
The IP Phone sends a request to server to obtain a root certificate and a device certificate.
If you configure EAP-PEAP, the root certificate extracts from the configuration file and stores
in the trusted certificate store.
If the certificate installation fails, EAP-TLS or EAP-PEAP does not initialize. The IP Phone does
not authenticate and cannot access the network.
IP Deskphones Fundamentals
on page 371 shows the authentication methods
IP Phone
2001 IP Phone, 2002 IP Phone, 2004 IP Phone, Avaya
2033 IP Conference Phone, Avaya 1210 IP Deskphone,
Avaya 1220 IP Deskphone, Avaya 1230 IP Deskphone,
Avaya 2007 IP Deskphone, Avaya 1110 IP Deskphone,
Avaya 1120E IP Deskphone, Avaya 1140E IP
Deskphone, Avaya 1150E IP Deskphone, and Avaya
1165E IP Deskphone
Avaya 1210 IP Deskphone, Avaya 1220 IP Deskphone,
Avaya 1230 IP Deskphone, Avaya 2007 IP Deskphone,
Avaya 1110 IP Deskphone, Avaya 1120E IP Deskphone,
Avaya 1140E IP Deskphone, Avaya 1120E IP
Deskphone, and Avaya 1165E IP Deskphone
Network features
February 2013 371