Peap Setup - Cisco 8811 Administration Manual

Supported Security Features
• Certificate CN comparison
Step 3 On the ACS Certification Authority Setup page, add the Manufacturing Root Certificate and Manufacturing
CA Certificate to the ACS server.
Step 4 Enable both the Manufacturing Root Certificate and Manufacturing CA Certificate in the ACS Certificate
Trust List.

PEAP Setup

Protected Extensible Authentication Protocol (PEAP) uses server-side public key certificates to authenticate
clients by creating an encrypted SSL/TLS tunnel between the client and the authentication server.
The authentication server validation can be enabled by importing the authentication server certificate.
Note
Before You Begin
Before you configure PEAP authentication for the phone, make sure these Cisco Secure ACS requirements
are met:
• The ACS root certificate must be installed.
• The Allow EAP-MSCHAPv2 setting must be enabled.
• User account and password must be configured.
• For password authentication, you can use the local ACS database or an external one (such as Windows
or LDAP).
Enable PEAP Authentication
Procedure
Step 1 From the phone configuration web page, choose PEAP as the authentication mode.
Step 2 Enter a user name and password.
Wireless LAN Security
Cisco phones that support Wi-Fi have more security requirements and require extra configuration. These extra
steps include installing certificates and setting up security on the phones and on the Cisco Unified
Communications Manager.
For additional information, see Security Guide for Cisco Unified Communications Manager.
Cisco IP Phone 8800 Series Administration Guide for Cisco Unified Communications Manager
104