Standard Encryption For 802.1X - Avaya B199 Installing And Administering

• Hash Algorithms
- SHA2 (required)
- SHA3 (optional)
• Hashed Message Authentication Code:
- HMAC-SHA2 (required)
- HMAC-SHA1 (used for integrity and routing)
When you need legacy or non-standard encryption algorithms for the external connections, you
can use legacy encryption mode. In this case the phone works with the encryption algorithms
applied before R.1.0.4.
Standard encryption application areas:
• Web pages for administration
• SIP with TLS
• Device management to HTTPS server
• DES
• LDAP with TLS
• Media encryption with SRTP
• 802.1x

Standard encryption for 802.1x

You can configure Avaya Conference Phone B199 to allow 802.1x authentication to use EAP MD5
method.
If you need to use EAP MD5 method for 802.1x, ensure that you set the Allow Legacy
Encryption option to true.
When you upgrade the phone from a version without the legacy encryption option and enable EAP
MD5 method, the phone automatically enables the Allow Legacy Encryption option.
Configure Avaya Conference Phone B199 to allow 802.1x authentication to use EAP MD5 method
on the phone, through the web interface, or using a configuration file.
Note:
When you import a configuration file, the phone settings update in line with the imported
configuration file. If the value of <eap_md5> is set to true, you must also set the value of
<allow_legacy_encryption> to true.
Related links
Importing the configuration file
Configuration file structure
Network settings description
February 2021
on page 107
on page 98
on page 48
Installing and Administering Avaya Conference Phone B199
Comments on this document? infodev@avaya.com
Standard encryption algorithms
75