Cisco 7970G Administration Manual page 147

Chapter 4 Configuring Settings on the Cisco Unified IP Phone
Table 4-21 802.1X Authentication Settings
Option
Device
Authentication
EAP-MD5
Cisco Unified IP Phone Administration Guide for Cisco Unified CallManager 5.1 (SIP), Cisco Unified IP Phones
OL-11524-01
Description
Determines whether 802.1X
authentication is enabled:
Enabled—Phone uses 802.1X
•
authentication to request
network access.
Disabled—Default setting in
•
which the phone uses CDP to
acquire VLAN and network
access.
Specifies a password for use with
802.1X authentication using the
following menu options (described in
the following rows):
Device ID
•
• Shared Secret
Realm
•
Device ID—Derivative of the
phone's model number and unique
MAC address displayed in this
format: CP-<model>-SEP-<MAC>
Shared Secret—Choose a password
to use on the phone and on the
authentication server. The password
must be between 6 and 32 characters,
consisting of any combination of
numbers or letters.
Note If you disable 802.1X
authentication or perform a
factory reset of the phone, the
shared secret is deleted.
Realm—Indicates the user network
domain, always set as Network.
Security Configuration Menu
To Change
1. Choose Settings > Security
Configuration > 802.1X
Authentication > Device
Authentication.
Set the Device Authentication
2.
option to Enabled or Disabled.
Press the Save softkey.
3.
Choose Settings > Security
Configuration > 802.1X
Authentication > EAP-MD5.
Display only—Cannot configure.
Choose EAP-MD5 > Shared
1.
Secret.
Enter the shared secret.
2.
Press Save.
3.
See the"Troubleshooting Cisco Unified
IP Phone Security" section on
page 9-12 for assistance in recovering
from a deleted shared secret.
Display only—Cannot configure.
4-43