Authentication - Yealink SIP-T2XP Administrator's Manual

IEEE 802.1X authentication is an IEEE standard for Port-based Network Access Control
(PNAC), part of the IEEE 802.1 group of networking protocols. It offers an authentication
mechanism for devices to connect/link to a LAN or WLAN. The 802.1X authentication
involves three parties: a supplicant, an authenticator and an authentication server. The
supplicant is the IP phone that wishes to attach to the LAN or WLAN. With 802.1X
port-based authentication, the IP phone provides credentials, such as user name and
password, for the authenticator, and then the authenticator forwards the credentials to
the authentication server for verification. If the authentication server determines the
credentials are valid, the IP phone is allowed to access resources located on the
protected side of the network.
IP phones support protocols EAP-MD5, EAP-TLS, PEAP-MSCHAPv2 and
EAP-TTLS/EAP-MSCHAPv2 for 802.1X authentication.
Procedure
802.1X authentication can be configured using the configuration files or locally.
Configuration File
Local
To configure the 802.1X authentication via web user interface:
1. Click on Network->Advanced.
2. In the 802.1x block, select the desired protocol from the pull-down list of 802.1x
Mode.
a) If you select EAP-MD5:
1) Enter the user name for authentication in the Identity field.
<y0000000000xx>.cfg
Web User Interface
Phone User Interface
Configuring Advanced Features
Configure the 802.1X

authentication.

For more information, refer to
802.1X on page 368.
Configure the 802.1X
authentication.
Navigate to:
http://<phoneIPAddress>/servl
et?p=network-adv&q=load
Configure the 802.1X
authentication.
189