Network Settings; Network [1] Ieee8021X Mode; Network [1] Ieee8021X Tlsverify; Network [1] Ieee8021X Useclientcertificate - Cisco TelePresence MX200 G2 Administrator's Manual

Cisco TelePresence MX200 G2 and MX300 G2

Introduction

Network settings

Network [1] DNS Domain Name

The DNS Domain Name is the default domain name suffix which is added to unqualified
names.
Example: If the DNS Domain Name is "company.com" and the name to lookup is
"MyVideoSystem", this will result in the DNS lookup "MyVideoSystem.company.com".
Requires user role: ADMIN
Default value: ""
Value space: String (0, 64)
The DNS domain name.
Network [1] DNS Server [1..3] Address
Define the network addresses for DNS servers. Up to three addresses may be specified.
If the network addresses are unknown, contact your administrator or Internet Service
Provider.
Requires user role: ADMIN
Default value: ""
Value space: String (0, 64)
A valid IPv4 address or IPv6 address.

Network [1] IEEE8021X Mode

The system can be connected to an IEEE 802.1X LAN network, with a port-based network
access control that is used to provide authenticated network access for Ethernet networks.
Requires user role: ADMIN
Default value: Off
Value space: Off/On
Off: The 802.1X authentication is disabled (default).
On: The 802.1X authentication is enabled.
D15332.01 MX200 G2 and MX300 G2 Administrator Guide CE8.0, NOVEMBER 2015.
Configuration Peripherals Maintenance

Network [1] IEEE8021X TlsVerify

Verification of the server-side certificate of an IEEE802.1x connection against the
certificates in the local CA-list when TLS is used. The CA-list must be uploaded to the
video system. This can be done from the web interface.
This setting takes effect only when Network [1] IEEE8021X Eap Tls is enabled (On).
Requires user role: ADMIN
Default value: Off
Value space: Off/On
Off: When set to Off, TLS connections are allowed without verifying the server-side
X.509 certificate against the local CA-list. This should typically be selected if no CA-list
has been uploaded to the codec.
On: When set to On, the server-side X.509 certificate will be validated against the local
CA-list for all TLS connections. Only servers with a valid certificate will be allowed.

Network [1] IEEE8021X UseClientCertificate

Authentication using a private key/certificate pair during an IEEE802.1x connection. The
authentication X.509 certificate must be uploaded to the video system. This can be done
from the web interface.
Requires user role: ADMIN
Default value: Off
Value space: Off/On
Off: When set to Off client-side authentication is not used (only server-side).
On: When set to On the client (video system) will perform a mutual authentication TLS
handshake with the server.
www.cisco.com — Copyright © 2015 Cisco Systems, Inc. All rights reserved.
79
Administrator Guide
System settings System settings Appendices