Mitel 6800 Series Administrator's Manual page 614

Mitel 6800 Series SIP Phone Release 4.2.0 SP2 Administrator Guide
• The private key uses AES-128 to encrypt the private key file.
• Switch Supplicant Mode - The switch supports the following 2 modes:
• Single supplicant - This mode enables the port once any machine connected to this
port is authenticated. For security reasons, the IP phone has the option to disable the
pass-through port.
• Multiple supplicants - Using this mode, the switch can support multiple clients con-
nected to same port. The switch distinguishes between the clients based on their MAC
address.
• Factory default and recovery mode deletes all certificates and private keys, and sets the
EAP type to disabled.
You can configure the 802.1x feature on the IP phone using the configuration files, the IP Phone
UI, or the Mitel Web UI.
Note: If configuring 802.1x using the IP Phone UI, the certificates and private keys must
already be configured and stored on the phone. Use the configuration files or the Mitel
Web UI to load certificates and private keys.
CONFIGURING THE 802.1X PROTOCOL USING THE CONFIGURATION
FILES
You use the following parameters to configure the 802.1x Protocol on your phone using the
configuration files.
For EAP-MD5 use:
• eap type
• identity
• md5 password
• pc port passthrough enabled
For EAP-TLS use:
• eap type
• identity
• 802.1x root and intermediate certificates
(use 1 root and 0 or 1 intermediate certificates)
• 802.1x local certificate
(use 1 local certificate)
• 802.1x private key
(1 private key that corresponds to local certificate)
• 802.1x trusted certificates
(0 or more trusted certificates (a maximum of 2)
6-25