Yealink SIP-T54S Administrator's Manual page 148

Administrator's Guide for SIP-T2 Series/T19(P) E2/T4 Series/T5 Series/CP860/CP920 IP Phones
The 802.1X authentication involves three parties: a supplicant, an authenticator and an
authentication server. The supplicant is the IP phone that wishes to attach to the LAN or WLAN.
With 802.1X port-based authentication, the IP phone provides credentials, such as user name
and password, for the authenticator, and then the authenticator forwards the credentials to the
authentication server for verification. If the authentication server determines the credentials are
valid, the IP phone is allowed to access resources located on the protected side of the network.
Yealink IP phones support the following protocols for 802.1X authentication:
EAP-MD5

EAP-TLS (requires Device and CA certificates, requires no password)

EAP-PEAP/MSCHAPv2 (requires CA certificates)

EAP-TTLS/EAP-MSCHAPv2 (requires CA certificates)

EAP-PEAP/GTC (requires CA certificates)

EAP-TTLS/EAP-GTC (requires CA certificates)

EAP-FAST (supports EAP In-Band provisioning, requires CA certificates if the provisioning

mode is Authenticated Provisioning)
For more information on 802.1X authentication, refer to
Procedure
802.1X authentication can be configured using the following methods.
Central Provisioning
(Configuration File)
122
Configure the 802.1X authentication.
Parameters:
<y0000000000xx>.
static.network.802_1x.mode
cfg
static.network.802_1x.eap_fast_provision_m
ode
Yealink 802.1X Authentication
.