802.1X Authentication - Cisco 8832 Administration Manual

Cisco IP Conference Phone Administration
• Act as a PKI trust point
• Act as a PKI RA
• Perform device authentication using a RADIUS server
For more information, see your SCEP server documentation.

802.1x Authentication

The Cisco IP Phones support 802.1X Authentication.
Cisco IP Phones and Cisco Catalyst switches traditionally use Cisco Discovery Protocol (CDP) to identify
each other and determine parameters such as VLAN allocation and inline power requirements.
Support for 802.1X authentication requires several components:
• Cisco IP Phone: The phone initiates the request to access the network. Phones contain an 802.1X
• Cisco Catalyst Switch (or other third-party switch): The switch must support 802.1X, so it can act as the
You must perform the following actions to configure 802.1X.
• Configure the other components before you enable 802.1X Authentication on the phone.
• Configure Voice VLAN—Because the 802.1X standard does not account for VLANs, you should
Related Topics
supplicant. This supplicant allows network administrators to control the connectivity of IP phones to the
LAN switch ports. The current release of the phone 802.1X supplicant uses the EAP-FAST and EAP-TLS
options for network authentication.
authenticator and pass the messages between the phone and the authentication server. After the exchange
completes, the switch grants or denies the phone access to the network.
configure this setting based on the switch support.
• Enabled—If you are using a switch that supports multidomain authentication, you can continue to
use the voice VLAN.
• Disabled—If the switch does not support multidomain authentication, disable the Voice VLAN and
consider assigning the port to the native VLAN.
Cisco Unified Communications Manager
Cisco IP Conference Phone 8832 Administration Guide for Cisco Unified Communications Manager
Documentation, on page 12
802.1x Authentication
83