Cisco IP Phone Administration Manual page 117

Chapter 4 Configuring Settings on the Cisco Unified IP Phones
Table 4-24 802.1X Authentication Settings
Option
Device Authentication
EAP-MD5
OL-23091-01
Description
Determines whether 802.1X authentication
is enabled:
Enabled—Phone uses 802.1X
•
authentication to request network
access.
Disabled—Default setting in which the
•
phone uses CDP to acquire VLAN and
network access.
Specifies a password for use with 802.1X
Authentication using the following menu
options (described in the following rows):
Device ID
•
Shared Secret
•
Realm
•
Device ID—A derivative of the phone's
model number and unique MAC address,
displayed in this format:
CP-<model>-SEP-<MAC>
Shared Secret—Choose a password to use on
the phone and on the authentication server.
The password must be between 6 and 32
characters, consisting of any combination of
numbers or letters.
If you disable 802.1X authentication
Note
or perform a factory reset of the
phone, the shared secret is deleted.
Realm—Indicates the user network domain,
always set as Network.
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.6 (SCCP and SIP)
Security Configuration Menu
To Change
Choose Settings > Security Configuration >
1.
802.1X Authentication > Device
Authentication.
Set the Device Authentication option to
2.
Enabled or Disabled.
Press the Save softkey.
3.
Choose Settings > Security Configuration >
802.1X Authentication > EAP-MD5.
Display only—Cannot configure.
Choose EAP-MD5 > Shared Secret.
1.
2. Enter the shared secret.
Press Save.
3.
See Troubleshooting Cisco Unified IP Phone
Security, page 9-9 for assistance in recovering
from a deleted shared secret.
Display only—Cannot configure.
4-45