Aastra 9000i Series Administrator's Manual page 652

• Switch Supplicant Mode - The switch supports the following 2 modes:
— Single supplicant - This mode enables the port once any machine connected to this port is
— Multiple supplicants - Using this mode, the switch can support multiple clients
• Factory default and recovery mode deletes all certificates and private keys, and sets the EAP
type to disabled.
You can configure the 802.1x feature on the IP phone using the configuration files, the IP Phone
UI, or the Aastra Web UI.
Configuring the 802.1x Protocol Using the Configuration Files
You use the following parameters to configure the 802.1x Protocol on your phone using the
configuration files.
For EAP-MD5 use:
• eap type
• identity
• md5 password
• pc port passthrough enabled
For EAP-TLS use:
• eap type
• identity
• 802.1x root and intermediate certificates
(use 1 root and 0 or 1 intermediate certificates)
• 802.1x local certificate
(use 1 local certificate)
• 802.1x private key
(1 private key that corresponds to local certificate)
• 802.1x trusted certificates
(0 or more trusted certificates (a maximum of 2
41-001343-01 Rev 02, Release 3.2.2
authenticated. For security reasons, the IP phone has the option to disable the pass-through
port.
connected to same port. The switch distinguishes between the clients based on their MAC
address.
Note: If configuring 802.1x using the IP Phone UI, the certificates
and private keys must already be configured and stored on the phone.
Use the configuration files or the Aastra Web UI to load certificates
and private keys.
6-31