Authentication - Polycom CX5500 Administrator's Manual

Polycom CX5500 Unified Conference Station Administrator's Guide
●
DHCP Dynamic Host Configuration Protocol (DHCP) is an automatic configuration protocol used
on IP networks. To change this parameter, go to DHCP Menu. To use DHCP for assigning VLANs,
see Assign a VLAN ID Using
standardized and is recommended only if the switch equipment does not support LLDP or CDP
Compatible methods.
●
Static The VLAN ID can be manually set from the phone UI or from a configuration file. To
change this parameter, go to VLAN Menu. This will set the device setting parameter only.
If the phone receives a VLAN setting from several of the above methods, the priority is as follows (from
highest to lowest):
●
LLDP
●
CDP
●
Device settings
●
DHCP VLAN discovery
802.1X Authentication
802.1X authentication is a technology that originated for authenticating Wi-Fi links. It has also been
adopted for authenticating PCs within fixed LAN deployments.
When VoIP phones (with a secondary Ethernet port) are used to connect PCs on a network the 802.1X
authentication process becomes more complex since the PC is not directly connected to the 802.1X
switch.
Web Info: 802.1X References
For more information on 802.1X authentication, see Introduction to IEEE 802.1X and Cisco
Based Networking Services (IBNS) at
See also
Switches Configuration
There are several ways to configure 802.1X authentication of devices connected to the PC port of the
phone:
●
You can configure many switches to automatically trust or accept a VoIP phone based on its MAC
address. This is sometimes referred to as MAC Address Bypass (MAB).
●
Some switches support a feature whereby they will to automatically trust a device that requests a
VLAN using the CDP protocol.
●
Some deployments support Multiple Device Authentication (MDA). In this situation, both the phone
and the PC will separately authenticate themselves.
In this scenario since the phone is closest to the 802.1X switch, the phone needs to notify the
switch when the PC is disconnected. This can be achieved using an 802.1X EAPOL-Logoff
message.
All of these methods are supported by Polycom products.
To change these parameters, see the section
Polycom, Inc.
DHCP. Note that the use of DHCP for assigning VLANs is not well
IEEE 802.1X Multi-Domain Authentication on Cisco Catalyst Layer 3 Fixed Configuration
Example.
802.1X
Cisco 802.1X.
Menu.
1.1.0
®
Identity-
26