AudioCodes Media Pack MP-11x, User Manual

Page: 157 / 650

Version 6.6 157 MP-11x & MP-124
User's Manual 13. Security
Parameter Description
Match Count
[AccessList_MatchCount]
(Read-only) Displays the number of packets accepted or rejected by
the rule.
13.2 Configuring 802.1x Settings
The 802.1x Settings page is used to configure IEEE 802.1X Ethernet security. The device
can function as an IEEE 802.1X supplicant. IEEE 802.1X is a standard for port-level
security on secure Ethernet switches; when a device is connected to a secure port, no
traffic is allowed until the identity of the device is authenticated.
A typical 802.1X deployment consists of an Authenticator (secure LAN switch), an Access
Server (e.g. RADIUS), and one or more supplicants. The Authenticator blocks all traffic on
the secure port by default and communicates with the supplicant via EAP-over-LAN
frames. The supplicant provides credentials which are transmitted to the Access Server. If
the Access Server determines that the credentials are valid, it instructs the Authenticator to
authorize traffic on the secure port.
The device supports the following Extensible Authentication Protocol (EAP) variants:

MD5-Challenge (EAP-MD5): Authentication is done with a user-defined 802.1X
username and password.

Protected EAP (PEAPv0 with EAP-MSCHAPv2): Authentication is done with a user-
defined 802.1X username and password, however, the protocol is MSCHAPv2 over
an encrypted TLS tunnel.

EAP-TLS: The device's certificate is used to establish a mutually-authenticated TLS
session with the Access Server. This requires prior configuration of the server
certificate and root CA. The user-defined 802.1X username is used to identify the
device, however, the 802.1X password is ignored.
For a description of the 802.1X parameters, see 802.1X Parameters on page 513 .

To configure the 802.1x parameters:
1. Open the 802.1x Settings page ( Configuration tab > VoIP menu > Security submenu
> 802.1x Settings ).
Figure 13-2: 8021x Settings Page
2. Configure the parameters as required, and then click Submit .