AudioCodes MediaPack MP-114, User Manual

Page: 96 / 164

User's Manual 96 Document #: LTRT-71405
MediaPack Series
6.5.2.6.2 802.1x Settings
The 802.1x Settings page is used to configure IEEE 802.1X Ethernet security. The device
can function as an IEEE 802.1X supplicant. IEEE 802.1X is a standard for port-level
security on secure Ethernet switches; when a device is connected to a secure port, no
traffic is allowed until the identity of the device is authenticated.
A typical 802.1X deployment consists of an Authenticator (secure LAN switch), an Access
Server (e.g. RADIUS), and one or more supplicants. The Authenticator blocks all traffic on
the secure port by default and communicates with the supplicant via EAP-over-LAN
frames. The supplicant provides credentials which are transmitted to the Access Server. If
the Access Server determines that the credentials are valid, it instructs the Authenticator to
authorize traffic on the secure port.
The device supports the following Extensible Authentication Protocol (EAP) variants:

MD5-Challenge (EAP-MD5): Authentication is done with a user-defined 802.1X
username and password.

Protected EAP (PEAPv0 with EAP-MSCHAPv2): Authentication is done with a user-
defined 802.1X username and password, however, the protocol is MSCHAPv2 over
an encrypted TLS tunnel.

EAP-TLS: The device's certificate is used to establish a mutually-authenticated TLS
session with the Access Server. This requires prior configuration of the server
certificate and root CA. The user-defined 802.1X username is used to identify the
device, however, the 802.1X password is ignored.

To configure the 802.1x parameters:
1. Open the 802.1x Settings page ( Configuration tab > VoIP menu > Security > 802.1x
Settings ).
Figure 58: 802.1x Settings
2. Configure the parameters as required, and then click Submit.