NEC DT820 ITY-6D, User Manual

Page: 71 / 234

. . . . .
S E C U R I T Y F E AT U R E S
DT820 Phone User Guide
5 -51
Conferencing
When the phone acts as conference initiator or a conference bridge, the Secure
Media Icon is displayed only if all call legs are secure.
8 0 2 . 1 X A U T H E N T I C A T I O N
802.1X Authentication Status Screens
The LCD Display indicates the status of 802.1X authentication, along with a counter
that indicates the time (in seconds) since the supplicant initiated the authentication
process, when the phone is negotiating security.
This counter stops incrementing if the 802.1X authentication process is stopped (e.g.
on detection of LAN port down), and it restarts when the 802.1X authentication is
restarted.
The Connecting screen is displayed when the phone is re-sending “EAPOL Start”
requests after receiving an “EAPOL Success” response from the switch
(authenticator). This case happens when the authenticator is not configured with a
valid authentication server.
The Held screen is displayed when the phone receives an “EAPOL Failure” from the
authenticator in response to the “EAP Response Identity” message. This case
happens when the authenticating server or the supplicant have incorrect credentials.
The Acquired screen is displayed intermittently when the phone has received an
“EAPOL Request Identity” before it attempts to send an “EAPOL Response Identity”
message with the requested credentials.
The Parameter(s) Missing screen is displayed when the username, password, or both
are set to empty values in 802.1X credentials.
E R R O R S A N D D E B U G G I N G
T L S E R R O R S
The phone closes the TLS connection and logs an appropriate error on sending or
receiving any of the following fatal alert messages defined in RFC 2246.
• Close notify
• Unexpected message
• Bad record mac
• Decryption failed
• Record overflow
• Decompression failure
• Handshake failure
• Bad certificate
• Unsupported certificate
• Certificate revoked
• Certificate expired
• Certificate unknown