Yealink CP969, Administrator'S Manual

Page: 122 / 868

Administrator’s Guide for SIP-T5 Series Smart Media Phones
100
The 802.1X authentication involves three parties: a supplicant, an authenticator and an
authentication server. The supplicant is the IP phone that wishes to attach to the LAN or WLAN.
With 802.1X port-based authentication, the IP phone provides credentials, such as user name
and password, for the authenticator, and then the authenticator forwards the credentials to the
authentication server for verification. If the authentication server determines the credentials are
valid, the IP phone is allowed to access resources located on the protected side of the network.
Yealink IP phones support the following protocols for 802.1X authentication:

EAP-MD5

EAP-TLS (requires Device and CA certificates, requires no password)

EAP-PEAP/MSCHAPv2 (requires CA certificates)

EAP-TTLS/EAP-MSCHAPv2 (requires CA certificates)

EAP-PEAP/GTC (requires CA certificates)

EAP-TTLS/EAP-GTC (requires CA certificates)

EAP-FAST (requires CA certificates)
For more information on 802.1X authentication, refer to
Yealink 802.1X Authentication
.
Procedure
802.1X authentication can be configured using the following methods.
Central Provisioning
(Configuration File)
<y0000000000xx>.cfg
Configure the 802.1X authentication.
Parameters:
static.network.802_1x.mode
static.network.802_1x.identity
static.network.802_1x.md5_password
static.network.802_1x.root_cert_url