Yealink SIP-T54S, Administrator'S Manual

Page: 148 / 1126

Administrator’s Guide for SIP-T2 Series/T19(P) E2/T4 Series/T5 Series/CP860/CP920 IP Phones
122
The 802.1X authentication involves three parties: a supplicant, an authenticator and an
authentication server. The supplicant is the IP phone that wishes to attach to the LAN or WLAN.
With 802.1X port-based authentication, the IP phone provides credentials, such as user name
and password, for the authenticator, and then the authenticator forwards the credentials to the
authentication server for verification. If the authentication server determines the credentials are
valid, the IP phone is allowed to access resources located on the protected side of the network.
Yealink IP phones support the following protocols for 802.1X authentication:

EAP-MD5

EAP-TLS (requires Device and CA certificates, requires no password)

EAP-PEAP/MSCHAPv2 (requires CA certificates)

EAP-TTLS/EAP-MSCHAPv2 (requires CA certificates)

EAP-PEAP/GTC (requires CA certificates)

EAP-TTLS/EAP-GTC (requires CA certificates)

EAP-FAST (supports EAP In-Band provisioning, requires CA certificates if the provisioning
mode is Authenticated Provisioning)
For more information on 802.1X authentication, refer to
Yealink 802.1X Authentication
.
Procedure
802.1X authentication can be configured using the following methods.
Central Provisioning
(Configuration File)
<y0000000000xx>.
cfg
Configure the 802.1X authentication.
Parameters:
static.network.802_1x.mode
static.network.802_1x.eap_fast_provision_m
ode