Yealink Yealink SIP-T28P, Administrator'S Manual

Page: 215 / 506

Configuring Advanced Features
199
IEEE 802.1X authentication is an IEEE standard for Port-based Network Access Control
(PNAC), part of the IEEE 802.1 group of networking protocols. It offers an authentication
mechanism for devices to connect/link to a LAN or WLAN. The 802.1X authentication
involves three parties: a supplicant, an authenticator and an authentication server. The
supplicant is the IP phone that wishes to attach to the LAN or WLAN. With 802.1X
port-based authentication, the IP phone provides credentials, such as user name and
password, for the authenticator, and then the authenticator forwards the credentials to
the authentication server for verification. If the authentication server determines the
credentials are valid, the IP phone is allowed to access resources located on the
protected side of the network.
IP phones support protocols EAP-MD5, EAP-TLS, PEAP-MSCHAPv2 and
EAP-TTLS/EAP-MSCHAPv2 for 802.1X authentication.
For more information on 802.1X authentication, refer to Yealink 802.1X Authentication ,
available online:
http://www.yealink.com/DocumentDownload.aspx?CateId=142&flag=142 .
Procedure
802.1X authentication can be configured using the configuration files or locally.
Configuration File <y0000000000xx>.cfg
Configure the 802.1X
authentication.
For more information, refer to
802.1X on page 381 .
Local
Web User Interface
Configure the 802.1X
authentication.
Navigate to:
http://<phoneIPAddress>/servl
et?p=network-adv&q=load
Phone User Interface
Configure the 802.1X
authentication.
To configure the 802.1X authentication via web user interface:
1. Click on Network->Advanced.
2. In the 802.1x block, select the desired protocol from the pull-down list of 802.1x
Mode.
a) If you select EAP-MD5:
1) Enter the user name for authentication in the Identity field.