An IP deskphone can support several different 802.1X authentication scenarios, depending on the
capabilities of the Ethernet data switch to which the deskphone is connected. Some switches
might authenticate only a single device per switch port. This operation is known as single-
supplicant or port-based operation. These switches usually send multicast 802.1X packets to
authenticating devices.
These switches support the following three scenarios:
• Standalone phone (Deskphone Only Authenticates) - When you configure the IP phone for
supplicant mode (DOT1XSTAT=2), the phone can support authentication from the switch.
• Phone with attached PC (Deskphone Only Authenticates) - When you configure the IP phone
for supplicant mode (DOT1X=2 and DOT1XSTAT=2), the phone can support authentication
from the switch. The attached computer in this scenario gains access to the network without
being authenticated.
• Deskphone with attached computer (PC Only Authenticates) - When the IPdeskphone is
configured for Pass-Through Mode or Pass-Through Mode with Logoff (DOT1X=0 or 1 and
DOT1XSTAT=0), an attached PC running 802.1X supplicant software can be authenticated
by the data switch. The phone in this scenario gains access to the network without
authentication.
Some switches support authentication of multiple devices connected through a single switch port.
This operation is known as multi-supplicant or MAC-based operation. These switches usually send
unicast 802.1X packets to authenticating devices. These switches support the following two
scenarios:
• Standalone phone (Deskphone Only Authenticates) - When you configure the IP phone for
supplicant mode (DOT1XSTAT=2), the phone can support authentication from the switch.
When DOT1X is “0” or “1” the phone cannot authenticate with the switch.
• Phone and computer Dual Authentication - Both the IP phone and the connected computer
can support 802.1X authentication from the switch. You can configure the IP phone for Pass-
Through Mode or Pass-Through Mode with Logoff (DOT1X=0 or 1 and DOT1XSTAT=1 or 2).
The attached computer must be running 802.1X supplicant software.
Related links
About Link Layer Discovery Protocol (LLDP)
Link Layer Discovery Protocol (LLDP) is an open standards layer 2 protocol that IP phones use to
advertise their identity and capabilities and to receive administration from an LLDP server. LAN
equipment can use LLDP to manage power, administer VLANs, and provide some administration.
IEEE 802.1AB-2005 specifies the transmission and reception of LLDP. The phone use Type-
Length-Value (TLV) elements specified in IEEE 802.1AB-2005, TIA TR-41 Committee - Media
Endpoint Discovery (LLDP-MED, ANSI/TIA-1057), and Proprietary elements. LLDP Data Units
(LLDPDUs) are sent to the LLDP Multicast MAC address (01:80:c2:00:00:0e).
Administering Deskphone Options
May 2018
Installing and Administering Avaya J169/J179 IP Phone H.323
141
