74
•
UC-P100-S/UC-P110-S Phones for Skype for Business
Supplemental Guide – DOC. 8412A
Click OK to reboot the phone.
802.1x Authentication
IEEE 802.1x authentication is an IEEE standard for Port-based Network Access Control
(PNAC), part of the IEEE 802.1 group of networking protocols. It offers an
authentication mechanism for devices to connect/link to a LAN or WLAN.
The 802.1x authentication involves three parties: a supplicant, an authenticator and an
authentication server. The supplicant is the phone that wishes to attach to the LAN or
WLAN. With 802.1x port-based authentication, the phone provides credentials, such as
user name and password, for the authenticator, and then the authenticator forwards
the credentials to the authentication server for verification. If the authentication server
determines the credentials are valid, the phone is allowed to access resources located on
the protected side of the network.
802.1x Authentication
Skype for Business phones support the following protocols for 802.1x authentication:
•
EAP-MD5
•
EAP-TLS (requires Device and CA certificates, requires no password)
•
EAP-PEAP/MSCHAPv2 (requires CA certificates)
•
EAP-TTLS/EAP-MSCHAPv2 (requires CA certificates)
•
EAP-PEAP/GTC (requires CA certificates)
•
EAP-TTLS/EAP-GTC (requires CA certificates)
•
EAP-FAST (supports EAP In-Band provisioning, requires CA certificates if the
provisioning mode is Authenticated Provisioning)
