Yealink 802.1X, Технический белый лист

Страница: 27 / 35

Yealink Technical White Paper 802.1X Authentication
27
The following screenshot of the Wireshark shows a sample of a successful authentication
process with anonymous identity using EAP-FAST protocol:
Troubleshooting
Why doesn’t the IP phone pass 802.1X authentication?
Do the following in sequence:

Ensure that the 802.1X authentication environment is operational.
a)
Connect another device (e.g., a computer) to the switch port.
b)
Check if the device is authenticated successfully, and an IP address is assigned to it. If
the device fails the authentication, check the configurations on the switch and
authentication server.

Ensure that the user name and password configured on the phone are correct. If EAP-TLS,
EAP-PEAP/MSCHAPv2, EAP-TTLS/EAP-MSCHAPv2, EAP-PEAP/GTC, EAP-TTLS/EAP-GTC and
EAP-FAST protocols are used, ensure that the certificate uploaded to the phone is valid.
a)
Double click the certificate to check the validity time.
b)
Check if the time and date on the phone is within the validity time of the uploaded
certificate. If not, re-generate a certificate and upload it the phone.

Ensure that the failure is not caused by network settings.
a)
Disable LLDP feature and manually configure a VLAN ID for the Internet port of the
phone to check if the authentication is successful. If the phone is authenticated
successfully, contact your network administrator to troubleshoot the LLDP-related
problem.
b)
Disable VLAN feature on the phone to check if the authentication passes successfully.
If the phone is authenticated successfully, capture the packet and feed back to your