Yealink 802.1X, Технический белый лист

Страница: 8 / 35

Yealink Technical White Paper 802.1X Authentication
8
Parameters Permitted Values Default
characters
Description:
Configures the access URL of the device certificate.
Note
: It works only if the value of the parameter “network.802_1x.mode” is set to 2
(EAP-TLS). The format of the certificate must be *.pem.
Web User Interface:
Network->Advanced->802.1x->Device Certificates
Phone User Interface:
None
The following shows an example of the EAP-TLS protocol for 802.1X authentication in
configuration files:
network.802_1x.mode = 2
network.802_1x.identity = yealink
network.802_1x.root_cert_url = http://192.168.1.8:8080/ca.crt
network.802_1x.client_cert_url = http://192.168.1.8:8080/client.pem
2.
Upload the configuration files, CA certificate and client certificate to the root directory of
the provisioning server.
Applying the Configuration Files to Your Phone
Once you have edited and configuration file (e.g., y0000000000xx.cfg) using the parameters
introduced above, you need to do the following to apply the files to your phone:
1.
Connect your phone to a network that is not 802.1X-enabled.
2.
Perform the auto provisioning process to apply the configuration files to the phone.
Then the IP phone will reboot to make the settings effective.
For more information on auto provisioning, refer to Yealink_SIP-T2 Series_T19(P)
E2_T4_Series_CP860_W56P_IP_Phones_Auto_Provisioning_Guide
.
3.
Connect the phone to the 802.1X-enabled network and reboot the phone.
You can make a phone call to verify whether the phone is authenticated.
For New Auto Provisioning Mechanism
1.
Add/Edit 802.1X authentication parameters in the configuration file (e.g., static.cfg).
The following table shows the information of parameters:
Parameters Permitted Values Default
static.network.802_1x.mode 0, 1, 2, 3, 4, 5, 6 or 7 0