Yealink SIP-T19 E2 T4 Series, Руководство администратора

Страница: 107 / 981

Setting Up Your System
85
The 802.1X authentication involves three parties: a supplicant, an authenticator and an
authentication server. The supplicant is the IP phone that wishes to attach to the LAN or WLAN.
With 802.1X port-based authentication, the IP phone provides credentials, such as user name
and password, for the authenticator, and then the authenticator forwards the credentials to the
authentication server for verification. If the authentication server determines the credentials are
valid, the IP phone is allowed to access resources located on the protected side of the network.
Yealink IP phones support the following protocols for 802.1X authentication:

EAP-MD5

EAP-TLS (requires Device and CA certificates, requires no password)

EAP-PEAP/MSCHAPv2 (requires CA certificates)

EAP-TTLS/EAP-MSCHAPv2 (requires CA certificates)

EAP-PEAP/GTC (requires CA certificates)

EAP-TTLS/EAP-GTC (requires CA certificates)

EAP-FAST (supports EAP In-Band provisioning, requires CA certificates if the
provisioning mode is Authenticated Provisioning)
For more information on 802.1X authentication, refer to Yealink 802.1X Authentication .
Procedure
802.1X authentication can be configured using the following methods.
Central Provisioning
(Configuration File)
<y0000000000xx>.
cfg
Configure the 802.1X authentication.
Parameters:
static.network.802_1x.mode
static.network.802_1x.eap_fast_provision_m