Yealink T46G Skype For Business Edition, Руководство администратора

Страница: 338 / 421

Yealink Skype for Business HD IP Phones Administrator Guide
324
To configure AES keys via phone user interface:
1.
Press
Menu
->
Advanced
(default password: admin) ->
Set AES Key
.
2.
Enter the values in the
Common
and
MAC-Oriented
fields.
AES keys must be 16 characters and the supported characters contain: 0-9, A-Z, a-z and the
following special characters are also supported: # $ % * + , - . : = ? @ [ ] ^ _ { } ~.
3.
Press the
Save
soft key to accept the change.
802.1X Authentication
IEEE 802.1X authentication is an IEEE standard for Port-based Network Access Control (PNAC),
part of the IEEE 802.1 group of networking protocols. It offers an authentication mechanism for
devices to connect/link to a LAN or WLAN. The 802.1X authentication involves three parties: a
supplicant, an authenticator and an authentication server. The supplicant is the Skype for
Business phone that wishes to attach to the LAN or WLAN. With 802.1X port-based
authentication, the Skype for Business phone provides credentials, such as user name and
password, for the authenticator, and then the authenticator forwards the credentials to the
authentication server for verification. If the authentication server determines the credentials are
valid, the Skype for Business phone is allowed to access resources located on the protected side
of the network.
Skype for Business phones support protocols EAP-MD5, EAP-TLS, EAP-PEAP/MSCHAPv2,
EAP-TTLS/EAP-MSCHAPv2, EAP-PEAP/GTC, EAP-TTLS/EAP-GTC and EAP-FAST for 802.1X
authentication.
For more information on 802.1X authentication, refer to
Yealink 802.1X Authentication.
Procedure
802.1X authentication can be configured using the configuration files or locally.
Configuration File
<y0000000000xx>.cfg
Configure the 802.1X
authentication.
Parameters:
network.802_1x.mode
network.802_1x.identity
network.802_1x.md5_password
network.802_1x.root_cert_url
network.802_1x.client_cert_url
Local
Web User Interface
Configure the 802.1X
authentication.
Navigate to
:
http://<phoneIPAddress>/servlet?
p=network-adv&q=load