Table 21: 802.1X Authentication Settings
To change
Description
Option
See
Set Device Authentication Field,
on page 127
.
Determines whether 802.1X authentication is
enabled:
•
Enabled: Phone uses 802.1X authentication
to request network access.
•
Disabled: Default setting. The phone uses
CDP to acquire VLAN and network access.
Device
Authentication
See
Set EAP-MD5 Fields, on page
127
.
Specifies a password for use with 802.1X
authentication. The menu options are described
in the rows that follow::
•
Device ID
•
Shared Secret
•
Realm
EAP-MD5
Display only. Cannot configure.
Device ID: Derivative of the phone model
number and unique MAC address. Displays in
this format: CP-<model>-SEP-<MAC>
See
Set EAP-MD5 Fields, on page
127
.
See
Cisco Unified IP Phone Security
Problems, on page 273
for assistance
in recovering from a deleted shared
secret.
Shared Secret: Choose a password to use on the
phone and on the authentication server. The
password must be between 6 and 32 characters
in length and can consist of any combination of
numbers or letters.
If you disable 802.1X authentication or
perform a factory reset (reset all
settings) of the phone, the shared secret
is deleted.
Note
Display only. Cannot configure.
Realm: Indicates the user network domain,
always set as Network.
Cisco Unified IP Phone 8961, 9951, and 9971 Administration Guide for Cisco Unified Communications Manager
10.0 (SIP)
126
Cisco Unified IP Phone Settings
802.1X Authentication and Transaction Status
REVIEW DRAFT - CISCO CONFIDENTIAL