Chapter 4 Configuring Settings on the Cisco Unified IP Phone

 

 

 

 

 

 

Security Configuration Menu

 

Table 4-21

802.1X Authentication Settings

 

 

 

 

 

 

 

 

 

 

 

Option

 

Description

To Change

 

 

 

 

 

 

Device

 

Determines whether 802.1X

1. Choose Settings > Security

 

Authentication

 

authentication is enabled:

 

Configuration > 802.1X

 

 

 

Enabled—Phone uses 802.1X

 

Authentication > Device

 

 

 

 

Authentication.

 

 

 

 

authentication to request

 

 

 

 

 

 

 

 

 

 

 

 

 

 

network access.

2. Set the Device Authentication

 

 

 

Disabled—Default setting in

 

option to Enabled or Disabled.

 

 

 

 

 

 

 

 

 

 

 

 

which the phone uses CDP to

3.

Press the Save softkey.

 

 

 

 

acquire VLAN and network

 

 

 

 

 

 

 

 

 

access.

 

 

 

 

 

 

 

 

 

 

 

EAP-MD5

 

Specifies a password for use with

Choose Settings > Security

 

 

 

802.1X authentication using the

Configuration > 802.1X

 

 

 

following menu options (described in

Authentication > EAP-MD5.

 

 

 

the following rows):

 

 

 

 

 

 

 

 

Device ID

 

 

 

 

 

 

 

 

Shared Secret

 

 

 

 

 

 

 

 

Realm

 

 

 

 

 

 

 

 

 

 

 

 

 

Device ID—Derivative of the

Display only—Cannot configure.

 

 

 

phone’s model number and unique

 

 

 

 

 

 

 

 

MAC address displayed in this

 

 

 

 

 

 

 

 

format: CP-<model>-SEP-<MAC>

 

 

 

 

 

 

 

 

 

 

 

 

 

Shared Secret—Choose a password

1. Choose EAP-MD5> Shared

 

 

 

to use on the phone and on the

 

Secret.

 

 

 

authentication server. The password

2. Enter the shared secret.

 

 

 

must be between 6 and 32 characters,

 

 

 

3.

Press Save.

 

 

 

consisting of any combination of

 

 

 

numbers or letters.

See the“Troubleshooting Cisco Unified

 

 

 

 

 

 

 

 

Note If you disable 802.1X

IP Phone Security” section on

 

 

 

 

authentication or perform a

page 9-12for assistance in recovering

 

 

 

 

factory reset of the phone, the

from a deleted shared secret.

 

 

 

 

shared secret is deleted.

 

 

 

 

 

 

 

 

 

 

 

 

 

Realm—Indicates the user network

Display only—Cannot configure.

 

 

 

domain, always set as Network.

 

 

 

 

 

 

 

 

 

 

 

 

 

Cisco Unified IP Phone Administration Guide for Cisco Unified CallManager 5.1 (SIP), Cisco Unified IP Phones

 

 

 

 

 

OL-11524-01

 

 

 

 

 

 

4-43

 

 

 

 

 

 

 

 

Page 147
Image 147
Cisco Systems 7970G manual Choose Settings Security, Configuration, Authentication Device, Authentication EAP-MD5, Secret