AASTRA 6700i series, 9143, 9480i, 9480i CT SIP Administrator Guide EN - Manual (Page 658)

41-001343-01 Rev 03, Release 3.2.2 6-31
• Switch Supplicant Mode - The switch supports the following 2 modes:
— Single supplicant - This mode enables the port once any machine connected to this port is
authenticated. For security reasons, the IP phone has the option to disable the pass-through
port.
— Multiple supplicants - Using this mode, the switch can support multiple clients
connected to same port. The switch distinguishes between the clients based on their MAC
address.
• Factory default and recovery mode deletes all certificates and private keys, and sets the EAP
type to disabled.
You can configure the 802.1x feature on the IP phone using the configuration files, the IP Phone
UI, or the Aastra Web UI.
Configuring the 802.1x Protocol Using the Configuration Files
You use the following parameters to configure the 802.1x Protocol on your phone using the
configuration files.
For EAP-MD5 use:
• eap type
• identity
• md5 password
• pc port passthrough enabled
For EAP-TLS use:
• eap type
• identity
• 802.1x root and intermediate certificates
(use 1 root and 0 or 1 intermediate certificates)
• 802.1x local certificate
(use 1 local certificate)
• 802.1x private key
(1 private key that corresponds to local certificate)
• 802.1x trusted certificates
(0 or more trusted certificates (a maximum of 2
Note: If configuring 802.1x using the IP Phone UI, the certificates
and private keys must already be configured and stored on the phone.
Use the configuration files or the Aastra Web UI to load certificates
and private keys.