802.1X Authentication - Cisco 8800 Series Manual

Cisco IP Phone Configuration
Table 13: Parameters for Media Plane Security Negotiation
Parameter
MediaSec Request
MediaSec Over TLS Only

802.1X Authentication

Cisco IP Phones use Cisco Discovery Protocol (CDP) to identify the LAN switch and determine parameters
such as VLAN allocation and inline power requirements. CDP does not identify locally attached workstations.
Description
Specifies whether the phone initiates media plane security negotiations with the
server.
Perform one of the following:
• In the phone configuration file with XML(cfg.xml), enter a string in this
format:
<MediaSec_Request_1_ ua="na">Yes</MediaSec_Request_1_>
• In the phone web interface, set this field to Yes or No as needed.
Allowed values: Yes|No
• Yes—Client-initiated Mode. The phone initiates media plane security
negotiations.
• No—Server-initiated Mode. The server initiates media plane security
negotiations. The phone doesn't initiate negotiations, but can handle
negotiation requests from the server to establish secure calls.
Default: No
Specifies the signaling transport protocol over which media plane security
negotiation is applied.
Before setting this field to Yes, ensure that the signaling transport protocol is
TLS.
Perform one of the following:
• In the phone configuration file with XML(cfg.xml), enter a string in this
format:
<MediaSec_Over_TLS_Only_1_ ua="na">No</MediaSec_Over_TLS_Only_1_>
• In the phone web interface, set this field to Yes or No as needed.
Allowed values: Yes|No
• Yes—The phone initiates or handles media plane security negotiations only
when the signaling transport protocol is TLS.
• No—The phone initiates and handles media plane security negotiations
regardless of the signaling transport protocol.
Default: No
Cisco IP Phone 8800 Series Multiplatform Phone Administration Guide for Release 11.3(1) and Later
802.1X Authentication
133