802.1X Authentication; Overview; Required Network Components - Cisco 8831 Administration Manual

Cisco Unified IP Conference Phone 8831
Initiator's phone
security level
Secure
Secure
Nonsecure
Nonsecure
Secure

802.1X authentication

Cisco Unified IP Conference Phone 8831 supports 802.1X Authentication.

Overview

Cisco Unified IP Phones and Cisco Catalyst switches traditionally use Cisco Discovery Protocol (CDP) to
identify each other and determine parameters such as VLAN allocation and inline power requirements.
Cisco Unified IP Phones also contain an 802.1X supplicant. This supplicant allows network administrators
to control the connectivity of IP phones to the LAN switch ports. The current release of the phone 802.1X
supplicant uses EAP-FAST and EAP-TLS options for network authentication.

Required network components

Support for 802.1X authentication on Cisco Unified IP Phones requires several components, including:
Cisco Unified IP Phone
Cisco Secure Access Control Server (ACS) or another other third-party authentication server
Feature used
Conference
Join
cBarge
Meet Me
Meet Me
The phone acts as the 802.1X supplicant, which initiates the request to access the network.
The authentication server and the phone must both be configured with a shared secret that authenticates
the phone.
Cisco Unified IP Conference Phone 8831 Administration Guide for Cisco Unified Communications Manager 9.0
Security level of participants
All participants are encrypted.
Encrypted
All participants are encrypted.
Minimum security level is
encrypted.
Minimum security level is
nonsecure
802.1X authentication
Results of action
Secure conference bridge
Secure encrypted level conference
Secure conference bridge
Conference remains secure
Secure conference bridge
Conference changes to nonsecure
Only nonsecure conference bridge
is available and used
Nonsecure conference
Only secure conference bridge
available and used
Conference accepts all calls
27