802.1X supplicant

Disabled

To disable 802.1X supplicant.

Unicast

To enable 802.1X supplicant in unicast mode.

Multicast

To enable 802.1X supplicant in multicast mode.

Pass-thru mode

Enabled

The PC port forwards the 802.1X packets to and from the layer-2 switch connected with the LAN interface of the phone.

Enabled logoff

The PC port forwards the 802.1X packets to and from the layer-2 switch connected with the LAN interface of the phone.

The phone sends an EAP Logoff when the PC is disconnected.

Disabled

Disables 802.1X forwarding between the PC port and the network switch. Do not select this option if the PC is authenticated over 802.1X.

Authentication method

MD5

To use the EAP-MD5 authentication method. This is a password-based authentication method.

TLS

To use the EAP-TLS authentication method.

If you use EAP-TLS authentication method, you only need to configure TLS identity later.

PEAP

To use the EAP-PEAP authentication method. This is a password-based authentication method.

When you use the EAP-PEAP authentication, the phone only supports the PEAP Phase 2 authentication method, MSCHAPv2.

TTLS

To use the EAP-TTLS authentication method. This is a password-based authentication method.

Password-based authentication method configuration parameters

Username

Enter the required username. A valid value is a string with a range of 1-31 characters. As a default Username, the phone displays $MACADDR, which is replaced by its Ethernet MAC address.

The supported values include: $MACADDR, $MACADDR_UPPER, $SERIALNO, and $SERIALNO_UPPER.

Password

Enter the required password. A valid value is a string with a range of 1-31 characters.

The supported values include: $MACADDR, $MACADDR_UPPER, $SERIALNO, and $SERIALNO_UPPER.

TLS identity

Enter the required TLS identity. A valid value is a string with a range of 1-31 characters.

The supported values include: $MACADDR, MACADDR_UPPER, $SERIALNO, and $SERIALNO_UPPER.