Setting the 802.1x operational mode

Last Updated : Apr 17, 2026 |
Prolog information
Metadata
Keywords:
The IEEE 802.1X standard provides specifications for secure layer 2 network access. Phones implement 802.1X supplicant in unicast and multicast modes and pass-through mode and proxy logoff for the attached device on the PC port. You can set the operational modes using this procedure.
PREREQUISITE
  • Make sure your RADIUS server and layer-2 network switch are configured correctly for 802.1x authentication.
  • If you require EAP-TLS, pre-install the required identity certificates on the phone. For more information on certificates, see Identity Certificates.
  • You can also enable 802.1x on the phone settings file, using the DOT1XSTAT parameter. If you use the settings file to configure 802.1x, make sure to align this change with a layer-2 switch and the RADIUS server. You can perform this step in a staging environment before deploying the phones for production use.
Other:
Improper configuration of this feature can result in a site-wide outage of IP phones.
  1. Press Main MenuAdministration.
  2. In the Access code field, enter the admin menu password.
  3. Press Enter.
  4. Select 802.1X.
    STEP RESULT:
    The phone displays the following settings:
    • Supplicant
    • Pass-thru mode
  5. Select the setting that you want to change.
  6. Press Toggle soft key or the Left and Right Arrow keys to cycle through the following settings:
    • For the 802.1x Supplicant:
      • Disabled: 802.1x Supplicant is disabled.
      • Unicast: 802.1x Supplicant is enabled and works in unicast mode.
      • Multicast: Supplicant is enabled and works in multicast mode.
    • For the Pass-thru mode:
      • Enabled: 802.1x packets from the PC port are forwarded to and from the layer-2 switch connected with the LAN interface of the phone.
      • Enabled logoff: 802.1x packets from the PC port are forwarded to and from the layer-2 switch connected with the phone’s LAN interface. The phone sends an EAP-Logoff when PC is disconnected.
      • Disabled: 802.1x forwarding is disabled between PC port and the network switch. Do not select this option is PC is authenticated over 802.1x
  7. Press Save.
    ADDITIONAL INFORMATION:
    When you change the 802.1X data, the phone restarts after you exit the administration menu.
Related information
IEEE 802.1X overview
Accessing the Admin menu after log in