4-35
Cisco Unified IP Phone 7965G and 7945G Administration Guide for Cisco Unified Communications Manager 6.1(3)
OL-17755-01
Chapter 4 Configuring Settings on the Cisco Unified IP Phone
Security Configuration Menu
802.1X Authentication and Status
The 802.1X Authentication and 802.1X Authentication Status menus allow you to enable 802.1X
authentication and monitor its progress. These options are described in
Table 4-22 and Table 4-23.
You can access the 802.1X Authentication settings by pressing the Settings button and choosing
Security Configuration > 802.1X Authentication and Security Configuration > 802.1X
Authentication Status.
Ta b l e 4-22 802.1X Authentication Settings
Option Description To Change
Device
Authentication
Determines whether 802.1X authentication is
enabled:
• Enabled—Phone uses 802.1X authentication
to request network access.
• Disabled—Default setting in which the phone
uses CDP to acquire VLAN and network
access.
1. Choose Settings > Security Configuration
> 802.1X Authentication > Device
Authentication.
2. Set the Device Authentication option to
Enabled or Disabled.
3. Press the Save softkey.
EAP-MD5 Specifies a password for use with 802.1X
authentication using the following menu options
(described in the following rows):
• Device ID
• Shared Secret
• Realm
Choose Settings > Security Configuration >
802.1X Authentication > EAP-MD5.
Device ID—Derivative of the phone’s model
number and unique MAC address displayed in this
format: CP-<model>-SEP-<MAC>
Display only—Cannot configure.
Shared Secret—Choose a password to use on the
phone and on the authentication server. The
password must be between 6 and 32 characters,
consisting of any combination of numbers or
letters.
Note If you disable 802.1X authentication or
perform a factory reset of the phone, the
shared secret is deleted.
1. Choose EAP-MD5 > Shared Secret.
2. Enter the shared secret.
3. Press Save.
See the “Troubleshooting Cisco Unified IP
Phone Security” section on page 9-8 for
assistance in recovering from a deleted shared
secret.
Realm—Indicates the user network domain,
always set as Network
Display only—Cannot configure.