Show Posts
1
HiPath - Phones - (optiSet, optiClient, optiPoint, openStage) / OpenStage phones using 802.1X certificates and DLS
« on: November 20, 2013, 12:03:38 am »
Hi, I'm a network engineer rather than involved with the voice system but I'm tasked with getting 802.1X authentication working with our IP Phones.
I've read several documents about standard deployments but they all seem to point to having a single user certificate for a phone profile template. This would mean to me that all phones in that profile share a common user certificate. This is not ideal in 802.1X as we really should have individual certificates for each handset that can be revoked or replaced.
Has anyone had experience using 802.1X with these handsets or any handsets that are managed by DLS?
We are using Cisco switches and Microsoft NPS as the CA and windows Radius server.
I've read several documents about standard deployments but they all seem to point to having a single user certificate for a phone profile template. This would mean to me that all phones in that profile share a common user certificate. This is not ideal in 802.1X as we really should have individual certificates for each handset that can be revoked or replaced.
Has anyone had experience using 802.1X with these handsets or any handsets that are managed by DLS?
We are using Cisco switches and Microsoft NPS as the CA and windows Radius server.