Alcatel IP Phone dot1x Authentication

Unanswered Question
May 14th, 2008
User Badges:

In the current situation, IP phone authentication is done using ACS local DB.

What we want to do is forwarding devicename & paswd through our ACS to an external DB (Windows, ldap or other).

Do I need to create an av-pair in IOS-radius, VSA 26 which contains the alcatel IP phone string, or is there an other option to do this ? This would be neccesery because in the future we would do dot1x authentication for other devices as well.


Many thanks,

Lieven Stubbe

Belgian railways

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
smahbub Tue, 05/20/2008 - 09:04
User Badges:
  • Silver, 250 points or more

Using proxy, ACS automatically forwards an authentication request from AAA clients to AAA servers. After the request has been successfully authenticated, the authorization privileges that you configured for the user on the remote AAA server are passed back to the original ACS, where the AAA client applies the user profile information for that session.


Actions

This Discussion