[Network Access Control - 802.1x] - Generating the certificate

[Och]

Hi all,

hope you're well.

We are currently implementing a Cisco NAC solution and I was wondering how to authenticate the alcatel phones (IPTouch 4038 and 8038). I read that the mac address bypass method and the profiling seems to work but I would like to use TLS and certificates.

We have our own PKI and Certificate Authority infrastructure and I would like to generate the certificate for the phones instead of using the certificate provided by Alcatel because we don't want to allow a request of validation from our voice network to the outside world.

Did someone already try this ? Do you know if it is possible ?

And my second question is about how deploy the certificate config on all our phones. As we have more than 8000 phones we prefer of course use an automated method.

Many thanks in advance for your help

[technicus]

Hello,

Try to read this post, maybe that can help you:

viewtopic.php?f=262&t=23985&hilit=802.1x&start=10