Cisco Systems 6921 manual Security Restrictions

Page 34

Chapter

Overview of Configuring and Installing Cisco Unified IP Phones

•Configure PC Port—The 802.1X standard does not take into account the use of VLANs and thus recommends that only a single device should be authenticated to a specific switch port. However, some switches (including Cisco Catalyst switches) support multi-domain authentication. The switch configuration determines whether you can connect a PC to the phone’s PC port.

–Enabled—If you are using a switch that supports multi-domain authentication, you can enable the PC port and connect a PC to it. In this case, Cisco Unified IP Phones support proxy EAPOL-Logoff to monitor the authentication exchanges between the switch and the attached PC. For more information about IEEE 802.1X support on the Cisco Catalyst switches, refer to the Cisco Catalyst switch configuration guides at:

http://www.cisco.com/en/US/products/hw/switches/ps708/tsd_products_support_series_home. html

–Disabled—If the switch does not support multiple 802.1X-compliant devices on the same port, you should disable the PC Port when 802.1X authentication is enabled. See the “Security Configuration Menu” section on page 4-9for more information. If you do not disable this port and subsequently attempt to attach a PC to it, the switch will deny network access to both the phone and the PC.

•Configure Voice VLAN—Because the 802.1X standard does not account for VLANs, you should configure this setting based on the switch support.

–Enabled—If you are using a switch that supports multi-domain authentication, you can continue to use the voice VLAN.

–Disabled—If the switch does not support multi-domain authentication, disable the Voice VLAN and consider assigning the port to the native VLAN. See the “Security Configuration Menu” section on page 4-9for more information.

•Enter MD5 Shared Secret—If you disable 802.1X authentication or perform a factory reset on the phone, the previously configured MD5 shared secret is deleted. See the “802.1X Authentication and Status” section on page 4-9for more information.

Security Restrictions

A user cannot barge into an encrypted call if the phone that is used to barge is not configured for encryption. When barge fails in this case, a reorder tone (fast busy tone) plays on the phone on which the user initiated the barge.

If the initiator phone is configured for encryption, the barge initiator can barge into a nonsecure call from the encrypted phone. After the barge occurs, Cisco Unified CM classifies the call as nonsecure.

If the initiator phone is configured for encryption, the barge initiator can barge into an encrypted call, and the phone indicates that the call is encrypted.

Overview of Configuring and Installing Cisco Unified IP Phones

When deploying a new IP telephony system, system administrators and network administrators must complete several initial configuration tasks to prepare the network for IP telephony service. For information and a checklist for setting up and configuring a Cisco IP telephony network, go to the System Configuration Overview chapter in Cisco Unified Communications Manager System Guide.

After you have set up the IP telephony system and configured system-wide features in Cisco Unified CM, you can add IP phones to the system.

 

 

 

Cisco Unified IP Phone 6921, 6941, 6945, and 6961 Administration Guide for Cisco Unified Communications Manager 8.5 (SCCP and SIP)

 

 

 

 

1-22

 

OL-23769-01

 

 

 

 

Page 33 Page 35
Image 34
Page 33 Page 35
Contents Americas Headquarters Text Part Number OL-23769-01Page N T E N T S Footstand Configuring Features, Templates, Services, and Users Manager How Users Obtain Support for the Cisco Unified IP Phone A-1 Viii Organization OverviewAudience Chapter DescriptionRelated Documentation Cisco Unified IP Phone 6900 SeriesConvention Description Document ConventionsCisco Product Security Overview Boldface fontItalic screen font Information you must enter is in boldface screen fontYou press the D key An Overview of the Cisco Unified IP Phone Understanding the Cisco Unified IP Phones 6921, 6941, 6945, 1describes the buttons on the Cisco Unified IP PhoneFeatures on the Cisco Unified IP Phone 2describes the buttons on the Cisco Unified IP Phone 6941 Cisco Unified IP Phone 6941Chapter Features on the Cisco Unified IP Phone 6941 3shows the main components of the Cisco Unified IP Phone 3describes the buttons on the Cisco Unified IP PhoneFeatures on the Cisco Unified IP Phone Networking Protocol Purpose Usage Notes What Networking Protocols are Used?CDP Dhcp Dynamic Host Configuration Protocol chapterAuthentication on Cisco Unified IP Phones section Communications Manager System GuideNologieswhitepaper0900aecd804cd46d.shtml See the LLDP-MED and Cisco Discovery ProtocolWhite paper SIPSystem Guide Communications Manager Security GuideCisco Unified Communications Manager Related TopicsConfiguring Telephony Features Feature OverviewRelated Topic Understanding Security Features for Cisco Unified IP Phones Providing Users with Feature InformationTopic Reference Refer to the Troubleshooting Guide for Cisco UnifiedCommunications Manager Feature Description Overview of Supported Security FeaturesInformation Access section on Security Profiles section on page 1-18for more informationIdentifying Encrypted Phone Calls Configuration Menu section onUnderstanding Security Profiles Unified IP Phones section on page 1-21for more informationEstablishing and Identifying Secure Conference Calls Initiator’s Phone Feature UsedResults of Action Supporting 802.1X Authentication on Cisco Unified IP Phones OverviewSecurity Restrictions Configuring Cisco Unified IP Phones in Cisco Unified CM Manager Administration Guide Communications Manager Features and Services GuideConfiguration chapter in the Cisco Communications Purpose For More InformationCommunications Manager Administration Guide, Cisco Administration GuideCommunications Manager Administration Guide Manager Administration Guide, IP Phone ServicesTask Purpose For More Information Communications Manager Administration Guide, EndUnified Communications Manager See the Installing the Cisco Unified IP Phone section Installing Cisco Unified IP PhonesSee the Providing Power to the Cisco Unified IP Phone See the Footstand section onUser Guide for Cisco Unified Communications Refer to Cisco Unified IP Phone 6921, 6941,Manager User Guide Administration and System Guides Terminology DifferencesChapter Terminology Differences A P T E R Related Topic Providing Power to the Cisco Unified IP Phone Understanding the Phone Startup Process, Network Setup Menu,Power Outage Power GuidelinesPower Type Guidelines Understanding Phone Configuration Files Obtaining Additional Information about PowerChapter Understanding Phone Configuration Files Purpose Related Topics Resolving Startup Problems,Understanding the Phone Startup Process Adding Phones to the Cisco Unified CM DatabaseAdding Phones to the Cisco Unified CM Database Requesting the Configuration FileOther information for the phone Contacting Cisco Unified CM Requires MAC Method Address? Administration Tool BAT updates informationAdding Phones with Auto-Registration TapsAdding Phones with Cisco Unified CM Administration Adding Phones with Auto-Registration and TapsAdding Phones with BAT Using Cisco Unified IP Phones with Different ProtocolsConverting a New Phone from Sccp to SIP Procedure Deploying a Phone in an Sccp and SIP EnvironmentDetermining the MAC Address for a Cisco Unified IP Phone OL-23769-01 Before You Begin Network RequirementsNetwork and Access Ports Cisco Unified Communications Manager ConfigurationNetwork and Access Ports, Handset, Speakerphone, Headset, Speakerphone HandsetHeadset Audio Quality See the Headset section on page 3-3for supported Installing the Cisco Unified IP PhoneSee the Network and Access Ports section on See the Adding Phones to the Cisco Unified CMCisco Unified IP Phone 6921 and 6941 Cable Connections Cisco Unified IP Phone 6961 Cable Connections Cisco Unified IP Phone 6945 Cable Connections Reducing Power Consumption on the Phone FootstandCisco Unified IP Phone 6921 199283 Cisco Higher Viewing Angle Verifying the Phone Startup Process Mounting the Phone to the WallLower Viewing Angle Configuring Security on the Cisco Unified IP Phone Configuring Startup Network SettingsHold Mute Speaker Before You Begin Configuring Settings on the Cisco Unified IP Phone Configuration Menus on the Cisco Unified IP PhonePress the Applications button Displaying a Configuration MenuSelect Admin Settings Unlocking and Locking Options, Editing Values,Unlocking and Locking Options Network Setup Menu, IPv4 Setup Menu Options,Editing Values Option Description To Change Network Setup MenuSelect PC Vlan Configure both to auto-negotiateConfiguration System Enterprise PhoneDevice Phone Phone IPv4 Setup Menu OptionsDiscovery protocol, which should match the protocol IPv4 Setup Menu Options Related Topics Device Phone Phone Configuration Security Configuration Menu802.1X Authentication and Status Trust List MenuDevice Authentication Choose Applications Admin SettingsSecurity Config 802.1X Authentication Settings Security ConfigurationConfiguring Features, Templates, Services, and Users Choose System Service Parameter and select Feature Description Configuration ReferenceSet Builtin Bridge Enable to On Configuration Device Device Settings Configuration System Enterprise PhoneCommon Phone Profile Administration Guide, Directory Number Features and Services Guide, Cisco CallFeatures and Services Guide, Call Display Forward Maximum Hop Count service parameterConfiguring the Phone to Support Call Services Guide, Call Park and Directed CallServices Guide, Monitoring and Recording Understanding Directory NumbersUnified Communications Manager Features Services GuideExtension Mobility chapter in the Cisco Services Guide, Cisco Web Dialer CMCServices Guide, Immediate Divert Services Guide, Do Not DisturbManager Features and Services Guide, Hold Feature, see the Cisco Unified CommunicationsAdministration Guide, Hunt Group Refer to Cisco Unified Communications Communications Manager FeatureServices Guide, Intercom Manager System Guide, Cisco Unified IPAdministration Guide, Message Waiting Features and Services Guide, MaliciousServices Guide, Music On Hold Features and Services Guide, Quality Features and Services Guide BargeAdministration Guide, Phone Button Unified IP Phone 6921, 6941, 6945,Bridge Configuration Overview of Supported Security FeaturesAdministration Guide, Conference Creating Custom Phone Rings sectionServices Administration Guide, Cisco Voice-Mail Administration Guide, Time PeriodJoin and Direct Transfer Policy Configuring Personal Directory Configuring Corporate and Personal DirectoriesConfiguring Corporate Directories Personal Directory consists of the following featuresModifying Phone Button Templates Click Save Configuring Softkey Templates Unified IP Phone Softkey Template Feature Configuration 6961Supported as a Softkey on Cisco DNDSetting Up Services Adding Users to Cisco Unified Communications Manager Giving Users Access to the User Options Web PagesManaging the User Options Web Pages Enter the appropriate search criteria and click Find Click Add SelectedClick Save Selected/Changes Specifying Options that Appear on the User Options Web Pages Configuring the Phone to Support Call Waiting OL-23769-01 Customizing and Modifying Configuration Files Customizing the Cisco Unified IP PhoneCreating Custom Phone Rings DistinctiveRingList File Format RequirementsConfiguring a Custom Phone Ring PCM File Requirements for Custom Ring TypesConfiguring the Idle Display Field Description Page Model Information Screen Model Information Screen, Status Menu,Status Menu Status Messages ScreenSelect Status Messages Administration section on page 2-10for detailsNetwork Setup Menu section on page 4-4for Message Description Possible Explanation and ActionIf you are using DHCP, check the Dhcp server Address. See the Network Setup Menu sectionNetwork Setup Menu section on On page 4-4for details on assigning a static IPSetup Menu section on page 4-4for details on Menu section on page 4-4for detailsNetwork Statistics Screen Select Status Network Statistics Call Statistics Screen Port IPv4Call Statistics screen displays these items Select StatusSelect Call Statistics Voice Quality MetricsVoice stream Security ConfigurationMOS LQK Cisco Unified IP Phone usesSecurity Configuration screen displays these items OL-23769-01 Monitoring the Cisco Unified IP Phone Remotely Accessing the Web Page for a Phone Http//IPaddressDevice Information Disabling and Enabling Web Page AccessChoose Device Phone Network Setup UDIDescription Description Network Statistics Lldp Number of Lldp TLVs that are not recognized on the phoneDevice Logs Streaming StatisticsStreaming Statistics Area Items Stream Configuring Settings on the Cisco Unified IP Phone chapter Troubleshooting and Maintenance Resolving Startup ProblemsChapter Resolving Startup Problems Identifying Error Messages Verifying DNS Settings Choose Tools Control Center Feature ServicesSymptom Cisco Unified IP Phone Unable to Obtain IP Address Experiencing problemsVerifying the Physical Connection Cisco Unified IP Phone Resets UnexpectedlyVerifying Dhcp Settings Identifying Intermittent Network OutagesVerifying that the Phones Have Not Been Intentionally Reset Checking Static IP Address SettingsVerifying the Voice Vlan Configuration Eliminating DNS or Other Connectivity ErrorsChecking Power Connection Troubleshooting Cisco Unified IP Phone SecurityProblem Possible Cause General Troubleshooting Tips Locking Options section on page 4-3 for details Summary ExplanationDisplaying these statistics To resolve this problem, re-enable the port from the switch HalfduxcollisionexceedthresholdPerforming a Factory Reset Resetting or Restoring the Cisco Unified IP PhonePerforming a Basic Reset Operation Performing ExplanationMonitoring the Voice Quality of Calls Troubleshooting Tips Metric Change ConditionCleaning the Cisco Unified IP Phone Where to Go for More Troubleshooting InformationCisco Unified IP Phone Troubleshooting Resources Chapter Cleaning the Cisco Unified IP Phone Providing Information to Users Via a Website How Users Access a Voice Messaging System How Users Configure Personal Directory Entries Installing the SynchronizerConfiguring the Synchronizer Installing the Cisco Unified CM Locale Installer Support for International Call LoggingAppendix Support for International Call Logging Physical and Operating Environment Specifications Specification Value or RangeNetwork Port Connector Cable SpecificationsNetwork and Access Port Pinouts Pin Number FunctionAccess Port Connector Table C-3describes the access port connector pinoutsAppendix Network and Access Port Pinouts Basic Phone Administration Steps Example User Information for these ProceduresChoose System Ldap Ldap Directory Adding a User to Cisco Unified CMAdding a User From an External Ldap Directory Click Perform Full Sync NowProceed to the section Configuring the Phone, page D-3 Configuring the PhoneExample doe Appendix Configuring the Phone Appendix Configuring the Phone Choose User Management End User Performing Final End User Configuration StepsAssociate the user with the device Click Device AssociationsInstalling the Wall Mount Kit for the Cisco Installing the Bracket Figure E-2 Mounting the Wall Bracket Figure E-3 Attaching the Phone Bracket Figure E-4 Preparing the Handset Hook Figure E-5 Attaching the Cables Figure E-6 Attaching the Phone to the Wall Bracket Appendix Installing the Bracket Cisco Unified IP Phone Non-Lockable Wall Mount ADA Non-Lockable Wall Mount Kit for 6900 SeriesComponents Following figure shows the contents of the Wall Mount kitPackage includes these items Install Non-Lockable Wall Mount Kit for Phone Before You BeginFigure F-4 Mount the Wall Bracket Figure F-5 Attach Phone Bracket Proceed to of Installing the Bracket, page E-2 Remove Phone from Non-Lockable Wall MountFigure F-7 Figure F-8 Feature Support by Protocol for the Cisco Protocol FeaturesAppendix Sccp SIP Tool Barge Access port NumericsConference joining Configurable call forward display Configuration file CreatingData Vlan Days Backlight Not Active Debug Display web DistinctiveRingList.xml file format DivertContacts Fast dials Address book Fast dial serviceFeature buttons Applications Navigation Programmable line buttonSpeed dialing G-4 Host Name Time-of-Day Routing Services URL button Hold button, descriptionShared line Hold reversion HttpIP address, troubleshooting 9-3IPv4 Configuration SW Port ConfigurationCast CDP Dhcp Http Rtcp RTP Sccp SIP Srtp TCP Tftp TLS UDP Network Configuration webPrivate Line Automated Ringdown Plar Settings menu access Sccp Secure conference 5-13,G-4Stream 1 web Srst SrtpStatus messages Status Messages screen Status Messages web LLDP-MEDTransfer button, description Time zone update TLS TransferVlan Wideband codec XmlDefault.cnf.xml IN-11IN-12
Related manuals
Manual 2 pages 30.58 Kb Manual 120 pages 47.73 Kb Manual 2 pages 1.25 Kb Manual 120 pages 3.18 Kb Manual 2 pages 61.39 Kb
Top Page Image Contents