Cisco Systems 8945, 8941 manual Understanding Security Features for Cisco Unified IP Phones

Page 21

Chapter

Understanding Security Features for Cisco Unified IP Phones

Configuring Network Parameters Using the Cisco Unified IP Phone

You can configure parameters such as DHCP, TFTP, and IP settings on the phone itself. You can also obtain statistics about a current call or firmware versions on the phone.

For more information about configuring features and viewing statistics from the phone, see Chapter 4, “Configuring Settings on the Cisco Unified IP Phone” and see Chapter 7, “Viewing Model Information, Status, and Statistics on the Cisco Unified IP Phone.”

Providing Users with Feature Information

If you are a system administrator, you are likely the primary source of information for Cisco Unified IP Phone users in your network or company. To ensure that you distribute the most current feature and procedural information, familiarize yourself with Cisco Unified IP Phone documentation on the Cisco Unified IP Phone web site:

http://www.cisco.com/en/US/products/ps10451/tsd_products_support_series_home.html

From this site, you can view various user documentation.

In addition to providing documentation, it is important to inform users of available Cisco Unified IP Phone features—including those specific to your company or network—and of how to access and customize those features, if appropriate.

For a summary of some of the key information that phone users need their system administrators to provide, see Appendix A, “Providing Information to Users Via a Website.”

Understanding Security Features for Cisco Unified IP Phones

Implementing security in the Cisco Unified CM system prevents identity theft of the phone and Cisco Unified CM server, prevents data tampering, and prevents call signaling and media stream tampering.

To alleviate these threats, the Cisco IP telephony network establishes and maintains secure communication streams between a phone and the server, digitally signs files before they are transferred to a phone, and encrypts media streams and call signaling between Cisco Unified IP phones.

The Cisco Unified IP Phone 8941 and 8945 use the Phone security profile, which defines whether the device is nonsecure or encrypted. For information on applying the security profile to the phone, refer to the Cisco Unified Communications Manager Security Guide.

If you configure security-related settings in Cisco Unified CM Administration, the phone configuration file will contain sensitive information. To ensure the privacy of a configuration file, you must configure it for encryption. For detailed information, refer to the “Configuring Encrypted Phone Configuration Files” chapter in Cisco Unified Communications Manager Security Guide.

Table 1-3shows where you can find additional information about security in this and other documents.

Cisco Unified IP Phone 8941 and 8945 Administration Guide for Cisco Unified Communications Manager 8.5 (SCCP and SIP)

 

OL-20851-01

1-9

 

 

 

Image 21
Contents Text Part Number OL-20851-01 Americas HeadquartersPage N T E N T S Power Outage 802.1X Authentication and Status Troubleshooting and Maintenance Cable Specifications C-2 Network and Access Port Pinouts C-2 Viii Audience OverviewOrganization Chapter DescriptionRelated Documentation Cisco Unified Communications Manager AdministrationCisco Unified IP Phone 8900 Series Cisco Unified Communications Manager Business EditionCisco Product Security Overview Document ConventionsConvention Description Boldface fontImportant Safety Instructions An Overview of the Cisco Unified IP Phone Understanding the Cisco Unified IP Phones 8941 Features on the Cisco Unified IP Phone 8941 Networking Protocol Purpose Usage Notes What Networking Protocols are Used?Authentication on Cisco Unified IP Phones section Dynamic Host Configuration Protocol chapterCDP DhcpSee the LLDP-MED and Cisco Discovery Protocol Nologieswhitepaper0900aecd804cd46d.shtmlSIP Chapter in the Cisco Unified Communications Communications Manager Security GuideManager System Guide Related TopicsFeature Overview Configuring Telephony FeaturesRelated Topic Providing Users with Feature Information Understanding Security Features for Cisco Unified IP PhonesRefer to the Troubleshooting Guide for Cisco Unified Topic ReferenceCommunications Manager Feature Description Overview of Supported Security FeaturesSecurity Profiles section on page 1-13for more information Access section onUnderstanding Security Profiles Configuration Menu section onIdentifying Encrypted Phone Calls Unified IP Phones section on page 1-16for more informationEstablishing and Identifying Secure Audio Conference Calls Feature Used Initiator’s PhoneResults of Action Overview Supporting 802.1X Authentication on Cisco Unified IP PhonesSecurity Restrictions Configuring Cisco Unified IP Phones in Cisco Unified CM Purpose For More Information Communications Manager Administration Guide Communications Manager Administration Guide, CiscoCisco Communications Manager Communications Manager Administration Guide, End Task Purpose For More InformationUnified Communications Manager See the Providing Power to the Cisco Unified IP Phone Installing Cisco Unified IP PhonesSee the Installing the Cisco Unified IP Phone section See the Footstand section onGuide for Cisco Unified Communications Manager Refer to Cisco Unified IP Phone 8941 and 8945 UserTerminology Differences User Guide Administration and System GuidesA P T E R Related Topic Understanding the Phone Startup Process, Network Setup Menu, Providing Power to the Cisco Unified IP PhonePower Guidelines Power OutagePower Type Guidelines Obtaining Additional Information about Power Understanding Phone Configuration FilesUnderstanding the Phone Startup Process Resolving Startup Problems,Purpose Related Topics Adding Phones to the Cisco Unified CM DatabaseRefer to the Cisco Unified Communications Manager Adding Phones with Auto-Registration Adding Phones to the Cisco Unified CM DatabaseRequires MAC Method Address? TapsAdding Phones with Auto-Registration and Taps Adding Phones with BAT Adding Phones with Cisco Unified CM AdministrationDetermining the MAC Address for a Cisco Unified IP Phone OL-20851-01 Network Requirements Before You BeginCisco Unified Communications Manager Configuration Network and Access PortsNetwork and Access Ports, Handset, Speakerphone, Headset, Handset SpeakerphoneHeadset Audio Quality Subjective to the User See the Network and Access Ports section on Installing the Cisco Unified IP PhoneSee the Headset section on page 3-3for supported See the Adding Phones to the Cisco Unified CMCisco Unified IP Phone 8941 and 8945 Cable Connections Footstand Reducing Power Consumption on the PhoneChapter Footstand Higher Viewing Angle Verifying the Phone Startup Process Lower Viewing AngleHold Mute Speaker Configuring Startup Network Settings Configuring Security on the Cisco Unified IP PhoneBefore You Begin Procedure Configuration Menus on the Cisco Unified IP Phone Configuring Settings on the Cisco Unified IP PhoneDisplaying a Configuration Menu Select Administrator SettingsUnlocking and Locking Options, Editing Values, Network Setup Menu, IPv4 Setup Menu Options, Unlocking and Locking OptionsEditing Values Network Setup Menu Option Description To ChangeSelect Configuration PC VlanDevice Phone Phone IPv4 Setup Menu Options Related Topics 802.1X Authentication and Status Security Configuration MenuDevice Phone Phone Configuration Trust List MenuSettings Security Config Choose Applications AdministratorAuthentication Device Authentication Settings Security SetupOL-20851-01 Configuring Features, Templates, Services, and Users Feature Description Configuration Reference Choose System Service Parameter and selectSet Builtin Bridge Enable to On Configuration System Enterprise Phone Configuration Device Device SettingsCommon Phone Profile Features and Services Guide, Call Display Features and Services Guide, Cisco CallAdministration Guide, Directory Number Forward Maximum Hop Count service parameterServices Guide, Monitoring and Recording Services Guide, Call Park and Directed CallUnderstanding Directory Numbers ParkNumbers System Guide, Understanding DirectoryServices Guide Unified Communications Manager FeaturesServices Guide, Cisco Web Dialer CMCServices Guide, Do Not Disturb Services Guide, Immediate DivertFeature, see the Cisco Unified Communications Manager Features and Services Guide, HoldAdministration Guide, Hunt Group Services Guide, Intercom Communications Manager FeatureRefer to Cisco Unified Communications Manager System Guide, Cisco Unified IPFeatures and Services Guide, Malicious Administration Guide, Message WaitingServices Guide, Music On Hold Administration Guide, Phone Button Features and Services Guide BargeFeatures and Services Guide, Quality Unified IP Phone 8941 and 8945 User GuideAdministration Guide, Conference Overview of Supported Security FeaturesBridge Configuration Creating Custom Phone Rings sectionServices Administration Guide, Time Period Administration Guide, Cisco Voice-Mail Bridge Configuration chapterPort Configuration Join and Direct Transfer PolicyConfiguring Corporate and Personal Directories Configuring Corporate DirectoriesConfiguring Personal Directory Synchronizer Modifying Phone Button TemplatesFor PAB, enter the following URL Configuring Softkey Templates Supported as aDND Setting Up Services Adding Users to Cisco Unified Communications Manager Giving Users Access to the User Options Web Pages Managing the User Options Web PagesClick Add Selected Click Device Association Enter the appropriate search criteria and click FindClick Save Selected/Changes Chapter Managing the User Options Web Pages Chapter Managing the User Options Web Pages Customizing the Cisco Unified IP Phone Customizing and Modifying Configuration FilesDistinctiveRingList File Format Requirements Creating Custom Phone RingsPCM File Requirements for Custom Ring Types Configuring a Custom Phone RingConfiguring the Idle Display Field Description OL-20851-01 Model Information Screen, Status Menu, Model Information ScreenStatus Menu Status Messages ScreenSelect Status Messages Network Setup Menu section on page 4-4for Phones with Cisco Unified CM AdministrationAddress. See the Network Setup Menu section Message Description Possible Explanation and ActionMenu section on page 4-4for details Network Setup Menu section onSetup Menu section on page 4-4for details on Select Status Network Statistics Network Statistics ScreenDhcp Reboot Dhcp DisabledDhcp Waiting Coldboot Timeout SET Dhcp ColdbootSelect Call Statistics Call Statistics ScreenMOS LQK Voice Quality MetricsSelect Administrator Settings Select Security Setup Security ConfigurationMonitoring the Cisco Unified IP Phone Remotely Http//IPaddress Accessing the Web Page for a PhoneDisabling and Enabling Web Page Access Device InformationChoose Device Phone UDI Network SetupDescription Description Network Statistics Lldp Streaming Statistics Device LogsStream Streaming Statistics Configuring Settings on the Cisco Unified IP Phone chapter Resolving Startup Problems Troubleshooting and MaintenanceChapter Resolving Startup Problems Identifying Error Messages Choose Tools Control Center Feature Services Verifying DNS SettingsSymptom Cisco Unified IP Phone Unable to Obtain IP Address Verifying Dhcp Settings Cisco Unified IP Phone Resets UnexpectedlyVerifying the Physical Connection Identifying Intermittent Network OutagesVerifying the Voice Vlan Configuration Checking Static IP Address SettingsVerifying that the Phones Have Not Been Intentionally Reset Eliminating DNS or Other Connectivity ErrorsTroubleshooting Cisco Unified IP Phone Security Checking Power ConnectionProblem Possible Cause General Troubleshooting Tips Locking Options section on page 4-3 for details Summary ExplanationHalfduxcollisionexceedthreshold Performing a Basic Reset Resetting or Restoring the Cisco Unified IP PhonePerforming a Factory Reset Operation Performing ExplanationMonitoring the Voice Quality of Calls Metric Change Condition Troubleshooting TipsCleaning the Cisco Unified IP Phone Where to Go for More Troubleshooting InformationChapter Cleaning the Cisco Unified IP Phone Providing Information to Users Via a Website How Users Access a Voice Messaging System Installing the Synchronizer How Users Configure Personal Directory EntriesPrograms Cisco Systems TabSync Configuring the SynchronizerSupport for International Call Logging Installing the Cisco Unified CM Locale InstallerOL-20851-01 Specification Value or Range Physical and Operating Environment SpecificationsNetwork and Access Port Pinouts Cable SpecificationsNetwork Port Connector Pin Number FunctionAccess Port Connector OL-20851-01 Example User Information for these Procedures Basic Phone Administration StepsAdding a User From an External Ldap Directory Adding a User to Cisco Unified CMChoose System Ldap Ldap Directory Click Perform Full Sync NowConfiguring the Phone Proceed to the section Configuring the Phone, page D-3Example doe Appendix Configuring the Phone Appendix Configuring the Phone Performing Final End User Configuration Steps Choose User Management End UserClick Device Associations Sccp SIP Protocol FeaturesAppendix EFT Draft Cisco Confidential Tool Numerics IN-2 IN-3 IN-4 IN-5 LLDP-MEDCast CDP Dhcp Http Rtcp RTP Sccp SIP Srtp TCP Tftp TLS UDP MICIN-7 IN-8 Srst SrtpIN-9 Vlan
Related manuals
Manual 42 pages 53.39 Kb