Page 21
Chapter
Understanding Security Features for Cisco Unified IP Phones
Configuring Network Parameters Using the Cisco Unified IP Phone
You can configure parameters such as DHCP, TFTP, and IP settings on the phone itself. You can also obtain statistics about a current call or firmware versions on the phone.
For more information about configuring features and viewing statistics from the phone, see Chapter 4, “Configuring Settings on the Cisco Unified IP Phone” and see Chapter 7, “Viewing Model Information, Status, and Statistics on the Cisco Unified IP Phone.”
Providing Users with Feature Information
If you are a system administrator, you are likely the primary source of information for Cisco Unified IP Phone users in your network or company. To ensure that you distribute the most current feature and procedural information, familiarize yourself with Cisco Unified IP Phone documentation on the Cisco Unified IP Phone web site:
http://www.cisco.com/en/US/products/ps10451/tsd_products_support_series_home.html
From this site, you can view various user documentation.
In addition to providing documentation, it is important to inform users of available Cisco Unified IP Phone features—including those specific to your company or network—and of how to access and customize those features, if appropriate.
For a summary of some of the key information that phone users need their system administrators to provide, see Appendix A, “Providing Information to Users Via a Website.”
Understanding Security Features for Cisco Unified IP Phones
Implementing security in the Cisco Unified CM system prevents identity theft of the phone and Cisco Unified CM server, prevents data tampering, and prevents call signaling and media stream tampering.
To alleviate these threats, the Cisco IP telephony network establishes and maintains secure communication streams between a phone and the server, digitally signs files before they are transferred to a phone, and encrypts media streams and call signaling between Cisco Unified IP phones.
The Cisco Unified IP Phone 8941 and 8945 use the Phone security profile, which defines whether the device is nonsecure or encrypted. For information on applying the security profile to the phone, refer to the Cisco Unified Communications Manager Security Guide.
If you configure security-related settings in Cisco Unified CM Administration, the phone configuration file will contain sensitive information. To ensure the privacy of a configuration file, you must configure it for encryption. For detailed information, refer to the “Configuring Encrypted Phone Configuration Files” chapter in Cisco Unified Communications Manager Security Guide.
Table 1-3shows where you can find additional information about security in this and other documents.
Cisco Unified IP Phone 8941 and 8945 Administration Guide for Cisco Unified Communications Manager 8.5 (SCCP and SIP)
Contents
Text Part Number OL-20851-01
Americas Headquarters
Page
N T E N T S
Power Outage
802.1X Authentication and Status
Troubleshooting and Maintenance
Cable Specifications C-2 Network and Access Port Pinouts C-2
Viii
Audience
Overview
Organization
Chapter Description
Related Documentation
Cisco Unified Communications Manager Administration
Cisco Unified IP Phone 8900 Series
Cisco Unified Communications Manager Business Edition
Cisco Product Security Overview
Document Conventions
Convention Description
Boldface font
Important Safety Instructions
An Overview of the Cisco Unified IP Phone
Understanding the Cisco Unified IP Phones 8941
Features on the Cisco Unified IP Phone 8941
Networking Protocol Purpose Usage Notes
What Networking Protocols are Used?
Authentication on Cisco Unified IP Phones section
Dynamic Host Configuration Protocol chapter
CDP
Dhcp
See the LLDP-MED and Cisco Discovery Protocol
Nologieswhitepaper0900aecd804cd46d.shtml
SIP
Chapter in the Cisco Unified Communications
Communications Manager Security Guide
Manager System Guide
Related Topics
Feature Overview
Configuring Telephony Features
Related Topic
Providing Users with Feature Information
Understanding Security Features for Cisco Unified IP Phones
Refer to the Troubleshooting Guide for Cisco Unified
Topic Reference
Communications Manager
Feature Description
Overview of Supported Security Features
Security Profiles section on page 1-13for more information
Access section on
Understanding Security Profiles
Configuration Menu section on
Identifying Encrypted Phone Calls
Unified IP Phones section on page 1-16for more information
Establishing and Identifying Secure Audio Conference Calls
Feature Used
Initiator’s Phone
Results of Action
Overview
Supporting 802.1X Authentication on Cisco Unified IP Phones
Security Restrictions
Configuring Cisco Unified IP Phones in Cisco Unified CM
Purpose For More Information
Communications Manager Administration Guide
Communications Manager Administration Guide, Cisco
Cisco Communications Manager
Communications Manager Administration Guide, End
Task Purpose For More Information
Unified Communications Manager
See the Providing Power to the Cisco Unified IP Phone
Installing Cisco Unified IP Phones
See the Installing the Cisco Unified IP Phone section
See the Footstand section on
Guide for Cisco Unified Communications Manager
Refer to Cisco Unified IP Phone 8941 and 8945 User
Terminology Differences
User Guide Administration and System Guides
A P T E R
Related Topic
Understanding the Phone Startup Process, Network Setup Menu,
Providing Power to the Cisco Unified IP Phone
Power Guidelines
Power Outage
Power Type Guidelines
Obtaining Additional Information about Power
Understanding Phone Configuration Files
Understanding the Phone Startup Process
Resolving Startup Problems,
Purpose Related Topics
Adding Phones to the Cisco Unified CM Database
Refer to the Cisco Unified Communications Manager
Adding Phones with Auto-Registration
Adding Phones to the Cisco Unified CM Database
Requires MAC Method Address?
Taps
Adding Phones with Auto-Registration and Taps
Adding Phones with BAT
Adding Phones with Cisco Unified CM Administration
Determining the MAC Address for a Cisco Unified IP Phone
OL-20851-01
Network Requirements
Before You Begin
Cisco Unified Communications Manager Configuration
Network and Access Ports
Network and Access Ports, Handset, Speakerphone, Headset,
Handset
Speakerphone
Headset
Audio Quality Subjective to the User
See the Network and Access Ports section on
Installing the Cisco Unified IP Phone
See the Headset section on page 3-3for supported
See the Adding Phones to the Cisco Unified CM
Cisco Unified IP Phone 8941 and 8945 Cable Connections
Footstand
Reducing Power Consumption on the Phone
Chapter Footstand
Higher Viewing Angle
Verifying the Phone Startup Process
Lower Viewing Angle
Hold Mute Speaker
Configuring Startup Network Settings
Configuring Security on the Cisco Unified IP Phone
Before You Begin
Procedure
Configuration Menus on the Cisco Unified IP Phone
Configuring Settings on the Cisco Unified IP Phone
Displaying a Configuration Menu
Select Administrator Settings
Unlocking and Locking Options, Editing Values,
Network Setup Menu, IPv4 Setup Menu Options,
Unlocking and Locking Options
Editing Values
Network Setup Menu
Option Description To Change
Select
Configuration
PC Vlan
Device Phone Phone
IPv4 Setup Menu Options
Related Topics
802.1X Authentication and Status
Security Configuration Menu
Device Phone Phone Configuration
Trust List Menu
Settings Security Config
Choose Applications Administrator
Authentication Device Authentication
Settings Security Setup
OL-20851-01
Configuring Features, Templates, Services, and Users
Feature Description Configuration Reference
Choose System Service Parameter and select
Set Builtin Bridge Enable to On
Configuration System Enterprise Phone
Configuration Device Device Settings
Common Phone Profile
Features and Services Guide, Call Display
Features and Services Guide, Cisco Call
Administration Guide, Directory Number
Forward Maximum Hop Count service parameter
Services Guide, Monitoring and Recording
Services Guide, Call Park and Directed Call
Understanding Directory Numbers
Park
Numbers
System Guide, Understanding Directory
Services Guide
Unified Communications Manager Features
Services Guide, Cisco Web Dialer
CMC
Services Guide, Do Not Disturb
Services Guide, Immediate Divert
Feature, see the Cisco Unified Communications
Manager Features and Services Guide, Hold
Administration Guide, Hunt Group
Services Guide, Intercom
Communications Manager Feature
Refer to Cisco Unified Communications
Manager System Guide, Cisco Unified IP
Features and Services Guide, Malicious
Administration Guide, Message Waiting
Services Guide, Music On Hold
Administration Guide, Phone Button
Features and Services Guide Barge
Features and Services Guide, Quality
Unified IP Phone 8941 and 8945 User Guide
Administration Guide, Conference
Overview of Supported Security Features
Bridge Configuration
Creating Custom Phone Rings section
Services
Administration Guide, Time Period
Administration Guide, Cisco Voice-Mail
Bridge Configuration chapter
Port Configuration
Join and Direct Transfer Policy
Configuring Corporate and Personal Directories
Configuring Corporate Directories
Configuring Personal Directory
Synchronizer
Modifying Phone Button Templates
For PAB, enter the following URL
Configuring Softkey Templates
Supported as a
DND
Setting Up Services
Adding Users to Cisco Unified Communications Manager
Giving Users Access to the User Options Web Pages
Managing the User Options Web Pages
Click Add Selected
Click Device Association
Enter the appropriate search criteria and click Find
Click Save Selected/Changes
Chapter Managing the User Options Web Pages
Chapter Managing the User Options Web Pages
Customizing the Cisco Unified IP Phone
Customizing and Modifying Configuration Files
DistinctiveRingList File Format Requirements
Creating Custom Phone Rings
PCM File Requirements for Custom Ring Types
Configuring a Custom Phone Ring
Configuring the Idle Display
Field Description
OL-20851-01
Model Information Screen, Status Menu,
Model Information Screen
Status Menu
Status Messages Screen
Select Status Messages
Network Setup Menu section on page 4-4for
Phones with Cisco Unified CM Administration
Address. See the Network Setup Menu section
Message Description Possible Explanation and Action
Menu section on page 4-4for details
Network Setup Menu section on
Setup Menu section on page 4-4for details on
Select Status Network Statistics
Network Statistics Screen
Dhcp Reboot
Dhcp Disabled
Dhcp Waiting Coldboot Timeout
SET Dhcp Coldboot
Select Call Statistics
Call Statistics Screen
MOS LQK
Voice Quality Metrics
Select Administrator Settings Select Security Setup
Security Configuration
Monitoring the Cisco Unified IP Phone Remotely
Http//IPaddress
Accessing the Web Page for a Phone
Disabling and Enabling Web Page Access
Device Information
Choose Device Phone
UDI
Network Setup
Description
Description
Network Statistics
Lldp
Streaming Statistics
Device Logs
Stream
Streaming Statistics
Configuring Settings on the Cisco Unified IP Phone chapter
Resolving Startup Problems
Troubleshooting and Maintenance
Chapter Resolving Startup Problems
Identifying Error Messages
Choose Tools Control Center Feature Services
Verifying DNS Settings
Symptom Cisco Unified IP Phone Unable to Obtain IP Address
Verifying Dhcp Settings
Cisco Unified IP Phone Resets Unexpectedly
Verifying the Physical Connection
Identifying Intermittent Network Outages
Verifying the Voice Vlan Configuration
Checking Static IP Address Settings
Verifying that the Phones Have Not Been Intentionally Reset
Eliminating DNS or Other Connectivity Errors
Troubleshooting Cisco Unified IP Phone Security
Checking Power Connection
Problem Possible Cause
General Troubleshooting Tips
Locking Options section on page 4-3 for details
Summary Explanation
Halfduxcollisionexceedthreshold
Performing a Basic Reset
Resetting or Restoring the Cisco Unified IP Phone
Performing a Factory Reset
Operation Performing Explanation
Monitoring the Voice Quality of Calls
Metric Change Condition
Troubleshooting Tips
Cleaning the Cisco Unified IP Phone
Where to Go for More Troubleshooting Information
Chapter Cleaning the Cisco Unified IP Phone
Providing Information to Users Via a Website
How Users Access a Voice Messaging System
Installing the Synchronizer
How Users Configure Personal Directory Entries
Programs Cisco Systems TabSync
Configuring the Synchronizer
Support for International Call Logging
Installing the Cisco Unified CM Locale Installer
OL-20851-01
Specification Value or Range
Physical and Operating Environment Specifications
Network and Access Port Pinouts
Cable Specifications
Network Port Connector
Pin Number Function
Access Port Connector
OL-20851-01
Example User Information for these Procedures
Basic Phone Administration Steps
Adding a User From an External Ldap Directory
Adding a User to Cisco Unified CM
Choose System Ldap Ldap Directory
Click Perform Full Sync Now
Configuring the Phone
Proceed to the section Configuring the Phone, page D-3
Example doe
Appendix Configuring the Phone
Appendix Configuring the Phone
Performing Final End User Configuration Steps
Choose User Management End User
Click Device Associations
Sccp SIP
Protocol Features
Appendix
EFT Draft Cisco Confidential
Tool
Numerics
IN-2
IN-3
IN-4
IN-5
LLDP-MED
Cast CDP Dhcp Http Rtcp RTP Sccp SIP Srtp TCP Tftp TLS UDP
MIC
IN-7
IN-8
Srst Srtp
IN-9
Vlan