Page 26
Chapter
Understanding Security Features for Cisco Unified IP Phones
In a secure call, a security tone plays at the beginning of a call to indicate that the other connected phone is also receiving and transmitting encrypted audio. For video calls, the user may first hear secure indication tone for the audio portion of the call and then nonsecure indication tone for overall nonsecure media. If your call is connected to a non-protected phone, the security tone does not play.
Note Secured calling is supported for connections between two phones only. Some features, such as conference calling, shared lines, and Cisco Extension Mobilityare not available when secured calling is configured.
Related Topic
•Understanding Security Profiles, page 1-13
•Understanding Security Features for Cisco Unified IP Phones, page 1-9
•Security Restrictions, page 1-17
Establishing and Identifying Secure Audio Conference Calls
You can initiate a secure conference audio call and monitor the security level of participants. A secure conference call is established using this process:
1.A user initiates the conference from a secure phone.
2.Cisco Unified CM assigns a secure conference bridge to the call.
3.As participants are added, Cisco Unified CM verifies the security mode of each phone and maintains the secure level for the conference.
4.The phone displays the security level of the conference call. A secure conference displays the
to the right of “Conference” on the phone screen.
Note There are interactions, restrictions, and limitations that affect the security level of the audio conference call depending on the security mode of the participant’s phones and the availability of secure conference bridges. See Table 1-5and Table 1-6for information about these interactions.
Establishing and Identifying Protected Calls
A protected call is established when your phone, and the phone on the other end, is configured for protected calling. The other phone can be in the same Cisco IP network, or on a network outside the IP network. Protected calls can only be made between two phones. Conference calls and other multiple-line calls are not supported.
A protected call is established using this process:
1.A user initiates the call from a protected phone (protected security mode).
2.The phone displays the icon (encrypted) on the phone screen. This icon indicates that the phone is configured for secure (encrypted) calls, but this does not mean that the other connected phone is also protected.
3.A security tone plays if the call is connected to another protected phone, indicating that both ends of the conversation are encrypted and protected. For video calls, the user may first hear secure indication tone for the audio portion of the call and then nonsecure indication tone for overall nonsecure media. If the call is connected to a non-protected phone, then the secure tone is not played.
| Cisco Unified IP Phone 8941 and 8945 Administration Guide for Cisco Unified Communications Manager 8.5 (SCCP and SIP) |
1-14 | OL-20851-01 |
Contents
Americas Headquarters
Text Part Number OL-20851-01
Page
N T E N T S
Power Outage
802.1X Authentication and Status
Troubleshooting and Maintenance
Cable Specifications C-2 Network and Access Port Pinouts C-2
Viii
Organization
Overview
Audience
Chapter Description
Cisco Unified IP Phone 8900 Series
Cisco Unified Communications Manager Administration
Related Documentation
Cisco Unified Communications Manager Business Edition
Convention Description
Document Conventions
Cisco Product Security Overview
Boldface font
Important Safety Instructions
An Overview of the Cisco Unified IP Phone
Understanding the Cisco Unified IP Phones 8941
Features on the Cisco Unified IP Phone 8941
What Networking Protocols are Used?
Networking Protocol Purpose Usage Notes
CDP
Dynamic Host Configuration Protocol chapter
Authentication on Cisco Unified IP Phones section
Dhcp
SIP
See the LLDP-MED and Cisco Discovery Protocol
Nologieswhitepaper0900aecd804cd46d.shtml
Manager System Guide
Communications Manager Security Guide
Chapter in the Cisco Unified Communications
Related Topics
Related Topic
Feature Overview
Configuring Telephony Features
Understanding Security Features for Cisco Unified IP Phones
Providing Users with Feature Information
Communications Manager
Refer to the Troubleshooting Guide for Cisco Unified
Topic Reference
Overview of Supported Security Features
Feature Description
Access section on
Security Profiles section on page 1-13for more information
Identifying Encrypted Phone Calls
Configuration Menu section on
Understanding Security Profiles
Unified IP Phones section on page 1-16for more information
Establishing and Identifying Secure Audio Conference Calls
Results of Action
Feature Used
Initiator’s Phone
Supporting 802.1X Authentication on Cisco Unified IP Phones
Overview
Security Restrictions
Configuring Cisco Unified IP Phones in Cisco Unified CM
Purpose For More Information
Cisco Communications Manager
Communications Manager Administration Guide
Communications Manager Administration Guide, Cisco
Unified Communications Manager
Communications Manager Administration Guide, End
Task Purpose For More Information
See the Installing the Cisco Unified IP Phone section
Installing Cisco Unified IP Phones
See the Providing Power to the Cisco Unified IP Phone
See the Footstand section on
Refer to Cisco Unified IP Phone 8941 and 8945 User
Guide for Cisco Unified Communications Manager
User Guide Administration and System Guides
Terminology Differences
A P T E R
Related Topic
Providing Power to the Cisco Unified IP Phone
Understanding the Phone Startup Process, Network Setup Menu,
Power Type Guidelines
Power Guidelines
Power Outage
Understanding Phone Configuration Files
Obtaining Additional Information about Power
Purpose Related Topics
Resolving Startup Problems,
Understanding the Phone Startup Process
Adding Phones to the Cisco Unified CM Database
Refer to the Cisco Unified Communications Manager
Requires MAC Method Address?
Adding Phones to the Cisco Unified CM Database
Adding Phones with Auto-Registration
Taps
Adding Phones with Auto-Registration and Taps
Adding Phones with Cisco Unified CM Administration
Adding Phones with BAT
Determining the MAC Address for a Cisco Unified IP Phone
OL-20851-01
Before You Begin
Network Requirements
Network and Access Ports, Handset, Speakerphone, Headset,
Cisco Unified Communications Manager Configuration
Network and Access Ports
Headset
Handset
Speakerphone
Audio Quality Subjective to the User
See the Headset section on page 3-3for supported
Installing the Cisco Unified IP Phone
See the Network and Access Ports section on
See the Adding Phones to the Cisco Unified CM
Cisco Unified IP Phone 8941 and 8945 Cable Connections
Reducing Power Consumption on the Phone
Footstand
Chapter Footstand
Higher Viewing Angle
Hold Mute Speaker
Verifying the Phone Startup Process
Lower Viewing Angle
Before You Begin
Configuring Startup Network Settings
Configuring Security on the Cisco Unified IP Phone
Procedure
Configuring Settings on the Cisco Unified IP Phone
Configuration Menus on the Cisco Unified IP Phone
Unlocking and Locking Options, Editing Values,
Displaying a Configuration Menu
Select Administrator Settings
Editing Values
Network Setup Menu, IPv4 Setup Menu Options,
Unlocking and Locking Options
Select
Network Setup Menu
Option Description To Change
Device Phone Phone
Configuration
PC Vlan
IPv4 Setup Menu Options
Related Topics
Device Phone Phone Configuration
Security Configuration Menu
802.1X Authentication and Status
Trust List Menu
Authentication Device Authentication
Choose Applications Administrator
Settings Security Config
Settings Security Setup
OL-20851-01
Configuring Features, Templates, Services, and Users
Set Builtin Bridge Enable to On
Feature Description Configuration Reference
Choose System Service Parameter and select
Common Phone Profile
Configuration System Enterprise Phone
Configuration Device Device Settings
Administration Guide, Directory Number
Features and Services Guide, Cisco Call
Features and Services Guide, Call Display
Forward Maximum Hop Count service parameter
Understanding Directory Numbers
Services Guide, Call Park and Directed Call
Services Guide, Monitoring and Recording
Park
System Guide, Understanding Directory
Numbers
Services Guide, Cisco Web Dialer
Unified Communications Manager Features
Services Guide
CMC
Services Guide, Immediate Divert
Services Guide, Do Not Disturb
Administration Guide, Hunt Group
Feature, see the Cisco Unified Communications
Manager Features and Services Guide, Hold
Refer to Cisco Unified Communications
Communications Manager Feature
Services Guide, Intercom
Manager System Guide, Cisco Unified IP
Services Guide, Music On Hold
Features and Services Guide, Malicious
Administration Guide, Message Waiting
Features and Services Guide, Quality
Features and Services Guide Barge
Administration Guide, Phone Button
Unified IP Phone 8941 and 8945 User Guide
Bridge Configuration
Overview of Supported Security Features
Administration Guide, Conference
Creating Custom Phone Rings section
Services
Administration Guide, Time Period
Port Configuration
Bridge Configuration chapter
Administration Guide, Cisco Voice-Mail
Join and Direct Transfer Policy
Configuring Personal Directory
Configuring Corporate and Personal Directories
Configuring Corporate Directories
Modifying Phone Button Templates
Synchronizer
For PAB, enter the following URL
DND
Configuring Softkey Templates
Supported as a
Setting Up Services
Adding Users to Cisco Unified Communications Manager
Click Add Selected
Giving Users Access to the User Options Web Pages
Managing the User Options Web Pages
Click Save Selected/Changes
Click Device Association
Enter the appropriate search criteria and click Find
Chapter Managing the User Options Web Pages
Chapter Managing the User Options Web Pages
Customizing and Modifying Configuration Files
Customizing the Cisco Unified IP Phone
Creating Custom Phone Rings
DistinctiveRingList File Format Requirements
Configuring a Custom Phone Ring
PCM File Requirements for Custom Ring Types
Configuring the Idle Display
Field Description
OL-20851-01
Model Information Screen
Model Information Screen, Status Menu,
Select Status Messages
Status Menu
Status Messages Screen
Address. See the Network Setup Menu section
Phones with Cisco Unified CM Administration
Network Setup Menu section on page 4-4for
Message Description Possible Explanation and Action
Network Setup Menu section on
Menu section on page 4-4for details
Setup Menu section on page 4-4for details on
Network Statistics Screen
Select Status Network Statistics
Dhcp Waiting Coldboot Timeout
Dhcp Disabled
Dhcp Reboot
SET Dhcp Coldboot
Call Statistics Screen
Select Call Statistics
Voice Quality Metrics
MOS LQK
Security Configuration
Select Administrator Settings Select Security Setup
Monitoring the Cisco Unified IP Phone Remotely
Accessing the Web Page for a Phone
Http//IPaddress
Choose Device Phone
Disabling and Enabling Web Page Access
Device Information
Network Setup
UDI
Description
Description
Network Statistics
Lldp
Device Logs
Streaming Statistics
Stream
Streaming Statistics
Configuring Settings on the Cisco Unified IP Phone chapter
Troubleshooting and Maintenance
Resolving Startup Problems
Chapter Resolving Startup Problems
Identifying Error Messages
Verifying DNS Settings
Choose Tools Control Center Feature Services
Symptom Cisco Unified IP Phone Unable to Obtain IP Address
Verifying the Physical Connection
Cisco Unified IP Phone Resets Unexpectedly
Verifying Dhcp Settings
Identifying Intermittent Network Outages
Verifying that the Phones Have Not Been Intentionally Reset
Checking Static IP Address Settings
Verifying the Voice Vlan Configuration
Eliminating DNS or Other Connectivity Errors
Problem Possible Cause
Troubleshooting Cisco Unified IP Phone Security
Checking Power Connection
General Troubleshooting Tips
Summary Explanation
Locking Options section on page 4-3 for details
Halfduxcollisionexceedthreshold
Performing a Factory Reset
Resetting or Restoring the Cisco Unified IP Phone
Performing a Basic Reset
Operation Performing Explanation
Monitoring the Voice Quality of Calls
Troubleshooting Tips
Metric Change Condition
Where to Go for More Troubleshooting Information
Cleaning the Cisco Unified IP Phone
Chapter Cleaning the Cisco Unified IP Phone
Providing Information to Users Via a Website
How Users Access a Voice Messaging System
How Users Configure Personal Directory Entries
Installing the Synchronizer
Configuring the Synchronizer
Programs Cisco Systems TabSync
Installing the Cisco Unified CM Locale Installer
Support for International Call Logging
OL-20851-01
Physical and Operating Environment Specifications
Specification Value or Range
Network Port Connector
Cable Specifications
Network and Access Port Pinouts
Pin Number Function
Access Port Connector
OL-20851-01
Basic Phone Administration Steps
Example User Information for these Procedures
Choose System Ldap Ldap Directory
Adding a User to Cisco Unified CM
Adding a User From an External Ldap Directory
Click Perform Full Sync Now
Example doe
Configuring the Phone
Proceed to the section Configuring the Phone, page D-3
Appendix Configuring the Phone
Appendix Configuring the Phone
Click Device Associations
Performing Final End User Configuration Steps
Choose User Management End User
Protocol Features
Sccp SIP
Appendix
EFT Draft Cisco Confidential
Tool
Numerics
IN-2
IN-3
IN-4
LLDP-MED
IN-5
MIC
Cast CDP Dhcp Http Rtcp RTP Sccp SIP Srtp TCP Tftp TLS UDP
IN-7
Srst Srtp
IN-8
IN-9
Vlan