Cisco Systems OL-18348-01 Disabling the PC Voice Vlan Access Setting, Configuring Phone Hardening

Page 2

Chapter 10 Phone Hardening

Disabling the PC Voice VLAN Access Setting

Disabling the PC Voice VLAN Access Setting

By default,Cisco Unified IP Phones forward all packets that are received on the switch port (the one that faces the upstream switch) to the PC port. If you choose to disable the PC Voice VLAN Access setting in the Phone Configuration window, packets that are received from the PC port that use voice VLAN functionality will drop. Various Cisco Unified IP Phones use this functionality differently.

Cisco Unified IP Phones 7940G and 7960G drop any packets that are tagged with the voice VLAN, in or out of the PC port.

Cisco Unified IP Phone 7970G drops any packet that contains an 802.1Q tag on any VLAN, in or out of the PC port.

Cisco Unified IP Phone 7912G cannot perform this functionality.

Disabling the Setting Access Setting

By default, pressing the Settings button on a Cisco Unified IP Phone provides access to a variety of information, including phone configuration information. Disabling the Setting Access setting in the Phone Configuration window prohibits access to all options that normally display when you press the Settings button on the phone; for example, the Contrast, Ring Type, Network Configuration, Model Information, and Status settings.

The preceding settings do not display on the phone if you disable the setting in Cisco Unified Communications Manager Administration. If you disable this setting, the phone user cannot save the settings that are associated with the Volume button; for example, the user cannot save the volume.

Disabling this setting automatically saves the current Contrast, Ring Type, Network Configuration, Model Information, Status, and Volume settings that exist on the phone. To change these phone settings, you must enable the Setting Access setting in Cisco Unified Communications Manager Administration.

Disabling the PC Port Setting

By default, Cisco Unified Communications Manager enables the PC port on all Cisco Unified IP Phones that have a PC port. If you choose to do so, you can disable the PC Port setting in the Phone Configuration window. Disabling the PC port proves useful for lobby or conference room phones.

Configuring Phone Hardening

 

 

 

Caution

The following procedure disables functionality for the phone.

 

 

 

 

 

 

 

 

 

To disable functionality for the phone, perform the following procedure:

 

 

 

 

Procedure

 

 

 

 

 

 

 

 

Step 1

In Cisco Unified Communications Manager Administration, choose Device > Phone.

 

 

 

Step 2

Specify the criteria to find the phone and click Find or click Find to display a list of all phones.

 

 

 

Cisco Unified Communications Manager Security Guide

 

 

 

 

 

 

 

 

 

 

10-2

 

 

OL-18348-01

 

 

 

 

 

Image 2
Contents 10-1 Disabling the Gratuitous ARP SettingDisabling Web Access Setting Disabling the PC Port Setting Disabling the PC Voice Vlan Access SettingDisabling the Setting Access Setting Configuring Phone HardeningRelated Topics Where to Find More InformationAdditional Information Related Cisco Documentation10-4