Manuals / Brands / Communications / IP Phone / Cisco Systems / Communications / IP Phone

Cisco Systems 6901 Understanding Security Profiles, Identifying Authenticated, Encrypted, and Protected Phone Calls

1 154

Download 154 pages, 5.34 Mb

1-15

Cisco Unified IP Phone 6901 and 6911 Administration Guide for Cisco Unified Communications Manager 8.5 (SCCP and SIP)

OL-23874-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

Related Topics

• Understanding Security Features for Cisco Unified IP Phones, page 1-10

• Identifying Authenticated, Encrypted, and Protected Phone Calls, page 1-15

Understanding Security Profiles

All Cisco Unified IP Phones that support Cisco Unified Communications Manager use a security profile,

which defines whether the phone is nonsecure, authenticated, or encrypted. For information about

configuring the security profile and applying the profile to the phone, refer to Cisco Unified

Communications Manager Security Guide.

To view the security mode that is set for the phone, you can view the security profile in Cisco Unified

Communications Manager Administration.

Related Topics

• Identifying Authenticated, Encrypted, and Protected Phone Calls, page 1-15

Identifying Authenticated, Encrypted, and Protected Phone Calls

In an authenticated call, all devices participating in the establishment of the call are trusted devices, and

authenticated by Cisco Unified Communications Manager.

In an encrypted call, all devices participating in the establishment of the call are trusted devices, and

authenticated by Cisco Unified Communications Manager. In addition, call signaling and media streams

are encrypted. An encrypted call offers a high level of security, providing integrity and privacy to the

call.

If the call is routed through non-IP call legs, for example, PSTN, the call may be nonsecure even though

it is encrypted within the IP network.

In a protected call, a security tone plays at the beginning of a call to indicate that the other connected

phone is also receiving and transmitting encrypted audio and video (if video is involved). If your call is

connected to a non-protected phone, the security tone does not play.

Note Protected calling is supported for connections between two phones only. Some features, such as

conference calling and shared lines are not available when protected calling is configured. Protected

calls are not authenticated.

Max MOS LQK Baseline or highest MOS LQK score from the start of the voice stream.

The following codecs provide the corresponding maximum MOS LQK scores under

normal conditions with no frame loss:

• G.711: 4.5

• G.728/iLBC: 3.9

• G729A/AB: 3.7

MOS LQK Version Version of the Cisco-proprietary algorithm used to calculate the MOS LQK scores.

Table 1-5 Overview of Security Features (continued)

Feature Description

Contents

Main Page CONTENTS Page Page Page Page Page Preface Overview Audience Organization Related Documentation Obtaining Documentation, Obtaining Support, and Security Guidelines Cisco Product Security Overview Document Conventions An Overview of the Cisco Unified IP Phone Understanding the Cisco Unified IP Phone 6901 and 6911 Page Page Page What Networking Protocols are Used? Page Page What Features are Supported on the Cisco Unified IP Phone 6901 and 6911? Feature Overview Configuring Telephony Features Configuring Network Parameters Using the Cisco Unified IP Phone Providing Users with Feature Information Understanding Security Features for Cisco Unified IP Phones Page Page Overview of Supported Security Features Page Understanding Security Profiles Identifying Authenticated, Encrypted, and Protected Phone Calls Establishing and Identifying Protected Calls Call Security Interactions and Restrictions Supporting 802.1X Authentication on Cisco Unified IP Phones Overview Required Network Components Best PracticesRequirements and Recommendations Overview of Configuring and Installing Cisco Unified IP Phones Configuring Cisco Unified IP Phones in Cisco Unified Communications Manager Page Page Installing Cisco Unified IP Phones Checklist for Installing the Cisco Unified IP Phone 6901 and 6911 Terminology Differences Preparing to Install the Cisco Unified IP Phone on Your Network Understanding Interactions with Other Cisco Unified IP Telephony Products Understanding How the Cisco Unified IP Phone Interacts with Cisco Unified Communications Manager Understanding How the Cisco Unified IP Phone 6911 Interacts with the VLAN Providing Power to the Cisco Unified IP Phone Power Guidelines Power Outage Obtaining Additional Information About Power Understanding Phone Configuration Files Understanding the Phone Startup Process Adding Phones to the Cisco Unified Communications Manager Database Adding Phones with Auto-Registration Adding Phones with Auto-Registration and TAPS Adding Phones with Cisco Unified Communications Manager Administration Adding Phones Using the BAT Phone Template Using Cisco Unified IP Phones with Different Protocols Converting a New Phone from SCCP to SIP Converting an In-Use Phone from One Protocol to the Other Protocol Deploying a Phone in an SCCP and SIP Environment Determining the MAC Address for a Cisco Unified IP Phone Setting Up the Cisco Unified IP Phone Before You Begin Network Requirements Cisco Unified Communications Manager Configuration Understanding the Cisco Unified IP Phone 6901 and 6911 Components Network and Access Ports Handset Speakerphone (Cisco Unified IP Phone 6911 Only) Installing the Cisco Unified IP Phone Page Page Footstand Page Mounting the Phone to the Wall Verifying the Phone Startup Process Configuring Startup Network Settings Configuring Security on the Cisco Unified IP Phone Configuring Settings on the Cisco Unified IP Phone Configuring Settings on the Cisco Unified IP Phone Phone Settings Options Accessing the Phone Configuration Settings Accessing the IVR and Configuring Your Phone Setting Page Page Configuring Features, Templates, Services, and Users Telephony Features Available for the Cisco Unified IP Phone Page Page Page Page Page Page Adding Users to Cisco Unified Communications Manager Managing the User Options Web Pages Giving Users Access to the User Options Web Pages Page Specifying Options that Appear on the User Options Web Pages Page Monitoring the Cisco Unified IP Phone Remotely Accessing the Web Page for a Phone Disabling and Enabling Web Page Access Device Information Network Setup Page Page Network Statistics Page Device Logs Status Messages Page Page Streaming Statistics Page Page Page Troubleshooting and Maintenance Resolving Startup Problems Symptom: The Cisco Unified IP Phone Does Not Go Through its Normal Startup Process Symptom: The Cisco Unified IP Phone Does Not Register with Cisco Unified Communications Manager Identifying Error Messages Checking Network Connectivity Verifying TFTP Server Settings Verifying IP Addressing and Routing Cisco CallManager and TFTP Services Are Not Running Creating a New Configuration File Registering the Phone with Cisco Unified Communications Manager Symptom: Cisco Unified IP Phone Unable to Obtain IP Address Cisco Unified IP Phone Resets Unexpectedly Verifying the Physical Connection Identifying Intermittent Network Outages Verifying DHCP Settings Checking Static IP Address Settings Verifying the Voice VLAN Configuration Verifying that the Phones Have Not Been Intentionally Reset Eliminating DNS or Other Connectivity Errors Checking Power Connection General Troubleshooting Tips Page Resetting or Restoring the Cisco Unified IP Phone Performing a Basic Reset Performing a Factory Reset Monitoring the Voice Quality of Calls Using Voice Quality Metrics Troubleshooting Tips Where to Go for More Troubleshooting Information Cleaning the Cisco Unified IP Phone Page A Providing Information to Users Via a Website How Users Obtain Support for the Cisco Unified IP Phone Giving Users Access to the User Options Web Pages How Users Configure Phone Features How Users Access a Voice Messaging System B Supporting International Users Installing the Cisco Unified Communications Manager Locale Installer Page C Technical Specifications Physical and Operating Environment Specifications Cable Specifications Network and Access Port Pinouts Page D Basic Phone Administration Steps Example User Information for These Procedures Adding a User to Cisco Unified Communications Manager Adding a User From an External LDAP Directory Adding a User Directly to Cisco Unified Communications Manager Configuring the Phone Page Page Performing Final End User Configuration Steps Page Page E Installing the Wall Mount for the Cisco Unified IP Phone 6901 and 6911 Installing a Wall Mount for the Cisco Unified IP Phone 6901 21 3 4 Installing the Phone on Wall Mount Plate Page Page Page Installing a Wall Mount for the Cisco Unified IP Phone 6911 Installing the Bracket E-9 Figure E-8 Mounting the Wall Bracket AB C D Page Page Page Page Page F Cisco Unified IP Phone Non-Lockable Wall Mount ADA Non-Lockable Wall Mount Kit for 6900 Series Components Install Non-Lockable Wall Mount Kit for Phone Page Page Remove Phone from Non-Lockable Wall Mount Page Page G Feature Support by Protocol for the Cisco Unified IP Phone 6901 and 6911 Page Page Page INDEX Numerics A B D E F G H I K L M O P R S T U V W