Chapter 8 Troubleshooting and Maintenance

Troubleshooting Cisco Unified IP Phone Security

Troubleshooting Cisco Unified IP Phone Security

Table 8-1provides troubleshooting information for the security features on the Cisco Unified IP Phone. For information relating to the solutions for any of these issues, and for additional troubleshooting information about security and encryption, refer to Cisco Unified Communications Manager Security Guide.

Because third-party troubleshooting tools that sniff media and TCP packets do not work after you enable encryption, you must use Cisco Unified Communications Manager Administration to perform the following tasks if a problem occurs:

Analyze TCP packets for SCCP messages that are exchanged between Cisco Unified Communications Manager and the device

Extract the media encryption key material from SCCP messages and decrypt the media between the devices

Table 8-1

Cisco Unified IP Phone Security Troubleshooting

 

 

 

Problem

 

Possible Cause

 

 

LSC fails on the phone.

CAPF configuration error.

 

 

Device authentication error.

CTL file does not have a Cisco Unified Communications Manager certificate or has an

 

 

incorrect certificate.

 

 

Phone cannot authenticate CTL file.

The security token that signed the updated CTL file does not exist in the CTL file on

 

 

the phone.

 

 

Phone cannot authenticate any of the

Bad TFTP record.

configuration files other than the

 

CTL file.

 

 

 

 

Phone reports TFTP authorization

The TFTP address for the phone does not exist in the CTL file.

failure.

 

If you created a new CTL file with a new TFTP record, the existing CTL file on the

 

 

 

 

phone may not contain a record for the new TFTP server.

 

 

Phone does not register with Cisco

The CTL file does not contain the correct information for the Cisco

Unified Communications Manager.

Unified Communications Manager server.

 

 

Phone does not interact with the

The CAPF utility runs on a different workstation/server than is specified in the CTL

correct CAPF server to obtain the

file.

locally-significant certificate.

The CAPF certificate has changed since the last update of the CTL file.

 

 

 

 

Phone does not request signed

The CTL file does not contain any TFTP server entry.

configuration files.

The CTL file does not contain any TFTP entries with certificates

 

 

 

 

 

Cisco Unified IP Phone 7960G/7940G Administration Guide for Cisco Unified Communications Manager 7.0 (SCCP)

 

OL-15498-01

8-9

 

 

 

Page 117
Image 117
Cisco Systems 7940G, 7960G manual Troubleshooting Cisco Unified IP Phone Security, Problem Possible Cause

7960G, 7940G specifications

Cisco Systems has long been a leader in creating innovative networking and communication solutions. Among their range of Voice over IP (VoIP) phones, the Cisco 7960G and 7940G stand out as robust, versatile devices that cater to the needs of modern businesses. Released in the early 2000s, these models respectively combine functionality, ease of use, and key features tailored for effective communication.

The Cisco 7960G is a high-end model designed for users who demand advanced features and functionalities. It comes with a large backlit LCD display that not only enhances visibility but also provides easy navigation through various options. The phone supports up to six lines, allowing users to manage multiple calls effortlessly. Its user-friendly interface includes programmable feature buttons and a 10/100 Ethernet switch, enabling seamless integration into existing networks.

On the other hand, the Cisco 7940G is a more basic model designed for users who require essential features for their business communications. It includes a monochrome LCD screen and supports a maximum of two lines. Despite its simplicity, the 7940G is equipped with several key features such as integrated speakerphone and mute options, making it ideal for day-to-day communication needs. Both models support Power over Ethernet (PoE), eliminating the need for separate power adapters and ensuring a cleaner, more organized workspace.

In terms of technologies, both the 7960G and 7940G leverage the Session Initiation Protocol (SIP) for signaling and media exchange. They also support secure communication through protocols like Secure Real-time Transport Protocol (SRTP) and Transport Layer Security (TLS). This ensures that businesses can engage in confidential conversations without the risk of interception.

The characteristics that make these models appealing include durability, ease of configuration, and reliability. Organizations can benefit from Cisco’s reliable support and regular updates, ensuring that their communication infrastructure remains robust and secure. With features designed for scalability, both phones can easily integrate into larger systems while maintaining high call quality.

In summary, Cisco’s 7960G and 7940G VoIP phones are exemplary devices that cater to a variety of business communication scenarios. With their blend of functionality, support for essential technologies, and reliable performance, they continue to serve organizations effectively in an increasingly interconnected world. Whether used in a bustling office or as part of a dynamic telecommunications strategy, these models offer excellent value and performance.