9-13
Cisco Unified IP Phone Administration Guide for Cisco Unified CallManager 5.1 (SIP), Cisco Unified IP Phones
OL-11524-01
Chapter9 Troubleshooting and Maintenance
Troubleshooting Cisco Unified IP Phone Security
Phone reports TFTP authorization failure. The TFTP address for the phone does not exist in
the CTL file.
If you created a new CTL file with a new TFTP
record, the existing CTL file on the phone may
not contain a record for the new TFTP server.
Phone does not register with Cisco
UnifiedCallManager.
The CTL file does not contain the correct information
for the Cisco Unified CallManager server or the
Cisco Unified CallManager does not have the valid
issuer of the phone’s certificate.
Phone does not request signed configuration
files.
The CTL file does not contain any TFTP entries with
certificates.
802.1X Enabled on Phone but Not Authenticating
Phone cannot obtain a DHCP-assigned IP
address.
These errors typically indicate that 802.1X
authentication is enabled on the phone, but the phone
is unable to authenticate.
1. Verify that you have properly configured the
required components (see the “Supporting
802.1X Authentication on Cisco Unified IP
Phones” section on page1-18 for more
information).
2. Confirm that the shared secret is configured on
the phone (see the “802.1X Authentication and
Status” section on page 4-42 for more
information).
If the shared secret is configured, verify that
you have the same shared secret entered on
the authentication server.
If the shared secret is not configured, enter it
and ensure that it matches the one on the
authentication server.
Phone does not register with
Cisco Unified CallManager.
Phone status display as “Configuring IP” or
“Registering”.
802.1X Authentication Status displays as
“Held” (see the “802.1X Authentication and
Status” section on page4-42 for more details).
Status menu displays 802.1X status as “Failed”
(see the “Status Menu” section on page 7-3 for
more details).
Table9-1 Cisco Unified IP Phone Security Troubleshooting (continued)
Problem Possible Cause