Cisco Unified IP Phone | Cisco Systems 8961 guide

Chapter 6 Understanding the VoIP Wireless Network

Security for Voice Communications in WLANs

•The Cisco Unified IP Phone does not support auto EAP negotiation; to use EAP-FAST mode, you must specify it.

Table 6-4provides a list of authentication and encryption schemes that are configured on the Cisco Aironet APs that the Cisco Unified IP Phone supports. The table shows the network configuration option for the phone that corresponds to the AP configuration.

Table 6-4	Authentication and Encryption Schemes

				Cisco Unified IP Phone
Cisco AP Configuration				Configuration

		Key	Common
Authentication		Management	Encryption	Authentication

Open			None	Open

Open (Static WEP)			WEP	Open+WEP

Shared key (Static WEP)			WEP	Shared+WEP

LEAP		Optional CCKM	WEP	LEAP or Auto (AKM)
802.1x

LEAP		WPA with	TKIP	LEAP or Auto (AKM)
WPA		Optional CCKM
WPA

LEAP		WPA2	AES	LEAP or Auto (AKM)
WPA2

EAP-FAST		Optional CCKM	WEP	EAP-FAST
802.1x

EAP-FAST with WPA		WPA	TKIP	EAP-FAST
		Optional CCKM

EAP-FAST with WPA2		WPA2	AES	EAP-FAST

WPA-PSK		WPA-PSK	TKIP	Auto (AKM)

WPA2-PSK		WAP2-PSK	AES	Auto (AKM)

For additional information about Cisco WLAN Security, refer to http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_brochure09186a00801f7d0b.html

For more information about configuring authentication and encryption schemes on APs, refer to the Cisco Aironet Configuration Guide for your model and release under the following URL:

http://www.cisco.com/cisco/web/psa/configure.html?mode=prod&level0=278875243

Related Topics

•Interacting with Cisco Unified Wireless APs, page 6-8

•Authentication Methods, page 6-11

•Encryption Methods, page 6-13

•Interacting with Cisco Unified Communications Manager, page 6-11

•Components of the VoIP Wireless Network, page 6-8

	Cisco Unified IP Phone 8961, 9951, and 9971 Administration Guide for Cisco Unified Communications Manager 8.5 (SIP)
6-14	OL-20861-01

Image 104

Cisco Systems 8961 manual Cisco Unified IP Phone, Cisco AP Configuration Key Common, Management Encryption Authentication

Contents

Americas Headquarters Text Part Number OL-20862-01Page N T E N T S Iii Manager Key Expansion Module Settings on the Phone Interacting with Cisco Unified Wireless APs Configuring Personal Directory Vii Status Menu Viii Technical Specifications Installing the Wall Mount for the Cisco Unified IP Phone E-1 Overview AudienceOrganization Chapter Description Xii Related Documentation Cisco Product Security OverviewCisco Unified IP Phones 8961, 9951, Xiii Document Conventions Convention DescriptionBoldface font Xiv An Overview of the Cisco Unified IP Phone 1shows the main components of the Cisco Unified IP Phone 1describes the buttons on the Cisco Unified IP Phone Features on the Cisco Unified IP Phone 2shows the main components of the Cisco Unified IP Phone 2describes the buttons on the Cisco Unified IP Phone Features on the Cisco Unified IP Phone 3shows the main components of the Cisco Unified IP Phone 3describes the buttons on the Cisco Unified IP Phone Features on the Cisco Unified IP Phone Communications Manager System Guide What Networking Protocols are Used?Networking Protocol Purpose Usage Notes Authentication on Cisco Unified IP Phones section URL See the LLDP-MED and Cisco Discovery Protocol White paperNologieswhitepaper0900aecd804cd46d.shtml SIP Feature Overview Cisco Unified Communications ManagerSystem Guide UDP Configuring Telephony Features Related Topic Providing Users with Feature Information See the Overview of Supported Security Features section onTopic Reference See the Security Restrictions section on Manager Overview of Supported Security FeaturesUnified Communications Manager Security Guide IP Phone section on page 3-21for more information Choose AdministratorFeature Description Cisco Unified Communications Manager Security Guide Phones section on page 1-22for more information Understanding Security Profiles Identifying Secure Encrypted Phone Calls Establishing and Identifying Secure Calls Security Restrictions with Conference Calls Supporting 802.1X Authentication on Cisco Unified IP Phones Overview Security Restrictions OL-20861-01 Purpose For More Information Communications Manager Administration Administration Guide Task Purpose For More Information Chapter in the Cisco Unified Communications Manager Installing Cisco Unified IP Phones See the Configuring Startup Network Settings section onSee the Ethernet Setup Menu section on Wireless Network User Guide Administration Guide Terminology InformationRefer to the Cisco Unified IP Phone 9951, and 9971 User Guide for Cisco A P T E R Cisco Communications Manager Administration Guide Providing Power to the Cisco Unified IP Phone Power Guidelines Power OutageReducing Power Consumption on the Phone Power Type Guidelines Power Negotiation over Lldp Obtaining Additional Information About Power Understanding Phone Configuration Files Understanding the Phone Startup Process Purpose Related Topics Refer to Cisco Unified Communications Manager Security Request the configuration file Configuration file defines how the Cisco Unified IP PhoneTask Purpose Related Topics Information for the phone Tool BAT updates information in the Cisco Unified Adding Phones with Auto-RegistrationRequires MAC Method Address? Taps Adding Phones with Auto-Registration and Taps Adding Phones Using BAT Phone Template Procedure Determining the MAC Address for a Cisco Unified IP Phone OL-20861-01 Before You Begin Network Requirements Cisco Unified Communications Manager Configuration Understanding the Cisco Unified IP Phone Components Network and Computer Ports Handset Rest Accessory Type Cisco AccessoryThird-Party Accessories Speakerphone External Speakers and Microphone HeadsetsUSB Port Data Information Disabling a Wired Headset Audio Quality Subjective to the User Disabling the USB Headset Select AccessoriesHighlight the analog headset, then press the Setup softkey Wireless Headsets Adding a Bluetooth Wireless Headset to the Phone Select Add Bluetooth Accessory Press the Applications button User guides that were provided with your headset Installing the Cisco Unified IP Phone Using External Devices See the Headsets section on page 3-5for See the Network and Computer PortsSection on page 3-3for guidelines Wlan Cisco Unified IP Phone 8961 Connections Back Cisco Unified IP Phone 8961 Cable Connections Side Cisco Unified IP Phone 9951 Cable Connections Back Cisco Unified IP Phone 9951 Cable Connections Side Cisco Unified IP Phone 9971 Cable Connections Back Cisco Unified IP Phone 9971 Cable Connections Side Connecting the Footstand Cisco Unified IP Phone 8961, 9951, Mounting the Phone to the Wall Phone Display Viewing AngleSecuring the Phone with a Cable Lock Verifying the Phone Startup Process Configuring Startup Network SettingsConfiguring Security on the Cisco Unified IP Phone To configure an LSC on the phone, perform these steps Before You Begin Setting Up the Cisco Unified IP Color Key Expansion Module Cisco Unified IP Phone Model KEMs Supported Power Information Connecting a Single KEM to the Cisco Unified IP PhoneRemoving a Key Expansion Module, Troubleshooting, Power Consumption 206800 Cisco Unified IP Phone with Three KEMs Attached Key Expansion Module Settings on the Phone Upgrading the Key Expansion Module Removing a Key Expansion Module TroubleshootingKEM starts to upgrade Setting Up the Cisco Unified Video Camera Configuring the Cisco Unified Video Camera Adjusting the Camera Settings Adjusting the Camera View AreaInstallation Procedure Select Accessories Highlight Cisco Unified Camera Adjusting the Brightness Setting Adjusting Auto Transmit SettingSelect View Area Select Brightness Post-Installation Steps Using the Cisco Unified Video Camera Understanding the VoIP Wireless Network Understanding the Wireless LAN Understanding Wlan Standards and Technologies This section describes the following concepts Standards for Wlan Communications Part Number Band RangeUNII-2 UNII-3 World Mode 802.11d Supported Countries Data Rates, Tx Power, Ranges, and Decibel Tolerances Radio Frequency RangesStandard Data Rate Range Receiver Sensitivity 802.11a Wireless Modulation Technologies Data Rate Range Receiver Sensitivity 802.11b802.11b 802.11g 802.11a Dsss Ofdm Bluetooth Wireless Technology Voice QoS in a Wireless Network, VoIP Wlan Configuration,AP, Channel, and Domain Relationships WLANs and Roaming Associating to APs Components of the VoIP Wireless NetworkInteracting with Cisco Unified Wireless APs Voice QoS in a Wireless Network Network OL-20861-01 Authentication Methods Security for Voice Communications in WLANsInteracting with Cisco Unified Communications Manager This section contains the following items Authenticated Key Management Choosing AP Authentication and Encryption Methods Encryption MethodsOr Cckm Pre-shared key, WPA2 Pre-shared key, or Cckm Cisco Unified IP Phone Cisco AP Configuration Key CommonManagement Encryption Authentication VoIP Wlan Configuration Supported Access PointsSupported APs and Modes Unified Configuring Wireless LAN Supported Antennas OL-20861-01 OL-20861-01 Configuring Settings on the Cisco Unified IP Phone Setup Menus on the Cisco Unified IP Phone Displaying a Setup Menu To display a submenu repeat Step IPv4 Setup Menu Options, Security Setup Menu, Displaying a Setup Menu,Unlocking and Locking Options Editing Values Select button Ethernet Setup MenuOption Description To Change PC Vlan Configuration System Enterprise Phone Wlan Setup Menu Ssid Option Description To Change IPv4 Setup Menu Options To Cisco Unified Communications Manager Security Guide Cisco Unified Communications Manager Security Security Setup Menu See the 802.1X Authentication and TransactionLSC For this phone To the Configuring the Cisco CTL Client Trust List MenuSection in Cisco Unified Communications Manager Security Guide 802.1X Authentication and Transaction Status Procedure Steps VPN Configuration MenuUse this procedure to connect through VPN VPN Enabled If Auto-Detect Network Connection is disabled Choose Applications VPN OL-20861-01 Configuring Features, Templates, Services, and Users Feature Description Configuration Reference Features and Services Guide, BargeSystem Service Parameter and select System Guide, Cisco Unified IP Phones Unified Communications Manager Features Services Guide, Call Pickup chapterCommunications Manager Features Unified Communications Manager Configuration System Enterprise Phone Administration Guide, Cisco Unified IPPhone Configuration chapter Administration Guide, Feature Control Services Guide Manager Features and Services GuideDevice Phone BLF Display Restrictions chapter Features and Services Guide, Cisco CallFeatures and Services Guide, Call Cisco Unified Communications Administration Guide, DirectoryForward Maximum Hop Count service parameter Configure the call pickup feature to support During a call when it is being recordedServices Guide, Monitoring and Recording Incoming call information on the phone screen Extention Mobility chapter in the Cisco Communications Features and ServicesSystem Guide, Understanding Route Services Guide, Cisco Extension Features and Services GuideAdministration Choose Device Device Defaults From the Bulk AdministrationDivert, go to the Cisco Unified IP Phone Load Information field Book or Speed Dials, Services Guide, External Call ControlPhone Button Template for Personal Address Administration Guide, Hunt Group Configuration chapter Chapters of Cisco Unified Communications Communications Manager FeatureManager Administration Guide Features and Services Guide, Malicious Administration Guide, Message Waiting Services Guide, Call Park and Directed Unified IP Phone 9971 User Guide for CiscoUnified Communications Manager SIP Monitoring section on Go to Product Specific Configuration Layout area and select Enable fromSimultaneously Peer Firmware Sharing may also aid in firmware Features and Services Guide Barge Administration Guide, Phone ButtonPlar Unified Communications Manager Security Features and Services Guide, Quality QRTReport Tool chapter Creating Custom Phone Rings section OL-20861-01 Administration Guide, Conference Bridge Configuration chapterServices Guide, Cisco Unified Mobility Features and Services Guide, Cisco Unified System Guide, Time-of-Day Routing Administration Guide, Time PeriodAdministration Guide, Date/Time Group Park Monitoring Setting the Service Parameters for Park Monitoring Field Description Field Description Rtcp Configuring Product Specific Configuration ParametersList of Parameters Configuring Corporate and Personal Directories Configuring Corporate DirectoriesConfiguring Personal Directory Override Common Settings Check Box Button Softkey Feature Buttons and SoftkeysDedicated Feature Mcid Modifying Phone Button TemplatesModifying a Phone Button Template for All Calls Secure Service URL For PAB, enter the following URL Configuring Feature Control Policies Unified Communications Manager Administration Guide Setting Up ServicesFeature Default Value Adding Users to Cisco Unified Communications Manager Click Add Selected Giving Users Access to the User Options Web PagesManaging the User Options Web Pages OL-20861-01 Specifying Options that Appear on the User Options Web Pages Customizing and Modifying Configuration Files Customizing the Cisco Unified IP Phone Creating Custom Phone Rings Ringlist.xml File Format Requirements Configuring a Custom Phone Ring PCM File Requirements for Custom Ring Types List.xml Example Creating Custom Background ImagesList.xml File Format Requirements Configuring a Custom Background Image PNG File Requirements for Custom Background Images Configuring Wideband Codec Configuring the Idle Display Automatically Disabling the Cisco Unified IP Phone Display Display On and Off Configuration Fields Model Information Screen Model Information Screen, Status Menu,Information 10-1 Status Menu 10-2 Select Administrator Settings Status Messages ScreenSelect Status Messages Message Description Possible Explanation and Action Ethernet Setup Menu section on page 7-4for details If you are using DHCP, check the Dhcp serverOn assigning a static IP address Menu section on page 7-4section for details 10-5 Unified CM Security Guide 10-6 Ethernet Statistics Screen 10-7 Select Status Ethernet Statistics 10-8 Wlan Statistics Screen Port IPv4Select Wlan Statistics 10-9 10-10 Call Statistics Screen Select StatusSelect Call Statistics Call Statistics screen displays these items Voice-Quality Metrics MOS LQKCisco Unified IP Phone uses 10-12 Select Administrator Settings Select Call Statistics 10-13 10-14 10-15 Current Access Point ScreenSelect Current Access Point 10-16 Monitoring the Cisco Unified IP Phone Remotely 11-1 Accessing the Web Page for a Phone 11-2 Enabling and Disabling Web Page Access Click Apply ConfigChoose Device Phone 11-3 11-4 Device InformationUDI 11-5 Network SetupAbout other phone settings. -2describes these items 11-6 11-7 Network Statistics 11-8 11-9 Lldp 11-10 Device Logs Streaming Statistics5describes the items in the Streaming Statistics areas 11-11 IP Phone uses 11-12 11-13 Configuring Settings on the Cisco Unified IP Phone chapterVoice Quality Metrics 11-14 Resolving Startup Problems 12-1 12-2 Identifying Error Messages 12-3 Choose Tools Control Center Feature Services 12-4 Resolve, the configuration file may be corrupted To create a new configuration file, follow these stepsExperiencing problems 12-5 Cisco Unified IP Phone Resets Unexpectedly Symptom Cisco Unified IP Phone Unable to Obtain IP AddressVerifying the Physical Connection Identifying Intermittent Network Outages Verifying Dhcp Settings Checking Static IP Address SettingsVerifying the Voice Vlan Configuration Verifying that the Phones Have Not Been Intentionally Reset 12-8 Eliminating DNS or Other Connectivity ErrorsChecking Power Connection 12-9 Troubleshooting Cisco Unified IP Phone SecurityProblem Possible Cause 12-10 General Troubleshooting TipsSummary Explanation Displaying these statistics 12-11 12-12 To resolve this problem, re-enable the port from the switchHalfduxcollisionexceedthreshold 12-13 12-14 12-15 Resetting the Cisco Unified IP PhonePerforming Explanation 12-16 Using the Quality Report ToolMonitoring the Voice Quality of Calls Where to Go for More Troubleshooting Information Cleaning the Cisco Unified IP PhoneTroubleshooting Tips Metric Change Condition 12-18 Providing Information to Users Via a Website How Users Access a Voice Messaging System How Users Configure Personal Directory Entries Installing the Synchronizer Configuring the Synchronizer Supporting International Users Support for International Call Logging OL-20861-01 Physical and Operating Environment Specifications Specification Value or Range Cable Specifications Network Port ConnectorNetwork and Computer Port Pinouts Pin Number Function Computer Port Connector Table C-3describes the Computer port connector pinouts OL-20861-01 Basic Phone Administration Steps Example User Information for these Procedures Proceed to Configuring the Phone, page D-3 Adding a User From an External Ldap DirectoryChoose System Ldap Ldap Directory Click Perform Full Sync Now Configuring the Phone Proceed to the section Configuring the Phone, page D-3Example johndoe Example doe OL-20861-01 OL-20861-01 Click Device Associations Performing Final End User Configuration StepsChoose User Management End User Installing the Wall Mount for Cisco Unified IP Phone Installing the Bracket Before You Begin Figure E-2 Mounting the Wall Bracket Figure E-3 Attaching the Phone Bracket Figure E-4 Preparing the Handset Hook Figure E-5 Attaching the Cables Figure E-6 Attaching the Phone to the Wall Bracket Machine Installing the Bracket Figure E-8 Mounting the Wall Bracket Figure E-9 Attaching the Phone Bracket Figure E-10 Preparing the Handset Hook Figure E-11 Plugging the Power Cord into the Phone Figure E-12 Attaching the Phone to the Wall Bracket Cisco Unified IP Phone Non-Lockable Wall Mount 345749 Components Ethernet Cable Wall bracket Install Non-Lockable Wall Mount for phone Figure F-4 Mount the Wall Bracket Figure F-5 Attach the Phone Bracket Figure F-6 Remove Phone from Non-Lockable Wall Mount Figure F-7 Attach phone to wall bracket Figure F-8 Tab location Figure F-9 345743 Screws Anchors Phone bracket Before You Begin Figure F-13 Bracket Installation Figure F-14 Attach Phone Bracket Figure F-15 Figure F-16 Attach Phone to Wall Bracket Figure F-17 Figure F-18 OL-20861-01 Numerics IN-1 Technical specifications Using Ldap directories Call waiting Capf Certificate Authority Proxy FunctionCast IN-2 DND IN-3 Using Wired Headset port Hold Hold reversion Http Ethernet Statistics screenUSB HTTP, description Https IN-5 MICCast CDP Dhcp Http Rtcp RTP SIP TCP Tftp UDP IN-6 IN-7 IntentionallyTrust List Security profiles IN-8 IN-9 VPN TftpDNS IN-10