Chapter 4 Phone Hardening
Disabling Web Access Setting
Related Topics
•Interactions and Restrictions, page
•Performing Phone Hardening Tasks, page
•Cisco IP Phone Administration Guide for Cisco CallManager
Disabling Web Access Setting
Disabling the web server functionality for the phone blocks access to the phone internal web pages, which provide statistics and configuration information. Features, such as Cisco Quality Report Tool, do not function properly without access to the phone web pages. Disabling the web server also affects any serviceability application, such as CiscoWorks, that relies on web access.
Note Phone users cannot access the Cisco User Option Pages if you disable this option.
To determine if the web services are disabled, the phone parses a parameter in the configuration file that indicates whether the services are disabled or enabled. If the web services are disabled, the phone does not open the HTTP port 80 for monitoring purposes and blocks access to the phone internal web pages.
Related Topics
•Interactions and Restrictions, page
•Performing Phone Hardening Tasks, page
•Cisco IP Phone Administration Guide for Cisco CallManager
Disabling the PC Voice VLAN Access Setting
By default, Cisco IP phones forward all packets that are received on the switch port (the one that faces the upstream switch) to the PC port. If you choose to disable the PC Voice VLAN Access setting in the Phone Configuration window of Cisco CallManager Administration, packets received from the PC port that use voice VLAN functionality will drop. This functionality allows a device that is attached to the PC port to use 802.1Q (if available) but not have access to the voice VLAN.
| Cisco IP Phone Authentication and Encryption for Cisco CallManager 4.0(1) |
