Cisco 7906G - Unified IP Phone VoIP, 7911G Administration Manual

Download

Americas Headquarters

Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Cisco Unified IP Phone 7906G and 7911G Administration Guide for Cisco Unified Communications Manager 6.1

Text Part Number: OL-14585-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required to correct the interference at their own expense.

The following information is for FCC compliance of Class B devices: The equipment described in this manual generates and may radiate radio-frequency energy. If it is not installed in accordance with Cisco’s installation instructions, it may cause interference with radio and television reception. This equipment has been tested and found to comply with the limits for a Class B digital device in accordance with the specifications in part 15 of the FCC rules. These specifications are designed to provide reasonable protection against such interference in a residential installation. However, there is no guarantee that interference will not occur in a particular installation.

Modifying the equipment without Cisco’s written authorization may result in the equipment no longer complying with FCC requirements for Class A or Class B digital devices. In that event, your right to use the equipment may be limited by FCC regulations, and you may be required to correct any interference to radio or television communications at your own expense.

You can determine whether your equipment is causing interference by turning it off. If the interference stops, it was probably caused by the Cisco equipment or one of its peripheral devices. If the equipment causes interference to radio or television reception, try to correct the interference by using one or more of the following measures:

• Turn the television or radio antenna until the interference stops.

• Move the equipment to one side or the other of the television or radio.

• Move the equipment farther away from the television or radio.

• Plug the equipment into an outlet that is on a different circuit from the television or radio. (That is, make certain the equipment and the television or radio are on circuits controlled by different circuit breakers or fuses.)

Modifications to this product not authorized by Cisco Systems, Inc. could void the FCC approval and negate your authority to operate the product.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR

IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND

NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

CCVP, the Cisco logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco

Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco,

the Cisco

Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco

Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0709R)

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

The Java logo is a trademark or registered trademark of Sun Microsystems, Inc. in the U.S. or other countries.

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

CONTENTS

Preface xiii

Overview xiii

Audience xiii

Organization xiv

Related Topics

• Understanding Interactions with Other Cisco Unified Communications

Products, page 2-2

• Understanding the Phone Startup Process, page 2-8

• Network Configuration Menu, page 4-7

What Features are Supported?

The Cisco Unified IP Phones 7906G and 7911G function much like traditional analog phones, allowing you to place and receive telephone calls. In addition to traditional telephony features, each Cisco IP Phone includes features that enable you to administer and monitor the phone as a network device.

This section includes the following topics:

• Feature Overview, page 1-10

• Configuring Telephony Features, page 1-11

Transport Layer Security (TLS)

TLS is a standard protocol for securing and authenticating communications.

When security is implemented, Cisco

Unified IP Phones use the TLS protocol when securely registering with Cisco

Unified Communications

Manager.

Trivial File Transfer Protocol (TFTP)

TFTP allows you to transfer files over the network.

On the Cisco Unified IP Phone, TFTP enables you to obtain a configuration file specific to the phone type.

TFTP requires a TFTP server in your network, which can be automatically identified from the DHCP server. If more than one TFTP server is running in your network, you must manually assign a TFTP server to each phone locally.

User Datagram Protocol (UDP)

UDP is a connectionless messaging protocol for delivery of data packets.

Cisco Unified IP Phones receive and process UDP messages.

Table 1-1 Supported Networking Protocols on the Cisco Unified IP Phone (continued)

Networking Protocol Purpose Usage Notes

Chapter 1 An Overview of the Cisco Unified IP Phone

What Features are Supported?

1-10

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

• Configuring Network Parameters Using the Cisco Unified IP Phone,

page 1-11

• Providing Users with Feature Information, page 1-12

Feature Overview

Cisco Unified IP Phones provide core business features, such as call forwarding and transferring, redialing, speed dialing, conference calling, and voice messaging system access. Cisco

Unified IP phones also provide a variety of other features. For an overview of the telephony features that the Cisco

Unified IP Phone supports, see the “Telephony Features Available for the

Cisco Unified IP Phone” section on page 5-2.

As with other network devices, you must configure Cisco Unified IP Phones to prepare them to access Cisco

Unified Communications Manager and the rest of the IP network. Using DHCP, you have fewer settings to configure on a phone, but if your network requires it, you can manually configure an IP address, TFTP server, and subnet mask. For instructions on configuring the network settings on the Cisco

Unified IP Phones, see Chapter 4, “Configuring Settings on the

Cisco Unified IP Phone.”

The Cisco Unified IP Phone can interact with other services and devices on your IP network to provide enhanced functionality. For example, you can integrate the Cisco

Unified IP Phones with the corporate Lightweight Directory Access Protocol 3 (LDAP3) standard directory to enable users to search for co-workers contact information directly from their IP phones. Or, you can also use XML to enable users to access information such as weather, stocks, quote of the day, and other web-based information. For information about configuring such services, see the

“Configuring Corporate and Personal Directories” section on page 5-21

and the “Setting Up Services” section on page 5-23.

Finally, because the Cisco Unified IP Phone is a network device, you can obtain detailed status information from it directly. This information can assist you with troubleshooting any problems users might encounter when using their IP phones. See

Chapter 7, “Viewing Model Information, Status, and Statistics on the

Cisco Unified IP Phone,” for more information.

1-11

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

What Features are Supported?

Related Topics

• Configuring Settings on the Cisco Unified IP Phone, page 4-1

• Configuring Features, Templates, Services, and Users, page 5-1

• Troubleshooting and Maintenance, page 9-1

Configuring Telephony Features

You can modify certain settings for the Cisco Unified IP Phone from the Cisco

Unified Communications Manager Administration application. Use this web-based application to set up phone registration criteria and calling search spaces, to configure corporate directories and services, and to modify phone button templates, among other tasks. See the

“Telephony Features Available for the Cisco Unified IP Phone” section on page 5-2 and

Cisco Unified Communications Manager Administration Guide for additional information.

For more information about the Cisco Unified Communications Manager Administration application, refer to Cisco

Unified Communications Manager

documentation, including Cisco

Unified Communications Manager System

Guide. You can also use the context-sensitive help available within the application

for guidance.

You can access the complete Cisco Unified Communications Manager documentation suite at this location:

http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_support_ series_home.html

Related Topic

• Telephony Features Available for the Cisco Unified IP Phone, page 5-2

Configuring Network Parameters Using the Cisco Unified IP Phone

You can configure parameters such as DHCP, TFTP, and IP settings on the phone itself. You can also obtain statistics about a call or firmware versions on the phone.

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

1-12

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

For more information about configuring features and viewing statistics from the phone, see

Chapter 4, “Configuring Settings on the Cisco Unified IP Phone,” and

see Chapter 7, “Viewing Model Information, Status, and Statistics on the

Cisco Unified IP Phone.”

Providing Users with Feature Information

If you are a system administrator, you are likely the primary source of information for Cisco

Unified IP Phone users in your network or company. To ensure that you distribute the most current feature and procedural information, familiarize yourself with Cisco

Unified IP Phone documentation. Make sure to visit the

Cisco

Unified IP Phone web site:

http://www.cisco.com/en/US/products/hw/phones/ps379/tsd_products_support_s eries_home.html

From this site, you can view and order various user guides, including wallet cards. For complete ordering information, see the

“Document Conventions” section on

page xiv.

In addition to providing users with documentation, it is important to inform them of available Cisco

Unified IP Phone features—including features specific to your company or network—and of how to access and customize those features, if appropriate.

For a summary of some of the key information that phone users need their system administrators to provide, see

Appendix A, “Providing Information to Users.”

Understanding Security Features for Cisco Unified IP Phones

Implementing security in the Cisco Unified Communications Manager system prevents identity theft of the phone and Cisco

Unified Communications Manager server, prevents data tampering, and prevents call signaling and media stream tampering.

1-13

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

To alleviate these threats, the Cisco Unified Communications network establishes and maintains authenticated and encrypted communication streams between a phone and the server, digitally signs files before they are transferred to a phone and encrypts media streams between Cisco

Unified IP phones.

If you configure security-related settings in Cisco Unified Communications Manager Administration, the phone configuration file will contain sensitive information. To ensure the privacy of a configuration file, you must configure it for encryption. For detailed information, refer to the “Configuring Encrypted Phone Configuration Files” chapter in Cisco Unified Communications Manager Security Guide.

Tabl e 1-2 shows where you can find additional information about security in this

and other documents.

Ta b l e 1-2 Cisco Unified IP Phone Security Topics

Topic Reference

Detailed explanation of security, including set up, configuration, and troubleshooting information for Cisco

Unified Communications Manager and

Cisco

Unified IP Phones

Refer to Cisco Unified Communications Manager

Security Guide.

Security features supported on the Cisco Unified IP Phone

See the “Overview of Supported Security

Features” section on page 1-15.

Restrictions regarding security features See the “Security Restrictions” section on

page 1-25.

Identifying phone calls for which security is implemented

See the “Identifying Encrypted and Authenticated

Phone Calls” section on page 1-19.

Transport Layer Security (TLS) connection • See the “What Networking Protocols Are

Used?” section on page 1-4.

• See the “Understanding Phone Configuration

Files” section on page 2-6.

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

1-14

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

802.1X authentication for Cisco Unified IP Phones

See these sections:

• “Supporting 802.1X Authentication on Cisco

Unified IP Phones” section on page 1-23

• “Security Configuration Menu” section on

page 4-38

• “802.1X Authentication and Status” section

on page 4-43

• “Troubleshooting Cisco Unified IP Phone

Security” section on page 9-12

Security and the phone startup process See the “Understanding the Phone Startup

Process” section on page 2-8.

Security and phone configuration files See the “Understanding Phone Configuration

Files” section on page 2-6.

Changing the TFTP Server 1 or TFTP Server 2 option on the phone when security is implemented

See the “Network Configuration Menu” section on

page 4-7.

Understanding security icons in the CallManager

1 through Call Manager 5 options in

the Device Configuration Menu on the phone

See the “CallManager Configuration Menu”

section on page 4-15.

Items on the Security Configuration menu that you access from the Device Configuration menu on the phone

See the “Security Configuration Menu” section on

page 4-30.

Items on the Security Configuration menu that you access from the Settings menu on the phone

See the “Security Configuration Menu” section on

page 4-38.

Unlocking the certificate trust list (CTL) file See the “CTL File Screen” section on page 4-40.

Disabling access to a phone’s web pages See the “Disabling and Enabling Web Page

Access” section on page 8-3.

Troubleshooting • See the “Troubleshooting Cisco Unified IP

Phone Security” section on page 9-12.

• See the Cisco Unified Communications

Manager Security Guide, Troubleshooting

chapter.

Table 1-2 Cisco Unified IP Phone Security Topics (continued)

Topic Reference

1-15

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

Overview of Supported Security Features

This section provides an overview of the security features that the phone supports. For more information about these features and about Cisco

Unified Communications Manager and Cisco Unified IP Phone security,

refer to Cisco

Unified Communications Manager Security Guide.

For information about current security settings on a phone, look at the Security Configuration menus (press the Applications Menu button and choose Settings

> Security Configuration or Settings > Device Configuration > Security Configuration). For more information, see

Chapter 4, “Configuring Settings on

the Cisco Unified IP Phone.”

Note Most security features are available only if a certificate trust list (CTL) is installed

on the phone. For more information about the CTL, refer to Cisco

Unified

Communications Manager Security Guide.

Deleting the CTL file from the phone See the “Resetting or Restoring the

Cisco Unified IP Phone” section on page 9-21.

Resetting or restoring the phone See the “Resetting or Restoring the

Cisco Unified IP Phone” section on page 9-21.

802.1X Authentication for Cisco Unified IP Phones

See these sections:

• “Supporting 802.1X Authentication on Cisco

Unified IP Phones” section on page 1-23

• “802.1X Authentication and Status” section

on page 4-43

• “Troubleshooting Cisco Unified IP Phone

Security” section on page 9-12

Table 1-2 Cisco Unified IP Phone Security Topics (continued)

Topic Reference

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

1-16

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Ta b l e 1-3 Overview of Security Features

Feature Description

Image authentication Signed binary files (with the extension .sbn) prevent

tampering with the firmware image before it is loaded on a phone. Tampering with the image causes a phone to fail the authentication process and reject the new image.

802.1X Authentication The Cisco Unified IP Phone can use 802.1X authentication to request and gain access to the network. See the

“Supporting

802.1X Authentication on Cisco Unified IP Phones” section on page 1-23 for more information.

Customer-site certificate installation Each Cisco Unified IP Phone requires a unique certificate for

device authentication. Phones include a manufacturing installed certificate (MIC), but for additional security, you can specify in Cisco

Unified Communications Manager Administration that a certificate be installed by using the Certificate Authority Proxy Function (CAPF). Alternatively, you can install an Locally Significant Certificate (LSC) from the Security Configuration menu on the phone. See the

“Configuring Security on the Cisco Unified IP Phone” section on page 3-17 for more information.

Device authentication Occurs between the Cisco Unified Communications Manager

server and the phone when each entity accepts the certificate of the other entity. Determines whether a secure connection between the phone and a Cisco

Unified Communications Manager should occur, and, if necessary, creates a secure signaling path between the entities by using transport layer security (TLS) protocol. Cisco

Unified Communications Manager does not register phones configured in authenticated or encrypted mode unless they can be authenticated by the Cisco Unified Communications Manager.

File authentication Validates digitally signed files that the phone downloads. The

phone validates the signature to make sure that file tampering did not occur after the file creation. Files that fail authentication are not written to Flash memory on the phone. The phone rejects such files without further processing.

1-17

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

Signaling Authentication Uses the TLS protocol to validate that no tampering has

occurred to signaling packets during transmission.

Manufacturing installed certificate Each Cisco Unified IP Phones 7906G and 7911G contains a

unique MIC, which is used for device authentication. The MIC is a permanent unique proof of identity for the phone, and allows Cisco

Unified Communications Manager to

authenticate the phone.

Secure SRST reference

(SCCP phones only)

After you configure a SRST reference for security and then reset the dependent devices in Cisco

Unified Communications Manager Administration, the TFTP server adds the SRST certificate to the phone cnf.xml file and sends the file to the phone. A secure phone then uses a TLS connection to interact with the SRST-enabled router.

Media encryption Uses SRTP to ensure that the media streams between

supported devices proves secure and that only the intended device receives and reads the data. Includes creating a media master key pair for the devices, delivering the keys to the devices, and securing the delivery of the keys while the keys are in transport.

Signaling Encryption

(SCCP phones only)

Ensures that all SCCP signaling messages that are sent between the device and the Cisco

Unified Communications

Manager server are encrypted.

CAPF (Certificate Authority Proxy Function)

Implements parts of the certificate generation procedure that are too processing-intensive for the phone, and it interacts with the phone for key generation and certificate installation. The CAPF can be configured to request certificates from customer-specified certificate authorities on behalf of the phone, or it can be configured to generate certificates locally.

Table 1-3 Overview of Security Features (continued)

Feature Description

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

1-18

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Related Topics

• Identifying Encrypted and Authenticated Phone Calls, page 1-19

• Supporting 802.1X Authentication on Cisco Unified IP Phones, page 1-23

• Security Restrictions, page 1-25

• Device Configuration Menu, page 4-15

Optional disabling of the web server functionality for a phone

You can prevent access to a phone’s web page, which displays a variety of operational statistics for the phone.

Phone hardening Additional security options, which you control from

Cisco

Unified Communications Manager Administration:

• Disabling PC port (applies to 7911G only)

• Disabling Gratuitous Address Resolution Protocol

(GARP)

• Disabling PC Voice VLAN access (applies to 7911G

only)

• Disabling access to the Setting menus, or providing

restricted access that allows access to the User Preferences menu and saving volume changes only

• Disabling access to web pages for a phone.

Note You can view current settings for the PC Port

Disabled, GARP Enabled, and Voice VLAN enabled options by looking at the phone’s Security Configuration menu. For more information, see the

“Device Configuration Menu” section on page 4-15.

Table 1-3 Overview of Security Features (continued)

Feature Description

1-19

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

Understanding Security Profiles

All Cisco Unified IP Phones that support Cisco Unified Communications Manager 5.0 and later use a security profile, which defines whether the phone is nonsecure, authenticated, or encrypted. For information about configuring the security profile and applying the profile to the phone, refer to the

Cisco

Unified Communications Manager Security Guide.

To view the security mode that is set for the phone, look at the Security Mode setting in the Security Configuration menu. For more information, see the

“Security Configuration Menu” section on page 7-2.

Related Topics

• Identifying Encrypted and Authenticated Phone Calls, page 1-19

• Security Restrictions, page 1-25

Identifying Encrypted and Authenticated Phone Calls

When security is implemented for a phone, you can identify authenticated or encrypted phone calls by icons on the LCD screen on the phone.

In an authenticated call, all devices participating in the establishment of the call are authenticated by Cisco

Unified Communications Manager. When a call in progress is authenticated end-to-end, the call progress icon to the right of the call duration timer in the phone LCD screen changes to the following icon:

In an encrypted call, all devices participating in the establishment of the call are authenticated by the Cisco

Unified Communications Manager. In addition, call signaling and media streams are encrypted. An encrypted call offers the highest level of security, providing integrity and privacy to the call. When a call in progress is being encrypted, the call progress icon to the right of the call duration timer in the phone LCD screen changes to the following icon:

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

1-20

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Note If the call is routed through a non-IP call leg, for example, PSTN, the call will be

nonsecure even though it is encrypted within the IP network and has a lock icon associated with it.

Related Topic

• Understanding Security Features for Cisco Unified IP Phones, page 1-12

• Supporting 802.1X Authentication on Cisco Unified IP Phones, page 1-23

• Security Restrictions, page 1-25

Establishing and Identifying Secure Conference Calls

You can initiate a secure conference call and monitor the security level of participants. A secure conference call is established using this process:

1. A user initiates the conference from a secure phone (encrypted or

authenticated security mode).

2. Cisco Unified Communications Manager assigns a secure conference bridge

to the call.

3. As participants are added, Cisco Unified Communications Manager verifies

the security mode of each phone (encrypted or authenticated) and maintains the secure level for the conference.

4. The phone displays the security level of the conference call. A secure

conference displays

(encrypted) or ( authenticated) icon to the

right of “Conference” on the phone screen. If icon displays, the conference is not secure.

Note There are interactions, restrictions, and limitations that affect the security level of

the conference call depending on the security mode of the participant’s phones and the availability of secure conference bridges. See

Tabl e 1-4 and Tab le 1-5 for

information about these interactions.

1-21

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

Call Security Interactions and Restrictions

Cisco Unified Communications Manager checks the phone security status when conferences are established and changes the security indication for the conference or blocks the completion of the call to maintain integrity and also security in the system.

Tabl e 1-4 provides information about changes to call security levels when

using Barge.

Tabl e 1-4 provides information about changes to conference security levels

depending on the initiator’s phone security level, the security levels of participants, and the availability of secure conference bridges.

Ta b l e 1-4 Call Security Interactions When Using Barge

Initiator’s Phone Security Level

Feature Used

Call Security Level

Results of Action

Non-secure Barge Encrypted call Call barged and identified as non-secure

call

Secure (encrypted) Barge Authenticated

call

Call barged and identified as authenticated call

Secure (authenticated)

Barge Encrypted call Call barged and identified as

authenticated call

Non-secure Barge Authenticated

call

Call barged and identified as non-secure call

Ta b l e 1-5 Security Restrictions with Conference Calls

Initiator’s Phone Security Level

Feature Used

Security Level of Participants

Results of Action

Non-secure Conference Encrypted or

authenticated

Non-secure conference bridge

Non-secure conference

Secure (encrypted or authenticated)

Conference At least one member is

non-secure

Secure conference bridge

Non-secure conference

Secure (encrypted) Conference All participants are

encrypted

Secure conference bridge

Secure encrypted level conference

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

1-22

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Secure (authenticated)

Conference All participants are

encrypted or authenticated

Secure conference bridge

Secure authenticated level conference

Non-secure Conference Encrypted or

authenticated

Only secure conference bridge is available and used

Non-secure conference

Secure (encrypted or authenticated)

Conference Encrypted or

authenticated

Only non-secure conference bridge is available and used

Non-secure conference

Secure (encrypted or authenticated)

Conference Secure or encrypted Conference remains secure

When one participant tries to Hold the call with MOH, the MOH does not play.

Secure (encrypted) Join Encrypted or

authenticated

Secure conference bridge

Conference remains secure (encrypted or authenticated)

Non-secure cBarge All participants are

encrypted

Secure conference bridge

Conference changes to non-secure

Non-secure MeetMe Minimum security level is

encrypted

Initiator receives message “Does not meet Security Level”, call rejected.

Secure (encrypted) MeetMe Minimum security level is

authenticated

Secure conference bridge

Conference accepts encrypted and authenticated calls

Secure (encrypted) MeetMe Minimum security level is

non-secure

Only secure conference bridge available and used

Conference accepts all calls

Table 1-5 Security Restrictions with Conference Calls (continued)

Initiator’s Phone Security Level Feature Used

Security Level of Participants Results of Action

1-23

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

Supporting 802.1X Authentication on Cisco Unified IP Phones

These sections provide information about 802.1X support on the Cisco Unified IP Phones:

• Overview, page 1-23

• Required Network Components, page 1-23

• Best Practices—Requirements and Recommendations, page 1-24

Overview

Cisco Unified IP phones and Cisco Catalyst switches have traditionally used Cisco Discovery Protocol (CDP) to identify each other and to determine parameters such as VLAN allocation and inline power requirements. However, CDP is not used to identify any locally attached PCs; therefore, Cisco Unified IP Phones provide an EAPOL pass-through mechanism, whereby a PC locally attached to the IP phone may pass through EAPOL messages to the 802.1X authenticator in the LAN switch. This capability prevents the IP phone from having to act as the authenticator, yet allows the LAN switch to authenticate a data end point prior to accessing the network.

In conjunction with the EAPOL pass-through mechanism, Cisco Unified IP Phones provide a proxy EAPOL-Logoff mechanism. If the locally attached PC is disconnected from the IP phone, the LAN switch would not see the physical link fail, because the link between the LAN switch and the IP phone is maintained. To avoid compromising network integrity, the IP phone sends an EAPOL-Logoff message to the switch on behalf of the downstream PC, which triggers the LAN switch to clear the authentication entry for the downstream PC.

The Cisco Unified IP phones contain an 802.1X supplicant in addition to the EAPOL pass-through mechanism. This supplicant allows network administrators to control the connectivity of IP phones to the LAN switch ports. The IP phone

802.1X supplicant implements the EAP-MD5 option for 802.1X authentication.

Required Network Components

Support for 802.1X authentication on Cisco Unified IP Phones requires several components, including:

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

1-24

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

• Cisco Unified IP Phone—The phone acts as the 802.1X supplicant, which

initiates the request to access the network.

• Cisco Secure Access Control Server (ACS) (or other third-party

authentication server)—The authentication server and the phone must both be configured with a shared secret that is used to authenticate the phone.

• Cisco Catalyst Switch (or other third-party switch)—The switch must support

802.1X so it can act as the authenticator and pass the messages between the phone and the authentication server. When the exchange is completed, the switch grants or denies the phone access to the network.

Best Practices—Requirements and Recommendations

• Enable 802.1X Authentication—If you want to use the 802.1X standard to

authenticate Cisco Unified IP Phones, make sure that you have properly configured the other components before enabling it on the phone. See the

“802.1X Authentication and Status” section on page 4-43 for more

information.

• Configure PC Port—The 802.1X standard does not take into account the use

of VLANs and thus recommends that only a single device be authenticated to a specific switch port. However, some switches (including Cisco Catalyst switches) support multi-domain authentication. The switch configuration determines whether you can connect a PC to the phone PC port.

–

Enabled—If you are using a switch that supports multi-domain authentication, you can enable the PC port and connect a PC to it. In this case, Cisco Unified IP Phones support proxy EAPOL-Logoff to monitor the authentication exchanges between the switch and the attached PC. For more information about IEEE 802.1X support on the Cisco Catalyst switches, refer to the Cisco Catalyst switch configuration guides at:

http://www.cisco.com/en/US/products/hw/switches/ps708/tsd_products _support_series_home.htmll

–

Disabled—If the switch does not support multiple 802.1X-compliant devices on the same port, you should disable the PC Port when 802.1X authentication is enabled. See the

“Security Configuration Menu” section on page 4-30 for more information. If you do not disable this port and

subsequently attempt to attach a PC to it, the switch will deny network access to both the phone and the PC.

1-25

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

• Configure Voice VLAN—Because the 802.1X standard does not account for

VLANs, you should configure this setting based on the switch support.

–

Enabled—If you are using a switch that supports multi-domain authentication, you can continue to use the voice VLAN.

–

Disabled—If the switch does not support multi-domain authentication, disable the Voice VLAN and consider assigning the port to the native VLAN. See the

“Security Configuration Menu” section on page 4-30 for

more information.

• Enter MD5 Shared Secret—If you disable 802.1X authentication or perform

a factory reset on the phone, the previously configured MD5 shared secret is deleted. See the

“802.1X Authentication and Status” section on page 4-43 for

more information.

Security Restrictions

A user cannot barge into an encrypted call if the phone that is used to barge is not configured for encryption. When barge fails in this case, a reorder tone (fast busy tone) plays on the barge initiator's phone.

If the initiator phone is configured for encryption, the barge initiator can barge into an authenticated or nonsecure call from the encrypted phone. After the barge occurs, Cisco

Unified Communications Manager classifies the call as nonsecure.

If the initiator phone is configured for encryption, the barge initiator can barge into an encrypted call, and the phone indicates that the call is encrypted.

A user can barge into an authenticated call, even if the phone that is used to barge is nonsecure. The authentication icon continues to appear on the authenticated devices in the call, even if the initiator phone does not support security.

Overview of Configuring and Installing Cisco

Unified IP Phones

When deploying a new Unified Communications system, system administrators and network administrators must complete several initial configuration tasks to prepare the network for Unified Communications service. For information and a

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

1-26

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

checklist for setting up and configuring a complete Cisco Unified Communications network, refer to the “System Configuration Overview” chapter in the Cisco

Unified Communications Manager System Guide.

After you have set up the Unified Communications system and configured system-wide features in Cisco

Unified Communications Manager, you can add IP

phones to the system.

The following topics provide an overview of procedures for adding Cisco

Unified IP Phones to your network:

• Configuring Cisco Unified IP Phones in Cisco Unified Communications

Manager, page 1-26

• Installing Cisco Unified IP Phones, page 1-32

Configuring Cisco Unified IP Phones in Cisco Unified Communications Manager

To add phones to the Cisco Unified Communications Manager database, you can use:

• Auto-registration

• Cisco Unified Communications Manager Administration

• Bulk Administration Tool (BAT)

• BAT and the Tool for Auto-Registered Phones Support (TAPS)

For more information about these choices, see the “Adding Phones to the Cisco

Unified Communications Manager Database” section on page 2-11.

For general information about configuring phones in Cisco Unified Communications Manager, refer to the “Cisco

Unified IP Phone” chapter in the

Cisco

Unified Communications Manager System Guide and to the “Configuring

Cisco Unified IP Phone Configuration” chapter in the Cisco

Unified

Communications Manager Administration Guide.

1-27

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

Checklist for Configuring the Cisco Unified IP Phones 7906G and 7911G in Cisco

Unified Communications Manager

Tabl e 1-6 provides an overview and checklist of configuration tasks for the

Cisco Unified IP Phones 7906G and 7911G in Cisco Unified Communications Manager. The list presents tasks in a suggested order to guide you through the phone configuration process. Some tasks are optional, depending on your system and user needs. For detailed procedures and information, refer to the sources in the list.

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

1-28

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Ta b l e 1-6 Checklist for Configuring the Cisco Unified IP Phones 7906G and 7911G in

Cisco Unified Communications Manager

Configuration Step and Purpose For More Information

Step 1

Gather the following information about the phone:

• Phone Model

• MAC address

• Physical location of the phone

• Name or user ID of phone user

• Device pool

• Calling search space and location information (if

used)

• Number of lines, associated directory numbers

(DNs), and partitions to assign to the phone

• Cisco Unified Communications Manager user to

associate with the phone

• Phone usage information that affects phone button

template, softkey template, phone features, IP Phone services, or phone applications

Provides list of configuration requirements for setting up phones.

Identifies preliminary configuration that you need to perform before configuring individual phones, such as phone button templates or softkey templates.

Refer to the Cisco Unified

Communications Manager System Guide, Cisco

Unified IP Phone

chapter.

See the “Telephony Features

Available for the Cisco Unified IP Phone” section on page 5-2.

1-29

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

Step 2

Customize phone button templates (if required).

Adds Privacy feature to meet user needs.

Refer to the Cisco Communications Manager Administration Guide, “Phone Button Template Configuration” chapter.

See the “Modifying Phone Button

Templates” section on page 5-22.

Step 3

Add and configure the phone by completing these required fields in the Phone Configuration window:

• Phone type

• MAC address

• Device pool

• Button template

• Product Specific Configuration

• Softkey template (if customized)

Adds the device with its default settings to the Cisco

Unified Communications Manager database.

Refer to the Cisco Communications Manager Administration Guide, Cisco

Unified IP Phone

Configuration chapter.

For information about Product Specific Configuration fields, refer to

? Button Help in the Phone

Configuration window.

Step 4

Add and configure the directory number on the phone by completing these required fields in the Directory Number Configuration window.

• Directory number

• Multiple Calls and Call Waiting

• Call Forwarding and Pickup (if used)

• Voice Messaging (if used)

Adds primary and secondary directory numbers and features associated with directory numbers to the phone.

Refer to the Cisco Communications Manager Administration Guide:

• “Directory Number

Configuration” chapter

• “Creating a Cisco Unity Voice

Mailbox” section

See the “Telephony Features

Available for the Cisco Unified IP Phone” section on page 5-2.

Table 1-6 Checklist for Configuring the Cisco Unified IP Phones 7906G and 7911G in

Cisco Unified Communications Manager (continued)

Configuration Step and Purpose For More Information

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

1-30

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Step 5

Customize softkey templates (optional).

Adds, deletes, or changes order of softkey features that display on the user’s phone to meet feature usage needs.

Refer to the Cisco Communications Manager Administration Guide, “Softkey Template Configuration” chapter.

See the “Configuring Softkey

Templates” section on page 5-23.

Step 6

Configure speed-dial buttons and assign speed-dial numbers (optional).

Adds speed-dial numbers.

Note Users can change speed-dial settings on their

phones with Cisco

Unified Communications

Manager User Options.

Refer to the Cisco Communications Manager Administration Guide, Cisco

Unified IP Phone Configuration chapter, “Configuring Speed-Dial Buttons” section.

Step 7

Configure Cisco Unified IP Phone services and assign services (optional).

Provides IP Phone services.

Note Users can add or change services on their

phones with Cisco

Unified Communications

Manager User Options.

Refer to the Cisco Communications Manager Administration Guide, Cisco

Unified IP Phone Services Configuration chapter.

See the “Setting Up Services”

section on page 5-23.

Step 8

Assign services to phone buttons (optional).

Provides single button access to an IP phone service or URL.

Refer to Cisco Unified

Communications Manager Administration Guide, “Cisco

Unified IP Phone Configuration” chapter, “Adding a Cisco Unified IP Phone Service to a Phone Button” section.

Table 1-6 Checklist for Configuring the Cisco Unified IP Phones 7906G and 7911G in

Cisco Unified Communications Manager (continued)

Configuration Step and Purpose For More Information

1-31

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

Step 9

Add user information by configuring required fields (optional).

• Name (last)

• User ID

• Password (for User Options web pages)

• PIN (for use with Extension Mobility

Adds user information to the global directory for Cisco

Unified Communications Manager.

Note To search for a user in the Corporate Directory,

you must add users to Cisco

Unified

Communications Manager.

Refer to the Cisco Communications Manager Administration Guide, “End User Configuration” chapter.

See the “Adding Users to

Cisco Unified Communications Manager” section on page 5-24.

Step 10

Add a user to a user group.

Assigns users a common list of roles and permissions that apply to all users in a user group. Administrators can manage user groups, roles, and permissions to control the level of access (and, therefore, the level of security) for system users.

Refer to the Cisco Communications Manager Administration Guide, “User Group Configuration” chapter, “Adding Users to a User Group” section.

Step 11

Associate a user with a phone (optional).

Provides users with control over their phone such as forwarding calls or adding speed-dial numbers or services.

Note Some phones, such as those in conference

rooms, do not have an associated user.

Refer to the Cisco Communications Manager Administration Guide, “End User Configuration” chapter, “Associating Devices to a User” section.

Table 1-6 Checklist for Configuring the Cisco Unified IP Phones 7906G and 7911G in

Cisco Unified Communications Manager (continued)

Configuration Step and Purpose For More Information

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

1-32

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Installing Cisco Unified IP Phones

After you have added the phones to the Cisco Unified Communications Manager database, you can complete the phone installation. You (or the phone users) can install the phone at the users’s location. The Cisco

Unified IP Phone Installation Guide, which is available on Cisco.com, provides directions for connecting the phone footstand, handset, cables, and other accessories.

Note Before you install a phone, even if it is new, upgrade the phone to the current

firmware image. For information about upgrading your phone, see the Readme file for your phone model located at:

http://www.cisco.com/cgi-bin/tablebuild.pl/ip-7900ser

After the phone is connected to the network, the phone startup process begins, and the phone registers with Cisco

Unified Communications Manager. To finish installing the phone, configure the network settings on the phone depending on whether you enable or disable DHCP service.

If you used auto-registration, you need to update the specific configuration information for the phone such as associating the phone with a user, changing the button table, or directory number.

Checklist for Installing the Cisco Unified IP Phones 7906G and 7911G

Tabl e 1-7 provides an overview and checklist of installation tasks for the

Cisco Unified IP Phone 7906G and 7911G. The list presents tasks in a suggested order to guide you through the phone installation process. Some tasks are optional, depending on your system and user needs. For detailed procedures and information, refer to the sources in the list.

1-33

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

Ta b l e 1-7 Checklist for Installing the Cisco Unified IP Phones 7906G and 7911G

Installation Step and Purpose For More Information

Step 1

Choose the power source for the phone:

–

Power over Ethernet (PoE)

–

External power supply

Determines how the phone receives power.

See the “Providing Power to the

Cisco Unified IP Phones 7906G and 7911G” section on page 2-4.

Step 2

Assemble the phone, adjust phone placement, and connect the network cable.

Locates and installs the phone in the network.

See the “Installing the Cisco Unified IP

Phone” section on page 3-8.

See the “Installing the Cisco Unified IP

Phone” section on page 3-8.

Step 3

Monitor the phone startup process.

Verifies that phone is configured properly.

See the “Verifying the Phone Startup

Process” section on page 3-16.

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

1-34

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Step 4

Configure these network settings on the phone by choosing Settings > Network Configuration.

Note Unlock the phone settings before making

these changes from the phone.

To enable DHCP:

1. Set DHCP Enabled to Ye s.

2. To use an alternate TFTP server, set Alternate

TFTP Server to Yes . Enter IP address for TFTP Server 1.

To d is abl e DH CP:

1. Set DHCP Enabled to No.

2. Enter static IP address for phone.

3. Enter subnet mask.

4. Enter default router IP addresses.

5. Enter domain name where phone resides.

6. Set Alternate TFTP Server to Ye s

Enter IP address for TFTP Server 1.

Using DHCP—The IP address is automatically assigned and the Cisco

Unified IP Phone is directed

to a TFTP Server.

Note Consult with the network administrator if

you need to assign an alternative TFTP server instead of using the TFTP server assigned by DHCP.

Without DHCP—You must configure the IP address, TFTP server, subnet mask, domain name, and default router locally on the phone.

See the “Configuring Startup Network

Settings” section on page 3-16.

See the “Network Configuration Menu”

section on page 4-7.

Table 1-7 Checklist for Installing the Cisco Unified IP Phones 7906G and 7911G (continued)

Installation Step and Purpose For More Information

1-35

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

Step 5

Set up security on the phone.

Provides protection against data tampering threats and identity theft of phones.

See the “Configuring Security on the

Cisco Unified IP Phone” section on page 3-17.

Step 6

Make calls with the Cisco Unified IP Phone.

Verifies that the phone and features work correctly.

Refer to the Cisco Unified IP

Phones

7906G and 7911G Guide.

Step 7

Provide information to end users about how to use their phones and how to configure their phone options.

Ensures that users have adequate information to successfully use their Cisco

Unified IP Phones.

See Appendix A, “Providing

Information to Users.”

Table 1-7 Checklist for Installing the Cisco Unified IP Phones 7906G and 7911G (continued)

Installation Step and Purpose For More Information

Chapter 1 An Overview of the Cisco Unified IP Phone

Overview of Configuring and Installing Cisco Unified IP Phones

1-36

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

CHAPTER

2-1

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Preparing to Install the Cisco Unified IP Phone on Your Network

Cisco Unified IP Phones enable you to communicate by using voice over a data network. To provide this capability, the IP Phones depend upon and interact with several other key Cisco

Unified Communications and network components,

including Cisco

Unified Communications Manager, DNS and DHCP servers,

TFTP servers, and media resources.

This chapter provides an overview of the interaction between the Cisco Unified IP Phones

7906G and 7911G and other key components of the Voice-over-IP (VoIP)

network, and focuses on the interactions between the Cisco

Unified IP

Phones

7906G and 7911G and Cisco Unified Communications Manager, TFTP

server, and switches. It includes these topics:

• Understanding Interactions with Other Cisco Unified Communications

Products, page 2-2

• Understanding the Phone Startup Process, page 2-8

• Providing Power to the Cisco Unified IP Phones 7906G and 7911G, page 2-4

• Understanding Phone Configuration Files, page 2-6

• Adding Phones to the Cisco Unified Communications Manager Database,

page 2-11

• Using Cisco Unified IP Phones with Different Protocols, page 2-15

• Determining the MAC Address of a Cisco Unified IP Phone, page 2-17

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Understanding Interactions with Other Cisco Unified Communications Products

2-2

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Understanding Interactions with Other Cisco

Unified Communications Products

To function in the Unified Communications network, the Cisco Unified IP Phone must be connected to a networking device, such as a Cisco Catalyst switch. You must also register the Cisco

Unified IP Phone with a

Cisco

Unified Communications Manager system before sending and receiving

calls.

This section includes these topics:

• Understanding How the Cisco Unified IP Phone Interacts with

Cisco Unified Communications Manager, page 2-2

• Understanding How the Cisco Unified IP Phone Interacts with the VLAN,

page 2-3

Understanding How the Cisco Unified IP Phone Interacts with Cisco

Unified Communications Manager

Cisco Unified Communications Manager is an open and industry-standard call processing system. Cisco

Unified Communications Manager software sets up and tears down calls between phones, integrating traditional PBX functionality with the corporate IP network. Cisco

Unified Communications Manager manages the

components of the Cisco

Unified Communications system—the phones, the access gateways, and the resources necessary for features such as call conferencing and route planning. Cisco

Unified Communications Manager also provides authentication and encryption if configured for the communications system.

For information about configuring Cisco Unified Communications Manager to work with the IP devices described in this chapter, refer to

Cisco

Unified Communications Manager Administration Guide, Cisco Unified

Communications Manager System Guide, and Cisco

Unified Communications

Manager Security Guide.

For an overview of security functionality for the Cisco Unified IP Phone, see the

“Understanding Security Features for Cisco Unified IP Phones” section on page 1-12.

2-3

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Understanding Interactions with Other Cisco Unified Communications Products

Note If the Cisco Unified IP Phone model that you want to configure does not appear

in the Phone Type drop-down list in Cisco

Unified Communications Manager Administration, go to the following URL and install the latest support patch for your version of Cisco

Unified Communications Manager:

http://www.cisco.com/kobayashi/sw-center/sw-voice.shtml

Related Topic

• Telephony Features Available for the Cisco Unified IP Phone, page 5-2

Understanding How the Cisco Unified IP Phone Interacts with the VLAN

The Cisco Unified IP Phone 7911G has an internal Ethernet switch, which enables forwarding of packets to the phone and to the network port and access port on the back of the phone. The Cisco Unified IP Phone 7906G has an Ethernet port, which enables forwarding of packets to the phone and to the network port.

If a computer is connected to the access port (Cisco Unified IP Phone 7911G), the computer and the phone share the same physical link to the switch and the same port on the switch. This shared physical link affects the VLAN configuration on the network in the following ways:

• Although current VLANs might be configured on an IP subnet basis,

additional IP addresses may not be available to assign the phone to the same subnet as other devices that connect to the same port.

• Data traffic present on the data/native VLAN may reduce the quality of

Voice-over-IP traffic.

• Network security may necessitate the isolation of the VLAN voice traffic

from the VLAN data traffic.

You can resolve these issues by isolating the voice traffic onto a separate VLAN, so that the switch port to which the phone is connected uses separate VLANs for the following types of traffic:

• Voice traffic to and from the IP phone (auxiliary VLAN, on the

Cisco

Catalyst 6000 series, for example)

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Providing Power to the Cisco Unified IP Phones 7906G and 7911G

2-4

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

• Data traffic to and from the PC connected to the switch through the access

port of the IP phone (native VLAN, 7911G only)

Isolating the phones on a separate, auxiliary VLAN improves the quality of the voice traffic and allows a large number of phones to be added to an existing network in which there are not enough IP addresses for each phone.

For more information, refer to the documentation included with a Cisco switch. You can also access related documentation at this URL:

http://www.cisco.com/en/US/products/hw/switches/tsd_products_support_categ ory_home.html

Related Topics

• Understanding the Phone Startup Process, page 2-8

• Network Configuration Menu, page 4-7

Providing Power to the Cisco

Unified IP Phones 7906G and 7911G

The Cisco Unified IP Phones 7906G and 7911G can be powered with external power or with Power over Ethernet (PoE). External power is provided through a separate power supply. PoE is provided by a switch through the Ethernet cable attached to a phone.

These sections provide more information about powering a phone:

• Power Outage, page 2-5

• Power Guidelines, page 2-4

• Obtaining Additional Information about Power, page 2-5

Power Guidelines

Tabl e 2-1 provides guidelines that apply to external power and to PoE power for

the Cisco Unified IP Phones 7906G and 7911G.

2-5

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Providing Power to the Cisco Unified IP Phones 7906G and 7911G

Power Outage

Your accessibility to emergency service through the phone is dependent on the phone being powered. If there is an interruption in the power supply, Service and Emergency Calling Service dialing will not function until power is restored. In the case of a power failure or disruption, you may need to reset or reconfigure equipment before using the Service or Emergency Calling Service dialing.

Obtaining Additional Information about Power

For related information about power, refer to the documents shown in Tab le 2-2. These documents provide information about these topics:

• Cisco switches that work with the Cisco Unified IP Phones 7906G and

7911G

Ta b l e 2-1 Guidelines for Powering the Cisco Unified IP Phones 7906G and 7911G

Power Type Guidelines

External power— Provided through a Cisco external power supply.

The Cisco Unified IP Phone Series use the CP-PWR-CUBE-3 power supply.

External power— Provided through the Cisco Unified IP Phone Power Injector.

The Cisco Unified IP Phone Power Injector may be used with any Cisco

Unified IP Phone. Functioning as a midspan device, the injector delivers inline power to the attached phone. The Cisco Unified IP Phone Power Injector is connected between a switch port and the IP Phone, and supports a maximum cable length of 100m between the unpowered switch and the phone.

PoE power—Provided by a switch through the Ethernet cable attached to the phone.

• The Cisco Unified IP Phones 7906G and 7911G support both Cisco

inline power and IEEE 802.3af Power over Ethernet.

• To ensure uninterruptible operation of the phone, make sure that the

switch has a backup power supply.

• Make sure that the CatOS or IOS version running on your switch

supports your intended phone deployment. Refer to the documentation for your switch for operating system version information.

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Understanding Phone Configuration Files

2-6

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

• The Cisco IOS releases that support bidirectional power negotiation

• Other requirements and restrictions regarding power

Understanding Phone Configuration Files

Configuration files for a phone are stored on the TFTP server and define parameters for connecting to Cisco

Unified Communications Manager. In general, any time you make a change in Cisco Unified Communications Manager that requires the phone to be reset, a change is automatically made to the phone’s configuration file.

Configuration files also contain information about which image load the phone should be running. If this image load differs from the one currently loaded on a phone, the phone contacts the TFTP server to request the required load files. These files are digitally signed to ensure the authenticity of the files’ source.

Ta b l e 2-2 Related Documentation for Power

Document Topics URL

Cisco Unified IP Phone Power Injector http://www.cisco.com/en/US/products

/hw/phones/ps379/prod_installation_g uides_list.html

PoE Solutions http://www.cisco.com/en/US/netsol/n

s340/ns394/ns147/ns412/networking_ solutions_package.html

Cisco Catalyst Switches http://www.cisco.com/en/US/products

/hw/switches/tsd_products_support_c ategory_home.html

Integrated Service Routers http://www.cisco.com/en/US/products

/hw/routers/index.html

Cisco IOS Software http://www.cisco.com/en/US/products

/sw/iosswrel/products_ios_cisco_ios_ software_category_home.html

2-7

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Understanding Phone Configuration Files

In addition, if the device security mode in the configuration file is set to Authenticated and the CTL file on the phone has a valid certificate for Cisco

Unified Communications Manager, the phone establishes a TLS connection

to Cisco

Unified Communications Manager Administration. Otherwise, the

phone establishes a TCP connection.

Note If the device security mode in the configuration file is set to Authenticated or

Encrypted but the phone has not received a CTL file, the phone will continuously try to obtain a CTL file, so it can register securely.

Unified Communications Manager

Security Guide.

A phone requests a configuration file whenever it resets and registers with Cisco

Unified Communications Manager.

A phone accesses a default configuration file named XmlDefault.cnf.xml from the TFTP server when these conditions exist:

• You have enabled auto-registration in Cisco Unified Communications

Manager

• The phone has not been added to the Cisco Unified Communications

Manager database

• The phone is registering for the first time

If auto registration is not enabled and the phone has not been added to the Cisco

Unified Communications Manager Database, the phone registration request will be rejected. In this case, the phone will reset and attempt to register repeatedly.

If the phone has registered before, the phone will access the configuration file named SEPmac_address.cnf.xml, where mac_address is the MAC address of the phone. For more information about how the phone interacts with the TFTP server, refer to Cisco Unified Communications Manager System Guide, “Cisco TFTP” chapter.

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Understanding the Phone Startup Process

2-8

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

If you configure security-related settings in Cisco Unified Communications Manager Administration, the phone configuration file will contain sensitive information. To ensure the privacy of a configuration file, you must configure it for encryption. For more information, refer to the “Configuring Encrypted Phone Configuration Files” chapter in Cisco

Unified Communications Manager Security

Guide.

SIP Dial Rules

For Cisco Unified IP Phones running under SIP, the administrator uses dial rules to configure SIP phone dial plans. These dial plans must be associated with a SIP phone device to enable dial plans to be sent to the configuration file. If the administrator does not configure a SIP phone dial plan, the phone does not display any indication of a dial plan. In this case, you must press the Dial softkey, unless the phone supports key press markup language (KPML).

For more information on configuring SIP dial rules, refer to the

Cisco

Unified Communications Manager Administration Guide.

Understanding the Phone Startup Process

When connecting to the VoIP network, the Cisco IP Phone goes through a standard startup process, as described in

Tabl e 2-3. Depending on your specific

network configuration, not all of these steps may occur on your Cisco

Unified IP Phone.

2-9

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Understanding the Phone Startup Process

Ta b l e 2-3 Cisco Unified IP Phone Startup Process

Process Step and Purpose Related Topics

Step 1

Obtaining Power from the Switch.

If a phone is not using external power, the switch provides in-line power through the Ethernet cable attached to the phone.

See the “Providing Power to the

Cisco Unified IP Phones 7906G and 7911G” section on page 2-4.

See the “Resolving Startup Problems”

section on page 9-2.

Step 2

The Cisco IP Phone has non-volatile Flash memory in which it stores firmware images and user-defined preferences. At startup, the phone runs a bootstrap loader that loads a phone image stored in Flash memory. Using this image, the phone initializes its software and hardware.

See the “Resolving Startup Problems”

section on page 9-2.

Step 3

Configuring VLAN.

If the Cisco IP Phone is connected to a Cisco switch, the switch next informs the phone of the voice VLAN defined on the switch port. The phone needs to know its VLAN membership before it can proceed with the Dynamic Host Configuration Protocol (DHCP) request for an IP address.

If a third-party switch is used and VLANs are configured, the VLAN on the phone must be manually configured.

See the “Network Configuration Menu”

section on page 4-7.

See the “Resolving Startup Problems”

section on page 9-2.

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Understanding the Phone Startup Process

2-10

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Step 4

Obtaining an IP Address.

If the Cisco IP Phone is using DHCP to obtain an IP address, the phone queries the DHCP server to obtain one. If you are not using DHCP in your network, you must assign static IP addresses to each phone locally.

In addition to assigning an IP address, the DHCP server directs the Cisco

Unified IP Phone to a TFTP Server. If the phone has a statically defined IP address, you must configure the TFTP server locally on the phone; the phone then contacts the TFTP server directly.

Note You can also assign an alternative TFTP

server to use instead of the one assigned by DHCP.

See the “Network Configuration Menu”

section on page 4-7.

See the “Resolving Startup Problems”

section on page 9-2.

Step 5

Accessing a TFTP Server. See the “Network Configuration Menu”

section on page 4-7.

See the “Resolving Startup Problems”

section on page 9-2.

Step 6

Requesting the CTL file.

The TFTP server stores the certificate trust list (CTL) file. This file contains a list of Cisco

Unified Communications Managers and TFTP servers that the phone is authorized to connect to. It also contains the certificates necessary for establishing a secure connection between the phone and Cisco Unified Communications Manager.

Refer to the

Cisco

Unified Communications Manager

Security Guide, “Configuring the Cisco

CTL Client” chapter.

Table 2-3 Cisco Unified IP Phone Startup Process (continued)

Process Step and Purpose Related Topics

2-11

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Adding Phones to the Cisco Unified Communications Manager Database

Before installing the Cisco Unified IP phone, you must choose a method for adding phones to the Cisco

Unified Communications Manager database. These

sections describe the methods:

• Adding Phones with Auto-Registration, page 2-12

• Adding Phones with Auto-Registration and TAPS, page 2-13

• Adding Phones with Cisco Unified Communications Manager

Administration, page 2-14

• Adding Phones with BAT, page 2-14

Tabl e 2-4 provides an overview of these methods for adding phones to the

Cisco Unified Communications Manager database.

Ta b l e 2-4 Methods for Adding Phones to the Cisco Unified Communications Manager

Database

Method

Requires MAC Address?

Notes

Auto-registration No • Results in automatic assignment of directory

numbers.

• Not available when security or encryption is enabled.

Auto-registration with TAP S

No Requires auto-registration and the Bulk Administration

Tool (BAT); updates the Cisco

Unified Communications Manager database with the MAC address and DNs for the device when user calls TAPS from the phone.

Using the Cisco

Unified Communications Manager Administration

Yes Requires phones to be added individually

Using BAT Yes • Can add groups of same model of phone.

• Can schedule when phones are added to the

Cisco

Unified Communications Manager database.

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Adding Phones to the Cisco Unified Communications Manager Database

2-12

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Adding Phones with Auto-Registration

By enabling auto-registration before you begin installing phones, you can:

• Add phones without first gathering MAC addresses from the phones.

• Automatically add a Cisco Unified IP Phone to the Cisco Unified

Communications Manager database when you physically connect the phone to your IP telephony network. During auto-registration, Cisco

Unified Communications Manager assigns the next available sequential directory number to the phone.

• Quickly enter phones into the Cisco Unified Communications Manager

database and modify any settings, such as the directory numbers, from Cisco

Unified Communications Manager.

• Move auto-registered phones to new locations and assign them to different

device pools without affecting their directory numbers.

Note Cisco recommends you use auto-registration to add less than 100 phones to your

network. To add more than 100 phones to your network, use the Bulk Administration Tool (BAT). See the

“Adding Phones with BAT” section on

page 2-14.

Auto-registration is disabled by default. In some cases, you might not want to use auto-registration; for example, if you want to assign a specific directory number to the phone, or if you plan to implement authentication or encryption, as described in Cisco Unified Communications Manager Security Guide. For information about enabling auto-registration, refer to “Enabling Auto-Registration” in the Cisco Unified

Communications Manager

Administration Guide.

Note When you configure the cluster for mixed mode through the Cisco CTL client,

auto-registration is automatically disabled. When you configure the cluster for non-secure mode through the Cisco CTL client, auto-registration is automatically enabled.

Related Topics

• Adding Phones with Auto-Registration and TAPS, page 2-13

2-13

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Adding Phones to the Cisco Unified Communications Manager Database

• Adding Phones with Cisco Unified Communications Manager

Administration, page 2-14

• Adding Phones with BAT, page 2-14

Adding Phones with Auto-Registration and TAPS

You can add phones with auto-registration and TAPS, the Tool for Auto-Registered Phones Support, without first gathering MAC addresses from phones.

TAPS works with the Bulk Administration Tool (BAT) to update a batch of phones that were already added to the Cisco

Unified Communications Manager database

with dummy MAC addresses. Use TAPS to update MAC

addresses and download

pre-defined configurations for phones.

Note Cisco recommends you use auto-registration and TAPS to add less than 100

phones to your network. To add more than 100 phones to your network, use the Bulk Administration Tool (BAT). See the

“Adding Phones with BAT” section on

page 2-14.

To implement TAPS, you or the end-user dial a TAPS directory number and follow voice prompts. When the process is complete, the phone will have downloaded its directory number and other settings, and the phone will be updated in Cisco

Unified Communications Manager Administration with the correct MAC

address.

Auto-registration must be enabled in Cisco Unified Communications Manager Administration (System

> Cisco Communications Manager) for TAPS to

function.

Note When you configure the cluster for mixed mode through the Cisco CTL client,

auto-registration is automatically disabled. When you configure the cluster for non-secure mode through the Cisco CTL client, auto-registration is automatically enabled.

Refer to Cisco Unified Communications Manager Bulk Administration Guide for detailed instructions about BAT and about TAPS.

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Adding Phones to the Cisco Unified Communications Manager Database

2-14

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Related Topics

• Adding Phones with Auto-Registration, page 2-12

• Adding Phones with Cisco Unified Communications Manager

Administration, page 2-14

• Adding Phones with BAT, page 2-14

Adding Phones with Cisco Unified Communications Manager Administration

You can add phones individually to the Cisco Unified Communications Manager database using Cisco

Unified Communications Manager Administration. To do

so, you first need to obtain the MAC address for each phone.

For information about determining a MAC address, see the “Determining the

MAC Address of a Cisco Unified IP Phone” section on page 2-17.

After you have collected MAC addresses, in Cisco Unified Communications Manager Administration, choose Device > Phone and click Add New to begin.

For complete instructions and conceptual information about Cisco Unified Communications Manager, refer to Cisco Unified

Communications Manager

Administration Guide and to Cisco Unified Communications Manager System Guide.

Related Topics

• Adding Phones with Auto-Registration, page 2-12

• Adding Phones with Auto-Registration and TAPS, page 2-13

• Adding Phones with BAT, page 2-14

Adding Phones with BAT

Cisco Unified Communications Manager Bulk Administration Tool (BAT), a standard Cisco Unified Communications Manager application, enables you to perform batch operations, which includes registration, on multiple phones.

To add phones by using BAT only (not in conjunction with TAPS), you first need to obtain the appropriate MAC address for each phone.

2-15

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Using Cisco Unified IP Phones with Different Protocols

For information about determining a MAC address, see the “Determining the

MAC Address of a Cisco Unified IP Phone” section on page 2-17.

Related Topics

• Adding Phones with Auto-Registration, page 2-12

• Adding Phones with Auto-Registration and TAPS, page 2-13

• Adding Phones with Cisco Unified Communications Manager

Administration, page 2-14

Using Cisco Unified IP Phones with Different Protocols

The Cisco Unified IP Phone can operate with SCCP (Skinny Client Control Protocol) or SIP (Session Initiation Protocol). You can convert a phone that is using one protocol for use with the other protocol.

This section includes these topics:

• Converting a New Phone from SCCP to SIP, page 2-15

• Converting an In-Use Phone from SCCP to SIP, page 2-16

• Converting an In-Use Phone from SIP to SCCP, page 2-16

• Deploying a Phone in an SCCP and SIP Environment, page 2-17

Converting a New Phone from SCCP to SIP

A new, unused phone is set for SCCP by default. To convert this phone to SIP, perform these steps:

Procedure

Step 1 Take one of these actions:

• To auto-register the phone, set the Auto Registration Phone Protocol

enterprise parameter in Cisco Unified Communications Manager Administration to SIP.

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Using Cisco Unified IP Phones with Different Protocols

2-16

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

• To provision the phone by using the Bulk Administration Tool (BAT), choose

the appropriate phone model and choose SIP from BAT.

• To provision the phone manually, make the appropriate changes for SIP on

the Phone Configuration window in Cisco Unified Communications Manager Administration.

Refer to the Cisco Unified Communications Manager Administration Guide for more information about Cisco Unified Communications Manager configuration. Refer to Bulk Administration Tool Administration Guide for more information about using BAT.

Step 2 If you are not using DHCP in your network, configure the network parameters for

the phone.

See the “Configuring Startup Network Settings” section on page 3-14.

Step 3 Power cycle the phone.

Converting an In-Use Phone from SCCP to SIP

You can use the Bulk Administration Tool (BAT) to convert a phone that is in use in your network from SCCP to SIP. To access BAT from Cisco Unified Communications Manager Administration, choose Bulk Administration > Phones > Migrate Phones > SCCP to SIP. For more information, refer to the “Migrating Phones” chapter

Bulk Administration Tool Administration Guide.

Converting an In-Use Phone from SIP to SCCP

To convert a phone that is in use in your network from SIP to SCCP, perform these steps. For more information, Cisco Unified

Communications Manager

Administration Guide.

Procedure

Step 1 In Cisco Unified Communications Manager Administration, delete the existing

SIP phone from the Cisco Unified Communications Manager database.

2-17

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Determining the MAC Address of a Cisco Unified IP Phone

Step 2 In Cisco Unified Communications Manager Administration, create the phone as

an SCCP phone.

Step 3 Power cycle the phone.

Deploying a Phone in an SCCP and SIP Environment

To deploy Cisco Unified IP Phones in an environment that includes SCCP and SIP and in which the Cisco Unified Communications Manager Auto-Registration parameter is SCCP, perform these general steps:

1. Set the Cisco Unified Communications Manager auto_registration_protocol

parameter to SCCP.

From Cisco Unified Communications Manager Administration, choose System > Enterprise Parameters.

2. Install the phones.

3. Change the Auto Registration Protocol enterprise parameter to SIP.

4. Auto-register the SIP phones.

Determining the MAC Address of a Cisco Unified IP

Phone

Several of the procedures that are described in this manual require you to determine the MAC address of a Cisco Unified IP Phone. You can determine the MAC address for a phone in any of these ways:

• From the phone, press the Applications Menu button, then choose

Settings

> Network Configuration, and look at the MAC Address field.

• Look at the MAC label on the back of the phone.

• Display the web page for the phone and click the Device Information

hyperlink.

For information about accessing the web page, see the “Accessing the Web

Page for a Phone” section on page 8-2.

Chapter 2 Preparing to Install the Cisco Unified IP Phone on Your Network

Determining the MAC Address of a Cisco Unified IP Phone

2-18

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

CHAPTER

3-1

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Setting Up the Cisco Unified IP Phone

This chapter helps you install the Cisco Unified IP Phones 7906G and 7911G on a Cisco

Unified Communications network, and includes these topics:

• Before You Begin, page 3-2

• Understanding the Cisco Unified IP Phones 7906G and 7911G Components,

page 3-3

• Installing the Cisco Unified IP Phone, page 3-8

• Mounting the Phone to a Wall, page 3-15

• Verifying the Phone Startup Process, page 3-16

• Configuring Startup Network Settings, page 3-16

• Configuring Security on the Cisco Unified IP Phone, page 3-17

Note Before you install a Cisco Unified IP phone, you must decide how to configure

the phone in your network. Then you can install the phone and verify its functionality. For more information, see

Chapter 2, “Preparing to Install the

Cisco Unified IP Phone on Your Network.”

Chapter 3 Setting Up the Cisco Unified IP Phone

Before You Begin

3-2

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Before You Begin

Before installing the Cisco Unified IP Phone, review the requirements in these sections:

• Network Requirements, page 3-2

• Cisco Unified Communications Manager Configuration, page 3-3

• Network and Access Ports, page 3-4

• Handset, page 3-4

• Speaker, page 3-4

• Installing the Cisco Unified IP Phone, page 3-8

Network Requirements

For the Cisco Unified IP Phones 7906G and 7911G to successfully operate as a Cisco

Unified IP Phone endpoint in your network, your network must meet these

requirements:

• Working Voice-over-IP (VoIP) Network

–

VoIP configured on your Cisco routers and gateways

–

Cisco Unified Communications Manager Release 3.3(5) or higher installed in your network and configured to handle call processing

Note The minimum firmware release that must be installed on the phone is

7.2(1).

• IP network that supports DHCP or manual assignment of IP address, gateway,

and subnet mask

Note The Cisco Unified IP Phone displays the date and time from

Cisco

Unified Communications Manager. If the Cisco Unified Communications Manager server is located in a different time zone than the phones, the phones will not display the correct local time.

3-3

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 3 Setting Up the Cisco Unified IP Phone

Understanding the Cisco Unified IP Phones 7906G and 7911G Components

Cisco Unified Communications Manager Configuration

The Cisco Unified IP Phone requires Cisco Unified Communications Manager to handle call processing. Refer to Cisco

Unified Communications Manager

Administration Guide or context-sensitive help in the

Cisco

Unified Communications Manager application to ensure that Cisco

Unified Communications Manager is set up properly to manage the phone and to properly route and process calls.

If you plan to use auto-registration, verify that it is enabled and properly configured in Cisco

Unified Communications Manager before connecting any

Cisco

Unified IP Phone to the network. For information about enabling and configuring auto-registration, refer to Cisco

Unified Communications Manager

Administration Guide. Also, see the

“Adding Phones to the Cisco

Unified Communications Manager Database” section on page 2-11.

You must use Cisco Unified Communications Manager to configure and assign features to the Cisco

Unified IP Phones. See the “Telephony Features Available

for the Cisco Unified IP Phone” section on page 5-2 for details.

In Cisco Unified Communications Manager, you can add users to the database and associate them with specific phones. In this way, users gain access to web pages that allow them to configure items such as call forwarding, speed dialing, and voice messaging system options. See the

“Adding Users to

Cisco Unified Communications Manager” section on page 5-24 for details.

Understanding the Cisco Unified IP Phones 7906G and 7911G Components

The Cisco Unified IP Phones 7906G and 7911G include these components on the phone or as accessories for the phone:

• Network and Access Ports, page 3-4

• Handset, page 3-4

• Speaker, page 3-4

• Headset, page 3-6

Chapter 3 Setting Up the Cisco Unified IP Phone

Understanding the Cisco Unified IP Phones 7906G and 7911G Components

3-4

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Network and Access Ports

The following ports are available on the Cisco Unified IP Phones 7906G and 7911G:

• Network port—Labeled 10/100 SW. Use the network port to connect the

phone to the network. You must use a straight-through cable on this port. The phone can also obtain inline power from the Cisco Catalyst switch over this connection. See the

“Providing Power to the Cisco Unified IP Phones 7906G

and 7911G” section on page 2-4 for details.

• Access port (Cisco Unified IP Phone 7911G only)—Labeled 10/100 PC. Use

the access port to connect a network device, such as a computer, to the phone. You must use a straight-through cable on this port.

Each port supports 10/100 Mbps half- or full-duplex connections to external devices. The speed and connection type are set through auto-negotiation. You can use either Category 3 or 5 cabling for 10-Mbps connections, but you must use Category 5 for 100 Mbps connections.

See Figure 3-3 for the connection ports available on the back of the Cisco Unified IP Phones 7906G and 7911G.

Handset

The handset is designed especially for use with a Cisco Unified IP Phone. It includes a light strip that indicates incoming calls and voice messages waiting.

To connect a handset to the Cisco Unified IP Phone, plug the cable into the

handset and the Handset port on the back of the phone.

Speaker

The Cisco Unified IP Phones 7906G and 7911G include a speaker that you can use to monitor calls. You can enable either the Monitor mode or Group Listen mode to allow users to listen on the speaker.

3-5

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 3 Setting Up the Cisco Unified IP Phone

Understanding the Cisco Unified IP Phones 7906G and 7911G Components

The speaker is enabled by default. You must disable the speaker by using Cisco

Unified Communications Manager Administration. To do so, choose Device > Phone and locate the phone you want to modify. In the Phone Configuration window for the phone, check the Disable Speakerphone check box.

Monitor Mode

In Monitor mode, users can only listen to a call on the speaker. To speak to the other party on the call, users must pick up the handset.

Monitor mode is enabled by default if the speaker is enabled on Cisco Unified Communications Manager Administration.

From the phone, users can turn on the Monitor function with the Monitor softkey, and turn off this function with the MonOff softkey or by picking up the handset.

Group Listen Mode

In Group Listen mode, both the handset and speaker can be active at the same time. During a call, one user can talk into the handset while other users can listen over the speaker.

Enabling Group Listen Mode on Cisco Unified Communications Manager

Group Listen mode is disabled by default. To enable this mode, you must do so from the Phone Configuration window in Cisco

Unified Communications

Manager Administration.

From Cisco Unified Communications Manager Administration, choose Device > Phone and locate the phone you want to modify. In the Phone Configuration window for the phone (Product Specific Configuration section), check the Enable Group Listen check box.

If Group Listen mode is enabled, the Monitor feature softkeys are not available on the phone.

Chapter 3 Setting Up the Cisco Unified IP Phone

Understanding the Cisco Unified IP Phones 7906G and 7911G Components

3-6

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Activating Group Listen on the Phone

Group Listen softkeys are displayed if Group Listen mode is enabled by the administrator on Cisco

Unified Communications Manager. However, these

softkeys cannot be configured by using the Cisco

Unified Communications

Manager softkey template.

• GListen—Activates Group Listen on the phone. Displayed when Group

Listen mode is enabled by the administrator but not activated on the phone. Once Group Listen is activated on the phone (by pressing GListen), users can deactivate it by hanging up the handset or by pressing GLOff.

• GLOff—Deactivates Group Listen on the phone. Displayed when Group

Listen mode is enabled by the administrator and activated on the phone.

Note If Group Listen mode is enabled in Cisco Unified Communications Manager, the

GListen and GLOff softkeys replace the Monitor and MonOff softkeys on the phone.

Headset

Although Cisco Systems performs some internal testing of third-party headsets for use with the Cisco

Unified IP Phones, Cisco does not certify or support products from headset or handset vendors. Because of the inherent environmental and hardware inconsistencies in the locations where Cisco

Unified IP Phones are deployed, there is not a single “best” solution that is optimal for all environments. Cisco recommends that customers test the headsets that work best in their environment before deploying a large number of units in their network.

In some instances, the mechanics or electronics of various headsets can cause remote parties to hear an echo of their own voice when they speak to Cisco

Unified IP Phone users.

Cisco Systems recommends the use of good quality external devices, like headsets that are screened against unwanted radio frequency (RF) and audio frequency (AF) signals. Depending on the quality of these devices and their proximity to other devices such as cell phones and two-way radios, some audio noise may still occur.

3-7

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 3 Setting Up the Cisco Unified IP Phone

Understanding the Cisco Unified IP Phones 7906G and 7911G Components

The primary reason that support of a headset would be inappropriate for an installation is the potential for an audible hum. This hum can either be heard by the remote party or by both the remote party and the Cisco

Unified IP Phone user. Some potential humming or buzzing sounds can be caused by a range of outside sources, for example, electric lights, being near electric motors, large PC monitors. In some cases, a hum experienced by a user may be reduced or eliminated by using the Cisco

Unified IP Phone Power Cube 3

(CP-PWR-CUBE-3).

Audio Quality Subjective to User

Beyond the physical, mechanical and technical performance, the audio portion of a headset must sound good to the user and the party on the far end. Sound is subjective and Cisco cannot guarantee the performance of any headsets or handsets, but some of the headsets and handsets on the sites listed below have been reported to perform well on Cisco

Unified IP Phones.

Nevertheless, it is ultimately still the customer’s responsibility to test this equipment in their own environment to determine suitable performance.

For information about headsets, see:

http://www.vxicorp.com/cisco

http://www.plantronics.com/cisco

http://www.jabra.com

Connecting a Headset

To connect a headset to the Cisco Unified IP Phone, plug it into the RJ-9 Handset port on the back of the phone. Depending on headset manufacturer’s recommendations, an external amplifier may be required. Refer to headset manufacturer's product documentation for details.

You can use the headset with all of the features on the Cisco Unified IP Phone, including using the Volume button.

Chapter 3 Setting Up the Cisco Unified IP Phone

Installing the Cisco Unified IP Phone

3-8

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Using External Devices with Your Cisco Unified IP Phone

The following information applies when you use external devices with the Cisco

Unified IP Phone:

Cisco recommends the use of good quality external devices (headsets) that are shielded (screened) against unwanted radio frequency (RF) and audio frequency (AF) signals.

Depending on the quality of these devices and their proximity to other devices such as mobile phones or two-way radios, some audio noise may still occur. In these cases, Cisco recommends that you take one or more of the following actions:

• Move the external device away from the source of the RF or AF signals.

• Route the external device cables away from the source of the RF or AF

signals.

• Use shielded cables for the external device, or use cables with a better shield

and connector.

• Shorten the length of the external device cable.

• Apply ferrites or other such devices on the cables for the external device.

Cisco cannot guarantee the performance of the system because Cisco has no control over the quality of external devices, cables, and connectors. The system will perform adequately when suitable devices are attached using good quality cables and connectors.

Caution In European Union countries, use only external headsets that are fully compliant

with the EMC Directive [89/336/EC].

Installing the Cisco Unified IP Phone

You must connect the Cisco Unified IP Phone to the network and to a power source before using it. See

Figure 3-2, Figure 3-3, and Figure 3-4 for a graphical

overview of the procedures that follow.

3-9

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 3 Setting Up the Cisco Unified IP Phone

Installing the Cisco Unified IP Phone

Note Before you install a phone, even if it is new, upgrade the phone to the current

firmware image.

Before using external devices, read the “Using External Devices with Your

Cisco Unified IP Phone” section on page 3-8 for safety and performance

information.

To install a Cisco Unified IP Phone, perform these steps:

Ta b l e 3-1 Installing a Cisco Unified IP Phone

Installation Step Notes References

Step 1

Connect the footstand to the back of the phone. See

Figure 3-1 and Figure 3-2.

— —

Step 2

Connect the handset to the Handset port.

— —

Step 3

Connect the power supply to the Cisco DC Adapter port

(DC48V).

Optional. When connecting phones powered by an external power supply, you must connect the power supply to the phone before connecting the Ethernet cable to the phone.

When disconnecting the phone, you must disconnect the Ethernet cable before disconnecting the power supply.

See the “Providing Power to

the Cisco Unified IP Phones 790 6G and 7911G” section on page 2-4.

Chapter 3 Setting Up the Cisco Unified IP Phone

Installing the Cisco Unified IP Phone

3-10

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Step 4

Connect a Category 3 or 5 straight-through Ethernet cable from the switch to the 10/100 SW port.

Each Cisco Unified IP Phone ships with one Ethernet cable in the box.

See the “Network and Access

Ports” section on page 3-4 for

guidelines.

Step 5

(Cisco Unified IP Phone 7911G only) Connect a Category 3 or 5 straight-through Ethernet cable from another network device, such as a desktop computer, to the 10/100 PC port.

Optional. You can connect another network device later if you do not connect one now.

See the “Network and Access

Ports” section on page 3-4 for

guidelines.

Table 3-1 Installing a Cisco Unified IP Phone (continued)

Installation Step Notes References

3-11

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 3 Setting Up the Cisco Unified IP Phone

Installing the Cisco Unified IP Phone

Figure 3-1 Connecting the Footstand (Cisco Unified IP Phone Model 7906G Shown)

10/100 SW

154887

Chapter 3 Setting Up the Cisco Unified IP Phone

Installing the Cisco Unified IP Phone

3-12

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Figure 3-2 Connecting the Footstand (Cisco Unified IP Phone Model 7911G Shown)

10/100 SW 10/100 PC

154389

3-13

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 3 Setting Up the Cisco Unified IP Phone

Installing the Cisco Unified IP Phone

Figure 3-3 Cisco Unified IP Phone Model 7906G Cable Connections

1 Network port (10/100 SW) 4 AC-to-DC power supply

2 Handset port 5 AC power cord

3 DC Adapter port (DC48V)

10/100 SW

154390

Chapter 3 Setting Up the Cisco Unified IP Phone

Installing the Cisco Unified IP Phone

3-14

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Figure 3-4 Cisco Unified IP Phone Model 7911G Cable Connections

Related Topics

• Before You Begin, page 3-2

• Mounting the Phone to a Wall, page 3-15

• Configuring Startup Network Settings, page 3-16

1 Network port (10/100 SW) 4 DC Adapter port (DC48V)

2 Access port (10/100 PC) 5 AC-to-DC power supply

3 Handset port 6 AC power cord

3-15

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 3 Setting Up the Cisco Unified IP Phone

Mounting the Phone to a Wall

You can mount the Cisco Unified IP Phone on a wall by using the back of the phone as a mounting bracket or you can use special brackets available in a Cisco

Unified IP Phone wall mount kit. (Wall mount kits must be ordered separately from the phones.) If you attach the phone to a wall by using the back of the phone and not the wall mount kit, you need to supply the following tools and parts:

• Screwdriver

• Screws to secure the Cisco Unified IP phone to the wall

Before You Begin

To ensure that the handset attaches securely to a wall-mounted phone, remove the handset wall hook from the handset rest, rotate the hook 180 degrees, and reinsert the hook. Turning the hook exposes a lip on which the handset catches when the phone is vertical. For an illustrated procedure, refer to the Installing the Universal

Wall Mount Kit for the Cisco

Unified IP Phone document at:

http://www.cisco.com/en/US/products/hw/phones/ps379/prod_installation_guide s_list.html

Caution Use care not to damage wires or pipes located inside the wall when securing

screws to wall studs.

Procedure

Step 1 Remove the footstand if it is attached to the phone.

Step 2 Insert two screws into a wall stud, matching them to the two screw holes on the

back of the phone.

Step 3 Hang the phone on the wall.

Chapter 3 Setting Up the Cisco Unified IP Phone

Verifying the Phone Startup Process

3-16

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Verifying the Phone Startup Process

After the Cisco Unified IP Phone has power connected to it, the phone begins its startup process by cycling through these steps.

1. These buttons blink or flash on and off:

–

Handset light strip

–

Hold button

–

Applications Menu button

2. The screen displays the Cisco Systems, Inc., logo screen.

3. These messages display as the phone starts:

–

Configuring IP

–

Updating CTL

–

Verifying Load

–

Configuring CM List

–

Registering

4. The main LCD screen displays:

–

Current date and time

–

Directory number

–

Softkeys

If the phone successfully passes through these stages, it has started up properly. If the phone does not start up properly, see the

“Resolving Startup Problems”

section on page 9-2.

Configuring Startup Network Settings

If you are not using DHCP in your network, you must configure these network settings on the Cisco

Unified IP Phone after installing the phone on the network:

• IP address

• IP subnet mask

• Default gateway IP address

3-17

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 3 Setting Up the Cisco Unified IP Phone

Configuring Security on the Cisco Unified IP Phone

• Domain name

• DNS server IP address

• TFTP server IP address

Collect this information and see the instructions in Chapter 4, “Configuring

Settings on the Cisco Unified IP Phone.”

Configuring Security on the Cisco Unified IP Phone

The security features protect against several threats, including threats to the identity of the phone and to data. These features establish and maintain authenticated communication streams between the phone and the Cisco

Unified Communications Manager server, and digitally sign files before they are delivered.

For more information about the security features, see the “Understanding Security

Features for Cisco Unified IP Phones” section on page 1-12. Also, refer to

Cisco Unified Communications Manager Security Guide.

A Locally Significant Certificate (LSC) installs on phones after you perform the necessary tasks that are associated with the Certificate Authority Proxy Function (CAPF). You can use Cisco

Unified Communications Manager Administration to

configure an LSC, as described in Cisco

Unified Communications Manager

Security Guide.

Alternatively, you can install an LSC from the Security Configuration menu on the phone. This menu also lets you update or remove an LSC.

Before You Begin

Make sure that the appropriate Cisco Unified Communications Manager and the Certificate Authority Proxy Function (CAPF) security configurations are complete:

• The CTL file should have a CAPF certificate.

• The CAPF certificate must exist in the C:\Program Files\Cisco\Certificates

folder in every server in the cluster.

• The CAPF is running and configured.

• The phone should have the correct load file. To verify the image, press the

Applications Menu button and choose Settings > Model Information.

Chapter 3 Setting Up the Cisco Unified IP Phone

Configuring Security on the Cisco Unified IP Phone

3-18

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Refer to Cisco Unified Communications Manager Security Guide for more information.

To configure an LSC on the phone, follow these steps:

Procedure

Step 1 Obtain the CAPF authentication code that was set when the CAPF was

configured.

Step 2 From the phone, press the Applications Menu button and choose Settings >

Security Configuration.

Note You can control access to the Settings Menu by using the Settings Access

field in the Cisco

Unified Communications Manager Administration Phone Configuration window. For more information, see Cisco Unified Communications Manager Administration Guide.

Step 3 Press **# to unlock settings on the Security Configuration menu. (See the

“Unlocking and Locking Options” section on page 4-4 for information using

locking and unlocking options.)

Note If a Settings Menu password has been provisioned, SIP phones present an

“Enter password” prompt after you enter **#.

Step 4 Scroll to LSC and press the Update softkey.

The phone prompts for an authentication string.

Step 5 Enter the authentication code and press the Submit softkey.

The phone begins to install, update, or remove the LSC, depending on how the CAPF was configured. During the procedure, a series of messages displays in the LSC option field in the Security Configuration menu so that you can monitor progress. When the procedure completes successfully, the phone will display Installed or Not Installed.

The LSC install, update, or removal process can take a long time to complete. You can stop the process at any time by pressing the Stop softkey from the Security Configuration menu. (Settings must be unlocked before you can press this softkey.)

3-19

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 3 Setting Up the Cisco Unified IP Phone

Configuring Security on the Cisco Unified IP Phone

When the phone successfully completes the installation procedure, it displays “Success.” If the phone displays, “Failure,” the authorization string may be incorrect or the phone may not enabled for upgrading. Refer to error messages generated on the CAPF server and take appropriate actions.

You can verify that an LSC is installed on the phone by pressing the Applications Menu button, then choosing Settings > Model Information, and ensuring that the LSC setting shows Installed.

Related Topic

• Understanding Security Features for Cisco Unified IP Phones, page 1-12

Chapter 3 Setting Up the Cisco Unified IP Phone

Configuring Security on the Cisco Unified IP Phone

3-20

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

CHAPTER

4-1

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Configuring Settings on the Cisco Unified IP Phone

The Cisco Unified IP Phone includes many configurable network and device settings that you may need to modify before the phone is functional for your users. You can access these settings, and change many of them, through menus on the phone.

This chapter includes the following topics:

• Configuration Menus on the Cisco Unified IP Phones 7906G and 7911G,

page 4-1

• Overview of Options Configurable from a Phone, page 4-6

• Network Configuration Menu, page 4-7

• Device Configuration Menu, page 4-15

• Security Configuration Menu, page 4-38

Configuration Menus on the Cisco

Unified IP Phones 7906G and 7911G

The Cisco Unified IP Phone includes the following configuration menus:

• Network Configuration—Provides options for viewing and making a variety

of network settings. For more information, see the

“Network Configuration

Menu” section on page 4-7.

Chapter 4 Configuring Settings on the Cisco Unified IP Phone

Configuration Menus on the Cisco Unified IP Phones 7906G and 7911G

4-2

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

• Device Configuration—Provides access to sub-menus from which you can

view a variety of non network-related settings. For more information, see the

“Device Configuration Menu” section on page 4-15.

• Security Configuration—Provides options for displaying and modifying

security settings. For more information, see the

“Security Configuration

Menu” section on page 4-38

Before you can change option settings on the Network Configuration menu, you must unlock options for editing. See the

“Unlocking and Locking Options”

section on page 4-4 for instructions.

For information about the keys you can use to edit or change option settings, see the

“Editing the Values of an Option Setting” section on page 4-5.

You can control whether a phone user has access to phone settings by using the Settings Access field in the Cisco

Unified Communications Manager

Administration Phone Configuration Settings window. See

Cisco

Unified Communications Manager Administration Guide for more

information.

Related Topics

• Unlocking and Locking Options, page 4-4

• Editing the Values of an Option Setting, page 4-5

• Overview of Options Configurable from a Phone, page 4-6

• Network Configuration Menu, page 4-7

• Device Configuration Menu, page 4-15

4-3

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 4 Configuring Settings on the Cisco Unified IP Phone

Configuration Menus on the Cisco Unified IP Phones 7906G and 7911G

Displaying a Configuration Menu

To display a configuration menu, perform the following steps.

Note You can control whether a phone has access to the Settings menu or to options on

this menu by using the Settings Access field in the Cisco Unified Communications Manager Administration Phone Configuration window. The Settings Access field accepts these values:

• Enabled—Allows access to the Settings menu.

• Disabled—Prevents access to the Settings menu.

• Restricted—Allows access to the User Preferences menu and allows volume

changes to be saved. Prevents access to other options on the Settings menu.

If you cannot access an option on the Settings menu, check the Settings Access field.

Procedure

Step 1 Press the Applications Menu button.

Step 2 Choose Settings.

Step 3 Perform one of these actions to display the desired menu:

• Use the Navigation button to select the desired menu and then press the

Select softkey.

• Use the keypad on the phone to enter the number that corresponds to the

menu.

Step 4 To display a submenu, repeat Step 3.

Step 5 To exit a menu, press the Exit softkey.

Related Topics

• Unlocking and Locking Options, page 4-4

• Editing the Values of an Option Setting, page 4-5

Chapter 4 Configuring Settings on the Cisco Unified IP Phone

Configuration Menus on the Cisco Unified IP Phones 7906G and 7911G

4-4

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

• Overview of Options Configurable from a Phone, page 4-6

• Network Configuration Menu, page 4-7

• Device Configuration Menu, page 4-15

Unlocking and Locking Options

Configuration options that can be changed from a phone are locked by default to prevent users from making changes that could affect the operation of a phone. You must unlock these options before you can change them.

When options are inaccessible for modification, a locked padlock icon appears on the configuration menus. When options are unlocked and accessible for modification, an unlocked padlock icon appears on these menus, as shown next.

To unlock or lock options, press **#. This action either locks or unlocks the options, depending on the previous state.

Note If a Settings Menu password has been provisioned, SIP phones present an “Enter

password” prompt after you enter **#.

After you have made your changes, you must lock the options.

Caution Do not press **# to unlock options and then immediately press **# again to lock

options. The phone will interpret this sequence as **#**, which will reset the phone. To lock options after unlocking them, wait at least 10 seconds before you press **# again.

Related Topics

• Displaying a Configuration Menu, page 4-3

• Editing the Values of an Option Setting, page 4-5

4-5

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 4 Configuring Settings on the Cisco Unified IP Phone

Configuration Menus on the Cisco Unified IP Phones 7906G and 7911G

• Overview of Options Configurable from a Phone, page 4-6

• Network Configuration Menu, page 4-7

• Device Configuration Menu, page 4-15

Editing the Values of an Option Setting

When you edit the value of an option setting, follow these guidelines:

• Use the keys on the keypad to enter numbers and letters.

• To enter letters by using the keypad, use a corresponding number key. Press

the key one or more times to display a particular letter. For example, press the 2 key once for “a,” twice quickly for “b,” and three times quickly for “c.” After you pause, the cursor automatically advances to allow you to enter the next letter.

• To enter a period (for example, in an IP address), press the . (period) softkey

or press * on the keypad.

• Press the << softkey if you make a mistake. This softkey deletes the character

to the left of the cursor.

• Press the Cancel softkey before pressing the Save softkey to discard any

changes that you have made.

Note The Cisco Unified IP Phone provides several methods you can use to reset or

restore option settings, if necessary. For more information, see the

“Resetting or

Restoring the Cisco Unified IP Phone” section on page 9-21.

Related Topics

• Displaying a Configuration Menu, page 4-3

• Unlocking and Locking Options, page 4-4

• Overview of Options Configurable from a Phone, page 4-6

• Network Configuration Menu, page 4-7

• Device Configuration Menu, page 4-15

Chapter 4 Configuring Settings on the Cisco Unified IP Phone

Overview of Options Configurable from a Phone

4-6

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Overview of Options Configurable from a Phone

The settings that you can change on a phone fall into several categories, as shown in

Tabl e 4-1. For a detailed explanation of each setting and instructions for

changing them, see the “Network Configuration Menu” section on page 4-7.

Note There are several options on the Network Configuration menu and on the Device

Configuration Menu that are for display only or that you can configure from Cisco

Unified Communications Manager. These options are also described in the

“Network Configuration Menu” section on page 4-7 and the or the “Device Configuration Menu” section on page 4-15.

Ta b l e 4-1 Network Configuration Menu Settings

Category Description

Network Configuration Menu Option

DHCP settings Dynamic Host Configuration Protocol (DHCP)

automatically assigns IP address to devices when you connect them to the network. Cisco

Unified IP Phones enable DHCP by default.

DHCP Enabled

DHCP Address Released

IP settings If you do not use DHCP in your network, you

can make IP settings manually.

Domain Name

IP Address

Subnet Mask

Default Router 1-5

DNS Server 1-5

TFTP settings If you do not use DHCP to direct the phone to

a TFTP server, you must manually assign a TFTP server. You can also assign an alternative TFTP server to use instead of the one assigned by DHCP.

TFTP Server 1

Alternate TFTP

TFTP Server 2

VLAN settings Allow you to change the administrative VLAN

used by the phone.

Admin. VLAN ID

PC VLAN (applies to 7911G only)

4-7

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Chapter 4 Configuring Settings on the Cisco Unified IP Phone

Network Configuration Menu

Related Topics

• Displaying a Configuration Menu, page 4-3

• Unlocking and Locking Options, page 4-4

• Editing the Values of an Option Setting, page 4-5

• Network Configuration Menu, page 4-7

• Device Configuration Menu, page 4-15

Network Configuration Menu

The Network Configuration menu provides options for viewing and making a variety of network settings.

Tabl e 4-2 describes these options and, where

applicable, explains how to change them.

For information about how to access the Network Configuration menu, see the

“Displaying a Configuration Menu” section on page 4-3.

Before you can change an option on this menu, you must unlock options as described in the

“Unlocking and Locking Options” section on page 4-4. The Edit,

Ye s, or No softkeys for changing network configuration options appear only if options are unlocked.

For information about the keys you can use to edit options, see the “Editing the

Values of an Option Setting” section on page 4-5.

Port settings Allow you to set the speed and duplex of the

network and access ports.

SW Port Configuration

PC Port Configuration (applies to 7911G only)

Table 4-1 Network Configuration Menu Settings (continued)

Category Description

Network Configuration Menu Option

Chapter 4 Configuring Settings on the Cisco Unified IP Phone

Network Configuration Menu

4-8

Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 6.1

OL-14585-01

Ta b l e 4-2 Network Configuration Menu Options

Option Description To Change

DHCP Server IP address of the Dynamic Host Configuration

Protocol (DHCP) server from which the phone obtains its IP address.

Display only—cannot configure.

BOOTP Server Indicates whether the phone obtains its

configuration from a Bootstrap Protocol (BootP) server instead of from a DHCP server.

Display only—cannot configure.

MAC Address Unique Media Access Control (MAC) address

of the phone.

Display only—cannot configure.

Host Name Unique host name that the DHCP server

assigned to the phone.

Display only—cannot configure.

Domain Name Name of the Domain Name System (DNS)

domain in which the phone resides.

1. Unlock network configuration

options.

2. Set the DHCP Enabled option

to No.

3. Scroll to the Domain Name

option, press the Edit softkey, and then enter a new domain name.

4. Press the Vali da te softkey and

then press the Save softkey.

IP Address Internet Protocol (IP) address of the phone.

If you assign an IP address with this option, you must also assign a subnet mask and default router. See the Subnet Mask and Default Router options in this table.

1. Unlock network configuration

options.

2. Set the DHCP Enabled option

to No.

3. Scroll to the IP Address

option, press the Edit softkey, and then enter a new IP Address.

4. Press the Vali da te softkey and

then press the Save softkey.

Cisco 7906G - Unified IP Phone VoIP, 7911G Administration Manual

Specifications and Main Features

Frequently Asked Questions

User Manual