Cisco 7921G - Unified Wireless IP Phone VoIP, CP-7921G-A-K9 Administration Manual

Page 1
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager 7.0
Americas Headquarters
Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000
800 553-NETS (6387)
Text Part Number: OL-15985-01
Page 2
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
The Bluetooth word mark and logo are registered trademarks owned by Bluetooth SIG, Inc., and any use of such marks by Cisco Systems, Inc., is under license.
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPON SIBILITY FOR THEIR APPLICA TION OF ANY PRODUCT S.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORM ATION PACKET THAT S
HIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCAT E THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The following information is for FCC compliance of Class A devices: T
to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not i nstalled and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required to correct the interference at their own expense.
The following information is for FCC compliance of Class B devices: This equipment has been tested and found to comply with the l to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If the equipment causes interference to radio or television reception, which can be determined by turning the equipment off and on, users are encouraged to try to correct the interference by using one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help. Modifications to this product no t author ized by Cisco coul d void t
The Cisco implementation of TCP head er compressi on is an adap tation of a program developed by the Universi ty of Ca lifornia, Berk domain version of the UNIX operatin g system. All rights reserved . Copyri ght © 1981 , Rege nts of the Uni versity of Califor nia.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AN D SOFTWARE OF THESE SUPP LIERS ARE PROVIDED “AS IS” WITH AL
L FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EX PRESSED OR IMPLIED, INCLUDING, WITHOUT
L
IMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONIN FRINGEMENT OR ARIS ING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WI
THOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES .
his equipment has been tested and found to comply with the limits for a Class A digital device, pursuant
imits for a Class B digital device, pursuant
he FCC approval and negate your authority to operate the product.
eley (UCB) as part of UCB’s public
CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, the Cisco logo, DCE, and Welcome to the Human Network are t
rademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service ma rks; and Access Regi strar, Airon et, As yncOS, Bringing the Meeting To Y ou, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Ci
sco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Withou t Limitation, EtherFas t, EtherSwitch, Event Cen ter, Fast Step, Follow M e Browsing,
Fo
rmShare, GigaDrive, HomeLink, Internet Quotien t, IOS, iPhone, iQ Experti se, the iQ logo, iQ Net Read iness Scorecard, iQuick Study, IronPort, the IronPort logo,
L
ightStream, Linksys, MediaTone, Meetin gPlace, MeetingPlace Chi me Sound, MGX, Netwo rkers, Networking Academy, Network Regist rar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word part between Cisco and any other company. (0807 R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display ou document are shown for illustrative pur poses onl y. Any use of act ual IP addr ess es in ill ustr ativ e conte nt is uninte ntio nal and coincident al.
The Java logo is a trademark or registered trademark of Sun Microsystems, Inc. in the U.S. or other countries.
Cisco Unified Wireless IP Phone 7921 G Admin istrat ion Guide f or Cisco Unif ied Com municat ions M anager 7.0 .
© 2008 Cisco Systems, Inc. All rights rese rved.
ner does not imply a partnership relationship
tput, and figures included in the
Page 3
CONTENTS
Preface xi
Overview xi
Audience xi
Organization xi
Related Documentaton xii
Obtaining Documentation and Submitting a Service Request xiii
Cisco Product Security Overview xiii
Document Conventions xiv
CHAPTER
CHAPTER
1 Overview of the Cisco Unified Wireless IP Phone 7921G 1-1
Understanding the Cisco Unified Wireless IP Phone 7921G 1-1
Features Supported on the Cisco Unified Wireless IP Phone 7921G 1-4
Feature Overview 1-5 Configuring Telephony Features 1-5
Configuring Network Access for the Phone 1-5 Providing Users with Feature Information 1-6
Understanding Security Features for Cisco Unified IP Phones 1-7
Overview of Supported Security Features 1-8
Understanding Security Profiles 1-10 Identifying Encrypted and Authenticated Phone Calls 1-11 Security Restrictions 1-11
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7921G 1-11
Configuring the Cisco Unified Wireless IP Phone 7921G in Cisco Unified Communications Manager
1-12
Installing the Cisco Unified Wireless IP Phone 7921G 1-12
2 Overview of the VoIP Wireless Network 2-1
Understanding the Wireless LAN 2-1
Understanding WLAN Standards and Technologies 2-3
802.11 Standards for WLAN Communications 2-3 Radio Frequency Ranges 2-3
Wireless Modulation Technologies 2-4 AP, Channel, and Domain Relationships 2-4 WLANs and Roaming 2-6
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
iii
Page 4
Contents
Components of the VoIP Wireless Network 2-7
Networking Protocols Used with Cisco Unified Wireless IP Phones 2-7
Interacting with Cisco Unified Wireless APs 2-9
Associating to an AP 2-10 Voice QoS in a Wireless Network 2-10
Interacting with Cisco Unified Communications Manager 2-12
Phone Configuration Files and Profile Files 2-12 Interacting with the DHCP Server 2-13
Security for Voice Communications in WLANs 2-14
Authentication Methods 2-14 Authenticated Key Management 2-16 Encryption Methods 2-16
AP Authentication and Encryption Methods 2-16
VoIP WLAN Configuration 2-18
Wireless Network Requirements for VoIP 2-19 Configuring APs for Voice 2-19
Configuration Tip for Cisco Aironet APs 2-20
CHAPTER
Site Survey Verification 2-20
Site Survey Verification Tasks 2-20 Neighbor List Utility 2-21
Site Survey Utility 2-22
3 Setting Up the Cisco Unified Wireless IP Phone 7921G 3-1
Before You Begin 3-1
Network Requirements 3-1 Methods for Adding Phones to Cisco Unified Communications Manager 3-2
Adding Phones with Auto-Registration 3-3
Adding Phones with Auto-Registration and TAPS 3-3
Adding Phones with BAT 3-4
Adding Phones with Cisco Unified Communications Manager Administration 3-4 Safety Information 3-5
Battery Safety Notices 3-6
Installing the Cisco Unified Wireless IP Phone 7921G 3-7
Providing Power to the Phone 3-7
Installing or Removing the Phone Battery 3-8
Using the Power Supply to Charge the Phone 3-9
Using the USB Cable to Charge the Phone 3-11 Installing and Using the Desktop Charger 3-13
Using the Desktop Charger to Charge the Phone 3-14
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
iv
OL-15985-01
Page 5
Battery Charging Times Using the Desktop Charger 3-14
Configuring Wireless LAN Settings 3-15
Cisco Unified Wireless IP Phone 7921G Web Pages 3-15 Network Profile Menu on the Cisco Unified Wireless IP Phone 7921G 3-15
Using a Headset 3-15
Audio Quality Subjective to the User 3-15 Connecting Headsets 3-16 Using External Devices with Cisco Unified IP Phones 3-16
Powering On the Cisco Unified Wireless IP Phone 7921G 3-16
Active and Standby Phone Modes 3-17
Active Mode 3-17 Standby Mode 3-18
Understanding the Phone Startup Process 3-18
Contents
CHAPTER
4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages 4-1
Setting Up Your PC to Configure the Phones 4-1
Installing the USB Drivers 4-2 Configuring the USB LAN on the PC 4-2 Accessing the Phone Web Page 4-3
Using the USB Cable to Configure Phones 4-4
Updating Phones Remotely 4-4
Setting Configuration Privileges for the Phone Web Page 4-4 Accessing the Configuration Web Page for a Phone 4-5
HOME: Summary Web Page 4-7
Configuring Network Profiles 4-8
Network Profile Settings 4-8 Configuring Wireless Settings in a Network Profile 4-13
Configuring Wireless LAN Security 4-14
Configuring the Authentication Mode 4-15
Setting the Wireless Security Credentials 4-15
Configuring the Username and Password 4-16 Configuring the Pre-shared Key 4-16
Setting Wireless Encryption 4-18 Installing Authentication Certificates for EAP-TLS Authentication 4-19 Configuring PEAP 4-24
Configuring IP Network Settings 4-25
Enabling DHCP 4-25 Disabling DHCP 4-26
Configuring the Alternate TFTP Server 4-26
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
v
Page 6
Contents
Configuring Advanced Network Profile Settings 4-27
Configuring USB Settings 4-28
Configuring Trace Settings 4-29
Configuring Wavelink Avalanche Server Settings 4-31
Configuring the Phone Book 4-31
Importing and Exporting Contacts 4-32
Importing and Exporting CSV Phone Contact Records 4-32 Searching the Phone Book Information 4-34 Updating Phone Book Information 4-34
Adding a Contact 4-34
Deleting Contacts 4-35
Editing Contact Information 4-35
Assigning A Speed-Dial Hot Key to a Contact Number 4-35
Using System Settings 4-36
Viewing Trace Logs 4-36 Backup Settings for Phone Configuration 4-37
Using Network Profile Templates 4-37
Creating a Configuration Template 4-38
Importing a Configuration Template 4-39
Upgrading Phone Firmware 4-40 Changing the Admin Password 4-40 Viewing the Site Survey Report on the Web 4-41
CHAPTER
vi
5 Configuring Settings on the Cisco Unified Wireless IP Phone 5-1
Accessing Network and Phone Settings 5-1
Configuring Network Profile Settings 5-2
Accessing a Network Profile 5-3 Changing the Profile Name 5-3
Guidelines for Editing Settings in the Network Profile 5-4
Changing Network Configuration Settings 5-4 Configuring DHCP Settings 5-6
Disabling DHCP 5-6
Configuring an Alternate TFTP Server 5-7
Changing the Cisco Discovery Protocol Settings 5-7
Erasing the Configuration 5-8 Configuring Wireless Settings for the Network Profile 5-8
Accessing the WLAN Configuration Menu 5-8
Changing WLAN Configuration Settings 5-9
Changing Phone Settings 5-10
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
Page 7
Configuring the Security Certificate on the Phone 5-12
Changing the USB Configuration 5-13
Contents
CHAPTER
6 Configuring the Phone Using the Wavelink Avalanche Server 6-1
Before You Begin 6-1
Best Practices 6-2
Assigning the Wavelink Avalanche Server 6-2
Assigning the Wavelink Avalanche Server from the Phone 6-2
Assigning the Wavelink Avalanche Server using the Phone Web Page 6-3
Setting Up and Using the Phone Configuration Utility 6-3
Assigning Attributes for the Phone 6-3
Defining Custom Names and Custom Values on the Phone 6-4
Defining Custom Parameters from the Phone Web Page 6-4
Installing the Cisco Unified Wireless IP Phone 7921G Configuration Utility 6-5
Updating Configuration Files 6-5
Configuring Profile Settings 6-6
Configuring USB Settings 6-9
Configuring Trace Settings 6-9
Configuring Wavelink Avalanche Server Settings 6-10
Updating the Phone 6-11
CHAPTER
7 Configuring Features, Templates, Services, and Users 7-1
Configuring Cisco Unified Wireless IP Phones 7-1
Telephony Features Available for the Phone 7-2
Product-Specific Configuration Options for the Cisco Unified Wireless IP Phone 7921G 7-13
Configuring Softkey Templates 7-16
Softkey Templates for the Cisco Unified Wireless IP Phone 7921G 7-16 Changing Softkeys in a Template 7-16
Modifying Phone Button Templates 7-17
Setting Up Services 7-17
Configuring Corporate and Personal Directories 7-18
Configuring Corporate Directories 7-19 Configuring Personal Directory 7-19
Adding Users to Cisco Unified Communications Manager Administration 7-19
Managing the User Options Web Pages 7-20
Giving Users Access to the User Options Web Pages 7-20
Specifying Options that Appear on the User Options Web Pages 7-21
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
vii
Page 8
Contents
Creating Custom Phone Rings 7-22
CHAPTER
CHAPTER
8 Viewing Security, Device, Model, Status, and Call Statistics Information on the Phone 8-1
Viewing Security Information 8-1
Accessing the CTL File Screen 8-3
Trust List Screen 8-4
Viewing Device Information 8-4
Viewing Model Information 8-7
Viewing the Status Menu 8-8
Viewing the Status Messages 8-9
Viewing the Current Configuration 8-12
Viewing Network Statistics 8-12 Viewing Call Statistics 8-14 Viewing Firmware Versions 8-16
9 Monitoring the Cisco Unified Wireless IP Phone Remotely 9-1
Accessing the Web Page for a Phone 9-1
Wireless LAN Statistics 9-2
Network Statistics 9-3
Stream Statistics 9-5
CHAPTER
10 Troubleshooting the Cisco Unified Wireless IP Phone 7921G 10-1
Resolving Startup and Connectivity Problems 10-1
Symptom: Incomplete Startup Process 10-1 Symptom: No Association to Cisco Aironet Access Points 10-2
Verifying Access Point Settings 10-2 Symptom: No Registration with Cisco Unified Communications Manager 10-3
Registering the Phone with Cisco Unified Communications Manager 10-4
Checking Network Connectivity 10-4
Verifying TFTP Server Settings 10-4
Verifying IP Addresses 10-5
Verifying DNS Settings 10-5
Verifying Cisco Unified Communications Manager Settings 10-5
Cisco Communications Manager and TFTP Services are not Running 10-6
Creating a New Configuration File 10-7
Resolving Voice Quality and Roaming Problems 10-7
Symptom: Cisco Unified Wireless IP Phone Resets Unexpectedly 10-8
Verifying Access Point Settings 10-8
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
viii
OL-15985-01
Page 9
Identifying Intermittent Network Outages 10-8 Verifying DHCP Settings 10-8
Verifying Voice VLAN Configuration 10-9 Verifying that the Phones Have Not Been Intentionally Reset 10-9 Eliminating DNS or Other Connectivity Errors 10-9
Symptom: Audio Problems 10-10
No Audio During a Connected Call 10-10 One-Way Audio During a Connected Call 10-10
Symptom: Improper Roaming and Voice Quality or Lost Connection 10-11
Voice Quality Deteriorates While Roaming 10-11 Delays in Voice Conversation While Roaming 10-11
Phone Loses Connection with Cisco Unified Communications Manager While Roaming 10-11 Phone Does Not Roam Back to Preferred Band 10-12
Monitoring the Voice Quality of Calls 10-12
Using Voice Quality Metrics 10-13 Troubleshooting Tips 10-13
Contents
APPENDIX
APPENDIX
General Troubleshooting Information 10-14
Common Phone Status Messages 10-14
Troubleshooting Tips for the Cisco Unified Wireless IP Phone 7921G 10-15 Logging Information for Troubleshooting 10-17
Using a System Log Server 10-17
Using the Trace Logs on the Unified IP Phone 10-17
Erasing the Local Configuration 10-18
A Providing Information to Users By Using a Website A-1
How the Cisco Unified Wireless IP Phone Operates A-1
How to Care for and Clean the Phone A-2
How Users Access the Help System on the Phone A-3
How Users Get Copies of Cisco Unified IP Phone Manuals A-3
How Users Configure Phone Features and Services A-4
How Users Access Voice Messages A-4
B Supporting International Users B-1
Installing the Cisco Unified Communications Manager Locale Installer B-1
Support for International Call Logging B-2
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
ix
Page 10
Contents
APPENDIX
APPENDIX
I
NDEX
C Physical and Operating Environment Specifications C-1
D Checklist for Deploying the Cisco Unified Wireless IP Phone 7921G D-1
Configuring the Wireless Network D-1
Configuration Tip for Cisco Aironet Access Points D-2
Configuring QoS Policies D-3
Access Point Configuration Settings D-3
Controller Settings D-3 Switch Configuration D-4
Configuring the Cisco Unified Wireless IP Phone 7921G in Cisco Unified Communications Manager D-4
Installing the Cisco Unified Wireless IP Phone 7921G D-7
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
x
OL-15985-01
Page 11
Overview
Audience
Preface
Cisco Unified Wireless IP Phone 7921G Administration Guide provides the information you need to understand, install, configure, and manage the Cisco Unified Wireless IP Phone 7921G on your network. This guide is i nte nd ed t o be use d to a dm inist er phon es run ning w ith Cisc o Unified Communica tions
anager Release 4.3, 5 .1, 6 .0, 6 .1, and 7 .0.
M
Network engineers, system administrators, or telecom engineers should review this guide to learn the steps required to properly set up the Cisco Unified Wireless IP Phone 7921G on the wirele ss network.
The tasks described are considered to be administration-level tasks and are not intended for end-users of
he phones. Many of the t asks inv ol ve c onfi guri ng ne two rk se tting s a nd c ould a ffec t the p hone
t functioning in the netw ork.
Because of the close interaction between the Cisco Unified Wireless IP Phone 7921G and Cisco Unified
mmunications Manager, these tasks require familiarity with Cisco Unified Communications
Co Manager.
Organization
This guide i s o rgani zed a s f ol low s:
Chapter Description
hapter 1, “Overview of the Cisco Unified
C Wireless IP Phone 7921G”
Chapter 2, “Overview of the VoIP Wireless Network”
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
Provides a conceptual overview and description of the Cisco Unified Wireless IP Phone 7921G and provides an overview of the tasks required prior to installation
Describes how the IP Ph one inter acts wi th o ther key IP telephony a nd wire less netwo rk pro tocol s and componen ts
xi
Page 12
Preface
Chapter Description
Chapter 3, “Setting Up the Cisco Unified Wireless I
P Phone 7921G”
Chapter 4, “Using the Cisco Unified Wireless IP Phone 7921G Web Pages”
Chapter 5, “Configuring Settings on the Cisco Unified Wireless IP Phone”
Chapter 6, “Configuri ng the Phone Usi ng the Wavelink A va lan ch e S er ve r”
Chapter 7, “Configuring Features, Templates, Services, and Users”
Chapter 8, “Viewing Security, Device, Model, Status, and Call Statistics Informat ion on the Phone”
Chapter 9, “Monitoring the Cisco Unified Wireless IP Phone Remotely”
Chapter 10, “Troublesho oting the Cisc o Unifi ed Wireless IP Phone 7921G”
Appendix A, “Providing Information to Users By Using a Website”
Appendix B, “Supporting Interna tional Us ers” Provides information abou t setting up phon es in
Appendix C, “Physical an d Oper ating Environment Specifications”
Appendix D, “Checklist for Dep loying the C isco Unified Wireless IP Phone 7921G ”
Describes how to properly and safely install and configure the Cisco Unified Wireless IP Phone 7921G on your network
Describes how to use the Cisco Unified Wire less IP Phone 7921G web pages for initial phone configuration and to update configuration files for the wireless IP phone
Describes how to configure netwo rk profiles and phone settings, by using the Settings menu on the wireless IP phone
Describes how to use the Cisco Unified Wire less IP Phone 7921G Configuration Utility on the Wavelink Avalan che se rver for updati ng the phone configuration
Provides an overvi ew of p roc edur es fo r configuring telephony features and adding users to Cisco Unified Communicati ons Manager
Explains how to view phone security, device, and network information an d networ k and call statistics from the wireless IP phone
Explains how to obtain status information about the phone using t h e pho ne we b p age
Provides tips for troubleshoo ting the wireless IP phone
Provides suggestions for setting up a website for providing users with important information about their wireless IP phone
non-English environ ments Provides technical specifications of the
Cisco Unified Wireless IP Phone 7921G Provides a checklist for deployi ng the
Cisco Unified Wireless IP Phone 7921G
Related Documentaton
For more information about Cisco Unified IP Phones or Cisco Unified Communications Manager, refer to the following publications:
Cisco Unified Wireless IP Phone 7921G
These publications are available at the following URL:
http://www.cisco.com/en/US/products/hw/phones/ps379/tsd_products_support_series_home.html
Cisco Unified Wireless IP Phone 7921G Phone Guide
Cisco Unified Wireless IP Phone 7921G Accessory Guide
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
xii
OL-15985-01
Page 13
Preface
Cisco Unified Wireless IP Phone 7921G Installation Guide
Cisco Unified Wireless IP Phone 7921G Desktop Charger Installation Guide
Cisco Unified Wireless IP Phone 7921G Multi-Charger Installation Guide
Regulatory Compliance and Safety Information for the Cisco Unified Wireless IP Phone 7920G
Series and Perip heral De vic e s
Open Source License Notices for the Cisco Unified IP Phones 7900 Series
Cisco Aironet Wireless Adapters
Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide
Cisco Unified Communications Manager Administration
Cisco Unified Communications Manager publications are available at the following URL:
http://www.cisco.com/en/US/products/sw/voicesw/ps
Cisco Unified Communications Manager Administration Business Edition
Cisco Unified Communications Manager Business Edition publications are available at the following URL:
556/tsd_products_support_series_ho me.h tml
http://www.cisco.com/en/US/products/ps7273/tsd_produ cts_suppo rt_series_h ome.html
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s New in Cisco Product Documentation, revised Cisco t e chn ica l d o cu ment a tio n, a t:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the Wha and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.
t’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed
Cisco Product Security Overview
This product co nt ain s c ryp togr ap hic fe atu res a nd is subj ect to Un ite d Sta tes an d loca l c ou ntry law s governing import , e xpo rt, tra nsf er a nd use. Deli very of C isco cryp to graph ic pro duct s d oes not imp ly third-party author ity to impo rt, expor t, distribut e or use enc ryptio n. Import ers, expor ters, di stribu tors and users are responsible fo r compl ianc e with U.S. and l ocal co untry laws . By using this product yo u agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return th is pr oduct imme dia tel y.
which also lists all new and
Further information reg arding U .S. e xport re gula tions m a y b e fou nd at
http://www.access.gpo.gov/bis/ear/ear_data.html.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
xiii
Page 14
Document Conventions
This document u ses t he f ol low ing co nvent ions:
Convention Description
boldface font Commands and keyw ord s are in boldface.
italic font Arguments for w hich yo u supp ly va lue s are in italics. [ ] Elements in square brackets are optional. { x | y | z } Alternative keywo rds are groupe d in b races an d separ ate d by vert ic al ba rs. [ x | y | z ] Optional alternative keywords are grouped in bra ckets and se parated by
string A nonquoted set of characters. Do not use quotation marks around the string
screen font Terminal sessions and information the system displays are in screen font.
boldface screen font Information you must enter is in boldface screen font.
italic screen font Arguments for w hich yo u supp ly va lue s are in italic screen font. ^ The symbol ^ represents the ke y labeled Control— for exam ple, th e key
< > Nonprinting characters, such as passwords are in angle brackets.
Preface
vertical bars.
or the string will include the quo tation ma rks.
combination ^D in a screen display means hold down the Control key while you press the D key.
Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the
publication.
Caution Means reader be careful. In this situation, you might do something that could result in equipment
damage or loss of data.
Warning
Means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
xiv
OL-15985-01
Page 15
CHA PTER
1
Overview of the Cisco Unified Wireless IP Phone 7921G
This chapter includes the following sections:
Understanding the Cisco Unif ied Wireless IP Phone 7921G , page 1-1
Features Supported on the Cisco Unified Wireless IP Phone 7921G, page 1-4
Understanding Security Fea tures fo r Cisco Unifie d IP Phones, page 1-7
Overview of Config uring and In stal ling t he Cisc o Unified Wireless IP Ph one 7 921 G, p age 1-11
Note For healthcare envi ronme nts , be a war e t hat thi s pr odu ct is not a me dic al devi ce a nd uses an unlice nse d
frequency band tha t is suscep tible t o interf eren ce from ot her devi ces or eq uipmen t.
Understanding the Cisco Unified Wireless IP Phone 7921G
The Cisco Unified Wireless IP Phone 7921G provides wire les s voi ce c om mu nicat ion ove r an I P network. Like tra dit iona l a nal og telep hon es, y ou ca n plac e a nd re ce ive p hone c al ls a nd acce ss feat ur es such as hold, transfer , and speed d ial. In addition , because the p hone connects to your wireless local area network (WLAN), you can place and receive phone calls from anywhere in your wir eless environment.
The Cisco Unified Wi rele ss I P Pho ne 7921G is a n 8 02.11 du al ba nd wirel ess d ev ice t hat p rovi des
mprehensive voice communications in conjunction with Cisco Unified Communications Manager and
co
sco Aironet 802.11b/ g and Cisco Ai rone t 802 .1 1a A ccess Po int s ( APs) in a pr iva te business
Ci communications n etw or k. Thi s ph one m od el, li ke oth er ne tw ork devi ce s, must be conf igur ed a nd managed. This p hon e en co de s G.7 11a , G .711u , G. 729a, G .729 ab , G.722 /iL BC, a nd dec ode s G. 711 a, G711b, G.711u, G.729, G729a, G729b, and G729ab. The phone also supports uncompressed wideband (16 bits, 16 k Hz) audi o.
The wireless IP phone supports multiple lines and most of the IP phone features of other Cisco Unified IP Phon
Figure 1-1 sh
functions of the keys on th e phone.
es.
ows the Cisco Unified Wireless IP Phone 7921G. Th e tabl e that follow s descr ibes the
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
1-1
Page 16
Understanding the Cisco Unified Wireless IP Phone 7921G
180258
WXYZ
0
1
@
2
ABC
3
DEF
4
5
JKL
6
MNO
GHI
7
8
TUV
9
PQRS
#
*
10
13 12
14
15
16
11
17
1
4
8
9
7
6
5
2
3
7921
Figure 1-1 Cisco Unified Wireless IP Phone 7921G Buttons and Keys
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
1 Indicator light
(LED)
2 Headset port Port for plugging in a head set or ear bud.
3 Speaker button Toggles the speaker mode on or o ff fo r the pho ne.
4 Right softkey
button
1-2
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
Provides these indication s:
Solid red—Phone is co nnect ed to A C powe r sourc e and bat tery i s c harg ing.
Solid green—Phone is conn ec ted t o AC p ower so urce and ba ttery is full y
charged.
Fast blinking red—Incoming call. (Phone can be charging or fully charged.)
Slow blinking red— Voice message. (W hen connected to AC power source,
red light displays long er than when phone is using only th e battery .)
Slow blinking green—Phone is using only battery power. Phone is registered
with the wireless network and is within service coverage area.
Activates the Options menu for access to the list of softkeys. Sometimes displays a softkey label.
OL-15985-01
Page 17
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
#
0
*
1
@
Understanding the Cisco Unified Wireless IP Phone 7921G
5 Navigation
Accesses these menus and lists from the main screen:
button
Directory
Line View
Settings
Services
Allows you to scrol l u p and do wn m en us to h ighli ght options a nd t o move left and right throu gh pho ne nu mber s and tex t e ntrie s.
6 Select button Activates the Help menu from the main screen.
Allows you to select a menu item, a softkey, a call, or an action.
7 Power/End
button (red)
Turns the ph one o n o r off, sile nce s a ri nging c all, or e nds a conn ec te d ca ll. When using menus, acts as a shortcut to return to the main screen.
8 Pound (#) key Toggles between l ock ing an d u nloc king th e k ey pad.
Allows you to enter these special characters when you are entering text:
# ? ( ) [ ] { }
9 Zero (0) key Enters “0” when diali ng a num be r. All ows y ou to ent er a space or these special
characters when you are entering text:
, . ‘ “ | _ ~ ’
10 A steri sk (*)
key
Toggles between Ri ng and Vib rate mode. Allows you to enter these special characters when you are entering text:
* + - / = \ : ;
11 K eyp ad Allows you to dial numbe rs, ente r letters , and choo se menu ite ms by number.
Press and hold key 1 to access your voice messagi ng system.
12 One (1) key Enters “1” when dialing a number. Allows you to access the voice messaging
system. Allows you to enter these special characters when you are entering text:
! @ < > $ % ^ &
13 Answer/Send
Allows you to answer a ringing call or, after dialing a number, to place the call.
button (green )
14 L e ft so ftke y
button
Activates the softkey option displayed on the screen. When customized by the phone administrator or user, allows direct access to the Phone Book or voice messages.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
1-3
Page 18
Features Supported on the Cisco Unified Wireless IP Phone 7921G
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
15 Mu
16 Volume button When the phone is idle, allows you to control th e ring volume, turn on th e vibrate
17 Ap plication
For more information about phone features and how they operate, refer to the Cisco Unified Wireless IP Phone 7921G Phone Guide and Quick Reference for Cisco Uni fied Communications Manager 4.3, 5.1,
6.0 and Later and Cisco U n ified I P Phone Feature s A - Z on t his index:
http://www.cisco.com/en/US/products/hw/phones/ps379/products_user_guide_list.html.
Related Topics
Features Supported on the Cisco Unified Wireless IP Phone 7921G, page 1-4
Overview of Config uring and In stal ling t he Cisc o Unified Wireless IP Ph one 7 921 G, p age 1-11
te button Toggles the mute feature on or off.
option, or turn off the ri ng. When an incoming call is ringing, allo ws you to press th is button onc e to silence
the ring for the call. During a call, allows you to control the speaker volu me for the han dset, headset ,
and speaker mo de .
Configurable button that is used with XML applica tions , such as Push to Talk or
button
Directory services. See “Setting Up Services” sec tion on pa ge 7-17.
Features Supported on the Cisco Unified Wireless IP Phone 7921G
The Cisco Unified Wireless IP Phone 7921G functions much like traditional IP phones allowing you to place and receive telephone calls while connected to the wire less LAN. In addition to traditional phone features, the Cisco Unified Wireless IP Phone includes features that enable you to administer and monitor the phone as a netwo rk devic e.
Caution This product is not a medical device and ma y use an unl icensed fr eque ncy band tha t is suscept ible to
interference from ot her devi ces or e quip me nt.
This section provides info rmat ion abou t these topi cs:
Feature Overvie w, p age 1- 5
Configuring Telephony Fea tures, page 1-5
Related Topics, page 1-5
Configuring Network Acc ess for the Phone, page 1-5
Providing Users with Feature Inform ation, pa ge 1-6
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
1-4
OL-15985-01
Page 19
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
Feature Overview
The Cisco Unified Wireless IP Phone 7921G provides traditional telephony functionality, such as call forwarding and tra nsferri ng, call pi ckup, red iali ng, speed di alin g, confer ence calling , and voic e messaging system access, as well as these features:
Wireless web acce ss to yo ur phone n umb er and the c orpor ate d irect or y.
Access to network da ta, XM L ap pl icat ions, a nd we b-b ased servi ces.
Online customizing of phone fe atures and services fr om the User Op tions web page s.
An online help system that displays in formatio n on the phone screen.
BLF enhancements, DND– Reje ct, Cal ling Par ty No rma liza tion, and E .16 4 di aling w ith p lus sign
(+).
CSV file support, dir ect ed call pi ck up, Si ng le Button Ba rge, Join A cross Lin es en hanc emen t, and
intercom with extension mobility.
Related Topics
Configuring Network Profile s, page 4-8
Features Supported on the Cisco Unified Wireless IP Phone 7921G
Configuring Features, Te mplates, Serv ices, an d Users, pag e 7-1
Configuring Telephony Features
You can use Cisco Unified C ommun ications Ma nager Admi nistrati on applicat ion to set up pho ne registration criteria and calli ng search space s, to confi gure corp orate di recto ries and servi ces, an d to modify phone button tem plates. See th e “Telep hony Fea ture s Ava il able for the Phone ” se ction o n
page 7-2 and Cisc
For more informatio n abo ut C isco U nifie d C omm unica tio ns Ma nage r Admini stra tion, r efer t o Ci sco
ified Communicatio ns M anag er do cu ment ation , in cl udi ng C
Un System Guide. You can also use the context-sensitive help available within the application.
You can access the complete Cisco Unified Communications Manager documentation suite at this
cation:
lo
http://www.cisco.com/en/US/products/sw/voicesw/ps
Related Topics
Understanding Security Fea tures fo r Cisco Unifie d IP Phones, page 1-7
Security for Voice Communic ations in WLA Ns, page 2-14
Interac t in g w i t h C i sco Unifie d Communications Man ager, page 2- 12
Telephony Feature s Avail able fo r the Phon e, page 7-2
o Unified Communicat ions M anag er A dmini str ati on Gui de for addi tional informat ion.
isco Unified Communications Manager
556/tsd_products_support_series_ho me.h tml
Configuring Network Access for the Phone
Like other network devices, you must confi gure IP phone s to access Cisco Unified Com municat ions Manager and the rest of the IP net work using the wireless LAN . There are two methods for configuring network settings such as DHCP, TFTP, and for wireless settings for the phone.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
1-5
Page 20
Features Supported on the Cisco Unified Wireless IP Phone 7921G
Cisco Unified Wireless IP Phone 7921G web pa ges
Network Profiles menu on the Cisco Unified Wireless IP Phone 7921G
You can access t he c on figur ation w eb p ages by usin g a b row ser fr om yo ur PC. For more in for matio n,
e Using the Cisco Uni fie d Wi rel ess I P Pho ne 7921G Web Pa ges, page 4-1.
se You can also configure ne twork setti ngs on the phone itsel f. For more informat ion abou t confi guring
atures from the phone, see Chapter 5, “Configuring Settings on the Cisco Unified Wireless IP Phone.”
fe Because the Ci sco Unified Wireless IP Phone i s a ne twork de vice , yo u c an obta in d etaile d status
nformation about it. Thi s informa tion can a ssist you in trou bleshoo ting prob lems tha t users mig ht
i encounter when using their IP phones. See Chapter 9, “Monitoring the Cisco Unified Wireless IP Phone
Remotely,” for tips on using this information.
Related Topics
Using the Cisco Unif ied Wir ele ss IP Pho ne 7921G We b Page s, pa ge 4-1
Configuring Settings on the Cisco Unified Wireless IP Phone, page 5-1
Monitoring the Cisco Unified Wireless IP Phone Remotely, page 9-1
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
Providing Users with Feature Information
If you are a system administrator, you are the primary source of information for Cisco Unified Wireless IP Phone users in your network or company. To ensure that you distribute the most current feature and procedural information, familiarize yourself with Cisco Unified Wireless IP Phon e 7921G
ocumentation. Make sure to visit the Cisco Unified IP Phone web site:
d
http://www.cisco.com/en/US/products/hw/phones/ps379/tsd_prod ucts_sup port_maintain _and_ope rate. html
From this site, you can view additiona l phone doc umentat ion. In addition to providing documentation, it is important to inform users about available Cisco Unified IP
e features—including features specific to your company or network—and about how to access and
Phon customize those fe ature s, if app ropriat e.
For a summary of the key information that you can provide to phone users, see A
Information to Users By Using a Website.”
Note The radio frequency (RF) for the Cisco Unified Wireless IP Phone 79 21G is co nfigured fo r a specific
regulatory domain. If users attempt to use this phone outside of the regulatory domain, the phone will not function properly and t hey might vi olate loca l regulat ions.
Related Topic
Providing Information to Use rs By Using a Website, page A-1
ppendix A, “Providing
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
1-6
OL-15985-01
Page 21
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
Understanding Security Features for Cisco Unified IP Phones
Understanding Security Features for Cisco Unified IP Phones
Implementing security in the Cisco Unified Communications Manager system prevents identity theft and prevents data, call signaling, and media stre am tamperin g. To reduce o r eliminate t hreats, the Cisco IP telephony network establ ishes and maintains au then ticated a nd encr ypted com municat ion stream s between a phone a nd the Ci sco Unified Comm unic ation s M ana ger serv er , di git ally signs fi le s b efore
ransferring the files to a phone, and en crypts me dia strea ms and call signa ling betwe en Cisco Unified
t
nes. Table 1-1 contains additional information about security.
IP pho
Table 1-1 Cisco Unified IP Phone and Cisco Unified Communications Manager
Security Topics
Topic Reference
Detailed explanation of secu rity, in cluding set up, configuration, and troubleshooting information
Refer to Cisco Unified Communica tions Manager
Security Guide
for Cisco Unified Co mmuni cati ons M a nage r and Cisco Unified IP Phones
Security features supported on the Cisco Unified IP Phone
See the “Overview of Supported Sec urity
Features” section on page 1-8
Restrictions regarding security features See the “Security Restrictions” section on
page 1-11
Viewing a secur ity prof ile nam e whe n runn ing Cisco Unified Communi cations Mana ger 5.0 or
See the “Understandi ng Security Pr ofiles” secti on
on page 1-10
later Identifying phone calls for which security is
implemented
See the “Identifying Encrypted and Authenticated
Phone Calls” sectio n on pag e 1- 11
Transport Layer Security (TLS) connection See the “Networking Protocols Used with Cisco
Unified Wireless IP Phones” section on page 2-7
See the “Phone Configuration Files and Profil e
Files” section on page 2-1 2
Security and the phone startup proc ess See the “Understan ding the Phone Sta rtup
Process” section on page 3-18
Security and phone confi gurati on files See the “Phone Configurati on Files and Profil e
Files” section on page 2-1 2
Changing the TF TP Se rve r 1 or TFT P Serv er 2 option on the phone when security is implemented
Items on the Security Configura tion me nu on the phone
See the “Configuring Network Profiles” section
on page 4-8
See the “Viewing Security Information” section
on page 8-1
Unlockin g th e CT L file See the “Accessing the CTL File Screen” section
on page 8-3
Disabling acces s to pho ne we b p ag es See the “Produ ct-Sp ecifi c Co nfig ura tion Op tions
for the Cisco Unified Wireless IP Phone 792 1G” section on page 7-13
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
1-7
Page 22
Understanding Security Features for Cisco Unified IP Phones
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
Table 1-1 Cisco Unified IP Phone and Cisco Unified Communications Manager
Security Topics (continued)
Topic Reference
Troubleshootin g See the “Gene ral Trou bleshooti ng Info rmati on”
Resetting or restorin g the phone See the “Erasing the Local Configuration” section
For information about supported security options for the Cisco Unified Wireless IP Phone 7921G , se e the “Authentication Method s” section on page 2-14.
Overview of Supported Security Features
Table 1-2 provides an overview o f the secur ity features th at the Cisco Unified Wire less IP Phone 7921G
supports. For more information about these features and about Cisco Unified Communications Manager
d Cisco Unified IP Phone security, refe r to Cisco
an For information abou t curren t securit y settings on a phone, choo se SETTIN
Configuration > Security Configuration. For more informa tio n, se e the “Viewing Security
Information” section on page 8-1.
section on page 10-14
Refer to Cisco Unified Communica tions Manager Security Guide, Troubleshooting chapter
on page 10-18
Unified Communications Manage r Se cu rity Gu id e.
GS > System
Note Most security features are available only if a certificate trust list (CTL) is installed on the phone. For
more information a bou t the C TL, re fer to “ Con figu ri ng t he Ci sco CT L Client ” c hapt er in t he Cisco Unified Communications Manager Security Guide.
Table 1-2 Overview of Security Features
Feature Description
Image authentication Prevents tampering with the firmware image before it is loaded on
a phone by using signed binar y files (wi th the ex tensio n.sbn). Tampering with the image cause s a phone to fail th e a uthen tic ati on process and reject the new image.
Customer-site certificate installation
Authenticates each Cis co Unifie d IP Phone by using a uniq ue certificate. Phones include a manufacturing installed certificate (MIC), but for additional security, you can specify in Cisco Unified Communications Manager Administration that a certificate be installed by using the Certificate A uthority Proxy Function (CAPF). Alternatively, you can install a locally significant certificate (LSC) from t he Sec ur ity Co nfi g urat ion menu on the phone. See the “Configuring the Security Certifica te on the Phon e”
section on page 5-12 for mor e inform atio n.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
1-8
OL-15985-01
Page 23
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
Table 1-2 Overview of Security Features (continued)
Feature Description
Device authentication Occurs between the Cisco Unified Communications Manager server
File authentication Validates digitally-signed files that the phone downloads. The
Signaling Authentication Uses the TLS protocol to validate that no tampering has occurred to
Manufacturing installed certificate
Secure SRST reference After you configure a SRST reference for security and then reset the
Media encryption Uses SRTP to ensure that the media streams between supported
Signaling encryption Ensures that all SCCP signaling messages that are sent between the
CAPF (Certificate Authority Proxy Function)
Security profiles Defines whether the phone is non-secure, authenticated, or
Encrypted configuration files Lets you ensure the privacy of phone configuration files.
Understanding Security Features for Cisco Unified IP Phones
and the phone when each entity accepts the certificate of the other entity. Determines whether a secure connection between the phone and a Cisco Unified Communications Manager should occur, and, if necessary, creates a secure signaling path between the entities using TLS protocol. Cisco Unified Communications Manager will not register phones unless authenticated by the Cisco Unified Communications Manager.
Cisco Unified IP Phone 7921G supports only the Secure Hash Algorithm-1 (SHA-1) signature algorithm.
phone validates the signature to make sure that file tampering did not occur after the file creation. Files that fail authentication are not written to Flash memory on the phone. The phone rejects such f iles without further processing.
signaling packets during transmission. Each Cisco Unified IP Phone contains a unique manufacturing
installed certificate (MIC), which is used for device authentication. The MIC is a permanent unique proof of i dentity for the p hone, an d allows Cisco Unified Communications Manager to authenticate the phone.
dependent devices in Cisco Unified Communications Manager Administration, the TFTP server adds the SRST certificate to the phone cnf.xml file and sends the file to the phone. A secure phone then uses a TLS connection to interact with the SRST-enabled router.
devices proves secure and that only the intended device receives and reads the data. Includes creating a media master key pair for the devices, delivering the keys to the devices, and securing the delivery of the keys while the keys are in transport.
device and the Cisco U nified Communications Manager server are encrypted.
Implements parts of the certificate generation procedure that are too processing-intensive for the phone, and it interacts with the phone for key generation and certificate installation. The CAPF can be configured to request certificates from customer-specified certificate authorities on behalf of the phone, or it can be configured to generate certificates locally.
encrypted. See the “Understanding Security Profiles” section on
page 1-10 for more information.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
1-9
Page 24
Understanding Security Features for Cisco Unified IP Phones
Table 1-2 Overview of Security Features (continued)
Feature Description
Optional disabling of the web
erver functionality for a ph one
s Phone hardening Additional securit y o ptions, wh ich you cont rol from
Related Topics
Understanding Securit y Profi les, p age 1-10
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
You can prevent ac cess to a p hone’ s w eb pag e, w hich di splays a variety of operational statistics for the phone.
Cisco Unified Communicati ons Manager A dministr ation:
Disabling Gratuitous ARP (GARP)
Disabling access to the Setting menus
Disabling access to web pages f or a p hone Note You can view current set tings fo r the GAR P Enabl ed, an d
Web Access option s by lo oki ng at the phone ’s Dev ice Information menu. For more information, see the “Viewing
Security Informa tion” se ctio n o n pag e 8- 1.
Identifying Encrypt ed an d Authen ticated Phon e Calls, page 1-11
Viewing Device Information, page 8-4
Security Restrictions, page 1-11
Understanding Security Profiles
A security profil e defines wheth er a phone is n on-secure, auth enticated, or encrypted and associated with every Cisco Unified IP Phon e that is su pported by Cisco Unified Communic atio ns M ana ger
ministration. For information about configuring the security profile and applying the profile to the
Ad phone, refer to Cisco Unified Comm unication s Manager Secu rity Guide.
Note Security is configured on each Cisco Unified IP Phone. For more information about configuring security,
refer to Cisco Unified CallManager Security Guide at
http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_maintenanc e_guides_list.html .
To view the security mode that is set for th e phone, from th e phone scre en, choose SETTI Information > Security > Security Mode. For more information, see the “Viewing Security
Information” section on page 8-1.
Related Topics
Identifying Encrypt ed an d Authen ticated Phon e Calls, page 1-11
NGS > Device
Viewing Device Information, page 8-4
Security Restrictions, page 1-11
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
1-10
OL-15985-01
Page 25
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7921G
Identifying Encrypted and Authenticated Phone Calls
When security is impleme nted for a phone, you ca n ident ify auth entica ted or enc rypted ph one calls by icons on th e sc re en on the p hon e.
In an authenticated call, all de vices participat ing in the establishme nt of the call are auth enticated by the
o Unified Communications Manager. When a call in progress is auth enticated, the call progress ico n
Cisc
the right of the call duration timer in the phone screen changes to this icon:
to In an encrypted call, all devices participating in the establishment of the call are authenticated by the
o Unified Communications Manager. In addition, call signaling and media streams are encrypted.
Cisc
n encrypted call offers th e high est l evel of secur it y, provi ding inte gr ity and pr ivac y to th e cal l. Whe n
A a call in progress is being encrypted, the call progress icon to the right of the call duration timer in the phone screen changes to this icon:
Note If the call is routed through non-IP call legs, such as the PSTN, the call might be non-secure even though
it is encrypted within the IP network and has a lock icon associated with it.
Related Topics
Understanding Security Fea tures fo r Cisco Unifie d IP Phones, page 1-7
Understanding Securit y Profi les, p age 1-10
Security Restrictions, page 1-11
Security Restrictions
When using a phone that is no t conf igur ed for enc ryp tion , the user ca nn ot bar ge into an en cr ypte d call . When barge fai ls in th is c ase, a r eo rder tone ( fast busy to ne) play s o n t he ba rge i n itiat or’ s p hone.
If the phone is configured for encryption, the user can barge into an authenticated or non-secure call from
he encrypted phone. After the barge occurs, Cisco Unified Communications Manager classifies the call
t
non-secure.
as If the phone is configur ed for en crypt ion, th e user can ba rge in to an encr ypted call, an d the pho ne
dicates that the call is encrypted.
in A user can barge into an authenticated call, even if the phone that is used to barge is non-secure. The
uthentication icon continues to display on the authenticated phones in the call, even if the initiator’s
a phone does not suppor t secu rit y.
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7921G
When deploying a new IP telephony system, system administr ators and netw ork admini strators must complete several initial configuration tasks to prepare the network for IP telephony se rv ice. For
nformation and a checklist for setting up and configuring a complete Cisco IP telephony network, refer
i to the “System Configuration Overview” chapter in the Cisco Unified Communications Manager System Guide.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
1-11
Page 26
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7921G
To add wireless IP phones t o the IP netwo rk, system admini strators al so must perf orm a site surv ey to determine where to place and install access points (APs) for wireless voice coverage. For detailed information about a vo ice ov er W LAN d eplo yment , r ef er t o the Cisco Enterprise Mobility 3.0 Design
Guide.
After you have set u p the IP t elep hon y sy stem and conf i gured syste m- wide fe atu res i n Ci sco U nif ied
munications Manager, you c an add IP phones to the syste m.
Com The following t op ics pro vide a n ove rv iew of pro cedu re s f or ad ding Cisc o Unif ied IP Phon es t o your
twork:
ne
Configuring the Cisco Unifi ed W ireless I P Ph one 7 921 G i n Ci sco U nifie d Com mun ications
Manager, page 1-12
Installing the Cisco U n ified Wi rele ss I P Pho ne 7 921G, page 1-12
Configuring the Cisco Unified Wireless IP Phone 7921G in Cisco Unified Communications Manager
To add phones to the Ci sco U nifie d C ommuni ca tions M a nage r da taba se, you can us e:
Auto-registration
Cisco Unified Communications M anager Admi nistratio n
Bulk Administration Tool (BAT)
BAT and the Tool for Auto-Reg ister ed Phones Suppor t (TAPS)
For more information about these choices, see the
Unified Communications M ana ger” se ctio n o n pag e 3-2.
For general information about configuring phones in Cisco Unified Communications Manager, refer to
e “Cisco Unified IP Phone” chapter in the Cisco Unified Communications Manager System Guide.
th For a checklist of tasks for configurin g the phone i n Cisco Unifie d Communi cations Mana ger, see the
“Configuring the Cisco Unified Wireless IP Phone 7921G in Cisco Unified Communications Manager” section on page D-4.
Related Topics
Installing the Cisco U n ified Wi rele ss I P Pho ne 7 921G, page 1-12
Configuring Features, Te mplates, Serv ices, an d Users, pag e 7-1
Configuring the Cisco Unified Wireless IP Phone 7921G in Cisco Unified Communications
Manager, page D-4
Methods for Adding Pho nes to Cisco
Installing the Cisco Unified Wireless IP Phone 7921G
After you have added the phones to the Ci sco Unified Com munica tions Manage r datab ase, you can complete the phone instal lation. Y ou (or the pho ne users) can in stall the phon e at the user s’s locati on. The Cisco Unified Wireless IP Phone Installation Guide that ships in the box with e ac h phone provides directions for a ssembl ing t he p hon e an d ac cessor ies a nd char gi ng t he ba tt ery.
Prior to using the phone to connect to the wireless LAN, you need to configure a network profile for the
ne. You can use the Cisco Unified Wireless IP Phone 7921G web pages to set up the network profile
pho
d other phone se tting s, or you c a n con figu re t he n etw ork p ro fil e usi ng ph one m enus.
an
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
1-12
OL-15985-01
Page 27
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
If you use auto- regi stra tio n wi th Cisco U nif ied Com muni cati ons Mana ger, y ou ne ed to up date th e specific configuration information for the phone such as associating the phone with a user, changing the softkey template, or dire ctor y num ber.
Note Before you insta ll a p hon e, e ve n if it is ne w, u pgr ade t he p hone to th e c ur rent fi rmwa re im age. Fo r
information about upg rading , refer to the Readm e file for you r phone w hich is loca ted at:
http://www.cisco.com/cgi-bin/tablebuild.pl/ip-7900ser-crypto
For a checklist of tasks for installing the phone, see the “Installing the Cisco Unified Wireless
IP Phone 792 1G ” secti on on page D-7.
Related Topics
Understanding the Cisco Unif ied Wireless IP Phone 7921G , page 1-1
Configuring the Cisco Unified Wireless IP Phone 7921G in Cisco Unified Communications
Manager, page 1-12
Installing the Cisco Unified Wireless IP Phone 7921G, page D-7
Troubleshooting the Cisco Unified Wireless IP Phone 7921G , page 10-1
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7921G
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
1-13
Page 28
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7921G
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7921G
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
1-14
OL-15985-01
Page 29
Overview of the VoIP Wireless Network
This chapter provides an overview of the interaction between the Cisco Unified Wireless IP Phone 7921G and other key components of a VoIP network in a WLAN environment. It contains the
ollowing sections:
f
Understanding the Wireless LA N, page 2-1
Understanding W LAN St anda rd s and Techn ologie s, page 2-3
Components of the VoIP Wirel ess Network, pa ge 2-7
Security for Voice Communic ations in WLA Ns, page 2-14
VoIP WLAN Configuration, pa ge 2- 18
Site Survey Verification, page 2-20
Understanding the Wireless LAN
CHA PTER
2
With the introduction of wireless communication, wireless IP phones can provide voice communication within the corporate wirele ss local area netwo rk (WLAN). The Cisco Unified Wireless IP Phone 7921G
pends upon and interacts with wireless APs (APs) and key Cisco IP telephony components, including
de
Unified Communications M anager , to provid e wireless voi ce comm unicatio n.
Cisco In a traditional LAN, IP phones and computers use cables to transmit messages and data packets. Cisco
ified WLAN delivers security, scalability, reliability, ease of deployment, and management similar
Un to wired LANs. It includes RF capabilities that en able real-time ac cess to core busin ess applications an d provides proven enterprise-class secure connectivity. The WLAN is an integrated end-to-end solution that uses wireless IP phones and APs, network infrastructure, network management, and mobility services.
Figure 2-1 sh
IP telephony.
ows a typical WLAN topology that enables th e w ireless tr an smission o f voic e f or wi rel ess
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
2-1
Page 30
Understanding the Wireless LAN
M
113946
Figure 2-1 WLAN with Wireless IP Phones
When a wireles s IP pho ne p owers on, it search es fo r a nd beco mes as soci ated with an AP. As user s mov e from one location to anot her, the wireless IP pho ne roams out -of-ra nge of o ne AP into the range of another AP. The wireless IP phone builds and maintains a list of eligible APs and reconnects to an AP in that list. See Associating to an AP, page 2- 10 fo r more in format ion.
Chapter 2 Overview of the VoIP Wireless Network
The AP uses its connection to the wired network to transmit data and voice packets to and from the
tches and routers. Voice signaling is transmitted to the Cisco Unified Communications Manager
swi server for call processing and ro uting.
APs are critical components in a WLAN because they provide the wireless links or “hot spots” to the
twork. Cisco requires that the APs supporting voice communications use Cisco IOS Release 12.3(8)JA
ne or later. Cisco IO S softw are provi d es fe atu res for ma nagi ng voi ce tr af fic .
In some WLANs, each AP h as a wired connection to a n Eth er n et switch, such as a Cisco Catalyst 3750,
hat is configured o n a L A N. The swit ch pro vide s a ccess t o gatew ays an d the Cisc o
t Unified Communications Ma nager serve r to support wire less IP telepho ny.
Some netwo rks ha ve wire d compo nen ts tha t supp ort wir ele ss comp onent s. The wired comp onents coul d
onsist of switches, routers, and bridges with special modules to enable wireless capability.
c The Cisco Unified WLAN can have the followi ng compone nts:
Cisco Aironet Series Access Points—802.11a/b/g enterprise-class access points with integrated
antennas or a nte nna c on nect ion s f or easy de ploy me nt.
Cisco 2000 Series Wireless LA N Controller—For small to m edium sized networks, such a s branch
offices. Works with Cisco lightweight access points.
Cisco 4100 Series Wireless LAN Controller—For medium to large deployments. Works with Cisco
lightweight access points.
Cisco 4400 Series Wireless LAN Controller—For large enterprise facilities. The Cisco 4402 and
4404 models support a maxim um of 50 and 100 acce ss points respe ctively.
Cisco Wireless LAN Controller Module for Integrated Services Routers—Enables small-to-med ium
businesses and ent erpr ises t o de ploy an d mana ge secu re W LAN s at b ranc h o ffic es .
Cisco Catalyst 6500 Series Wireless Serv ices Modul e (WiSM)—Pr ovides secur ity, mo bility,
redundancy, and ease of use for WLAN admini strators.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-2
OL-15985-01
Page 31
Chapter 2 Overview of the VoIP Wireless Network
Understanding WLAN Standards and Technologies
Cisco Catalyst 3750 Series Integra ted Wireless LAN Con trollers— Adds wireless LA N controll er
functions to the stackable Cisco Catalyst 3750G Series Switches to improve operating efficiency, security, mobility, and ease of use for WLAN administrators.
Wireless Control System (WCS)—Prov ides a powerful syst ems manage ment. Syste m
administrators can design, control, and monitor enterprise WLANs from a centralized location.
Cisco 2700 Series Wireless Location Appliance—802.11 based location tracking solution for asset
tracking, IT manage ment, an d locati on based sec urity. An ope n API is inc luded.
Cisco Wireless LAN Client Adapters—Availab le in CardBus, PCMCIA and PCI form factors, Cisco
Aironet Wireless LA N C lie nt Ad ap ters conn ec t de skto p and m obile comp ut ing devi ces to the WLAN in 802.11b-compli ant or 802.11a -compl iant netwo rk.
For more information about Cisco Unified Wireless Networks, refer to
http://wwwin.cisco.com/marketing/mobility/solutions/unified/index.shtml. For more in formation about
the Cisco wireless products, re fer to http://www.cisco.com/en/US/products/hw/wireless/index.html.
Understanding WLAN Standards and Technologies
This section desc ribe s th e follow ing c once pts:
802.11 Standards f or WL AN Com muni cations , p age 2-3
Radio Frequency Ranges, page 2-3
Wireless Modulation Tec hnologi es, page 2- 4
AP, Channel, and Domain Relationships, page 2-4
WLANs and Roaming, page 2-6
802.11 Standards for WLAN Communications
Wireless LANs must follo w the Insti tute of Ele ctrica l and Elec tronics Engineers (IEEE) 802.11 standards that defi ne the pr otoc ols tha t g overn a ll E ther net -base d wi rel ess t raff ic. The Cisc o Unified
reless IP Phone 79 21G suppo rts the follo wing standa rds:
Wi
802.11b–Specifies the radio frequen cy (RF) of 2.4 GHz for both transmitting and receiving data.
Commonly called the Wi-Fi standard.
802.11g–Uses the same unlice nsed 2 .4 GH z ba nd as 802.1 1b, but e xtends t he da ta r ates to pr ovide
greater performance by usi ng Orthogo nal Freque ncy Divi sion Multiple xing (OFDM ) techno logy. OFDM is a physical–layer encoding technology for transmitting signals by using RF.
802.11a–Uses the 5 GHz band that provides more channels and improved data rates by using OFDM
technology.
Radio Frequency Ranges
WLAN communications use the following RF ranges:
2.4 GHz—Does not requir e licensi ng. To redu ce inte rfere nce withi n this ban dwidt h, WLANs
transmit on non-overlapping channels, which are typically limited to three channels, although Japan uses four channels.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
2-3
Page 32
Understanding WLAN Standards and Technologies
Many devices oper ate i n t he 2 .4 GH z ba ndwi dth inc luding cord less pho nes a nd mic rowa ve ovens and can interfere with wireless communications. Interference does not destroy the signal, but can reduce the tran smissi on spee d from 11 Mb ps to 1 M bps . RF i nte rf eren ce ca n aff e ct voic e qual ity over the wireless network.
5 GHz—Divided into several sections call ed Unlicensed National Informatio n Infrastructure (UNII)
bands and has four cha nnel s e ach. Th e ch an nels ar e space d at 2 0 M Hz to provi de n o n- overl appi ng channels and mo re ch anne ls t h an 80 2.1 1b or 80 2.11g.
Wireless Modulation Technologies
Wireless communications uses the following modulation technologies for signaling:
Direct-Sequence Spread Spectrum (DSSS)—Prevents interference by spreading the signal over the
frequency range or bandwidth. DSSS technology multiplexes chunks of data over several frequencies so that multiple devices can communicate without interference. Each device has a special code that identif ies its data packets and al l others ar e ignore d. Cisco wire less 802. 11b/g products use DSSS technology to suppor t m ultiple devices on the WL AN.
Orthogonal Frequency Division Multiplexing (OFDM)—Transmits signals by using RF. OFDM is
a physical–layer encod ing techno logy that breaks one hi gh-speed data carrie r into severa l lower-speed carriers to transmit in par allel across the RF sp ectrum. OFDM, when used with 802.11g and 802.11a, c an s u ppo rt data r ate s as hi gh as 54 M bps.
Table 2-1 pro
IEEE standard.
vides a comparison of da ta rates, nu mber of channe ls, and mod ula tion tech nologi es by
Chapter 2 Overview of the VoIP Wireless Network
Table 2-1 Comparison of Data Rates, Number of Channels and Modulation Technologies by
IEEE Standard
Item 802.11b 802.11g 802.11a
Data Rates 1, 2, 5.5, 11 Mbps 6, 9, 12, 18, 24, 36, 48, 54
Non-overlapping
3 (Japan us es 4) 3 (Japan u s es 4) Up to 23
Channels Wireless
DSSS DSSS, ODFM ODFM
Modulation
AP, Channel, and Domain Relationships
APs transmit and receive RF signals over channels within the 2.4 GHz or 5.1 to 5.8 GHz frequency band. To provide a stable wireless environment and reduce channel interference, you must specify non-overlapping ch an nel s fo r ea c h AP . T he r ecom mende d ch anne ls fo r 802 .11 b and 8 02.11g i n N orth America are 1, 6, an d 1 1.
Regulatory domains determine the number of chann els that wireless co mmunicati ons can us e within the
requency band. Table 2-2 lists regulatory domain, frequency ba nd range, and operati ng channe ls for
f four regulatory domains. The Cisco Unified Wireless IP Phone 7921G uses the fourth domain (product
ber is CP-7921G-W) for al l o the r reg ions in the wo rld. Wir ele ss LA Ns i n th e rest of t he w o rld u se
num
802.11d to ident ify b and r an ges and c han nel s.
Mbps
6, 9, 12, 18, 24, 36, 48, 54 Mbps
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-4
OL-15985-01
Page 33
Chapter 2 Overview of the VoIP Wireless Network
Note In a non controller-based wireless network, it is recommended that you statically configure channels for
each AP. If your wirele ss network us es a contro ller, use the Auto-RF fe ature w ith mini mal voice disruption.
Table 2-2 Regulatory Domain Frequency Band and Channel Usage
Regulatory Domain Frequency Band Range Operating Channels
FCC 2.412-2.462 GHz 11 ch anne ls Product number: C P-79 21G- A 5.15-5.25 GHz (U NII -1 )
ETSI (Europe) 2.412-2.472 GHz 13 ch anne ls (1-13 ) Product number: CP-79 21G- E 5.15-5.725 GHz 19 channels Japan 2.412-2.472 GHz 13 channels (ODFM) Product number: CP-79 21G- P 2.412- 2.484 G Hz 14 ch anne ls (CCK)
World Product number: CP-7921G- W
Understanding WLAN Standards and Technologies
12 channels
5.25-5.35 GHz (UNII-2)
5.725-5.825 (UNII-3)
5.470 - 5.725 (DFS)
5.47-5.725 GHz (pendi ng
11 channels
approval
5.15-5.35 GHz 8 channels Uses 802.11d to iden tify ba nd
ranges
Uses 802.11d to identify channels
The AP coverage a rea d ep ends o n its type o f ant enn a an d tr an smissi on powe r . The AP co ve rage r ange is from 500 to 1000 feet with effective isotropic radiated power (EIRP) output that scales at 1, 5, 20, and 50 mW. To provide effective coverage, APs need a range overlap of appr oximately 20 percent to allow uninterrupted co nnec tio ns a s phone use rs ro am f rom o ne AP to a nothe r.
Wireless networks use a service se t identifier (SSID). The SSI D different iates one WLAN f rom anothe r,
o all APs and all devices attemptin g to connec t to a specific WLAN must use the sam e SSID. The SSID
s groups user devices and associat es the group wit h the A Ps.
For more information about wireless network components and design, refer to the following documents:
Cisco Enterprise Distributed Wireless Solution Ref erence Net work Design at
http://www.cisco.com/application/pdf/en/us/guest/netsol/ns178/c649/ ccmigration_0918 6a0080 0d6 7eb.p df
Overview: Cisco Unified Wireless Network at http://www.cisco.com/en/US/solutions/ns175/
networking_solutions_p rod ucts_ge neric cont ent0900 aec d80 529a5f .htm l.
For more information about APs, see the
VoIP WLAN Configuration” section on page 2-18.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
2-5
Page 34
Understanding WLAN Standards and Technologies
WLANs and Roaming
Wireless IP phones provide communication mobility to users within the WLAN environment. Unlike cellular phones tha t have broad co verage , the cove rage are a for the unified IP phone is smaller;
herefore, phone users fr equent ly roam fro m one AP to anot her. To understa nd some of the limitation s
t of roaming with wir eless I P ph ones, th ese e xample s pr ovide info rmati on abo ut th e WLAN en viro nment.
Pre-call Roaming—A wireless IP phone user po wers on the phon e in the off ice, an d the pho ne
associates with the near by AP. The u ser le av es t he bui ldi ng, m ove s to a noth er bu i ldin g, a nd the n places a call. The phone associates with a different AP in order to place the call from the new location. If the associated AP is within the same Layer 2 VLAN, the IP address remains the same for the phone. But, if the roaming phone crosses a Layer 3 boundary with DHCP enabled, the phone recognizes that it is no longer in the same subnet. The phone requests a new IP address before it can connect to the netwo rk and place the call.
Note If a user leaves the WLAN coverage area and then comes back into the same WLAN area, the
phone must recon nect to the n etw ork. By pr ess ing a key o n th e pho ne , th e user ac tiva tes t he phone and increases the scan ning rat e to speed up reconnec ting to th e network.
Chapter 2 Overview of the VoIP Wireless Network
Mid-call Roaming—A wireless IP phone user is activel y engaged in a call and moves from one
building to anothe r. The r oami ng eve nt occ ur s whe n the ph one m ov es int o th e range of a di ffer e nt AP, and then the phone authenticates and associates with the new AP. The previous AP hands the call over to the new AP while maintaining continuous audio connection without user intervention. As long as the APs are in the same Layer 2 subnet, the unified IP phone keeps the same IP ad dress
nd the call continues. As a unified I P phone roams between APs, it must re-authenticate with each
a
ew AP. See the “Authentication Methods” section on page 2-14 for informat ion about
n authentication.
If the unified IP phone user moves from an AP that cove rs IP Subnet A to an AP that covers IP
et B, the phone no longer has an IP address or gateway that is valid within the new subnet and
Subn the call can disconnect.
Layer 3 Roaming—With the release of the Cisco Catalyst 6500 Series Wireless LAN Services
Module (WiSM), the Cisc o Unified Wireless IP Phone 792 1G now sup por ts L ayer 3 ro ami ng for
tonomous mode APs. For d eta ils abou t t he Ci sco WL SM, r efer to the pr oduct doc um en tation
au available at:
http://www.cisco.com/en/US/products/ps6526/tsd_produ cts_suppo rt_mode l_home.h tml
Layer 3 roaming with light weigh t mode APs is acc ompli shed by cont rollers th at use dynami c
terface tunneling. Clients that ro am across controllers and VLANS can keep their IP address when
in using the same SSID.
Fast and Secure Roaming— Cisco Centr alized Key Manage ment (CCKM ) enable s authen ticate d
client devices to roam securel y from one AP to another without a ny percep tible de lay during reassociation. W ith t he su ppo rt of CCK M pr ot ocol , t he w ire less IP phone i s able to nego tia te t he
ndoff from one AP to ano t her mo re easi ly. D uri ng the roami n g pro cess, the ph one must scan for
ha the nearby APs, d etermin e which AP can pro vide the b est ser vice, an d then r eassoci ate with th e new AP. When implementing st ronge r authen ticatio n methods, such as WP A and EAP, t he number of information exchanges increases and causes more delay during roaming. To avoid additional delays, use CCKM to manage authentication.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-6
OL-15985-01
Page 35
Chapter 2 Overview of the VoIP Wireless Network
CCKM, a centralized key manageme nt pro tocol, pro vides a cache of sessi on creden tials on the wireless domain server (W DS). As the phon e roam s from one AP to the next, CCKM compress es the number of message exchanges during roaming by providing a master key stored on the WDS for the AP to use. The reassociation exchange is reduced to two messages, thereby reducing the roaming time.
For details about CCKM, refer to the “Cisco Fast Secure Roaming Application Note” at:
http://www.cisco.com/en/US/products/hw/wireless/ps4 c5223.html
Note In dual band WLA Ns, it is possi b le to r oam bet we en 2. 4 GHz b an ds (802.1 1b/ g) a nd 5 GH z ba nds
(802.11a). The p hon e mov es ou t of ra ng e of on e AP usin g o ne ba nd an d i nto t he ra ng e of a nothe r tha t has the same SSID but is using a different band. This can cause gaps in voice communications. To avoid these communication gaps, try to use only one band for voice com munic ations.
Related Topics
Voice QoS in a Wireless Network, page 2-10
Interacting with Cisco Unif ied Wire les s A Ps, page 2-9
Components of the VoIP Wireless Network
570/prod_technical_reference 09186a 00801
VoIP WLAN Configuration, pa ge 2- 18
Components of the VoIP Wireless Network
The wireless IP phone must interact with several network components in the WLAN to successfully place and receive cal ls. The fol lowing topics de scrib e network compone nts:
Networking Protocols Used with Cisco Unified Wireless IP Phones, page 2-7
Interacting with Cisco Unif ied Wire les s A Ps, page 2-9
Voice QoS in a Wireless Network, page 2-10
Interac t in g w i t h C i sco Unifie d Communications Man ager, page 2- 12
Interact ing with th e D HCP Serv er, p age 2- 13
Networking Protocols Used with Cisco Unified Wireless IP Phones
Cisco Unified IP Phones suppor t several net working pro tocols for voice comm unicati on. Ta ble 2-3 describes the networ king pr otoc ols th at th e Ci sco Unified Wireless IP Phone 7921G supports.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
2-7
Page 36
Components of the VoIP Wireless Network
Table 2-3 Supported Networking Protocols
Networking Protocol Purpose Usage Notes
Cisco Discovery Protocol (CDP)
Dynamic Host Configuration Protoco l (DHCP)
IP Messaging protocol that add resses
Chapter 2 Overview of the VoIP Wireless Network
Device-discove ry protocol that run s on all Cisco-manufa ctured equipment.
Using CDP, a device can advertise its existence to other dev ices and receive information about other devices in the network.
Dynamically allocates and assigns an IP address to netw ork de vices.
DHCP enab les an I P ph one t o connect to the networ k and becom e operational without the administr ator assigning an IP address or configuring additiona l network parameters.
and sends packets across the network.
Cisco Unified IP Phones use CDP to communicate information such as auxiliary VLAN ID, per-port power management details, and QoS configuration information with the Cisco Catalyst switch.
DHCP is enabled by def aul t. If disabled, you mu st m anu ally configure the IP address, subnet mask, gateway, and an T FTP serve r on each phone locally .
Use DHCP custom option 150. With this method, you configure the TFTP server IP addr ess as the opti on valu e. For additional supported DHCP configurations, refe r to Cisco
Unified Communications Manager System Guide.
To communicate using IP, network devices must have a n assi gn ed I P address, subnet, and gat ewa y.
Real-Time Control Protocol (RTCP)
Used with the RTP protocol to provide control over the transporting of real-time data, such as interactive voice and video, ove r data netw orks.
RTP Standard for transporting real-time
data, such as interactive voice and video, over data network s.
SCCP Uses Cisco-proprietary messa ges to
communicate between IP d evices and Cisco Unified Communications Manager.
IP addresses, subnet, and ga tewa y identifi catio ns ar e aut omat ica lly assigned if you are using the Cisco Unified IP Phone with DHCP. If you are not using DHCP, you must manually assign these pr operti es t o each phone lo ca ll y.
Cisco Unified IP Phones use the RTCP protocol to al low mo nitori n g of the data delivery and mi nimal control and iden tific atio n functionality.
Cisco Unifi ed IP Ph ones use th e RTP protocol to send and receive real-time voice tra ffic fro m other phones and gatewa ys.
Cisco Unified IP Phones use SCCP protocol for VoIP call signal ing and enhanced features such as Message Waiting Indication (MWI).
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-8
OL-15985-01
Page 37
Chapter 2 Overview of the VoIP Wireless Network
Table 2-3 Supported Networking Protocols (continued)
Networking Protocol Purpose Usage Notes
TCP Connection-ori ent ed t ran spor t
TFTP Method for transferring files over the
TLS TLS is a standard protocol for
User Datagram Protocol (UDP)
rotocol.
p
network. On the Cisco Unified IP Phone,
TFTP enables yo u to ob tain a configuration file specific to the phone type.
securing and authenticating communications.
Connectionless messag ing p roto co l for delivery of dat a pa cke ts.
Components of the VoIP Wireless Network
Cisco Unified IP Phones use TCP to connect to Cisco Unified Communications Manager and to access XML services.
You must have a TFTP server in your network that the DHCP server automatically identifies. If more than one TFTP server is runn ing i n your network, you must manually assign a TFTP server to ea ch p hon e.
When security is implemen ted, Cisco Unified IP Phones use the TLS protocol when securely regist ering with Cisco Unified Communications Manager.
Cisco Unifi ed IP P h on es re ceive and process UDP messages. RTP voice traffic runs over UDP.
Related Topics
Understanding the Phone Star tup Proces s, page 3-18
Components of the VoIP Wirel ess Network, pa ge 2-7
Configuring DHCP Settings, pa ge 5-6
Interacting with Cisco Unified Wireless APs
Wireless IP phones u se the same APs as wire less dat a de vice s. H owe ver, vo ice tra ff ic over a WLA N requires different equi pm ent confi gura tion s an d lay outs tha n a W LAN t hat is use d e xclusi vel y for data traffic. Data transmi ssion can tolerate a hi gher le vel of RF noise, pa cket lo ss, and chan nel cont ention than voice transmission . Packet loss du ring voic e transmi ssion can caus e chopp y or broke n audio and make the phone call in au dibl e.
Wireless IP Phones users a re m obil e a nd ofte n ro am a cross a cam pus or be tw een floo rs i n a b uil ding
hile connected to a call . In contra st, data use rs remain in one place or occasi onally move to anoth er
w location. The ability to roam while maintaining a call is one of the advantages of wireless voice so RF coverage needs to include stairwells, elevators, quiet corners outside conference rooms, and passage ways.
To ensure good voice quality and optimal RF signal coverage, you must perform a site survey. The site
rvey will determine settings suitable to wireless voice and assist in the design and layout of the
su WLAN; for example AP placement, power levels, and channel assignments.
After deploying and using wireless voice, you should continue to perform post installation site surveys.
n you add a grou p o f new users, insta ll more equ ip ment, or st ack la rge a mount s of i nvento ry, you
Whe are changing the wireless environment. A post in stallation survey will verify th at the AP coverage is still adequate for optimal voic e communicati ons. See the “Site Survey Verification” section on page 2-20 for more information.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
2-9
Page 38
Components of the VoIP Wireless Network
Associating to an AP
At startup, the Cisco Unified Wireless IP Phone 7921G scans for APs with Service Set Identifiers (SSIDs) and encryption types that it recognizes. The phone builds and maintains a list of eligible APs and uses the following variables to determine the best AP.
Received Signal Strength Indicator (RSSI)—Signal strength of available APs within the RF
coverage area. The phon e attemp ts to asso ciate w ith the AP w ith the highes t RSSI value.
QoS Basic Service Set (QBSS)—Beacon information element (IE) that sends the channel usage of
the AP to the unified IP phone. The phone us es the QBSS va lue to de term ine whe the r the A P c an e
Note Q BSS is not supp orte d wh en usin g W i-Fi 8 02. 11a.
Traffic Specification (TSpec)—Calculation of call limits and WLAN load balancing. The TSpec
value of each vo ice str eam allows the syste m to allo cate ba ndwidth to voice device s on a fi rst-come, first-served basis. For mor e inform ation , see “Voice QoS in a Wireless Network” section on
page 2-10.
Chapter 2 Overview of the VoIP Wireless Network
ffectively handle more traffic.
The unified IP phone associates with the AP with the highest RSSI and lowest channel usage values
BSS) that have matching SSID and encryption types. To ensure that voice traffic is handled properly,
(Q you must configure the correct QoS in the AP. For configuration information, see “Wireless Netwo rk
Requirements for VoIP” section on page 2-19.
Related Topics
Security for Voice Communic ations in WLA Ns, page 2-14
VoIP WLAN Configuration, pa ge 2- 18
Voice QoS in a Wireless Network
Voice traffic on the Wireless LAN, like data traf fic, is susceptible to delay, jitter, and pack et loss. These issues do not impact the data end user, but have serious implications for a voice call. To ensure that voice traffic receives timely and reliable treatment with low delay and low jitter, you must use Quality of Service (QoS), and use separate virtual LANs (VLANs) for voice and data. By isolating the voice traffic onto a separate VLAN, you can use QoS to provide priority treatment for voice packets when traveling across the network. Also, use a sepa rate VLA N for data tr affic , not the defa ult nati ve VLAN w hich is typically used for a ll netw ork devi ces .
You need the following VLANs on the network switches and the APs that support voice connections on
e WLAN.
th
Voice VLAN—Voice traffic to and from the wireless IP phone
Data VLAN—Data traffic to and from the wireless PC
Native VLAN—Data traffic to and from other wireless devices
Assign separate SSIDs to the voice and to the data VLA Ns. If you con figure a separa te manage ment
AN in the WLAN, do not associate an SSID with the management VLAN.
VL By separating the phones onto a voice VL AN and mark ing voic e packet s with high er CoS, you can
nsure that voice traffic gets priority treatmen t over data traffic resulting in lower packet delay and fewer
e lost packets.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-10
OL-15985-01
Page 39
Chapter 2 Overview of the VoIP Wireless Network
119160
Downstream
Upstream
Downstream
Upstream
Network
Downstream QoS only
Bi-Directional QoS
Unlike wired networks with dedi cated ban dwidths, wireless LANs have to conside r traffic direction when implementing QoS. Traffic is classified as upstream or downstream from the point of view of the AP as shown in Figu re 2-2.
Figure 2-2 Voice Traffic in a Wireless Network
Beginning with Cisco IOS release 12.2(11)JA, Cisco Aironet APs support the contention-based channel access mechanism calle d Enhanced Dis tributed C oordination Fun ction (EDC F). The EDCF-typ e of QoS has up to eight queues for downstream (toward the 802.11b/g clients) QoS. You can allocate the queues based on these options:
QoS or Differentiated Services Code Point (DSCP) settings for the packets
Components of the VoIP Wireless Network
Layer 2 or Layer 3 access lists
VLANs for specific traffic
Dynamic registration of devices
Although you ca n ha ve up t o eig ht q ue ues on the AP, y ou shou ld u se only t wo q ue ues for voi ce tra ffi c
ensure the best possible voice QoS. Place voice (RTP) and signaling (SCCP) traffic in the highest
to priority queue, an d p lac e da ta tra ffic in a best -ef fort qu eu e.A lth ough 802. 11b /g E D CF doe s no t guarantee that vo ice tr af fic is prot ecte d from da ta t raffi c, you sh oul d ge t t he b est stati sti cal r esul ts by using this queuing m ode l.
Note Th e Cisc o Unified Wireless IP Phone 7921G marks the SCCP signaling packets with a DSCP
value of 24 and RTP packets with DSCP value of 46.
To improve reliability of voice transmissions in a nondeterministic environment, the Cisco Unified Wireless IP Pho ne 7921G supports the IEEE 8 02.11e industry s tandard a nd is Wi-Fi M ultimedia
M) capable. WMM enables diff erent iated ser vices for voi ce, video, best effort data and other
(WM traffic. However, in order for these differentiated services to provide sufficient QoS for voice packets, only a certain amount of voice bandwidth can be serviced or admitted on a channel at one time. If the network can handle “N” voice calls w ith reserv ed band width , when the am ount of voic e traffi c is increased beyond this limit, (to N+1 calls), the quality of all calls suffers.
To help address the problems of VoIP stability and roaming, an initial Call Admission Control (CAC)
eme is required. With CAC, QoS is maintained in a network overload scenario by ensuring that the
sch number of active voice ca lls does not excee d the confi gured limits on the AP. The Cisco Unified
reless IP Phone 79 21G can int egrate layer 2 TSpe c admis sion cont rol with layer 3 Cisco Unified
Wi
munications Manager admissi on control (RSVP). Durin g times of network conges tion, cal ling or
Com called parties receive a fast busy indication. The system maintains a small bandwidth reserve so wireless phone clients can roam into a neighb oring A P (AP), even wh en the AP is at “full capa city”. After reaching the voice bandwidth limit, the next call is load-balanced to a neighboring AP without affecting the quality of the existing calls on the channel.
OL-15985-01
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-11
Page 40
Chapter 2 Overview of the VoIP Wireless Network
Components of the VoIP Wireless Network
Implementing QoS in the connected Ethernet switch is highly desirable to maintain good voice quality. The COS and DSCP values that the Cisco Unified Wireless IP Phone 7921G set s do not nee d to be
odified. To configure QoS correctly on the AP, see the Interacting with Cisco Unified Wireless APs,
m
page 2-9.
Related Topics
Authentication Method s, page 2-14
Interacting with Cisco Unified Communications Manager, page 2-12
VoIP WLAN Configuration, pa ge 2- 18
Interacting with Cisco Unified Communications Manager
Cisco Unified Communications Ma na ger i s the cal l contr ol co mpo ne nt in the ne tw ork that ha nd les a nd routes calls for the wireless IP phone s. Cisco Unified Communications Manager manages the
mponents of the IP telephony syste m—the phon es, access ga teways, an d the resou rces—for suc h
co features as call conf eren cing and ro ute planni ng. Whe n deployin g Cisco Unified Wireless IP Phone 7921G, you must use Cisco Uni fi ed Communications Manager Release 4.1, 4.2, 4.3, 5.0, 5.1,
0(1), 6.1(1) or 7.0(1) and SCCP protoc ol.
6. Before Cisco Unified Communic ations Manager can recog nize a pho ne, it must re gister with Cisco
ified Communicatio ns Mana ger a nd be conf igure d in the da tabase . For in for mat ion ab out se tting up
Un
nes in Cisco Unified Communications Manager, see the “Configuring the Cisco Unified Wireless IP
pho
Phone 7921G in Cisc o Unifi ed Co mm unic ation s M anag er” se ction on p age 1-12.
You can find more information about configuring Cisco Unified Communications Manager to work with
he IP phones and IP devices in the Cisco Unified Communications Manager Administration Guide an
t
Cisco Unified Communications Mana ger S yste m Gui de.
Related Topics
Configuring the Cisco Unifi ed W ireless I P Ph one 7 921 G i n Ci sco U nifie d Com mun ications
Manager, page 1-12
Phone Configuration Files and Profile Files, page 2-12
Phone Configuration Files and Profile Files
Configuration files for a phone define parameters for connecting to Cisco Unified Communications Manager and ar e st ored on t he T FTP se rver. In gen er al, a ny ti me y ou ma ke a cha ng e in C is co Unified Communications Ma nager Ad ministrat ion that re quires rese tting the pho ne, the pho ne
onfiguration file changes automatically.
c Configuration files also contain information about the correct image load for the phone. If this image
oad differs from the one currently loaded on a phone, the phone contacts the TFTP server to request the
l new image file.
d
The phone first requests the configuration file SEPxxx lowercase hexadecimal r ep resen tatio n o f ea ch i nte ger in the MAC address. If the phon e c ann ot f ind thi s file, it requests the configuration file XMLDefault.cnf.xml.
After the phone obtains the *.cnf.xml files , it requests a phon e-spec ific pro file file . If a phone cannot
ind this profile file, it requests the appropriate common profile file.
f
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-12
xxxxxxxxx.cnf. xml, wh ere ea ch xx is the two -digit
OL-15985-01
Page 41
Chapter 2 Overview of the VoIP Wireless Network
After the phone finds one of the profile files, or if it cannot find a profile file, it continues with its startup process.
Related Topic
Understanding the Phone Star tup Process, pag e 3-18
Interacting with the DHCP Server
Dynamic Host Configuration Protocol (DHC P) is a communic ations prot ocol that e nables netwo rk administrators to manage and automate the assignment of IP addresses in a network. When an IP device is added to the network, it must have a unique IP address. Without DHCP, the IP address must be entered manually at each device. DHCP allocates IP addresses dynamically and reuses IP addresses when devices no longer need them .
If DHCP is enabled in the network, the Cisco Unified Wireless IP Phone 7921G uses the DHC P sco pe
ttings in the DHCP server to perform the phone provisioning bootup process. You must configure the
se settings of the DHCP server in the Cisco Unified Communications Manager network.
The DHCP scope settings inc lude the fol lowing:
Components of the VoIP Wireless Network
TFTP server s
DNS server IP address (optional unless using ho st names)
Pool and range o f th e subn et ma sk, I P a ddr ess, a nd g atewa y
The priority of the DHCP settings for the TFTP server is unique to the Cisco Unified Wireless IP Phone 792 1G, as sho wn in Table 2-4.
Table 2-4 DHCP Settings Priority
Priority DHCP Settings
1st DHCP option 150 2nd DHCP option 66 3rd SIADDR 4th ciscoCM1
If DHCP is disabled, the Cisco Unified Wireless IP Phone 7921G uses the following network settings in
Table 2-5 to perform the phone provisioning bootup process. You must configure these static parameters
for each Cisco Unified Wireless IP Phone 7921 G.
Table 2-5 Static IP Addresses When DHCP is Disabled
Static Setting Description
IP Address IP address, the unique identifier assigned by the sy stem administrator
for the phone.
Subnet Mask Used to partition the IP address into a network identifier and host
identifier so TCP/IP can distinguish between them.
Default Router 1 Identifies the gateway that provides connectivity to th e IP network
beyond the subnet to whi ch the p hon e be longs .
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
2-13
Page 42
Chapter 2 Overview of the VoIP Wireless Network
Security for Voice Communications in WLANs
Table 2-5 Static IP Addresses When DHCP is Disabled (continued)
Static Setting Description
DNS Server 1 DNS Se
TFTP Server 1 TFTP Server 2
rver 2
If the system is configured to use host names for servers instead of IP addresses, identifies the primary an d secondary DNS server to resolve host names.
Identifies the TFTP servers that the phone uses to obtain configuration files.
Security for Voice Communications in WLANs
Because all WLAN devices that are within range can receive all other WLAN traffic, securing voice communications is critical in WLANs. To ensure that voice traffic is not manipulated or intercepted by intruders, the Cisco Unified Wireless IP Phone 7921G and Cisco Aironet APs are supported in the Cisco
AFE Security architecture. For more information about security in networks, refer to
S
http://www.cisco.com/en/US/netsol/ns744/networking_solutions_program_home.html.
This section contains the following items:
Authentication Method s, page 2-14
Authenticated K ey M a nage ment , page 2-16
Encryption Methods, page 2-16
AP Authentication and Encryption Methods, page 2-16
Authentication Methods
The Cisco Wireless IP telephony solution provides wireless network security that prevents unauthorized logins and comprom ised comm uni ca tions b y u sing t he fo llo wing a uth en ticati on m etho ds.
Open Authentication—Any wireless device can request authentication in an open system. The AP
that receives the request may grant authentication to any requestor or only to requestors on a list of users. Communicatio n be twe en t he w ire le ss de vic e an d AP cou ld be n on- en cr ypte d or d ev ice s can use Wired Equivale nt Pr ivac y (W EP) ke ys to p ro vide secu rit y. D evi ces that are usi ng WE P o nly attempt to authenticate with an AP that is using WEP.
Shared Key Authent icat ion—T he AP s end s a n une ncry pt ed c hal lenge t ext string t o a ny devi ce
attempting to communicate with the AP. The device that is requesting authentication uses a pre-configured WEP key to encrypt the challenge text and sends it back to the AP. If the chal lenge text is encrypted correctly, the AP allows the requesting device to authenticate. A device can authenticate only if its WEP key mat ches the WEP key on th e APs.
Shared key authentication can be less secure than open authentication with WEP because someone
n monitor the challe nges. An intr uder ca n calcu late the WEP key by compar ing the une ncryp ted
ca and encrypted challenge text strings.
Wireless Pro tec t ed A c ces s ( WP A) P re-S h ar ed Ke y ( PS K) A ut h en tic ati on — Th e A P a nd th e ph one
are configured with the same authentication key. The pre-shared key is used to create unique pair-wise keys that are exchanged between each phone and the AP. You can configure the pre-shared key as a hexadecimal or ASCII character st r in g. Be caus e th e p r e-s h ar ed key i s sto r ed on th e ph one , it might be compromised if th e phone is lost or stolen.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-14
OL-15985-01
Page 43
Chapter 2 Overview of the VoIP Wireless Network
Extensible Authen t icat ion Pr otoc ol-Fl exi ble Auth en tic ation v ia Sec ure Tun nel ing
(EAP-FAST)—This client server securi ty architectur e encrypts EAP tr ansactions withi n a Transport Level Security (TLS) tunnel between the AP and the RADIUS server such as the Cisco Access
ontrol Server (ACS).
C The TLS tunnel uses Protected Access Credentials (PACs) for authentication between the client
hone) and the RADIUS serve r. The serve r sends an Authorit y ID (AID ) to the clien t (phon e),
(p which in turn selects the appropriate PAC. The client (phone) returns a PAC-Opaque to the RADIUS server. The server decrypts the PAC with its master-key. Both end points now have the PAC key and a TLS tunnel is created. EAP-FAST supports automatic PAC provisioning, but you must enable it on the RADIUS server.
Note In the Cisco ACS, by defa ult, the PAC ex pires in one wee k. If the pho ne has an expired PA C,
authentication with th e RAD IUS ser ver tak es longer wh ile the phone gets a new PAC. To av o id the PAC provisioning delays, set the PAC expiration period to 90 days or longer on the ACS or RADIUS server.
Extended Authentication Protocol Transport Level Security (EAP-TLS)—EAP–TLS/RFC 2716
uses the TLS protocol (RFC 2246), wh ich is the late st IETF version of the SSL securi ty protocol. TLS provides a wa y to use ce rti fic ate s f or bo th u ser and se rver a uthe nti cati on, a nd fo r dyna m ic session key generation.
Microsoft Windows X P p rovi des su ppor t f or 802.1x , all owing E AP a uthe nticat ion pro toco ls
ncluding EAP-TLS) to be used for authentication. The authentication used in EAP-TLS is mutual:
(i the server authenticates the user and the user authenticates the server. Mutual authentication is required in a WLAN. EAP-TLS provides excellent security but requires client certificate management.
Security for Voice Communications in WLANs
EAP-TLS uses Public Ke y In fras tr uct ure ( PK I) w ith the fo llow ing co ndit ions :
Wireless LAN client (user machine) requires a valid certificate to authenticate to the WLAN network.
AAA server requires a “server” certificate to validate its identity to the clients.
Certificate Authority (CA) server infrastructure issues certificates to the AAA server and the clients.
Protected Extensible Aut henticatio n Protocol (PE AP)—PEAP use s server -side public key
certificates to authenticate clients by creating an encrypted SSL/TLS tunnel between the client and the authentication server.
PEAP with Server Certificate Authentication—The Cisco Unified IP Phone validates the server
certificate during the authentication handshakes over an 802.11 wireless link. This functionality is disabled by default and is enabled in Cisco Unified CallManage r Administ ration.
The exchange of authentication information is encrypted and the user credentials are safe from
vesdropping. MS-CH AP v2 is t he su ppo rte d inn er aut henti cat ion pr otoc ol.
ea
Light Extensible Authentication Protocol (LEAP)—Cisco proprietary password-based mutual
authentication scheme between the client (phone) and a RADIUS server. Cisco Unified Wireless IP Phone 7921G can use LEAP for authentication with the wireless network.
This section desc ribe s th e follow ing c once pts:
Authenticated K ey M a nage ment , page 2-16
Encryption Methods, page 2-16
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
2-15
Page 44
Security for Voice Communications in WLANs
Authenticated Key Management
The following authentication schemes use the RADIUS server to manage authentication keys:
WPA—Uses information on a RADIUS server to generate unique keys for authenticati on. Beca use
these keys are generated at the c entralized RADIU S server, WPA provides m ore security tha n WPA pre-shared keys that are stored on the AP and phone.
Cisco Centralized K ey M ana geme nt ( CCKM )—Uses information on a RADIUS server and a
wireless domain server (WDS) to manage and authenticate keys. The WDS creates a cache of security credentials for CCKM-enabled client devices for fast and secure reauthentication.
With WPA and CCKM, encrypti on keys are not entere d on the pho ne, but are au toma ticall y derived
tween the AP and phone. But th e EAP userna me and passw ord that are used fo r authent icati on must
be be entered on each phone.
Encryption Methods
To ensure that voice traffic i s secure, t he Cisco Unified Wireless I P Phone 7921G supports WEP, TKIP, and Advanced Encryp tion Standa rds (AES) fo r encr yption. W hen using t hese mec hanis ms for encryption, both the signal ing Skinny Cl ient Control Protocol (SCCP) pac kets and voice Real-Time Transport Protocol (RTP) packets are encrypted between the AP and the wireless IP phone.
Chapter 2 Overview of the VoIP Wireless Network
WEP—When using WEP in the wi reless net work, authe nti cati on ha pp ens a t t he AP by usi ng op en
or shared-key authentication. The WEP key that is setup on the phone must match the WEP key that is configured a t the A P for su cc essful co nnec tio ns. Th e Cisc o Unified Wireless IP Phone 7921G
orts WEP keys that use 40-bit encryption or a 128-bit encryption and remain static on the phone
supp and AP.
EAP and CCKM authentication can use WEP keys for encryption. The RADIUS server manages the
P key and passes a uni que k ey to the AP afte r au then tica tion f or enc ryp ting a ll vo i ce p acket s;
WE consequently, these WEP keys can change with each authentication.
TKIP—WPA and CCK M u se TK I P en cryp tio n th at has se vera l i mprov em en ts ov er W EP. TKI P
provides per-packet key ciphering and longer initialization vectors (IVs) that strengthen encryption. In addition, a message integrity check (MIC) ensures that encrypted packets are not being altered. TKIP removes the predictability of WEP that helps intruders decipher the WEP key.
AES—An encryption method used for WPA2 authentication. This national standard for encryption
uses a symmetrical algorithm that has the same key for encryption and decryption. AES uses Cipher Blocking Chain (CBC) encryption of 128 bits in size, supporting key sizes of 128, 192 and 256 bits, as a minimum.
Note Th e Cisc o Unified Wireless IP Phone 7921G does not su ppo rt C isco Key I ntegri ty Protoc ol
(CKIP) with CMIC.
AP Authentication and Encryption Methods
Authentication and encryption schemes are setup within the wireless LAN. VLANS are configured in the network and on t he A Ps an d sp eci fy dif fere nt c ombi nat ions of au the ntica tio n an d e ncry pt ion. An SSID is associated with a VLAN and its particular authentication and encryption scheme. To enable wireless client devices to authenticate successfully, you must configure the same SSIDs with their authentication and encryp tion schem es on the APs an d on the uni fied IP phone.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-16
OL-15985-01
Page 45
Chapter 2 Overview of the VoIP Wireless Network
Some authentication schemes require specific types of encryption. With Open authentication, you have the option to use static WEP for encryption for added security. But if you are using Shared Key authentication, you must set static WEP for encryption, and you must configure a WEP key on the phone.
When using Authenticated Key Management (AKM) for the Cisco Unified Wireless IP Phone 7921G,
everal choices for both authentication and encryption can be set up on the APs with different SSIDs.
s When the phone attempts to authenticate, it chooses the AP that advertises the authentication and encryption sche me t hat the pho ne c an suppo rt . Auto (A KM) m ode c a n aut h entic ate b y using WPA, WPA2, WPA Pre-shared key, or CCKM.
Note When using WP A Pre -s har ed ke y or W PA 2 Pre -sh ar ed ke y, t h e pre-s h ared k ey m ust b e s tat ica ll y
set on the phone. Th ese ke ys must mat ch t he k ey s con fi gured o n th e AP.
When using Auto (AKM), encryp tion opt ions are auto mat ically confi gured for WPA, W PA2, WPA
Pre-shared key, W PA2 Pr e-sha red key , or CCKM .
In AKM mode, the phone will authenticate with LEAP if it is configured with WPA, WPA2, or
CCKM key management.
The Cisco Unified Wireless IP Phone 7921G does not suppo rt auto E AP ne gotia tion; to use
EAP-FAST mode, you must spe cify i t.
Security for Voice Communications in WLANs
If AKM and 802.1x are used , the auth entica tion met hod is LEAP.
The Cisco Unified Wire le ss IP Pho ne 79 21G uses netw or k EA P for 802 .1x . O pen E AP i s also
available.
Table 2-6 provides a list of authentication and encryption schemes configured on the Cisco Aironet APs
supported by the Cisco Unified Wireless IP Ph one 7921G. The table shows the ne twork confi guratio n
ion for the phone that cor responds t o the AP conf igurat ion.
opt
Table 2-6 Authentication and Encryption Schemes
Cisco Unified Wireless IP Phone 7921G Security Mode
Cisco AP Configuration
Authentication
Key Management
Common Encryption Authentication
Configuration
Open None Open Open (Static WEP) WEP Open+WEP Shared key (Static WEP) WEP Shared+WEP LEAP 802.1x Optional CCKM WEP LEAP or Auto (AKM) LEAP WPA WPA with
TKIP LEAP or Auto (AKM)
Optional CCKM LEAP WPA2 WPA2 AES LEAP or Auto (AKM) EAP-FAST 802.1x Optional CCKM WEP EAP-FAST EAP-FAST WPA W PA with
TKIP EAP-FAST
Optional CCKM EAP-FAST WPA2 WPA2 AES EAP-FAST EAP-TLS 802.1x Optional CCKM WEP EAP-TLS
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
2-17
Page 46
VoIP WLAN Configuration
Chapter 2 Overview of the VoIP Wireless Network
Table 2-6 Authentication and Encryption Schemes (continued)
Cisco Unified Wireless IP Phone 7921G Security Mode
Cisco AP Configuration
Key
Authentication
Management
EAP-TLS WPA WPA with
O
ptional CCKM
Common Encryption Authentication
TKIP EAP- TL S
Configuration
EAP-TLS WPA2 WPA2 AES EAP-TLS PEAP 802.1x Optional CCKM WEP PEAP PEAP WPA WPA with
TKIP PE AP
Optional CCK< PEAP WPA2 WPA2 AES PEAP WPA-PSK WPA-PSK TKIP Auto (AKM) WPA2-PSK WPA2-PSK AES Auto (AKM)
For additional information about Cisco WLAN Security, refer to
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_brochure09186a00801f7d0b.html
For more information about configuring authentication and encryption schemes on APs, refer to the
sco Aironet Configurat ion Guide fo r your mod el and rel ease at this URL :
Ci
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_installation_and_configuration_g uides_list.html
Related Topics
Networking Protocols Used with Cisco Unified Wireless IP Phones, page 2-7
Authentication Method s, page 2-14
Encryption Methods, page 2-16
Interacting with Cisco Unified Communications Manager, page 2-12
Components of the VoIP Wireless N etwork, pa ge 2-7
VoIP WLAN Configuration, pa ge 2- 18
VoIP WLAN Configuration
This section provid es co nfig urat ion guide line s f or de ploy ing wir ele ss IP phone s in the W LAN and includes these topics:
Wireless Network Requireme nts for Vo IP, page 2-19
Interacting with Cisco Unified Wireless APs, page 2-9
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-18
OL-15985-01
Page 47
Chapter 2 Overview of the VoIP Wireless Network
Wireless Network Requirements for VoIP
When configuring voice over the wireless LAN, use APs that run Cisco IOS Version 12.3(8)JA or later. Controllers should be r unni ng version 4. 0 and h i gher with IOS Ver sio n 12. 3(8 )JX o r late r.
The Cisco Unified Wireless IP Phone 7921G supports Cisco Aironet APs (APs) that can run Cisco IOS
n autonomous mode and APs that run in lightweight mode with lightweight AP protocol (LWAPP) and
i use a Cisco Unified wireless LAN controller. Table 2-7 lists the supported AP models and op erati on mode in the WLAN.
Note Voice over the wireless LAN (V oWLAN) does not curren tly suppor t MESH techno logy such as Cisco
Aironet 1500 Serie s Li ghtweig ht Outdo or M esh A Ps.
Table 2-7 Supported APs and Modes
AP Models Autonomous Mode Lightweight Mode
Cisco Aironet 350 Se rie s AP Yes No Cisco Aironet 500 Series AP Yes Yes Cisco Aironet 110 0 Seri es A P Yes Yes Cisco Aironet 113 0 Seri es A P Yes Yes Cisco Aironet 120 0 Seri es A P Yes Yes Cisco Aironet 124 0 Seri es A P Yes Yes Cisco Aironet 125 0 Seri es A P Yes Yes Cisco Aironet 1300 Se rie s AP Yes Yes Cisco 1000 Series Ligh tweight A P No Yes
VoIP WLAN Configuration
Note Be aware that Wi-Fi compliant APs that are manufactured by third-party vendors can function with the
Cisco Unified Wireless IP Phone 7921G, but might not support key features such as Dynamic Transmit Power Control (DTP C), A RP- cac hing , LE AP/E AP -FAST, Q BSS, U -APSD , 80 2.1 1d an d 802. 11 h.
Configuring APs for Voice
This section identifies key AP configuration options that are required for optimal voice performance. This is not a complete list of configuration steps or options for deploying APs such as the Cisco Aironet APs. For more inf orm ati on abou t c onf igur ing your AP, r ef er to t he a ppr opri ate Cisc o Aironet AP
Installation and Configuration Guide f
Note When deploying the Cisc o Uni fied Wi rele ss IP Pho ne 79 21G with the Wo rld Regul atory D omain
(CP-7921GW-K9), you must enable the APs for world mode (802.11d). The world model phone gets the channels and power info rmati on from the AP.
To see a list of configuration tasks for th e Cisco Aironet AP, controller, an d Ethernet switch when setting up VoIP on the WLAN, see the “C onf igur in g th e Wi rel ess N etwor k” sec tio n on p ag e D-1.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
or your model or the d ocu menta ti on for y our AP .
2-19
Page 48
Site Survey Verification
Configuration Tip for Cisco Aironet APs
If you are using EAP-FAST, you must increase the EAP request (802.1x) timeout to at least 20 seconds to ensure that the phone gets the PAC credentials successfully.
To change the request timeout on the controller, follow these steps:
Procedure
Step 1 Use SSH or Telnet to access the Cisco Unified wireless LAN controller. Step 2 Enter co nfig a dvan ced ea p r equ est-tim eou t 20. Step 3 Enter save config. Step 4 Enter y to confirm.
Site Survey Verification
Chapter 2 Overview of the VoIP Wireless Network
Before the initial deployment of wireless phones in the WLAN, it is recommended that a site survey is performed to ve rify tha t t he APs a re pr ovid in g ade qu ate cov er age an d th at wi rele ss p hon es can ro am from one AP to another with no au dio pro blems. After the i nitial dep loym ent, it is a go od practic e to perform site surveys at regul ar inter vals to ensure contin ued cover age and roami ng.
From the Cisco Unified Wire less IP Phone 7921G, you can use the Neighbor List utility or Site Survey
tility from the Settings > Status menu.
u The Neighbor List utility provides information about the current AP and the closest neighbors tracked
the phone. For more infor mati on see Neighbor List Utility, page 2-21.
by The Site Survey utility produces a report, written as a temporary HTML file, upon termination of the
vey. This Site Survey Report is access ible fro m the phone web page for viewing or forward ing to
sur Cisco TAC for tro ubl eshoo tin g p urp oses . For mo re inf or matio n, see Site Survey Utility, page 2-22.
You should use the wireless IP phone and the Aironet Client Utility (ACU) to verify that the signal range
d transmission power provid e adeq uate co verage fo r roamin g phones.
an Use the following topi cs for infor mati on about per formin g the site survey:
Site Survey Verification Task s, page 2- 20
Neighbor List Utility, page 2-21
Site Survey Utility, page 2-22
Site Survey Verification Tasks
Perform these tasks to verify wireless voice network operation. Check that the wireless IP phones:
1. Associate with all APs in the WLAN.
2. Authenticate with all APs in the WLAN.
3. Register with Cisco Unified Communications Manager.
4. Can make stationary phone calls with good quality audio.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-20
OL-15985-01
Page 49
Chapter 2 Overview of the VoIP Wireless Network
5. Can make roaming phone calls with good quality audio and no disc onnect ions.
6. Can place multiple calls, especially in areas designated for high density use.
After phones are inst alled, r eque st t hat users re port any pr oble ms w hen using t heir w ire les s IP phones. When you perform a site surv ey verif icat ion and enc ounter problem s, see th e Cha
“Troubleshooting the Cisco Unified Wireless IP Phone 7921G” for assistance with finding the cause o f
the problem.
Related Topics
Neighbor List Utility, page 2-21
Site Survey Utility, page 2-22
Neighbor List Utility
The Neighbor List utility displays a list of the current AP and the closest neighbors tracked by the phone. The phone typically does not scan while it is idle, so often t here is only one entry, which is the currently associat ed AP , i n th e li s t.
Site Survey Verification
pter 10,
To use the Neighbor List utility, follow these steps:
Procedure
Step 1 Configure the Cisco Unified Wireless IP Phone 7921G with th e same SSID an d
encryption/authentication settings as the APs.
Step 2 Power on the phone so that it associates with the WLAN. Step 3 Choose Settings > Status > Neighbor List.
The phone displ ays the cur re nt A P an d the cl oses t n eig hbo rs. For e xa mple :
SSID: abcd
C
hannel
Channel BSSID RSSI
Utilization
01 19:50 -3 8 50 06 cf:d0 -51 38 11 7b:b0 -4 2 61
Step 4 To see more information about an AP, scroll to the desired line and press Details. The following is an
example of the de tail s for a spe cifi c AP:
SSID: abcd Channel:06 BSSID: 00:13:1a:16:cf:d0 RSSI:-51 CU:38
Step 5 To verify the ability to roam between APs, walk through all areas where phones are used and take
readings. Approach areas from different directions to assure successful roaming conditions.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
2-21
Page 50
Site Survey Verification
Step 6 Adjust AP and antenna placement and AP power settings to provide approximately 20 percent coverage
overlap.
Site Survey Utility
The Site Survey utility is used to actively and passively scan the wireless medium across all channels and locate APs that belon g to th e Basic Service Set (BSS). The r esults of the scans are then used he lp to identify areas of low coverage, if any, and to determine whether the APs are configured consistently as recommended in the C isco de ploy me nt g uide lin es.
When you start the Site Survey utility, the phone disassociates from the current AP and remains
isassociated for the duration of the operation.
d
Chapter 2 Overview of the VoIP Wireless Network
For more informatio n, see V
Caution During Site Survey, both active and passive scans are performed at a rapid rate. These scans will result
iewing the Site Survey Report on the Web, page 4-41.
in the phone battery life depleting faster than normal and might cause disruption to the wireless medium.
To use the Site Survey utility, follow these steps:
Procedure
Step 1 Configure the Cisco Unified Wireless IP Phone 7921G with th e same SSID an d
encryption/authentication settings as the APs.
Step 2 Power on the phone so that it associates with the WLAN. Step 3 Choose Settings > Status > Site Survey.
The phone displays a list of APs within range that have the same SSID and security settings as the phone.
o see more information about an AP, scroll to the desired line and press Details.
T
Step 4 To verify the ability to roam between APs, walk through all areas where phones are used and take
readings. Approach areas from different directions to assure successful roaming conditions.
Step 5 Adjust AP and antenna placement and AP power settings to provide approximately 20 percent coverage
overlap.
Step 6 When you te rm inat e t he site s urv ey, a repor t i s g en erate d for y our vie w ing fro m th e pho ne w eb pag e.
For more informatio n, see View ing the Site Survey Repo rt on the Web, page 4-41.
In addition to the Site Survey utility in the Cisco Unified Wireless IP Phone 7921G, you can also use the Cisco Aironet Client Utility Site Su rvey Utility from a laptop PC. Refer to t he sec tio n o n “Per f ormi ng a Site Survey” in the Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide for your system.
Related Topics
Site Survey Verification Task s, page 2- 20
Viewing the Site Survey Report on the Web, page 4-41
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
2-22
OL-15985-01
Page 51
Setting Up the Cisco Unified Wireless IP Phone 7921G
This chapter includes the following topics, which help you install and configure the Cisco Unified Wireless IP Pho ne 7921G on an IP telephony netwo rk:
Before You Begin, page 3-1
Installing the Cisco Unified Wireless IP Phone 7921G, page 3-7
Understanding the Phone Star tup Proces s, page 3-18
Before You Begin
Before installing a Cisco Unified Wireless IP Phone 7921G, review the requirements in these sections:
Network Requirement s, pa ge 3-1
CHA PTER
3
Methods for Adding Phones to Cisco Unified Communications Ma nage r, pa ge 3-2
Safety Informat ion, p age 3-5
Network Requirements
For the Cisco Unified Wireless IP Phone 7921G to successfully ope rate as a Cisco Unifi ed IP Phone endpoint, your networ k must support these re quirem ents:
Voice over Wireless LAN
Cisco Aironet Acce ss Poin ts c onfi gured t o supp ort V oice o ve r WLA N (VoWL A N)
Controllers and swit ches conf igure d to s uppo rt V oWLA N
Security implemented for authenticating wireless voice devices and users
Note You must verify tha t y our wi rel ess ne two rk is c on figu red p rop er ly f or vo ice serv ice . For mo re
information, see the “Site Survey Verification Tasks” section on page 2-20.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
3-1
Page 52
Before You Begin
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
VoIP Network
Cisco routers and ga teway s co nfi gured f or VoIP
One of these call–control products installed and configured:
Cisco Unified Communic ations Man ager Releas e 4.3, 5.1 , 6.0(1), 6. 1(1), or 7.0(1)
Cisco Unified Communications Manager Express 4.1 or later
IP network configure d to supp ort DH CP o r ma nua l assi gnmen t of IP a dd ress, gatew ay, an d su bnet
mask
Related Topics
Features Supported on the Cisco Unified Wireless IP Phone 7921G, page 1-4
Understanding the Wireless LA N, page 2-1
Methods for Adding Phone s to Cisco U nified Communications M ana ger, pa ge 3-2
Installing the Cisco Unified Wireless IP Phone 7921G, page 3-7
Powering On the Cisco Unif ied Wire le ss IP Phone 79 21G, page 3-16
Methods for Adding Phones to Cisco Unified Communications Manager
Before installing the wireless IP phone, you must cho ose a m eth od for a dd ing pho nes to the Cisco Unified Communications Manager database. Some methods require entering the MAC address of
he phone. Table 3-1 provides an overview of thes e metho ds.
t
Table 3-1 Methods for Adding Phones to the Cisco Unified Communications Manager
Database
Requires MAC
Method
Auto-registration No Results in automatic assignment of
Auto-registration with the Tool for Auto-Registered Phone s Supp ort (TAPS)
BAT Yes Allows for simultaneous registration of
Cisco Unified Communications Manager Administrat ion only
Address? Notes
directory numb er s
No Requires auto-registration and Bulk
Administration Tool (BAT ); update s information in the Cisco Unified IP Phone and in Cisco Unified Communications Ma nager Administration
multiple phones
Yes Requir es ph one s to be ad ded
individually
The following sections descri be method s for adding ph ones:
Adding Phones with Auto-Registration, page 3-3
Adding Phones with Auto-Regis tration an d TAPS, page 3-3
Adding Phones with BA T, pa ge 3-4
Adding Phones with Cisco Unified Communications Manager A dministr ation, page 3- 4
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-2
OL-15985-01
Page 53
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Adding Phones with Auto-Registration
Use auto-registration to ente r phones into the Cisco Unified Communications Manager database without first gathering MAC addresses from the phones. When auto-registration is enabled,
o Unified Communications Manager automatically assigns the next available sequential directory
Cisc
ber (DN) to new phones during the initial phone startup process.
num After registering th e pho nes, you can m odify set tings, such a s the DNs and d ev ice po ol s, by usin g
o Unified Communications Manager Administration.
Cisc
Note Auto-registration is disabled by default in Cisco Unified Communications Manager Admi nistra ti on.
You must enable and properly configure auto-registration before connecting any Cisco Unified IP Phone
o the network. Fo r i nfor ma tio n ab out ena bli ng and c onfig urin g a uto- re gist rat ion, ref er t o Cisc o
t Unified Communications Manager Admini stra tion Gui de .
Related Topics
Adding Phones with Auto-Regis tration an d TAPS, page 3-3
Adding Phones with BA T, pa ge 3-4
Before You Begin
Adding Phones with Cisco Unified Communications Manager A dministr ation, page 3- 4
Adding Phones with Auto-Registration and TAPS
Use auto-registration and TAPS to add phones to the Cisco Unified Communications Manager database. Add the phones first by using BAT to the Cisc o Unified Communications Manager database with
ummy MAC addresses. Then use TAPS to update MAC addresses and download p re-de fin ed
d
nfigurations for the pho nes.
co To implement TAPS, dial a TAPS DN and follow voice prompts. When the process is complete, the
ne has downloaded its D N and ot her se tting s. Th e c orr ect MAC a ddress fo r t he phone is updat ed in
pho Cisco Unified Communications Manager Administration.
Note You must enable auto-registrat ion in Cisco Unified Communications Manager Administration for TAPS
to function.
For Cisco Unified Communications Manager Release 5 .0 and prior releases, refer to Bulk Administration Tool User Guide for Cisco Unified Communications Manage r f TAPS. For Cisco Uni fied C omm un ica tions M ana ge r Rel ea se 6.0 a nd la ter relea ses , re fe r t o Cisco Unified Communications Ma nager Bu lk Adm inist ration Guide.
Related Topics
Adding Phones with Auto-Registration, page 3-3
or detailed instr uct ions ab out B AT an d
Adding Phones with Cisco Unified Communications Manager A dministr ation, page 3- 4
Adding Phones with BA T, pa ge 3-4
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
3-3
Page 54
Before You Begin
Adding Phones with BAT
Add a group of phones to the Cisco Unified Communications Manager database by using BAT. This tool performs batch operations, including registration, on multiple phones. You need the MAC addresses for each phone before you use BAT.
Table 3-2 de
Table 3-2 Determining the MAC Address of the Phone
Method For More Information
Choose SETTINGS > Model Informat ion > MAC Address and look at the MAC Addr ess
field. Remove the bat tery and l ook o n th e ba ck of t he
phone.
Note BAT is included in Cisco Unified Communications Manage r 5.0 or late r, but it is a plug- in for prio r
releases.
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
scribes how to determine the MAC ad dress of the wireless IP phone.
See “Viewing Model Informati on” section on
page 8-7
See the “Installing or Removing the Phone
Battery” section on pa ge 3-8
For detailed instruc ti ons about using BAT, r efe r to the fol low ing docum en ts :
For Cisco Unified Communic ations Manager Release 5.0 and prior re leases , refe r to Bulk
Administration Tool User Guide for Cisco Unified Communications Ma nager .
For Cisco Unified Communications Manager Release 6.0(1) and later releases, refer to Cisco
Unified Communications Ma nager Bu lk Adm inist ration Guide.
Note When using BAT to add Cisco Unified Wireless IP Phones, use the default setting for the phone load.
The phone load name inc lud es sym bols (-, _ ,.) and B AT d oes no t perm i t sym bo ls i n an e ntry.
Related Topics
Adding Phones with Auto-Registration, page 3-3
Adding Phones with Auto-Regis tration an d TAPS, page 3-3
Adding Phones with Cisco Unified Communications Manager A dministr ation, page 3- 4
Adding Phones with Cisco Unified Communications Manager Administration
Add phones individua lly by u si ng Ci sco Unified Communications Manager Administration. To do so, obtain the MAC address for each phone before you begin. See the “Methods for Adding Phon es to C isco
Unified Communications M ana ger” se ctio n o n pag e 3-2 for instructions.
Perform one of the follow ing after c ollect ing the M AC address es:
Cisco Unified Communicati ons Manager 5.0 and later—Cho ose Device > Phone and c lick Add
New.
Cisco Unified Communications Man ager 4.x—Choose Device > Add a New Device.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-4
OL-15985-01
Page 55
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
For additional instr u ctio n s an d con ceptual information ab out C is co Unified Communications Manager, refer to Cisco Unified Communications Manager Administration Guide a Unified Communications Manage r Sy stem Gu ide.
Related Topics
Adding Phones with Auto-Registration, page 3-3
Adding Phones with Auto-Regis tration an d TAPS, page 3-3
Adding Phones with BA T, pa ge 3-4
Safety Information
Review the following warnings befo re installing the Ci sco Unified IP Phone. To see translations of these warnings, refer to the Regulatory Compliance and Safe ty Informa tion for the Cisc o Unifi ed Wireless I P
Phone 7921G and P erip heral De vice s d
Before You Begin
nd to Cisco
ocument that ac comp anie d this device .
Warning
Warning
Warning
Warning
Warning
This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device.
Statement 1071
Read the installation instructions before connecting the system to the power source.
Statement 1004
This equipment will not be able to access emergency services during a power outage because of reliance on utility power for normal operation. Alternative arrangements should be made for access to emergency services. Access to emergency services can be affected by any call-barring function of this equipment.
Do not use the Cisco Unified Wireless IP Phone 7921G in hazardous environments such as areas where high levels of explosive gas may be present. Check with the site safety engineer before using any type of wireless device in such an environment.
The plug-socket combination for the battery charger must be accessible at all times, because it serves as the main disconnecting device.
Statement 1019
Warning
The battery charger requires short-circuit (overcurrent) protection to be provided as part of the building installation. Install only in accordance with national and local wiring regulations.
1045
Warning
OL-15985-01
The power supply must be placed indoors.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
Statement
Statement 331
3-5
Page 56
Before You Begin
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Warning
Telephone receivers produce a magnetic field that can attract small magnetic objects such as pins and staples. To avoid the possibility of injury, do not place the handset where such objects may be picked up.
Battery Safety Notices
The following batter y safety notices apply to the ba tterie s that ar e approve d by the Cisc o Unified Wireless IP Pho ne 7921G manufactu rer .
Warning
Warning
Warning
There is the danger of explosion if the battery is replaced incorrectly. Replace the battery only with the same or equivalent type recommended by the manufacturer. Dispose of used batteries according to the manufacturer’s instructions.
Ultimate disposal of this product should be handled according to all national laws and regulations.
Statement 1040
Do not dispose of the battery pack in fire or water. The battery may explode if placed in a fire.
Statement 1015
Caution The battery pack is int ende d for u s e onl y wi th thi s de vic e.
Caution Do not disassemble, crush, puncture, or incinerate the battery pack.
Caution To avoid risk of fire, burns, or dam ag e to y our ba tt ery pa ck, do not al low a me tal o bj ect to tou ch the
battery contacts.
Caution Handle a damaged or le aking battery with extreme care. If you come in con tact with t he electrolyte, wash
the exposed area with soap and water. If the electrolyte has come in contact the eye, flush the eye with water for 15 minutes and seek medical attention.
Caution Do not charge the battery pack if t he a mb ient te mp erat u re ex ce eds 1 04 d eg rees Fa hren he it (40 degre es
Celsius ).
Caution Do not expose the battery pack to high storage temperatures (above 140 degrees Fahrenheit, 60 degrees
Celsius ).
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-6
OL-15985-01
Page 57
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Caution When discarding a battery pack, contact your local waste disposal provider regarding local restrictions
on the disposal or r ecyc ling of ba tterie s.
Caution To obtain a replacement battery, contact your local dealer. Use only the batteries that have the following
Cisco part numbers.
Standard battery
CP-BATT-7921G-STD
Extended battery—CP-BATT-7921G-EXT
Caution Use only the Cisco power supply that is compatible with your phone. To order your power supply, contact
your local dealer and refer to the list of Cisco part numbers.
Australia Central Europe China Japan North America
CP-PWR-7921G-AU
CP-PWR-7921G-CE
CP-PWR-7921G-CN CP-PWR-7921G-JP
CP-PWR-7921G-NA
United KingdomCP-PWR-7921G-UK
Installing the Cisco Unified Wireless IP Phone 7921G
Note The battery and power supply are not provided with your phone. To order the battery and power supply,
contact your local dealer.
Related Topics
Network Requirement s, pa ge 3-1
Providing Power to t he Ph one , pa ge 3-7
Installing the Cisco Unified Wireless IP Phone 7921G
After setting up the wireless netwo rk to support voice comm unication s and conf iguring th e wireless IP phones in Cisco Unified Communications Manager, you are ready to install the p hones. This
tion includes the following installation information:
sec
Providing Power to t he Ph one , pa ge 3-7
Configuring Wireless LAN Set tings, page 3-15
Using a Headset, page 3-15
Providing Power to the Phone
The Cisco Unified Wireless IP Phone 7921G uses a batt ery fo r p ower . Tabl e 3-3 lists the types of batteries available for the wireless IP phone and the maximum talk and standby times.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
3-7
Page 58
Installing the Cisco Unified Wireless IP Phone 7921G
Table 3-3 Batteries Available for the Cisco Unified Wireless IP Phone 7921G
Type Technology Talk Time Standby Time
Standard Lithium ion (Li-ion) Up to 11.5 hrs Up to 150 hrs Extended Li-ion Up to 15.5 hrs Up to 200 hrs
Table 3-4 shows the charging time for the two types of batteries. You can stop charging the battery when
the battery is full y ch ar ged , an d lea ve the batteries in the charg er with no ill effects. Li- io n batte rie s can
partially charged without short ening the ba ttery life. Bat teries shou ld handle up to 4000 recharges.
be
Note Battery life varies because of environmental factors.
Table 3-4 Battery Charging Time Information
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Power Supply
Battery Type
Connected to Phone
Standard 2 hours 5 hours 2 hours Extended 3 hours 7 hours 3 hours
The following sectio ns provide i nform ation about the bat tery an d chargi ng the phone :
Installing or Removing the Pho ne Battery, pa ge 3-8
Using the Power Supply to Charge the Phone, page 3-9
Using the USB C ab le to Ch ar ge th e Ph one, pa ge 3-11
Installing and Us ing the De sktop Ch ar ger, pa ge 3-13
Installing or Removing the Phone Battery
To install the battery in the Cisco Unified Wireless IP Phone use Figure 3-1, and follow these steps:
Procedure
Step 1 To install the battery, insert the battery catches (as shown in Figure 3-1) in the correspon ding sl ots at the
bottom of the Cisco Unified Wireless IP Phone 7921G. Ensure that the metal contacts on the battery and
he phone are fa cing e ach othe r.
t
Phone Connected to PC with USB Cable
Power Supply with Desktop Charger
Step 2 Press the battery to the bo dy of the p hone until it locks into place. Step 3 To remove t h e ba tte ry, pre ss up on th e l ocki ng catc h, the n l ift and re move th e b att ery.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-8
OL-15985-01
Page 59
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
222
1
3
180349
Figure 3-1 Cisco Unified Wireless IP Phone 7921G Battery Installation
Installing the Cisco Unified Wireless IP Phone 7921G
1 Locking cat ch 3 Metal contacts 2 Battery catches
Note The MAC address for each Cisco Unified Wireless IP Phone 7921G appe ars on a print ed label on the
back of the pho ne un derne a th the batt ery.
Using the Power Supply to Charge the Phone
To charge the battery in yo ur phone qui ckly, you can use the po wer supply. You must asse mble the appropriate AC ada pter plug a nd then connect th e power supp ly.
Assembling or Removing the AC Plug Adapter
To assemble or remove the AC plug adapter for the power supply, use Figure 3-1, and follow these steps:
Procedure
Step 1 Insert AC plug ad apter (a s shown in Fig ure 3-2) in slot on the power sup ply. Step 2 Push AC pl ug adap ter se cure ly into place. Step 3 To remove A C plug a dap ter, pr ess on loc king bu tto n. Step 4 Pull AC plug ada pter out of sl ot on powe r sup pl y.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
3-9
Page 60
Installing the Cisco Unified Wireless IP Phone 7921G
180455
1
2
3
4
Figure 3-2 Assembling and Removing the AC Plug Adapter
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
1 AC plug adapter 3 Battery release button 2 Power supply 4 AC plug adapter removal
Charging the Phone Using the Power Supply
After assembling the powe r supp ly , you a re r eady to ch ar ge yo ur Cisc o Unified Wireless IP Phone 792 1G. Y ou can use the phon e whil e the batter y is being ch arged. For chargin g times, see
Table 3-5.
To charge the Li-ion ba ttery usin g the power supp ly, foll ow these st eps:
Procedure
Step 1 Connect the cable from the power supply to the outlet in the phone as shown in Figure 3-3. Step 2 Connect the powe r supply to an AC outlet . Step 3 Monitor the indicator light. While the battery is charging the light is red, and turns green when the
battery is fully charged.
Step 4 When the battery is charged, you can disconnect the power supply from the phone, and unplug the power
cord from the AC outlet.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-10
OL-15985-01
Page 61
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Figure 3-3 Charging the Phone Using the Power Supply
Installing the Cisco Unified Wireless IP Phone 7921G
1 AC plug adapter 2 AC power supply 3 Phone connector o n AC powe r sup pl y ca ble 4 Indicator light (LED)
Using the USB Cable to Charge the Phone
Charge the pho ne by us ing a USB cable conn ected to a USB po rt on yo ur PC. Chargi ng times ar e longe r when you use the USB cable. See Table 3-4 for charging tim es.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
3-11
Page 62
Installing the Cisco Unified Wireless IP Phone 7921G
180350
7921
WXYZ
0
1
@
2
ABC
3
DEF
4
5
JKL
6
MNO
GHI
7
8
TUV
9
PQRS
#
*
1
2
3
Figure 3-4 Charging the Phone Using a USB Cable Connected to a PC
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
1 Phone connection— Insert int o slot at bottom of pho ne. 2 USB connector—Inse rt into USB port on PC. 3 Indicator LED— Indic ates the ch argi ng status .
Note When you plug the phone into the USB port, the Found New Hardware Wizard appears. Use the
following steps to avoid this pop-up window every time you use the USB cable with your phone.
To turn off the Found New Hardware Wizard when using the USB cable to charge the phone, follow these steps :
Step 1 Plug the USB cable into the Cisco Unified Wireless IP Phone 7921G. Step 2 Plug the USB connector into the USB port on your PC.
Procedure
The Found New H ardw are W iza rd dia log ope ns.
Step 3 To turn off the wizard, for Update New Software, click No, not this time. Step 4 Next, click the button next to Install the Softwa re a utom ati cal ly ( R ecom men de d). Step 5 After a time delay, the Cannot Install This Hardware dialog box appears. Click Don't prompt me again
Step 6 Click Finish to close the dial o g b ox.
to install this software.
The phone brief ly d ispl ays “U SB C onnec ted ” on t he st atu s li ne.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-12
OL-15985-01
Page 63
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
While the battery is charging, the indicator light is red.
Step 7 When the battery is fully charged, the indicator light turns green. You can disconnect the USB cable
from the phone, and unplug th e cable fro m the PC.
Installing and Using the Desktop Charger
The desktop charg er ca n cha rg e b oth t he ph one ba tt ery i nsta lle d in th e p hone a nd a sp ar e batt ery at t he same time.You c an p lac e t he phone in t he d esk top ch ar ger to u s e t he spea ke rphone ca pa bil ity w hil e charging the phone and battery. For information about using the desktop charger speakerphone, refer to the “Using a Handset, He adset, and Speaker phone” i n the Cisc o Unified Wireless IP 7 921G P hone
Guide.
Installing the Cisco Unified Wireless IP Phone 7921G
To identify the desktop charger components and how to set up the desktop charger, use Fi
Figure 3-5 Desktop Charger Assembly and Components
gure 3-5.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
3-13
Page 64
Installing the Cisco Unified Wireless IP Phone 7921G
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
wer connector—Plugs into the back of the
1 Po
charger
2 AC power supp ly—Plugs int o wall outlet 7 Microphone—Single-direction, inte rnal
3 Upper compartment—For charging the
phone
4 Battery LED indicator—Red light indicates
battery is charging; green light indicates battery is fu lly cha rge d
5 Power LED indicator—Green light indicates
desktop charger has power
Using the Desktop Charger to Charge the Phone
To use the desktop charger to charge the phone and spare battery, follow these steps:
Procedure
Step 1 Plug the AC adapter into an AC outlet, and insert the connector into the back of the desktop charger. Step 2 Insert the Cisco Unified Wireless IP Phone 7921G into th e up pe r co mpa rtm en t of th e c harg er . Step 3 Insert the spare battery into the lower compartment.
6 Speaker—For speakerphone mode
microphone for speak erpho ne m ode
8 Lock hole—For inserting a cable lock
9 USB connector—For B-type USB connector on
cable that connects th e phone to a com puter
10 Lower sl ot— Fo r cha rgi ng the bat ter y
Note Y ou ca n inse rt a nd cha rge bot h the phone a nd the s pare bat ter y at th e sam e time o r y ou c an
charge them separately.
Step 4 Check the LED ind ica tor on t he ph one for c harging sta tus. T he ba tter y LE D on t he d esk top cha r ger
provides charging status for th e spare batte ry.
Table 3-5
gives the battery cha rgin g ti me infor ma ti on.
Battery Charging Times Using the Desktop Charger
The LED indicator on the phone turns green and the phone beeps when the phone battery is charged. The battery LED indi cat or o n t he de sktop c harge r turn s gr een w hen t h e spa re bat te ry i s c harge d. B at te ries will stop charging af ter the y are fu lly charge d. You can leav e the phone or battery in the charger fo r extended periods of time with no problems.
Table 3-5
Table 3-5 Battery Charging Times and Configurations for the Desktop Charger
Battery Charging Configuration Approximate Charging Times
Spare battery a lone 2 hours Phone with battery 2 hours Phone with battery and spare batt ery 2-3 hours
lists the approximate battery charging times when using the desktop charger.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-14
OL-15985-01
Page 65
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Related Topics
Powering On the Cisco Unif ied Wire le ss IP Phone 79 21G, page 3-16
Installing or Removing the Pho ne Battery, pa ge 3-8
Using the Power Supply to Charge the Phone, page 3-9
Configuring Wireless LAN Settings
Before the phone can connect to the WLAN, you must configure the network profile for the phone with the WLAN settings. You ca n use tw o method s f or setting up the n etwor k profi les:
Cisco Unified Wireless IP Phone 7921G We b Page s, pa ge 3-15
Network Profile Menu on the Ci sco Unified Wireless IP Phone 7921G, page 3-15
Cisco Unified Wireless IP Phone 7921G Web Pages
You can access the Cisco Unified Wireless IP Phone 7921G w eb pages to set up the WL AN settings in the network profile. For a new phone with the factory default settings, you must use the USB cable to connect the phone to your PC. For m or e i nforma ti on a nd instruc ti ons, se e Chap ter 4, “Using the Cisco
Unified Wireless IP Phone 7921G Web Page s.”
Installing the Cisco Unified Wireless IP Phone 7921G
Network Profile Menu on the Cisco Unified Wireless IP Phone 7921G
You can use the SETTINGS me nu on the phon e and acce ss the Networ k Profile s menu to set up the network configurati on and the WL AN config urati on. For more info rmati on and inst ructions, see
Chapter 5, “Configuring Set tings on the Cisco Unified Wireless IP Phone.”
Using a Headset
Although Cisco performs some internal testing of third-party headsets for use with the Cisco Unified IP Phones, Cisco does not ce rti fy o r s uppo rt p rod uct s f rom h eadse t or h andse t ve nd ors. B ecau se of the inherent environme ntal and ha rdware inconsi stencie s in the deploy ment l ocat ions, there is not a single “best” solution that is optimal for all environments. Cisco recommends that customers test the headsets in the areas where the headsets work the best before deploying a large number of units in the network.
Cisco recommends the use of good quality external devices, like headsets that are screened against
nwanted radio frequency (RF) and audio frequency (AF) signals. Depending on the quality of these
u devices and the proximi ty to othe r device s, such as c ell phones, two-way ra dios, el ectric lights, and electric motors, some audio noise or “ hum ” ca n s till occur. Large PC monitors can also cau se h u mm ing or buzzing sounds. See the “ Safe ty Informa tion ” sect ion on page 3-5 for more informati on.
See the “Us information.
Audio Quality Subjective to the User
ing External Devices with Cisco Unified IP Phones” section on page 3-16 for more
Beyond the physical, mechanical and technical performance, the audio portion of a headset must sound good to the user a nd the p arty o n t h e fa r en d. Sou nd is sub ject ive a nd Cisco can not gua rant ee the performance of any headsets or handsets, but some of the headsets and handsets on the sites listed below have been reported to perform well on Cisco Unif ied IP Phones.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
3-15
Page 66
Powering On the Cisco Unified Wireless IP Phone 7921G
It is up to the customer to test the equipment in the company environment to determine suitable performance. For inf orm a tion abo ut hea dset s, refe r to:
http://www.plantronics.com
http://www.jabra.com
Connecting Headsets
To connect a headset to the Cisco Unified Wireless IP Phone 7921G, plug it into the headset port on the right side of th e phone .
You can use the headset with al l of the features on th e Cisco Unified Wireless IP Phone 7921G,
cluding the Volume and Mute buttons. Use these buttons to adjust the ear piece volume and to mute
in the speech path from the headset microphone.
Using External Devices with Cisco Unified IP Phones
The following i nf orma tio n a pplie s w hen yo u u se e xter nal devi ces wi th t he C i sco Unified IP Phone:
Cisco recommends the use of good quality external devices (speakers, microphones, and headsets)
that are shielded ( scre ened ) aga inst unw anted r adio fre quenc y (RF) a nd a udio fr eq uenc y (A F) signals.
Depending on the qual ity of th ese devi ces and t he pro ximity to othe r devi ces such as mobil e phone s
or two-way radios, some audio noise may still occur. In these cases, Cisco recommends that you take one or more of the f ol lowi ng acti ons:
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Move the external de vice awa y from the sour ce of the RF or AF signals.
Route the external devic e cable s away from the source of the RF or AF signal s.
Use shielded cables for the external device, or use cables with a better shield and connector.
Shorten the length of the exte rn al de vice ca ble .
Apply ferrites or other suc h device s on the cable s for the ext ernal device .
Cisco cannot guarant ee the performanc e of the system be cause Cisco has no control over the quality of
xternal devices , ca ble s , an d c on n ecto r s. Th e system will pe rf or m a de quately when suitab le d ev ices are
e attached using good quality cables and connectors.
Caution In European Union countries, use only externa l speake rs, micr ophones, an d head sets that are fully
compliant with the EMC Directive [89/336/EC].
Powering On the Cisco Unified Wireless IP Phone 7921G
After charging the bat ter y and c onfi gur ing th e w irele ss IP phon e, y ou ar e re ady to p ower o n t he phon e and connect to the WLAN. Use the following sections for more information about starting up the phone:
Active and Standby Phone Mod es , p age 3-17
Understanding the Phone Startu p Process, page 3- 18
To power on the Cisco Unified Wireless IP Phone 7921G, press and hold the Power On button until the
ne begins its startup p roce ss by cyc ling th rough the se step s:
pho
1. The phone displays the Cisco Syst ems scree n.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-16
OL-15985-01
Page 67
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
2. The phone screen displays these m essages as the ph one s tarts up:
Locating Network Serv ices
Configuring IP
Network Up
Configuring Unified CMList
Registering
3. The following information displays on the main phone screen:
Current time and date
Primary director y num be r
Main screen icons for four m enus a nd Help
“Your current opti ons” on statu s line
Softkey labels (Messages and Options)
When the phone passes through these stages with no errors, the phone started up properly. Now the
ne is in standby m od e an d is re ad y to p lace or rec eive cal ls.
pho The signal icon in the upper left corner shows the strength of the signal between the wireless access point
d the phone. The phone must have an ade quate signa l to successf ully plac e or rece ive calls . If the
an signal icon displays only one ba r, the weak signal ca n cause pro blems with phone performa nce.
Powering On the Cisco Unified Wireless IP Phone 7921G
If the phone does not com plete these steps successfully, see the
Problems” section on page 10-1.
Related Topics
Active and Standby Phone Mod es , p age 3-17
Understanding the Phone Star tup Proces s, page 3-18
Active and Standby Phone Modes
When the Cisco Unified Wireless IP Phone 7921G is powered on, it ca n b e in one of t hes e two mod es:
Active mode
Standby mode
Active Mode
The phone is in active mode when there is an active RTP stream. When the phone is performing one of these actions, it is consu ming power:
Connected to an active call
Scanning for channels
Sending CDP packets
Resolving Startup and Connectivi ty
Sending keep-alive messages
Reregistering with Cisco Unif ied Communi cation s Manager
The standard battery provides up to 11.5 hou rs of talk time in active mode and the ext ended ba ttery
ovides up to 15.5 ho urs of ta lk ti me.
pr
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
3-17
Page 68
Understanding the Phone Startup Process
Standby Mode
The phone goes into standby mode two seconds after a scan is co mplete. T he p hone will awaken from standby mode in re spo n se to t he se ev en ts :
Pressing keys on the keypad
Roaming between APs
Power cycling the ph one
Losing network connec tivity
Losing RF connectivity
Transmitting scheduled CDP or keep-alive packets.
The standard ba tte ry p rov id es up t o 150 ho urs of sta ndb y tim e an d th e ex tend ed b atter y pro vide s u p to 200
hours of standby time.
Related Topics
Understanding the Phone Startu p Process, page 3- 18
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Resolving Startup and Conn ect ivit y Probl ems , pag e 10- 1
Understanding the Phone Startup Process
When connecting to the wireless VoIP network, the Cisco Unified Wireless IP Phone 7921G goes through a standard sta rtup pr ocess , as de scr ibe d in Table 3-6.
Note Depending on your specific net work co nfigura tion, some of the steps migh t not occur on yo ur unified
IP phone.
Table 3-6 Cisco Unified Wireless IP Phone Startup Process
Step Description Related Topics
1. Powering on the phone The Cisco Unified Wireless IP Phone 7921G has
non-volatile Flash memory in which it stores firmware images and user-defined preferences. At startup, the phone runs a bootstrap loa der that load s a phon e ima ge stor ed in Flash memory. The phone uses this image to initialize its software and hard w are.
2. Scanning for an access point
The Cisco Unified Wireless IP Phone 7921G scans the RF coverage area with it s r a dio. Th e phone se arc hes it s network profiles and scans for ac cess point s that have a matching SSID and authenti cation type . The pho ne associates with the acces s p oi nt with th e hig h est R SSI that matches with its network profile.
Providing Power to the Phone, page 3-7
Resolving Startup and Connectivity Problems, page 10-1
Interacting with Cisco Unified Wireless APs, page 2-9
Resolving Startup and Connectivity Problems, page 10-1
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-18
OL-15985-01
Page 69
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Understanding the Phone Startup Process
Table 3-6 Cisco Unified Wireless IP Phone Startup Process (continued)
Step Description Related Topics
3. Authenticating with acce ss point
The Cisco Unified Wire le ss IP Pho ne 79 21G begi ns the authenticating process.
If set for Open, then any d evice can authen ticate to the
“Authentication Metho ds” section on page 2-14
access point. For added security, static WEP encryption might optionally be used.
If set to Shared Key, the phone encrypts the challenge
text using the WEP key and the access point must verify that the WEP key was used to encrypt the challenge text before network access is available.
If set for LEAP or EAP-FAST, then the user name
and password are authenticated by the RADIUS server before network a cce ss is av ai la ble.
If set for Auto (AKM), the phone look s fo r a n ac c ess
point with one of t he f ol low ing key m a nage ment options enabled:
WPA, WPA2, or CCKM—The username and password are authentic ated by the RADIUS server before network a cce ss is av ai la ble.
WPA-Pre-shared key, WPA2-P re-shared key—The phone authenticates with the access point using the p re-sh ar ed key.
4. Configuring an IP address If the unified IP p hon e i s usin g D HC P t o o btain a n IP
address, the phone queries the DHCP server to obta in on e. If you are not using DHCP in your ne twork, you mus t assign a static IP address to each phone locally.
In addition to assigning an IP address, the DHCP server directs the unified IP phone to a TFTP server. If the phone has a statically defined IP address, you must configure the TFTP server IP a ddr es s loc ally on t he p hon e; th e pho ne then contacts the TFTP server directly.
5. Downloading the load ID The unified IP phone checks to verify that the proper
firmware is installed or if new firmware is available to download.
Cisco Unified Communications Manager informs devices using “.cnf” or “cnf.xml ” format config urati on files of their load ID. Dev ice s u sing “. xm l” forma t c onf igur atio n files receive the load ID in the configuration file.
6. Downloading the configuration file
The TFTP server has configuration files and profile files. A configuration file includes parameters for connecting to Cisco Unified Communications Manager and information about which ima ge l o ad a ph one shou ld be run ning. A profile file contains vari ous paramet ers and val ues for phone and network set tings.
Configuring DHCP
Settings, page 5-6
Disabling DHCP, page 5-6
Resolving Startup and
Connec t iv it y P ro b le m s, page 10-1
Phone Configuration Files
and Profile Files, page 2-1 2
Configuring an Alternate
TFTP Server, page 5-7
Phone Configuration Files
and Profile Files, page 2-1 2
Resolving Startup and
Connec t iv it y P ro b le m s, page 10-1
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
3-19
Page 70
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7921G
Understanding the Phone Startup Process
Table 3-6 Cisco Unified Wireless IP Phone Startup Process (continued)
Step Description Related Topics
nnecting to Cisco
7. Co Unified Communications Ma nage r
8. Registering to Cisco Unified Communic ations Manager
The configuration fi le define s how the Cisc o Unified IP Phone com mu nicates w ith Ci sco Unified Communications Manager. After obtain ing the file from the TFTP server, the phone attempts to make a TCP connection to the highest priority Cisco Unified Communic ations Ma nager on the l ist.
If the phone w as ma nual ly ad ded to the da taba se, Cisc o Unified Communications Manager identifies and registers the phone. If the phone was not ma nuall y adde d to the database and auto-registration is enabled in Cisco Unified Communications Manager, the phone attempts to auto-register itself in the Cisco Unified Communications Manager database.
Interacting with Cisco
Unified Communications Manager, page 2-12
Resolving Startup and
Connectivity Problems, page 10-1
Configuring the Cisco
Unified Wireless IP Phone 7921G in Cisco Unified Communications Ma nage r, page 1-12
Adding Users to Cisco
Unified Communications Manager Administ rati on, page 7-19
Related Topics
Configuring Cisco Unif ied Wire less I P Pho ne s, page 7-1
Phone Configuration Files and Profile Files, page 2-12
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
3-20
OL-15985-01
Page 71
CHA PTER
4
Using the Cisco Unified Wireless IP Phone 7921G Web Pages
This chapter describes how to set up your PC to configure a Cisco Unified Wireless IP Phone 7921G by using a USB connector and how to remotely access a configured phone over the WLAN. It contains the following sections:
Setting Up Your PC to Configure the Phones, page 4-1
Updating Phones Remotely, pa ge 4-4
Configuring Network Profile s, page 4-8
Configuring USB Settings, page 4-28
Configuring Trace Settin gs, page 4-29
Configuring the Phone Bo ok, p ag e 4-31
Configuring Wavelink Aval anche Serve r Settings, pa ge 4- 31
Using System Settings, page 4-36
Setting Up Your PC to Configure the Phones
To setup new phones, use your PC a nd USB c onnectio n to ente r the initial c onfigurati on for the wireless network settings and netwo rk profiles. To save time durin g initial d eployment, you c an create a standard network profile template a nd export it to se veral phones. For m ore information, see the “Backup Settings
for Phone Configuration ” secti on on page 4-37.
Before you can con figu re ph one s by usi ng t he U SB co nnec tion, you m ust in stall d rivers an d set up th e
SB ports on the ph one a nd PC.
U Your PC must have o ne of the follow ing op er ating syste ms:
Windows 2000 Professiona l
Windows XP
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-1
Page 72
Setting Up Your PC to Configure the Phones
Installing the USB Drivers
To install the drivers on your PC, perf orm the follow ing steps:
Procedure
Step 1 Log into Ci sco. co m. Step 2 Download the installation package and “read me” file for the USB drivers from
http://www.cisco.com/cgi-bin/tablebuild.pl/ip-7900ser-crypto. The filename for “read me” inf ormatio n
is USB-Install-792 1.1-0 -0- read me .p df. B ef ore p roc eed ing, r eview thi s fil e fo r specifi c i nstr uct ions for
r PC operating system .
you
Step 3 Double-click the USB-Install-7921.1 -0-1.exe file to start the installation program. Step 4 Follow the prompts in the InstallShield Wizard.
Note If you receive a Hardware Installation warning m essage st atin g that the software has not passed
Microsoft Windows L ogo t est ing, clic k Continue.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Step 5 The driver installation is complete when you see the Finished screen. You can close the wizard. Step 6 Plug the USB cable into the USB port on the PC and into the USB connector on the phone.
The Found New H ardw are W iza rd dia log ope ns.
Step 7 To update the ne w so ft war e, c lick the b utt on next to Yes, this time only and click Next. Step 8 Click the button next to Install the So ftw a re a utoma ti cal ly ( R ecomm en de d).
After 2-3 minutes, t he softw are inst alls and a me ssage app ears on the task b ar stat ing “Fo und New
rdware - Software installed and ready to use.”
Ha
Step 9 Click Finish when the installation is complete.
The phone brief ly d ispl ays “U SB C onnec ted ” on t he st atu s li ne.
Configuring the USB LAN on the PC
To configure the USB LAN connect ion on your PC, fo llow the se steps:
Procedure
Step 1 To setup t he U SB LA N c onn ect ion, do one of th e foll owi ng:
For Windows XP—Click Start > Settings > Control Panel > Network Connections.
For Windows 2000—Click Start > Settings > Control Panel > Network and Connections.
Step 2 Locate and dou ble-cl ick the ne w LAN co nnectio n to open the Local Are a Connect ion Statu s window,
then click Properties.
Step 3 Scroll to the Internet Protocol (TCP/IP) section and click Properties. Step 4 In the Inter net Prot ocol (TCP/I P) Pr opert ies w ind ow, ch oose Use the following IP address:
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-2
OL-15985-01
Page 73
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Step 5 In the IP address field, enter a static IP address for the PC: 192.168.1. ( 1 t hroug h 254 ex cep t 10 0), for
example: 192.168. 1.11
Note By default, the Cisco Unified Wireless IP Phone 7921G is con fi gured w ith 1 92. 16 8.1 .100 so y ou
cannot use thi s I P a ddre ss f or t he PC.
Make sure to use an IP address that is not in use on any other interface on the PC.
Step 6 Enter the subnet mask: 255.255.255.0 Step 7 Click OK to make the changes.
Related Topics
Accessing the Phone Web Page, page 4-3
Setting Configuration Privileges for the Phone Web Page, page 4-4
Accessing th e Configuration Web Page for a Phone, page 4-5
Setting Up Your PC to Configure the Phones
Accessing the Phone Web Page
After setting up the USB interface on the PC, you are ready to use the USB cable connection to the phone.
To access the phone web page, follow these steps:
Procedure
Step 1 Open a Wi ndows br owser . Step 2 In the address field, enter https://192.168.1.100 to locate the wireless IP phone web page.
Note When the Security Alert dialog box displays a notice to accept the Trust Certificate, click Yes
or Always to accept the application.
The Summary web page for the phon e displa ys. See Tabl e 4-1 for details about this web page.
Step 3 Use the hyperl inks in the l eft column of the web page to confi gure setti ngs for th e phones. For
information, see these sections:
Configuring Network Profile s, page 4-8
Configuring USB Settings, page 4-28
Configuring Trace Settin gs, page 4-29
Configuring Wavelink Aval anche Serve r Settings, pa ge 4- 31
Configuring the Phone Bo ok, p ag e 4-31
Using System Settings, page 4-36
Step 4 After entering the new settings, d isconnec t the USB cable f rom the phone. T he settings are active
immediately.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-3
Page 74
Updating Phones Remotely
Step 5 Check that the phone can access the network successfully.
Using the USB Cable to Configure Phones
You are ready to use the USB cable to se t up other phones. Before plugging the USB cable into another phone, wait approximate ly 12-15 secon ds for the USB int erface on the PC to shut down.
To connect to another ph one, follow thes e steps:
Procedure
Step 1 Plug the USB cable into a Cisco Unified Wireless IP Phone 7921G.
The phone brief ly d ispl ays “U SB C onnec ted ” on t he st atu s li ne.
Step 2 Access the we b page for t he ne w p hone by fol lowi ng the st eps in “Accessing the Phone Web Page”
section on page 4-3.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Related Topics
Installing the USB Driv ers, page 4-2
Configuring the USB LAN on the PC, page 4- 2
Using the USB C able to Co nfigu re Phone s, page 4-4
Accessing the Phone Web Page, page 4-3
Updating Phones Remotely
You can update settings on a Ci sco Un ified Wire less IP Pho ne 79 21G tha t is al rea dy conf igur ed and in use. To do so, you can use the wi reless LAN to remotely acces s and config ure these phones.
Use these sections for in format ion about remotel y updating pho nes:
Setting Configuration Privileges for the Phone Web Page, page 4-4
Accessing the Configuration Web Page for a Phone, page 4-5
Setting Configuration Privileges for the Phone Web Page
To make change s to the ph one b y using the we b pag e, y ou mus t use C isco Unifi ed C omm un icat ions Manager Administration to enabl e Web Access and Phone Book Web Acce ss.
To allow configuration privileges, follow these steps:
Procedure
Step 1 Log into Cisc o Unifi ed C omm unic atio ns Ma nage r Admi nistra tion. Step 2 Search for the phone in Cisco Unified Communications Manager Administration by choosing Device >
Phone and ent er s ear ch i nf orm ati on su ch as the D N.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-4
OL-15985-01
Page 75
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Step 3 Click on the DN of the phone that you want to set th e privi leges. Step 4 Open the Phone Con figur at ion wi ndo w, s crol l do wn to Pro duct Spec ifi c Con fi gura tio n La you t, a nd
enable thes e privi lege s:
In the Web Access field, select Full from t he d ro p-d own m enu.
Step 5 Click Save to make the change. Step 6 You must reset the phone to enable conf igurati on privilege s on the web pag es for this phone .
Accessing the Configuration Web Page for a Phone
You can access the web pag e for any C isco Unified Wireless IP Phone 7921G t ha t i s co nnect ed t o th e WLAN. Be sure th e pho ne i s powe red o n an d co nne cte d.
To access the web page for the Cisco Unified Wireless IP Phone 7 921G follow these steps:
Procedure
Updating Phones Remotely
Step 1 Obtain the IP address of the Cisco Unified Wireless IP Phone 7921G by using one of the se method s:
Search for the phone in Cisco Unified Communications Manager Administration by choosing
Device > Phone > DN.
Or
Click Find to displa y al l o f th e phone s and t he I P a ddresse s that ar e regi stere d wi th
Cisco Unified Communicat ions M anag er A dmi nist ratio n. When yo u sel ect your p hon e, t he P h one
figuration window displays. The IP address of the phone is linked to the web configuration page.
Con Or
You can open a web b rowse r, ent er t he fol low ing UR L:
https://<I The IP
P_address>/index.html
_address variable is the phone IP address that is hypertext linked in Cisco Unified
Communications Manager Admini stration.
Note When the Security Alert dialog box displays a notice to accept the Trust Certificate, click Yes
or Always to accept the application.
Step 2 Click on the phone IP address. The phone HOME web page displays. From this page, you can configure
network profiles, USB settings, trace settings, Wavelink settings, and certificates. Table 4-1 lists the available config urati on items .
Step 3 Log into the web page with the username: admin and password: Cisco. The HOME web page has a menu
on the right-hand si de of the windo w with the fol lowi ng subme nus:
SETUP
NETWORK PROFILES
USB SETTINGS
TRACE SETTI NGS
WAVELINK SETTINGS
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-5
Page 76
Updating Phones Remotely
CONFIGURATIONS
INFORMATION
STATISTICS
STREAM STATISTICS
SYSTEM
CERTIFICATES
PHONEBOOK
NETWORK
WIRELESS LAN
DEVICE
WIRELESS LAN
NETWORK
STREAM 1
STREAM 2
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
TRACE LOGS
BACKUP SETTINGS
PHONE UPGRADE
CHANGE PASSWORD
SITE SURVERY
DATE AND TIME
PHONE RESTART
Step 4 Make chan ges to web pa ges a s neede d. Fo r infor mat ion, see the fol lowi ng secti ons:
Configuring Network Profile s, page 4-8
Configuring USB Settings, page 4-28
Configuring Trace Settin gs, page 4-29
Configuring Wavelink Aval anche Serve r Settings, pa ge 4- 31
Configuring the Phone Bo ok, p ag e 4-31
Using System Settings, page 4-36
Step 5 Return to the Phone Configuration page in Cisco Unified Communications Manager Administration and
set the Web Access field back to Read Only or Disabled.
Step 6 Reset the phone from Cisco U ni fied Communications Manager Administration to disable full access to
the web pages. Be sure to chan ge t he W eb Ac cess p rivi le ges a nd re se t the ph one to pr e vent user s fr om mak ing
nfiguration change s on the phone w eb pages.
co
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-6
OL-15985-01
Page 77
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Note If a wireless IP phone was previously registered to Cisco Unified CallManager Administration Release
4.x, and you try t o re gist er t o Ci sco Unifi ed C omm un icatio ns M ana ger A dm inist rat ion 5 .x or l ater, the Phone Configuration web page pa ssword mi ght be set to “Cisco. ”
HOME: Summary Web Page
The HOME: Summary we b pag e d ispl ay s devi ce se ttin gs a nd r elat ed in for mat ion f or the ph one. At t he top of the web p age, t he SEP num ber an d Ph one D N d ispl ay. Tabl e 4-1 describes the items available from the HOME: Summ ar y se ct ion o f the web p age.
Table 4-1 HOME: Summary Web Page
Item Description
Home: Summary
Active Network Profile Name of the profile that the phone is curren tly using. SSID SSID that the phone is currently usin g. Access Point Name of the access point (AP) to which the phone is associated. MAC Address MAC a dd ress o f th e phone .
Network Information
IP Address IP address of the phon e. Subnet Mask Subnet mask used by the phone. Default Router IP address for th e defaul t gateway t hat the phon e is usin g. TFTP Server IP address for the Primary TFTP server that the phone is using.
Call Manager Information
Active Call Manager IP address for the Cisco Unified Communications Manager
Phone Directory Num ber Prim ar y DN for t he pho ne.
Updating Phones Remotely
server to which the phone is registered.
Related Topics
Accessing the Phone Web Page, page 4-3
Configuring Network Profile s, page 4-8
Configuring USB Settings, page 4-28
Configuring Trace Settin gs, page 4-29
Configuring the Phone Bo ok, p ag e 4-31
Using System Settings, page 4-36
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-7
Page 78
Configuring Network Profiles
Configuring Network Profiles
You can config ure u p to four pr of iles f or a ph one to t ake a dvant age of W LAN e nv ironm e nts. Y ou can add names to the profiles and enable on e or more of th e profil es for the pho ne to use. Th e Networ k Profiles section on the web page displa ys the follo wing infor mation abo ut each phone :
Profile—Displays a list of four pro files.
Name—Lists the name for the profile.
SSID—Lists the SSID used by the profile.
Status—Indicates which profiles are active or inactive.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
To display the Network Profiles list, access the web page for the phone as described in the
the Configuration Web Page for a Phone” section on page 4-5 , and then click N
For more informatio n abo ut con figur ing net work pr ofile s, see th ese sec tions:
Network Profile Settings, page 4-8
Using Network Profil e T empl ates, page 4-37
Configuring Wireles s Set tings i n a N etwor k Profi le, pa ge 4-13
Configuring Wireless LAN Sec urity, pa ge 4-14
Configuring IP Network Settings, page 4-25
Configuring the Alternate TFTP Server, page 4-26
Configuring Advanced Network Pro file Setti ngs, pag e 4-27
Network Profile Settings
You can configure the settings for a profile by using this web page. You can also modify or view configured pro fil es by cl ickin g o n t h e pro file. Table 4-2 describes the settings and provides references for more informa ti on.
Table 4-2 Network Profile Settings Items
Item Description For More Information, See...
Wireless
Profile Name Provides a name f or the pro file to make it e asy
SSID Assigns the Service Set Identifier (SSID) to
Call Power Save Mode Automatically detects the type of power saving
to identify ; up to 63 alph anum eric char acter s.
this profile. You must assign the same SSID to the phone that is also assigned to access p oints in the wireless network.
mode that ac tive a nd i dle ph ones r e quire . T he phone can use U-APSD or PS-Poll when it is idle. When the phone is in an active call, the power save mode is controlled by Call Power Save Mode.
Accessing
ETWORK PROFILES .
Configuring Wireless Settings in a Network Profile, page 4-13
Associati ng to an AP , page 2-10
802.11 Standards for WLAN Communications, page 2 -3
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-8
OL-15985-01
Page 79
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Table 4-2 Network Profile Settings Items (continued)
Item Description For More Information, See...
802.11 Mode Determines the signa l mode or prio rity for selecting signal modes available in the WLAN. Options are:
802.11 b/g—Use onl y 2.4 G Hz band
802.11a—Use onl y 5 GH z ba nd
Auto, 802.11b/g prefe rred ove r 802.11a
(dual band)
Auto, 802.11a prefer red over 802 .11b/ g
(dual band)
Note The preferred band, if available, will
be used at power-on, but the phon e may switch to the less preferred 2.4 GHz band, if available, and the preferred band is lost . Onc e t he p hon e has connected to t he l ess pr efe rred band, it will not scan for the preferred band if the current band is acceptable, and may remain connected to the less preferred band.
Configuring Network Profiles
802.11 Standards for WLAN Communications, page 2 -3
Auto, signal streng th (R SSI)— Use
strongest signal in dual b an d env iron me nt
Scan Mode Auto—Always scans when on a call. If idle
and signal strength is suffic ient , the phone does not scan.
Continuous—Always scans. Single AP—Only scans at pow er on or if the
AP connection to the network is lost.
Restricted Data Rates Enables or disables the restriction of the
upstream and downstream PHY rates according to Cisco CX (C CX) V4 T raffic Stream Rate Set IE (S54.2.6 ). The default is disabled.
Note It is recommended that the end point
and the AP be c onf igure d at TSp ec 1 2 because a lower rate may cause network congestion.
Associating to an AP, page 2-10
Product-Specific Configuration Opt ions fo r the Cisco Unified Wireless IP Phone 7921G, pag e 7- 13
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-9
Page 80
Configuring Network Profiles
Table 4-2 Network Profile Settings Items (continued)
Item Description For More Information, See...
WLAN Security
Security Mode Sets the authentication and encryption
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
methods for this profil e:
Open—Open access to APs
Open+WEP—O pen ac cess w ith WE P
encryption (require s an encr yption key)
Shared Ke y+W E P—S h ar ed k ey
authentication with WEP (requires an encryption key)
LEAP—Cisco proprietary authentication
and encryption using a RADIUS ser ver (requires a user na me a nd passw ord )
EAP-FAST—Authentication and
encryption using TLS and RADIUS server (requires a user na me a nd passw ord )
Configuring Wireless LAN Security, page 4-14
Configuring the Authentic a t io n M o d e , page 4-15
EAP-TLS—Uses Public Key Certificates
(PKI) to secure communication to the RADIUS authentication server. A dynamic session-based key is de rived from the Cisco Unified Wireless IP Phone 7921G and RADIUS server to encrypt data using a client certificate for authentication.
PEAP—This method uses name and
password authentica tion based on Microsoft MSCHAP V2 authentication.
PEAP with Server Certificate
Authentication—The Cisco Unified IP Phone can validate the server certificate during the aut hen tica tio n han dsha ke ove r an 802.11 wireless link. T his functionality is disabled by default and is enabled in Cisco Unified CallManager Administration.
Auto (AKM)—Automatic authenticated
key management using:
WPA, WPA2 (requires a username and password)
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-10
WPA-Pre-sh ar ed k ey , WPA2-Pre-shared key (requir es a passphrase/pre- share d k ey)
CCKM (requires a username and password)
OL-15985-01
Page 81
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Table 4-2 Network Profile Settings Items (continued)
Item Description For More Information, See...
Export Security Credentials
Controls whether the wire less secur ity credential data can be exported in the configuration file.
True—Allows exporting the data
False—Blocks exporting the data Note When using templates, the security
credentials m us t b e re -ent er ed f or security reasons after exporting the configuration.
Wireless Security Credentials
Required for LEAP, EAP-FAST, and Auto (AKM) authentication methods
Username Assig ns the netwo rk authent ication use rname
for this profile
Password Assigns the network authentica tion pas sword
for this profile
WPA Pre-shared Key Credentials
Sets the Pre-shared key for this profile
Pre-shared Key Type Determines the key type: Hex or ASCII Conf iguring th e Pre-shar ed Pre-shared Key Identifies the key
Wireless Encryption
Required for Open+WEP and Shared+WEP authentication methods
Key Type Determine s the en cryption key type: Hex or
ASCII
Encryption Key 1-4 Identifies the Transmit Key:
Configuring Network Profiles
Backup Settings for Phone Configuration, page 4-37
Configuring the Userna me and Password, page 4 -16
Key, page 4-16
Setting Wireless Encryption, page 4-18
Certificate Options
Client EAP-TLS Certificate
Validate Server Certificate
Encryption Key character string
Key Size of 40 or 128 characters
Required for EAP-TLS authentication mode. Determines the certificate used for
authentication:
Manufacturing issued
User installed
Enables the phon e t o use the se rver cer tificat e. Two options: True or False .
Installing Auth en tic a ti on Certificates for EA P-T LS Authentication, pa ge 4-19
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-11
Page 82
Configuring Network Profiles
Table 4-2 Network Profile Settings Items (continued)
Item Description For More Information, See...
IP Network Configuration
Obtain IP address and DNS servers automatically
Use the following IP address and DNS servers
TFTP
Obtain TFTP servers automatically
Use the following TFTP servers
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Enables DHCP Configuring IP Network
Settings, page 4-25
Disables DHCP and uses these static settings:
IP Address
Subnet Mask
Default Router
Primary DNS
Secondary DNS
Domain Name
Determines whether DHCP assigns the TFTP server
Configuring the Altern ate TFTP Server, page 4-26
Assigns static TFTP server IP addres ses for:
TFTP Server 1
TFTP Server 2
Network Profile Advanced Settings
TSPEC Settings
Minimum PHY Rate Minimum data rate that outbound traf fic uses
Note Cisco APs support only PHY rates of
6, 11, 12, or 2 4.
Surplus Bandwidth Excess bandwidth beyond application
requirements
Antenna Settings
Antenna Selection for
802.11A
Antenna Selection for
802.11G
802.11G Power Settings
Vertical
Horizontal
Diversity
Vertical
Horizontal
Diversity
Channel Enabled Identifies enabled channels in WLAN to
improve scanning for the ph one
Max Tx Power Sets the maximum transmit power for the
phone
Check All/Clear All/Check Non-overlap
Three buttons that check all channels and Tx power levers, o r cle ar a ll. The n on- overl ap button disables over lap.
Configuring Advanced Network Profile Settings, page 4-27
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-12
OL-15985-01
Page 83
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Table 4-2 Network Profile Settings Items (continued)
Item Description For More Information, See...
802.11A Power Settings
Channel Enabled Identifies enabled channels in WLAN to
improve scanning f or t he ph one
Max Tx Power Sets the maximum transmit power for the
phone
Check All/Clear All/Check Non-DFS
Three buttons that check all channels and Tx power levers, or cle ar a ll. The n on- overl ap button disables DFS.
Note If you uncheck all channels in the 802.11 G Power Set tings or 802.1 1 A Power Setti ngs, the phone
cannot access the WLAN.
Related Topics
Accessing the Phone Web Page, page 4-3
Configuring Network Profiles
Configuring Wireles s Set tings i n a N etwor k Profi le, pa ge 4-13
Configuring Wireless LAN Sec urity, pa ge 4-14
Setting the Wireless Security Credentials, page 4-15
Setting Wireless Encryption, page 4-18
Configuring Wireless Settings in a Network Profile
You must configure wireless sett ings in a profile to enable the phon e to access the w ireless networ k. To configure the wireless settings, refer to Ta
Procedure
Step 1 Choose a n etwor k p rof ile that you wa nt to co nfi gure . Step 2 Enter a recognizable name up to 63 characters and numbers in length in the Profile Name field. Step 3 Enter the SSID that is already confi gured in the WLAN. This is the SSID that the phone uses to associate
with access points.
Note The SSID is case sensitive; you must enter it exactly as configured in the network.
ble 4-2 and follow these steps:
Step 4 Choose the sca nnin g f reque ncy of the p hon e in t he Singl e Acc ess Po int fiel d as Tr ue (less frequent
scanning) or False (more freq ue nt sc anni ng ).
Step 5 Set the Call Power Save Mode to U-APSD or PS-Poll to conserve battery power. Step 6 Choose the signal mode or priority of signal modes in the 802.11 Mode field that is used by your WLAN,
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-13
Page 84
Configuring Network Profiles
Configuring Wireless LAN Security
The Cisco Unified Wireless IP Phone 7921G supports many types of au thenti cation. Authe nticat ion methods might req uire a speci fic e ncry pt ion met hod or y ou can c hoos e be twe en se vera l e ncry pti on methods. When co nfig uri ng a n etw ork p rof il e, yo u can ch oose o ne of th ese a uthe nti cat ion m etho ds:
Open—Provides access t o a ll ac cess po ints w it hout WEP K ey a uthent icat ion /encry pti on.
Open plus WEP—Provides access to all acce ss points an d au then tica tio n thro ugh the use of one or
more WEP Keys at the local access point.
Shared Key plus WEP—Provides share d key authen ticatio n through th e use of WEP Keys at the
local access point.
LEAP— Exchanges a u serna me and cr ypt ogra phic all y sec ure passwo rd with a RA DIU S se rver fo r
authentication in t he n etw ork. L EAP i s a Cisco p rop rie tar y v ersi on of EA P.
EAP-FAST—Exchang es a u ser name and pa ssw ord an d with a RAD IUS serv er f or auth enti cation in
the network.
EAP-TLS—Uses a dynami c session-bas ed WEP key derived from the client adap ter and RAD IUS
server to encrypt d ata and a client cert ificate for authentication. It uses PKI to secu re communicat ion to the RADIUS authentication server.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
PEAP (EAP-MSCHAP V2)—Performs mutual authentication, but does not require a client
certificate on the ph one. Th is metho d uses name and passwo rd aut hentic ation bas ed on Micr osoft MSCHAP V2 authentication.
PEAP with S erver Certificate Authentication—The Cisco Unified IP Phone can validate the server
certificate during th e authe nticat ion handsh ake over an 802.11 wir eless link . This func tiona lity is disabled by default and is enabled in Cisco Unified CallManage r Administ ration.
Auto (AKM)—Automa tic au thentic ated key manage ment in whic h the pho ne selects th e AP and
type of key managem ent sc heme , which incl udes WPA, WPA2, WPA- Pre-sha red key, WPA2-Pre-shared ke y, or C CK M (w hic h uses a wi rel ess do ma in se rv er ( WD S)) .
Note When set to AKM mode, the phone uses LEAP for 802.1x type authentication methods (non-Pre-shared
key such as WPA, WPA2, or CCKM ). A KM m ode suppor t s only au then t icat ed ke y-m anag emen t ty pes (WPA, WPA2, WPA-PSK, WPA2-PSK, CCKM).
The type of authentic ation and encryption schemes that you are using with your WLAN determine how you set up the authentication, security, and encryption options in the network profiles for the Cisco Unified Wireless IP Phones. Table 4-3 provides a li st of support ed authent icati on and en cryption schemes that you can config ure on th e Cisco Unified Wireless IP Phone 7921G.
Table 4-3 Authentication and Encryption Configuration Options
Authentication Mode Wireless Encryption Wireless Security Credentials
Open None None—acce ss to all APs Open plus WEP Static WEP
None—access to all APs
Shared Key plus WEP Static WEP
LEAP (with optional CCKM) Uses WEP Requires Username and Password
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-14
Requires WEP Key
Uses shared -key wit h AP
Requires WEP Key
OL-15985-01
Page 85
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Table 4-3 Authentication and Encryption Configuration Options (continued)
Authentication Mode Wireless Encryption Wireless Security Credentials
EAP-FAST (with optional CCKM) Uses WE P or TKIP Requires Username and Password EAP
-TLS Uses WEP, TKIP, or AES Requires Username and Password
PEAP Uses WEP, TKIP, or AES Requires Username and Pa ssword
Auto (AKM) with CCKM Uses TKIP or AES Requires Username and Password Auto (AKM) with WPA (with
optional CCKM) Auto (AKM) with WPA2 (with
optional CCKM) Auto (AKM) with WPA Pre -Shared
Key Auto (AKM) with WPA2
Pre-Shared Key
Configuring Network Profiles
Requires server and client certificates.
Requires server side certificate.
Uses TKIP Requir es U ser na me and P a ssw ord
Uses AES Requires Username and Password
Uses TKIP Requ ir es Pa ss phras e
Uses AES Re qu ir es P as sphr ase
Note Beginning with Cisco Wireless IP Phone 7921G firmware release 1.1, CCKM is operational with the
WPA authentication mode using AES encryption.
Configuring the Authentication Mode
To select the Authentication Mode for this profile, follow these steps:
Procedure
Step 1 Choose the n etw ork pro fil e t hat you wa nt t o c onf igure . Step 2 Choose the authentication mode.
Note Depending on what you selected, you must configure additional options in Wireless Security or
Wireless Encryption. See Table 4-3 for more informa tion.
Step 3 Click Save to make the change.
Setting the Wireless Security Credentials
When your network uses EAP-FAST, LEAP, EAP-TLS, PEAP, or Auto (AKM) with WPA, WPA2, CCKM for user au then t icat ion, yo u m ust co nfigu re b oth t he use rnam e an d a pa ssword on the Ac ce ss Control Server ( ACS) an d th e pho ne.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-15
Page 86
Configuring Network Profiles
Note If you use doma ins wi thi n your ne two rk, y ou must en t er the u ser name w ith th e doma in n am e, i n t his
format: domain\username.
For information about setting security credentials, see these topics:
Configuring the Username an d Password, pa ge 4-16
Configuring the Pre- share d Ke y, pa ge 4-16
Setting Wireless Encryption, page 4-18
Configuring the Username and Password
To enter or change the usern ame or passwo rd for t he netw or k profi le, you must use the same use rnam e and the same password string tha t is configur ed in the RAD IUS serve r. The maxim um length of t he username or password entry is 32 char acters.
To set up the username and password in Wireless Security Credentials, follow these steps:
Procedure
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Step 1 Choose the network profile. Step 2 In the Username field, enter the network username for this profile. Step 3 In the Passwor d f ield, ent er the ne two rk pa sswor d str ing for this pro fil e. Step 4 Click Save to make the change.
Configuring the Pre-shared Key
When using Auto (AKM) with WPA Pre-shared key or WPA2 with Pre-shared key for authentication, you must configure a Passphrase/Pre-shared key in the Wireless Security Credentials area.
Pre-shared Key Formats
The Cisco Unified Wireless IP Phone 7921G supports ASCII and hexa decim al formats. Yo u must use one of these formats when setting up a WPA Pre-shared key:
Hexadecimal
For hexadecimal keys, you must enter 64 hex di gits (0-9 and /or A-F); for example, AB123456789CD012345 6789 0EFAB123 4567 89CD0 123456 789 0EF3456 789 C
ASCII
For ASCII keys, you must e nter a cha ra cter st rin g tha t us es 0 -9, A -Z (upp er an d low er ca se), incl ud ing symbols and is from 8 to 63 charac ters in leng th; for ex ample , GREG12 356789 ZXYW
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-16
OL-15985-01
Page 87
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
To set up a Pre-shared key in the Wireless Credentials area, follow these steps:
Procedure
Step 1 Choose the network profile that uses Auto (AKM) to enable the WPA Pre-shared key or WPA2
Pre-shared ke y.
Step 2 In the Key Type area, choose one of these character formats:
Hex
ASCII
Step 3 Enter an AS CI I st ring or He x di git s in t he Pa ssphr ase/ Pre-sh ar ed k ey fie ld . See “Pre-shared Key
Formats” section on page 4-16.
Step 4 Click Save to make the change.
Configuring Network Profiles
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-17
Page 88
Configuring Network Profiles
Setting Wireless Encryption
If your wireless network uses WEP encrypt ion, and you have set the Authen tication Mode as Ope n + WEP or Shared Ke y + W EP, y ou mus t en t er an ASC II or hexa dec imal WEP K ey.
The WEP Keys for the p hon e mus t ma tch the W EP Key s a ssigne d t o th e acc ess poin t. C is co Unified
reless IP Phone 7921G and Cisco A irone t Ac cess Poi nts su ppo rt b oth 40- bit a nd 128-bi t en crypt ion
Wi
ys.
ke
WEP Key Formats
You must use one of these formats when setting up a WEP key:
Hexadecimal
For hexadecimal ke ys, yo u c an use one of the f ollow ing key s ize s:
40-bit—You must ent er a 1 0-d igi t en cr yption k ey string t hat u ses the hex di gits (0- 9 a nd /or A-F);
or example, ABCD123 456 .
128-bit—You must enter a 26-digit encryption key string that uses the hex digits (0-9 and/ or A-F);
or example, AB123456 789 CD012 345 6789 0EF.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
ASCII
For ASCII keys, you mu st e nte r a ch ar ac ter str ing t h at uses 0-9, A -Z ( upp er and l owe r ca se ), and al l symbols.
40-bit—You must enter a 5-character string; for example, GREG5.
128-bit—You must ent er a 13-ch ar act er st rin g; f or ex ampl e, GR EGSSE CRET13 .
Entering Wireless Encryption Keys
To set up WEP keys, follow these step s:
Procedure
Step 1 Choose the network profile that uses Open+WEP or Shared+WEP. Step 2 In the Key Type area, choose one of these character formats:
Hex
ASCII
Step 3 For Encryption Key 1, clic k Transmit Key. Step 4 In the Key Size area, choose one of these character string lengths:
40
128
Step 5 In the Encryption Key field, enter the appropriate key string based on the selected Key Type and Key
Size. See the “WEP Key Formats” section on page 4-18.
Step 6 Click Save to make the change.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-18
OL-15985-01
Page 89
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Related Topics
Configuring IP Network Settings, page 4-25
Configuring the Alternate TFTP Server, page 4-26
Configuring Advanced Net work Profil e Settings , page 4- 27
Installing Authentication Certificates for EAP-TLS Authentication
EAP-TLS is a certificate based authentication that requires a trust relationship between two or more entities. Each entity has a certificate proving its identity and is signed by a trusted authority. These certificates are exchanged and verified during EAP-TLS authentication.
Note The EAP-TLS certificate based authentication requires that the internal clock on the Cisco Unified
Wireless IP Phone 7921G be set correctly. Use the phone web page to set the clock on the phone before using EAP-TLS authentication.
To use EAP-TLS, both the Cisco Unified Wireless IP Phone 7921G and the Cisco Secure Access Control Server (ACS) must ha ve ce rtifi cat es i nsta lled and c onfig ured pr operl y. I f your w ir ele ss netw or k us es EAP-TLS for authenticatio n, you can use the Manufacturing Installed Certificate (MIC) or a user installed certificate for authentication on the phone.
Configuring Network Profiles
Manufacturing Installed Certificate
Cisco has included a Manu facturi ng Instal led Certifi cate (M IC) in the phone at the fa ctory. During EAP-TLS au th entic a tion t he AC S serve r nee ds to ve rif y th e trust of t he ph one and t he phon e
eds to verify the trust of the ACS ser ver.
ne To verify the MIC, the Manufacturing Root Certificate and Manufacturing Certificate Authority (CA)
tificate must be exported from a Cisco Unified Wirel ess IP Phone 7921G and installe d on the Cisco
Cer
S server. These two ce rtificates are pa rt of the trusted cer tif ica t e ch ain u sed to v er ify the MIC by the
AC Cisco ACS server.
To verify the Cisco ACS ce rtificate, a trus ted subor dinate certi ficate (if any) and root certifica te (created
om a CA) on the Cisco ACS server must be export ed and installe d on the phone. Th ese cert ificate (s)
fr are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
User Installed Certificate
To use a user installed certificate, a Certificate Signing Request (CSR) must be generated on the phone, sent to the CA for approval, and the a pproved ce rtificat e install ed on the Cisco Unified Wireless IP
e 7921G.
Phon During EAP-TLS authentic ation, the ACS server nee ds to verify the trust of the pho ne and the phone
eds to verify the trust of the ACS ser ver.
ne To verify the authenticity of the user installed certificate, a trusted subordinate certificate (if any) and
oot certificate f rom the CA that approve d the u ser cert ificate must be instal led on t he Cisco ACS se rver.
r These certificate(s) are part of the trusted certificate chain used to verify the trust of the user installed certificate.
To verify the Cisco ACS ce rtificate, a trus ted subor dinate certi ficate (if any) and root certifica te (created
om a CA) on the Cisco ACS server must be export ed and installe d on the phone. Th ese cert ificate (s)
fr are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-19
Page 90
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Configuring Network Profiles
To install authentication certificates for EAP-TLS, perform the tasks listed in Table 4-4:
Table 4-4 Installing the Certificate for EAP-TLS
Task From For more information, see...
1. Set the Cisco Unified
Communications Manager date and
Cisco Unified Wireless IP Phone 7921G web page
Setting the Date and Time, page 4-20
time on the phone.
2. If using the Manufactu ring Installed
Certificate (M IC):
Cisco Unified Wireless IP Phone
7921G web page
Exporting and Inst alling the Cert ificates on the ACS, page 4-21
a. Export the CA root certificate
and manufacturing CA certificate.
b. Install certificates on the
Internet Explore r
Microsoft Certificate Services
Exporting the CA Certificate from the ACS Using Microsoft Certificate Services, page 4-21
Cisco ACS server and edit the trust list.
c. Export the CA certificate from
the ACS server and import it to the phone.
3. If using a user installed certificate: a. Generate the Certificate
Cisco Unified Wireless IP Phone 7921G web page
Requesting and Importing the User Installed Certific ate, page 4-22
Signing Request (CSR).
b. Send the CSR to CA to sign. c. Import the certificate. d. Install certificate on the Cisco
ACS server and edit the trust list.
e. Download the CA certificate
from the ACS server and import it into the 7921G.
4. Set up the user account. ACS configuration tool Configuring the ACS Server Setup,
page 4-23
User Guide for Cisco Secure ACS for Windows
Setting the Date and Time
EAP-TLS uses certificate based authentication that requires the internal clock on the Cisco Unified Wireless IP Phone 7921G to be set correc tly. The da te and time on the phone might chan ge whe n it is registered to Cisco Unified Communications Manager.
Note If a new server authentication certificate is being requested and the local time is behind the Greenwich
Mean Time (GMT), the authentication certificate validation might fail. It is recommended that you set the local date and time ahead of the GMT.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-20
OL-15985-01
Page 91
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
To set the phone to the correct local date and time, follow these steps:
Procedure
Step 1 Select Date & Time from the left navigation pa ne. Step 2 If the setting in the Current Phone Date & Time field is different from the Local Date & Time field, click
Set Phone to Local Date & Time.
Step 3 Click Phone Restart, then click OK.
Exporting and Installing the Certificates on the ACS
To use the MIC, the Manufacturing Root Certificate and Manufacturing CA Certificate must be exported and installed onto the Cisco ACS se rver.
To export the manufacturi ng root cer tificate an d manufacturing CA c ertifica te to the ACS serv er, follo w
hese steps:
t
Configuring Network Profiles
Procedure
Step 1 From the phone web page, choose Certificates. Click Export next to the Manufacturing Root Certificate. Step 2 Save the certificate and copy it to the ACS server. Step 3 Repeat Steps 1 and 2 for the Manufacturing CA certificate. Step 4 From the ACS Server System Configuration page, enter the file path for each certificate and install the
certificates.
Note For more information about using the ACS configuration tool, see the ACS online help or the
User Guide for Cisco Secure ACS for Windows.
Step 5 Use the Edit the Certificate Trust List (CTL) page to add the certificates to be trusted by ACS.
Exporting Certificates from the ACS
Depending on the type of certif icate you export fro m the ACS, use one of the foll owing met hods:
To export the CA certificate from the ACS server that signed the user installed certificate or ACS
certificate, see Exporting the CA Certif icate fr om the ACS Usin g Microso ft Certif icate Ser vices,
page 4-21.
To export the CA certificate from the ACS server that uses a self-signed certificate, see Exporting
Certificates from the ACS Server Using Internet Explorer, page 4-22.
Exporting the CA Certificate from the ACS Using Microsoft Certificate Services
Use this method for exporting the CA certificate from the ACS server that signed the user installed certificate or ACS certificate.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-21
Page 92
Configuring Network Profiles
To export the CA certificate using the Microsoft Certificate Services web page, follow these steps:
Procedure
Step 1 From the Microsoft Certificate Services web page, select Download a CA certificate, certificate chain
or CRL.
Step 2 At the next pa ge, hi ghligh t the cur ren t CA ce rti fica te in t he t ext box , c ho ose D E R unde r En codi ng
Method, then click Download CA certificate.
Step 3 Save the CA certificate.
Exporting Certificates from the ACS Server Using Internet Explorer
Use this method for exporting the CA certificate from the ACS server that uses a self-signed certificate. To export certificates from the ACS server using Internet Explorer, follow these steps:
Procedure
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Step 1 From Internet Explorer, choose Tools > Internet Options, then click the Content tab. Step 2 Under Certificates, click Certificates..., then click the Trusted Root Certification Authorities tab.
Step 3 Highlight the root certificate and click Export.... The Certificate Export Wizard appears. Click Next.
Step 4 At the next window, select DER encoded binary X.509 (.CER), and click Next. Step 5 Specify a name for the certificate and click Next. Step 6 Save the CA certificate to be installed on the phone.
Requesting and Importing the User Installed Certificate
To request an d inst all th e cert ific ate on the pho ne, fol low thes e step s:
Procedure
Step 1 From the phone web page, choose the network profile using EAP-TLS, and select User Installed in the
EAP-TLS Certificate field.
Step 2 Click Certificates. On the User Cer tificate I nstalla tion page, th e Common Name f ield should match the
user name in the ACS server.
Note You can edit the Common Nam e fi eld if yo u wi sh. M ake su re t hat it m atc hes t h e use r name in
the ACS server. See “Configuring the ACS Serv er Set up” sec tion o n p age 4-23.
Enter the information to be displayed on the certificate, and click Submit Signing Request (CSR).
Step 3 In the next screen, select and copy the entire contents of the text box. Send this data to the CA
administrator f or si gning . The CSR text is encoded and shou ld be sent to the Ce rtific ate Auth ority for signing. The CSR text can
sent by e-mail or another method determined by your CA administrator. The following steps describe
be the basic CSR approval proce ss on the CA web p age.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-22
to generate the Certificate
OL-15985-01
Page 93
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Step 4 From the Microsoft Certificate Se rvices Request a Certifica te page, select A dvanced certif icate request
to initiate the signing request.
Step 5 At the Advanced Certificate Request page, select Submit a certificate request by using a
base-64-encoded PKCS CMC.
Step 6 Copy the certificate data from the Cisco Unified Wireless IP Phone 7921G and paste it in the Saved
Request text box, the n clic k Submit.
Step 7 Once the CSR is approved, the certificate must be exported in a DER encoded format and sent to the
original requestor.
Step 8 Return to the ph one web pag e and choose Certificates to import the signed certificate. Step 9 On the Certificates page, locate the User Installed certificate line, and click Import. Browse to the
certificate on your PC to import to the phone.
Installing the Authentication Server Root Certificate
The Authentication Server Root Certificate must be installed on the Cisco Unified Wireless IP Phone 7921G.
Configuring Network Profiles
To install the certificate, follow these steps:
Step 1 Export the Authentication Server Root Certificate from the ACS. See Exporting Cer tifica tes from the
ACS, page 4-21.
Step 2 Go to the phon e web pa ge a nd c hoose Certificates. Step 3 Click Import next to the Authentication Server Root certificate. Step 4 Restart the phone.
Configuring the ACS Server Setup
To set up the user account name and install the MIC root certificate for the phone on the ACS, follow these steps :
Note For more information about using the ACS config uration tool, see the ACS online help or the User Guide
for Cisco Secure ACS for Windows .
Procedure
Step 1 From the ACS configuration tool User Setup page, create a phone user account name if it is not already
set up. Typically, the use r name incl udes the phone MAC ad dress at th e end , for exa mple, CP-7921G-SEP<xxxxxxxxxxxx>. No password is necessary fo r EAP-T LS.
Note Make sure the user name matches the Common Name field in the User Certificate Installation
page. See “Requesting and Import ing the Us er Install ed Cert ificate ” sect ion on page 4-22.
Step 2 On the Syst em Conf igur ation pa ge, in th e EAP-T LS section , en able these fields :
Allow EAP-TL S
Certificate CN comparison.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-23
Page 94
Configuring Network Profiles
Step 3 On the ACS Certification Authority Setup page, add the Manufacturing Root Certificate and
Step 4 Enable both the Manufac turing Root Certif icat e and Manu factur ing CA Certi ficate in the ACS
Configuring PEAP
Note The authentication server validation can be enabled by importing the authentication server certificate.
Before You Begin
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Manufacturi ng CA Cer tifi cate t o the A CS serv er.
Certificate Trust List.
Protected Extensible Authentication Protocol (PEAP) uses server-side public key certificates to authenticate clients by creating an encrypted SSL/TLS tunnel between the client and the authentication server.
Before you configure PEAP au thent icatio n for the phon e, make sur e these Cisco Secure ACS requirements are met:
The ACS root certificate must be installed
Enable the Allow EAP-MSCHAPv2 setting
User account and passw ord must be conf igur ed
For password authenti cat ion , you c an us e th e l ocal AC S dat aba se or a n ext erna l o ne (s uch a s
Windows or LDAP)
Enabling PEAP Authentication
To enable PEAP authent icatio n on the phone , follow t hese step s:
Procedure
Step 1 From the phone configuration web page, choose PEAP as the authentication mode. See Configuring the
Authentication Mo de, page 4-15 .
Step 2 Enter a us er name an d p asswo rd.
Enabling PEAP (MS-CHAPv2) Server Certificate Authentication
To enable server identity validation, follow these steps:
Procedure
Step 1 From the Network Profile Advance Profile page, choose PEAP as the security mode in the WLAN
Security section.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-24
OL-15985-01
Page 95
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Step 2 In the Certificate Options section, choose True in the Validate Server Certificate subsection. Another
window displays with avai lable c ertific ates. The display ed fields ar e Type , Common Name, Issuer Name, Valid From and Valid To. You can install, export, or import certificates as required. If you are importing a cer tifi cat e t o th e pho ne, you c an br owse the se rv er f or the f ile.
Step 3 If you choose EAP-T LS authen ticatio n, the User Certif icate In stallation page displa ys. You only have
to enter the Common Name field in the first step to use EAP-TLS. There are four steps to complete the EAP-TLS User Certificate Installation. Click Submit when done.
Configuring IP Network Settings
The Cisco Unified IP Phones enable DHCP, by default, to automatically assign IP addresses to devices when you connect them to the network. If you do not use DHCP in your network, then you must disable DHCP and manually enter network configuration information. For more information, see “Interacting
with the DHCP Server” section on page 2-13.
When DHCP is disabled in t he netw ork , you m ust co nfi gur e t he f ol lowin g setti ngs in the Static Settings
nu:
me
IP address
Configuring Network Profiles
Enabling DHCP
Step 1 Choose the n etw ork pro fil e t hat you wa nt t o c onf igure . Step 2 Under the IP N etwor k C onfi gurat ion are a, c hoose thi s option:
Step 3 Click Save to make the change.
Subnet mask
Default Router
DNS server 1 and 2
TFTP server 1
Use these guidelines when manually configuring the IP settings:
Ensure the TFTP server h as a n IP addr ess.
Ensure the default route r IP address is on the same subnet as t he host IP addr ess.
To enable the use of DHCP in the Network Profile, follow these steps:
Procedure
Obtain IP address and DNS servers automatically
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-25
Page 96
Configuring Network Profiles
Disabling DHCP
Step 1 Choose the n etw ork pro fil e t hat you wa nt t o c onf igure . Step 2 Under the IP N etwor k C onfi gurat ion are a, c hoose thi s option:
Step 3 You must enter these required IP addresses. See Table 4-5 for de scri ptions of the se fi el ds. Step 4 Click Save to make the change.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
To disable the use of DHCP in the Network Profile, follow these steps:
Procedure
Use the following IP addresses and DNS servers
Table 4-5 Static IP Addresses When DHCP is Disabled
Static Setting Description
IP Address Inter ne t Pro toc ol ( IP) a ddr ess of t he p hon e Subnet Mask Su bnet m ask use d by t he p hone Default Route r 1 Primary gateway u sed b y th e pho ne DNS Server 1 DNS Server 2 TFTP Server 1 TFTP Server 2
Primary DNS server used by the phone Optional backup DNS serve r used by the pho ne Primary TFTP serv er u sed by t he phon e. Optional back up TFTP serv er us ed by the phon e
Domain Name Name of the Domain Name System (DNS) domain in which the
phone resides
Configuring the Alternate TFTP Server
If you use DHCP to dire ct the C isco U nifie d I P Ph ones t o a TF TP serve r, y ou can also a ssign an alternative TFTP serve r to so me p hon es instea d of the o ne assi gned by DHC P.
Note If yo u di sable DHCP, th en yo u must use the se ste ps to set up t he T FT P se rver fo r th e phone .
To assign an alter nate TFT P serv er to a pho ne, foll ow th ese st eps:
Procedure
Step 1 Choose the n etw ork pro fil e t hat you wa nt t o c onf igure . Step 2 Under the TFTP ar ea, c hoose thi s optio n:
Use the following TFTP servers
Step 3 You must enter the required IP addresses. See Table 4-5 for description s of t hese f iel ds.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-26
OL-15985-01
Page 97
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Step 4 Click Save to make the change.
Configuring Advanced Network Profile Settings
The network profiles web page has an advanced profile settings subsection that is a hypertext link from the network profile pa ge. I t d isplay s Tr af fic Speci ficat ion (T SPEC) , Ant enna , an d pow er se ttin gs. You can modify these set tings. Th e descr iption of e ach ar e:
TSPEC—Parameters that advertise informat io n about gen erate d traf fic for Call Admi ssion Con tr ol
(CAC) to the AP.
Minimum PHY r ate— Lo west r ate t h at outbo und t raff ic is e xpec ted to u s e be fo re t he phon e ro am s
to another AP.
Surplus Bandwidth Allowance—Fractional number that specifies the excess allocation of time and
bandwidth above application rates required to transport a MAC service data unit (MSDU) in a TSPEC frame.
Configuring Network Profiles
Note If your wireless LAN has access points that us e 802.11b an d you plan to use Call Admissi on Control
(CAC) with TSPEC, then you need to modify the PHY rate to a supporte d rate for your 802.11b access points.
To make changes to the advanced settings, follow these steps:
Procedure
Step 1 Choose the n etw ork pro fil e t hat you wa nt t o c onf igure . Step 2 Click the Advanced Profile link at the top of the page. Step 3 In the TSPEC Setting, keep the Minimum PHY Rate: 12 Mbps
Note If you are using 802.11b APs and plan to use Call Admission Control (CAC) with TSPEC, then
set the PHY Rate to a rat e t hat the AP s s uppo rt s uch a s 1 1 Mb ps.
Step 4 In the Surplus Bandwidth field, enter the appropriate values. Step 5 In the Ant enna Setti ngs fie ld, ch oose Vert ic al, Hor i zont al, or Dive rsit y from t he pu l l-down me nu . Step 6 In the 802.11G Power Settings, check only the channels that are used in your WLAN. By doing this, the
phone scans for on ly tho se c hanne ls. In the Max Tx Powe r f iel d, k ee p the defa ult valu e.
Step 7 In the 802.11A Power Settings, check only the channels that are used in your WLAN. By doing this, the
phone scans for on ly tho se c hanne ls. In the Max Tx Powe r f iel d, k ee p the defa ult valu e.
Caution You must check at least one channel after using “Clear All,” to enable the phone to access the WLAN.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-27
Page 98
Configuring USB Settings
Step 8 Click Save to make the change.
Related Topics
Accessing the Configuration Web Page for a Phone, page 4-5
Network Profile Settings, page 4-8
Configuring Wireles s Set tings i n a N etwor k Profi le, pa ge 4-13
Configuring Wireless LAN Sec urity, pa ge 4-14
Setting the Wireless Security Credentials, page 4-15
Configuring the Pre- share d Ke y, pa ge 4-16
Configuring IP Network Settings, page 4-25
Configuring the Alternate TFTP Server, page 4-26
Configuring USB Settings
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
To use the U SB ca bl e fr om yo ur PC to a p hon e, you must co nfi g ure t he USB se tt ings to w or k wi th the USB port on the PC. The phone has a default USB IP address of 192.168.1.100. You can change the USB port configuratio n on t he p hon e in t h ese w ays:
To obtain the IP address automatically, by getting an IP address from the PC that has DHCP set up.
To use the IP ad dress an d s ubne t m ask a ssign ed i n t his a re a.
To display the US B Set ti ngs, a cce ss th e web page for t he p hon e as de sc ribed in the
Configuration Web Page for a Phon e” sect ion on page 4-5, and then click the USB
Accessing the
SETTINGS.
To change the USB port sett ings for th e phone, fol low these steps :
Procedure
Step 1 On the pho ne w eb p ag e, c hoose the US B Setti ngs hy pe rlink. Step 2 Choose one of t he f oll owi ng opt ion s:
Obtain IP address automatically
Use the following IP address
Step 3 To change the st atic IP addr ess, in the I P Ad dre ss f ield, ent er a new IP ad dress that is no t a ssigne d on
the subnet.
Step 4 To change the subn et for the new IP addre ss, in the Subne t Mask fiel d, enter th e appro priate subn et
address.
Step 5 Click Save to make the change.
Related Topics
Accessing the Phone Web Page, page 4-3
Configuring Network Profile s, page 4-8
Configuring Trace Settin gs, page 4-29
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-28
OL-15985-01
Page 99
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Using System Settings, page 4-36
Configuring Trace Settings
You can use the T RA CE SE TTIN GS m enu o n t he p hon e web page to co nfi gure h ow t he phon e cr eat es and saves trace fi les. Becau se trace files are stor ed in th e memo ry of the phone, you can co ntro l the number of files and the data that you want t o collect. Table 4-6 describes these configurable items.
Note When preserving trace logs, choose only the logs that need to be saved after the phone is powered off
and powered on to avoi d usi n g u p phon e me mo ry.
To display the Tra ce Sett ings, a c cess the web page f or t he p hon e as de scri bed in t he “Accessing the
Configuration Web Page for a Phon e” sect ion on page 4-5, and then click the T
To change the trace settings for the phone, follow these steps:
Procedure
Configuring Trace Settings
RACE SETTINGS.
Step 1 On the pho ne web p ag e, c lick the TRACE SETTING S menu. Step 2 In the Number of Files fie ld, choose the numbe r of trace fil es to save, from 2 to 10. Step 3 In the File Size field, choose the size of the files from 50 to 250K. Step 4 In the Remote Syslog Server section, check the box to enable a server to collect the trace files. Step 5 If you enabled the syslog server, then you must complete these fields:
IP Address—Enter server IP address
Port—Enter a port number (514, 1024-655 35)
Step 6 In the Module Trace Level section, check only the modules for which you want data:
Kernel
Configuration
Call Control
Network Services
Security Subsystem
User Interface
Wireless LAN Driver
Wireless LAN Ma nage r
Audio System
System
Step 7 In the Advanced Trace Settings section, in the Preserve Logs field, choose one of the following:
True—Save t he t rac e logs to fl ash mem ory on t he p hon e.
False—Save the trace logs to RAM.
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-29
Page 100
Configuring Trace Settings
Note When set to False, the trace logs are lost when the phone is powered off.
When the phone is powered off, then powered back on, the Preserve Logs field is reset to False, the
Step 8 Click Save to make the change.
Table 4-6 Trace Settings Items and Descriptions
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
default value.
Item Description
General
Number of Files Choose the number of trace files that the phone saves, from 2-10 files. File Size Choose the File size for the trace file that is saved. The file size range
is 50K to 250K .
Remote Syslog Server
Enable Remote Syslog Set up a r emote server to store trace logs
IP Address—Enter se rver IP ad dress Port—Enter a port numb er (514, 1024 -65535 )
Module Trace Level
Kernel Operating System data Configuration Phone configuration da ta Call Control Cisco Unified Communications Manager data Network Services DHCP, TFTP, CDP data Security Subsystem Application level security data User Interface Key stroke s, soft keys, M MI d ata Wireless LA N Dr iver Channel sc anni ng and au then tic atio n Wireless LAN Manage r Channel scanning and au then ticatio n Audio System RTP, SRTP, RTCP, DSP data System F irm w ar e, u pgr ad e da ta
Advanced Trace Settings
Preserve Logs True— Sa ve t rac e l ogs aft er po w ering off th e p hon e
False—Delete trace logs
Reset Trace Setti ngs upon Reboot
You may enable debugging by configuring var ious setting s on the Trace Configuration. These options determine how trace settings are handled when you reboot:
Yes—Default value. Settings will be reset to the default values
upon reboot.
Related Topics
Accessing the Phone Web Page, page 4-3
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
4-30
No—Trace settings w ill not reset upo n reboot.
OL-15985-01
Loading...