Cisco 7925G - Unified Wireless IP Phone VoIP Administration Manual

Page 1
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
Americas Headquarters
Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000
800 553-NETS (6387)
Text Part Number: OL-15984-01
Page 2
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
The Bluetooth word mark and logo are registered trademarks owned by Bluetooth SIG, Inc., and any use of such marks by Cisco Systems, Inc., is under license.
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required to correct the interference at their own expense.
The following information is for FCC compliance of Class B devices: This equipment has been tested and found to comply with the lim its for a Class B digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If the equipment causes interference to radio or television reception, which can be determined by turning the equipment off and on, users are encouraged to try to correct the interference by using one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Modifications to this product not authorized by Cisco could void the FCC approval and negate your authority to operate the product.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
IMPLIED, INCLUDING, WITHOUT
CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, the Cisco logo, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Cisco
Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0809R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
© 2008 Cisco Systems, Inc. All rights reserved.
Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems,
logo, LightStream, Linksys, MediaTone, MeetingPlace,
logo are registered trademarks of Cisco Systems, Inc.
Page 3
CONTENTS
Preface xi
Overview xi
Audience xi
Organization xii
Related Documentation xiii
Obtaining Documentation and Submitting a Service Request xiii
Cisco Product Security Overview xiii
Document Conventions xiv
CHAPTER
1 Overview of the Cisco Unified Wireless IP Phone 7925G 1-1
Understanding the Cisco Unified Wireless IP Phone 7925G 1-1
Bluetooth Technology 1-2
Handsfree Profile 1-2 Pairing with Headsets 1-3
Features Supported on the Cisco Unified Wireless IP Phone 7925G 1-6
Feature Overview 1-7 Telephony Features 1-7 Network Settings Configuration 1-7
Feature Information for Users 1-8
Understanding Security Features for Cisco Unified IP Phones 1-8
Overview of Supported Security Features 1-10 Understanding Security Profiles 1-12
Identifying Authenticated, Encrypted, and Protected Phone Calls 1-12
Establishing and Identifying Protected Calls 1-13
Security Restrictions 1-13
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G 1-14
Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications Manager
1-14
Installing the Cisco Unified Wireless IP Phone 7925G 1-15
CHAPTER
2 Overview of the VoIP Wireless Network 2-1
Understanding the Wireless LAN 2-1
Understanding WLAN Standards and Technologies 2-3
802.11 Standards for WLAN Communications 2-3
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
iii
Page 4
Contents
Radio Frequency Ranges 2-4
802.11 Data Rates, Tx Power, Ranges, and Decibel Tolerances 2-4
Wireless Modulation Technologies 2-5 AP, Channel, and Domain Relationships 2-6 WLANs and Roaming 2-7
Bluetooth Wireless Technology 2-8
Pairing Headsets 2-8
Components of the VoIP Wireless Network 2-9
Networking Protocols Used with Cisco Unified Wireless IP Phones 2-9 Interacting with Cisco Unified Wireless APs 2-11
Associating to APs 2-12 Voice QoS in a Wireless Network 2-12 Interacting with Cisco Unified Communications Manager 2-14
Phone Configuration Files and Profile Files 2-14 Interacting with the Dynamic Host Configuration Protocol Server 2-15
CHAPTER
Security for Voice Communications in WLANs 2-16
Authentication Methods 2-16
Authenticated Key Management 2-18 Encryption Methods 2-18 Choosing AP Authentication and Encryption Methods 2-18
VoIP WLAN Configuration 2-21
Wireless Network Requirements for VoIP 2-21 Configuring the Wireless Network for Voice 2-22
Configuration Tip for Cisco Aironet APs 2-22
Site Survey Verification 2-22
Performing a Site Survey Verification 2-23 Using the Neighbor List Utility 2-23 Using the Site Survey Utility 2-24
3 Setting Up the Cisco Unified Wireless IP Phone 7925G 3-1
Before You Begin 3-1
Network Requirements 3-1 Methods for Adding Phones to Cisco Unified Communications Manager 3-2
Adding Phones with Auto-Registration 3-3
Adding Phones with Auto-Registration and TAPS 3-3
Adding Phones with BAT 3-4
Adding Phones with Cisco Unified Communications Manager Administration 3-4 Device Support 3-5 Safety Information 3-5
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
iv
OL-15984-01
Page 5
Battery Safety Notices 3-6
Installing the Cisco Unified Wireless IP Phone 7925G 3-7
Providing Power to the Phone 3-7
Installing or Removing the Phone Battery 3-8 Using the Power Supply to Charge the Phone Battery 3-11 Using the USB Cable and PC to Charge the Battery 3-12
Configuring Wireless LAN Settings for the Cisco Unified Wireless IP Phone 7925G 3-13
Cisco Unified Wireless IP Phone 7925G Web Pages 3-13 Network Profile Menu on the Cisco Unified Wireless IP Phone 7925G 3-13
Using a Headset 3-13
Connecting Headsets 3-14 Using Bluetooth Wireless Headsets 3-14
Audio Quality Subjective to the User 3-15 Using External Devices with Cisco Unified IP Phones 3-15
Powering On the Cisco Unified Wireless IP Phone 7925G 3-15
Active and Standby Phone Modes 3-16
Active Mode 3-16 Standby Mode 3-17
Contents
CHAPTER
Understanding the Phone Startup Process 3-17
4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages 4-1
Setting Up Your PC to Configure the Phones 4-1
Installing the USB Drivers 4-2
Configuring the USB LAN on the PC 4-2 Accessing the Phone Web Page 4-3
Using the USB Cable to Configure Phones 4-4
Updating the Phones Remotely 4-4
Setting Configuration Privileges for the Phone Web Page 4-4 Accessing the Configuration Web Page for a Phone 4-5
Summary Information on the Home Web Page 4-7
Configuring Network Profiles 4-8
Network Profile Settings 4-8 Configuring Wireless Settings in a Network Profile 4-12
Configuring Wireless LAN Security 4-13
Configuring the Authentication Mode 4-14
Setting the Wireless Security Credentials 4-15
Configuring the Username and Password 4-15 Configuring the Pre-shared Key 4-15 Setting Wireless Encryption 4-16
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
v
Page 6
Contents
Installing Authentication Certificates for EAP-TLS Authentication 4-17
Configuring PEAP 4-22
Configuring IP Network Settings 4-23
Enabling DHCP 4-23
Disabling DHCP 4-24
Configuring the Alternate TFTP Server 4-24 Configuring Advanced Network Profile Settings 4-25
Configuring USB Settings 4-26
Configuring Trace Settings 4-27
Configuring Wavelink Settings 4-29
Configuring the Phone Book 4-29
Importing and Exporting Contacts 4-30
Importing and Exporting CSV Phone Contact Records 4-30 Searching the Phone Book Information 4-32 Updating Phone Book Information 4-32
Adding a Contact 4-32
Deleting Contacts 4-33
Editing Contact Information 4-33
Assigning A Speed-Dial Hot Key to a Contact Number 4-33
CHAPTER
Using System Settings 4-34
Viewing Trace Logs 4-34 Backup Settings for Phone Configuration 4-34
Using Network Profile Templates 4-35
Creating a Configuration Template 4-35
Importing a Configuration Template 4-37
Upgrading Phone Firmware 4-37 Changing the Admin Password 4-38 Viewing the Site Survey Report on the Web 4-38
5 Configuring Settings on the Cisco Unified Wireless IP Phone 7925G 5-1
Accessing Network and Phone Settings 5-1
Configuring Network Profile Settings 5-2
Accessing a Network Profile 5-3 Changing the Profile Name 5-3
Guidelines for Editing Settings in the Network Profile 5-4 Changing Network Configuration Settings 5-4 Configuring DHCP Settings 5-6
Disabling DHCP 5-6
Configuring an Alternate TFTP Server 5-7
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
vi
OL-15984-01
Page 7
Changing the Cisco Discovery Protocol Settings 5-7 Erasing the Configuration 5-8
Configuring Wireless Settings for the Network Profile 5-8
Accessing the WLAN Configuration Menu 5-8 Changing WLAN Configuration Settings 5-9
Changing Phone Settings 5-10
Configuring the Security Certificate on the Phone 5-12
Changing the USB Configuration 5-13
Contents
CHAPTER
6 Configuring the Phone Using the Wavelink Avalanche Server 6-1
Before You Begin 6-1
Best Practices 6-2
Assigning the Wavelink Server 6-2
Assigning the Wavelink Server from the Phone 6-2 Assigning the Wavelink Server using the Phone Web Page 6-3
Setting Up and Using the Phone CU 6-3
Assigning Attributes for the Phone 6-3
Defining Custom Names and Custom Values on the Phone 6-4 Defining Custom Parameters from the Phone Web Page 6-4
Installing the Cisco Unified Wireless IP Phone 7925G CU 6-4
Updating Configuration Files 6-5
Configuring Profile Settings 6-6
Configuring USB Settings 6-9 Configuring Trace Settings 6-9 Configuring Wavelink Settings 6-10
Updating the Phone 6-10
CHAPTER
7 Configuring Features, Templates, Services, and Users 7-1
Configuring Cisco Unified Wireless IP Phones in Cisco Unified Communications Manager 7-1
Telephony Features Available for the Phone 7-2
Specific Configuration Options for the Cisco Unified Wireless IP Phone 7925G 7-13
Configuring Softkey Templates 7-16
Softkey Templates for the Cisco Unified Wireless IP Phone 7925G 7-16 Changing Softkeys in a Template 7-16
Modifying Phone Button Templates 7-17
Setting Up Services 7-17
Configuring Corporate and Personal Directories 7-18
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
vii
Page 8
Contents
Configuring Corporate Directories 7-19 Configuring Personal Directory 7-19
Adding Users to Cisco Unified Communications Manager 7-19
Managing the User Options Web Pages 7-20
Giving Users Access to the User Options Web Pages 7-20 Specifying Options that Appear on the User Options Web Pages 7-21
Creating Custom Phone Rings 7-21
CHAPTER
CHAPTER
8 Viewing Security, Device, Model, Status, and Call Statistics Information on the Phone 8-1
Viewing Security Information 8-1
Accessing the CTL File Screen 8-3
Trust List Screen 8-4
Viewing Device Information 8-4
Viewing Model Information 8-7
Viewing the Phone Status Menu 8-8
Viewing the Status Messages 8-9
Viewing the Current Configuration 8-12
Viewing Network Statistics 8-12 Viewing Call Statistics 8-14 Viewing Firmware Versions 8-16
9 Monitoring the Cisco Unified Wireless IP Phone Remotely 9-1
Accessing the Web Page for a Phone 9-1
Summary Information 9-2
Network Configuration Information 9-3
Device Information 9-6
Wireless LAN Statistics 9-7
Network Statistics 9-9
Stream Statistics 9-10
CHAPTER
10 Troubleshooting the Cisco Unified Wireless IP Phone 7925G 10-1
Resolving Startup and Connectivity Problems 10-1
Symptom: Incomplete Startup Process 10-1 Symptom: No Association to Cisco Aironet Access Points 10-2
Verifying Access Point Settings 10-2 Symptom: No Registration to Cisco Unified Communications Manager 10-3
Registering the Phone with Cisco Unified Communications Manager 10-4
Checking Network Connectivity 10-4
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
viii
OL-15984-01
Page 9
Verifying TFTP Server Settings 10-4 Verifying IP Addresses 10-5
Verifying DNS Settings 10-5 Verifying Cisco Unified Communications Manager Settings 10-5 Cisco Unified Communications Manager and TFTP Services are not Running 10-6
Creating a New Configuration File 10-7
Resolving Voice Quality and Roaming 10-8
Symptom: Cisco Unified Wireless IP Phone Resets Unexpectedly 10-8
Verifying Access Point Settings 10-8
Identifying Intermittent Network Outages 10-8 Verifying DHCP Settings 10-9 Verifying Voice VLAN Configuration 10-9
Verifying that the Phones Have Not Been Intentionally Reset 10-9 Eliminating DNS or Other Connectivity Errors 10-9
Symptom: Audio Problems 10-10
No Audio During a Connected Call 10-10 One-Way Audio During a Connected Call 10-10
Symptom: Improper Roaming and Voice Quality or Lost Connection 10-11
Voice Quality Deteriorates While Roaming 10-11 Delays in Voice Conversation While Roaming 10-11 Phone Loses Connection with Cisco Unified Communications Manager While Roaming 10-11
Phone Does Not Roam Back to Preferred Band 10-12
Monitoring the Voice Quality of Calls 10-12
Using Voice Quality Metrics 10-13
Troubleshooting Tips 10-13
Contents
General Troubleshooting Information 10-14
Common Phone Status Messages 10-14 Troubleshooting Tips for the Cisco Unified Wireless IP Phone 7925G 10-16
Logging Information for Troubleshooting 10-17
Using a System Log Server 10-18 Using the Trace Logs on the Unified IP Phone 10-18
Erasing the Local Configuration 10-18
APPENDIX
A Providing Information to Users By Using a Website A-1
How the Cisco Unified Wireless IP Phone Operates A-1
How to Care for and Clean the Phone A-2
How Users Access the Help System on the Phone A-3
How Users Get Copies of Cisco Unified IP Phone Manuals A-3
How Users Configure Phone Features and Services A-4
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
ix
Page 10
Contents
How Users Access Voice Messages A-4
APPENDIX
APPENDIX
APPENDIX
I
NDEX
B Supporting International Users B-1
Installing the Cisco Unified Communications Manager Locale Installer B-1
Support for International Call Logging B-2
C Physical and Operating Environment Specifications C-1
D Checklist for Deploying the Cisco Unified Wireless IP Phone 7925G D-1
Configuring a Wireless Network D-1
Configuration Tip for Cisco Aironet Access Points D-2
Configuring QoS Policies D-3
Access Point Configuration Settings D-3 Controller Settings D-3 Switch Configuration D-4
Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications Manager D-4
Installing the Cisco Unified Wireless IP Phone 7925G D-7
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
x
OL-15984-01
Page 11
Overview
Preface
This chapter describes the intended audience, objectives, organization, and lists related documentation. It contains the following sections:
Overview, page xi
Audience, page xi
Organization, page xii
Related Documentation, page xiii
Obtaining Documentation and Submitting a Service Request, page xiii
Cisco Unified Wireless IP Phone 7925G Administration Guide provides the information you need to understand, install, configure, and manage the Cisco Unified Wireless IP Phone 7925G on your network. This guide is intended to be used to administer phones running with Cisco Manager Release 4.1, 4.2, 4.3, 5.1, 6.0, 6.1, and 7.0(1).
Unified Communications
Audience
Network engineers, system administrators, or telecom engineers should review this guide to learn the steps required to properly set up the Cisco
The tasks described are considered to be administration-level tasks and are not intended for end-users of the phones. Many of the tasks involve configuring network settings and could affect the phone functioning in the network.
Because of the close interaction between the Cisco Unified Wireless IP Phone 7925G and Cisco Unified Communications Manager, these tasks require familiarity with Cisco Unified Communications Manager.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Unified Wireless IP Phone 7925G on the wireless network.
xi
Page 12
Organization
This guide is organized as follows:
Chapter Description
Chapter 1, “Overview of the Cisco Unified Wireless IP Phone 7925G”
Chapter 2, “Overview of the VoIP Wireless Network”
Chapter 3, “Setting Up the Cisco Unified Wireless IP Phone 7925G”
Chapter 4, “Using the Cisco Unified Wireless IP Phone 7925G Web Pages”
Chapter 5, “Configuring Settings on the Cisco Unified Wireless IP Phone 7925G”
Chapter 6, “Configuring the Phone Using the Wavelink Avalanche Server”
Chapter 7, “Configuring Features, Templates, Services, and Users”
Chapter 8, “Viewing Security, Device, Model, Status, and Call Statistics Information on the Phone”
Chapter 9, “Monitoring the Cisco Unified Wireless IP Phone Remotely”
Chapter 10, “Troubleshooting the Cisco Unified Wireless IP Phone 7925G”
Appendix A, “Providing Information to Users By Using a Website”
Appendix B, “Supporting International Users” Provides information about setting up phones in
Appendix C, “Physical and Operating Environment Specifications”
Appendix D, “Checklist for Deploying the Cisco Unified Wireless IP Phone 7925G”
Preface
Provides a conceptual overview and description of the Cisco provides an overview of the tasks required prior to installation
Describes how the IP Phone interacts with other key IP telephony and wireless network protocols and components
Describes how to properly and safely install and configure the Cisco IP
Describes how to use the Cisco Unified Wireless IP configuration and to update configuration files for the wireless
Describes how to configure network profiles and phone settings, by using the Settings menu on the wireless
Describes how to use the Cisco Unified Wireless IP Wavelink Avalanche server for updating the phone configuration
Provides an overview of procedures for configuring telephony features and adding users to Cisco
Explains how to view phone security, device, and network information and network and call statistics from the wireless
Explains how to obtain status information about the phone using the phone web page
Provides tips for troubleshooting the wireless
Provides suggestions for setting up a website for providing users with important information about their wireless
non-English environments
Provides technical specifications of the Cisco
Provides a detailed checklist for deploying the Cisco
Unified Wireless IP Phone 7925G and
Unified Wireless
Phone 7925G on your network
Phone 7925G web pages for initial phone
IP phone
IP phone
Phone 7925G Configuration Utility on the
Unified Communications Manager
IP phone
IP phone
IP phone
Unified Wireless IP Phone 7925G
Unified Wireless IP Phone 7925G
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
xii
OL-15984-01
Page 13
Preface
Related Documentation
For more information about Cisco Unified IP Phones or Cisco Unified Communications Manager, refer to the following publications:
Cisco Unified Wireless IP Phone 7925G
These publications are available at the following URLs:
http://www.cisco.com/en/US/products/hw/phones/ps379/tsd_products_support_series_home.html
Cisco Unified Wireless IP Phone 7925G Phone Guide
Cisco Unified Wireless IP Phone 7925G Accessory Guide
Cisco Unified Wireless IP Phone 7925G Installation Guide
Cisco Unified Wireless IP Phone 7925G Datasheet
Regulatory Compliance and Safety Information for Cisco Unified Wireless IP Phone 7920 Series
and Peripherals
Open Source License Notices for the Cisco Unified IP Phones 7900 Series
Cisco Unified Communications Manager Administration
Cisco Unified Communications Manager publications are available at the following URL:
http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_support_series_home.html
Cisco Unified Communications Manager Administration Business Edition
Cisco Unified Communications Manager Business Edition publications are available at the following URL:
http://www.cisco.com/en/US/products/ps7273/tsd_products_support_series_home.html
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s revised Cisco
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.
technical documentation, at:
Cisco Product Security Overview
New in Cisco Product Documentation, which also lists all new and
This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
xiii
Page 14
Further information regarding U.S. export regulations may be found at
http://www.access.gpo.gov/bis/ear/ear_data.html.
Document Conventions
This document uses the following conventions:
Convention Description
boldface font Commands and keywords are in boldface.
italic font Arguments for which you supply values are in italics.
[ ] Elements in square brackets are optional.
{ x | y | z } Alternative keywords are grouped in braces and separated by vertical bars.
[ x | y | z ] Optional alternative keywords are grouped in brackets and separated by
string A nonquoted set of characters. Do not use quotation marks around the string
screen font Terminal sessions and information the system displays are in screen font.
boldface screen font Information you must enter is in boldface screen font.
italic screen font Arguments for which you supply values are in italic screen font.
^ The symbol ^ represents the key labeled Control—for example, the key
< > Nonprinting characters, such as passwords are in angle brackets.
Preface
vertical bars.
or the string will include the quotation marks.
combination ^D in a screen display means hold down the Control key while you press the D key.
xiv
Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the
publication.
Caution Means reader be careful. In this situation, you might do something that could result in equipment
damage or loss of data.
Warning
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
Means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents.
OL-15984-01
Page 15
CHA PTER
1
Overview of the Cisco Unified Wireless IP Phone 7925G
This chapter includes the following sections:
Understanding the Cisco Unified Wireless IP Phone 7925G, page 1-1
Bluetooth Technology, page 1-2
Features Supported on the Cisco Unified Wireless IP Phone 7925G, page 1-6
Understanding Security Features for Cisco Unified IP Phones, page 1-8
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G, page 1-14
Understanding the Cisco Unified Wireless IP Phone 7925G
The Cisco Unified Wireless IP Phone 7925G provides wireless voice communication over an IP network. Like traditional analog telephones, you can place and receive phone calls and access features such as hold, transfer, and speed dial. In addition, because the phone connects to your wireless local area network (WLAN), you can place and receive phone calls from anywhere in your wireless environment.
OL-15984-01
The Cisco Unified Wireless IP Phone 7925G is an 802.11 dual band wireless device that provides comprehensive voice communications in conjunction with Cisco Cisco Aironet 802.11b/g and Cisco Aironet 802.11a Access Points (APs) in a private business communications network. This phone model, like other network devices, must be configured and managed. This phone encodes G.711a, G.711u, G.729a, G.729ab, G.722/iLBC, and decodes G.711a, G711b, G.711u, G.729, G729a, G729b, and G729ab. The phone also supports uncompressed wideband (16 bits, 16 kHz) audio.
The Cisco Unified Wireless IP Phone 7925G is hearing aid compatible (HAC) but does not have any TTY features. It also has a centered “dot” or “nib” on the 5 key that is a tactile identifier.
The physical characteristics include:
Resistance to damage from dropping the phone
Tolerance of anti-bacterial and alcohol-based wipes
Latex and lead free
Resistance against liquid splashes
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
Unified Communications Manager and
1-1
Page 16
Bluetooth Technology
Dust resistance
Shock proof and vibration proof
USB 1.1 interface
Bluetooth Technology
The Cisco Unified Wireless IP Phone 7925G is a full-feature telephone and a qualified Bluetooth wireless device (Qualified Device ID (QDID) B014396). In addition to basic call-handling features, your phone operates with Bluetooth wireless headsets, including certain handsfree call features.
Bluetooth devices operate in the unlicensed Industrial Scientific Medicine (ISM) band of 2.4GHz. This unlicensed band in most countries includes the frequency range from 2400 to 2483.5 MHz. Synchronous voice channels are provided by using circuit switching and asynchronous data channels are provided by using packet switching.
Bluetooth uses an integrated Adaptive Frequency Hopping (AFH) to avoid interference. Every 625 usec (1/1,000,000 of a second) the channel changes or hops to another frequency within the 2402 to 2480 MHz range. This computes to 1600 hops every second.
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
On the Cisco Unified Wireless IP Phone 7925G, a Bluetooth module and 802.11 WLAN module co-exist in the phone. This co-existence greatly reduces and avoids radio interference between the Bluetooth and
802.11bg radio.
Bluetooth devices fit into to three different power classes, as shown in Table 1-1.
Ta b l e 1-1 Bluetooth Maximum Permitted Power and Range by Class
Class Maximum Permitted Power (dBm) Maximum Permitted Power (mW) Range
Class 1 100 mW 20 dBm Up to 100 meters
Class 2 2.5 mW 4 dBm Up to 10 meters
Class 3 1 mW 0 dBm Up to 1 meter
For more information about WLAN configuration and Bluetooth, see VoIP WLAN Configuration,
page 2-21. User-specific information is contained in the Cisco Unified Wireless IP Phone 7925G User
Guide.
For more information about Bluetooth and hands-free profiles, refer to http://www.bluetooth.com.
Handsfree Profile
Your phone supports certain features of the Handsfree Profile, which is a standard set of features that enable users of handsfree devices (such as Bluetooth wireless headsets) to perform certain tasks without having to handle the phone, allowing users to be “handsfree.” For example, instead of pressing Redial on your phone, you can redial a number from your Bluetooth wireless headset according to instructions from the headset manufacturer.
These handsfree features apply to Bluetooth wireless headsets used with your Cisco Unified Wireless IP Phone 7925G:
Redial—Recalls the last number dialed.
Reject incoming call—Uses the iDivert option to direct the call to voicemail.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-2
OL-15984-01
Page 17
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Three-way calling—When there is an active call and another incoming call or call on hold, you may
choose to handle the calls in one of two ways:
End the active call and answer or resume a waiting call.
Put the active call on hold and answer or resume a waiting call.
Note Handsfree devices may differ in how features are activated. Handsfree device manufacturers may also
use different terms when referring to the same feature.
For more information on using handsfree features, see the documentation provided by the device manufacturer.
Pairing with Headsets
The Cisco Unified Wireless IP Phone 7925G pairs with headsets by using a shared key authentication/encryption method. This process requires confirmation of a PIN specific to the headset, commonly “0000.” The Cisco headset at a time. Pairing is typically performed once for each headset used with the Cisco Wireless IP Cisco
Phone 7925G. Once pairing is complete, the headset automatically connects to the
Unified Wireless IP Phone 7925G when both devices are powered on and in range.
Bluetooth Technology
Unified Wireless IP Phone 7925G can be paired with more than one
Unified
Note The Cisco Unified Wireless IP Phone 7925G can only be connected to one Bluetooth-enabled headset at
a time. Further, the Cisco
Unified Wireless IP Phone 7925G only supports communication with
Bluetooth wireless technology-enabled devices qualified by the Bluetooth Special Interest Group (SIG).
Figure 1-1 shows the Cisco Unified Wireless IP Phone 7925G. The table that follows describes the
functions of the keys on the phone.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-3
Page 18
Bluetooth Technology
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Figure 1-1 Cisco Unified Wireless IP Phone 7925G
1
2
17
3
16
15
14
13
12
11
10
1 Indicator light
(LED)
2 Headset port
cover
4
5
6
7
8
9
187500
Provides these indications:
Solid red—Phone is connected to AC power source and battery is charging.
Solid green—Phone is connected to AC power source and battery is fully
charged.
Fast blinking red—Incoming call. (Phone can be charging or fully charged.)
Slow blinking red—Voice message. (When connected to AC power source,
red light displays longer than when phone is using only the battery.)
Slow blinking green—Phone is using only battery power. Phone is registered
with the wireless network and is within service coverage area.
Cover for the headset port.
3 Speaker button Toggles the speaker mode on or off for the phone.
4 Right softkey
button
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-4
Activates the Options menu for access to the list of softkeys. Sometimes displays a softkey label.
OL-15984-01
Page 19
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Bluetooth Technology
5 Navigation
Accesses these menus and lists from the main screen:
button
Directory
Line View
Settings
Services
Allows you to scroll up and down menus to highlight options and to move left and right through phone numbers and text entries.
6 Select button Activates the Help menu from the main screen.
Allows you to select a menu item, a softkey, a call, or an action.
7 Power/End
button (red)
Turns the phone on or off, silences a ringing call, or ends a connected call.
When using menus, acts as a shortcut to return to the main screen.
8 Pound (#) key Toggles between locking and unlocking the keypad.
Allows you to enter these special characters when you are entering text:
# ? ( ) [ ] { }
9 Zero (0) key Enters “0” when dialing a number. Allows you to enter a space or these special
characters when you are entering text:
+, . ‘ “ | _ ~ ’
Note When entering text or dialing an international number, use the plus sign
(+).
10 Asterisk (*)
key
Toggles between Ring and Vibrate mode.
Allows you to enter these special characters when you are entering text:
* - / = \ : ;
11 Keypad Allows you to dial numbers, enter letters, and choose menu items by number.
Press and hold key 1 to access your voice messaging system.
12 One (1) key Enters “1” when dialing a number. Allows you to access the voice messaging
system.
Allows you to enter these special characters when you are entering text: ! @ < > $ % ^ &
13 Answer/Send
Allows you to answer a ringing call or, after dialing a number, to place the call.
button (green)
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-5
Page 20
Features Supported on the Cisco Unified Wireless IP Phone 7925G
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
14 Left softkey
button
15 Mute button Toggles the mute feature on or off.
16 Volume button When the phone is idle, allows you to control the ring volume, turn on the vibrate
17 Application
button
Related Topics
Features Supported on the Cisco Unified Wireless IP Phone 7925G, page 1-6
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G, page 1-14
Activates the softkey option displayed on the screen. When customized by the phone administrator or user, allows direct access to the Phone Book or voice messages.
option, or turn off the ring.
When an incoming call is ringing, allows you to press this button once to silence the ring for the call.
During a call, allows you to control the speaker volume for the handset, headset, and speaker mode.
Configurable button that is used with XML applications, such as Push to Talk or Directory services. See
“Setting Up Services” section on page 7-17.
Features Supported on the Cisco Unified Wireless IP
Phone 7925G
The Cisco Unified Wireless IP Phone 7925G functions much like traditional IP phones allowing you to place and receive telephone calls while connected to the wireless LAN. In addition to traditional phone features, the Cisco Unified Wireless IP Phone includes features that enable you to administer and monitor the phone as a network device.
Caution This product is not a medical device and may use an unlicensed frequency band that is susceptible to
interference from other devices or equipment.
This section provides information about these topics:
Feature Overview, page 1-7
Telephony Features, page 1-7
Understanding Security Profiles, page 1-12
Network Settings Configuration, page 1-7
Feature Information for Users, page 1-8
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-6
OL-15984-01
Page 21
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Feature Overview
The Cisco Unified Wireless IP Phone 7925G provides traditional telephony functionality, such as call forwarding and transferring, call pickup, redialing, speed dialing, conference calling, and voice messaging system access, as well as these features:
Bluetooth Class 2 technology for headsets that support Bluetooth
Six-line appearance
Adjustable ring and volume levels
Adjustable display brightness and time outs
Auto-detection of headset and auto-answer from the headset
Wireless web access to your phone number and the corporate directory
Access to network data, XML applications, and web-based services
Online customizing of phone features and services from the User Options web pages
An online help system that displays information on the phone screen
Related Topics
Configuring Network Profiles, page 4-8
Features Supported on the Cisco Unified Wireless IP Phone 7925G
Configuring Features, Templates, Services, and Users, page 7-1
Telephony Features
You can use Cisco Unified Communications Manager Administration to set up phone registration criteria and calling search spaces, to configure corporate directories and services, and to modify phone button templates. See the
“Telephony Features Available for the Phone” section on page 7-2 and Cisco
Unified Communications Manager Administration Guide for additional information.
For more information about the Cisco Unified Communications Manager Administration, refer to Cisco Unified
Communications Manager documentation suite at
http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_support_series_home.html
You can also use the context-sensitive help available within the application for guidance.
Related Topic
Telephony Features Available for the Phone, page 7-2
Network Settings Configuration
Like other network devices, you must configure IP phones to access Cisco Unified Communications Manager and the rest of the IP network using the wireless LAN. There are two methods for configuring network settings such as DHCP, TFTP, and for configuring wireless settings for the phone.
Cisco Unified Wireless IP Phone 7925G web pages
Network Profiles menu on the Cisco Unified Wireless IP Phone 7925G
You can access the configuration web pages by using a browser from your PC. For more information, see
Using the Cisco Unified Wireless IP Phone 7925G Web Pages, page 4-1.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-7
Page 22
Understanding Security Features for Cisco Unified IP Phones
You can also configure network settings on the phone itself. For more information about configuring features from the phone, see
Phone 7925G.”
Because the Cisco Unified Wireless IP Phone is a network device, you can obtain detailed status information about it. This information can assist you in troubleshooting problems that users might encounter when using their IP phones. See
Remotely,” for tips on using this information.
Related Topics
Using the Cisco Unified Wireless IP Phone 7925G Web Pages, page 4-1
Configuring Settings on the Cisco Unified Wireless IP Phone 7925G, page 5-1
Monitoring the Cisco Unified Wireless IP Phone Remotely, page 9-1
Feature Information for Users
If you are a system administrator, you are the primary source of information for Cisco Unified Wireless IP Phone users in your network or company. To ensure that you distribute the most current feature and procedural information, familiarize yourself with Cisco documentation. Make sure to visit the Cisco
http://www.cisco.com/en/US/products/hw/phones/ps379/tsd_products_support_maintain_and_operate. html
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Chapter 5, “Configuring Settings on the Cisco Unified Wireless IP
Chapter 9, “Monitoring the Cisco Unified Wireless IP Phone
Unified Wireless IP Phone 7925G
Unified IP Phone web site:
From this site, you can view additional phone documentation.
In addition to providing documentation, it is important to inform users about available Cisco Unified IP Phone features—including features specific to your company or network—and about how to access and customize those features, if appropriate.
For a summary of the key information that you can provide to phone users, see Appendix A, “Providing
Information to Users By Using a Website.”
Note The radio frequency (RF) for the Cisco Unified Wireless IP Phone 7925G is configured for a specific
regulatory domain. If users attempt to use this phone outside of the regulatory domain, the phone will not function properly and they might violate local regulations.
Related Topic
Providing Information to Users By Using a Website, page A-1
Understanding Security Features for Cisco Unified IP Phones
Implementing security in a wireless network protects against data tampering to Cisco Unified Communications Manager data, call signaling, and media stream. It also reduces the chances for identity theft. To reduce the threats, the Cisco wireless LAN (WLAN) provides options for user authentication with servers and for encrypting communications streams between phones and network devices.
For information about supported security options for the Cisco Unified Wireless IP Phone 7925G, see the
“Authentication Methods” section on page 2-16.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-8
OL-15984-01
Page 23
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
For information about security features supported by Cisco Unified Communications Manager and Cisco Unified IP Phones, see the
“Understanding Security Features for Cisco Unified IP Phones” section on
page 1-8.
Table 1-2 provides additional information about security topics.
Ta b l e 1-2 Cisco Unified IP Phone and Cisco Unified Communications Manager Security Topics
Top ic Reference
Detailed explanation of security, including set up, configuration, and troubleshooting information for Cisco Unified Cisco Unified
Communications Manager and
IP Phones
Security features supported on the Cisco Unified IP Phone
Restrictions regarding security features See the “Security Restrictions” section on
Viewing a security profile name when running Cisco Unified Communications Manager 5.0 or later
Identifying phone calls for which security is implemented
Transport Layer Security (TLS) connection See the “Networking Protocols Used with Cisco
Understanding Security Features for Cisco Unified IP Phones
Refer to Cisco Unified Communications Manager Security Guide
See the “Understanding Security Features for
Cisco Unified IP Phones” section on page 1-8
page 1-13
See the “Understanding Security Profiles” section
on page 1-12
See the “Identifying Authenticated, Encrypted,
and Protected Phone Calls” section on page 1-12
Unified Wireless IP Phones” section on page 2-9
See the “Phone Configuration Files and Profile
Files” section on page 2-14
Security and the phone startup process See the “Understanding the Phone Startup
Process” section on page 3-17
Security and phone configuration files See the “Phone Configuration Files and Profile
Files” section on page 2-14
Changing the TFTP Server 1 or TFTP Server 2 option on the phone when security is implemented
Items on the Security Configuration menu on the phone
See the “Configuring Network Profiles” section
on page 4-8
See the “Viewing Security Information” section
on page 8-1
Unlocking the CTL file See the “Accessing the CTL File Screen” section
on page 8-3
Disabling access to phone web pages See the “Specific Configuration Options for the
Cisco Unified Wireless IP Phone 7925G” section on page 7-13
Troubleshooting See the “General Troubleshooting Information”
section on page 10-14
Refer to Cisco Unified Communications Manager Security Guide, Troubleshooting chapter
Resetting or restoring the phone See the “Erasing the Local Configuration” section
on page 10-18
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-9
Page 24
Understanding Security Features for Cisco Unified IP Phones
Overview of Supported Security Features
Table 1-3 provides an overview of the security features that the Cisco Unified Wireless IP Phone 7925G
supports. For more information about these features and about Cisco Unified Communications Manager and Cisco
For information about current security settings on a phone, choose SETTINGS > System Configuration > Security. For more information, see the
page 8-1.
Note Most security features are available only if a certificate trust list (CTL) is installed on the phone. For
more information about the CTL, refer to “Configuring the Cisco CTL Client” chapter in the Cisco Unified Communications Manager Security Guide.
Ta b l e 1-3 Description of Security Features
Feature Description
Image authentication Prevents tampering with the firmware image before it is loaded on
Customer-site certificate installation
Device authentication Occurs between the Cisco Unified Communications Manager server
File authentication Validates digitally-signed files that the phone downloads. The
Signaling Authentication Uses the TLS protocol to validate that no tampering has occurred to
Unified IP Phone security, refer to Cisco Unified Communications Manager Security Guide.
a phone by using signed binary files (with the extension.sbn). Tampering with the image causes a phone to fail the authentication process and reject the new image.
Authenticates each Cisco Unified IP Phone by using a unique certificate. Phones include a manufacturing installed certificate (MIC), but for additional security, you can specify in Cisco Unified be installed by using the Certificate Authority Proxy Function (CAPF). Alternatively, you can install a locally significant certificate (LSC) from the Security Configuration menu on the phone. See the
section on page 5-12 for more information.
and the phone when each entity accepts the certificate of the other entity. Determines whether a secure connection between the phone and a Cisco necessary, creates a secure signaling path between the entities using TLS protocol. Cisco register phones unless authenticated by the Cisco Unified Communications Manager.
phone validates the signature to make sure that file tampering did not occur after the file creation. Files that fail authentication are not written to Flash memory on the phone. The phone rejects such files without further processing.
signaling packets during transmission.
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
“Viewing Security Information” section on
Communications Manager Administration that a certificate
“Configuring the Security Certificate on the Phone”
Unified Communications Manager should occur, and, if
Unified Communications Manager will not
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-10
OL-15984-01
Page 25
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Table 1-3 Description of Security Features (continued)
Feature Description
Manufacturing installed certificate
Secure Cisco Unified SRST reference
Media encryption Uses SRTP to ensure that the media streams between supported
Signaling encryption by using TLS
CAPF (Certificate Authority Proxy Function)
Security profiles Defines whether the phone is non-secure, authenticated, or
Encrypted configuration files Lets you ensure the privacy of phone configuration files.
Optional disabling of the web server functionality for a phone
Phone hardening Additional security options, which you control from
Understanding Security Features for Cisco Unified IP Phones
Each Cisco Unified IP Phone contains a unique manufacturing installed certificate (MIC), which is used for device authentication. The MIC is a permanent unique proof of identity for the phone, and allows Cisco
Unified Communications Manager to authenticate the
phone.
After you configure a SRST reference for security and then reset the dependent devices in Cisco
Unified Communications Manager Administration, the TFTP server adds the SRST certificate to the phone cnf.xml file and sends the file to the phone. A secure phone then uses a TLS connection to interact with the SRST-enabled router.
devices proves secure and that only the intended device receives and reads the data. Includes creating a media master key pair for the devices, delivering the keys to the devices, and securing the delivery of the keys while the keys are in transport.
Ensures that all SCCP signaling messages that are sent between the device and the Cisco
Unified Communications Manager server are
encrypted.
Implements parts of the certificate generation procedure that are too processing-intensive for the phone, and it interacts with the phone for key generation and certificate installation. The CAPF can be configured to request certificates from customer-specified certificate authorities on behalf of the phone, or it can be configured to generate certificates locally.
encrypted. See the
“Understanding Security Profiles” section on
page 1-12 for more information.
You can prevent access to a phone web page, which displays a variety of operational statistics for the phone.
Cisco
Unified Communications Manager Administration:
Disabling Gratuitous ARP (GARP)
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Disabling access to the Setting menus
Disabling access to web pages for a phone
Note You can view current settings for the GARP Enabled, and
Web Access options by looking at the phone’s Device Information menu. For more information, see the
“Viewing
Security Information” section on page 8-1.
1-11
Page 26
Understanding Security Features for Cisco Unified IP Phones
Related Topics
Understanding Security Profiles, page 1-12
Identifying Authenticated, Encrypted, and Protected Phone Calls, page 1-12
Viewing Device Information, page 8-4
Security Restrictions, page 1-13
Understanding Security Profiles
A security profile, which defines whether the phone is non-secure, authenticated, encrypted, or protected is associated with every Cisco Unified IP Phone that is supported by Cisco Manager Administration. For information about configuring the security profile and applying the profile to the phone, refer to Cisco Unified Communications Manager Security Guide.
Note For Cisco Unified IP Phones using Cisco Unified CallManager 4.1 and later, security is configured on
each phone. For more information about configuring security, refer to Cisco Unified CallManager Security Guide at
http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_maintenance_guides_list.html.
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Unified Communications
To view the security mode that is set for the phone, from the phone screen, choose SETTINGS > Device Information > Security > Security Mode. For more information, see the
“Viewing Security
Information” section on page 8-1.
Related Topics
Identifying Authenticated, Encrypted, and Protected Phone Calls, page 1-12
Viewing Device Information, page 8-4
Security Restrictions, page 1-13
Identifying Authenticated, Encrypted, and Protected Phone Calls
When security is implemented for a phone, you can identify authenticated or encrypted phone calls by icons on the screen on the phone. You can also determine if the connected phone is secure and protected if a security tone plays at the beginning of the call.
In an authenticated call, all devices participating in the establishment of the call are authenticated by Cisco
Unified Communications Manager. When a call in progress is authenticated, the call progress icon
to the right of the call duration timer in the phone screen changes to this icon:
In an encrypted call, all devices participating in the establishment of the call are authenticated by Cisco
Unified Communications Manager. In addition, call signaling and media streams are encrypted. An encrypted call offers a high in progress is being encrypted, the call progress icon to the right of the call duration timer in the phone screen changes to this icon:
level of security, providing integrity and privacy to the call. When a call
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-12
OL-15984-01
Page 27
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Note If the call is routed through non-IP call legs, for example, PSTN, the call may be nonsecure even though
it is encrypted within the IP network and has a lock icon associated with it.
In a protected call, a security tone plays at the beginning of a call to indicate that the other connected phone is also receiving and transmitting encrypted audio. If your call is connected to a non-protected phone, the security tone does not play.
Note Protected calling is supported for connections between two phones only. Some features, such as
conference calling, shared lines, Extension Mobility, and Join Across Lines are not available when protected calling is configured. Protected calls are not authenticated.
Establishing and Identifying Protected Calls
Understanding Security Features for Cisco Unified IP Phones
A protected call is established when your phone, and the phone on the other end, is configured for protected calling. The other phone can be in the same Cisco IP network, or on a network outside the IP network. Protected calls can only be made between two phones. Conference calls and other multiple-line calls are not supported.
A protected call is established using this process:
1. A user initiates the call from a protected phone (protected security mode).
2. The phone displays the icon (encrypted) on the phone screen. This icon indicates that the phone
is configured for secure (encrypted) calls, but this does not mean that the other connected phone is also protected.
3. A security tone plays if the call is connected to another protected phone, indicating that both ends
of the conversation are encrypted and protected. If the call is connected to a non-protected phone, then the secure tone is not played.
Note Protected calling is supported for conversations between two phones. Some features, such as conference
calling, shared lines, Extension Mobility, and Join Across Lines are not available when protected calling is configured.
Related Topics
Understanding Security Features for Cisco Unified IP Phones, page 1-8
Understanding Security Profiles, page 1-12
Security Restrictions, page 1-13
Security Restrictions
When using a phone that is not configured for encryption, the user cannot barge into an encrypted call. When barge fails in this case, a reorder tone (fast busy tone) plays on the barge initiator phone.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-13
Page 28
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G
If the phone is configured for encryption, the user can barge into an authenticated or non-secure call from the encrypted phone. After the barge occurs, Cisco as non-secure.
If the phone is configured for encryption, the user can barge into an encrypted call, and the phone indicates that the call is encrypted.
A user can barge into an authenticated call, even if the phone that is used to barge is non-secure. The authentication icon continues to display on the authenticated phones in the call, even if the initiator’s phone does not support security.
Unified Communications Manager classifies the call
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G
When deploying a new IP telephony system, system administrators and network administrators must complete several tasks to prepare the network for IP for setting up and configuring a complete Cisco IP telephony network, refer to the “System Configuration Overview” chapter in the Cisco Unified Communications Manager System Guide.
telephony service. For information and a checklist
After you have set up the IP telephony system and configured system-wide features in Cisco Unified Communications Manager Administration, you can add IP phones to the system. To add wireless strategic locations for access points (APs) to ensure good wireless voice coverage. For detailed information about a voice over WLAN deployment, refer to the
Guide.
The following topics provide an overview of procedures for adding Cisco Unified IP Phones to your network:
Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications
Installing the Cisco Unified Wireless IP Phone 7925G, page 1-15
IP phones to the IP network, system administrators should conduct a site survey to determine
Cisco Enterprise Mobility 3.0 Design
Manager, page 1-14
Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications Manager
To add phones to the Cisco Unified Communications Manager Administration, you can use:
Auto-registration
Cisco Unified Communications Manager Administration
Bulk Administration Tool (BAT)
BAT and the Tool for Auto-Registered Phones Support (TAPS)
For more information about these choices, see the “Methods for Adding Phones to Cisco
Unified Communications Manager” section on page 3-2.
For general information about configuring phones in Cisco Unified Communications Manager, refer to the “Cisco Unified IP Phone” chapter in the Cisco Unified Communications Manager System Guide.
For a checklist of tasks for configuring the phone in Cisco Unified Communications Manager, see the
“Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications Manager” section on page D-4.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-14
OL-15984-01
Page 29
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G
Related Topics
Installing the Cisco Unified Wireless IP Phone 7925G, page 1-15
Configuring Features, Templates, Services, and Users, page 7-1
Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications
Manager, page D-4
Installing the Cisco Unified Wireless IP Phone 7925G
After you have added the phones to the Cisco Unified Communications Manager Administration, you can complete the phone installation. You or the end users can install the phone at the user location. The Cisco Unified Wireless IP Phone Installation Guide, available online at
http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7925g/7_0/english/install/guide/7925ig.pdf. html, provides directions for assembling the phone and accessories and charging the battery.
Prior to using the phone to connect to the wireless LAN, you need to configure a network profile for the phone. You can use the phone web pages to set up the network profile and other phone settings, or you can configure the network profile using the menus on the phone.
If you use auto-registration that is part of Cisco Unified Communications Manager Administration, you need to update the specific configuration information for the phone such as associating the phone with a user, changing the softkey template, or directory number (DN).
Note Before you install a phone, even if it is new, upgrade the phone to the current firmware image. For
information about upgrading, refer to the Readme file for your phone which is located at:
http://www.cisco.com/cgi-bin/tablebuild.pl/ip-7900ser-crypto.
For a checklist of tasks for installing the phone, see the “Installing the Cisco Unified Wireless
IP Phone 7925G” section on page D-7.
Related Topics
Understanding the Cisco Unified Wireless IP Phone 7925G, page 1-1
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G, page 1-14
Installing the Cisco Unified Wireless IP Phone 7925G, page D-7
Troubleshooting the Cisco Unified Wireless IP Phone 7925G, page 10-1
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-15
Page 30
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-16
OL-15984-01
Page 31
CHA PTER
2
Overview of the VoIP Wireless Network
This chapter provides an overview of the interaction between the Cisco Unified Wireless IP
Phone 7925G and other key components of a VoIP network in a wireless local area network (WLAN)
environment. It contains the following sections:
Understanding the Wireless LAN, page 2-1
Understanding WLAN Standards and Technologies, page 2-3
Bluetooth Wireless Technology, page 2-8
Components of the VoIP Wireless Network, page 2-9
Security for Voice Communications in WLANs, page 2-16
VoIP WLAN Configuration, page 2-21
Site Survey Verification, page 2-22
Understanding the Wireless LAN
With the introduction of wireless communication, wireless IP phones can provide voice communication within the corporate WLAN. The Cisco with wireless access points (APs) and key Cisco Unified
In a traditional LAN, IP phones and computers use cables to transmit messages and data packets. Cisco Unified WLAN delivers security, scalability, reliability, ease of deployment, and management similar to wired LANs. It includes RF capabilities that enable real-time access to core business applications and provides proven enterprise-class secure connectivity. The WLAN is an integrated end-to-end solution that uses wireless IP phones and APs, network infrastructure, network management, and mobility services.
Figure 2-1 shows a typical WLAN topology that enables the wireless transmission of voice for wireless
IP telephony.
Communications Manager Administration, to provide wireless voice communication.
Unified Wireless IP Phone 7925G depends upon and interacts
IP telephony components, including Cisco
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-1
Page 32
Understanding the Wireless LAN
M
113946
Figure 2-1 WLAN with Wireless IP Phones
When a wireless IP phone powers on, it searches for and becomes associated with an AP. As users move from one location to another, the wireless IP phone roams out-of-range of one AP into the range of another AP. The wireless IP phone builds and maintains a list of eligible APs and reconnects to an AP in that list. See
Chapter 2 Overview of the VoIP Wireless Network
“Associating to APs” section on page 2-12 for more information.
The AP uses its connection to the wired network to transmit data and voice packets to and from the switches and routers. Voice signaling is transmitted to the Cisco Unified Communications Manager server for call processing and routing.
APs are critical components in a WLAN because they provide the wireless links or “hot spots” to the network. Cisco requires that the APs supporting voice communications use Cisco IOS Release 12.3(8)JA or later. Cisco IOS software provides features for managing voice traffic.
In some WLANs, each AP has a wired connection to an Ethernet switch, such as a Cisco Catalyst 3750, that is configured on a LAN. The switch provides access to gateways and the Cisco Unified Communications Manager server to support wireless IP telephony.
Some networks have wired components that support wireless components. The wired components could consist of switches, routers, and bridges with special modules to enable wireless capability.
The Cisco Unified WLAN can have the following components:
Cisco Aironet Series Access Points—802.11a/b/g enterprise-class access points with integrated
antennas or antenna connections for easy deployment.
Cisco 2000 Series Wireless LAN Controller—For small to medium sized networks, such as branch
offices. Works with Cisco lightweight access points.
Cisco 4100 Series Wireless LAN Controller—For medium to large deployments. Works with Cisco
lightweight access points.
Cisco 4400 Series Wireless LAN Controller—For large enterprise facilities. The Cisco 4402 and
4404 models support a maximum of 50 and 100 access points respectively.
Cisco Wireless LAN Controller Module for Integrated Services Routers—Enables small-to-medium
businesses and enterprises to deploy and manage secure WLANs at branch offices.
Cisco Catalyst 6500 Series Wireless Services Module (WiSM)—Provides security, mobility,
redundancy, and ease of use for WLAN administrators.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-2
OL-15984-01
Page 33
Chapter 2 Overview of the VoIP Wireless Network
Understanding WLAN Standards and Technologies
Cisco Catalyst 3750 Series Integrated Wireless LAN Controllers—Adds wireless LAN controller
functions to the stackable Cisco Catalyst 3750G Series Switches to improve operating efficiency, security, mobility, and ease of use for WLAN administrators.
Wireless Control System (WCS)—Provides a powerful systems management. System
administrators can design, control, and monitor enterprise WLANs from a centralized location.
Cisco 2700 Series Wireless Location Appliance—802.11 based location tracking solution for asset
tracking, IT management, and location based security. An open API is included.
Cisco Wireless LAN Client Adapters—Available in CardBus, PCMCIA and PCI form factors, Cisco
Aironet Wireless LAN Client Adapters connect desktop and mobile computing devices to the WLAN in 802.11b-compliant or 802.11a-compliant network.
For more information about Cisco Unified Wireless Networks, refer to
http://www.cisco.com/en/US/products/hw/wireless/index.html
Understanding WLAN Standards and Technologies
This section describes the following concepts:
802.11 Standards for WLAN Communications, page 2-3
Radio Frequency Ranges, page 2-4
802.11 Data Rates, Tx Power, Ranges, and Decibel Tolerances, page 2-4
Wireless Modulation Technologies, page 2-5
AP, Channel, and Domain Relationships, page 2-6
WLANs and Roaming, page 2-7
802.11 Standards for WLAN Communications
Wireless LANs must follow the Institute of Electrical and Electronics Engineers (IEEE) 802.11 standards that define the protocols that govern all Ethernet-based wireless traffic. The Cisco Wireless IP
802.11b—Specifies the radio frequency (RF) of 2.4 GHz for both transmitting and receiving data.
Commonly called the Wi-Fi standard.
802.11g—Uses the same unlicensed 2.4 GHz band as 802.11b, but extends the data rates to provide
greater performance by using Orthogonal Frequency Division Multiplexing (OFDM) technology. OFDM is a physical–layer encoding technology for transmitting signals by using RF.
802.11a—Uses the 5 GHz band that provides more channels and improved data rates by using
OFDM technology. Dynamic Frequency Selection (DFS) and Transmit Power Control (TPC) supports this standard.
Phone 7925G supports the following standards:
Unified
802.11d—Enables APs to communicate available radio channels and acceptable power levels. The
Cisco Unified Wireless IP Phone 7925G will always give precedence to 802.11d to determine which channels and powers to use. If the information is unavailable, then the phone will fallback to the locally configured regulatory domain.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-3
Page 34
Understanding WLAN Standards and Technologies
Radio Frequency Ranges
WLAN communications use the following RF ranges:
2.4 GHz—Does not require licensing. To reduce interference within this bandwidth, WLANs
transmit on non-overlapping channels, which are typically limited to three channels, although Japan uses four channels.
Many devices operate in the 2.4 GHz bandwidth including cordless phones and microwave ovens and can interfere with wireless communications. Interference does not destroy the signal, but can reduce the transmission speed from 11 Mbps to 1 Mbps. RF interference can affect voice quality over the wireless network.
5 GHz—Divided into several sections called Unlicensed National Information Infrastructure (UNII)
bands and has four channels each. The channels are spaced at 20 MHz to provide non-overlapping channels and more channels than 802.11b or 802.11g.
Table 2-1 lists frequency band ranges and operating channels by regulatory domain.
Ta b l e 2-1 Frequency Bands and Operating Channels by Regulatory Domain
Regulatory Domain Frequency Band Range Operating Channels
Federal Communications Commission (FCC)
Product number is CP-7925GA-K9
Chapter 2 Overview of the VoIP Wireless Network
2.412-2.462 GHz 11 channels
5.15-5.25 GHz (UNII-1)
5.25-5.35 GHz (UNII-2)
8 of 11 channels
5.725-5.825 (UNII-3)
5.470 - 5.725 (DFS)
5.47-5.725 GHz (pending approval
ETSI (Europe) 2.412-2.472 GHz 13 channels
Product number is CP-7925GE-K9
Japan 2.412-2.472 GHz 13 channels (ODFM)
Product number is CP-7925GPC-CH1-K9
World Product number is CP-7925GW-K9
5.15-5.725 GHz 19 channels
2.412-2.484 GHz 14 channels (CCK)
5.15-5.35 GHz 8 channels
Uses 802.11d to identify band
11 channels
ranges and channels
802.11 Data Rates, Tx Power, Ranges, and Decibel Tolerances
Table 2-2 lists the Tx power capacities, data rates, ranges in feet and meters, and decibels tolerated by
the receiver by 801.11 standard.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-4
OL-15984-01
Page 35
Chapter 2 Overview of the VoIP Wireless Network
Ta b l e 2-2 Tx Power, Data Rates, Ranges, and Decibels by Standard
Understanding WLAN Standards and Technologies
Standard
Maximum Tx Power
1
Data Rate
2
Range
Receiver Sensitivity
802.11a
40mW 6 Mbps 610 ft (186 m) -89 dBm
9 Mbps 610 ft (186 m) -88 dBm
12 Mbps 558 ft (170 m) -86 dBm
18 Mbps 541 ft (165 m) -85 dBm
24 Mbps 508 ft (155 m) -82 dBm
36 Mbps 426 ft (130 m) -80 dBm
48 Mbps 328 ft (100 m) -76 dBm
54 Mbps 295 ft (90 m) -74 dBm
802.11g
40mW 6 Mbps 722 ft (220 m) -90 dBm
9 Mbps 656 ft (200 m) -89 dBm
12 Mbps 623 ft (190 m) -87 dBm
18 Mbps 623 ft (190 m) -85 dBm
24 Mbps 623 ft (190 m) -82 dBm
36 Mbps 492 ft (150 m) -78 dBm
48 Mbps 410 ft (125 m) -74 dBm
54 Mbps 394 ft (120 m) -73 dBm
802.11b
50mW 1 Mbps 1,027 ft (313 m) -95 dBm
2 Mbps 951 ft (290 m) -89 dBm
5.5 Mbps 853 ft (260 m) -89 dBm
11 Mbps 787 ft (240 m) -85 dBm
1. Adjusts dynamically when associating with an AP if the AP client setting is enabled.
2. Advertised rates by the APs are used. If the Restricted Data Rates functionality is enabled in the Cisco Unified Communications Manager Administration phone configuration, then the Traffic Stream Rate Set IE (CCX V4) is used.
Wireless Modulation Technologies
Wireless communications uses the following modulation technologies for signaling:
Direct-Sequence Spread Spectrum (DSSS)—Prevents interference by spreading the signal over the
frequency range or bandwidth. DSSS technology multiplexes chunks of data over several frequencies so that multiple devices can communicate without interference. Each device has a special code that identifies its data packets and all others are ignored. Cisco wireless 802.11b/g products use DSSS technology to support multiple devices on the WLAN.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-5
Page 36
Understanding WLAN Standards and Technologies
Orthogonal Frequency Division Multiplexing (OFDM)—Transmits signals by using RF. OFDM is
a physical–layer encoding technology that breaks one high-speed data carrier into several lower-speed carriers to transmit in parallel across the RF spectrum. OFDM, when used with 802.11g and 802.11a, can support data rates as high as 54 Mbps.
Table 2-3 provides a comparison of data rates, number of channels, and modulation technologies by
standard.
Ta b l e 2-3 Data Rates, Number of Channels, and Modulation Technologies by IEEE Standard
Item 802.11b 802.11g 802.11a
Data Rates 1, 2, 5.5, 11 Mbps 6, 9, 12, 18, 24, 36, 48, 54
Non-overlapping Channels
Wireless Modulation
Chapter 2 Overview of the VoIP Wireless Network
6, 9, 12, 18, 24, 36, 48, 54
Mbps
Mbps
3 (Japan uses 4) 3 (Japan uses 4) Up to 23
DSSS DSSS, ODFM ODFM
AP, Channel, and Domain Relationships
APs transmit and receive RF signals over channels within the 2.4 GHz or 5.1 to 5.8 GHz frequency band. To provide a stable wireless environment and reduce channel interference, you must specify non-overlapping channels for each AP. The recommended channels for 802.11b and 802.11g in North America are 1, 6, and 11.
Regulatory domains determine the number of channels that wireless communications can use within the frequency band. regulatory domains. The Cisco Unified Wireless IP Phone 7925G uses the fourth domain for all other regions in the world. Wireless LANs in the rest of the world use 802.11d to identify band ranges and channels.
Note In a non controller-based wireless network, it is recommended that you statically configure channels for
each AP. If your wireless network uses a controller, use the Auto-RF feature with minimal voice disruption.
The AP coverage area depends on its type of antenna and transmission power. The AP coverage range is from 500 to 1000 feet with effective isotropic radiated power (EIRP) output that scales at 1, 5, 20, and 50 mW. To provide effective coverage, APs need a range overlap of approximately 20 percent to allow uninterrupted connections as phone users roam from one AP to another.
Wireless networks use a service set identifier (SSID). The SSID differentiates one WLAN from another, so all APs and all devices attempting to connect to a specific WLAN must use the same SSID. The SSID groups user devices and associates the group with the APs.
For more information about wireless network components and design, refer to the Overview: Cisco Unified Wireless Network at
http://www.cisco.com/en/US/solutions/ns175/networking_solutions_products_genericcontent0900aecd 80529a5f.html.
Table 2-1 lists the frequency ranges, operating channels, and product numbers for four
For more information about APs, see the “VoIP WLAN Configuration” section on page 2-21.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-6
OL-15984-01
Page 37
Chapter 2 Overview of the VoIP Wireless Network
WLANs and Roaming
Wireless IP phones provide communication mobility to users within the WLAN environment. Unlike cellular phones that have broad coverage, the coverage area for the wireless IP therefore, phone users frequently roam from one AP to another. To understand some of the limitations of roaming with wireless IP phones, these examples provide information about the WLAN environment.
Pre-call Roaming—A wireless IP phone user powers on the phone in the office, and the phone
associates with the nearby AP. The user leaves the building, moves to another building, and then places a call. The phone associates with a different AP in order to place the call from the new location. If the associated AP is within the same Layer 2 VLAN, the IP address remains the same for the phone. But, if the roaming phone crosses a Layer 3 boundary with DHCP enabled, the phone recognizes that it is no longer in the same subnet. The phone requests a new IP address before it can connect to the network and place the call.
Note If a user leaves the WLAN coverage area and then comes back into the same WLAN area, the
phone must reconnect to the network. By pressing a key on the phone, the user activates the phone and increases the scanning rate to speed up reconnecting to the network.
Understanding WLAN Standards and Technologies
phone is smaller;
Mid-call Roaming—A wireless IP phone user is actively engaged in a call and moves from one
building to another. The roaming event occurs when the phone moves into the range of a different AP, and then the phone authenticates and associates with the new AP. The previous AP hands the call over to the new AP while maintaining continuous audio connection without user intervention. As long as the APs are in the same Layer 2 subnet, the wireless IP and the call continues. As a wireless IP new AP. See the
“Authentication Methods” section on page 2-16 for information about
phone roams between APs, it must re-authenticate with each
phone keeps the same IP address
authentication.
If the wireless IP phone user moves from an AP that covers IP Subnet A to an AP that covers IP Subnet B, the phone no longer has an IP address or gateway that is valid within the new subnet and the call can disconnect.
Layer 3 Roaming—With the release of the Cisco Catalyst 6500 Series Wireless LAN Services
Module (WLSM), the Cisco
Unified Wireless IP Phone 7925G now supports Layer 3 roaming for autonomous mode APs. For details about the Cisco WLSM, refer to the product documentation available at:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/cfgnotes/wlsm_1_1/index.htm
Layer 3 roaming with lightweight mode APs is accomplished by controllers that use dynamic interface tunneling. Clients that roam across controllers and VLANS can keep their IP address when using the same SSID.
Fast and Secure Roaming—Cisco Centralized Key Management (CCKM) enables authenticated
client devices to roam securely from one AP to another without any perceptible delay during reassociation. With the support of CCKM protocol, the wireless
IP phone is able to negotiate the handoff from one AP to another more easily. During the roaming process, the phone must scan for the nearby APs, determine which AP can provide the best service, and then reassociate with the new AP. When implementing stronger authentication methods, such as WPA and EAP, the number of information exchanges increases and causes more delay during roaming. To avoid additional delays, use CCKM to manage authentication.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-7
Page 38
Bluetooth Wireless Technology
Note In dual band WLANs, it is possible to roam between 2.4 GHz bands (802.11b/g) and 5 GHz bands
(802.11a). The phone moves out of range of one AP using one band and into the range of another that has the same SSID but is using a different band. This can cause gaps in voice communications. To avoid these communication gaps, try to use only one band for voice communications.
Related Topics
Voice QoS in a Wireless Network, page 2-12
Configuring the Wireless Network for Voice, page 2-22
Chapter 2 Overview of the VoIP Wireless Network
CCKM, a centralized key management protocol, provides a cache of session credentials on the wireless domain server (WDS). As the phone roams from one AP to the next, CCKM compresses the number of message exchanges during roaming by providing a master key stored on the WDS for the AP to use. The reassociation exchange is reduced to two messages, thereby reducing the roaming time.
For details about CCKM, refer to the “Cisco Fast Secure Roaming Application Note” at:
http://www.cisco.com/en/US/products/hw/wireless/ps4570/prod_technical_reference09186a00801 c5223.html
VoIP WLAN Configuration, page 2-21
Bluetooth Wireless Technology
Bluetooth Class 2.0 with Extended Data Rate (EDR) is a short-range wireless technology that is supported by the Cisco Unified Wireless IP Phone 7925G. It supports the Hands-Free Profile version 1.5.
Your Cisco Unified Wireless IP Phone 7925G is a qualified Bluetooth wireless device (Qualified Device ID (QDID) B014396) and provides voice communication over the same wireless LAN that your computer uses.
Bluetooth enables low bandwidth wireless connections within a range of 10 meters. The best performance is in the 1 to 2 meter range. Synchronous voice channels are provided by using circuit switching and asynchronous data channels are provided by using packet switching.
Bluetooth wireless technology operates in the 2.4 GHz band which is the same as the 802.11b/g band. There can be a potential interference issues. It is recommended that you:
Use 802.11a that operates in the 5 GHz band.
Reduce the proximity of other 802.11b/g devices, Bluetooth devices, microwave ovens, and large
metal objects.
Use the Cisco Unified Wireless IP Phone 7925G on the same side of the body as the
Bluetooth-enabled headset.
Pairing Headsets
The Cisco Unified Wireless IP Phone 7925G pairs with headsets using a shared key authentication and encryption method. The authentication process can require a personal identification number (PIN) specific to the headset, commonly “0000.” The Cisco with more than one headset at a time. Pairing is typically performed once for each headset.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-8
Unified Wireless IP Phone 7925G can be paired
OL-15984-01
Page 39
Chapter 2 Overview of the VoIP Wireless Network
Once a device has been paired, its Bluetooth connection is maintained as long as both devices (phone and headset) are enabled and within range of each other. The connection re-establishes itself automatically if either of the devices powers down then powers up. The green-dotted Bluetooth icon indicates whether or not a device is connected.
When headsets are more than 10 meters away from Cisco Unified Wireless IP Phone 7925G, Bluetooth drops the connection after a 15 to 20 second timeout. If the paired headset comes back into range of the Cisco Unified Wireless IP Phone 7925G and the phone is not connected to another Bluetooth headset, then the in-range Bluetooth headset automatically reconnects. For certain phone types that operate in power-save modes, the user may have to “wake-up” the headset by tapping on its operational button to initiate the reconnect.
Note It is recommended that users read the headset user guide for more information about pairing and
connecting the headsets.
Components of the VoIP Wireless Network
Components of the VoIP Wireless Network
The wireless IP phone must interact with several network components in the WLAN to successfully place and receive calls. The following topics describe network components:
Networking Protocols Used with Cisco Unified Wireless IP Phones, page 2-9
Interacting with Cisco Unified Wireless APs, page 2-11
Voice QoS in a Wireless Network, page 2-12
Interacting with Cisco Unified Communications Manager, page 2-14
Interacting with the Dynamic Host Configuration Protocol Server, page 2-15
Networking Protocols Used with Cisco Unified Wireless IP Phones
Cisco Unified IP Phones support several networking protocols for voice communication. Table 2-4 describes the networking protocols that the Cisco Unified Wireless IP Phone 7925G supports.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-9
Page 40
Components of the VoIP Wireless Network
Ta b l e 2-4 Supported Networking Protocols
Networking Protocol Purpose Usage Notes
Cisco Discovery Protocol (CDP)
Dynamic Host Configuration Protocol (DHCP)
IP Messaging protocol that addresses
Chapter 2 Overview of the VoIP Wireless Network
Device-discovery protocol that runs on all Cisco-manufactured equipment.
Using CDP, a device can advertise its existence to other devices and receive information about other devices in the network.
Dynamically allocates and assigns an IP address to network devices.
DHCP enables an IP phone to connect to the network and become operational without the administrator assigning an IP address or configuring additional network parameters.
and sends packets across the network.
Cisco Unified IP Phones use CDP to communicate information such as auxiliary VLAN ID, per-port power management details, and QoS configuration information with the Cisco Catalyst switch.
DHCP is enabled by default. If disabled, you must manually configure the IP address, subnet mask, gateway, and an TFTP server on each phone locally.
Use DHCP custom option 150. With this method, you configure the TFTP server IP address as the option value. For additional supported DHCP configurations, refer to Cisco
Unified
Communications Manager
System Guide.
To communicate using IP, network devices must have an assigned IP address, subnet, and gateway.
Real-Time Control Protocol (RTCP)
Used with the RTP protocol to provide control over the transporting of real-time data, such as interactive voice and video, over data networks.
RTP Standard for transporting real-time
data, such as interactive voice and video, over data networks.
SCCP Uses Cisco-proprietary messages to
communicate between IP devices and Cisco Unified Communications Manager, Release 4.x, 5.1, 6.0, 6.1, and 7.0.
IP addresses, subnet, and gateway identifications are automatically assigned if you are using the Cisco Unified
IP Phone with DHCP. If you are not using DHCP, you must manually assign these properties to each phone locally.
Cisco Unified IP Phones use the RTCP protocol to allow monitoring of the data delivery and minimal control and identification functionality.
Cisco Unified IP Phones use the RTP protocol to send and receive real-time voice traffic from other phones and gateways.
Cisco Unified IP Phones use SCCP protocol for VoIP call signaling and enhanced features such as Message Waiting Indication (MWI).
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-10
OL-15984-01
Page 41
Chapter 2 Overview of the VoIP Wireless Network
Table 2-4 Supported Networking Protocols (continued)
Networking Protocol Purpose Usage Notes
TCP Connection-oriented transport
TFTP Method for transferring files over the
TLS TLS is a standard protocol for
User Datagram Protocol (UDP)
protocol.
network.
On the Cisco Unified IP Phone, TFTP enables you to obtain a configuration file specific to the phone type.
securing and authenticating communications.
Connectionless messaging protocol for delivery of data packets.
Components of the VoIP Wireless Network
Cisco Unified IP Phones use TCP to connect to Cisco Unified
Communications Manager
and to access XML services.
You must have a TFTP server in your network that the DHCP server automatically identifies. If more than one TFTP server is running in your network, you must manually assign a TFTP server to each phone.
When security is implemented, Cisco Unified
IP Phones use the TLS protocol when securely registering with Cisco Unified
Communications
Manager.
Cisco Unified IP Phones receive and process UDP messages. RTP voice traffic runs over UDP.
Related Topics
Understanding the Phone Startup Process, page 3-17
Components of the VoIP Wireless Network, page 2-9
Configuring DHCP Settings, page 5-6
Interacting with Cisco Unified Wireless APs
Wireless IP phones use the same APs as wireless data devices. However, voice traffic over a WLAN requires different equipment configurations and layouts than a WLAN that is used exclusively for data traffic. Data transmission can tolerate a higher level of RF noise, packet loss, and channel contention than voice transmission. Packet loss during voice transmission can cause choppy or broken audio and make the phone call inaudible.
Wireless IP Phones users are mobile and often roam across a campus or between floors in a building while connected to a call. In contrast, data users remain in one place or occasionally move to another location. The ability to roam while maintaining a call is one of the advantages of wireless voice so RF coverage needs to include stairwells, elevators, quiet corners outside conference rooms, and passage ways.
To ensure good voice quality and optimal RF signal coverage, you must perform a site survey. The site survey will determine settings suitable to wireless voice and assist in the design and layout of the WLAN; for example AP placement, power levels, and channel assignments.
After deploying and using wireless voice, you should continue to perform post installation site surveys. When you add a group of new users, install more equipment, or stack large amounts of inventory, you are changing the wireless environment. A post installation survey will verify that the AP coverage is still adequate for optimal voice communications. See the more information.
“Site Survey Verification” section on page 2-22 for
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-11
Page 42
Components of the VoIP Wireless Network
Associating to APs
At startup, the Cisco Unified Wireless IP Phone 7925G scans for APs with SSIDs and encryption types that it recognizes. The phone builds and maintains a list of eligible APs and uses the following variables to determine the best AP.
Received Signal Strength Indicator (RSSI)—Signal strength of available APs within the RF
coverage area. The phone attempts to associate with the AP with the highest RSSI value.
QoS Basic Service Set (QBSS)—Beacon information element (IE) that sends the channel usage of
the AP to the wireless IP effectively handle more traffic.
Note QBSS is not supported when using Wi-Fi 802.11a.
Traffic Specification (TSpec)—Calculation of call limits and WLAN load balancing. The TSpec
value of each voice stream allows the system to allocate bandwidth to voice devices on a first-come, first-served basis. For more information, see
page 2-12.
Chapter 2 Overview of the VoIP Wireless Network
phone. The phone uses the QBSS value to determine whether the AP can
“Voice QoS in a Wireless Network” section on
The wireless IP phone associates with the AP with the highest RSSI and lowest channel usage values (QBSS) that have matching SSID and encryption types.To ensure that voice traffic is handled properly, you must configure the correct QoS in the AP. For configuration information, see
Requirements for VoIP” section on page 2-21.
Related Topics
Security for Voice Communications in WLANs, page 2-16
VoIP WLAN Configuration, page 2-21
Voice QoS in a Wireless Network
Voice traffic on the Wireless LAN, like data traffic, is susceptible to delay, jitter, and packet loss. These issues do not impact the data end user, but have serious implications for a voice call. To ensure that voice traffic receives timely and reliable treatment with low delay and low jitter, you must use Quality of Service (QoS), and use separate virtual LANs (VLANs) for voice and data. By isolating the voice traffic onto a separate VLAN, you can use QoS to provide priority treatment for voice packets when traveling across the network. Also, use a separate VLAN for data traffic, not the default native VLAN which is typically used for all network devices.
You need the following VLANs on the network switches and the APs that support voice connections on the WLAN.
Voice VLAN—Voice traffic to and from the wireless IP phone
“Wireless Network
Data VLAN—Data traffic to and from the wireless PC
Native VLAN—Data traffic to and from other wireless devices
Assign separate SSIDs to the voice and to the data VLANs. If you configure a separate management VLAN in the WLAN, do not associate an SSID with the management VLAN.
By separating the phones into a voice VLAN and marking voice packets with higher QoS, you can ensure that voice traffic gets priority treatment over data traffic resulting in lower packet delay and fewer lost packets.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-12
OL-15984-01
Page 43
Chapter 2 Overview of the VoIP Wireless Network
119160
Downstream
Upstream
Downstream
Upstream
Network
Downstream QoS only
Bi-Directional QoS
Unlike wired networks with dedicated bandwidths, wireless LANs consider traffic direction when implementing QoS. Traffic is classified as upstream or downstream from the point of view of the AP as shown in
Figure 2-2 Voice Traffic in a Wireless Network
Figure 2-2.
Beginning with Cisco IOS release 12.2(11)JA, Cisco Aironet APs support the contention-based channel access mechanism called Enhanced Distributed Coordination Function (EDCF). The EDCF-type of QoS has up to eight queues for downstream (toward the 802.11b/g clients) QoS. You can allocate the queues based on these options:
QoS or Differentiated Services Code Point (DSCP) settings for the packets
Components of the VoIP Wireless Network
Layer 2 or Layer 3 access lists
VLANs for specific traffic
Dynamic registration of devices
Although you can have up to eight queues on the AP, you should use only two queues for voice traffic to ensure the best possible voice QoS. Place voice (RTP) and signaling (SCCP) traffic in the highest priority queue, and place data traffic in a best-effort queue.Although 802.11b/g EDCF does not guarantee that voice traffic is protected from data traffic, you should get the best statistical results by using this queuing model.
Note The Cisco Unified Wireless IP Phone 7925G marks the SCCP signaling packets with a DSCP
value of 24 and RTP packets with DSCP value of 46.
To improve reliability of voice transmissions in a nondeterministic environment, the Cisco Unified Wireless IP
Phone 7925G supports the IEEE 802.11e industry standard and is Wi-Fi Multimedia (WMM) capable. WMM enables differentiated services for voice, video, best effort data and other traffic. However, in order for these differentiated services to provide sufficient QoS for voice packets, only a certain amount of voice bandwidth can be serviced or admitted on a channel at one time. If the network can handle “N” voice calls with reserved bandwidth, when the amount of voice traffic is increased beyond this limit, (to N+1 calls), the quality of all calls suffers.
To help address the problems of VoIP stability and roaming, an initial Call Admission Control (CAC) scheme is required. With CAC, QoS is maintained in a network overload scenario by ensuring that the number of active voice calls does not exceed the configured limits on the AP. The Cisco Wireless IP
Phone 7925G can integrate layer 2 TSpec admission control with layer 3 Cisco Unified
Unified
Communications Manager admission control (RSVP). During times of network congestion, calling or called parties receive a fast busy indication. The system maintains a small bandwidth reserve so wireless phone clients can roam into a neighboring AP (AP), even when the AP is at “full capacity”. After reaching the voice bandwidth limit, the next call is load-balanced to a neighboring AP without affecting the quality of the existing calls on the channel.
OL-15984-01
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-13
Page 44
Chapter 2 Overview of the VoIP Wireless Network
Components of the VoIP Wireless Network
Implementing QoS in the connected Ethernet switch is highly desirable to maintain good voice quality. The COS and DSCP values that the Cisco modified. To configure QoS correctly on the AP, see the
Unified Wireless IP Phone 7925G sets do not need to be
“Wireless Network Requirements for VoIP”
section on page 2-21.
Related Topics
Authentication Methods, page 2-16
Interacting with Cisco Unified Communications Manager, page 2-14
VoIP WLAN Configuration, page 2-21
Interacting with Cisco Unified Communications Manager
Cisco Unified Communications Manager is the call control component in the network that handles and routes calls for the wireless components of the IP telephony system—the phones, access gateways, and the resources—for such features as call conferencing and route planning. When deploying Cisco IP
Phone 7925G, you must use Cisco Unified Communications Manager Release 4.1, 4.2, 4.3, 5.1,
6.0(1), 6.1(1) or 7.0(1) and SCCP protocol.
IP phones. Cisco Unified Communications Manager manages the
Unified Wireless
Before Cisco Unified Communications Manager can recognize a phone, it must register with Cisco Unified
Communications Manager and be configured in the database. For information about setting up phones in Cisco Unified Communications Manager, see the
Cisco Unified Wireless IP Phone 7925G” section on page 1-14.
You can find more information about configuring Cisco Unified Communications Manager to work with the IP phones and IP devices in the Cisco Unified
Cisco Unified
Related Topics
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G, page 1-14
Phone Configuration Files and Profile Files, page 2-14
Communications Manager System Guide.
Phone Configuration Files and Profile Files
Configuration files for a phone define parameters for connecting to Cisco Unified Communications Manager and are stored on the TFTP server. In general, any time you make a change in Cisco Unified configuration file changes automatically.
Configuration files also contain information about the correct image load for the phone. If this image load differs from the one currently loaded on a phone, the phone contacts the TFTP server to request the new image file.
The phone first requests the configuration file SEPxxxxxxxxxxxx.cnf.xml, where each xx is the two-digit lowercase hexadecimal representation of each integer in the MAC address. If the phone cannot find this file, it requests the configuration file XMLDefault.cnf.xml.
After the phone obtains the *.cnf.xml files, it requests a phone-specific profile file. If a phone cannot find this profile file, it requests the appropriate common profile file.
Communications Manager Administration that requires resetting the phone, the phone
“Overview of Configuring and Installing the
Communications Manager Administration Guide and
After the phone finds one of the profile files, or if it cannot find a profile file, it continues with its startup process.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-14
OL-15984-01
Page 45
Chapter 2 Overview of the VoIP Wireless Network
Components of the VoIP Wireless Network
Related Topic
Understanding the Phone Startup Process, page 3-17
Interacting with the Dynamic Host Configuration Protocol Server
Dynamic Host Configuration Protocol (DHCP) is a communications protocol that lets network administrators manage and automate the assignment of IP addresses in a network. When an IP device is added to the network, it must have a unique IP address. Without DHCP, the IP address must be entered manually at each device. DHCP allocates IP addresses dynamically and reuses IP addresses when devices no longer need them.
If DHCP is enabled in the network, the Cisco Unified Wireless IP Phone 7925G uses the DHCP scope settings in the DHCP server to perform the phone provisioning bootup process. You must configure the settings of the DHCP server in the Cisco Unified
The DHCP scope settings include the following:
TFTP servers
DNS server IP address (optional unless using host names)
Communications Manager network.
Pool and range of the subnet mask, IP address, and gateway
The priority of the DHCP settings for the TFTP server is unique to the Cisco Unified Wireless IP
Phone 7925G, as shown in Table 2-5.
Ta b l e 2-5 DHCP Settings Priority
Priority DHCP Settings
1st DHCP option 150
2nd DHCP option 66
3rd SIADDR
4th ciscoCM1
If DHCP is disabled, the Cisco Unified Wireless IP Phone 7925G uses the following network settings in
Table 2-6 to perform the phone provisioning bootup process. You must configure these static parameters
for each Cisco Unified Wireless IP Phone 7925G.
Ta b l e 2-6 Static IP Addresses When DHCP is Disabled
Static Setting Description
IP Address IP address, the unique identifier assigned by the system administrator
for the phone.
Subnet Mask Used to partition the IP address into a network identifier and host
identifier so TCP/IP can distinguish between them.
Default Router 1 Identifies the gateway that provides connectivity to the IP network
beyond the subnet to which the phone belongs.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-15
Page 46
Chapter 2 Overview of the VoIP Wireless Network
Security for Voice Communications in WLANs
Table 2-6 Static IP Addresses When DHCP is Disabled (continued)
Static Setting Description
DNS Server 1
DNS Server 2
TFTP Server 1
TFTP Server 2
If the system is configured to use host names for servers instead of IP addresses, identifies the primary and secondary DNS server to resolve host names.
Identifies the TFTP servers that the phone uses to obtain configuration files.
Security for Voice Communications in WLANs
Because all WLAN devices that are within range can receive all other WLAN traffic, securing voice communications is critical in WLANs. To ensure that voice traffic is not manipulated or intercepted by intruders, the Cisco SAFE Security architecture. For more information about security in networks, refer to
http://www.cisco.com/en/US/netsol/ns744/networking_solutions_program_home.html.
This section contains the following items:
Unified Wireless IP Phone 7925G and Cisco Aironet APs are supported in the Cisco
Authentication Methods, page 2-16
Authenticated Key Management, page 2-18
Encryption Methods, page 2-18
Choosing AP Authentication and Encryption Methods, page 2-18
Authentication Methods
The Cisco Wireless IP telephony solution provides wireless network security that prevents unauthorized logins and compromised communications by using the following authentication methods.
Open Authentication—Any wireless device can request authentication in an open system. The AP
that receives the request may grant authentication to any requestor or only to requestors on a list of users. Communication between the wireless device and AP could be non-encrypted or devices can use Wired Equivalent Privacy (WEP) keys to provide security. Devices that are using WEP only attempt to authenticate with an AP that is using WEP.
Shared Key Authentication—The AP sends an unencrypted challenge text string to any device
attempting to communicate with the AP. The device that is requesting authentication uses a pre-configured WEP key to encrypt the challenge text and sends it back to the AP. If the challenge text is encrypted correctly, the AP allows the requesting device to authenticate. A device can authenticate only if its WEP key matches the WEP key on the APs.
Shared key authentication can be less secure than open authentication with WEP because someone can monitor the challenges. An intruder can calculate the WEP key by comparing the unencrypted and encrypted challenge text strings.
Wireless Protected Access (WPA) Pre-Shared Key (PSK) Authentication—The AP and the phone
are configured with the same authentication key. The pre-shared key is used to create unique pair-wise keys that are exchanged between each phone and the AP. You can configure the pre-shared key as a hexadecimal or ASCII character string. Because the pre-shared key is stored on the phone, it might be compromised if the phone is lost or stolen.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-16
OL-15984-01
Page 47
Chapter 2 Overview of the VoIP Wireless Network
Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST)
Authentication—This client server security architecture encrypts EAP transactions within a
Transport Level Security (TLS) tunnel between the AP and the RADIUS server such as the
Cisco
Access Control Server (ACS).
The TLS tunnel uses Protected Access Credentials (PACs) for authentication between the client
(phone) and the RADIUS server. The server sends an Authority ID (AID) to the client (phone),
which in turn selects the appropriate PAC. The client (phone) returns a PAC-Opaque to the RADIUS
server. The server decrypts the PAC with its master-key. Both end points now have the PAC key
and a TLS tunnel is created. EAP-FAST supports automatic PAC provisioning, but you must enable
it on the RADIUS server.
Note In the Cisco ACS, by default, the PAC expires in one week. If the phone has an expired PAC,
authentication with the RADIUS server takes longer while the phone gets a new PAC. To avoid the PAC provisioning delays, set the PAC expiration period to 90 days or longer on the ACS or RADIUS server.
Extended Authentication Protocol Transport Level Security (EAP-TLS)
Authentication—EAP–TLS/RFC 2716 uses the TLS protocol (RFC 2246), which is the latest IETF
version of the SSL security protocol. TLS provides a way to use certificates for both user and server
authentication, and for dynamic session key generation.
Microsoft Windows XP provides support for 802.1x, allowing EAP authentication protocols
(including EAP-TLS) to be used for authentication. The authentication used in EAP-TLS is mutual:
the server authenticates the user and the user authenticates the server. Mutual authentication is
required in a WLAN. EAP-TLS provides excellent security but requires client certificate
management.
Security for Voice Communications in WLANs
EAP-TLS uses Public Key Infrastructure (PKI) with the following conditions:
Wireless LAN client (user machine) requires a valid certificate to authenticate to the WLAN network.
AAA server requires a “server” certificate to validate its identity to the clients.
Certificate Authority (CA) server infrastructure issues certificates to the AAA server and the clients.
Protected Extensible Authentication Protocol (PEAP) Authentication—PEAP uses server-side
public key certificates to authenticate clients by creating an encrypted SSL/TLS tunnel between the
client and the authentication server.
PEAP with Server Certificate Authentication—The Cisco Unified Wireless IP Phone 7925G can
validate the server certificate during the authentication handshakes over an 802.11 wireless link.
This functionality is disabled by default and is enabled in Cisco Unified Communications Manager
Administration.
The exchange of authentication information is encrypted and the user credentials are safe from
eavesdropping. MS-CHAP v2 is the supported inner authentication protocol.
Light Extensible Authentication Protocol (LEAP)—Cisco proprietary password-based mutual
authentication scheme between the client (phone) and a RADIUS server. Cisco
IP
Phone 7925G can use LEAP for authentication with the wireless network.
Unified Wireless
This section describes the following concepts:
Authenticated Key Management, page 2-18
Encryption Methods, page 2-18
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-17
Page 48
Security for Voice Communications in WLANs
Authenticated Key Management
The following authentication schemes use the RADIUS server to manage authentication keys:
WPA—Uses information on a RADIUS server to generate unique keys for authentication. Because
these keys are generated at the centralized RADIUS server, WPA provides more security than WPA pre-shared keys that are stored on the AP and phone.
Cisco Centralized Key Management (CCKM)—Uses information on a RADIUS server and a
wireless domain server (WDS) to manage and authenticate keys. The WDS creates a cache of security credentials for CCKM-enabled client devices for fast and secure reauthentication.
With WPA and CCKM, encryption keys are not entered on the phone, but are automatically derived between the AP and phone. But the EAP username and password that are used for authentication must be entered on each phone.
Encryption Methods
To ensure that voice traffic is secure, the Cisco Unified Wireless IP Phone 7925G supports WEP, TKIP, and Advanced Encryption Standards (AES) for encryption. When using these mechanisms for encryption, both the signaling Skinny Client Control Protocol (SCCP) packets and voice Real-Time Transport Protocol (RTP) packets are encrypted between the AP and the wireless IP phone.
Chapter 2 Overview of the VoIP Wireless Network
WEP—When using WEP in the wireless network, authentication happens at the AP by using open
or shared-key authentication. The WEP key that is setup on the phone must match the WEP key that is configured at the AP for successful connections. The Cisco supports WEP keys that use 40-bit encryption or a 128-bit encryption and remain static on the phone and AP.
EAP and CCKM authentication can use WEP keys for encryption. The RADIUS server manages the WEP key and passes a unique key to the AP after authentication for encrypting all voice packets; consequently, these WEP keys can change with each authentication.
TKIP—WPA and CCKM use TKIP encryption that has several improvements over WEP. TKIP
provides per-packet key ciphering and longer initialization vectors (IVs) that strengthen encryption. In addition, a message integrity check (MIC) ensures that encrypted packets are not being altered. TKIP removes the predictability of WEP that helps intruders decipher the WEP key.
AES—An encryption method used for WPA2 authentication. This national standard for encryption
uses a symmetrical algorithm that has the same key for encryption and decryption. AES uses Cipher Blocking Chain (CBC) encryption of 128 bits in size, supporting key sizes of 128, 192 and 256 bits, as a minimum.
Note The Cisco Unified Wireless IP Phone 7925G does not support Cisco Key Integrity Protocol
(CKIP) with CMIC.
Choosing AP Authentication and Encryption Methods
Unified Wireless IP Phone 7925G
Authentication and encryption schemes are setup within the wireless LAN. VLANS are configured in the network and on the APs and specify different combinations of authentication and encryption. An SSID is associated with a VLAN and its particular authentication and encryption scheme. In order for wireless client devices to authenticate successfully, you must configure the same SSIDs with their authentication and encryption schemes on the APs and on the wireless IP
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-18
phone.
OL-15984-01
Page 49
Chapter 2 Overview of the VoIP Wireless Network
Some authentication schemes require specific types of encryption. With Open authentication, you have the option to use static WEP for encryption for added security. But if you are using Shared Key authentication, you must set static WEP for encryption, and you must configure a WEP key on the phone.
When using Authenticated Key Management (AKM) for the Cisco Unified Wireless IP Phone 7925G, several choices for both authentication and encryption can be set up on the APs with different SSIDs. When the phone attempts to authenticate, it chooses the AP that advertises the authentication and encryption scheme that the phone can support. Auto (AKM) mode can authenticate by using WPA, WPA2, WPA Pre-shared key, or CCKM.
Note When using WPA Pre-shared key or WPA2 Pre-shared key, the pre-shared key must be statically
set on the phone. These keys must match the keys configured on the AP.
When using Auto (AKM), encryption options are automatically configured for WPA, WPA2, WPA
Pre-shared key, WPA2 Pre-shared key, or CCKM.
In AKM mode, the phone will authenticate with LEAP if it is configured with WPA, WPA2, or
CCKM key management.
The Cisco Unified Wireless IP Phone 7925G does not support auto EAP negotiation; to use
EAP-FAST mode, you must specify it.
Security for Voice Communications in WLANs
If AKM and 802.1x are used, the authentication method is LEAP.
The Cisco Unified Wireless IP Phone 7925G uses network EAP for 802.1x but you can enable open
EAP.
Table 2-7 provides a list of authentication and encryption schemes configured on the Cisco Aironet APs
supported by the Cisco Unified Wireless IP Phone 7925G. The table shows the network configuration option for the phone that corresponds to the AP configuration.
Ta b l e 2-7 Authentication and Encryption Schemes
Cisco Unified Wireless
Cisco AP Configuration
Authentication
Key Management
Common Encryption
IP
Phone 7925G Configuration
Authentication
Open None Open
Open (Static WEP) WEP Open+WEP
Shared key (Static WEP) WEP Shared+WEP
LEAP
Optional CCKM WEP LEAP or Auto (AKM)
802.1x
LEAP
WPA
LEAP
WPA with
TKIP LEAP or Auto (AKM)
Optional CCKM
WPA2 AES LEAP or Auto (AKM)
WPA2
EAP-FAST
Optional CCKM WEP EAP-FAST
802.1x
EAP-FAST with WPA WPA
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
TKIP EAP-FAST
Optional CCKM
2-19
Page 50
Security for Voice Communications in WLANs
Table 2-7 Authentication and Encryption Schemes (continued)
Cisco AP Configuration
Authentication
EAP-FAST with WPA2 WPA2 AES EAP-FAST
EAP-TLS
802.1x
EAP-TLS
WPA
EAP-TLS
WPA2
PEAP
802.1x
PEAP
WPA
PEAP
WPA2
WPA
Open and Network EAP
WPA-PSK WPA-PSK TKIP Auto (AKM)
WPA2-PSK WAP2-PSK AES Auto (AKM)
Chapter 2 Overview of the VoIP Wireless Network
Cisco Unified Wireless IP Phone 7925G Configuration
Key Management
Common Encryption Authentication
Optional CCKM WEP EAP-TLS
WPA with
TKIP EAP-TLS
optional CCKM
WPA2 AES EAP-TLS
Optional CCKM WEP PEAP
WPA with
TKIP PEAP
optional CCKM
WPA2 AES PEAP
WPA
TKIP Auto (AKM) with WPA
Optional CCKM
2-20
For additional information about Cisco WLAN Security, refer to
http://www.cisco.com/en/US/products/hw/wireless/ps430/prod_brochure09186a00801f7d0b.html
For more information about configuring authentication and encryption schemes on APs, refer to the Cisco Aironet Configuration Guide for your model and release at this URL:
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_installation_and_configuration_g uides_list.html
Related Topics
Networking Protocols Used with Cisco Unified Wireless IP Phones, page 2-9
Authentication Methods, page 2-16
Encryption Methods, page 2-18
Interacting with Cisco Unified Communications Manager, page 2-14
Components of the VoIP Wireless Network, page 2-9
VoIP WLAN Configuration, page 2-21
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Page 51
Chapter 2 Overview of the VoIP Wireless Network
VoIP WLAN Configuration
This section provides configuration guidelines for deploying wireless IP phones in the WLAN and includes these topics:
Wireless Network Requirements for VoIP, page 2-21
VoIP WLAN Configuration, page 2-21
Wireless Network Requirements for VoIP
The Cisco Unified Wireless IP Phone 7925G supports Cisco Aironet APs (APs) that can run Cisco IOS in autonomous mode and APs that run in lightweight mode with lightweight AP protocol (LWAPP) and use a Cisco Unified wireless LAN controller. mode in the WLAN.
When configuring VoWLAN, use APs that run Cisco IOS Release 12.3(8)JA or later. It is recommended that Cisco Aironet 1130AG, 1240AG, 1250 series APs run Cisco IOS Release 12.3(4g)JA1 or later.
Controllers should be running version 4.0217.0 (minimum) or version 4.2.61.0 or later, which is recommended. The controllers should have Cisco IOS Release 12.3(8)JX or later configured also.
VoIP WLAN Configuration
Table 2-8 lists the supported AP models and operation
Note Voice over the wireless LAN (VoWLAN) does not currently support MESH technology such as Cisco
Aironet 1500 Series Lightweight Outdoor Mesh APs or third-party APs are not supported.
Ta b l e 2-8 Supported APs and Modes
AP Models Autonomous Mode Lightweight Mode
Cisco Aironet 500 Series Yes Yes
Cisco Aironet 1100 Series Yes Yes
Cisco Aironet 1130AG Series Yes Yes
Cisco Aironet 1200 Series Yes Yes
Cisco Aironet 1230 Series Yes Yes
Cisco Aironet 1240AG Series Yes Yes
Cisco Aironet 1250 Series Yes Yes
Cisco Aironet 1300 Series Yes Yes
Cisco 1000 Series Lightweight No Yes
Note Be aware that Wi-Fi compliant APs that are manufactured by third-party vendors can function with the
Cisco
Unified Wireless IP Phone 7925G, but might not support key features such as Dynamic Transmit
Power Control (DTPC), ARP-caching, LEAP/EAP-FAST, QBSS, U-APSD, 802.11d and 802.11h.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-21
Page 52
Site Survey Verification
Configuring the Wireless Network for Voice
This section identifies key AP configuration options that are required for optimal voice performance. This is not a complete list of configuration steps or options for deploying APs such as the Cisco Aironet APs. For more information about configuring your AP, refer to the appropriate Cisco installation and configuration guide for your model or the documentation for your AP.
Note When deploying the Cisco Unified Wireless IP Phone 7925G with World regulatory domain
(CP-7925GW-K9), you must enable the APs for world mode (802.11d). The world model phone gets the channels and power information from the AP.
To see a list of configuration tasks for the Cisco Aironet AP, controller, and Ethernet switch when setting up VoIP on the WLAN, see the
Configuration Tip for Cisco Aironet APs
If you are using EAP-FAST, you must increase the EAP request (802.1x) timeout to at least 20 seconds to ensure that the phone gets the PAC credentials successfully.
To change the request timeout on the controller, follow these steps:
“Configuring a Wireless Network” section on page D-1.
Chapter 2 Overview of the VoIP Wireless Network
Aironet AP
Procedure
Step 1 Use SSH or Telnet to access the Cisco Unified wireless LAN controller.
Step 2 Enter config advanced eap request-timeout 20
Step 3 Enter save config
Step 4 Enter y to confirm.
Site Survey Verification
Before the initial deployment of wireless phones in the WLAN, it is recommended that a site survey is performed to verify that the APs are providing adequate coverage and that wireless phones can roam from one AP to another with no audio problems. After the initial deployment, it is a good practice to perform site surveys at regular intervals to ensure continued coverage and roaming.
From the Cisco Unified Wireless IP Phone 7925G, you can use the Neighbor List utility or Site Survey utility from the SETTINGS > Status menu.
The Neighbor List utility provides information about the current AP and the closest neighbors tracked by the phone. For more information see
The Site Survey utility produces a report, written as a temporary HTML file, upon termination of the survey. This Site Survey Report is accessible from the phone web page for viewing or forwarding to Cisco
TAC for troubleshooting purposes. For more information, see Using the Site Survey Utility,
page 2-24.
Using the Neighbor List Utility, page 2-23.
You should use the wireless IP phone and the Aironet Client Utility (ACU) to verify that the signal range and transmission power provide adequate coverage for roaming phones.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-22
OL-15984-01
Page 53
Chapter 2 Overview of the VoIP Wireless Network
Use the following topics for information about performing the site survey:
Performing a Site Survey Verification, page 2-23
Using the Neighbor List Utility, page 2-23
Using the Site Survey Utility, page 2-24
Performing a Site Survey Verification
Perform these tasks to verify wireless voice network operation. Check that the wireless IP phones:
1. Associate with all APs in the WLAN.
2. Authenticate with all APs in the WLAN.
3. Register with Cisco Unified Communications Manager.
4. Can make stationary phone calls with good quality audio.
5. Can make roaming phone calls with good quality audio and no disconnections.
6. Can place multiple calls, especially in areas designated for high density use.
After phones are installed, request that users report any problems when using their wireless IP phones.
Site Survey Verification
When you perform a site survey verification and encounter problems, see the Chapter 10,
“Troubleshooting the Cisco Unified Wireless IP Phone 7925G” for assistance with finding the cause of
the problem.
Related Topics
Using the Neighbor List Utility, page 2-23
Using the Site Survey Utility, page 2-24
Using the Neighbor List Utility
The Neighbor List utility displays a list of the current AP and the closest neighbors tracked by the phone. The phone typically does not scan while it is idle, so often there is only one entry, which is the currently associated AP, in the list.
To use the Neighbor List utility, follow these steps:
Procedure
Step 1 Configure the Cisco Unified Wireless IP Phone 7925G with the same SSID and
encryption/authentication settings as the APs.
Step 2 Power on the phone so that it associates with the WLAN.
Step 3 Choose SETTINGS > Status > Neighbor List.
The phone displays the current AP and the closest neighbors. For example:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-23
Page 54
Site Survey Verification
Step 4 To see more information about an AP, scroll to the desired line and press Details. The following is an
Step 5 To verify the ability to roam between APs, walk through all areas where phones are used and take
Step 6 Adjust AP and antenna placement and AP power settings to provide approximately 20 percent coverage
Chapter 2 Overview of the VoIP Wireless Network
SSID: abcd
Channel
Channel BSSID RSSI
Utilization
01 19:50 -38 50
06 cf:d0 -51 38
11 7b:b0 -42 61
example of the details for a specific AP:
SSID: abcd Channel:06 BSSID: 00:13:1a:16:cf:d0 RSSI:-51 CU:38
readings. Approach areas from different directions to assure successful roaming conditions.
overlap.
Using the Site Survey Utility
The Site Survey utility is used to actively and passively scan the wireless medium across all channels and locate APs that belong to the Basic Service Set (BSS). The results of the scans are then used help to identify areas of low coverage, if any, and to determine whether the APs are configured consistently as recommended in the Cisco deployment guidelines.
When you start the Site Survey utility, the phone disassociates from the current AP and remains disassociated for the duration of the operation.
For more information, see Viewing the Site Survey Report on the Web, page 4-38.
Caution During Site Survey, both active and passive scans are performed at a rapid rate. These scans will result
in the phone battery life depleting faster than normal and might cause disruption to the wireless medium.
To use the Site Survey utility, follow these steps:
Procedure
Step 1 Configure the Cisco Unified Wireless IP Phone 7925G with the same SSID and
encryption/authentication settings as the APs.
Step 2 Power on the phone so that it associates with the WLAN.
Step 3 Choose SETTINGS > Status > Site Survey.
The phone displays a list of APs within range that have the same SSID and security settings as the phone. To see more information about an AP, scroll to the desired line and press Details.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-24
OL-15984-01
Page 55
Chapter 2 Overview of the VoIP Wireless Network
Step 4 To verify the ability to roam between APs, walk through all areas where phones are used and take
readings. Approach areas from different directions to assure successful roaming conditions.
Step 5 Adjust AP and antenna placement and AP power settings to provide approximately 20 percent coverage
overlap.
Step 6 When you terminate the site survey, a report is generated for your viewing from the phone web page.
For more information, see
In addition to the Site Survey utility in the Cisco Unified Wireless IP Phone 7925G, you can also use the Cisco Aironet Client Utility Site Survey Utility from a laptop PC. Refer to the section on “Performing a Site Survey” in the for your system.
Related Topics
Performing a Site Survey Verification, page 2-23
Viewing the Site Survey Report on the Web, page 4-38
Site Survey Verification
Viewing the Site Survey Report on the Web, page 4-38.
Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-25
Page 56
Site Survey Verification
Chapter 2 Overview of the VoIP Wireless Network
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-26
OL-15984-01
Page 57
Setting Up the Cisco Unified Wireless IP Phone 7925G
This chapter includes the following topics, which help you install and configure the Cisco Unified Wireless IP
Before You Begin, page 3-1
Installing the Cisco Unified Wireless IP Phone 7925G, page 3-7
Understanding the Phone Startup Process, page 3-17
Before You Begin
Before installing a Cisco Unified Wireless IP Phone 7925G, review the requirements in these sections:
Network Requirements, page 3-1
CHA PTER
Phone 7925G on an IP telephony network:
3
Methods for Adding Phones to Cisco Unified Communications Manager, page 3-2
Device Support, page 3-5
Safety Information, page 3-5
Network Requirements
For the Cisco Unified Wireless IP Phone 7925G to successfully operate as a Cisco Unified IP Phone endpoint, your network must support these requirements:
Voice over Wireless LAN
Cisco Aironet Access Points (APs) configured to support Voice over WLAN (VoWLAN)
Controllers and switches configured to support VoWLAN
Security implemented for authenticating wireless voice devices and users
Note You must verify that your wireless network is configured properly for voice service. For more
information, see the “Performing a Site Survey Verification” section on page 2-23.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-1
Page 58
Before You Begin
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
VoIP Network
Cisco routers and gateways configured for VoIP
One of these call–control products installed and configured:
Cisco Unified Communications Manager Release 4.3, 5.1, 6.0(1), 6.1(1), or 7.0(1)
Cisco Unified Communications Manager Express 4.3 or later
IP network configured to support DHCP or manual assignment of IP address, gateway, and subnet
mask
Related Topics
Features Supported on the Cisco Unified Wireless IP Phone 7925G, page 1-6
Understanding the Wireless LAN, page 2-1
Methods for Adding Phones to Cisco Unified Communications Manager, page 3-2
Installing the Cisco Unified Wireless IP Phone 7925G, page 3-7
Powering On the Cisco Unified Wireless IP Phone 7925G, page 3-15
Methods for Adding Phones to Cisco Unified Communications Manager
Before installing the wireless IP phone, you must choose a method for adding phones to the Cisco
Unified Communications Manager database. Some methods require entering the MAC address of
the phone.
Ta b l e 3-1 Methods for Adding Phones to the Cisco Unified Communications Manager
Method
Auto-registration No Results in automatic assignment of
Auto-registration with the Tool for Auto-Registered Phones Support (TAPS)
BAT Yes Allows for simultaneous registration of
Cisco Unified Communications Manager Administration only
Table 3-1 provides an overview of these methods.
Database
Requires MAC Address?
No Requires auto-registration and Bulk
Yes Requires phones to be added
Notes
directory numbers
Administration Tool (BAT); updates information in the Cisco Unified IP Phone and in Cisco Unified
Communications Manager
Administration
multiple phones
individually
The following sections describe methods for adding phones:
Adding Phones with Auto-Registration, page 3-3
Adding Phones with Auto-Registration and TAPS, page 3-3
Adding Phones with BAT, page 3-4
Adding Phones with Cisco Unified Communications Manager Administration, page 3-4
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-2
OL-15984-01
Page 59
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Adding Phones with Auto-Registration
Use auto-registration to enter phones into the Cisco Unified Communications Manager database without first gathering MAC Cisco
Unified Communications Manager automatically assigns the next available sequential directory
number (DN) to new phones during the initial phone startup process.
After registering the phones, you can modify settings, such as the DNs and device pools, by using Cisco
Unified Communications Manager Administration.
Note Auto-registration is disabled by default in Cisco Unified Communications Manager Administration.
You must enable and properly configure auto-registration before connecting any Cisco to the network. For information about enabling and configuring auto-registration, refer to Cisco Unified Communications Manager Administration Guide.
Related Topics
Adding Phones with Auto-Registration and TAPS, page 3-3
Adding Phones with BAT, page 3-4
addresses from the phones. When auto-registration is enabled,
Before You Begin
Unified IP Phone
Adding Phones with Cisco Unified Communications Manager Administration, page 3-4
Adding Phones with Auto-Registration and TAPS
Use auto-registration and TAPS to add phones to the Cisco Unified Communications Manager database. Add the phones first by using BAT to the Cisco dummy MAC addresses. Then use TAPS to update MAC configurations for the phones.
To implement TAPS, dial a TAPS DN and follow voice prompts. When the process is complete, the phone has downloaded its DN and other settings. The correct MAC address for the phone is updated in Cisco
Unified Communications Manager Administration.
Note You must enable auto-registration in Cisco Unified Communications Manager Administration for TAPS
to function.
For Cisco Unified Communications Manager Release 5.0 and prior releases, refer to Bulk Administration
Tool User Guide for Cisco Unified TAPS. For Cisco Unified Communications Manager Release 6.0(1), 6.1(1), and 7.0(1) refer to Cisco Unified Communications Manager Bulk Administration Guide.
Related Topics
Adding Phones with Auto-Registration, page 3-3
Communications Manager for detailed instructions about BAT and
Unified Communications Manager database with
addresses and download pre-defined
Adding Phones with Cisco Unified Communications Manager Administration, page 3-4
Adding Phones with BAT, page 3-4
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-3
Page 60
Before You Begin
Adding Phones with BAT
Add a group of phones to the Cisco Unified Communications Manager database by using BAT. This tool performs batch operations, including registration, on multiple phones. You need the MAC addresses for each phone before you use BAT.
Table 3-2 describes how to determine the MAC address of the wireless IP phone.
Ta b l e 3-2 Determining the MAC Address of the Phone
Method For More Information
Choose SETTINGS > Model Information > MAC Address and look at the MAC Address
field.
Remove the battery and look on the back of the phone.
Note BAT is included in Cisco Unified Communications Manager 5.0 or later, but it is a plug-in for prior
releases.
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
See “Viewing Model Information” section on
page 8-7
See the “Installing or Removing the Phone
Battery” section on page 3-8
For detailed instructions about using BAT, refer to the following documents:
For Cisco Unified Communications Manager Release 5.0 and prior releases, refer to Bulk
Administration Tool User Guide for Cisco Unified
For Cisco Unified Communications Manager Release 6.0(1), 6.1(1), and 7.0(1), refer to Cisco
Communications Manager.
Unified Communications Manager Bulk Administration Guide.
Note When using BAT to add Cisco Unified Wireless IP Phones, use the default setting for the phone load.
The phone load name includes symbols (-, _,.) and BAT does not permit symbols in an entry.
Related Topics
Adding Phones with Auto-Registration, page 3-3
Adding Phones with Auto-Registration and TAPS, page 3-3
Adding Phones with Cisco Unified Communications Manager Administration, page 3-4
Adding Phones with Cisco Unified Communications Manager Administration
Add phones individually by using Cisco Unified Communications Manager Administration. To do so, obtain the MAC address for each phone before you begin. See the
Unified Communications Manager” section on page 3-2 for instructions.
Perform one of the following after collecting the MAC addresses:
Cisco Unified Communications Manager 5.0, 6.0(1), 6.1(1), or 7.0(1)—Choose Device > Phone and
click Add New.
“Methods for Adding Phones to Cisco
Cisco Unified Communications Manager 4.x—Choose Device > Add a New Device.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-4
OL-15984-01
Page 61
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
For additional instructions and conceptual information about Cisco Unified Communications Manager, refer to Cisco Unified
Unified
Related Topics
Adding Phones with Auto-Registration, page 3-3
Adding Phones with Auto-Registration and TAPS, page 3-3
Adding Phones with BAT, page 3-4
Communications Manager System Guide.
Communications Manager Administration Guide and to Cisco
Device Support
Cisco Unified Communications Manager Release 4.1, 4.2, 4.3, 5.1, 6.0, 6.1, and 7.0(1) require a device package or service release update installed to enable device support for the Cisco IP
Phone 7925G. Device packages including support for the Cisco Unified Wireless IP Phone 7925G are
available at
http://www.cisco.com/kobayashi/sw-center/sw-voice.shtml.
Before You Begin
Unified Wireless
Safety Information
Review the following warnings before installing the Cisco Unified IP Phone. To see translations of these warnings, refer to the
Phone 7920G and Peripheral Devices document that accompanied this device.
Warning
Warning
Warning
This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device.
Statement 1071
Read the installation instructions before connecting the system to the power source.
This equipment will not be able to access emergency services during a power outage because of reliance on utility power for normal operation. Alternative arrangements should be made for access to emergency services. Access to emergency services can be affected by any call-barring function of this equipment.
Regulatory Compliance and Safety Information for the Cisco Unified Wireless IP
Statement 1004
Warning
Warning
OL-15984-01
Do not use the Cisco Unified Wireless IP Phone 7925G in hazardous environments such as areas where high levels of explosive gas may be present. Check with the site safety engineer before using any type of wireless device in such an environment.
The plug-socket combination for the battery charger must be accessible at all times, because it serves as the main disconnecting device.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
Statement 1019
3-5
Page 62
Before You Begin
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Warning
The battery charger requires short-circuit (overcurrent) protection to be provided as part of the building installation. Install only in accordance with national and local wiring regulations.
1045
Warning
Warning
The power supply must be placed indoors.
Ultimate disposal of this product should be handled according to all national laws and regulations.
Statement 1040
Warning
Telephone receivers produce a magnetic field that can attract small magnetic objects such as pins and staples. To avoid the possibility of injury, do not place the handset where such objects may be picked up.
Battery Safety Notices
The following battery safety notices apply to the batteries that are approved by the Cisco Unified Wireless IP
Warning
There is the danger of explosion if the battery is replaced incorrectly. Replace the battery only with the same or equivalent type recommended by the manufacturer. Dispose of used batteries according to the manufacturer’s instructions.
Statement
Statement 331
Phone 7925G manufacturer.
Statement 1015
3-6
Warning
Caution The battery pack is intended for use only with this device.
Caution Do not disassemble, crush, puncture, or incinerate the battery pack.
Caution To avoid risk of fire, burns, or damage to your battery pack, do not allow a metal object to touch the
Do not dispose of the battery pack in fire or water. The battery may explode if placed in a fire.
battery contacts.
Caution Handle a damaged or leaking battery with extreme care. If you come in contact with the electrolyte, wash
the exposed area with soap and water. If the electrolyte has come in contact the eye, flush the eye with water for 15 minutes and seek medical attention.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Page 63
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Caution Do not charge the battery pack if the ambient temperature exceeds 104 degrees Fahrenheit (40 degrees
Celsius).
Caution Do not expose the battery pack to high storage temperatures (above 140 degrees Fahrenheit, 60 degrees
Celsius).
Caution When discarding a battery pack, contact your local waste disposal provider regarding local restrictions
on the disposal or recycling of batteries.
To obtain a replacement battery, contact your local dealer. Use only the batteries that have the following Cisco part numbers.
Standard battery—CP-BATT-7925G-STD Extended battery—CP-BATT-7925G-EXT
Installing the Cisco Unified Wireless IP Phone 7925G
Caution Use only the Cisco power supply. If you must replace your power supply, refer to the list of Cisco part
numbers.
Australia—CP-PWR-7925G-AU Central EuropeCP-PWR-7925G-CE China—CP-PWR-7925G-CN Japan—CP-PWR-7925G-JP North AmericaCP-PWR-7925G-NA United KingdomCP-PWR-7925G-UK
Related Topics
Network Requirements, page 3-1
Providing Power to the Phone, page 3-7
Installing the Cisco Unified Wireless IP Phone 7925G
After setting up the wireless network to support voice communications and configuring the wireless section includes the following installation information:
Providing Power to the Phone, page 3-7
Configuring Wireless LAN Settings for the Cisco Unified Wireless IP Phone 7925G, page 3-13
Using a Headset, page 3-13
IP phones in Cisco Unified Communications Manager, you are ready to install the phones. This
Providing Power to the Phone
The Cisco Unified Wireless IP Phone 7925G uses a battery for power. Table 3-3 lists the types of batteries available for the wireless IP phone and the maximum talk and standby times.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-7
Page 64
Installing the Cisco Unified Wireless IP Phone 7925G
Ta b l e 3-3 Batteries Available for the Cisco Unified Wireless IP Phone 7925G
Ty pe Technology Talk Time Standby Time
Standard Lithium ion (Li-ion) Up to 9.5 hrs Up to 180 hrs
Extended Li-ion Up to 13 hrs Up to 240 hrs
Use U-APSD for talk-time power save mode. Also 5 GHz talk time is reduced up to 30 min for standard and up to 2 hours for extended. Use of 802.11b/g and a Bluetooth headset can reduce the talk time by 40-50 percent. To extend talk-time battery life, the Cisco Unified Wireless IP Phone 7925G can use PS-POLL power save methods. The Cisco Unified Wireless IP Phone 7925G will use either U-APSD or PS-POLL when in idle (no active phone call).
When an AP supports the Cisco Client Extensions (CCX) proxy ARP information element, the idle battery life is optimized. If the AP does not support CCX or proxy ARP is not enabled, then the idle battery life is up to fifty percent less.
Table 3-4 shows the charging time for the two types of batteries. You can stop charging the battery when
the battery is fully charged. Lithium ion batteries can be partially charged without shortening the battery life. Batteries should handle up to 4000 recharges.
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Note Battery life varies because of environmental factors and Bluetooth use.
Ta b l e 3-4 Battery Charging Time Information
Battery Type Power Supply Connected to Phone
Standard 2 hours 5 hours
Extended 3 hours 7 hours
The following sections provide information about the battery and charging the phone:
Installing or Removing the Phone Battery, page 3-8
Using the Power Supply to Charge the Phone Battery, page 3-11
Using the USB Cable and PC to Charge the Battery, page 3-12
Installing or Removing the Phone Battery
To install the battery in the Cisco Unified Wireless IP Phone use Figure 3-1, and follow these steps:
Procedure
Phone Connected to PC and USB Cable
Step 1 Remove the cover on the back of the phone as shown in Figure 3-1.
Step 2 To install the battery, insert the battery catches in the corresponding slots at the bottom of the
Cisco
Unified Wireless IP Phone 7925G. Ensure that the metal contacts on the battery and the phone are
facing each other.
Step 3 Press the battery to the body of the phone until it locks into place. See Figure 3-2.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-8
OL-15984-01
Page 65
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
187525
1
2
CISCO
1
2
Battery
Step 4 To remove the battery, press up on the locking catch, then lift and remove the battery as shown in
Figure 3-3.
Figure 3-1 Removal of Cover to Install the Battery
Installing the Cisco Unified Wireless IP Phone 7925G
1 Locking catch
2 Battery Cover
Figure 3-2 Install the Battery
1 Battery Insertion Slots
2 Battery
OL-15984-01
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-9
Page 66
Installing the Cisco Unified Wireless IP Phone 7925G
Figure 3-3 Replace the Back Cover
2
1
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
CISCO
187527
1 Cover Insertion Slots
2 Cover
Note The MAC address for each Cisco Unified Wireless IP Phone 7925G appears on a printed label on the
back of the phone underneath the battery.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-10
OL-15984-01
Page 67
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Using the Power Supply to Charge the Phone Battery
To charge the phone battery quickly, follow the steps in Figure 3-4.
Figure 3-4 Charging the Phone Battery
5
6
1
Installing the Cisco Unified Wireless IP Phone 7925G
2
4
3
187528
1 Lift the mini-USB port cover on the bottom of phone.
2 Swing the port cover to one side.
3 Insert the AC power supply mini-USB connector in the port.
4 Insert the AC plug adapter in the slot on the power supply.
5 Insert the AC power supply in a wall outlet.
6 Indicator light—Indicates the charging status:
Red—Battery charging in process.
Green—Battery charging is complete.
Note You can use the phone while the battery is being charged. For charging times, see Table 3-4.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-11
Page 68
Installing the Cisco Unified Wireless IP Phone 7925G
1
2
3
Using the USB Cable and PC to Charge the Battery
Charge the phone battery by using a USB cable connected to your PC. Follow the steps in Figure 3-5.
Figure 3-5 Charging the Phone Battery Using the USB Cable and PC
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
1 Insert the phone connector on the USB cable into the phone.
2 Insert the USB A-type connector into the USB port on your PC.
3 Monitor the indicator light after the phone briefly displays “USB Connected” on the status
line.
You may see the “Found New Hardware Wizard” To stop the wizard from opening when connecting to USB port, perform the following steps:
1. Click Next to use the wizard dialog box.
2. In the Update New Software dialog, click No, not this time, and click Next.
3. Click Install the Software automatically (Recommended) and click Next.
4. After a few moments, the Cannot Install This Hardware dialog displays. Click Don't
prompt me again to install this software.
Note While the battery is charging, the indicator light is red. When the battery is fully charged, the indicator
5. Click Finish to close the dialog box.
light turns green. Charging times are longer when you use this method and are described in Table 3-4.
Related Topics
Powering On the Cisco Unified Wireless IP Phone 7925G, page 3-15
Installing or Removing the Phone Battery, page 3-8
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-12
OL-15984-01
Page 69
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Installing the Cisco Unified Wireless IP Phone 7925G
Using the Power Supply to Charge the Phone Battery, page 3-11
Configuring Wireless LAN Settings for the Cisco Unified Wireless IP Phone 7925G
Before the phone can connect to the WLAN, you must configure the network profile for the phone with the WLAN settings. You can use two methods for setting up the network profiles:
Cisco Unified Wireless IP Phone 7925G Web Pages, page 3-13
Network Profile Menu on the Cisco Unified Wireless IP Phone 7925G, page 3-13
Cisco Unified Wireless IP Phone 7925G Web Pages
You can access the Cisco Unified Wireless IP Phone 7925G web pages to set up the WLAN settings in the network profile. For a new phone with the factory default settings, you must use the USB cable to connect the phone to your PC. For more information and instructions, see
Unified Wireless IP Phone 7925G Web Pages.”
Chapter 4, “Using the Cisco
Network Profile Menu on the Cisco Unified Wireless IP Phone 7925G
You can use the Settings menu on the phone and access the Network Profiles menu to set up the network configuration and the WLAN configuration. For more information and instructions, see
“Configuring Settings on the Cisco Unified Wireless IP Phone 7925G.”
Using a Headset
Although Cisco Systems performs some internal testing of third-party wired and Bluetooth wireless headsets for use with the Cisco Unified Wireless IP Phone 7925G, Cisco does not certify or support products from headset or handset vendors. Because of the inherent environmental and hardware inconsistencies in the locations where Cisco Unified IP Phones are deployed, there is not a single “best” solution that is optimal for all environments. Cisco recommends that customers test the headsets that work best in their environment before deploying a large number of units in their network.
Cisco Systems recommends the use of good quality external devices, like headsets that are screened against unwanted radio frequency (RF) and audio frequency (AF) signals. Depending on the quality of these devices and their proximity to other devices such as cell phones and two-way radios, some audio noise may still occur. See information.
The primary reason that a particular headset would be inappropriate for the Cisco Unified IP Phone is the potential for an audible hum. This hum can be heard by either the remote party or by both the remote party and you, the Cisco Unified IP Phone user. Some potential humming or buzzing sounds can be caused by a range of outside sources, for example, electric lights, being near electric motors, large PC monitors. In some instances, the mechanics or electronics of various headsets can cause remote parties to hear an echo of their own voice when they speak to Cisco Unified IP Phone users.
Using External Devices with Cisco Unified IP Phones, page 3-15 for more
Chapter 5,
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-13
Page 70
Installing the Cisco Unified Wireless IP Phone 7925G
Connecting Headsets
To connect a headset to the Cisco Unified Wireless IP Phone 7925G, plug it into the headset port on the right side of the phone.
You can use the headset with all of the features on the Cisco Unified Wireless IP Phone 7925G, including the Volume and Mute buttons. Use these buttons to adjust the ear piece volume and to mute the speech path from the headset microphone.
Using Bluetooth Wireless Headsets
The Cisco Unified Wireless IP Phone 7925G supports Bluetooth Class 2 technology with Hands Free version 1.5 when the headsets support Bluetooth. Bluetooth enables low bandwidth wireless connections within a range of 10 meters. The best performance is in the 1 to 2 meter range.
There can be a potential interference issues. It is recommended that you:
Reduce the proximity of other 802.11b/g devices, Bluetooth devices, microwave ovens, and large
metal objects.
Use the Cisco Unified Wireless IP Phone 7925G on the same side of the body as the
Bluetooth-enabled headset.
Using Bluetooth wireless headsets will likely increase battery power consumption on your phone and might result in reducing battery life.
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Pairing Headsets
Note It is recommended that users read the headset user guide for more information about pairing and
For a Bluetooth wireless headset to work, it does not need to be within direct line-of-sight of the phone, but some barriers, such as walls or doors, and interference from other electronic devices, could affect the connection.
The Cisco Unified Wireless IP Phone 7925G pairs with headsets using a shared key authentication and encryption method. The authentication process can require a personal identification number (PIN) specific to the headset, commonly “0000.” The Cisco
Unified Wireless IP Phone 7925G can be paired
with more than one headset at a time. Pairing is typically performed once for each headset.
Once a device has been paired, its Bluetooth connection is maintained as long as both devices (phone and headset) are enabled and within range of each other. The connection re-establishes itself automatically if either of the devices powers down then powers up. The green-dotted Bluetooth icon indicates whether or not a device is connected.
When headsets are more than 10 meters away from Cisco Unified Wireless IP Phone 7925G, Bluetooth drops the connection after a 15 to 20 second timeout. If the paired headset comes back into range of the Cisco Unified Wireless IP Phone 7925G and the phone is not connected to another Bluetooth headset, then the in-range Bluetooth headset automatically reconnects. For certain phone types that operate in power-save modes, the user may have to “wake-up” the headset by tapping on its operational button to initiate the reconnect.
connecting the headsets.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-14
OL-15984-01
Page 71
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Audio Quality Subjective to the User
Beyond the physical, mechanical and technical performance, the audio portion of a headset must sound good to the user and to the party on the far end. Sound is subjective and Cisco cannot guarantee the performance of any headsets, but some of the headsets on the sites listed below have been reported to perform well on Cisco Unified IP Phones.
Nevertheless, it is ultimately the customer's responsibility to test this equipment in their own environment to determine suitable performance.
For information about wired and Bluetooth wireless headsets for your phone, see the Cisco Unified Wireless IP Phone 7925G Accessory Guide and these web sites:
http://www.plantronics.com
http://www.jabra.com
http://www.jawbone.com
Using External Devices with Cisco Unified IP Phones
The following information applies when you use external devices with the Cisco Unified IP Phone:
Powering On the Cisco Unified Wireless IP Phone 7925G
Cisco recommends the use of good quality external devices (speakers, microphones, and headsets)
that are shielded (screened) against unwanted radio frequency (RF) and audio frequency (AF)
signals.
Depending on the quality of these devices and the proximity to other devices such as mobile phones
or two-way radios, some audio noise may still occur. In these cases, Cisco recommends that you
take one or more of the following actions:
Move the external device away from the source of the RF or AF signals.
Route the external device cables away from the source of the RF or AF signals.
Use shielded cables for the external device, or use cables with a better shield and connector.
Shorten the length of the external device cable.
Apply ferrites or other such devices on the cables for the external device.
Cisco cannot guarantee the performance of the system because Cisco has no control over the quality of external devices, cables, and connectors. The system will perform adequately when suitable devices are attached using good quality cables and connectors.
Caution In European Union countries, use only external speakers, microphones, and headsets that are fully
compliant with the EMC Directive [89/336/EC].
Powering On the Cisco Unified Wireless IP Phone 7925G
After charging the battery and configuring the wireless IP phone, you are ready to power on the phone and connect to the WLAN. Use the following sections for more information about starting up the phone.
Active and Standby Phone Modes, page 3-16
Understanding the Phone Startup Process, page 3-17
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-15
Page 72
Powering On the Cisco Unified Wireless IP Phone 7925G
To power on the Cisco Unified Wireless IP Phone 7925G, press and hold the Power On button until the phone begins its startup process by cycling through these steps:
1. The phone displays the Cisco Systems screen.
2. The phone screen displays these messages as the phone starts up:
Locating Network Services
Configuring IP
Network Up
Configuring Unified CMList
Registering
3. The following information displays on the main phone screen:
Current time and date
Primary directory number
Main screen icons for four menus and Help
“Your current options” on status line
Softkey labels (Messages and Options)
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
When the phone passes through these stages with no errors, the phone started up properly. Now the phone is in standby mode and is ready to place or receive calls.
The signal icon in the upper left corner shows the strength of the signal between the wireless access point and the phone. The phone must have an adequate signal to successfully place or receive calls. If the signal icon displays only one bar, the weak signal can cause problems with phone performance.
If the phone does not complete these steps successfully, see the “Resolving Startup and Connectivity
Problems” section on page 10-1.
Related Topics
Active and Standby Phone Modes, page 3-16
Understanding the Phone Startup Process, page 3-17
Active and Standby Phone Modes
When the Cisco Unified Wireless IP Phone 7925G is powered on, it can be in one of these two modes:
Active mode
Standby mode
Active Mode
The phone is in active mode when there is an active RTP stream. When the phone is performing one of these actions, it is consuming power:
Connected to an active call
Scanning for channels
Sending CDP packets
Sending keep-alive messages
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-16
OL-15984-01
Page 73
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Reregistering with Cisco Unified Communications Manager
The standard battery provides up to 11.5 hours of talk time in active mode and the extended battery provides up to 15.5 hours of talk time.
Standby Mode
The phone goes into standby mode two seconds after a scan is complete. The phone awakes from standby mode in response to these events:
Pressing keys on the keypad
Roaming between APs
Power cycling the phone
Losing network connectivity
Losing RF connectivity
Transmitting scheduled CDP or keep-alive packets.
The standard battery provides up to 150 hours of standby time and the extended battery provides up to 200 hours of standby time.
Understanding the Phone Startup Process
Related Topics
Understanding the Phone Startup Process, page 3-17
Resolving Startup and Connectivity Problems, page 10-1
Understanding the Phone Startup Process
When connecting to the wireless VoIP network, the Cisco Unified Wireless IP Phone 7925G goes through a standard startup process, as described in configuration, not all of these steps may occur on your wireless IP phone.
Ta b l e 3-5 Cisco Unified Wireless IP Phone Startup Process
Step Description Related Topics
1. Powering on the phone The Cisco Unified Wireless IP Phone 7925G has non-volatile Flash memory in which it stores firmware images and user-defined preferences. At startup, the phone runs a bootstrap loader that loads a phone image stored in Flash memory. Using this image, the phone initializes its software and hardware.
2. Scanning for an access
point
The Cisco Unified Wireless IP Phone 7925G scans the RF coverage area with its radio. The phone searches its network profiles and scans for access points that have a matching SSID and authentication type. The phone associates with the access point with the highest RSSI that matches with its network profile.
Table 3-5. Depending on your specific network
Providing Power to the Phone, page 3-7
Resolving Startup and Connectivity Problems, page 10-1
Interacting with Cisco Unified Wireless APs, page 2-11
Resolving Startup and Connectivity Problems, page 10-1
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-17
Page 74
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Understanding the Phone Startup Process
Table 3-5 Cisco Unified Wireless IP Phone Startup Process (continued)
Step Description Related Topics
3. Authenticating with access point
The Cisco Unified Wireless IP Phone 7925G begins the authenticating process.
If set for Open, then any device can authenticate to the
Authentication Methods, page 2-16
access point. For added security, static WEP encryption might optionally be used.
If set to Shared Key, the phone encrypts the challenge
text using the WEP key and the access point must verify that the WEP key was used to encrypt the challenge text before network access is available.
If set for LEAP or EAP-FAST, then the user name
and password are authenticated by the RADIUS server before network access is available.
If set for Auto (AKM), the phone looks for an access
point with one of the following key management options enabled:
WPA, WPA2, or CCKM—The username and password are authenticated by the RADIUS server before network access is available.
WPA-Pre-shared key, WPA2-Pre-shared key—The phone authenticates with the access point using the pre-shared key.
4. Configuring IP network If the wireless IP phone is using DHCP to obtain an IP address, the phone queries the DHCP server to obtain one. If you are not using DHCP in your network, you must assign a static IP address to each phone locally.
In addition to assigning an IP address, the DHCP server directs the wireless IP
phone to a TFTP server. If the phone has a statically defined IP address, you must configure the TFTP server IP address locally on the phone; the phone then contacts the TFTP server directly.
5. Downloading Load ID The wireless IP phone checks to verify that the proper firmware is installed or if new firmware is available to download.
Cisco Unified Communications Manager informs devices using.cnf or.cnf.xml format configuration files of their load ID. Devices using.xml format configuration files receive the load ID in the configuration file.
6. Downloading config file The TFTP server has configuration files and profile files. A configuration file includes parameters for connecting to Cisco Unified
Communications Manager and information about which image load a phone should be running. A profile file contains various parameters and values for phone and network settings.
Configuring DHCP
Settings, page 5-6
Disabling DHCP, page 5-6
Resolving Startup and
Connectivity Problems, page 10-1
Phone Configuration Files
and Profile Files, page 2-14
Configuring an Alternate
TFTP Server, page 5-7
Phone Configuration Files
and Profile Files, page 2-14
Resolving Startup and
Connectivity Problems, page 10-1
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-18
OL-15984-01
Page 75
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Understanding the Phone Startup Process
Table 3-5 Cisco Unified Wireless IP Phone Startup Process (continued)
Step Description Related Topics
7. Connecting to Cisco Unified Communications Manager
8. Registering to Cisco Unified Communications Manager
Related Topics
Configuring Cisco Unified Wireless IP Phones in Cisco Unified Communications Manager,
The configuration file defines how the Cisco Unified Unified
IP Phone communicates with Cisco
Communications Manager. After obtaining the file from the TFTP server, the phone attempts to make a TCP connection to the highest priority Cisco Unified
Communications Manager on the list.
If the phone was manually added to the database, Cisco Unified
Communications Manager identifies and registers the phone. If the phone was not manually added to the database and auto-registration is enabled in Cisco Unified auto-register itself in the Cisco Unified
Communications Manager, the phone attempts to
Communications
Manager database.
Interacting with Cisco
Unified Communications Manager, page 2-14
Resolving Startup and
Connectivity Problems, page 10-1
Overview of Configuring
and Installing the Cisco Unified Wireless IP Phone 7925G, page 1-14
Adding Users to Cisco
Unified Communications Manager, page 7-19
page 7-1
Phone Configuration Files and Profile Files, page 2-14
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-19
Page 76
Understanding the Phone Startup Process
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-20
OL-15984-01
Page 77
CHA PTER
4
Using the Cisco Unified Wireless IP Phone 7925G Web Pages
This chapter describes how to set up your PC to configure a Cisco Unified Wireless IP Phone 7925G by using a USB connector and how to remotely access a configured phone over the WLAN. It contains the following sections:
Setting Up Your PC to Configure the Phones, page 4-1
Updating the Phones Remotely, page 4-4
Configuring Network Profiles, page 4-8
Configuring USB Settings, page 4-26
Configuring Trace Settings, page 4-27
Configuring the Phone Book, page 4-29
Configuring Wavelink Settings, page 4-29
Using System Settings, page 4-34
Setting Up Your PC to Configure the Phones
To setup new phones, use your PC and USB connection to enter the initial configuration for the wireless network settings and network profiles. To save time during initial deployment, you can create a standard network profile template and export it to several phones. For more information, see the
for Phone Configuration” section on page 4-34.
Before you can configure phones by using the USB connection, you must install drivers and set up the USB ports on the phone and PC.
Your PC must have one of the following operating systems:
Windows 2000 Professional
Windows XP
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
“Backup Settings
4-1
Page 78
Setting Up Your PC to Configure the Phones
Installing the USB Drivers
To install the drivers on your PC, perform the following steps:
Procedure
Step 1 Log into Cisco.com.
Step 2 Download the installation package and “read me” file for the USB drivers from this location:
http://www.cisco.com/cgi-bin/tablebuild.pl/ip-7900ser-crypto
Note Before proceeding, review the “read me” file for specific instructions for your PC operating
system.
Step 3 Double-click on the USB-Install-7925.1-0-2.exe file to start the installation program.
Step 4 Follow the prompts in the InstallShield Wizard.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Note If you receive a Hardware Installation warning message stating that the software has not passed
Microsoft Windows Logo testing, click Continue.
Step 5 The driver installation is complete when you see the Finished screen. You can close the wizard.
Step 6 Plug the USB cable into the USB port on the PC and into the USB connector on the phone.
The Found New Hardware Wizard dialog opens.
Step 7 To update the new software, click the button next to Yes, this time only and click Next.
Step 8 Click the button next to Install the Software automatically (Recommended).
After 2-3 minutes, the software installs and a message appears on the task bar stating “Found New Hardware - Software installed and ready to use.”
Step 9 Click Finish when the installation is complete.
The phone briefly displays “USB Connected” on the status line.
Configuring the USB LAN on the PC
To configure the USB LAN connection on your PC, follow these steps:
Procedure
Step 1 To setup the USB LAN connection, do one of the following:
For Windows XP—Click Start > Settings > Control Panel > Network Connections.
For Windows 2000—Click Start > Settings > Control Panel > Network and Connections.
Step 2 Locate and double-click the new LAN connection to open the Local Area Connection Status window,
then click Properties.
Step 3 Scroll to the Internet Protocol (TCP/IP) section and click Properties.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-2
OL-15984-01
Page 79
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Step 4 In the Internet Protocol (TCP/IP) Properties window, choose Use the following IP address:
Step 5 In the IP address field, enter a static IP address for the PC: 192.168.1. (1 through 254 except 100), for
example: 192.168.1.11
Note By default, the Cisco Unified Wireless IP Phone 7925G is configured with 192.168.1.100 so you
cannot use this IP address for the PC.
Make sure to use an IP address that is not in use on any other interface on the PC.
Step 6 Enter the subnet mask: 255.255.255.0
Step 7 Click OK to make the changes.
Related Topics
Accessing the Phone Web Page, page 4-3
Setting Configuration Privileges for the Phone Web Page, page 4-4
Setting Up Your PC to Configure the Phones
Accessing the Configuration Web Page for a Phone, page 4-5
Summary Information on the Home Web Page, page 4-7
Accessing the Phone Web Page
After setting up the USB interface on the PC, you are ready to use the USB cable connection to the phone to access the phone web pages.
To access the phone web pages, follow these steps:
Procedure
Step 1 Open a Windows browser.
Step 2 In the address field, enter https://192.168.1.100 to locate the wireless IP phone web page.
Note When the Security Alert dialog box displays a notice to accept the Trust Certificate, click Yes
or Always to accept the application.
The Summary web page for the phone displays. See Table 4-2 for details about this web page.
Step 3 Use the hyperlinks in the left column of the web page to configure settings for the phones. For
information, see these sections:
Configuring Network Profiles, page 4-8
Configuring USB Settings, page 4-26
Configuring Trace Settings, page 4-27
Configuring Wavelink Settings, page 4-29
Configuring the Phone Book, page 4-29
Using System Settings, page 4-34
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-3
Page 80
Updating the Phones Remotely
Step 4 After entering the new settings, disconnect the USB cable from the phone. The settings are active
immediately.
Step 5 Check that the phone can access the network successfully.
Using the USB Cable to Configure Phones
You are ready to use the USB cable to set up other phones. Before plugging the USB cable into another phone, wait approximately 12-15 seconds for the USB interface on the PC to shut down.
To connect to another phone, follow these steps:
Procedure
Step 1 Plug the USB cable into a Cisco Unified Wireless IP Phone 7925G.
The phone briefly displays “USB Connected” on the status line.
Step 2 Access the web page for the new phone by following the steps in “Accessing the Phone Web Page”
section on page 4-3.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Related Topics
Installing the USB Drivers, page 4-2
Configuring the USB LAN on the PC, page 4-2
Using the USB Cable to Configure Phones, page 4-4
Accessing the Phone Web Page, page 4-3
Updating the Phones Remotely
You might have to update settings on a Cisco Unified Wireless IP Phone 7925G that is already configured and in use. You can use the wireless LAN to remotely access and configure these phones.
Use these sections for information about remotely updating phones:
Setting Configuration Privileges for the Phone Web Page, page 4-4
Accessing the Configuration Web Page for a Phone, page 4-5
Setting Configuration Privileges for the Phone Web Page
To make changes to the phone by using the web page, you must use Cisco Unified Communications Manager Administration to enable Web Access and Phone Book Web Access.
To allow configuration privileges, follow these steps:
Procedure
Step 1 Log into Cisco Unified Communications Manager Administration.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-4
OL-15984-01
Page 81
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Step 2 Search for the phone in Cisco Unified Communications Manager Administration by choosing Device >
Phone and enter search information such as the DN.
Step 3 Click on the DN of the phone that you want to set the privileges.
Step 4 Open the Phone Configuration window, scroll down to Product Specific Configuration Layout, and
enable these privileges:
In the Web Access field, select Full from the drop-down menu.
In the Phone Book Web Access field, select Allow Admin.
Step 5 Click Save to make the change.
Step 6 You must reset the phone to enable configuration privileges on the web pages for this phone.
Accessing the Configuration Web Page for a Phone
You can access the web page for any Cisco Unified Wireless IP Phone 7925G that is connected to the WLAN. Be sure the phone is powered on, connected and registered to a Cisco Unified Communications Manager server.
Updating the Phones Remotely
To access the web page for the Cisco Unified Wireless IP Phone 7925G follow these steps:
Procedure
Step 1 Log into the Cisco Unified Communications Manager Administration.
Step 2 Go to Device > Phone.
Step 3 Click Find. All of the phones display. If the phone is registered with a Cisco Unified Communications
Manager Administration, the IP address displays. The phone IP address is linked to the Home web page.
Step 4 Click on the Description field in the Phone Configuration window of Cisco Unified Communications
Manager Administration. The Device Information section displays.
Step 5 Go to the Web Access field in the Product Specific Configuration Layout and change the parameter to
Full. This will give you full access to all of the web pages.
Step 6 From the Phone Configuration window, click on the linked IP address. The Home web page displays.
There are two sections displayed on the Home web page: setup menus (left) and summary information (right).
Table 4-1 shows the available Home web page menus, from which you can configure network
profiles, USB settings, trace settings, Wavelink settings, and certificates. Table 4-2 contains the phone summary information.
Or if you already know the IP address, you can open a web browser and enter the following URL. The IP_address variable is the IP address of the Cisco
Unified IP Phone:
https://<IP_address>/index.html
Note When the Security Alert dialog box displays a notice to accept the Trust Certificate, click Yes
or Always to accept the application.
Step 7 Log into the Home web page with the default username: admin and enter the default password: Cisco.
You may need to log into additional windows to configure other options.
Step 8 Make changes to configurable pages as needed.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-5
Page 82
Updating the Phones Remotely
Step 9 Return to the Phone Configuration page in Cisco Unified Communications Manager Administration and
set the Web Access field back to Read Only or Disabled.
Step 10 Reset the phone from Cisco Unified Communications Manager to disable full access to the web pages.
Be sure to change the Web Access privileges and reset the phone to prevent users from making configuration changes on the phone web pages.
Note If a wireless IP phone was previously registered to Cisco Unified CallManager Administration Release
4.x, and you try to register to Cisco Unified Communications Manager Administration 5.x, 6.0(1),
7.0(1), the Phone Configuration web page password might be set to “Cisco.”
Ta b l e 4-1 Home Web Page Menus
Menu Related Information
Setup
Network Profiles Configuring Network Profiles, page 4-8
USB Settings Configuring USB Settings, page 4-26
Trace Settings Configuring Trace Settings, page 4-27
Wavelink Settings Configuring Wavelink Settings, page 4-29
Certificates Configuring Wireless LAN Security, page 4-13
Configurations
Phone Book Configuring the Phone Book, page 4-29
Information
Network Summary Information on the Home Web Page, page 4-7
Wireless LAN
Device
Statistics
Wireless LAN Displays Rx and Tx statistics.
Network Displays IP, TCP, and UDP statistics.
Stream Statistics
Stream 1 Displays RTP statistics and voice quality metrics.
Stream 2
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-6
OL-15984-01
Page 83
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Table 4-1 Home Web Page Menus (continued)
Menu Related Information
System
Trace Logs Using System Settings, page 4-34
Backup Settings
Phone Upgrade
Change Password
Site Survey
Date and Time
Phone Restart
Summary Information on the Home Web Page
The summary information for your phone displays on this section of the Home web page. It also displays the network and Cisco Unified Communications Manager information.
Updating the Phones Remotely
Table 4-2 describes these items.
Ta b l e 4-2 Summary Information
Item Description
Phone DN DN assigned to the phone.
Home: Summary
Wireless Information
Active Network Profile Name of the profile that the phone is currently using.
SSID SSID that the phone is currently using.
Access Point Name of the access point (AP) to which the phone is associated.
MAC Address MAC address of the phone.
Network Information
IP Address IP address of the phone.
Subnet Mask Subnet mask used by the phone.
Default Router IP address for the default gateway that the phone is using.
TFTP Server IP address for the Primary TFTP server that the phone is using.
Call Manager Information
Active Call Manager IP address for the Cisco Unified Communications Manager
server to which the phone is registered.
Phone Directory Number Primary DN for the phone.
Related Topics
Accessing the Phone Web Page, page 4-3
Configuring Network Profiles, page 4-8
Configuring USB Settings, page 4-26
Configuring Trace Settings, page 4-27
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-7
Page 84
Configuring Network Profiles
Configuring the Phone Book, page 4-29
Using System Settings, page 4-34
Configuring Network Profiles
You can configure up to four profiles for a phone to take advantage of WLAN environments. You can add names to the profiles and enable one or more of the profiles for the phone to use. The Network Profiles section of the web page displays the following information about each phone:
Profile—Displays a list of four configurable profiles.
Enabled—Indicates whether or not the profile is enabled.
Name—Lists the name for the profile.
SSID—Lists the SSID used by the profile.
Status—Indicates which profiles are active or inactive.
To display the Network Profiles list, access the web page for the phone as described in the “Accessing
the Phone Web Page” section on page 4-3, and then click the Network Profiles hyperlink.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
For more information about configuring network profiles, see these sections:
Configuring Wireless Settings in a Network Profile, page 4-12
Configuring Wireless LAN Security, page 4-13
Configuring IP Network Settings, page 4-23
Configuring the Alternate TFTP Server, page 4-24
Configuring Advanced Network Profile Settings, page 4-25
Network Profile Settings
You can configure the settings for a profile by using this web page area. You can also modify or view configured profiles from this web page area. profile settings and provides references for more information.
To display Network Profile (1-4) Settings, access the web page for the phone as described in the
“Accessing the Phone Web Page” section on page 4-3, and then click the Profile (1-4) hyperlink.
Ta b l e 4-3 Basic Network Profile Settings
Item Description For More Information, See...
Wireless
Profile Name Descriptive name for the profile.
SSID Assigns the Service Set Identifier (SSID) to
Edit Profile Enables editing of the profile.
Table 4-3 and Table 4-4 describe the basic and advanced
this profile. You must assign the same SSID to the phone that is also assigned to access points in the wireless network.
Associating to APs, page 2-12
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-8
OL-15984-01
Page 85
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Table 4-3 Basic Network Profile Settings (continued)
Item Description For More Information, See...
Scan Mode Auto—Always scans when on a call. If idle
and signal strength is sufficient, the phone does not scan.
Continuous—Always scans.
Single AP—Only scans at power on or if the AP connection to the network is lost.
Call Power Save Mode Set for the type of power saving mode used in
the WLAN. Options are:
U-APSD/PS-Poll
None
802.11 Mode Determines the signal mode or priority for selecting signal modes available in the WLAN. Options are:
802.11 b/g—Use only 2.4 GHz band
Configuring Network Profiles
Associating to APs, page 2-12
802.11 Standards for WLAN Communications, page 2-3
802.11 Standards for WLAN Communications, page 2-3
802.11a—Use only 5 GHz band
Auto, 802.11b/g preferred over 802.11a
(dual band)
Auto, 802.11a preferred over 802.11b/g
(dual band)
Note The preferred band, if available, will
be used at power-on, but the phone may switch to the less preferred 2.4 GHz band, if available, and the preferred band is lost. Once the phone has connected to the less preferred band, it will not scan for the preferred band if the current band is acceptable, and may remain connected to the less preferred band.
Auto, signal strength (RSSI)—Use
strongest signal in dual band environment
Restricted Data Rate Enables or disables the restriction of the
upstream and downstream PHY rates according to CCX V4 Traffic Stream Rate Set IE (S54.2.6). The default is disabled.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-9
Page 86
Configuring Network Profiles
Table 4-3 Basic Network Profile Settings (continued)
Item Description For More Information, See...
WLAN Security
Authentication Mode Assigns the authentication mode Configuring Advanced
Export Security Credentials
Wireless Security Credentials
Username Assigns the network authentication username
Password Assigns the network authentication password
WPA Pre-shared Key Credentials
Pre-shared Key Type Determines the key type: Hex or ASCII Configuring the Pre-shared
Pre-shared Key Identifies the key
Wireless Encryption
Key Type Determines the encryption key type: Hex or
Encryption Key 1-4 Identifies the Transmit Key:
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Controls whether the wireless security credential data can be exported in the configuration file.
True—Allows exporting the data
False—Blocks exporting the data
for this profile
for this profile
ASCII
Network Profile Settings, page 4-25
Configuring the Username and Password, page 4-15
Key, page 4-15
Setting Wireless Encryption, page 4-16
Certificate Options
Client EAP-TLS Certificate
Validate Server Certificate
Encryption Key character string
Key Size of 40 or 128 characters
Determines the certificate used for authentication:
Manufacturing issued
User installed
Enables the phone to use the server certificate. Two options: true or false.
Note Applies to PEAP only.
Installing Authentication Certificates for EAP-TLS Authentication, page 4-17
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-10
OL-15984-01
Page 87
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Table 4-3 Basic Network Profile Settings (continued)
Item Description For More Information, See...
IP Network Configuration
Obtain IP address and DNS servers
Gets the IP address and DNS servers automatically.
automatically
Use the following IP address and DNS servers
TFTP
Obtain TFTP Servers
Disables DHCP and uses these static settings:
IP Address
Subnet Mask
Default Router
Primary DNS
Secondary DNS
Domain Name
Enables automatic assignment of TFTP servers Configuring the Alternate
Automatically
Use the following TFTP servers
Assigns static TFTP server IP addresses to:
TFTP Server 1
Configuring Network Profiles
Configuring IP Network Settings, page 4-23
TFTP Server, page 4-24
TFTP Server 2
Ta b l e 4-4 Advanced Network Profile Settings
TSPEC Settings
Minimum PHY Rate Minimum data rate that outbound traffic uses.
Modify this setting when Call Admission Control (CAC) is enabled.
Note Cisco APs support only PHY rates of 6,
Configuring Advanced Network Profile Settings, page 4-25
11, 12, or 24. The default is 12. If you use an access point that using 802.11b, the PHY rate must be configured to the supported rate.
Surplus Bandwidth Excess bandwidth beyond application
requirements
802.11G Power Settings
Channel Assigns the channels Configuring Advanced
Status Enabled—Identifies enabled channels in WLAN
to improve scanning for the phone.
Network Profile Settings, page 4-25
MaxTxPower Sets the maximum transmit power for the phone
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-11
Page 88
Configuring Network Profiles
Table 4-4 Advanced Network Profile Settings (continued)
802.11A Power Settings
Channel Assigns the channels Configuring Advanced
Status Enabled—Identifies enabled channels in WLAN
Max Tx Power Sets the maximum transmit power for the phone
Note If you uncheck all channels in the 802.11g Power Settings window or 802.11a Power Settings window,
the phone will not be able to access the WLAN.
Related Topics
Accessing the Phone Web Page, page 4-3
Configuring Wireless LAN Security, page 4-13
Setting the Wireless Security Credentials, page 4-15
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
to improve scanning for the phone
Network Profile Settings, page 4-25
Setting Wireless Encryption, page 4-16
Configuring Wireless Settings in a Network Profile
You must configure wireless settings in a profile to enable the phone to access the wireless network. To configure the wireless settings, refer to
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 To give the profile a recognizable name, in the Profile Name field, enter a name up to 63 characters and
numbers in length.
Step 3 To identify the SSID that the phone uses to associate with access points, in the SSID field, enter an SSID
that is already configured in the WLAN.
Note The SSID is case sensitive; you must enter it exactly as configured in the network.
Step 4 To conserve battery power, in the Call Power Save Mode, choose the type (U-APSD or PS-Poll) and
option that is being used in the WLAN.
Step 5 Choose the signal mode or priority of signal modes in the 802.11 Mode field that is used by your WLAN,
Table 4-3 and follow these steps.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-12
OL-15984-01
Page 89
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Configuring Wireless LAN Security
The Cisco Unified Wireless IP Phone 7925G supports many types of authentication. Authentication methods might require a specific encryption method or you can choose between several encryption methods. When configuring a network profile, you can choose one of these authentication methods:
Open—Provides access to all access points without WEP Key authentication/encryption.
Open plus WEP—Provides access to all access points and authentication through the use of one or
more WEP Keys at the local access point.
Shared Key plus WEP—Provides shared key authentication through the use of WEP Keys at the
local access point.
LEAP— Exchanges a username and cryptographically secure password with a RADIUS server for
authentication in the network. LEAP is a Cisco proprietary version of EAP.
EAP-FAST—Exchanges a username and password and with a RADIUS server for authentication in
the network.
EAP-TLS—Uses a dynamic session-based WEP key derived from the client adapter and RADIUS
server to encrypt data and a client certificate for authentication. It uses PKI to secure communication to the RADIUS authentication server.
Configuring Network Profiles
PEAP (EAP-MSCHAP V2)—Performs mutual authentication, but does not require a client
certificate on the phone. This method uses name and password authentication based on Microsoft MSCHAP V2 authentication.
PEAP with Server Certificate Authentication—The Cisco Unified Wireless IP Phone 7925G can
validate the server certificate during the authentication handshakes over an 802.11 wireless link. This functionality is disabled by default and is enabled in Cisco
Unified Communications Manager
Administration.
Auto (AKM)—Automatic authenticated key management in which the phone selects the AP and
type of key management scheme, which includes WPA, WPA2, WPA-Pre-shared key, WPA2-Pre-shared key, or CCKM (which uses a wireless domain server (WDS)).
Note When set to AKM mode, the phone uses LEAP for 802.1x type authentication methods (non-Pre-shared
key such as WPA, WPA2, or CCKM). AKM mode supports only authenticated key-management types (WPA, WPA2, WPA-PSK, WPA2-PSK, CCKM).
The type of authentication and encryption schemes that you are using with your WLAN determine how you set up the authentication, security, and encryption options in the network profiles for the Cisco Unified Wireless IP Phones.
Table 4-5 provides a list of supported authentication and encryption
schemes that you can configure on the Cisco Unified Wireless IP Phone 7925G.
Ta b l e 4-5 Authentication and Encryption Configuration Options
Authentication Mode Wireless Encryption Wireless Security Credentials
Open None None—access to all APs
Open plus WEP Static WEP
None—access to all APs
Shared Key plus WEP Static WEP
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Requires WEP Key
Uses shared-key with AP
Requires WEP Key
4-13
Page 90
Configuring Network Profiles
Table 4-5 Authentication and Encryption Configuration Options (continued)
Authentication Mode Wireless Encryption Wireless Security Credentials
LEAP (with optional CCKM) Uses WEP Requires Username and Password
EAP-FAST (with optional CCKM) Uses WEP or TKIP Requires Username and Password EAP-TLS Uses WEP, TKIP, or AES Requires Username and Password
PEAP Uses WEP, TKIP, or AES Requires Username and Password
Auto (AKM) with CCKM Uses TKIP or AES Requires Username and Password
Auto (AKM) with WPA (with optional CCKM)
Auto (AKM) with WPA2 (with optional CCKM)
Auto (AKM) with WPA Pre-Shared Key
Auto (AKM) with WPA2 Pre-Shared Key
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Requires server and client certificates.
Requires server side certificate.
Uses TKIP Requires Username and Password
Uses AES Requires Username and Password
Uses TKIP Requires Passphrase
Uses AES Requires Passphrase
Note Beginning with Cisco Wireless IP Phone 7925G firmware release 1.1, CCKM is operational with the
WPA authentication mode using AES encryption.
Configuring the Authentication Mode
To select the Authentication Mode for this profile, follow these steps:
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 Choose the authentication mode.
Note Depending on what you selected, you must configure additional options in Wireless Security or
Wireless Encryption. See Table 4-5 for more information.
Step 3 Click Save to make the change.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-14
OL-15984-01
Page 91
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Setting the Wireless Security Credentials
When your network uses EAP-FAST, LEAP, EAP-TLS, PEAP, or Auto (AKM) with WPA, WPA2, CCKM for user authentication, you must configure both the username and a password on the Access Control Server (ACS) and the phone.
Note If you use domains within your network, you must enter the username with the domain name, in this
format: domain\username.
For information about setting security credentials, see these topics:
Configuring the Username and Password, page 4-15
Configuring the Pre-shared Key, page 4-15
Setting Wireless Encryption, page 4-16
Installing Authentication Certificates for EAP-TLS Authentication, page 4-17
Configuring PEAP, page 4-22
Configuring Network Profiles
Configuring the Username and Password
To enter or change the username or password for the network profile, you must use the same username and the same password string that is configured in the RADIUS server. The maximum length of the username or password entry is 32 characters.
To set up the username and password in Wireless Security Credentials, follow these steps:
Procedure
Step 1 Choose the network profile.
Step 2 In the Username field, enter the network username for this profile.
Step 3 In the Password field, enter the network password string for this profile.
Step 4 Click Save to make the change.
Configuring the Pre-shared Key
When using Auto (AKM) with WPA Pre-shared key or WPA2 with Pre-shared key for authentication, you must configure a Passphrase/Pre-shared key in the Wireless Security Credentials area.
Pre-shared Key Formats
The Cisco Unified Wireless IP Phone 7925G supports ASCII and hexadecimal formats. You must use one of these formats when setting up a WPA Pre-shared key:
Hexadecimal
For hexadecimal keys, you must enter 64 hex digits (0-9 and/or A-F); for example, AB123456789CD01234567890EFAB123456789CD01234567890EF3456789C
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-15
Page 92
Configuring Network Profiles
ASCII
For ASCII keys, you must enter a character string that uses 0-9, A-Z (upper and lower case), including symbols and is from 8 to 63 characters in length; for example, GREG12356789ZXYW
To set up a Pre-shared key in the Wireless Credentials area, follow these steps:
Procedure
Step 1 Choose the network profile that uses Auto (AKM) to enable the WPA Pre-shared key or WPA2
Pre-shared key.
Step 2 In the Key Type area, choose one of these character formats:
Hex
ASCII
Step 3 Enter an ASCII string or Hex digits in the Passphrase/Pre-shared key field. See “Pre-shared Key
Formats” section on page 4-15.
Step 4 Click Save to make the change.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Setting Wireless Encryption
If your wireless network uses WEP encryption, and you have set the Authentication Mode as Open + WEP or Shared Key + WEP, you must enter an ASCII or hexadecimal WEP Key.
The WEP Keys for the phone must match the WEP Keys assigned to the access point. Cisco Unified Wireless IP keys.
WEP Key Formats
You must use one of these formats when setting up a WEP key:
Hexadecimal
For hexadecimal keys, you can use one of the following key sizes:
40-bit—You must enter a 10-digit encryption key string that uses the hex digits (0-9 and/or A-F);
or example, ABCD123456.
128-bit—You must enter a 26-digit encryption key string that uses the hex digits (0-9 and/or A-F);
or example, AB123456789CD01234567890EF.
ASCII
For ASCII keys, you must enter a character string that uses 0-9, A-Z (upper and lower case), and all symbols.
40-bit—You must enter a 5-character string; for example, GREG5.
Phone 7925G and Cisco Aironet Access Points support both 40-bit and 128-bit encryption
128-bit—You must enter a 13-character string; for example, GREGSSECRET13.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-16
OL-15984-01
Page 93
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Entering Wireless Encryption Keys
To set up WEP keys, follow these steps:
Procedure
Step 1 Choose the network profile that uses Open+WEP or Shared+WEP.
Step 2 In the Key Type area, choose one of these character formats:
Hex
ASCII
Step 3 For Encryption Key 1, click Transmit Key.
Step 4 In the Key Size area, choose one of these character string lengths:
40
128
Step 5 In the Encryption Key field, enter the appropriate key string based on the selected Key Type and Key
Size. See the
“WEP Key Formats” section on page 4-16.
Configuring Network Profiles
Step 6 Click Save to make the change.
Related Topics
Configuring IP Network Settings, page 4-23
Configuring the Alternate TFTP Server, page 4-24
Configuring Advanced Network Profile Settings, page 4-25
Installing Authentication Certificates for EAP-TLS Authentication
EAP-TLS is a certificate based authentication that requires a trust relationship between two or more entities. Each entity has a certificate proving its identity and is signed by a trusted authority. These certificates are exchanged and verified during EAP-TLS authentication.
Note The EAP-TLS certificate based authentication requires that the internal clock on the Cisco Unified
Wireless IP Phone 7925G be set correctly. Use the phone web page to set the clock on the phone before using EAP-TLS authentication.
To use EAP-TLS, both the Cisco Unified Wireless IP Phone 7925G and the Cisco Secure Access Control Server (ACS) must have certificates installed and configured properly. If your wireless network uses EAP-TLS for authentication, you can use the Manufacturing Installed Certificate (MIC) or a user installed certificate for authentication on the phone.
Manufacturing Installed Certificate
Cisco has included a Manufacturing Installed Certificate (MIC) in the phone at the factory.
During EAP-TLS authentication the ACS server needs to verify the trust of the phone and the phone needs to verify the trust of the ACS server.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-17
Page 94
Configuring Network Profiles
To verify the MIC, the Manufacturing Root Certificate and Manufacturing Certificate Authority (CA) Certificate must be exported from a Cisco ACS server. These two certificates are part of the trusted certificate chain used to verify the MIC by the Cisco ACS server.
To verify the Cisco ACS certificate, a trusted subordinate certificate (if any) and root certificate (created from a CA) on the Cisco ACS server must be exported and installed on the phone. These certificate(s) are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
User Installed Certificate
To use a user installed certificate, a Certificate Signing Request (CSR) must be generated on the phone, sent to the CA for approval, and the approved certificate installed on the Cisco Phone 7925G.
During EAP-TLS authentication, the ACS server needs to verify the trust of the phone and the phone needs to verify the trust of the ACS server.
To verify the authenticity of the user installed certificate, a trusted subordinate certificate (if any) and root certificate from the CA that approved the user certificate must be installed on the Cisco ACS server. These certificate(s) are part of the trusted certificate chain used to verify the trust of the user installed certificate.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Unified Wireless IP Phone 7925G and installed on the Cisco
Unified Wireless IP
To verify the Cisco ACS certificate, a trusted subordinate certificate (if any) and root certificate (created from a CA) on the Cisco ACS server must be exported and installed on the phone. These certificate(s) are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
To install authentication certificates for EAP-TLS, perform the tasks listed in Table 4-6:
Ta b l e 4-6 Installing the Certificate for EAP-TLS
Tas k From For more information, see...
1. Set the Cisco Unified
Communications Manager date and
Cisco Unified Wireless IP Phone 7925G web page
Setting the Date and Time, page 4-19
time on the phone.
2. If using the Manufacturing Installed
Certificate (MIC):
a. Export the CA root certificate
and manufacturing CA certificate.
b. Install certificates on the
Cisco
ACS server and edit the
Cisco Unified Wireless IP Phone
7925G web page
Internet Explorer
Microsoft Certificate Services
Exporting and Installing the Certificates on the ACS, page 4-19
Exporting the CA Certificate from the ACS Using Microsoft Certificate Services, page 4-20
trust list.
c. Export the CA certificate from
the ACS server and import it to the phone.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-18
OL-15984-01
Page 95
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Configuring Network Profiles
Table 4-6 Installing the Certificate for EAP-TLS (continued)
Task From For more information, see...
3. If using a user installed certificate:
a. Generate the Certificate
Cisco Unified Wireless IP Phone 7925G web page
Requesting and Importing the User Installed Certificate, page 4-21
Signing Request (CSR).
b. Send the CSR to CA to sign.
c. Import the certificate.
d. Install certificate on the Cisco
ACS server and edit the trust list.
e. Download the CA certificate
from the ACS server and import it into the7925G.
4. Set up the user account. ACS configuration tool Configuring the ACS Server Setup,
page 4-22
User Guide for Cisco Secure ACS for Windows
Setting the Date and Time
EAP-TLS uses certificate based authentication that requires the internal clock on the Cisco Unified Wireless IP Phone 7925G to be set correctly. The date and time on the phone might change when it is registered to Cisco
Note If a new server authentication certificate is being requested and the local time is behind the Greenwich
Unified Communications Manager.
Mean Time (GMT), the authentication certificate validation might fail. It is recommended that you set the local date and time ahead of the GMT.
To set the phone to the correct local date and time, follow these steps:
Procedure
Step 1 Select Date & Time from the left navigation pane.
Step 2 If the setting in the Current Phone Date & Time field is different from the Local Date & Time field, click
Set Phone to Local Date & Time.
Step 3 Click Phone Restart, then click OK.
Exporting and Installing the Certificates on the ACS
To use the MIC, the Manufacturing Root Certificate and Manufacturing CA Certificate must be exported and installed onto the Cisco ACS server.
To export the manufacturing root certificate and manufacturing CA certificate to the ACS server, follow these steps:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-19
Page 96
Configuring Network Profiles
Procedure
Step 1 From the phone web page, choose Certificates. Click Export next to the Manufacturing Root Certificate.
Step 2 Save the certificate and copy it to the ACS server.
Step 3 Repeat Steps 1 and 2 for the Manufacturing CA certificate.
Step 4 From the ACS Server System Configuration page, enter the file path for each certificate and install the
certificates.
Note For more information about using the ACS configuration tool, see the ACS online help or the
User Guide for Cisco Secure ACS for Windows.
Step 5 Use the Edit the Certificate Trust List (CTL) page to add the certificates to be trusted by ACS.
Exporting Certificates from the ACS
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Depending on the type of certificate you export from the ACS, use one of the following methods:
To export the CA certificate from the ACS server that signed the user installed certificate or ACS
certificate, see
Exporting the CA Certificate from the ACS Using Microsoft Certificate Services,
page 4-20.
To export the CA certificate from the ACS server that uses a self-signed certificate, see Exporting
Certificates from the ACS Server Using Internet Explorer, page 4-20.
Exporting the CA Certificate from the ACS Using Microsoft Certificate Services
Use this method for exporting the CA certificate from the ACS server that signed the user installed certificate or ACS certificate.
To export the CA certificate using the Microsoft Certificate Services web page, follow these steps:
Procedure
Step 1 From the Microsoft Certificate Services web page, select Download a CA certificate, certificate chain
or CRL.
Step 2 At the next page, highlight the current CA certificate in the text box, choose DER under Encoding
Method, then click Download CA certificate.
Step 3 Save the CA certificate.
Exporting Certificates from the ACS Server Using Internet Explorer
Use this method for exporting the CA certificate from the ACS server that uses a self-signed certificate.
To export certificates from the ACS server using Internet Explorer, follow these steps:
Procedure
Step 1 From Internet Explorer, choose Tools > Internet Options, then click the Content tab.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-20
OL-15984-01
Page 97
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Step 2 Under Certificates, click Certificates..., then click the Trusted Root Certification Authorities tab.
Step 3 Highlight the root certificate and click Export.... The Certificate Export Wizard appears. Click Next.
Step 4 At the next window, select DER encoded binary X.509 (.CER), and click Next.
Step 5 Specify a name for the certificate and click Next.
Step 6 Save the CA certificate to be installed on the phone.
Requesting and Importing the User Installed Certificate
To request and install the certificate on the phone, follow these steps:
Procedure
Step 1 From the phone web page, choose the network profile using EAP-TLS, and select User Installed in the
EAP-TLS Certificate field.
Step 2 Click Certificates. On the User Certificate Installation page, the Common Name field should match the
user name in the ACS server.
Note You can edit the Common Name field if you wish. Make sure that it matches the user name in
the ACS server. See
“Configuring the ACS Server Setup” section on page 4-22.
Configuring Network Profiles
Enter the information to be displayed on the certificate, and click Submit to generate the Certificate Signing Request (CSR).
Step 3 In the next screen, select and copy the entire contents of the text box. Send this data to the CA
administrator for signing.
The CSR text is encoded and should be sent to the Certificate Authority for signing. The CSR text can be sent by e-mail or another method determined by your CA administrator. The following steps describe the basic CSR approval process on the CA web page.
Step 4 From the Microsoft Certificate Services Request a Certificate page, select Advanced certificate request
to initiate the signing request.
Step 5 At the Advanced Certificate Request page, select Submit a certificate request by using a
base-64-encoded PKCS CMC.
Step 6 Copy the certificate data from the Cisco Unified Wireless IP Phone 7925G and paste it in the Saved
Request text box, then click Submit.
Step 7 Once the CSR is approved, the certificate must be exported in a DER encoded format and sent to the
original requestor.
Step 8 Return to the phone web page and choose Certificates to import the signed certificate.
Step 9 On the Certificates page, locate the User Installed certificate line, and click Import. Browse to the
certificate on your PC to import to the phone.
Installing the Authentication Server Root Certificate
The Authentication Server Root Certificate must be installed on the Cisco Unified Wireless IP Phone 7925G.
To install the certificate, follow these steps:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-21
Page 98
Configuring Network Profiles
Step 1 Export the Authentication Server Root Certificate from the ACS. See Exporting Certificates from the
ACS, page 4-20.
Step 2 Go to the phone web page and choose Certificates.
Step 3 Click Import next to the Authentication Server Root certificate.
Step 4 Restart the phone.
Configuring the ACS Server Setup
To set up the user account name and install the MIC root certificate for the phone on the ACS, follow these steps:
Note For more information about using the ACS configuration tool, see the ACS online help or the User Guide
for Cisco Secure ACS for Windows.
Procedure
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Step 1 From the ACS configuration tool User Setup page, create a phone user account name if it is not already
Step 2 On the System Configuration page, in the EAP-TLS section, enable these fields:
Step 3 On the ACS Certification Authority Setup page, add the Manufacturing Root Certificate and
Step 4 Enable both the Manufacturing Root Certificate and Manufacturing CA Certificate in the ACS
Configuring PEAP
set up. Typically, the user name includes the phone MAC address at the end (for example, CP-7925G-SEPxxxxxxxxxxxx). No password is necessary for EAP-TLS.
Note Make sure the user name matches the Common Name field in the User Certificate Installation
page. See
Allow EAP-TLS
Certificate CN comparison.
“Requesting and Importing the User Installed Certificate” section on page 4-21.
Manufacturing CA Certificate to the ACS server.
Certificate Trust List.
Protected Extensible Authentication Protocol (PEAP) uses server-side public key certificates to authenticate clients by creating an encrypted SSL/TLS tunnel between the client and the authentication server.
Note The authentication server validation can be enabled by importing the authentication server certificate.
Before You Begin
Before you configure PEAP authentication for the phone, make sure these Cisco Secure ACS requirements are met:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-22
OL-15984-01
Page 99
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
The ACS root certificate must be installed
Enable the Allow EAP-MSCHAPv2 setting
User account and password must be configured
For password authentication, you can use the local ACS database or an external one (such as
Windows or LDAP)
Enabling PEAP Authentication
To enable PEAP authentication on the phone, follow these steps:
Procedure
Step 1 From the phone configuration web page, choose PEAP as the authentication mode. See Configuring the
Authentication Mode, page 4-14.
Step 2 Enter a user name and password.
Configuring Network Profiles
Configuring IP Network Settings
The Cisco Unified IP Phones enable DHCP, by default, to automatically assign IP addresses to devices when you connect them to the network. If you do not use DHCP in your network, then you must disable DHCP and manually enter network configuration information. For more information, see
with the Dynamic Host Configuration Protocol Server” section on page 2-15.
When DHCP is disabled in the network, you must configure the following settings in the Static Settings menu:
IP address
Subnet mask
Default Router
DNS server 1 and 2
TFTP server 1
Use these guidelines when manually configuring the IP settings:
Ensure the TFTP server has an IP address.
Ensure the default router IP address is on the same subnet as the host IP address.
Enabling DHCP
To enable the use of DHCP in the Network Profile, follow these steps:
“Interacting
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 Under the IP Network Configuration area, choose this option:
Obtain IP address and DNS servers automatically
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-23
Page 100
Configuring Network Profiles
Step 3 Click Save to make the change.
Disabling DHCP
Step 1 Choose the network profile that you want to configure.
Step 2 Under the IP Network Configuration area, choose this option:
Step 3 You must enter these required IP addresses. See Table 4-7 for descriptions of these fields.
Step 4 Click Save to make the change.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
To disable the use of DHCP in the Network Profile, follow these steps:
Procedure
Use the following IP addresses and DNS servers
Ta b l e 4-7 Static IP Addresses When DHCP is Disabled
Static Setting Description
IP Address IP address of the phone
Subnet Mask Subnet mask used by the phone
Default Router 1 Primary gateway used by the phone
DNS Server 1
DNS Server 2
TFTP Server 1
TFTP Server 2
Primary DNS server used by the phone
Optional backup DNS server used by the phone
Primary TFTP server used by the phone
Optional backup TFTP server used by the phone
Domain Name Name of the DNS in which the phone resides
Configuring the Alternate TFTP Server
If you use DHCP to direct the Cisco Unified Wireless IP Phone 7925Gs to a TFTP server, you can also assign an alternative TFTP server to some phones instead of the one assigned by DHCP.
Note If you disable DHCP, then you must use these steps to set up the TFTP server for the phone.
To assign an alternate TFTP server to a phone, follow these steps:
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 In the TFTP area, choose this option:
Use the following TFTP servers
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-24
OL-15984-01
Loading...