Cisco Unified Wireless IP Phone 7925G
Administration Guide for Cisco Unified
Communications Manager 7.0(1)
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: OL-15984-01
Page 2
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
The Bluetooth word mark and logo are registered trademarks owned by Bluetooth SIG, Inc., and any use of such marks by Cisco Systems, Inc., is under license.
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant
to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required
to correct the interference at their own expense.
The following information is for FCC compliance of Class B devices: This equipment has been tested and found to comply with the lim its for a Class B digital device, pursuant
to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates,
uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular installation. If the equipment causes interference to radio or television reception, which can be
determined by turning the equipment off and on, users are encouraged to try to correct the interference by using one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Modifications to this product not authorized by Cisco could void the FCC approval and negate your authority to operate the product.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
IMPLIED, INCLUDING, WITHOUT
CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, the Cisco logo, DCE, and Welcome to the Human Network
are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To
You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco
Cisco
Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing,
FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort
MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet,
Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx
and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0809R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
iv
OL-15984-01
Page 5
Battery Safety Notices3-6
Installing the Cisco Unified Wireless IP Phone 7925G3-7
Providing Power to the Phone3-7
Installing or Removing the Phone Battery3-8
Using the Power Supply to Charge the Phone Battery3-11
Using the USB Cable and PC to Charge the Battery3-12
Configuring Wireless LAN Settings for the Cisco Unified Wireless IP Phone 7925G3-13
Cisco Unified Wireless IP Phone 7925G Web Pages3-13
Network Profile Menu on the Cisco Unified Wireless IP Phone 7925G3-13
Using a Headset3-13
Connecting Headsets3-14
Using Bluetooth Wireless Headsets3-14
Audio Quality Subjective to the User3-15
Using External Devices with Cisco Unified IP Phones3-15
Powering On the Cisco Unified Wireless IP Phone 7925G3-15
Active and Standby Phone Modes3-16
Active Mode3-16
Standby Mode3-17
Contents
CHAPTER
Understanding the Phone Startup Process3-17
4Using the Cisco Unified Wireless IP Phone 7925G Web Pages4-1
Setting Up Your PC to Configure the Phones4-1
Installing the USB Drivers4-2
Configuring the USB LAN on the PC4-2
Accessing the Phone Web Page4-3
Using the USB Cable to Configure Phones4-4
Updating the Phones Remotely4-4
Setting Configuration Privileges for the Phone Web Page4-4
Accessing the Configuration Web Page for a Phone4-5
Summary Information on the Home Web Page4-7
Configuring Network Profiles4-8
Network Profile Settings4-8
Configuring Wireless Settings in a Network Profile4-12
Configuring Wireless LAN Security4-13
Configuring the Authentication Mode4-14
Setting the Wireless Security Credentials4-15
Configuring the Username and Password4-15
Configuring the Pre-shared Key4-15
Setting Wireless Encryption4-16
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
v
Page 6
Contents
Installing Authentication Certificates for EAP-TLS Authentication4-17
Configuring PEAP4-22
Configuring IP Network Settings4-23
Enabling DHCP4-23
Disabling DHCP4-24
Configuring the Alternate TFTP Server4-24
Configuring Advanced Network Profile Settings4-25
Configuring USB Settings4-26
Configuring Trace Settings4-27
Configuring Wavelink Settings4-29
Configuring the Phone Book4-29
Importing and Exporting Contacts4-30
Importing and Exporting CSV Phone Contact Records4-30
Searching the Phone Book Information4-32
Updating Phone Book Information4-32
Adding a Contact4-32
Deleting Contacts4-33
Editing Contact Information4-33
Assigning A Speed-Dial Hot Key to a Contact Number4-33
CHAPTER
Using System Settings4-34
Viewing Trace Logs4-34
Backup Settings for Phone Configuration4-34
Using Network Profile Templates4-35
Creating a Configuration Template4-35
Importing a Configuration Template4-37
Upgrading Phone Firmware4-37
Changing the Admin Password4-38
Viewing the Site Survey Report on the Web4-38
5Configuring Settings on the Cisco Unified Wireless IP Phone 7925G5-1
Accessing Network and Phone Settings5-1
Configuring Network Profile Settings5-2
Accessing a Network Profile5-3
Changing the Profile Name5-3
Guidelines for Editing Settings in the Network Profile5-4
Changing Network Configuration Settings5-4
Configuring DHCP Settings5-6
Disabling DHCP5-6
Configuring an Alternate TFTP Server5-7
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
vi
OL-15984-01
Page 7
Changing the Cisco Discovery Protocol Settings5-7
Erasing the Configuration5-8
Configuring Wireless Settings for the Network Profile5-8
Accessing the WLAN Configuration Menu5-8
Changing WLAN Configuration Settings5-9
Changing Phone Settings5-10
Configuring the Security Certificate on the Phone5-12
Changing the USB Configuration5-13
Contents
CHAPTER
6Configuring the Phone Using the Wavelink Avalanche Server6-1
Before You Begin6-1
Best Practices6-2
Assigning the Wavelink Server6-2
Assigning the Wavelink Server from the Phone6-2
Assigning the Wavelink Server using the Phone Web Page6-3
Setting Up and Using the Phone CU6-3
Assigning Attributes for the Phone6-3
Defining Custom Names and Custom Values on the Phone6-4
Defining Custom Parameters from the Phone Web Page6-4
Installing the Cisco Unified Wireless IP Phone 7925G CU6-4
Updating Configuration Files6-5
Configuring Profile Settings6-6
Configuring USB Settings6-9
Configuring Trace Settings6-9
Configuring Wavelink Settings6-10
Updating the Phone6-10
CHAPTER
7Configuring Features, Templates, Services, and Users7-1
Configuring Cisco Unified Wireless IP Phones in Cisco Unified Communications Manager7-1
Telephony Features Available for the Phone7-2
Specific Configuration Options for the Cisco Unified Wireless IP Phone 7925G7-13
Configuring Softkey Templates7-16
Softkey Templates for the Cisco Unified Wireless IP Phone 7925G7-16
Changing Softkeys in a Template7-16
Modifying Phone Button Templates7-17
Setting Up Services7-17
Configuring Corporate and Personal Directories7-18
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
vii
Page 8
Contents
Configuring Corporate Directories7-19
Configuring Personal Directory7-19
Adding Users to Cisco Unified Communications Manager7-19
Managing the User Options Web Pages7-20
Giving Users Access to the User Options Web Pages7-20
Specifying Options that Appear on the User Options Web Pages7-21
Creating Custom Phone Rings7-21
CHAPTER
CHAPTER
8Viewing Security, Device, Model, Status, and Call Statistics Information on the Phone8-1
9Monitoring the Cisco Unified Wireless IP Phone Remotely9-1
Accessing the Web Page for a Phone9-1
Summary Information9-2
Network Configuration Information9-3
Device Information9-6
Wireless LAN Statistics9-7
Network Statistics9-9
Stream Statistics9-10
CHAPTER
10Troubleshooting the Cisco Unified Wireless IP Phone 7925G10-1
Resolving Startup and Connectivity Problems10-1
Symptom: Incomplete Startup Process10-1
Symptom: No Association to Cisco Aironet Access Points10-2
Verifying Access Point Settings10-2
Symptom: No Registration to Cisco Unified Communications Manager10-3
Registering the Phone with Cisco Unified Communications Manager10-4
Checking Network Connectivity10-4
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
viii
OL-15984-01
Page 9
Verifying TFTP Server Settings10-4
Verifying IP Addresses 10-5
Verifying DNS Settings10-5
Verifying Cisco Unified Communications Manager Settings10-5
Cisco Unified Communications Manager and TFTP Services are not Running10-6
Creating a New Configuration File10-7
Resolving Voice Quality and Roaming10-8
Symptom: Cisco Unified Wireless IP Phone Resets Unexpectedly10-8
Verifying that the Phones Have Not Been Intentionally Reset10-9
Eliminating DNS or Other Connectivity Errors10-9
Symptom: Audio Problems10-10
No Audio During a Connected Call10-10
One-Way Audio During a Connected Call10-10
Symptom: Improper Roaming and Voice Quality or Lost Connection10-11
Voice Quality Deteriorates While Roaming10-11
Delays in Voice Conversation While Roaming10-11
Phone Loses Connection with Cisco Unified Communications Manager While Roaming10-11
Phone Does Not Roam Back to Preferred Band10-12
Monitoring the Voice Quality of Calls10-12
Using Voice Quality Metrics10-13
Troubleshooting Tips10-13
Contents
General Troubleshooting Information10-14
Common Phone Status Messages10-14
Troubleshooting Tips for the Cisco Unified Wireless IP Phone 7925G10-16
Logging Information for Troubleshooting10-17
Using a System Log Server10-18
Using the Trace Logs on the Unified IP Phone10-18
Erasing the Local Configuration10-18
APPENDIX
AProviding Information to Users By Using a WebsiteA-1
How the Cisco Unified Wireless IP Phone OperatesA-1
How to Care for and Clean the PhoneA-2
How Users Access the Help System on the PhoneA-3
How Users Get Copies of Cisco Unified IP Phone ManualsA-3
How Users Configure Phone Features and ServicesA-4
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
ix
Page 10
Contents
How Users Access Voice MessagesA-4
APPENDIX
APPENDIX
APPENDIX
I
NDEX
BSupporting International UsersB-1
Installing the Cisco Unified Communications Manager Locale InstallerB-1
Support for International Call LoggingB-2
CPhysical and Operating Environment SpecificationsC-1
DChecklist for Deploying the Cisco Unified Wireless IP Phone 7925GD-1
Configuring a Wireless NetworkD-1
Configuration Tip for Cisco Aironet Access PointsD-2
Configuring QoS PoliciesD-3
Access Point Configuration SettingsD-3
Controller SettingsD-3
Switch ConfigurationD-4
Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications ManagerD-4
Installing the Cisco Unified Wireless IP Phone 7925GD-7
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
x
OL-15984-01
Page 11
Overview
Preface
This chapter describes the intended audience, objectives, organization, and lists related documentation.
It contains the following sections:
•Overview, page xi
•Audience, page xi
•Organization, page xii
•Related Documentation, page xiii
•Obtaining Documentation and Submitting a Service Request, page xiii
Cisco Unified Wireless IP Phone 7925G Administration Guide provides the information you need to
understand, install, configure, and manage the Cisco Unified Wireless IP Phone 7925G on your network.
This guide is intended to be used to administer phones running with Cisco
Manager Release 4.1, 4.2, 4.3, 5.1, 6.0, 6.1, and 7.0(1).
Unified Communications
Audience
Network engineers, system administrators, or telecom engineers should review this guide to learn the
steps required to properly set up the Cisco
The tasks described are considered to be administration-level tasks and are not intended for end-users of
the phones. Many of the tasks involve configuring network settings and could affect the phone
functioning in the network.
Because of the close interaction between the Cisco Unified Wireless IP Phone 7925G and Cisco Unified
Communications Manager, these tasks require familiarity with Cisco Unified Communications
Manager.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Unified Wireless IP Phone 7925G on the wireless network.
xi
Page 12
Organization
This guide is organized as follows:
Chapter Description
Chapter 1, “Overview of the Cisco Unified
Wireless IP Phone 7925G”
Chapter 2, “Overview of the VoIP Wireless
Network”
Chapter 3, “Setting Up the Cisco Unified Wireless
IP Phone 7925G”
Chapter 4, “Using the Cisco Unified Wireless IP
Phone 7925G Web Pages”
Chapter 5, “Configuring Settings on the
Cisco Unified Wireless IP Phone 7925G”
Chapter 6, “Configuring the Phone Using the
Wavelink Avalanche Server”
Chapter 7, “Configuring Features, Templates,
Services, and Users”
Chapter 8, “Viewing Security, Device, Model,
Status, and Call Statistics Information on the
Phone”
Chapter 9, “Monitoring the Cisco Unified
Wireless IP Phone Remotely”
Chapter 10, “Troubleshooting the Cisco Unified
Wireless IP Phone 7925G”
Appendix A, “Providing Information to Users By
Using a Website”
Appendix B, “Supporting International Users”Provides information about setting up phones in
Appendix C, “Physical and Operating
Environment Specifications”
Appendix D, “Checklist for Deploying the
Cisco Unified Wireless IP Phone 7925G”
Preface
Provides a conceptual overview and description of
the Cisco
provides an overview of the tasks required prior to
installation
Describes how the IP Phone interacts with other
key IP telephony and wireless network protocols
and components
Describes how to properly and safely install and
configure the Cisco
IP
Describes how to use the Cisco Unified Wireless
IP
configuration and to update configuration files for
the wireless
Describes how to configure network profiles and
phone settings, by using the Settings menu on the
wireless
Describes how to use the Cisco Unified Wireless
IP
Wavelink Avalanche server for updating the
phone configuration
Provides an overview of procedures for
configuring telephony features and adding users to
Cisco
Explains how to view phone security, device, and
network information and network and call
statistics from the wireless
Explains how to obtain status information about
the phone using the phone web page
Provides tips for troubleshooting the
wireless
Provides suggestions for setting up a website for
providing users with important information about
their wireless
non-English environments
Provides technical specifications of the
Cisco
Provides a detailed checklist for deploying the
Cisco
Unified Wireless IP Phone 7925G and
Unified Wireless
Phone 7925G on your network
Phone 7925G web pages for initial phone
IP phone
IP phone
Phone 7925G Configuration Utility on the
Unified Communications Manager
IP phone
IP phone
IP phone
Unified Wireless IP Phone 7925G
Unified Wireless IP Phone 7925G
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
xii
OL-15984-01
Page 13
Preface
Related Documentation
For more information about Cisco Unified IP Phones or Cisco Unified Communications Manager, refer
to the following publications:
Cisco Unified Wireless IP Phone 7925G
These publications are available at the following URLs:
Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed
and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free
service and Cisco currently supports RSS version 2.0.
technical documentation, at:
Cisco Product Security Overview
New in Cisco Product Documentation, which also lists all new and
This product contains cryptographic features and is subject to United States and local country laws
governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors
and users are responsible for compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local
laws, return this product immediately.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
xiii
Page 14
Further information regarding U.S. export regulations may be found at
http://www.access.gpo.gov/bis/ear/ear_data.html.
Document Conventions
This document uses the following conventions:
ConventionDescription
boldface fontCommands and keywords are in boldface.
italic fontArguments for which you supply values are in italics.
[ ]Elements in square brackets are optional.
{ x | y | z }Alternative keywords are grouped in braces and separated by vertical bars.
[ x | y | z ]Optional alternative keywords are grouped in brackets and separated by
stringA nonquoted set of characters. Do not use quotation marks around the string
screen fontTerminal sessions and information the system displays are in screen font.
boldface screen fontInformation you must enter is in boldface screen font.
italic screen fontArguments for which you supply values are in italic screen font.
^The symbol ^ represents the key labeled Control—for example, the key
< >Nonprinting characters, such as passwords are in angle brackets.
Preface
vertical bars.
or the string will include the quotation marks.
combination ^D in a screen display means hold down the Control key while
you press the D key.
xiv
NoteMeans reader take note. Notes contain helpful suggestions or references to material not covered in the
publication.
CautionMeans reader be careful. In this situation, you might do something that could result in equipment
damage or loss of data.
Warning
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
Means danger. You are in a situation that could cause bodily injury. Before you work on any
equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard
practices for preventing accidents.
OL-15984-01
Page 15
CHA PTER
1
Overview of the Cisco Unified Wireless
IP Phone 7925G
This chapter includes the following sections:
•Understanding the Cisco Unified Wireless IP Phone 7925G, page 1-1
•Bluetooth Technology, page 1-2
•Features Supported on the Cisco Unified Wireless IP Phone 7925G, page 1-6
•Understanding Security Features for Cisco Unified IP Phones, page 1-8
•Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G, page 1-14
Understanding the Cisco Unified Wireless IP Phone 7925G
The Cisco Unified Wireless IP Phone 7925G provides wireless voice communication over an IP
network. Like traditional analog telephones, you can place and receive phone calls and access features
such as hold, transfer, and speed dial. In addition, because the phone connects to your wireless local area
network (WLAN), you can place and receive phone calls from anywhere in your wireless environment.
OL-15984-01
The Cisco Unified Wireless IP Phone 7925G is an 802.11 dual band wireless device that provides
comprehensive voice communications in conjunction with Cisco
Cisco Aironet 802.11b/g and Cisco Aironet 802.11a Access Points (APs) in a private business
communications network. This phone model, like other network devices, must be configured and
managed. This phone encodes G.711a, G.711u, G.729a, G.729ab, G.722/iLBC, and decodes G.711a,
G711b, G.711u, G.729, G729a, G729b, and G729ab. The phone also supports uncompressed wideband
(16 bits, 16 kHz) audio.
The Cisco Unified Wireless IP Phone 7925G is hearing aid compatible (HAC) but does not have any
TTY features. It also has a centered “dot” or “nib” on the 5 key that is a tactile identifier.
The physical characteristics include:
•Resistance to damage from dropping the phone
•Tolerance of anti-bacterial and alcohol-based wipes
•Latex and lead free
•Resistance against liquid splashes
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
Unified Communications Manager and
1-1
Page 16
Bluetooth Technology
•Dust resistance
•Shock proof and vibration proof
•USB 1.1 interface
Bluetooth Technology
The Cisco Unified Wireless IP Phone 7925G is a full-feature telephone and a qualified Bluetooth
wireless device (Qualified Device ID (QDID) B014396). In addition to basic call-handling features, your
phone operates with Bluetooth wireless headsets, including certain handsfree call features.
Bluetooth devices operate in the unlicensed Industrial Scientific Medicine (ISM) band of 2.4GHz. This
unlicensed band in most countries includes the frequency range from 2400 to 2483.5 MHz. Synchronous
voice channels are provided by using circuit switching and asynchronous data channels are provided by
using packet switching.
Bluetooth uses an integrated Adaptive Frequency Hopping (AFH) to avoid interference. Every 625 usec
(1/1,000,000 of a second) the channel changes or hops to another frequency within the 2402 to 2480
MHz range. This computes to 1600 hops every second.
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
On the Cisco Unified Wireless IP Phone 7925G, a Bluetooth module and 802.11 WLAN module co-exist
in the phone. This co-existence greatly reduces and avoids radio interference between the Bluetooth and
802.11bg radio.
Bluetooth devices fit into to three different power classes, as shown in Table 1-1.
Ta b l e 1-1Bluetooth Maximum Permitted Power and Range by Class
ClassMaximum Permitted Power (dBm)Maximum Permitted Power (mW)Range
Class 1100 mW20 dBmUp to 100 meters
Class 22.5 mW4 dBmUp to 10 meters
Class 31 mW0 dBmUp to 1 meter
For more information about WLAN configuration and Bluetooth, see VoIP WLAN Configuration,
page 2-21. User-specific information is contained in the Cisco Unified Wireless IP Phone 7925G User
Guide.
For more information about Bluetooth and hands-free profiles, refer to http://www.bluetooth.com.
Handsfree Profile
Your phone supports certain features of the Handsfree Profile, which is a standard set of features that
enable users of handsfree devices (such as Bluetooth wireless headsets) to perform certain tasks without
having to handle the phone, allowing users to be “handsfree.” For example, instead of pressing Redial
on your phone, you can redial a number from your Bluetooth wireless headset according to instructions
from the headset manufacturer.
These handsfree features apply to Bluetooth wireless headsets used with your Cisco Unified Wireless IP
Phone 7925G:
•Redial—Recalls the last number dialed.
•Reject incoming call—Uses the iDivert option to direct the call to voicemail.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-2
OL-15984-01
Page 17
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
•Three-way calling—When there is an active call and another incoming call or call on hold, you may
choose to handle the calls in one of two ways:
–
End the active call and answer or resume a waiting call.
–
Put the active call on hold and answer or resume a waiting call.
NoteHandsfree devices may differ in how features are activated. Handsfree device manufacturers may also
use different terms when referring to the same feature.
For more information on using handsfree features, see the documentation provided by the device
manufacturer.
Pairing with Headsets
The Cisco Unified Wireless IP Phone 7925G pairs with headsets by using a shared key
authentication/encryption method. This process requires confirmation of a PIN specific to the headset,
commonly “0000.” The Cisco
headset at a time. Pairing is typically performed once for each headset used with the Cisco
Wireless IP
Cisco
Phone 7925G. Once pairing is complete, the headset automatically connects to the
Unified Wireless IP Phone 7925G when both devices are powered on and in range.
Bluetooth Technology
Unified Wireless IP Phone 7925G can be paired with more than one
Unified
NoteThe Cisco Unified Wireless IP Phone 7925G can only be connected to one Bluetooth-enabled headset at
a time. Further, the Cisco
Unified Wireless IP Phone 7925G only supports communication with
Bluetooth wireless technology-enabled devices qualified by the Bluetooth Special Interest Group (SIG).
Figure 1-1 shows the Cisco Unified Wireless IP Phone 7925G. The table that follows describes the
functions of the keys on the phone.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-3
Page 18
Bluetooth Technology
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Figure 1-1Cisco Unified Wireless IP Phone 7925G
1
2
17
3
16
15
14
13
12
11
10
1Indicator light
(LED)
2Headset port
cover
4
5
6
7
8
9
187500
Provides these indications:
•Solid red—Phone is connected to AC power source and battery is charging.
•Solid green—Phone is connected to AC power source and battery is fully
charged.
•Fast blinking red—Incoming call. (Phone can be charging or fully charged.)
•Slow blinking red—Voice message. (When connected to AC power source,
red light displays longer than when phone is using only the battery.)
•Slow blinking green—Phone is using only battery power. Phone is registered
with the wireless network and is within service coverage area.
Cover for the headset port.
3Speaker button Toggles the speaker mode on or off for the phone.
4Right softkey
button
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-4
Activates the Options menu for access to the list of softkeys. Sometimes displays
a softkey label.
OL-15984-01
Page 19
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Bluetooth Technology
5Navigation
Accesses these menus and lists from the main screen:
button
Directory
Line View
Settings
Services
Allows you to scroll up and down menus to highlight options and to move left
and right through phone numbers and text entries.
6Select buttonActivates the Help menu from the main screen.
Allows you to select a menu item, a softkey, a call, or an action.
7Power/End
button (red)
Turns the phone on or off, silences a ringing call, or ends a connected call.
When using menus, acts as a shortcut to return to the main screen.
8Pound (#) keyToggles between locking and unlocking the keypad.
Allows you to enter these special characters when you are entering text:
# ? ( ) [ ] { }
9Zero (0) keyEnters “0” when dialing a number. Allows you to enter a space or these special
characters when you are entering text:
+, . ‘ “ | _ ~ ’
NoteWhen entering text or dialing an international number, use the plus sign
(+).
10 Asterisk (*)
key
Toggles between Ring and Vibrate mode.
Allows you to enter these special characters when you are entering text:
* - / = \ : ;
11 KeypadAllows you to dial numbers, enter letters, and choose menu items by number.
Press and hold key 1 to access your voice messaging system.
12 One (1) keyEnters “1” when dialing a number. Allows you to access the voice messaging
system.
Allows you to enter these special characters when you are entering text:
! @ < > $ % ^ &
13 Answer/Send
Allows you to answer a ringing call or, after dialing a number, to place the call.
button (green)
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-5
Page 20
Features Supported on the Cisco Unified Wireless IP Phone 7925G
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
14 Left softkey
button
15 Mute buttonToggles the mute feature on or off.
16 Volume button When the phone is idle, allows you to control the ring volume, turn on the vibrate
17 Application
button
Related Topics
•Features Supported on the Cisco Unified Wireless IP Phone 7925G, page 1-6
•Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G, page 1-14
Activates the softkey option displayed on the screen. When customized by the
phone administrator or user, allows direct access to the Phone Book or voice
messages.
option, or turn off the ring.
When an incoming call is ringing, allows you to press this button once to silence
the ring for the call.
During a call, allows you to control the speaker volume for the handset, headset,
and speaker mode.
Configurable button that is used with XML applications, such as Push to Talk or
Directory services. See
“Setting Up Services” section on page 7-17.
Features Supported on the Cisco Unified Wireless
IP
Phone 7925G
The Cisco Unified Wireless IP Phone 7925G functions much like traditional IP phones allowing you to
place and receive telephone calls while connected to the wireless LAN. In addition to traditional phone
features, the Cisco Unified Wireless IP Phone includes features that enable you to administer and
monitor the phone as a network device.
CautionThis product is not a medical device and may use an unlicensed frequency band that is susceptible to
interference from other devices or equipment.
This section provides information about these topics:
•Feature Overview, page 1-7
•Telephony Features, page 1-7
•Understanding Security Profiles, page 1-12
•Network Settings Configuration, page 1-7
•Feature Information for Users, page 1-8
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-6
OL-15984-01
Page 21
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Feature Overview
The Cisco Unified Wireless IP Phone 7925G provides traditional telephony functionality, such as call
forwarding and transferring, call pickup, redialing, speed dialing, conference calling, and voice
messaging system access, as well as these features:
•Bluetooth Class 2 technology for headsets that support Bluetooth
•Six-line appearance
•Adjustable ring and volume levels
•Adjustable display brightness and time outs
•Auto-detection of headset and auto-answer from the headset
•Wireless web access to your phone number and the corporate directory
•Access to network data, XML applications, and web-based services
•Online customizing of phone features and services from the User Options web pages
•An online help system that displays information on the phone screen
Related Topics
•Configuring Network Profiles, page 4-8
Features Supported on the Cisco Unified Wireless IP Phone 7925G
•Configuring Features, Templates, Services, and Users, page 7-1
Telephony Features
You can use Cisco Unified Communications Manager Administration to set up phone registration
criteria and calling search spaces, to configure corporate directories and services, and to modify phone
button templates. See the
“Telephony Features Available for the Phone” section on page 7-2 and Cisco
Unified Communications Manager Administration Guide for additional information.
For more information about the Cisco Unified Communications Manager Administration, refer to Cisco
Unified
You can also use the context-sensitive help available within the application for guidance.
Related Topic
•Telephony Features Available for the Phone, page 7-2
Network Settings Configuration
Like other network devices, you must configure IP phones to access Cisco Unified Communications
Manager and the rest of the IP network using the wireless LAN. There are two methods for configuring
network settings such as DHCP, TFTP, and for configuring wireless settings for the phone.
•Cisco Unified Wireless IP Phone 7925G web pages
•Network Profiles menu on the Cisco Unified Wireless IP Phone 7925G
You can access the configuration web pages by using a browser from your PC. For more information,
see
Using the Cisco Unified Wireless IP Phone 7925G Web Pages, page 4-1.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-7
Page 22
Understanding Security Features for Cisco Unified IP Phones
You can also configure network settings on the phone itself. For more information about configuring
features from the phone, see
Phone 7925G.”
Because the Cisco Unified Wireless IP Phone is a network device, you can obtain detailed status
information about it. This information can assist you in troubleshooting problems that users might
encounter when using their IP phones. See
Remotely,” for tips on using this information.
Related Topics
•Using the Cisco Unified Wireless IP Phone 7925G Web Pages, page 4-1
•Configuring Settings on the Cisco Unified Wireless IP Phone 7925G, page 5-1
•Monitoring the Cisco Unified Wireless IP Phone Remotely, page 9-1
Feature Information for Users
If you are a system administrator, you are the primary source of information for Cisco Unified Wireless
IP Phone users in your network or company. To ensure that you distribute the most current feature and
procedural information, familiarize yourself with Cisco
documentation. Make sure to visit the Cisco
http://www.cisco.com/en/US/products/hw/phones/ps379/tsd_products_support_maintain_and_operate.
html
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Chapter 5, “Configuring Settings on the Cisco Unified Wireless IP
Chapter 9, “Monitoring the Cisco Unified Wireless IP Phone
Unified Wireless IP Phone 7925G
Unified IP Phone web site:
From this site, you can view additional phone documentation.
In addition to providing documentation, it is important to inform users about available Cisco Unified IP
Phone features—including features specific to your company or network—and about how to access and
customize those features, if appropriate.
For a summary of the key information that you can provide to phone users, see Appendix A, “Providing
Information to Users By Using a Website.”
NoteThe radio frequency (RF) for the Cisco Unified Wireless IP Phone 7925G is configured for a specific
regulatory domain. If users attempt to use this phone outside of the regulatory domain, the phone will
not function properly and they might violate local regulations.
Related Topic
•Providing Information to Users By Using a Website, page A-1
Understanding Security Features for Cisco Unified IP Phones
Implementing security in a wireless network protects against data tampering to Cisco Unified
Communications Manager data, call signaling, and media stream. It also reduces the chances for identity
theft. To reduce the threats, the Cisco wireless LAN (WLAN) provides options for user authentication
with servers and for encrypting communications streams between phones and network devices.
For information about supported security options for the Cisco Unified Wireless IP Phone 7925G, see
the
“Authentication Methods” section on page 2-16.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-8
OL-15984-01
Page 23
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
For information about security features supported by Cisco Unified Communications Manager and Cisco
Unified IP Phones, see the
“Understanding Security Features for Cisco Unified IP Phones” section on
page 1-8.
Table 1-2 provides additional information about security topics.
Ta b l e 1-2Cisco Unified IP Phone and Cisco Unified Communications Manager Security Topics
Top icReference
Detailed explanation of security, including set up,
configuration, and troubleshooting information
for Cisco Unified
Cisco Unified
Communications Manager and
IP Phones
Security features supported on the Cisco Unified
IP Phone
Restrictions regarding security featuresSee the “Security Restrictions” section on
Viewing a security profile name when running
Cisco Unified Communications Manager 5.0 or
later
Identifying phone calls for which security is
implemented
Transport Layer Security (TLS) connectionSee the “Networking Protocols Used with Cisco
Understanding Security Features for Cisco Unified IP Phones
Refer to Cisco Unified Communications Manager
Security Guide
See the “Understanding Security Features for
Cisco Unified IP Phones” section on page 1-8
page 1-13
See the “Understanding Security Profiles” section
on page 1-12
See the “Identifying Authenticated, Encrypted,
and Protected Phone Calls” section on page 1-12
Unified Wireless IP Phones” section on page 2-9
See the “Phone Configuration Files and Profile
Files” section on page 2-14
Security and the phone startup processSee the “Understanding the Phone Startup
Process” section on page 3-17
Security and phone configuration filesSee the “Phone Configuration Files and Profile
Files” section on page 2-14
Changing the TFTP Server 1 or TFTP Server 2
option on the phone when security is implemented
Items on the Security Configuration menu on the
phone
See the “Configuring Network Profiles” section
on page 4-8
See the “Viewing Security Information” section
on page 8-1
Unlocking the CTL fileSee the “Accessing the CTL File Screen” section
on page 8-3
Disabling access to phone web pagesSee the “Specific Configuration Options for the
Cisco Unified Wireless IP Phone 7925G” section
on page 7-13
TroubleshootingSee the “General Troubleshooting Information”
section on page 10-14
Refer to Cisco Unified Communications Manager Security Guide, Troubleshooting chapter
Resetting or restoring the phoneSee the “Erasing the Local Configuration” section
on page 10-18
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-9
Page 24
Understanding Security Features for Cisco Unified IP Phones
Overview of Supported Security Features
Table 1-3 provides an overview of the security features that the Cisco Unified Wireless IP Phone 7925G
supports. For more information about these features and about Cisco Unified Communications Manager
and Cisco
For information about current security settings on a phone, choose SETTINGS > System Configuration > Security. For more information, see the
page 8-1.
NoteMost security features are available only if a certificate trust list (CTL) is installed on the phone. For
more information about the CTL, refer to “Configuring the Cisco CTL Client” chapter in the Cisco
Unified Communications Manager Security Guide.
Ta b l e 1-3Description of Security Features
FeatureDescription
Image authenticationPrevents tampering with the firmware image before it is loaded on
Customer-site certificate
installation
Device authenticationOccurs between the Cisco Unified Communications Manager server
File authenticationValidates digitally-signed files that the phone downloads. The
Signaling AuthenticationUses the TLS protocol to validate that no tampering has occurred to
Unified IP Phone security, refer to Cisco Unified Communications Manager Security Guide.
a phone by using signed binary files (with the extension.sbn).
Tampering with the image causes a phone to fail the authentication
process and reject the new image.
Authenticates each Cisco Unified IP Phone by using a unique
certificate. Phones include a manufacturing installed certificate
(MIC), but for additional security, you can specify in Cisco
Unified
be installed by using the Certificate Authority Proxy Function
(CAPF). Alternatively, you can install a locally significant
certificate (LSC) from the Security Configuration menu on the
phone. See the
section on page 5-12 for more information.
and the phone when each entity accepts the certificate of the other
entity. Determines whether a secure connection between the phone
and a Cisco
necessary, creates a secure signaling path between the entities using
TLS protocol. Cisco
register phones unless authenticated by the Cisco Unified
Communications Manager.
phone validates the signature to make sure that file tampering did
not occur after the file creation. Files that fail authentication are not
written to Flash memory on the phone. The phone rejects such files
without further processing.
signaling packets during transmission.
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
“Viewing Security Information” section on
Communications Manager Administration that a certificate
“Configuring the Security Certificate on the Phone”
Unified Communications Manager should occur, and, if
Unified Communications Manager will not
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-10
OL-15984-01
Page 25
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Table 1-3Description of Security Features (continued)
FeatureDescription
Manufacturing installed
certificate
Secure Cisco Unified SRST
reference
Media encryptionUses SRTP to ensure that the media streams between supported
Signaling encryption by using
TLS
CAPF (Certificate Authority
Proxy Function)
Security profilesDefines whether the phone is non-secure, authenticated, or
Encrypted configuration filesLets you ensure the privacy of phone configuration files.
Optional disabling of the web
server functionality for a phone
Phone hardeningAdditional security options, which you control from
Understanding Security Features for Cisco Unified IP Phones
Each Cisco Unified IP Phone contains a unique manufacturing
installed certificate (MIC), which is used for device authentication.
The MIC is a permanent unique proof of identity for the phone, and
allows Cisco
Unified Communications Manager to authenticate the
phone.
After you configure a SRST reference for security and then reset the
dependent devices in Cisco
Unified Communications Manager
Administration, the TFTP server adds the SRST certificate to the
phone cnf.xml file and sends the file to the phone. A secure phone
then uses a TLS connection to interact with the SRST-enabled
router.
devices proves secure and that only the intended device receives
and reads the data. Includes creating a media master key pair for the
devices, delivering the keys to the devices, and securing the
delivery of the keys while the keys are in transport.
Ensures that all SCCP signaling messages that are sent between the
device and the Cisco
Unified Communications Manager server are
encrypted.
Implements parts of the certificate generation procedure that are too
processing-intensive for the phone, and it interacts with the phone
for key generation and certificate installation. The CAPF can be
configured to request certificates from customer-specified
certificate authorities on behalf of the phone, or it can be configured
to generate certificates locally.
encrypted. See the
“Understanding Security Profiles” section on
page 1-12 for more information.
You can prevent access to a phone web page, which displays a
variety of operational statistics for the phone.
Cisco
Unified Communications Manager Administration:
•Disabling Gratuitous ARP (GARP)
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
•Disabling access to the Setting menus
•Disabling access to web pages for a phone
NoteYou can view current settings for the GARP Enabled, and
Web Access options by looking at the phone’s Device
Information menu. For more information, see the
“Viewing
Security Information” section on page 8-1.
1-11
Page 26
Understanding Security Features for Cisco Unified IP Phones
Related Topics
•Understanding Security Profiles, page 1-12
•Identifying Authenticated, Encrypted, and Protected Phone Calls, page 1-12
•Viewing Device Information, page 8-4
•Security Restrictions, page 1-13
Understanding Security Profiles
A security profile, which defines whether the phone is non-secure, authenticated, encrypted, or protected
is associated with every Cisco Unified IP Phone that is supported by Cisco
Manager Administration. For information about configuring the security profile and applying the profile
to the phone, refer to Cisco Unified Communications Manager Security Guide.
NoteFor Cisco Unified IP Phones using Cisco Unified CallManager 4.1 and later, security is configured on
each phone. For more information about configuring security, refer to Cisco Unified CallManager
Security Guide at
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Unified Communications
To view the security mode that is set for the phone, from the phone screen, choose SETTINGS > Device Information > Security > Security Mode. For more information, see the
“Viewing Security
Information” section on page 8-1.
Related Topics
•Identifying Authenticated, Encrypted, and Protected Phone Calls, page 1-12
•Viewing Device Information, page 8-4
•Security Restrictions, page 1-13
Identifying Authenticated, Encrypted, and Protected Phone Calls
When security is implemented for a phone, you can identify authenticated or encryptedphone calls by
icons on the screen on the phone. You can also determine if the connected phone is secure and protected
if a security tone plays at the beginning of the call.
In an authenticated call, all devices participating in the establishment of the call are authenticated by
Cisco
Unified Communications Manager. When a call in progress is authenticated, the call progress icon
to the right of the call duration timer in the phone screen changes to this icon:
In an encrypted call, all devices participating in the establishment of the call are authenticated by
Cisco
Unified Communications Manager. In addition, call signaling and media streams are encrypted.
An encrypted call offers a high
in progress is being encrypted, the call progress icon to the right of the call duration timer in the phone
screen changes to this icon:
level of security, providing integrity and privacy to the call. When a call
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-12
OL-15984-01
Page 27
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
NoteIf the call is routed through non-IP call legs, for example, PSTN, the call may be nonsecure even though
it is encrypted within the IP network and has a lock icon associated with it.
In a protected call, a security tone plays at the beginning of a call to indicate that the other connected
phone is also receiving and transmitting encrypted audio. If your call is connected to a non-protected
phone, the security tone does not play.
NoteProtected calling is supported for connections between two phones only. Some features, such as
conference calling, shared lines, Extension Mobility, and Join Across Lines are not available when
protected calling is configured. Protected calls are not authenticated.
Establishing and Identifying Protected Calls
Understanding Security Features for Cisco Unified IP Phones
A protected call is established when your phone, and the phone on the other end, is configured for
protected calling. The other phone can be in the same Cisco IP network, or on a network outside the IP
network. Protected calls can only be made between two phones. Conference calls and other multiple-line
calls are not supported.
A protected call is established using this process:
1. A user initiates the call from a protected phone (protected security mode).
2. The phone displays the icon (encrypted) on the phone screen. This icon indicates that the phone
is configured for secure (encrypted) calls, but this does not mean that the other connected phone is
also protected.
3. A security tone plays if the call is connected to another protected phone, indicating that both ends
of the conversation are encrypted and protected. If the call is connected to a non-protected phone,
then the secure tone is not played.
NoteProtected calling is supported for conversations between two phones. Some features, such as conference
calling, shared lines, Extension Mobility, and Join Across Lines are not available when protected calling
is configured.
Related Topics
•Understanding Security Features for Cisco Unified IP Phones, page 1-8
•Understanding Security Profiles, page 1-12
•Security Restrictions, page 1-13
Security Restrictions
When using a phone that is not configured for encryption, the user cannot barge into an encrypted call.
When barge fails in this case, a reorder tone (fast busy tone) plays on the barge initiator phone.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-13
Page 28
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G
If the phone is configured for encryption, the user can barge into an authenticated or non-secure call from
the encrypted phone. After the barge occurs, Cisco
as non-secure.
If the phone is configured for encryption, the user can barge into an encrypted call, and the phone
indicates that the call is encrypted.
A user can barge into an authenticated call, even if the phone that is used to barge is non-secure. The
authentication icon continues to display on the authenticated phones in the call, even if the initiator’s
phone does not support security.
Unified Communications Manager classifies the call
Overview of Configuring and Installing the Cisco Unified
Wireless IP Phone 7925G
When deploying a new IP telephony system, system administrators and network administrators must
complete several tasks to prepare the network for IP
for setting up and configuring a complete Cisco IP telephony network, refer to the “System
Configuration Overview” chapter in the Cisco Unified Communications Manager System Guide.
telephony service. For information and a checklist
After you have set up the IP telephony system and configured system-wide features in Cisco Unified
Communications Manager Administration, you can add IP phones to the system. To add
wireless
strategic locations for access points (APs) to ensure good wireless voice coverage. For detailed
information about a voice over WLAN deployment, refer to the
Guide.
The following topics provide an overview of procedures for adding Cisco Unified IP Phones to your
network:
•Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications
•Installing the Cisco Unified Wireless IP Phone 7925G, page 1-15
IP phones to the IP network, system administrators should conduct a site survey to determine
Cisco Enterprise Mobility 3.0 Design
Manager, page 1-14
Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified
Communications Manager
To add phones to the Cisco Unified Communications Manager Administration, you can use:
•BAT and the Tool for Auto-Registered Phones Support (TAPS)
For more information about these choices, see the “Methods for Adding Phones to Cisco
Unified Communications Manager” section on page 3-2.
For general information about configuring phones in Cisco Unified Communications Manager, refer to
the “Cisco Unified IP Phone” chapter in the Cisco Unified Communications Manager System Guide.
For a checklist of tasks for configuring the phone in Cisco Unified Communications Manager, see the
“Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications Manager”
section on page D-4.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-14
OL-15984-01
Page 29
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G
Related Topics
•Installing the Cisco Unified Wireless IP Phone 7925G, page 1-15
•Configuring Features, Templates, Services, and Users, page 7-1
•Configuring the Cisco Unified Wireless IP Phone 7925G in Cisco Unified Communications
Manager, page D-4
Installing the Cisco Unified Wireless IP Phone 7925G
After you have added the phones to the Cisco Unified Communications Manager Administration, you
can complete the phone installation. You or the end users can install the phone at the user location. The
Cisco Unified Wireless IP Phone Installation Guide, available online at
http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7925g/7_0/english/install/guide/7925ig.pdf.
html, provides directions for assembling the phone and accessories and charging the battery.
Prior to using the phone to connect to the wireless LAN, you need to configure a network profile for the
phone. You can use the phone web pages to set up the network profile and other phone settings, or you
can configure the network profile using the menus on the phone.
If you use auto-registration that is part of Cisco Unified Communications Manager Administration, you
need to update the specific configuration information for the phone such as associating the phone with
a user, changing the softkey template, or directory number (DN).
NoteBefore you install a phone, even if it is new, upgrade the phone to the current firmware image. For
information about upgrading, refer to the Readme file for your phone which is located at:
For a checklist of tasks for installing the phone, see the “Installing the Cisco Unified Wireless
IP Phone 7925G” section on page D-7.
Related Topics
•Understanding the Cisco Unified Wireless IP Phone 7925G, page 1-1
•Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G, page 1-14
•Installing the Cisco Unified Wireless IP Phone 7925G, page D-7
•Troubleshooting the Cisco Unified Wireless IP Phone 7925G, page 10-1
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
1-15
Page 30
Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G
Chapter 1 Overview of the Cisco Unified Wireless IP Phone 7925G
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
1-16
OL-15984-01
Page 31
CHA PTER
2
Overview of the VoIP Wireless Network
This chapter provides an overview of the interaction between the Cisco Unified Wireless
IP
Phone 7925G and other key components of a VoIP network in a wireless local area network (WLAN)
environment. It contains the following sections:
•Understanding the Wireless LAN, page 2-1
•Understanding WLAN Standards and Technologies, page 2-3
•Bluetooth Wireless Technology, page 2-8
•Components of the VoIP Wireless Network, page 2-9
•Security for Voice Communications in WLANs, page 2-16
•VoIP WLAN Configuration, page 2-21
•Site Survey Verification, page 2-22
Understanding the Wireless LAN
With the introduction of wireless communication, wireless IP phones can provide voice communication
within the corporate WLAN. The Cisco
with wireless access points (APs) and key Cisco
Unified
In a traditional LAN, IP phones and computers use cables to transmit messages and data packets. Cisco
Unified WLAN delivers security, scalability, reliability, ease of deployment, and management similar
to wired LANs. It includes RF capabilities that enable real-time access to core business applications and
provides proven enterprise-class secure connectivity. The WLAN is an integrated end-to-end solution
that uses wireless IP phones and APs, network infrastructure, network management, and mobility
services.
Figure 2-1 shows a typical WLAN topology that enables the wireless transmission of voice for wireless
IP telephony.
Communications Manager Administration, to provide wireless voice communication.
Unified Wireless IP Phone 7925G depends upon and interacts
IP telephony components, including Cisco
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-1
Page 32
Understanding the Wireless LAN
M
113946
Figure 2-1WLAN with Wireless IP Phones
When a wireless IP phone powers on, it searches for and becomes associated with an AP. As users move
from one location to another, the wireless IP phone roams out-of-range of one AP into the range of
another AP. The wireless IP phone builds and maintains a list of eligible APs and reconnects to an AP
in that list. See
Chapter 2 Overview of the VoIP Wireless Network
“Associating to APs” section on page 2-12 for more information.
The AP uses its connection to the wired network to transmit data and voice packets to and from the
switches and routers. Voice signaling is transmitted to the Cisco Unified Communications Manager
server for call processing and routing.
APs are critical components in a WLAN because they provide the wireless links or “hot spots” to the
network. Cisco requires that the APs supporting voice communications use Cisco IOS Release 12.3(8)JA
or later. Cisco IOS software provides features for managing voice traffic.
In some WLANs, each AP has a wired connection to an Ethernet switch, such as a Cisco Catalyst 3750,
that is configured on a LAN. The switch provides access to gateways and the Cisco Unified
Communications Manager server to support wireless IP telephony.
Some networks have wired components that support wireless components. The wired components could
consist of switches, routers, and bridges with special modules to enable wireless capability.
The Cisco Unified WLAN can have the following components:
•Cisco Aironet Series Access Points—802.11a/b/g enterprise-class access points with integrated
antennas or antenna connections for easy deployment.
•Cisco 2000 Series Wireless LAN Controller—For small to medium sized networks, such as branch
offices. Works with Cisco lightweight access points.
•Cisco 4100 Series Wireless LAN Controller—For medium to large deployments. Works with Cisco
lightweight access points.
•Cisco 4400 Series Wireless LAN Controller—For large enterprise facilities. The Cisco 4402 and
4404 models support a maximum of 50 and 100 access points respectively.
•Cisco Wireless LAN Controller Module for Integrated Services Routers—Enables small-to-medium
businesses and enterprises to deploy and manage secure WLANs at branch offices.
•Cisco Catalyst 6500 Series Wireless Services Module (WiSM)—Provides security, mobility,
redundancy, and ease of use for WLAN administrators.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-2
OL-15984-01
Page 33
Chapter 2 Overview of the VoIP Wireless Network
Understanding WLAN Standards and Technologies
•Cisco Catalyst 3750 Series Integrated Wireless LAN Controllers—Adds wireless LAN controller
functions to the stackable Cisco Catalyst 3750G Series Switches to improve operating efficiency,
security, mobility, and ease of use for WLAN administrators.
•Wireless Control System (WCS)—Provides a powerful systems management. System
administrators can design, control, and monitor enterprise WLANs from a centralized location.
•Cisco 2700 Series Wireless Location Appliance—802.11 based location tracking solution for asset
tracking, IT management, and location based security. An open API is included.
•Cisco Wireless LAN Client Adapters—Available in CardBus, PCMCIA and PCI form factors, Cisco
Aironet Wireless LAN Client Adapters connect desktop and mobile computing devices to the
WLAN in 802.11b-compliant or 802.11a-compliant network.
For more information about Cisco Unified Wireless Networks, refer to
•802.11 Standards for WLAN Communications, page 2-3
•Radio Frequency Ranges, page 2-4
•802.11 Data Rates, Tx Power, Ranges, and Decibel Tolerances, page 2-4
•Wireless Modulation Technologies, page 2-5
•AP, Channel, and Domain Relationships, page 2-6
•WLANs and Roaming, page 2-7
802.11 Standards for WLAN Communications
Wireless LANs must follow the Institute of Electrical and Electronics Engineers (IEEE) 802.11
standards that define the protocols that govern all Ethernet-based wireless traffic. The Cisco
Wireless IP
•802.11b—Specifies the radio frequency (RF) of 2.4 GHz for both transmitting and receiving data.
Commonly called the Wi-Fi standard.
•802.11g—Uses the same unlicensed 2.4 GHz band as 802.11b, but extends the data rates to provide
greater performance by using Orthogonal Frequency Division Multiplexing (OFDM) technology.
OFDM is a physical–layer encoding technology for transmitting signals by using RF.
•802.11a—Uses the 5 GHz band that provides more channels and improved data rates by using
OFDM technology. Dynamic Frequency Selection (DFS) and Transmit Power Control (TPC)
supports this standard.
Phone 7925G supports the following standards:
Unified
•802.11d—Enables APs to communicate available radio channels and acceptable power levels. The
Cisco Unified Wireless IP Phone 7925G will always give precedence to 802.11d to determine which
channels and powers to use. If the information is unavailable, then the phone will fallback to the
locally configured regulatory domain.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-3
Page 34
Understanding WLAN Standards and Technologies
Radio Frequency Ranges
WLAN communications use the following RF ranges:
•2.4 GHz—Does not require licensing. To reduce interference within this bandwidth, WLANs
transmit on non-overlapping channels, which are typically limited to three channels, although Japan
uses four channels.
Many devices operate in the 2.4 GHz bandwidth including cordless phones and microwave ovens
and can interfere with wireless communications. Interference does not destroy the signal, but can
reduce the transmission speed from 11 Mbps to 1 Mbps. RF interference can affect voice quality
over the wireless network.
•5 GHz—Divided into several sections called Unlicensed National Information Infrastructure (UNII)
bands and has four channels each. The channels are spaced at 20 MHz to provide non-overlapping
channels and more channels than 802.11b or 802.11g.
Table 2-1 lists frequency band ranges and operating channels by regulatory domain.
Ta b l e 2-1Frequency Bands and Operating Channels by Regulatory Domain
Regulatory DomainFrequency Band RangeOperating Channels
Federal Communications
Commission (FCC)
Product number is
CP-7925GA-K9
Chapter 2 Overview of the VoIP Wireless Network
2.412-2.462 GHz11 channels
5.15-5.25 GHz (UNII-1)
5.25-5.35 GHz (UNII-2)
8 of 11 channels
5.725-5.825 (UNII-3)
5.470 - 5.725 (DFS)
5.47-5.725 GHz
(pending approval
ETSI (Europe)2.412-2.472 GHz13 channels
Product number is
CP-7925GE-K9
Japan2.412-2.472 GHz13 channels (ODFM)
Product number is
CP-7925GPC-CH1-K9
World
Product number is
CP-7925GW-K9
5.15-5.725 GHz 19 channels
2.412-2.484 GHz14 channels (CCK)
5.15-5.35 GHz 8 channels
—Uses 802.11d to identify band
11 channels
ranges and channels
802.11 Data Rates, Tx Power, Ranges, and Decibel Tolerances
Table 2-2 lists the Tx power capacities, data rates, ranges in feet and meters, and decibels tolerated by
the receiver by 801.11 standard.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-4
OL-15984-01
Page 35
Chapter 2 Overview of the VoIP Wireless Network
Ta b l e 2-2Tx Power, Data Rates, Ranges, and Decibels by Standard
Understanding WLAN Standards and Technologies
Standard
Maximum
Tx Power
1
Data Rate
2
Range
Receiver
Sensitivity
802.11a
40mW6 Mbps 610 ft (186 m)-89 dBm
9 Mbps610 ft (186 m)-88 dBm
12 Mbps558 ft (170 m)-86 dBm
18 Mbps541 ft (165 m)-85 dBm
24 Mbps508 ft (155 m)-82 dBm
36 Mbps426 ft (130 m)-80 dBm
48 Mbps328 ft (100 m)-76 dBm
54 Mbps295 ft (90 m)-74 dBm
802.11g
40mW6 Mbps 722 ft (220 m)-90 dBm
9 Mbps656 ft (200 m)-89 dBm
12 Mbps623 ft (190 m)-87 dBm
18 Mbps623 ft (190 m)-85 dBm
24 Mbps623 ft (190 m)-82 dBm
36 Mbps492 ft (150 m)-78 dBm
48 Mbps410 ft (125 m)-74 dBm
54 Mbps394 ft (120 m)-73 dBm
802.11b
50mW1 Mbps 1,027 ft (313 m)-95 dBm
2 Mbps951 ft (290 m)-89 dBm
5.5 Mbps853 ft (260 m)-89 dBm
11 Mbps787 ft (240 m)-85 dBm
1. Adjusts dynamically when associating with an AP if the AP client setting is enabled.
2. Advertised rates by the APs are used. If the Restricted Data Rates functionality is enabled in the Cisco Unified
Communications Manager Administration phone configuration, then the Traffic Stream Rate Set IE (CCX V4) is used.
Wireless Modulation Technologies
Wireless communications uses the following modulation technologies for signaling:
•Direct-Sequence Spread Spectrum (DSSS)—Prevents interference by spreading the signal over the
frequency range or bandwidth. DSSS technology multiplexes chunks of data over several
frequencies so that multiple devices can communicate without interference. Each device has a
special code that identifies its data packets and all others are ignored. Cisco wireless 802.11b/g
products use DSSS technology to support multiple devices on the WLAN.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-5
Page 36
Understanding WLAN Standards and Technologies
•Orthogonal Frequency Division Multiplexing (OFDM)—Transmits signals by using RF. OFDM is
a physical–layer encoding technology that breaks one high-speed data carrier into several
lower-speed carriers to transmit in parallel across the RF spectrum. OFDM, when used with 802.11g
and 802.11a, can support data rates as high as 54 Mbps.
Table 2-3 provides a comparison of data rates, number of channels, and modulation technologies by
standard.
Ta b l e 2-3Data Rates, Number of Channels, and Modulation Technologies by IEEE Standard
APs transmit and receive RF signals over channels within the 2.4 GHz or 5.1 to 5.8 GHz frequency band.
To provide a stable wireless environment and reduce channel interference, you must specify
non-overlapping channels for each AP. The recommended channels for 802.11b and 802.11g in North
America are 1, 6, and 11.
Regulatory domains determine the number of channels that wireless communications can use within the
frequency band.
regulatory domains. The Cisco Unified Wireless IP Phone 7925G uses the fourth domain for all other
regions in the world. Wireless LANs in the rest of the world use 802.11d to identify band ranges and
channels.
NoteIn a non controller-based wireless network, it is recommended that you statically configure channels for
each AP. If your wireless network uses a controller, use the Auto-RF feature with minimal voice
disruption.
The AP coverage area depends on its type of antenna and transmission power. The AP coverage range
is from 500 to 1000 feet with effective isotropic radiated power (EIRP) output that scales at 1, 5, 20, and
50 mW. To provide effective coverage, APs need a range overlap of approximately 20 percent to allow
uninterrupted connections as phone users roam from one AP to another.
Wireless networks use a service set identifier (SSID). The SSID differentiates one WLAN from another,
so all APs and all devices attempting to connect to a specific WLAN must use the same SSID. The SSID
groups user devices and associates the group with the APs.
For more information about wireless network components and design, refer to the Overview: Cisco Unified Wireless Network at
Table 2-1 lists the frequency ranges, operating channels, and product numbers for four
For more information about APs, see the “VoIP WLAN Configuration” section on page 2-21.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-6
OL-15984-01
Page 37
Chapter 2 Overview of the VoIP Wireless Network
WLANs and Roaming
Wireless IP phones provide communication mobility to users within the WLAN environment. Unlike
cellular phones that have broad coverage, the coverage area for the wireless IP
therefore, phone users frequently roam from one AP to another. To understand some of the limitations
of roaming with wireless IP phones, these examples provide information about the WLAN environment.
•Pre-call Roaming—A wireless IP phone user powers on the phone in the office, and the phone
associates with the nearby AP. The user leaves the building, moves to another building, and then
places a call. The phone associates with a different AP in order to place the call from the new
location. If the associated AP is within the same Layer 2 VLAN, the IP address remains the same
for the phone. But, if the roaming phone crosses a Layer 3 boundary with DHCP enabled, the phone
recognizes that it is no longer in the same subnet. The phone requests a new IP address before it can
connect to the network and place the call.
NoteIf a user leaves the WLAN coverage area and then comes back into the same WLAN area, the
phone must reconnect to the network. By pressing a key on the phone, the user activates the
phone and increases the scanning rate to speed up reconnecting to the network.
Understanding WLAN Standards and Technologies
phone is smaller;
•Mid-call Roaming—A wireless IP phone user is actively engaged in a call and moves from one
building to another. The roaming event occurs when the phone moves into the range of a different
AP, and then the phone authenticates and associates with the new AP. The previous AP hands the
call over to the new AP while maintaining continuous audio connection without user intervention.
As long as the APs are in the same Layer 2 subnet, the wireless IP
and the call continues. As a wireless IP
new AP. See the
“Authentication Methods” section on page 2-16 for information about
phone roams between APs, it must re-authenticate with each
phone keeps the same IP address
authentication.
If the wireless IP phone user moves from an AP that covers IP Subnet A to an AP that covers IP
Subnet B, the phone no longer has an IP address or gateway that is valid within the new subnet and
the call can disconnect.
•Layer 3 Roaming—With the release of the Cisco Catalyst 6500 Series Wireless LAN Services
Module (WLSM), the Cisco
Unified Wireless IP Phone 7925G now supports Layer 3 roaming for
autonomous mode APs. For details about the Cisco WLSM, refer to the product documentation
available at:
Layer 3 roaming with lightweight mode APs is accomplished by controllers that use dynamic
interface tunneling. Clients that roam across controllers and VLANS can keep their IP address when
using the same SSID.
•Fast and Secure Roaming—Cisco Centralized Key Management (CCKM) enables authenticated
client devices to roam securely from one AP to another without any perceptible delay during
reassociation. With the support of CCKM protocol, the wireless
IP phone is able to negotiate the
handoff from one AP to another more easily. During the roaming process, the phone must scan for
the nearby APs, determine which AP can provide the best service, and then reassociate with the new
AP. When implementing stronger authentication methods, such as WPA and EAP, the number of
information exchanges increases and causes more delay during roaming. To avoid additional delays,
use CCKM to manage authentication.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-7
Page 38
Bluetooth Wireless Technology
NoteIn dual band WLANs, it is possible to roam between 2.4 GHz bands (802.11b/g) and 5 GHz bands
(802.11a). The phone moves out of range of one AP using one band and into the range of another that
has the same SSID but is using a different band. This can cause gaps in voice communications. To avoid
these communication gaps, try to use only one band for voice communications.
Related Topics
•Voice QoS in a Wireless Network, page 2-12
•Configuring the Wireless Network for Voice, page 2-22
Chapter 2 Overview of the VoIP Wireless Network
CCKM, a centralized key management protocol, provides a cache of session credentials on the
wireless domain server (WDS). As the phone roams from one AP to the next, CCKM compresses
the number of message exchanges during roaming by providing a master key stored on the WDS for
the AP to use. The reassociation exchange is reduced to two messages, thereby reducing the roaming
time.
For details about CCKM, refer to the “Cisco Fast Secure Roaming Application Note” at:
Bluetooth Class 2.0 with Extended Data Rate (EDR) is a short-range wireless technology that is
supported by the Cisco Unified Wireless IP Phone 7925G. It supports the Hands-Free Profile version 1.5.
Your Cisco Unified Wireless IP Phone 7925G is a qualified Bluetooth wireless device (Qualified Device
ID (QDID) B014396) and provides voice communication over the same wireless LAN that your
computer uses.
Bluetooth enables low bandwidth wireless connections within a range of 10 meters. The best
performance is in the 1 to 2 meter range. Synchronous voice channels are provided by using circuit
switching and asynchronous data channels are provided by using packet switching.
Bluetooth wireless technology operates in the 2.4 GHz band which is the same as the 802.11b/g band.
There can be a potential interference issues. It is recommended that you:
•Use 802.11a that operates in the 5 GHz band.
•Reduce the proximity of other 802.11b/g devices, Bluetooth devices, microwave ovens, and large
metal objects.
•Use the Cisco Unified Wireless IP Phone 7925G on the same side of the body as the
Bluetooth-enabled headset.
Pairing Headsets
The Cisco Unified Wireless IP Phone 7925G pairs with headsets using a shared key authentication and
encryption method. The authentication process can require a personal identification number (PIN)
specific to the headset, commonly “0000.” The Cisco
with more than one headset at a time. Pairing is typically performed once for each headset.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-8
Unified Wireless IP Phone 7925G can be paired
OL-15984-01
Page 39
Chapter 2 Overview of the VoIP Wireless Network
Once a device has been paired, its Bluetooth connection is maintained as long as both devices (phone
and headset) are enabled and within range of each other. The connection re-establishes itself
automatically if either of the devices powers down then powers up. The green-dotted Bluetooth icon
indicates whether or not a device is connected.
When headsets are more than 10 meters away from Cisco Unified Wireless IP Phone 7925G, Bluetooth
drops the connection after a 15 to 20 second timeout. If the paired headset comes back into range of the
Cisco Unified Wireless IP Phone 7925G and the phone is not connected to another Bluetooth headset,
then the in-range Bluetooth headset automatically reconnects. For certain phone types that operate in
power-save modes, the user may have to “wake-up” the headset by tapping on its operational button to
initiate the reconnect.
NoteIt is recommended that users read the headset user guide for more information about pairing and
connecting the headsets.
Components of the VoIP Wireless Network
Components of the VoIP Wireless Network
The wireless IP phone must interact with several network components in the WLAN to successfully
place and receive calls. The following topics describe network components:
•Networking Protocols Used with Cisco Unified Wireless IP Phones, page 2-9
•Interacting with Cisco Unified Wireless APs, page 2-11
•Voice QoS in a Wireless Network, page 2-12
•Interacting with Cisco Unified Communications Manager, page 2-14
•Interacting with the Dynamic Host Configuration Protocol Server, page 2-15
Networking Protocols Used with Cisco Unified Wireless IP Phones
Cisco Unified IP Phones support several networking protocols for voice communication. Table 2-4
describes the networking protocols that the Cisco Unified Wireless IP Phone 7925G supports.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-9
Page 40
Components of the VoIP Wireless Network
Ta b l e 2-4Supported Networking Protocols
Networking ProtocolPurposeUsage Notes
Cisco Discovery
Protocol (CDP)
Dynamic Host
Configuration Protocol
(DHCP)
IPMessaging protocol that addresses
Chapter 2 Overview of the VoIP Wireless Network
Device-discovery protocol that runs
on all Cisco-manufactured
equipment.
Using CDP, a device can advertise its
existence to other devices and
receive information about other
devices in the network.
Dynamically allocates and assigns an
IP address to network devices.
DHCP enables an IP phone to
connect to the network and become
operational without the administrator
assigning an IP address or
configuring additional network
parameters.
and sends packets across the
network.
Cisco Unified IP Phones use CDP to
communicate information such as
auxiliary VLAN ID, per-port power
management details, and QoS
configuration information with the
Cisco Catalyst switch.
DHCP is enabled by default. If
disabled, you must manually
configure the IP address, subnet
mask, gateway, and an TFTP server
on each phone locally.
Use DHCP custom option 150. With
this method, you configure the TFTP
server IP address as the option value.
For additional supported DHCP
configurations, refer to Cisco
Unified
Communications Manager
System Guide.
To communicate using IP, network
devices must have an assigned IP
address, subnet, and gateway.
Real-Time Control
Protocol (RTCP)
Used with the RTP protocol to
provide control over the transporting
of real-time data, such as interactive
voice and video, over data networks.
RTPStandard for transporting real-time
data, such as interactive voice and
video, over data networks.
SCCPUses Cisco-proprietary messages to
communicate between IP devices and
Cisco Unified Communications
Manager, Release 4.x, 5.1, 6.0, 6.1,
and 7.0.
IP addresses, subnet, and gateway
identifications are automatically
assigned if you are using the Cisco
Unified
IP Phone with DHCP. If you
are not using DHCP, you must
manually assign these properties to
each phone locally.
Cisco Unified IP Phones use the
RTCP protocol to allow monitoring
of the data delivery and minimal
control and identification
functionality.
Cisco Unified IP Phones use the RTP
protocol to send and receive
real-time voice traffic from other
phones and gateways.
Cisco Unified IP Phones use SCCP
protocol for VoIP call signaling and
enhanced features such as Message
Waiting Indication (MWI).
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
On the Cisco Unified IP Phone,
TFTP enables you to obtain a
configuration file specific to the
phone type.
securing and authenticating
communications.
Connectionless messaging protocol
for delivery of data packets.
Components of the VoIP Wireless Network
Cisco Unified IP Phones use TCP to
connect to Cisco
Unified
Communications Manager
and to access XML services.
You must have a TFTP server in your
network that the DHCP server
automatically identifies. If more than
one TFTP server is running in your
network, you must manually assign a
TFTP server to each phone.
When security is implemented, Cisco
Unified
IP Phones use the TLS
protocol when securely registering
with Cisco Unified
Communications
Manager.
Cisco Unified IP Phones receive and
process UDP messages. RTP voice
traffic runs over UDP.
Related Topics
•Understanding the Phone Startup Process, page 3-17
•Components of the VoIP Wireless Network, page 2-9
•Configuring DHCP Settings, page 5-6
Interacting with Cisco Unified Wireless APs
Wireless IP phones use the same APs as wireless data devices. However, voice traffic over a WLAN
requires different equipment configurations and layouts than a WLAN that is used exclusively for data
traffic. Data transmission can tolerate a higher level of RF noise, packet loss, and channel contention
than voice transmission. Packet loss during voice transmission can cause choppy or broken audio and
make the phone call inaudible.
Wireless IP Phones users are mobile and often roam across a campus or between floors in a building
while connected to a call. In contrast, data users remain in one place or occasionally move to another
location. The ability to roam while maintaining a call is one of the advantages of wireless voice so RF
coverage needs to include stairwells, elevators, quiet corners outside conference rooms, and passage
ways.
To ensure good voice quality and optimal RF signal coverage, you must perform a site survey. The site
survey will determine settings suitable to wireless voice and assist in the design and layout of the
WLAN; for example AP placement, power levels, and channel assignments.
After deploying and using wireless voice, you should continue to perform post installation site surveys.
When you add a group of new users, install more equipment, or stack large amounts of inventory, you
are changing the wireless environment. A post installation survey will verify that the AP coverage is still
adequate for optimal voice communications. See the
more information.
“Site Survey Verification” section on page 2-22 for
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-11
Page 42
Components of the VoIP Wireless Network
Associating to APs
At startup, the Cisco Unified Wireless IP Phone 7925G scans for APs with SSIDs and encryption types
that it recognizes. The phone builds and maintains a list of eligible APs and uses the following variables
to determine the best AP.
•Received Signal Strength Indicator (RSSI)—Signal strength of available APs within the RF
coverage area. The phone attempts to associate with the AP with the highest RSSI value.
•QoS Basic Service Set (QBSS)—Beacon information element (IE) that sends the channel usage of
the AP to the wireless IP
effectively handle more traffic.
NoteQBSS is not supported when using Wi-Fi 802.11a.
•Traffic Specification (TSpec)—Calculation of call limits and WLAN load balancing. The TSpec
value of each voice stream allows the system to allocate bandwidth to voice devices on a first-come,
first-served basis. For more information, see
page 2-12.
Chapter 2 Overview of the VoIP Wireless Network
phone. The phone uses the QBSS value to determine whether the AP can
“Voice QoS in a Wireless Network” section on
The wireless IP phone associates with the AP with the highest RSSI and lowest channel usage values
(QBSS) that have matching SSID and encryption types.To ensure that voice traffic is handled properly,
you must configure the correct QoS in the AP. For configuration information, see
Requirements for VoIP” section on page 2-21.
Related Topics
•Security for Voice Communications in WLANs, page 2-16
•VoIP WLAN Configuration, page 2-21
Voice QoS in a Wireless Network
Voice traffic on the Wireless LAN, like data traffic, is susceptible to delay, jitter, and packet loss. These
issues do not impact the data end user, but have serious implications for a voice call. To ensure that voice
traffic receives timely and reliable treatment with low delay and low jitter, you must use Quality of
Service (QoS), and use separate virtual LANs (VLANs) for voice and data. By isolating the voice traffic
onto a separate VLAN, you can use QoS to provide priority treatment for voice packets when traveling
across the network. Also, use a separate VLAN for data traffic, not the default native VLAN which is
typically used for all network devices.
You need the following VLANs on the network switches and the APs that support voice connections on
the WLAN.
•Voice VLAN—Voice traffic to and from the wireless IP phone
“Wireless Network
•Data VLAN—Data traffic to and from the wireless PC
•Native VLAN—Data traffic to and from other wireless devices
Assign separate SSIDs to the voice and to the data VLANs. If you configure a separate management
VLAN in the WLAN, do not associate an SSID with the management VLAN.
By separating the phones into a voice VLAN and marking voice packets with higher QoS, you can ensure
that voice traffic gets priority treatment over data traffic resulting in lower packet delay and fewer lost
packets.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-12
OL-15984-01
Page 43
Chapter 2 Overview of the VoIP Wireless Network
119160
Downstream
Upstream
Downstream
Upstream
Network
Downstream QoS only
Bi-Directional QoS
Unlike wired networks with dedicated bandwidths, wireless LANs consider traffic direction when
implementing QoS. Traffic is classified as upstream or downstream from the point of view of the AP as
shown in
Figure 2-2Voice Traffic in a Wireless Network
Figure 2-2.
Beginning with Cisco IOS release 12.2(11)JA, Cisco Aironet APs support the contention-based channel
access mechanism called Enhanced Distributed Coordination Function (EDCF). The EDCF-type of QoS
has up to eight queues for downstream (toward the 802.11b/g clients) QoS. You can allocate the queues
based on these options:
•QoS or Differentiated Services Code Point (DSCP) settings for the packets
Components of the VoIP Wireless Network
•Layer 2 or Layer 3 access lists
•VLANs for specific traffic
•Dynamic registration of devices
Although you can have up to eight queues on the AP, you should use only two queues for voice traffic
to ensure the best possible voice QoS. Place voice (RTP) and signaling (SCCP) traffic in the highest
priority queue, and place data traffic in a best-effort queue.Although 802.11b/g EDCF does not
guarantee that voice traffic is protected from data traffic, you should get the best statistical results by
using this queuing model.
NoteThe Cisco Unified Wireless IP Phone 7925G marks the SCCP signaling packets with a DSCP
value of 24 and RTP packets with DSCP value of 46.
To improve reliability of voice transmissions in a nondeterministic environment, the Cisco Unified
Wireless IP
Phone 7925G supports the IEEE 802.11e industry standard and is Wi-Fi Multimedia
(WMM) capable. WMM enables differentiated services for voice, video, best effort data and other
traffic. However, in order for these differentiated services to provide sufficient QoS for voice packets,
only a certain amount of voice bandwidth can be serviced or admitted on a channel at one time. If the
network can handle “N” voice calls with reserved bandwidth, when the amount of voice traffic is
increased beyond this limit, (to N+1 calls), the quality of all calls suffers.
To help address the problems of VoIP stability and roaming, an initial Call Admission Control (CAC)
scheme is required. With CAC, QoS is maintained in a network overload scenario by ensuring that the
number of active voice calls does not exceed the configured limits on the AP. The Cisco
Wireless IP
Phone 7925G can integrate layer 2 TSpec admission control with layer 3 Cisco Unified
Unified
Communications Manager admission control (RSVP). During times of network congestion, calling or
called parties receive a fast busy indication. The system maintains a small bandwidth reserve so wireless
phone clients can roam into a neighboring AP (AP), even when the AP is at “full capacity”. After
reaching the voice bandwidth limit, the next call is load-balanced to a neighboring AP without affecting
the quality of the existing calls on the channel.
OL-15984-01
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-13
Page 44
Chapter 2 Overview of the VoIP Wireless Network
Components of the VoIP Wireless Network
Implementing QoS in the connected Ethernet switch is highly desirable to maintain good voice quality.
The COS and DSCP values that the Cisco
modified. To configure QoS correctly on the AP, see the
Unified Wireless IP Phone 7925G sets do not need to be
“Wireless Network Requirements for VoIP”
section on page 2-21.
Related Topics
•Authentication Methods, page 2-16
•Interacting with Cisco Unified Communications Manager, page 2-14
•VoIP WLAN Configuration, page 2-21
Interacting with Cisco Unified Communications Manager
Cisco Unified Communications Manager is the call control component in the network that handles and
routes calls for the wireless
components of the IP telephony system—the phones, access gateways, and the resources—for such
features as call conferencing and route planning. When deploying Cisco
IP
Phone 7925G, you must use Cisco Unified Communications Manager Release 4.1, 4.2, 4.3, 5.1,
6.0(1), 6.1(1) or 7.0(1) and SCCP protocol.
IP phones. Cisco Unified Communications Manager manages the
Unified Wireless
Before Cisco Unified Communications Manager can recognize a phone, it must register with Cisco
Unified
Communications Manager and be configured in the database. For information about setting up
phones in Cisco Unified Communications Manager, see the
Cisco Unified Wireless IP Phone 7925G” section on page 1-14.
You can find more information about configuring Cisco Unified Communications Manager to work with
the IP phones and IP devices in the Cisco Unified
Cisco Unified
Related Topics
•Overview of Configuring and Installing the Cisco Unified Wireless IP Phone 7925G, page 1-14
•Phone Configuration Files and Profile Files, page 2-14
Communications Manager System Guide.
Phone Configuration Files and Profile Files
Configuration files for a phone define parameters for connecting to Cisco Unified Communications
Manager and are stored on the TFTP server. In general, any time you make a change in Cisco
Unified
configuration file changes automatically.
Configuration files also contain information about the correct image load for the phone. If this image
load differs from the one currently loaded on a phone, the phone contacts the TFTP server to request the
new image file.
The phone first requests the configuration file SEPxxxxxxxxxxxx.cnf.xml, where each xx is the two-digit
lowercase hexadecimal representation of each integer in the MAC address. If the phone cannot find this
file, it requests the configuration file XMLDefault.cnf.xml.
After the phone obtains the *.cnf.xml files, it requests a phone-specific profile file. If a phone cannot
find this profile file, it requests the appropriate common profile file.
Communications Manager Administration that requires resetting the phone, the phone
“Overview of Configuring and Installing the
Communications Manager Administration Guide and
After the phone finds one of the profile files, or if it cannot find a profile file, it continues with its startup
process.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-14
OL-15984-01
Page 45
Chapter 2 Overview of the VoIP Wireless Network
Components of the VoIP Wireless Network
Related Topic
Understanding the Phone Startup Process, page 3-17
Interacting with the Dynamic Host Configuration Protocol Server
Dynamic Host Configuration Protocol (DHCP) is a communications protocol that lets network
administrators manage and automate the assignment of IP addresses in a network. When an IP device is
added to the network, it must have a unique IP address. Without DHCP, the IP address must be entered
manually at each device. DHCP allocates IP addresses dynamically and reuses IP addresses when
devices no longer need them.
If DHCP is enabled in the network, the Cisco Unified Wireless IP Phone 7925G uses the DHCP scope
settings in the DHCP server to perform the phone provisioning bootup process. You must configure the
settings of the DHCP server in the Cisco Unified
The DHCP scope settings include the following:
•TFTP servers
•DNS server IP address (optional unless using host names)
Communications Manager network.
•Pool and range of the subnet mask, IP address, and gateway
The priority of the DHCP settings for the TFTP server is unique to the Cisco Unified Wireless
IP
Phone 7925G, as shown in Table 2-5.
Ta b l e 2-5DHCP Settings Priority
PriorityDHCP Settings
1stDHCP option 150
2ndDHCP option 66
3rdSIADDR
4thciscoCM1
If DHCP is disabled, the Cisco Unified Wireless IP Phone 7925G uses the following network settings in
Table 2-6 to perform the phone provisioning bootup process. You must configure these static parameters
for each Cisco Unified Wireless IP Phone 7925G.
Ta b l e 2-6Static IP Addresses When DHCP is Disabled
Static SettingDescription
IP AddressIP address, the unique identifier assigned by the system administrator
for the phone.
Subnet MaskUsed to partition the IP address into a network identifier and host
identifier so TCP/IP can distinguish between them.
Default Router 1Identifies the gateway that provides connectivity to the IP network
beyond the subnet to which the phone belongs.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-15
Page 46
Chapter 2 Overview of the VoIP Wireless Network
Security for Voice Communications in WLANs
Table 2-6Static IP Addresses When DHCP is Disabled (continued)
Static SettingDescription
DNS Server 1
DNS Server 2
TFTP Server 1
TFTP Server 2
If the system is configured to use host names for servers instead of IP
addresses, identifies the primary and secondary DNS server to resolve
host names.
Identifies the TFTP servers that the phone uses to obtain
configuration files.
Security for Voice Communications in WLANs
Because all WLAN devices that are within range can receive all other WLAN traffic, securing voice
communications is critical in WLANs. To ensure that voice traffic is not manipulated or intercepted by
intruders, the Cisco
SAFE Security architecture. For more information about security in networks, refer to
Unified Wireless IP Phone 7925G and Cisco Aironet APs are supported in the Cisco
•Authentication Methods, page 2-16
•Authenticated Key Management, page 2-18
•Encryption Methods, page 2-18
•Choosing AP Authentication and Encryption Methods, page 2-18
Authentication Methods
The Cisco Wireless IP telephony solution provides wireless network security that prevents unauthorized
logins and compromised communications by using the following authentication methods.
•Open Authentication—Any wireless device can request authentication in an open system. The AP
that receives the request may grant authentication to any requestor or only to requestors on a list of
users. Communication between the wireless device and AP could be non-encrypted or devices can
use Wired Equivalent Privacy (WEP) keys to provide security. Devices that are using WEP only
attempt to authenticate with an AP that is using WEP.
•Shared Key Authentication—The AP sends an unencrypted challenge text string to any device
attempting to communicate with the AP. The device that is requesting authentication uses a
pre-configured WEP key to encrypt the challenge text and sends it back to the AP. If the challenge
text is encrypted correctly, the AP allows the requesting device to authenticate. A device can
authenticate only if its WEP key matches the WEP key on the APs.
Shared key authentication can be less secure than open authentication with WEP because someone
can monitor the challenges. An intruder can calculate the WEP key by comparing the unencrypted
and encrypted challenge text strings.
•Wireless Protected Access (WPA) Pre-Shared Key (PSK) Authentication—The AP and the phone
are configured with the same authentication key. The pre-shared key is used to create unique
pair-wise keys that are exchanged between each phone and the AP. You can configure the pre-shared
key as a hexadecimal or ASCII character string. Because the pre-shared key is stored on the phone,
it might be compromised if the phone is lost or stolen.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-16
OL-15984-01
Page 47
Chapter 2 Overview of the VoIP Wireless Network
•Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST)
Authentication—This client server security architecture encrypts EAP transactions within a
Transport Level Security (TLS) tunnel between the AP and the RADIUS server such as the
Cisco
Access Control Server (ACS).
The TLS tunnel uses Protected Access Credentials (PACs) for authentication between the client
(phone) and the RADIUS server. The server sends an Authority ID (AID) to the client (phone),
which in turn selects the appropriate PAC. The client (phone) returns a PAC-Opaque to the RADIUS
server. The server decrypts the PAC with its master-key. Both end points now have the PAC key
and a TLS tunnel is created. EAP-FAST supports automatic PAC provisioning, but you must enable
it on the RADIUS server.
NoteIn the Cisco ACS, by default, the PAC expires in one week. If the phone has an expired PAC,
authentication with the RADIUS server takes longer while the phone gets a new PAC. To avoid
the PAC provisioning delays, set the PAC expiration period to 90 days or longer on the ACS or
RADIUS server.
•Extended Authentication Protocol Transport Level Security (EAP-TLS)
Authentication—EAP–TLS/RFC 2716 uses the TLS protocol (RFC 2246), which is the latest IETF
version of the SSL security protocol. TLS provides a way to use certificates for both user and server
authentication, and for dynamic session key generation.
Microsoft Windows XP provides support for 802.1x, allowing EAP authentication protocols
(including EAP-TLS) to be used for authentication. The authentication used in EAP-TLS is mutual:
the server authenticates the user and the user authenticates the server. Mutual authentication is
required in a WLAN. EAP-TLS provides excellent security but requires client certificate
management.
Security for Voice Communications in WLANs
EAP-TLS uses Public Key Infrastructure (PKI) with the following conditions:
–
Wireless LAN client (user machine) requires a valid certificate to authenticate to the WLAN
network.
–
AAA server requires a “server” certificate to validate its identity to the clients.
–
Certificate Authority (CA) server infrastructure issues certificates to the AAA server and the
clients.
authentication scheme between the client (phone) and a RADIUS server. Cisco
IP
Phone 7925G can use LEAP for authentication with the wireless network.
Unified Wireless
This section describes the following concepts:
•Authenticated Key Management, page 2-18
•Encryption Methods, page 2-18
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-17
Page 48
Security for Voice Communications in WLANs
Authenticated Key Management
The following authentication schemes use the RADIUS server to manage authentication keys:
•WPA—Uses information on a RADIUS server to generate unique keys for authentication. Because
these keys are generated at the centralized RADIUS server, WPA provides more security than WPA
pre-shared keys that are stored on the AP and phone.
•Cisco Centralized Key Management (CCKM)—Uses information on a RADIUS server and a
wireless domain server (WDS) to manage and authenticate keys. The WDS creates a cache of
security credentials for CCKM-enabled client devices for fast and secure reauthentication.
With WPA and CCKM, encryption keys are not entered on the phone, but are automatically derived
between the AP and phone. But the EAP username and password that are used for authentication must
be entered on each phone.
Encryption Methods
To ensure that voice traffic is secure, the Cisco Unified Wireless IP Phone 7925G supports WEP, TKIP,
and Advanced Encryption Standards (AES) for encryption. When using these mechanisms for
encryption, both the signaling Skinny Client Control Protocol (SCCP) packets and voice Real-Time
Transport Protocol (RTP) packets are encrypted between the AP and the wireless IP phone.
Chapter 2 Overview of the VoIP Wireless Network
•WEP—When using WEP in the wireless network, authentication happens at the AP by using open
or shared-key authentication. The WEP key that is setup on the phone must match the WEP key that
is configured at the AP for successful connections. The Cisco
supports WEP keys that use 40-bit encryption or a 128-bit encryption and remain static on the phone
and AP.
EAP and CCKM authentication can use WEP keys for encryption. The RADIUS server manages the
WEP key and passes a unique key to the AP after authentication for encrypting all voice packets;
consequently, these WEP keys can change with each authentication.
•TKIP—WPA and CCKM use TKIP encryption that has several improvements over WEP. TKIP
provides per-packet key ciphering and longer initialization vectors (IVs) that strengthen encryption.
In addition, a message integrity check (MIC) ensures that encrypted packets are not being altered.
TKIP removes the predictability of WEP that helps intruders decipher the WEP key.
•AES—An encryption method used for WPA2 authentication. This national standard for encryption
uses a symmetrical algorithm that has the same key for encryption and decryption. AES uses Cipher
Blocking Chain (CBC) encryption of 128 bits in size, supporting key sizes of 128, 192 and 256 bits,
as a minimum.
NoteThe Cisco Unified Wireless IP Phone 7925G does not support Cisco Key Integrity Protocol
(CKIP) with CMIC.
Choosing AP Authentication and Encryption Methods
Unified Wireless IP Phone 7925G
Authentication and encryption schemes are setup within the wireless LAN. VLANS are configured in
the network and on the APs and specify different combinations of authentication and encryption. An
SSID is associated with a VLAN and its particular authentication and encryption scheme. In order for
wireless client devices to authenticate successfully, you must configure the same SSIDs with their
authentication and encryption schemes on the APs and on the wireless IP
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-18
phone.
OL-15984-01
Page 49
Chapter 2 Overview of the VoIP Wireless Network
Some authentication schemes require specific types of encryption. With Open authentication, you have
the option to use static WEP for encryption for added security. But if you are using Shared Key
authentication, you must set static WEP for encryption, and you must configure a WEP key on the phone.
When using Authenticated Key Management (AKM) for the Cisco Unified Wireless IP Phone 7925G,
several choices for both authentication and encryption can be set up on the APs with different SSIDs.
When the phone attempts to authenticate, it chooses the AP that advertises the authentication and
encryption scheme that the phone can support. Auto (AKM) mode can authenticate by using WPA,
WPA2, WPA Pre-shared key, or CCKM.
Note• When using WPA Pre-shared key or WPA2 Pre-shared key, the pre-shared key must be statically
set on the phone. These keys must match the keys configured on the AP.
•When using Auto (AKM), encryption options are automatically configured for WPA, WPA2, WPA
Pre-shared key, WPA2 Pre-shared key, or CCKM.
•In AKM mode, the phone will authenticate with LEAP if it is configured with WPA, WPA2, or
CCKM key management.
•The Cisco Unified Wireless IP Phone 7925G does not support auto EAP negotiation; to use
EAP-FAST mode, you must specify it.
Security for Voice Communications in WLANs
•If AKM and 802.1x are used, the authentication method is LEAP.
•The Cisco Unified Wireless IP Phone 7925G uses network EAP for 802.1x but you can enable open
EAP.
Table 2-7 provides a list of authentication and encryption schemes configured on the Cisco Aironet APs
supported by the Cisco Unified Wireless IP Phone 7925G. The table shows the network configuration
option for the phone that corresponds to the AP configuration.
Ta b l e 2-7Authentication and Encryption Schemes
Cisco Unified Wireless
Cisco AP Configuration
Authentication
Key
Management
Common
Encryption
IP
Phone 7925G Configuration
Authentication
Open NoneOpen
Open (Static WEP)WEPOpen+WEP
Shared key (Static WEP)WEP Shared+WEP
LEAP
Optional CCKMWEPLEAP or Auto (AKM)
802.1x
LEAP
WPA
LEAP
WPA with
TKIPLEAP or Auto (AKM)
Optional CCKM
WPA2AESLEAP or Auto (AKM)
WPA2
EAP-FAST
Optional CCKMWEPEAP-FAST
802.1x
EAP-FAST with WPAWPA
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
TKIPEAP-FAST
Optional CCKM
2-19
Page 50
Security for Voice Communications in WLANs
Table 2-7Authentication and Encryption Schemes (continued)
Cisco AP Configuration
Authentication
EAP-FAST with WPA2WPA2AESEAP-FAST
EAP-TLS
802.1x
EAP-TLS
WPA
EAP-TLS
WPA2
PEAP
802.1x
PEAP
WPA
PEAP
WPA2
WPA
Open and Network EAP
WPA-PSKWPA-PSKTKIP Auto (AKM)
WPA2-PSKWAP2-PSKAESAuto (AKM)
Chapter 2 Overview of the VoIP Wireless Network
Cisco Unified Wireless
IP Phone 7925G Configuration
Key
Management
Common
EncryptionAuthentication
Optional CCKMWEPEAP-TLS
WPA with
TKIPEAP-TLS
optional CCKM
WPA2AESEAP-TLS
Optional CCKMWEPPEAP
WPA with
TKIPPEAP
optional CCKM
WPA2AESPEAP
WPA
TKIP Auto (AKM) with WPA
Optional CCKM
2-20
For additional information about Cisco WLAN Security, refer to
For more information about configuring authentication and encryption schemes on APs, refer to the
Cisco Aironet Configuration Guide for your model and release at this URL:
•Networking Protocols Used with Cisco Unified Wireless IP Phones, page 2-9
•Authentication Methods, page 2-16
•Encryption Methods, page 2-18
•Interacting with Cisco Unified Communications Manager, page 2-14
•Components of the VoIP Wireless Network, page 2-9
•VoIP WLAN Configuration, page 2-21
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Page 51
Chapter 2 Overview of the VoIP Wireless Network
VoIP WLAN Configuration
This section provides configuration guidelines for deploying wireless IP phones in the WLAN and
includes these topics:
•Wireless Network Requirements for VoIP, page 2-21
•VoIP WLAN Configuration, page 2-21
Wireless Network Requirements for VoIP
The Cisco Unified Wireless IP Phone 7925G supports Cisco Aironet APs (APs) that can run Cisco IOS
in autonomous mode and APs that run in lightweight mode with lightweight AP protocol (LWAPP) and
use a Cisco Unified wireless LAN controller.
mode in the WLAN.
When configuring VoWLAN, use APs that run Cisco IOS Release 12.3(8)JA or later. It is recommended
that Cisco Aironet 1130AG, 1240AG, 1250 series APs run Cisco IOS Release 12.3(4g)JA1 or later.
Controllers should be running version 4.0217.0 (minimum) or version 4.2.61.0 or later, which is
recommended. The controllers should have Cisco IOS Release 12.3(8)JX or later configured also.
VoIP WLAN Configuration
Table 2-8 lists the supported AP models and operation
NoteVoice over the wireless LAN (VoWLAN) does not currently support MESH technology such as Cisco
Aironet 1500 Series Lightweight Outdoor Mesh APs or third-party APs are not supported.
Ta b l e 2-8Supported APs and Modes
AP ModelsAutonomous ModeLightweight Mode
Cisco Aironet 500 SeriesYesYes
Cisco Aironet 1100 SeriesYesYes
Cisco Aironet 1130AG SeriesYesYes
Cisco Aironet 1200 SeriesYesYes
Cisco Aironet 1230 SeriesYesYes
Cisco Aironet 1240AG SeriesYesYes
Cisco Aironet 1250 SeriesYesYes
Cisco Aironet 1300 SeriesYesYes
Cisco 1000 Series LightweightNoYes
NoteBe aware that Wi-Fi compliant APs that are manufactured by third-party vendors can function with the
Cisco
Unified Wireless IP Phone 7925G, but might not support key features such as Dynamic Transmit
Power Control (DTPC), ARP-caching, LEAP/EAP-FAST, QBSS, U-APSD, 802.11d and 802.11h.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-21
Page 52
Site Survey Verification
Configuring the Wireless Network for Voice
This section identifies key AP configuration options that are required for optimal voice performance.
This is not a complete list of configuration steps or options for deploying APs such as the Cisco Aironet
APs. For more information about configuring your AP, refer to the appropriate Cisco
installation and configuration guide for your model or the documentation for your AP.
NoteWhen deploying the Cisco Unified Wireless IP Phone 7925G with World regulatory domain
(CP-7925GW-K9), you must enable the APs for world mode (802.11d). The world model phone gets the
channels and power information from the AP.
To see a list of configuration tasks for the Cisco Aironet AP, controller, and Ethernet switch when setting
up VoIP on the WLAN, see the
Configuration Tip for Cisco Aironet APs
If you are using EAP-FAST, you must increase the EAP request (802.1x) timeout to at least 20 seconds
to ensure that the phone gets the PAC credentials successfully.
To change the request timeout on the controller, follow these steps:
“Configuring a Wireless Network” section on page D-1.
Chapter 2 Overview of the VoIP Wireless Network
Aironet AP
Procedure
Step 1Use SSH or Telnet to access the Cisco Unified wireless LAN controller.
Before the initial deployment of wireless phones in the WLAN, it is recommended that a site survey is
performed to verify that the APs are providing adequate coverage and that wireless phones can roam
from one AP to another with no audio problems. After the initial deployment, it is a good practice to
perform site surveys at regular intervals to ensure continued coverage and roaming.
From the Cisco Unified Wireless IP Phone 7925G, you can use the Neighbor List utility or Site Survey
utility from the SETTINGS > Status menu.
The Neighbor List utility provides information about the current AP and the closest neighbors tracked
by the phone. For more information see
The Site Survey utility produces a report, written as a temporary HTML file, upon termination of the
survey. This Site Survey Report is accessible from the phone web page for viewing or forwarding to
Cisco
TAC for troubleshooting purposes. For more information, see Using the Site Survey Utility,
page 2-24.
Using the Neighbor List Utility, page 2-23.
You should use the wireless IP phone and the Aironet Client Utility (ACU) to verify that the signal range
and transmission power provide adequate coverage for roaming phones.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-22
OL-15984-01
Page 53
Chapter 2 Overview of the VoIP Wireless Network
Use the following topics for information about performing the site survey:
•Performing a Site Survey Verification, page 2-23
•Using the Neighbor List Utility, page 2-23
•Using the Site Survey Utility, page 2-24
Performing a Site Survey Verification
Perform these tasks to verify wireless voice network operation. Check that the wireless IP phones:
1. Associate with all APs in the WLAN.
2. Authenticate with all APs in the WLAN.
3. Register with Cisco Unified Communications Manager.
4. Can make stationary phone calls with good quality audio.
5. Can make roaming phone calls with good quality audio and no disconnections.
6. Can place multiple calls, especially in areas designated for high density use.
After phones are installed, request that users report any problems when using their wireless IP phones.
Site Survey Verification
When you perform a site survey verification and encounter problems, see the Chapter 10,
“Troubleshooting the Cisco Unified Wireless IP Phone 7925G” for assistance with finding the cause of
the problem.
Related Topics
•Using the Neighbor List Utility, page 2-23
•Using the Site Survey Utility, page 2-24
Using the Neighbor List Utility
The Neighbor List utility displays a list of the current AP and the closest neighbors tracked by the phone.
The phone typically does not scan while it is idle, so often there is only one entry, which is the currently
associated AP, in the list.
To use the Neighbor List utility, follow these steps:
Procedure
Step 1Configure the Cisco Unified Wireless IP Phone 7925G with the same SSID and
encryption/authentication settings as the APs.
Step 2Power on the phone so that it associates with the WLAN.
Step 3Choose SETTINGS > Status > Neighbor List.
The phone displays the current AP and the closest neighbors. For example:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-23
Page 54
Site Survey Verification
Step 4To see more information about an AP, scroll to the desired line and press Details. The following is an
Step 5To verify the ability to roam between APs, walk through all areas where phones are used and take
Step 6Adjust AP and antenna placement and AP power settings to provide approximately 20 percent coverage
readings. Approach areas from different directions to assure successful roaming conditions.
overlap.
Using the Site Survey Utility
The Site Survey utility is used to actively and passively scan the wireless medium across all channels
and locate APs that belong to the Basic Service Set (BSS). The results of the scans are then used help to
identify areas of low coverage, if any, and to determine whether the APs are configured consistently as
recommended in the Cisco deployment guidelines.
When you start the Site Survey utility, the phone disassociates from the current AP and remains
disassociated for the duration of the operation.
For more information, see Viewing the Site Survey Report on the Web, page 4-38.
CautionDuring Site Survey, both active and passive scans are performed at a rapid rate. These scans will result
in the phone battery life depleting faster than normal and might cause disruption to the wireless medium.
To use the Site Survey utility, follow these steps:
Procedure
Step 1Configure the Cisco Unified Wireless IP Phone 7925G with the same SSID and
encryption/authentication settings as the APs.
Step 2Power on the phone so that it associates with the WLAN.
Step 3Choose SETTINGS > Status > Site Survey.
The phone displays a list of APs within range that have the same SSID and security settings as the phone.
To see more information about an AP, scroll to the desired line and press Details.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-24
OL-15984-01
Page 55
Chapter 2 Overview of the VoIP Wireless Network
Step 4To verify the ability to roam between APs, walk through all areas where phones are used and take
readings. Approach areas from different directions to assure successful roaming conditions.
Step 5Adjust AP and antenna placement and AP power settings to provide approximately 20 percent coverage
overlap.
Step 6When you terminate the site survey, a report is generated for your viewing from the phone web page.
For more information, see
In addition to the Site Survey utility in the Cisco Unified Wireless IP Phone 7925G, you can also use the
Cisco Aironet Client Utility Site Survey Utility from a laptop PC. Refer to the section on “Performing a
Site Survey” in the
for your system.
Related Topics
•Performing a Site Survey Verification, page 2-23
•Viewing the Site Survey Report on the Web, page 4-38
Site Survey Verification
Viewing the Site Survey Report on the Web, page 4-38.
Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
2-25
Page 56
Site Survey Verification
Chapter 2 Overview of the VoIP Wireless Network
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
2-26
OL-15984-01
Page 57
Setting Up the Cisco Unified Wireless IP Phone
7925G
This chapter includes the following topics, which help you install and configure the Cisco Unified
Wireless IP
•Before You Begin, page 3-1
•Installing the Cisco Unified Wireless IP Phone 7925G, page 3-7
•Understanding the Phone Startup Process, page 3-17
Before You Begin
Before installing a Cisco Unified Wireless IP Phone 7925G, review the requirements in these sections:
•Network Requirements, page 3-1
CHA PTER
Phone 7925G on an IP telephony network:
3
•Methods for Adding Phones to Cisco Unified Communications Manager, page 3-2
•Device Support, page 3-5
•Safety Information, page 3-5
Network Requirements
For the Cisco Unified Wireless IP Phone 7925G to successfully operate as a Cisco Unified IP Phone
endpoint, your network must support these requirements:
Voice over Wireless LAN
•Cisco Aironet Access Points (APs) configured to support Voice over WLAN (VoWLAN)
•Controllers and switches configured to support VoWLAN
•Security implemented for authenticating wireless voice devices and users
NoteYou must verify that your wireless network is configured properly for voice service. For more
information, see the “Performing a Site Survey Verification” section on page 2-23.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-1
Page 58
Before You Begin
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
VoIP Network
•Cisco routers and gateways configured for VoIP
•One of these call–control products installed and configured:
Cisco Unified Communications Manager Express 4.3 or later
•IP network configured to support DHCP or manual assignment of IP address, gateway, and subnet
mask
Related Topics
•Features Supported on the Cisco Unified Wireless IP Phone 7925G, page 1-6
•Understanding the Wireless LAN, page 2-1
•Methods for Adding Phones to Cisco Unified Communications Manager, page 3-2
•Installing the Cisco Unified Wireless IP Phone 7925G, page 3-7
•Powering On the Cisco Unified Wireless IP Phone 7925G, page 3-15
Methods for Adding Phones to Cisco Unified Communications Manager
Before installing the wireless IP phone, you must choose a method for adding phones to the
Cisco
Unified Communications Manager database. Some methods require entering the MAC address of
the phone.
Ta b l e 3-1Methods for Adding Phones to the Cisco Unified Communications Manager
Method
Auto-registrationNoResults in automatic assignment of
Auto-registration with the Tool for
Auto-Registered Phones Support
(TAPS)
BATYesAllows for simultaneous registration of
Cisco Unified Communications
Manager Administration only
Table 3-1 provides an overview of these methods.
Database
Requires MAC
Address?
NoRequires auto-registration and Bulk
YesRequires phones to be added
Notes
directory numbers
Administration Tool (BAT); updates
information in the Cisco Unified IP
Phone and in Cisco
Unified
Communications Manager
Administration
multiple phones
individually
The following sections describe methods for adding phones:
•Adding Phones with Auto-Registration, page 3-3
•Adding Phones with Auto-Registration and TAPS, page 3-3
•Adding Phones with BAT, page 3-4
•Adding Phones with Cisco Unified Communications Manager Administration, page 3-4
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-2
OL-15984-01
Page 59
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Adding Phones with Auto-Registration
Use auto-registration to enter phones into the Cisco Unified Communications Manager database without
first gathering MAC
Cisco
Unified Communications Manager automatically assigns the next available sequential directory
number (DN) to new phones during the initial phone startup process.
After registering the phones, you can modify settings, such as the DNs and device pools, by using
Cisco
Unified Communications Manager Administration.
NoteAuto-registration is disabled by default in Cisco Unified Communications Manager Administration.
You must enable and properly configure auto-registration before connecting any Cisco
to the network. For information about enabling and configuring auto-registration, refer to Cisco Unified Communications Manager Administration Guide.
Related Topics
•Adding Phones with Auto-Registration and TAPS, page 3-3
•Adding Phones with BAT, page 3-4
addresses from the phones. When auto-registration is enabled,
Before You Begin
Unified IP Phone
•Adding Phones with Cisco Unified Communications Manager Administration, page 3-4
Adding Phones with Auto-Registration and TAPS
Use auto-registration and TAPS to add phones to the Cisco Unified Communications Manager database.
Add the phones first by using BAT to the Cisco
dummy MAC addresses. Then use TAPS to update MAC
configurations for the phones.
To implement TAPS, dial a TAPS DN and follow voice prompts. When the process is complete, the
phone has downloaded its DN and other settings. The correct MAC address for the phone is updated in
Cisco
Unified Communications Manager Administration.
NoteYou must enable auto-registration in Cisco Unified Communications Manager Administration for TAPS
to function.
For Cisco Unified Communications Manager Release 5.0 and prior releases, refer to Bulk Administration
Tool User Guide for Cisco Unified
TAPS. For Cisco Unified Communications Manager Release 6.0(1), 6.1(1), and 7.0(1) refer to Cisco
Unified Communications Manager Bulk Administration Guide.
Related Topics
•Adding Phones with Auto-Registration, page 3-3
Communications Manager for detailed instructions about BAT and
Unified Communications Manager database with
addresses and download pre-defined
•Adding Phones with Cisco Unified Communications Manager Administration, page 3-4
•Adding Phones with BAT, page 3-4
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-3
Page 60
Before You Begin
Adding Phones with BAT
Add a group of phones to the Cisco Unified Communications Manager database by using BAT. This tool
performs batch operations, including registration, on multiple phones. You need the MAC addresses for
each phone before you use BAT.
Table 3-2 describes how to determine the MAC address of the wireless IP phone.
Ta b l e 3-2Determining the MAC Address of the Phone
MethodFor More Information
Choose SETTINGS > Model Information >
MAC Address and look at the MAC Address
field.
Remove the battery and look on the back of the
phone.
NoteBAT is included in Cisco Unified Communications Manager 5.0 or later, but it is a plug-in for prior
releases.
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
See “Viewing Model Information” section on
page 8-7
See the “Installing or Removing the Phone
Battery” section on page 3-8
For detailed instructions about using BAT, refer to the following documents:
•For Cisco Unified Communications Manager Release 5.0 and prior releases, refer to Bulk
Administration Tool User Guide for Cisco Unified
•For Cisco Unified Communications Manager Release 6.0(1), 6.1(1), and 7.0(1), refer to Cisco
NoteWhen using BAT to add Cisco Unified Wireless IP Phones, use the default setting for the phone load.
The phone load name includes symbols (-, _,.) and BAT does not permit symbols in an entry.
Related Topics
•Adding Phones with Auto-Registration, page 3-3
•Adding Phones with Auto-Registration and TAPS, page 3-3
•Adding Phones with Cisco Unified Communications Manager Administration, page 3-4
Adding Phones with Cisco Unified Communications Manager Administration
Add phones individually by using Cisco Unified Communications Manager Administration. To do so,
obtain the MAC address for each phone before you begin. See the
Unified Communications Manager” section on page 3-2 for instructions.
Perform one of the following after collecting the MAC addresses:
•Cisco Unified Communications Manager 5.0, 6.0(1), 6.1(1), or 7.0(1)—Choose Device > Phone and
click Add New.
“Methods for Adding Phones to Cisco
•Cisco Unified Communications Manager 4.x—Choose Device > Add a New Device.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-4
OL-15984-01
Page 61
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
For additional instructions and conceptual information about Cisco Unified Communications Manager,
refer to Cisco Unified
Unified
Related Topics
•Adding Phones with Auto-Registration, page 3-3
•Adding Phones with Auto-Registration and TAPS, page 3-3
•Adding Phones with BAT, page 3-4
Communications Manager System Guide.
Communications Manager Administration Guide and to Cisco
Device Support
Cisco Unified Communications Manager Release 4.1, 4.2, 4.3, 5.1, 6.0, 6.1, and 7.0(1) require a device
package or service release update installed to enable device support for the Cisco
IP
Phone 7925G. Device packages including support for the Cisco Unified Wireless IP Phone 7925G are
Review the following warnings before installing the Cisco Unified IP Phone. To see translations of these
warnings, refer to the
Phone 7920G and Peripheral Devices document that accompanied this device.
Warning
Warning
Warning
This warning symbol means danger. You are in a situation that could cause bodily injury. Before you
work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar
with standard practices for preventing accidents. Use the statement number provided at the end of
each warning to locate its translation in the translated safety warnings that accompanied this device.
Statement 1071
Read the installation instructions before connecting the system to the power source.
This equipment will not be able to access emergency services during a power outage because of
reliance on utility power for normal operation. Alternative arrangements should be made for access
to emergency services. Access to emergency services can be affected by any call-barring function of
this equipment.
Regulatory Compliance and Safety Information for the Cisco Unified Wireless IP
Statement 1004
Warning
Warning
OL-15984-01
Do not use the Cisco Unified Wireless IP Phone 7925G in hazardous environments such as areas
where high levels of explosive gas may be present. Check with the site safety engineer before using
any type of wireless device in such an environment.
The plug-socket combination for the battery charger must be accessible at all times, because it
serves as the main disconnecting device.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
Statement 1019
3-5
Page 62
Before You Begin
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Warning
The battery charger requires short-circuit (overcurrent) protection to be provided as part of the
building installation. Install only in accordance with national and local wiring regulations.
1045
Warning
Warning
The power supply must be placed indoors.
Ultimate disposal of this product should be handled according to all national laws and regulations.
Statement 1040
Warning
Telephone receivers produce a magnetic field that can attract small magnetic objects such as pins
and staples. To avoid the possibility of injury, do not place the handset where such objects may be
picked up.
Battery Safety Notices
The following battery safety notices apply to the batteries that are approved by the Cisco Unified
Wireless IP
Warning
There is the danger of explosion if the battery is replaced incorrectly. Replace the battery only with
the same or equivalent type recommended by the manufacturer. Dispose of used batteries according
to the manufacturer’s instructions.
Statement
Statement 331
Phone 7925G manufacturer.
Statement 1015
3-6
Warning
CautionThe battery pack is intended for use only with this device.
CautionDo not disassemble, crush, puncture, or incinerate the battery pack.
CautionTo avoid risk of fire, burns, or damage to your battery pack, do not allow a metal object to touch the
Do not dispose of the battery pack in fire or water. The battery may explode if placed in a fire.
battery contacts.
CautionHandle a damaged or leaking battery with extreme care. If you come in contact with the electrolyte, wash
the exposed area with soap and water. If the electrolyte has come in contact the eye, flush the eye with
water for 15 minutes and seek medical attention.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Page 63
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
CautionDo not charge the battery pack if the ambient temperature exceeds 104 degrees Fahrenheit (40 degrees
Celsius).
CautionDo not expose the battery pack to high storage temperatures (above 140 degrees Fahrenheit, 60 degrees
Celsius).
CautionWhen discarding a battery pack, contact your local waste disposal provider regarding local restrictions
on the disposal or recycling of batteries.
To obtain a replacement battery, contact your local dealer. Use only the batteries that have the following
Cisco part numbers.
Standard battery—CP-BATT-7925G-STD
Extended battery—CP-BATT-7925G-EXT
Installing the Cisco Unified Wireless IP Phone 7925G
CautionUse only the Cisco power supply. If you must replace your power supply, refer to the list of Cisco part
numbers.
Australia—CP-PWR-7925G-AU
Central Europe—CP-PWR-7925G-CE
China—CP-PWR-7925G-CN
Japan—CP-PWR-7925G-JP
North America—CP-PWR-7925G-NA
United Kingdom—CP-PWR-7925G-UK
Related Topics
•Network Requirements, page 3-1
•Providing Power to the Phone, page 3-7
Installing the Cisco Unified Wireless IP Phone 7925G
After setting up the wireless network to support voice communications and configuring the
wireless
section includes the following installation information:
•Providing Power to the Phone, page 3-7
•Configuring Wireless LAN Settings for the Cisco Unified Wireless IP Phone 7925G, page 3-13
•Using a Headset, page 3-13
IP phones in Cisco Unified Communications Manager, you are ready to install the phones. This
Providing Power to the Phone
The Cisco Unified Wireless IP Phone 7925G uses a battery for power. Table 3-3 lists the types of
batteries available for the wireless IP phone and the maximum talk and standby times.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-7
Page 64
Installing the Cisco Unified Wireless IP Phone 7925G
Ta b l e 3-3Batteries Available for the Cisco Unified Wireless IP Phone 7925G
Ty peTechnologyTalk TimeStandby Time
StandardLithium ion (Li-ion)Up to 9.5 hrsUp to 180 hrs
ExtendedLi-ionUp to 13 hrsUp to 240 hrs
Use U-APSD for talk-time power save mode. Also 5 GHz talk time is reduced up to 30 min for standard
and up to 2 hours for extended. Use of 802.11b/g and a Bluetooth headset can reduce the talk time by
40-50 percent. To extend talk-time battery life, the Cisco Unified Wireless IP Phone 7925G can use
PS-POLL power save methods. The Cisco Unified Wireless IP Phone 7925G will use either U-APSD or
PS-POLL when in idle (no active phone call).
When an AP supports the Cisco Client Extensions (CCX) proxy ARP information element, the idle
battery life is optimized. If the AP does not support CCX or proxy ARP is not enabled, then the idle
battery life is up to fifty percent less.
Table 3-4 shows the charging time for the two types of batteries. You can stop charging the battery when
the battery is fully charged. Lithium ion batteries can be partially charged without shortening the battery
life. Batteries should handle up to 4000 recharges.
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
NoteBattery life varies because of environmental factors and Bluetooth use.
Ta b l e 3-4Battery Charging Time Information
Battery TypePower Supply Connected to Phone
Standard2 hours5 hours
Extended3 hours7 hours
The following sections provide information about the battery and charging the phone:
•Installing or Removing the Phone Battery, page 3-8
•Using the Power Supply to Charge the Phone Battery, page 3-11
•Using the USB Cable and PC to Charge the Battery, page 3-12
Installing or Removing the Phone Battery
To install the battery in the Cisco Unified Wireless IP Phone use Figure 3-1, and follow these steps:
Procedure
Phone Connected to PC
and USB Cable
Step 1Remove the cover on the back of the phone as shown in Figure 3-1.
Step 2To install the battery, insert the battery catches in the corresponding slots at the bottom of the
Cisco
Unified Wireless IP Phone 7925G. Ensure that the metal contacts on the battery and the phone are
facing each other.
Step 3Press the battery to the body of the phone until it locks into place. See Figure 3-2.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-8
OL-15984-01
Page 65
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
187525
1
2
CISCO
1
2
Battery
Step 4To remove the battery, press up on the locking catch, then lift and remove the battery as shown in
Figure 3-3.
Figure 3-1Removal of Cover to Install the Battery
Installing the Cisco Unified Wireless IP Phone 7925G
1Locking catch
2Battery Cover
Figure 3-2Install the Battery
1Battery Insertion Slots
2Battery
OL-15984-01
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-9
Page 66
Installing the Cisco Unified Wireless IP Phone 7925G
Figure 3-3Replace the Back Cover
2
1
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
CISCO
187527
1Cover Insertion Slots
2Cover
NoteThe MAC address for each Cisco Unified Wireless IP Phone 7925G appears on a printed label on the
back of the phone underneath the battery.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-10
OL-15984-01
Page 67
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Using the Power Supply to Charge the Phone Battery
To charge the phone battery quickly, follow the steps in Figure 3-4.
Figure 3-4Charging the Phone Battery
5
6
1
Installing the Cisco Unified Wireless IP Phone 7925G
2
4
3
187528
1Lift the mini-USB port cover on the bottom of phone.
2Swing the port cover to one side.
3Insert the AC power supply mini-USB connector in the port.
4Insert the AC plug adapter in the slot on the power supply.
5Insert the AC power supply in a wall outlet.
6Indicator light—Indicates the charging status:
•Red—Battery charging in process.
•Green—Battery charging is complete.
NoteYou can use the phone while the battery is being charged. For charging times, see Table 3-4.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-11
Page 68
Installing the Cisco Unified Wireless IP Phone 7925G
1
2
3
Using the USB Cable and PC to Charge the Battery
Charge the phone battery by using a USB cable connected to your PC. Follow the steps in Figure 3-5.
Figure 3-5Charging the Phone Battery Using the USB Cable and PC
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
1Insert the phone connector on the USB cable into the phone.
2Insert the USB A-type connector into the USB port on your PC.
3Monitor the indicator light after the phone briefly displays “USB Connected” on the status
line.
You may see the “Found New Hardware Wizard” To stop the wizard from opening when
connecting to USB port, perform the following steps:
1. Click Next to use the wizard dialog box.
2. In the Update New Software dialog, click No, not this time, and click Next.
3. Click Install the Software automatically (Recommended) and click Next.
4. After a few moments, the Cannot Install This Hardware dialog displays. Click Don't
prompt me again to install this software.
NoteWhile the battery is charging, the indicator light is red. When the battery is fully charged, the indicator
5. Click Finish to close the dialog box.
light turns green. Charging times are longer when you use this method and are described in Table 3-4.
Related Topics
•Powering On the Cisco Unified Wireless IP Phone 7925G, page 3-15
•Installing or Removing the Phone Battery, page 3-8
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-12
OL-15984-01
Page 69
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Installing the Cisco Unified Wireless IP Phone 7925G
•Using the Power Supply to Charge the Phone Battery, page 3-11
Configuring Wireless LAN Settings for the Cisco Unified Wireless IP Phone
7925G
Before the phone can connect to the WLAN, you must configure the network profile for the phone with
the WLAN settings. You can use two methods for setting up the network profiles:
•Cisco Unified Wireless IP Phone 7925G Web Pages, page 3-13
•Network Profile Menu on the Cisco Unified Wireless IP Phone 7925G, page 3-13
Cisco Unified Wireless IP Phone 7925G Web Pages
You can access the Cisco Unified Wireless IP Phone 7925G web pages to set up the WLAN settings in
the network profile. For a new phone with the factory default settings, you must use the USB cable to
connect the phone to your PC. For more information and instructions, see
Unified Wireless IP Phone 7925G Web Pages.”
Chapter 4, “Using the Cisco
Network Profile Menu on the Cisco Unified Wireless IP Phone 7925G
You can use the Settings menu on the phone and access the Network Profiles menu to set up the network
configuration and the WLAN configuration. For more information and instructions, see
“Configuring Settings on the Cisco Unified Wireless IP Phone 7925G.”
Using a Headset
Although Cisco Systems performs some internal testing of third-party wired and Bluetooth wireless
headsets for use with the Cisco Unified Wireless IP Phone 7925G, Cisco does not certify or support
products from headset or handset vendors. Because of the inherent environmental and hardware
inconsistencies in the locations where Cisco Unified IP Phones are deployed, there is not a single “best”
solution that is optimal for all environments. Cisco recommends that customers test the headsets that
work best in their environment before deploying a large number of units in their network.
Cisco Systems recommends the use of good quality external devices, like headsets that are screened
against unwanted radio frequency (RF) and audio frequency (AF) signals. Depending on the quality of
these devices and their proximity to other devices such as cell phones and two-way radios, some audio
noise may still occur. See
information.
The primary reason that a particular headset would be inappropriate for the Cisco Unified IP Phone is
the potential for an audible hum. This hum can be heard by either the remote party or by both the remote
party and you, the Cisco Unified IP Phone user. Some potential humming or buzzing sounds can be
caused by a range of outside sources, for example, electric lights, being near electric motors, large PC
monitors. In some instances, the mechanics or electronics of various headsets can cause remote parties
to hear an echo of their own voice when they speak to Cisco Unified IP Phone users.
Using External Devices with Cisco Unified IP Phones, page 3-15 for more
Chapter 5,
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-13
Page 70
Installing the Cisco Unified Wireless IP Phone 7925G
Connecting Headsets
To connect a headset to the Cisco Unified Wireless IP Phone 7925G, plug it into the headset port on the
right side of the phone.
You can use the headset with all of the features on the Cisco Unified Wireless IP Phone 7925G,
including the Volume and Mute buttons. Use these buttons to adjust the ear piece volume and to mute
the speech path from the headset microphone.
Using Bluetooth Wireless Headsets
The Cisco Unified Wireless IP Phone 7925G supports Bluetooth Class 2 technology with Hands Free
version 1.5 when the headsets support Bluetooth. Bluetooth enables low bandwidth wireless connections
within a range of 10 meters. The best performance is in the 1 to 2 meter range.
There can be a potential interference issues. It is recommended that you:
•Reduce the proximity of other 802.11b/g devices, Bluetooth devices, microwave ovens, and large
metal objects.
•Use the Cisco Unified Wireless IP Phone 7925G on the same side of the body as the
Bluetooth-enabled headset.
Using Bluetooth wireless headsets will likely increase battery power consumption on your phone and
might result in reducing battery life.
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Pairing Headsets
NoteIt is recommended that users read the headset user guide for more information about pairing and
For a Bluetooth wireless headset to work, it does not need to be within direct line-of-sight of the phone,
but some barriers, such as walls or doors, and interference from other electronic devices, could affect
the connection.
The Cisco Unified Wireless IP Phone 7925G pairs with headsets using a shared key authentication and
encryption method. The authentication process can require a personal identification number (PIN)
specific to the headset, commonly “0000.” The Cisco
Unified Wireless IP Phone 7925G can be paired
with more than one headset at a time. Pairing is typically performed once for each headset.
Once a device has been paired, its Bluetooth connection is maintained as long as both devices (phone
and headset) are enabled and within range of each other. The connection re-establishes itself
automatically if either of the devices powers down then powers up. The green-dotted Bluetooth icon
indicates whether or not a device is connected.
When headsets are more than 10 meters away from Cisco Unified Wireless IP Phone 7925G, Bluetooth
drops the connection after a 15 to 20 second timeout. If the paired headset comes back into range of the
Cisco Unified Wireless IP Phone 7925G and the phone is not connected to another Bluetooth headset,
then the in-range Bluetooth headset automatically reconnects. For certain phone types that operate in
power-save modes, the user may have to “wake-up” the headset by tapping on its operational button to
initiate the reconnect.
connecting the headsets.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-14
OL-15984-01
Page 71
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Audio Quality Subjective to the User
Beyond the physical, mechanical and technical performance, the audio portion of a headset must sound
good to the user and to the party on the far end. Sound is subjective and Cisco cannot guarantee the
performance of any headsets, but some of the headsets on the sites listed below have been reported to
perform well on Cisco Unified IP Phones.
Nevertheless, it is ultimately the customer's responsibility to test this equipment in their own
environment to determine suitable performance.
For information about wired and Bluetooth wireless headsets for your phone, see the Cisco Unified Wireless IP Phone 7925G Accessory Guide and these web sites:
•http://www.plantronics.com
•http://www.jabra.com
•http://www.jawbone.com
Using External Devices with Cisco Unified IP Phones
The following information applies when you use external devices with the Cisco Unified IP Phone:
Powering On the Cisco Unified Wireless IP Phone 7925G
•Cisco recommends the use of good quality external devices (speakers, microphones, and headsets)
that are shielded (screened) against unwanted radio frequency (RF) and audio frequency (AF)
signals.
•Depending on the quality of these devices and the proximity to other devices such as mobile phones
or two-way radios, some audio noise may still occur. In these cases, Cisco recommends that you
take one or more of the following actions:
–
Move the external device away from the source of the RF or AF signals.
–
Route the external device cables away from the source of the RF or AF signals.
–
Use shielded cables for the external device, or use cables with a better shield and connector.
–
Shorten the length of the external device cable.
–
Apply ferrites or other such devices on the cables for the external device.
Cisco cannot guarantee the performance of the system because Cisco has no control over the quality of
external devices, cables, and connectors. The system will perform adequately when suitable devices are
attached using good quality cables and connectors.
CautionIn European Union countries, use only external speakers, microphones, and headsets that are fully
compliant with the EMC Directive [89/336/EC].
Powering On the Cisco Unified Wireless IP Phone 7925G
After charging the battery and configuring the wireless IP phone, you are ready to power on the phone
and connect to the WLAN. Use the following sections for more information about starting up the phone.
•Active and Standby Phone Modes, page 3-16
•Understanding the Phone Startup Process, page 3-17
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-15
Page 72
Powering On the Cisco Unified Wireless IP Phone 7925G
To power on the Cisco Unified Wireless IP Phone 7925G, press and hold the Power On button until the
phone begins its startup process by cycling through these steps:
1. The phone displays the Cisco Systems screen.
2. The phone screen displays these messages as the phone starts up:
•Locating Network Services
•Configuring IP
•Network Up
•Configuring Unified CMList
•Registering
3. The following information displays on the main phone screen:
•Current time and date
•Primary directory number
•Main screen icons for four menus and Help
•“Your current options” on status line
•Softkey labels (Messages and Options)
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
When the phone passes through these stages with no errors, the phone started up properly. Now the
phone is in standby mode and is ready to place or receive calls.
The signal icon in the upper left corner shows the strength of the signal between the wireless access point
and the phone. The phone must have an adequate signal to successfully place or receive calls. If the
signal icon displays only one bar, the weak signal can cause problems with phone performance.
If the phone does not complete these steps successfully, see the “Resolving Startup and Connectivity
Problems” section on page 10-1.
Related Topics
•Active and Standby Phone Modes, page 3-16
•Understanding the Phone Startup Process, page 3-17
Active and Standby Phone Modes
When the Cisco Unified Wireless IP Phone 7925G is powered on, it can be in one of these two modes:
•Active mode
•Standby mode
Active Mode
The phone is in active mode when there is an active RTP stream. When the phone is performing one of
these actions, it is consuming power:
•Connected to an active call
•Scanning for channels
•Sending CDP packets
•Sending keep-alive messages
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-16
OL-15984-01
Page 73
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
•Reregistering with Cisco Unified Communications Manager
The standard battery provides up to 11.5 hours of talk time in active mode and the extended battery
provides up to 15.5 hours of talk time.
Standby Mode
The phone goes into standby mode two seconds after a scan is complete. The phone awakes from standby
mode in response to these events:
•Pressing keys on the keypad
•Roaming between APs
•Power cycling the phone
•Losing network connectivity
•Losing RF connectivity
•Transmitting scheduled CDP or keep-alive packets.
The standard battery provides up to 150 hours of standby time and the extended battery provides up to
200 hours of standby time.
Understanding the Phone Startup Process
Related Topics
•Understanding the Phone Startup Process, page 3-17
•Resolving Startup and Connectivity Problems, page 10-1
Understanding the Phone Startup Process
When connecting to the wireless VoIP network, the Cisco Unified Wireless IP Phone 7925G goes
through a standard startup process, as described in
configuration, not all of these steps may occur on your wireless IP phone.
Ta b l e 3-5Cisco Unified Wireless IP Phone Startup Process
StepDescriptionRelated Topics
1. Powering on the phoneThe Cisco Unified Wireless IP Phone 7925G has
non-volatile Flash memory in which it stores firmware
images and user-defined preferences. At startup, the phone
runs a bootstrap loader that loads a phone image stored in
Flash memory. Using this image, the phone initializes its
software and hardware.
2. Scanning for an access
point
The Cisco Unified Wireless IP Phone 7925G scans the RF
coverage area with its radio. The phone searches its
network profiles and scans for access points that have a
matching SSID and authentication type. The phone
associates with the access point with the highest RSSI that
matches with its network profile.
Table 3-5. Depending on your specific network
Providing Power to the Phone,
page 3-7
Resolving Startup and
Connectivity Problems,
page 10-1
Interacting with Cisco Unified
Wireless APs, page 2-11
Resolving Startup and
Connectivity Problems,
page 10-1
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-17
Page 74
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Understanding the Phone Startup Process
Table 3-5Cisco Unified Wireless IP Phone Startup Process (continued)
StepDescriptionRelated Topics
3. Authenticating with access
point
The Cisco Unified Wireless IP Phone 7925G begins the
authenticating process.
•If set for Open, then any device can authenticate to the
Authentication Methods,
page 2-16
access point. For added security, static WEP
encryption might optionally be used.
•If set to Shared Key, the phone encrypts the challenge
text using the WEP key and the access point must
verify that the WEP key was used to encrypt the
challenge text before network access is available.
•If set for LEAP or EAP-FAST, then the user name
and password are authenticated by the RADIUS server
before network access is available.
•If set for Auto (AKM), the phone looks for an access
point with one of the following key management
options enabled:
–
WPA, WPA2, or CCKM—The username and
password are authenticated by the RADIUS server
before network access is available.
–
WPA-Pre-shared key, WPA2-Pre-shared
key—The phone authenticates with the access
point using the pre-shared key.
4. Configuring IP networkIf the wireless IP phone is using DHCP to obtain an IP
address, the phone queries the DHCP server to obtain one.
If you are not using DHCP in your network, you must
assign a static IP address to each phone locally.
In addition to assigning an IP address, the DHCP server
directs the wireless IP
phone to a TFTP server. If the phone
has a statically defined IP address, you must configure the
TFTP server IP address locally on the phone; the phone
then contacts the TFTP server directly.
5. Downloading Load IDThe wireless IP phone checks to verify that the proper
firmware is installed or if new firmware is available to
download.
Cisco Unified Communications Manager informs devices
using.cnf or.cnf.xml format configuration files of their
load ID. Devices using.xml format configuration files
receive the load ID in the configuration file.
6. Downloading config fileThe TFTP server has configuration files and profile files.
A configuration file includes parameters for connecting to
Cisco Unified
Communications Manager and information
about which image load a phone should be running. A
profile file contains various parameters and values for
phone and network settings.
• Configuring DHCP
Settings, page 5-6
• Disabling DHCP, page 5-6
• Resolving Startup and
Connectivity Problems,
page 10-1
• Phone Configuration Files
and Profile Files, page 2-14
• Configuring an Alternate
TFTP Server, page 5-7
• Phone Configuration Files
and Profile Files, page 2-14
• Resolving Startup and
Connectivity Problems,
page 10-1
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-18
OL-15984-01
Page 75
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Understanding the Phone Startup Process
Table 3-5Cisco Unified Wireless IP Phone Startup Process (continued)
StepDescriptionRelated Topics
7. Connecting to Cisco
Unified
Communications Manager
8. Registering to Cisco
Unified Communications
Manager
Related Topics
•Configuring Cisco Unified Wireless IP Phones in Cisco Unified Communications Manager,
The configuration file defines how the Cisco
Unified
Unified
IP Phone communicates with Cisco
Communications Manager. After obtaining the file
from the TFTP server, the phone attempts to make a TCP
connection to the highest priority Cisco
Unified
Communications Manager on the list.
If the phone was manually added to the database, Cisco
Unified
Communications Manager identifies and registers
the phone. If the phone was not manually added to the
database and auto-registration is enabled in Cisco
Unified
auto-register itself in the Cisco Unified
Communications Manager, the phone attempts to
Communications
Manager database.
• Interacting with Cisco
Unified Communications
Manager, page 2-14
• Resolving Startup and
Connectivity Problems,
page 10-1
• Overview of Configuring
and Installing the Cisco
Unified Wireless IP Phone
7925G, page 1-14
• Adding Users to Cisco
Unified Communications
Manager, page 7-19
page 7-1
•Phone Configuration Files and Profile Files, page 2-14
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
3-19
Page 76
Understanding the Phone Startup Process
Chapter 3 Setting Up the Cisco Unified Wireless IP Phone 7925G
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
3-20
OL-15984-01
Page 77
CHA PTER
4
Using the Cisco Unified Wireless IP Phone 7925G
Web Pages
This chapter describes how to set up your PC to configure a Cisco Unified Wireless IP Phone 7925G by
using a USB connector and how to remotely access a configured phone over the WLAN. It contains the
following sections:
•Setting Up Your PC to Configure the Phones, page 4-1
•Updating the Phones Remotely, page 4-4
•Configuring Network Profiles, page 4-8
•Configuring USB Settings, page 4-26
•Configuring Trace Settings, page 4-27
•Configuring the Phone Book, page 4-29
•Configuring Wavelink Settings, page 4-29
•Using System Settings, page 4-34
Setting Up Your PC to Configure the Phones
To setup new phones, use your PC and USB connection to enter the initial configuration for the wireless
network settings and network profiles. To save time during initial deployment, you can create a standard
network profile template and export it to several phones. For more information, see the
for Phone Configuration” section on page 4-34.
Before you can configure phones by using the USB connection, you must install drivers and set up the
USB ports on the phone and PC.
Your PC must have one of the following operating systems:
•Windows 2000 Professional
•Windows XP
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
“Backup Settings
4-1
Page 78
Setting Up Your PC to Configure the Phones
Installing the USB Drivers
To install the drivers on your PC, perform the following steps:
Procedure
Step 1Log into Cisco.com.
Step 2Download the installation package and “read me” file for the USB drivers from this location:
NoteBefore proceeding, review the “read me” file for specific instructions for your PC operating
system.
Step 3Double-click on the USB-Install-7925.1-0-2.exe file to start the installation program.
Step 4Follow the prompts in the InstallShield Wizard.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
NoteIf you receive a Hardware Installation warning message stating that the software has not passed
Microsoft Windows Logo testing, click Continue.
Step 5The driver installation is complete when you see the Finished screen. You can close the wizard.
Step 6Plug the USB cable into the USB port on the PC and into the USB connector on the phone.
The Found New Hardware Wizard dialog opens.
Step 7To update the new software, click the button next to Yes, this time only and click Next.
Step 8Click the button next to Install the Software automatically (Recommended).
After 2-3 minutes, the software installs and a message appears on the task bar stating “Found New
Hardware - Software installed and ready to use.”
Step 9Click Finish when the installation is complete.
The phone briefly displays “USB Connected” on the status line.
Configuring the USB LAN on the PC
To configure the USB LAN connection on your PC, follow these steps:
Procedure
Step 1To setup the USB LAN connection, do one of the following:
•For Windows XP—Click Start > Settings > Control Panel > Network Connections.
•For Windows 2000—Click Start > Settings > Control Panel > Network and Connections.
Step 2Locate and double-click the new LAN connection to open the Local Area Connection Status window,
then click Properties.
Step 3Scroll to the Internet Protocol (TCP/IP) section and click Properties.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-2
OL-15984-01
Page 79
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Step 4In the Internet Protocol (TCP/IP) Properties window, choose Use the following IP address:
Step 5In the IP address field, enter a static IP address for the PC: 192.168.1. (1 through 254 except 100), for
example: 192.168.1.11
Note• By default, the Cisco Unified Wireless IP Phone 7925G is configured with 192.168.1.100 so you
cannot use this IP address for the PC.
•Make sure to use an IP address that is not in use on any other interface on the PC.
Step 6Enter the subnet mask: 255.255.255.0
Step 7Click OK to make the changes.
Related Topics
•Accessing the Phone Web Page, page 4-3
•Setting Configuration Privileges for the Phone Web Page, page 4-4
Setting Up Your PC to Configure the Phones
•Accessing the Configuration Web Page for a Phone, page 4-5
•Summary Information on the Home Web Page, page 4-7
Accessing the Phone Web Page
After setting up the USB interface on the PC, you are ready to use the USB cable connection to the phone
to access the phone web pages.
To access the phone web pages, follow these steps:
Procedure
Step 1Open a Windows browser.
Step 2In the address field, enter https://192.168.1.100 to locate the wireless IP phone web page.
NoteWhen the Security Alert dialog box displays a notice to accept the Trust Certificate, click Yes
or Always to accept the application.
The Summary web page for the phone displays. See Table 4-2 for details about this web page.
Step 3Use the hyperlinks in the left column of the web page to configure settings for the phones. For
information, see these sections:
•Configuring Network Profiles, page 4-8
•Configuring USB Settings, page 4-26
•Configuring Trace Settings, page 4-27
•Configuring Wavelink Settings, page 4-29
•Configuring the Phone Book, page 4-29
•Using System Settings, page 4-34
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-3
Page 80
Updating the Phones Remotely
Step 4After entering the new settings, disconnect the USB cable from the phone. The settings are active
immediately.
Step 5Check that the phone can access the network successfully.
Using the USB Cable to Configure Phones
You are ready to use the USB cable to set up other phones. Before plugging the USB cable into another
phone, wait approximately 12-15 seconds for the USB interface on the PC to shut down.
To connect to another phone, follow these steps:
Procedure
Step 1Plug the USB cable into a Cisco Unified Wireless IP Phone 7925G.
The phone briefly displays “USB Connected” on the status line.
Step 2Access the web page for the new phone by following the steps in “Accessing the Phone Web Page”
section on page 4-3.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Related Topics
•Installing the USB Drivers, page 4-2
•Configuring the USB LAN on the PC, page 4-2
•Using the USB Cable to Configure Phones, page 4-4
•Accessing the Phone Web Page, page 4-3
Updating the Phones Remotely
You might have to update settings on a Cisco Unified Wireless IP Phone 7925G that is already
configured and in use. You can use the wireless LAN to remotely access and configure these phones.
Use these sections for information about remotely updating phones:
•Setting Configuration Privileges for the Phone Web Page, page 4-4
•Accessing the Configuration Web Page for a Phone, page 4-5
Setting Configuration Privileges for the Phone Web Page
To make changes to the phone by using the web page, you must use Cisco Unified Communications
Manager Administration to enable Web Access and Phone Book Web Access.
To allow configuration privileges, follow these steps:
Procedure
Step 1Log into Cisco Unified Communications Manager Administration.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-4
OL-15984-01
Page 81
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Step 2Search for the phone in Cisco Unified Communications Manager Administration by choosing Device >
Phone and enter search information such as the DN.
Step 3Click on the DN of the phone that you want to set the privileges.
Step 4Open the Phone Configuration window, scroll down to Product Specific Configuration Layout, and
enable these privileges:
•In the Web Access field, select Full from the drop-down menu.
•In the Phone Book Web Access field, select Allow Admin.
Step 5Click Save to make the change.
Step 6You must reset the phone to enable configuration privileges on the web pages for this phone.
Accessing the Configuration Web Page for a Phone
You can access the web page for any Cisco Unified Wireless IP Phone 7925G that is connected to the
WLAN. Be sure the phone is powered on, connected and registered to a Cisco Unified Communications
Manager server.
Updating the Phones Remotely
To access the web page for the Cisco Unified Wireless IP Phone 7925G follow these steps:
Procedure
Step 1Log into the Cisco Unified Communications Manager Administration.
Step 2Go to Device > Phone.
Step 3Click Find. All of the phones display. If the phone is registered with a Cisco Unified Communications
Manager Administration, the IP address displays. The phone IP address is linked to the Home web page.
Step 4Click on the Description field in the Phone Configuration window of Cisco Unified Communications
Manager Administration. The Device Information section displays.
Step 5Go to the Web Access field in the Product Specific Configuration Layout and change the parameter to
Full. This will give you full access to all of the web pages.
Step 6From the Phone Configuration window, click on the linked IP address. The Home web page displays.
There are two sections displayed on the Home web page: setup menus (left) and summary information
(right).
Table 4-1 shows the available Home web page menus, from which you can configure network
profiles, USB settings, trace settings, Wavelink settings, and certificates. Table 4-2 contains the phone
summary information.
Or if you already know the IP address, you can open a web browser and enter the following URL. The
IP_address variable is the IP address of the Cisco
Unified IP Phone:
https://<IP_address>/index.html
NoteWhen the Security Alert dialog box displays a notice to accept the Trust Certificate, click Yes
or Always to accept the application.
Step 7Log into the Home web page with the default username: admin and enter the default password: Cisco.
You may need to log into additional windows to configure other options.
Step 8Make changes to configurable pages as needed.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-5
Page 82
Updating the Phones Remotely
Step 9Return to the Phone Configuration page in Cisco Unified Communications Manager Administration and
set the Web Access field back to Read Only or Disabled.
Step 10Reset the phone from Cisco Unified Communications Manager to disable full access to the web pages.
Be sure to change the Web Access privileges and reset the phone to prevent users from making
configuration changes on the phone web pages.
NoteIf a wireless IP phone was previously registered to Cisco Unified CallManager Administration Release
4.x, and you try to register to Cisco Unified Communications Manager Administration 5.x, 6.0(1),
7.0(1), the Phone Configuration web page password might be set to “Cisco.”
•CertificatesConfiguring Wireless LAN Security, page 4-13
Configurations
Phone BookConfiguring the Phone Book, page 4-29
Information
•NetworkSummary Information on the Home Web Page, page 4-7
•Wireless LAN
•Device
Statistics
•Wireless LANDisplays Rx and Tx statistics.
•NetworkDisplays IP, TCP, and UDP statistics.
Stream Statistics
•Stream 1Displays RTP statistics and voice quality metrics.
•Stream 2
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-6
OL-15984-01
Page 83
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Table 4-1Home Web Page Menus (continued)
MenuRelated Information
System
•Trace LogsUsing System Settings, page 4-34
•Backup Settings
•Phone Upgrade
•Change Password
•Site Survey
•Date and Time
•Phone Restart
Summary Information on the Home Web Page
The summary information for your phone displays on this section of the Home web page. It also displays
the network and Cisco Unified Communications Manager information.
Updating the Phones Remotely
Table 4-2 describes these items.
Ta b l e 4-2Summary Information
ItemDescription
Phone DN DN assigned to the phone.
Home: Summary
Wireless Information
Active Network ProfileName of the profile that the phone is currently using.
SSIDSSID that the phone is currently using.
Access PointName of the access point (AP) to which the phone is associated.
MAC AddressMAC address of the phone.
Network Information
IP AddressIP address of the phone.
Subnet MaskSubnet mask used by the phone.
Default RouterIP address for the default gateway that the phone is using.
TFTP ServerIP address for the Primary TFTP server that the phone is using.
Call Manager Information
Active Call ManagerIP address for the Cisco Unified Communications Manager
server to which the phone is registered.
Phone Directory NumberPrimary DN for the phone.
Related Topics
•Accessing the Phone Web Page, page 4-3
•Configuring Network Profiles, page 4-8
•Configuring USB Settings, page 4-26
•Configuring Trace Settings, page 4-27
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-7
Page 84
Configuring Network Profiles
•Configuring the Phone Book, page 4-29
•Using System Settings, page 4-34
Configuring Network Profiles
You can configure up to four profiles for a phone to take advantage of WLAN environments. You can
add names to the profiles and enable one or more of the profiles for the phone to use. The Network
Profiles section of the web page displays the following information about each phone:
•Profile—Displays a list of four configurable profiles.
•Enabled—Indicates whether or not the profile is enabled.
•Name—Lists the name for the profile.
•SSID—Lists the SSID used by the profile.
•Status—Indicates which profiles are active or inactive.
To display the Network Profiles list, access the web page for the phone as described in the “Accessing
the Phone Web Page” section on page 4-3, and then click the Network Profiles hyperlink.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
For more information about configuring network profiles, see these sections:
•Configuring Wireless Settings in a Network Profile, page 4-12
You can configure the settings for a profile by using this web page area. You can also modify or view
configured profiles from this web page area.
profile settings and provides references for more information.
To display Network Profile (1-4) Settings, access the web page for the phone as described in the
“Accessing the Phone Web Page” section on page 4-3, and then click the Profile (1-4) hyperlink.
Ta b l e 4-3Basic Network Profile Settings
ItemDescriptionFor More Information, See...
Wireless
Profile NameDescriptive name for the profile.—
SSIDAssigns the Service Set Identifier (SSID) to
Edit ProfileEnables editing of the profile.—
Table 4-3 and Table 4-4 describe the basic and advanced
this profile. You must assign the same SSID to
the phone that is also assigned to access points
in the wireless network.
Associating to APs,
page 2-12
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-8
OL-15984-01
Page 85
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Scan ModeAuto—Always scans when on a call. If idle
and signal strength is sufficient, the phone
does not scan.
Continuous—Always scans.
Single AP—Only scans at power on or if the
AP connection to the network is lost.
Call Power Save Mode Set for the type of power saving mode used in
the WLAN. Options are:
•U-APSD/PS-Poll
•None
802.11 ModeDetermines the signal mode or priority for
selecting signal modes available in the WLAN.
Options are:
•802.11 b/g—Use only 2.4 GHz band
Configuring Network Profiles
Associating to APs,
page 2-12
802.11 Standards for WLAN
Communications, page 2-3
802.11 Standards for WLAN
Communications, page 2-3
•802.11a—Use only 5 GHz band
•Auto, 802.11b/g preferred over 802.11a
(dual band)
•Auto, 802.11a preferred over 802.11b/g
(dual band)
NoteThe preferred band, if available, will
be used at power-on, but the phone
may switch to the less preferred 2.4
GHz band, if available, and the
preferred band is lost. Once the phone
has connected to the less preferred
band, it will not scan for the preferred
band if the current band is acceptable,
and may remain connected to the less
preferred band.
•Auto, signal strength (RSSI)—Use
strongest signal in dual band environment
Restricted Data RateEnables or disables the restriction of the
upstream and downstream PHY rates
according to CCX V4 Traffic Stream Rate Set
IE (S54.2.6). The default is disabled.
—
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
Max Tx PowerSets the maximum transmit power for the phone
NoteIf you uncheck all channels in the 802.11g Power Settings window or 802.11a Power Settings window,
the phone will not be able to access the WLAN.
Related Topics
•Accessing the Phone Web Page, page 4-3
•Configuring Wireless LAN Security, page 4-13
•Setting the Wireless Security Credentials, page 4-15
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
to improve scanning for the phone
Network Profile
Settings, page 4-25
•Setting Wireless Encryption, page 4-16
Configuring Wireless Settings in a Network Profile
You must configure wireless settings in a profile to enable the phone to access the wireless network. To
configure the wireless settings, refer to
Procedure
Step 1Choose the network profile that you want to configure.
Step 2To give the profile a recognizable name, in the Profile Name field, enter a name up to 63 characters and
numbers in length.
Step 3To identify the SSID that the phone uses to associate with access points, in the SSID field, enter an SSID
that is already configured in the WLAN.
NoteThe SSID is case sensitive; you must enter it exactly as configured in the network.
Step 4To conserve battery power, in the Call Power Save Mode, choose the type (U-APSD or PS-Poll) and
option that is being used in the WLAN.
Step 5Choose the signal mode or priority of signal modes in the 802.11 Mode field that is used by your WLAN,
Table 4-3 and follow these steps.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-12
OL-15984-01
Page 89
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Configuring Wireless LAN Security
The Cisco Unified Wireless IP Phone 7925G supports many types of authentication. Authentication
methods might require a specific encryption method or you can choose between several encryption
methods. When configuring a network profile, you can choose one of these authentication methods:
•Open—Provides access to all access points without WEP Key authentication/encryption.
•Open plus WEP—Provides access to all access points and authentication through the use of one or
more WEP Keys at the local access point.
•Shared Key plus WEP—Provides shared key authentication through the use of WEP Keys at the
local access point.
•LEAP— Exchanges a username and cryptographically secure password with a RADIUS server for
authentication in the network. LEAP is a Cisco proprietary version of EAP.
•EAP-FAST—Exchanges a username and password and with a RADIUS server for authentication in
the network.
•EAP-TLS—Uses a dynamic session-based WEP key derived from the client adapter and RADIUS
server to encrypt data and a client certificate for authentication. It uses PKI to secure communication
to the RADIUS authentication server.
Configuring Network Profiles
•PEAP (EAP-MSCHAP V2)—Performs mutual authentication, but does not require a client
certificate on the phone. This method uses name and password authentication based on Microsoft
MSCHAP V2 authentication.
•PEAP with Server Certificate Authentication—The Cisco Unified Wireless IP Phone 7925G can
validate the server certificate during the authentication handshakes over an 802.11 wireless link.
This functionality is disabled by default and is enabled in Cisco
Unified Communications Manager
Administration.
•Auto (AKM)—Automatic authenticated key management in which the phone selects the AP and
type of key management scheme, which includes WPA, WPA2, WPA-Pre-shared key,
WPA2-Pre-shared key, or CCKM (which uses a wireless domain server (WDS)).
NoteWhen set to AKM mode, the phone uses LEAP for 802.1x type authentication methods (non-Pre-shared
key such as WPA, WPA2, or CCKM). AKM mode supports only authenticated key-management types
(WPA, WPA2, WPA-PSK, WPA2-PSK, CCKM).
The type of authentication and encryption schemes that you are using with your WLAN determine how
you set up the authentication, security, and encryption options in the network profiles for the Cisco
Unified Wireless IP Phones.
Table 4-5 provides a list of supported authentication and encryption
schemes that you can configure on the Cisco Unified Wireless IP Phone 7925G.
Ta b l e 4-5Authentication and Encryption Configuration Options
LEAP (with optional CCKM)Uses WEPRequires Username and Password
EAP-FAST (with optional CCKM) Uses WEP or TKIPRequires Username and Password
EAP-TLSUses WEP, TKIP, or AESRequires Username and Password
PEAPUses WEP, TKIP, or AESRequires Username and Password
Auto (AKM) with CCKMUses TKIP or AES Requires Username and Password
Auto (AKM) with WPA (with
optional CCKM)
Auto (AKM) with WPA2 (with
optional CCKM)
Auto (AKM) with WPA Pre-Shared
Key
Auto (AKM) with WPA2
Pre-Shared Key
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Requires server and client
certificates.
Requires server side certificate.
Uses TKIP Requires Username and Password
Uses AESRequires Username and Password
Uses TKIP Requires Passphrase
Uses AES Requires Passphrase
NoteBeginning with Cisco Wireless IP Phone 7925G firmware release 1.1, CCKM is operational with the
WPA authentication mode using AES encryption.
Configuring the Authentication Mode
To select the Authentication Mode for this profile, follow these steps:
Procedure
Step 1Choose the network profile that you want to configure.
Step 2Choose the authentication mode.
NoteDepending on what you selected, you must configure additional options in Wireless Security or
Wireless Encryption. See Table 4-5 for more information.
Step 3Click Save to make the change.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-14
OL-15984-01
Page 91
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Setting the Wireless Security Credentials
When your network uses EAP-FAST, LEAP, EAP-TLS, PEAP, or Auto (AKM) with WPA, WPA2,
CCKM for user authentication, you must configure both the username and a password on the Access
Control Server (ACS) and the phone.
NoteIf you use domains within your network, you must enter the username with the domain name, in this
format: domain\username.
For information about setting security credentials, see these topics:
•Configuring the Username and Password, page 4-15
•Configuring the Pre-shared Key, page 4-15
•Setting Wireless Encryption, page 4-16
•Installing Authentication Certificates for EAP-TLS Authentication, page 4-17
•Configuring PEAP, page 4-22
Configuring Network Profiles
Configuring the Username and Password
To enter or change the username or password for the network profile, you must use the same username
and the same password string that is configured in the RADIUS server. The maximum length of the
username or password entry is 32 characters.
To set up the username and password in Wireless Security Credentials, follow these steps:
Procedure
Step 1Choose the network profile.
Step 2In the Username field, enter the network username for this profile.
Step 3In the Password field, enter the network password string for this profile.
Step 4Click Save to make the change.
Configuring the Pre-shared Key
When using Auto (AKM) with WPA Pre-shared key or WPA2 with Pre-shared key for authentication,
you must configure a Passphrase/Pre-shared key in the Wireless Security Credentials area.
Pre-shared Key Formats
The Cisco Unified Wireless IP Phone 7925G supports ASCII and hexadecimal formats. You must use
one of these formats when setting up a WPA Pre-shared key:
Hexadecimal
For hexadecimal keys, you must enter 64 hex digits (0-9 and/or A-F); for example,
AB123456789CD01234567890EFAB123456789CD01234567890EF3456789C
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-15
Page 92
Configuring Network Profiles
ASCII
For ASCII keys, you must enter a character string that uses 0-9, A-Z (upper and lower case), including
symbols and is from 8 to 63 characters in length; for example, GREG12356789ZXYW
To set up a Pre-shared key in the Wireless Credentials area, follow these steps:
Procedure
Step 1Choose the network profile that uses Auto (AKM) to enable the WPA Pre-shared key or WPA2
Pre-shared key.
Step 2In the Key Type area, choose one of these character formats:
•Hex
•ASCII
Step 3Enter an ASCII string or Hex digits in the Passphrase/Pre-shared key field. See “Pre-shared Key
Formats” section on page 4-15.
Step 4Click Save to make the change.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Setting Wireless Encryption
If your wireless network uses WEP encryption, and you have set the Authentication Mode as Open +
WEP or Shared Key + WEP, you must enter an ASCII or hexadecimal WEP Key.
The WEP Keys for the phone must match the WEP Keys assigned to the access point. Cisco Unified
Wireless IP
keys.
WEP Key Formats
You must use one of these formats when setting up a WEP key:
Hexadecimal
For hexadecimal keys, you can use one of the following key sizes:
•40-bit—You must enter a 10-digit encryption key string that uses the hex digits (0-9 and/or A-F);
or example, ABCD123456.
•128-bit—You must enter a 26-digit encryption key string that uses the hex digits (0-9 and/or A-F);
or example, AB123456789CD01234567890EF.
ASCII
For ASCII keys, you must enter a character string that uses 0-9, A-Z (upper and lower case), and all
symbols.
•40-bit—You must enter a 5-character string; for example, GREG5.
Phone 7925G and Cisco Aironet Access Points support both 40-bit and 128-bit encryption
•128-bit—You must enter a 13-character string; for example, GREGSSECRET13.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-16
OL-15984-01
Page 93
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Entering Wireless Encryption Keys
To set up WEP keys, follow these steps:
Procedure
Step 1Choose the network profile that uses Open+WEP or Shared+WEP.
Step 2In the Key Type area, choose one of these character formats:
•Hex
•ASCII
Step 3For Encryption Key 1, click Transmit Key.
Step 4In the Key Size area, choose one of these character string lengths:
•40
•128
Step 5In the Encryption Key field, enter the appropriate key string based on the selected Key Type and Key
Installing Authentication Certificates for EAP-TLS Authentication
EAP-TLS is a certificate based authentication that requires a trust relationship between two or more
entities. Each entity has a certificate proving its identity and is signed by a trusted authority. These
certificates are exchanged and verified during EAP-TLS authentication.
NoteThe EAP-TLS certificate based authentication requires that the internal clock on the Cisco Unified
Wireless IP Phone 7925G be set correctly. Use the phone web page to set the clock on the phone before
using EAP-TLS authentication.
To use EAP-TLS, both the Cisco Unified Wireless IP Phone 7925G and the Cisco Secure Access Control
Server (ACS) must have certificates installed and configured properly. If your wireless network uses
EAP-TLS for authentication, you can use the Manufacturing Installed Certificate (MIC) or a user
installed certificate for authentication on the phone.
Manufacturing Installed Certificate
Cisco has included a Manufacturing Installed Certificate (MIC) in the phone at the factory.
During EAP-TLS authentication the ACS server needs to verify the trust of the phone and the phone
needs to verify the trust of the ACS server.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-17
Page 94
Configuring Network Profiles
To verify the MIC, the Manufacturing Root Certificate and Manufacturing Certificate Authority (CA)
Certificate must be exported from a Cisco
ACS server. These two certificates are part of the trusted certificate chain used to verify the MIC by the
Cisco ACS server.
To verify the Cisco ACS certificate, a trusted subordinate certificate (if any) and root certificate (created
from a CA) on the Cisco ACS server must be exported and installed on the phone. These certificate(s)
are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
User Installed Certificate
To use a user installed certificate, a Certificate Signing Request (CSR) must be generated on the phone,
sent to the CA for approval, and the approved certificate installed on the Cisco
Phone 7925G.
During EAP-TLS authentication, the ACS server needs to verify the trust of the phone and the phone
needs to verify the trust of the ACS server.
To verify the authenticity of the user installed certificate, a trusted subordinate certificate (if any) and
root certificate from the CA that approved the user certificate must be installed on the Cisco ACS server.
These certificate(s) are part of the trusted certificate chain used to verify the trust of the user installed
certificate.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Unified Wireless IP Phone 7925G and installed on the Cisco
Unified Wireless IP
To verify the Cisco ACS certificate, a trusted subordinate certificate (if any) and root certificate (created
from a CA) on the Cisco ACS server must be exported and installed on the phone. These certificate(s)
are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
To install authentication certificates for EAP-TLS, perform the tasks listed in Table 4-6:
Ta b l e 4-6Installing the Certificate for EAP-TLS
Tas kFromFor more information, see...
1. Set the Cisco Unified
Communications Manager date and
Cisco Unified Wireless IP Phone 7925G
web page
Setting the Date and Time, page 4-19
time on the phone.
2. If using the Manufacturing Installed
Certificate (MIC):
a. Export the CA root certificate
and manufacturing CA
certificate.
b. Install certificates on the
Cisco
ACS server and edit the
•Cisco Unified Wireless IP Phone
7925G web page
•Internet Explorer
•Microsoft Certificate Services
Exporting and Installing the Certificates
on the ACS, page 4-19
Exporting the CA Certificate from the
ACS Using Microsoft Certificate
Services, page 4-20
trust list.
c. Export the CA certificate from
the ACS server and import it to
the phone.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-18
OL-15984-01
Page 95
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Configuring Network Profiles
Table 4-6Installing the Certificate for EAP-TLS (continued)
TaskFromFor more information, see...
3. If using a user installed certificate:
a. Generate the Certificate
Cisco Unified Wireless IP Phone 7925G
web page
Requesting and Importing the User
Installed Certificate, page 4-21
Signing Request (CSR).
b. Send the CSR to CA to sign.
c. Import the certificate.
d. Install certificate on the Cisco
ACS server and edit the trust
list.
e. Download the CA certificate
from the ACS server and import
it into the7925G.
4. Set up the user account.ACS configuration toolConfiguring the ACS Server Setup,
page 4-22
User Guide for Cisco Secure ACS for
Windows
Setting the Date and Time
EAP-TLS uses certificate based authentication that requires the internal clock on the Cisco Unified
Wireless IP Phone 7925G to be set correctly. The date and time on the phone might change when it is
registered to Cisco
NoteIf a new server authentication certificate is being requested and the local time is behind the Greenwich
Unified Communications Manager.
Mean Time (GMT), the authentication certificate validation might fail. It is recommended that you set
the local date and time ahead of the GMT.
To set the phone to the correct local date and time, follow these steps:
Procedure
Step 1Select Date & Time from the left navigation pane.
Step 2If the setting in the Current Phone Date & Time field is different from the Local Date & Time field, click
Set Phone to Local Date & Time.
Step 3Click Phone Restart, then click OK.
Exporting and Installing the Certificates on the ACS
To use the MIC, the Manufacturing Root Certificate and Manufacturing CA Certificate must be exported
and installed onto the Cisco ACS server.
To export the manufacturing root certificate and manufacturing CA certificate to the ACS server, follow
these steps:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-19
Page 96
Configuring Network Profiles
Procedure
Step 1From the phone web page, choose Certificates. Click Export next to the Manufacturing Root Certificate.
Step 2Save the certificate and copy it to the ACS server.
Step 3Repeat Steps 1 and 2 for the Manufacturing CA certificate.
Step 4From the ACS Server System Configuration page, enter the file path for each certificate and install the
certificates.
NoteFor more information about using the ACS configuration tool, see the ACS online help or the
User Guide for Cisco Secure ACS for Windows.
Step 5Use the Edit the Certificate Trust List (CTL) page to add the certificates to be trusted by ACS.
Exporting Certificates from the ACS
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Depending on the type of certificate you export from the ACS, use one of the following methods:
•To export the CA certificate from the ACS server that signed the user installed certificate or ACS
certificate, see
Exporting the CA Certificate from the ACS Using Microsoft Certificate Services,
page 4-20.
•To export the CA certificate from the ACS server that uses a self-signed certificate, see Exporting
Certificates from the ACS Server Using Internet Explorer, page 4-20.
Exporting the CA Certificate from the ACS Using Microsoft Certificate Services
Use this method for exporting the CA certificate from the ACS server that signed the user installed
certificate or ACS certificate.
To export the CA certificate using the Microsoft Certificate Services web page, follow these steps:
Procedure
Step 1From the Microsoft Certificate Services web page, select Download a CA certificate, certificate chain
or CRL.
Step 2At the next page, highlight the current CA certificate in the text box, choose DER under Encoding
Method, then click Download CA certificate.
Step 3Save the CA certificate.
Exporting Certificates from the ACS Server Using Internet Explorer
Use this method for exporting the CA certificate from the ACS server that uses a self-signed certificate.
To export certificates from the ACS server using Internet Explorer, follow these steps:
Procedure
Step 1From Internet Explorer, choose Tools > Internet Options, then click the Content tab.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-20
OL-15984-01
Page 97
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Step 2Under Certificates, click Certificates..., then click the Trusted Root Certification Authorities tab.
Step 3Highlight the root certificate and click Export.... The Certificate Export Wizard appears. Click Next.
Step 4At the next window, select DER encoded binary X.509 (.CER), and click Next.
Step 5Specify a name for the certificate and click Next.
Step 6Save the CA certificate to be installed on the phone.
Requesting and Importing the User Installed Certificate
To request and install the certificate on the phone, follow these steps:
Procedure
Step 1From the phone web page, choose the network profile using EAP-TLS, and select User Installed in the
EAP-TLS Certificate field.
Step 2Click Certificates. On the User Certificate Installation page, the Common Name field should match the
user name in the ACS server.
NoteYou can edit the Common Name field if you wish. Make sure that it matches the user name in
the ACS server. See
“Configuring the ACS Server Setup” section on page 4-22.
Configuring Network Profiles
Enter the information to be displayed on the certificate, and click Submit to generate the Certificate
Signing Request (CSR).
Step 3In the next screen, select and copy the entire contents of the text box. Send this data to the CA
administrator for signing.
The CSR text is encoded and should be sent to the Certificate Authority for signing. The CSR text can
be sent by e-mail or another method determined by your CA administrator. The following steps describe
the basic CSR approval process on the CA web page.
Step 4From the Microsoft Certificate Services Request a Certificate page, select Advanced certificate request
to initiate the signing request.
Step 5At the Advanced Certificate Request page, select Submit a certificate request by using a
base-64-encoded PKCS CMC.
Step 6Copy the certificate data from the Cisco Unified Wireless IP Phone 7925G and paste it in the Saved
Request text box, then click Submit.
Step 7Once the CSR is approved, the certificate must be exported in a DER encoded format and sent to the
original requestor.
Step 8Return to the phone web page and choose Certificates to import the signed certificate.
Step 9On the Certificates page, locate the User Installed certificate line, and click Import. Browse to the
certificate on your PC to import to the phone.
Installing the Authentication Server Root Certificate
The Authentication Server Root Certificate must be installed on the Cisco Unified Wireless IP Phone
7925G.
To install the certificate, follow these steps:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-21
Page 98
Configuring Network Profiles
Step 1Export the Authentication Server Root Certificate from the ACS. See Exporting Certificates from the
ACS, page 4-20.
Step 2Go to the phone web page and choose Certificates.
Step 3Click Import next to the Authentication Server Root certificate.
Step 4Restart the phone.
Configuring the ACS Server Setup
To set up the user account name and install the MIC root certificate for the phone on the ACS, follow
these steps:
NoteFor more information about using the ACS configuration tool, see the ACS online help or the User Guide
for Cisco Secure ACS for Windows.
Procedure
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Step 1From the ACS configuration tool User Setup page, create a phone user account name if it is not already
Step 2On the System Configuration page, in the EAP-TLS section, enable these fields:
Step 3On the ACS Certification Authority Setup page, add the Manufacturing Root Certificate and
Step 4Enable both the Manufacturing Root Certificate and Manufacturing CA Certificate in the ACS
Configuring PEAP
set up. Typically, the user name includes the phone MAC address at the end (for example,
CP-7925G-SEPxxxxxxxxxxxx). No password is necessary for EAP-TLS.
NoteMake sure the user name matches the Common Name field in the User Certificate Installation
page. See
•Allow EAP-TLS
•Certificate CN comparison.
“Requesting and Importing the User Installed Certificate” section on page 4-21.
Manufacturing CA Certificate to the ACS server.
Certificate Trust List.
Protected Extensible Authentication Protocol (PEAP) uses server-side public key certificates to
authenticate clients by creating an encrypted SSL/TLS tunnel between the client and the authentication
server.
NoteThe authentication server validation can be enabled by importing the authentication server certificate.
Before You Begin
Before you configure PEAP authentication for the phone, make sure these Cisco Secure ACS
requirements are met:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-22
OL-15984-01
Page 99
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
•The ACS root certificate must be installed
•Enable the Allow EAP-MSCHAPv2 setting
•User account and password must be configured
•For password authentication, you can use the local ACS database or an external one (such as
Windows or LDAP)
Enabling PEAP Authentication
To enable PEAP authentication on the phone, follow these steps:
Procedure
Step 1From the phone configuration web page, choose PEAP as the authentication mode. See Configuring the
Authentication Mode, page 4-14.
Step 2Enter a user name and password.
Configuring Network Profiles
Configuring IP Network Settings
The Cisco Unified IP Phones enable DHCP, by default, to automatically assign IP addresses to devices
when you connect them to the network. If you do not use DHCP in your network, then you must disable
DHCP and manually enter network configuration information. For more information, see
with the Dynamic Host Configuration Protocol Server” section on page 2-15.
When DHCP is disabled in the network, you must configure the following settings in the Static Settings
menu:
•IP address
•Subnet mask
•Default Router
•DNS server 1 and 2
•TFTP server 1
Use these guidelines when manually configuring the IP settings:
•Ensure the TFTP server has an IP address.
•Ensure the default router IP address is on the same subnet as the host IP address.
Enabling DHCP
To enable the use of DHCP in the Network Profile, follow these steps:
“Interacting
Procedure
Step 1Choose the network profile that you want to configure.
Step 2Under the IP Network Configuration area, choose this option:
Obtain IP address and DNS servers automatically
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
4-23
Page 100
Configuring Network Profiles
Step 3Click Save to make the change.
Disabling DHCP
Step 1Choose the network profile that you want to configure.
Step 2Under the IP Network Configuration area, choose this option:
Step 3You must enter these required IP addresses. See Table 4-7 for descriptions of these fields.
Step 4Click Save to make the change.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
To disable the use of DHCP in the Network Profile, follow these steps:
Procedure
Use the following IP addresses and DNS servers
Ta b l e 4-7Static IP Addresses When DHCP is Disabled
Static SettingDescription
IP AddressIP address of the phone
Subnet MaskSubnet mask used by the phone
Default Router 1Primary gateway used by the phone
DNS Server 1
DNS Server 2
TFTP Server 1
TFTP Server 2
Primary DNS server used by the phone
Optional backup DNS server used by the phone
Primary TFTP server used by the phone
Optional backup TFTP server used by the phone
Domain NameName of the DNS in which the phone resides
Configuring the Alternate TFTP Server
If you use DHCP to direct the Cisco Unified Wireless IP Phone 7925Gs to a TFTP server, you can also
assign an alternative TFTP server to some phones instead of the one assigned by DHCP.
NoteIf you disable DHCP, then you must use these steps to set up the TFTP server for the phone.
To assign an alternate TFTP server to a phone, follow these steps:
Procedure
Step 1Choose the network profile that you want to configure.
Step 2In the TFTP area, choose this option:
Use the following TFTP servers
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-24
OL-15984-01
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.