Cisco Unified IP Phone Administration
Guide for Cisco Unified CM 8.5 (SCCP and
SIP)
For Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and 7945G
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: OL-23092-01
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant
to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required
to correct the interference at their own expense.
The following information is for FCC compliance of Class B devices: The equipment described in this manual generates and may radiate radio-frequency energy. If it is not
installed in accordance with Cisco’s installation instructions, it may cause interference with radio and television reception. This equipment has been tested and found to
comply with the limits for a Class B digital device in accordance with the specifications in part 15 of the FCC rules. These specifications are designed to provide reasonable
protection against such interference in a residential installation. However, there is no guarantee that interference will not occur in a particular installation.
Modifying the equipment without Cisco’s written authorization may result in the equipment no longer complying with FCC requirements for Class A or Class B digital
devices. In that event, your right to use the equipment may be limited by FCC regulations, and you may be required to correct any interference to radio or television
communications at your own expense.
You can determine whether your equipment is causing interference by turning it off. If the interference stops, it was probably caused by the Cisco equipment or one of its
peripheral devices. If the equipment causes interference to radio or television reception, try to correct the interference by using one or more of the following measures:
• Turn the television or radio antenna until the interference stops.
• Move the equipment to one side or the other of the television or radio, or farther away from the television or radio.
• Plug the equipment into an outlet that is on a different circuit from the television or radio. (That is, make certain the equipment and the television or radio are on circuits
controlled by different circuit breakers or fuses.)
Modifications to this product not authorized by Cisco Systems, Inc. could void the FCC approval and negate your authority to operate the product.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1005R)
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5 (SCCP and SIP)
Obtaining Documentation, Obtaining Support, and Security Guidelines3
Cisco Product Security Overview3
Document Conventions3
CHAPTER
1An Overview of the Cisco Unified IP Phone1-1
Understanding the Cisco Unified IP Phones 7975G, 7971G-GE, 7970G, 7965G, and 7945G1-2
What Networking Protocols are Used?1-6
IPv6 Support on Cisco Unified IP Phones1-9
What Features are Supported on the Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and
7945G?
1-11
Feature Overview1-11
Configuring Telephony Features1-12
Configuring Network Parameters Using the Cisco Unified IP Phone1-12
Providing Users with Feature Information1-12
Understanding Security Features for Cisco Unified IP Phones1-13
Overview of Supported Security Features1-14
Understanding Security Profiles1-16
Identifying Authenticated, Encrypted, and Protected Phone Calls1-17
Establishing and Identifying Secure Conference Calls1-17
Establishing and Identifying Protected Calls1-18
Call Security Interactions and Restrictions 1-18
Supporting 802.1X Authentication on Cisco Unified IP Phones1-19
Overview1-20
Required Network Components1-20
Best Practices—Requirements and Recommendations1-20
Security Restrictions1-21
Overview of Configuring and Installing Cisco Unified IP Phones1-22
Configuring Cisco Unified IP Phones in Cisco Unified Communications Manager1-22
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
iii
Contents
Checklist for Configuring the Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and 7945G
in Cisco Unified Communications Manager Administration1-22
Installing Cisco Unified IP Phones1-25
Checklist for Installing the Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and
7945G1-25
CHAPTER
2Preparing to Install the Cisco Unified IP Phone on Your Network2-1
Understanding Interactions with Other Cisco Unified IP Communications Products2-2
Understanding How the Cisco Unified IP Phone Interacts with Cisco Unified Communications
Manager2-2
Understanding How the Cisco Unified IP Phone Interacts with the VLAN2-3
Providing Power to the Phone2-4
Power Guidelines2-4
Phone Power Consumption and Display Brightness2-5
Power Outage2-6
Obtaining Additional Information about Power2-6
Understanding Phone Configuration Files2-7
Understanding the Phone Startup Process2-9
Adding Phones to the Cisco Unified Communications Manager Database2-11
Adding Phones with Auto-Registration2-11
Adding Phones with Auto-Registration and TAPS2-12
Adding Phones with Cisco Unified Communications Manager Administration2-13
Adding Phones with BAT2-13
Using Cisco Unified IP Phones with Different Protocols2-14
Converting a New Phone from SCCP to SIP2-14
Converting an In-Use Phone from One Protocol to the Other Protocol2-15
Deploying a Phone in an SCCP and SIP Environment2-15
Determining the MAC Address of a Cisco Unified IP Phone2-15
Understanding the Cisco Unified IP Phone Components3-2
Network and Access Ports3-2
Handset3-3
Speakerphone3-3
Headset3-3
Audio Quality Subjective to the User3-4
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
iv
OL-23092-01
Connecting a Headset3-4
Disabling a Headset3-4
Enabling a Wireless Headset3-5
Using External Devices3-5
Installing the Cisco Unified IP Phone3-5
Attaching a Cisco Unified IP Phone Expansion Module3-9
Feature Key Capacity Increase for Cisco Unified IP Phones3-10
Adjusting the Placement of the Cisco Unified IP Phone3-11
Adjusting Cisco Unified IP Phone Footstand and Phone Height3-11
Securing the Phone with a Cable Lock3-12
Mounting the Phone to the Wall3-13
Verifying the Phone Startup Process3-14
Configuring Startup Network Settings3-15
Configuring Security on the Cisco Unified IP Phone3-16
Contents
CHAPTER
4Configuring Settings on the Cisco Unified IP Phone4-1
Configuration Menus on the Cisco Unified IP Phone4-1
Displaying a Configuration Menu4-2
Unlocking and Locking Options4-3
Editing Values4-3
Overview of Options Configurable from a Phone4-4
Network Configuration Menu4-5
Understanding DHCPv6 and Autoconfiguration4-16
Device Configuration Menu4-17
Unified CM Configuration4-18
SIP Configuration Menu for SIP Phones4-19
SIP General Configuration Menu4-19
Line Settings Menu for SIP Phones4-20
Call Preferences Menu for SIP Phones4-20
HTTP Configuration Menu4-21
Locale Configuration Menu4-23
NTP Configuration Menu for SIP Phones4-23
UI Configuration Menu4-24
Media Configuration Menu4-26
Power Save Configuration Menu4-29
Ethernet Configuration Menu4-30
Security Configuration Menu4-30
QoS Configuration Menu4-31
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
v
Contents
Network Configuration4-32
Security Configuration Menu4-36
CTL File Submenu4-38
ITL File Submenu4-39
Trust List Menu4-41
802.1X Authentication and Status4-42
VPN Configuration4-44
Connecting to VPN4-44
VPN Configuration Settings4-45
CHAPTER
CHAPTER
5Configuring Features, Templates, Services, and Users5-1
Telephony Features Available for the Phone5-1
Configuring Product Specific Configuration Parameters5-22
Configuring Corporate and Personal Directories5-24
Configuring Corporate Directories5-24
Configuring Personal Directory5-24
Modifying Phone Button Templates5-25
Modifying a Phone Button Template for Personal Address Book or Fast Dials5-26
Configuring Softkey Templates5-27
Setting Up Services5-28
Adding Users to Cisco Unified Communications Manager5-28
Managing the User Options Web Pages5-29
Giving Users Access to the User Options Web Pages5-29
Specifying Options that Appear on the User Options Web Pages5-30
6Customizing the Cisco Unified IP Phone6-1
Customizing and Modifying Configuration Files6-1
Creating Custom Phone Rings6-2
Ringlist.xml File Format Requirements6-2
PCM File Requirements for Custom Ring Types6-3
Configuring a Custom Phone Ring6-3
Creating Custom Background Images6-3
List.xml File Format Requirements6-4
PNG File Requirements for Custom Background Images6-5
Configuring a Custom Background Image6-6
Configuring Wideband Codec6-7
Configuring the Idle Display6-7
Automatically Disabling the Cisco Unified IP Phone Screen6-8
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
vi
OL-23092-01
Contents
CHAPTER
CHAPTER
7Viewing Model Information, Status, and Statistics on the Cisco Unified IP Phone7-1
8Monitoring the Cisco Unified IP Phone Remotely8-1
Accessing the Web Page for a Phone8-2
Disabling and Enabling Web Page Access8-3
Configuring the Cisco Unified IP Phone to use HTTP/HTTPS Protocols8-4
Device Information8-4
Network Configuration8-5
Network Statistics8-9
CHAPTER
Device Logs8-11
Streaming Statistics8-12
9Troubleshooting and Maintenance9-1
Resolving Startup Problems9-1
Symptom: The Cisco Unified IP Phone Does Not Go Through its Normal Startup Process9-2
Symptom: The Cisco Unified IP Phone Does Not Register with Cisco Unified Communications
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
vii
Contents
Verifying DHCP Settings9-7
Checking Static IP Address Settings9-7
Verifying Voice VLAN Configuration9-7
Verifying that the Phones Have Not Been Intentionally Reset9-7
Eliminating DNS or Other Connectivity Errors9-8
Checking Power Connection9-8
Troubleshooting Cisco Unified IP Phone Security9-8
General Troubleshooting Tips9-10
General Troubleshooting Tips for the Cisco Unified IP Phone Expansion Module9-14
Resetting or Restoring the Cisco Unified IP Phone9-14
Performing a Basic Reset9-14
Performing a Factory Reset9-15
Using the Quality Report Tool9-17
Monitoring the Voice Quality of Calls9-17
Using Voice Quality Metrics9-18
Troubleshooting Tips9-18
APPENDIX
APPENDIX
Where to Go for More Troubleshooting Information9-19
Cleaning the Cisco Unified IP Phone9-20
AProviding Information to Users Via a WebsiteA-1
How Users Obtain Support for the Cisco Unified IP PhoneA-1
Giving Users Access to the User Options Web PagesA-1
How Users Access the Online Help System on the PhoneA-2
How Users Get Copies of Cisco Unified IP Phone ManualsA-2
Accessing Cisco 7900 Series Unified IP Phone eLearning Tutorials (SCCP Phones Only)A-2
How Users Subscribe to Services and Configure Phone FeaturesA-3
How Users Access a Voice-Messaging SystemA-3
How Users Configure Personal Directory EntriesA-4
Installing and Configuring the Cisco Unified IP Phone Address Book SynchronizerA-4
BFeature Support by Protocol for the Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and
7945G
B-1
APPENDIX
CSupporting International UsersC-1
Adding Language Overlays to Phone ButtonsC-1
Installing the Cisco Unified Communications Manager Locale InstallerC-1
Support for International Call LoggingC-2
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
viii
OL-23092-01
Contents
APPENDIX
APPENDIX
I
NDEX
DTechnical SpecificationsD-1
Physical and Operating Environment SpecificationsD-1
Cable SpecificationsD-2
Network and Access Port PinoutsD-3
EBasic Phone Administration StepsE-1
Example User Information for these ProceduresE-1
Adding a User to Cisco Unified Communications ManagerE-2
Adding a User From an External LDAP DirectoryE-2
Adding a User Directly to Cisco Unified Communications ManagerE-3
Configuring the PhoneE-3
Performing Final End User Configuration StepsE-7
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
ix
Contents
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
x
OL-23092-01
Overview
Preface
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.0 provides
the information you need to understand, install, configure, manage, and troubleshoot the
Cisco Unified IP Phone on a Voice-over-IP (VoIP) network.
Because of the complexity of a Unified Communications network, this guide does not provide complete
and detailed information for procedures that you need to perform in Cisco Unified Communications
Manager (formerly Cisco Unified CallManager) or other network devices. See Related Documentation,
page 2 for a list of related documentation.
Audience
Network engineers, system administrators, or telecom engineers should review this guide to learn the
steps required to properly set up the Cisco Unified IP Phone.
The tasks described are administration-level tasks and are not intended for end-users of the phones.
Many of the tasks involve configuring network settings and affect the phone’s ability to function in the
network.
Because of the close interaction between the Cisco Unified IP Phone and
Cisco Unified Communications Manager, many of the tasks in this manual require familiarity with
Cisco Unified Communications Manager.
Organization
This manual is organized as follows:
Chapter 1, An Overview of the Cisco Unified IP PhoneProvides a conceptual overview and description of the
Cisco Unified IP Phone.
Chapter 2, Preparing to Install the Cisco Unified IP Phone on
Your Network
Chapter 3, Setting Up the Cisco Unified IP PhoneDescribes how to properly and safely install and configure the
Describes how the Cisco Unified IP Phone interacts with
other key IP telephony components, and provides an overview
of the tasks required prior to installation.
Cisco Unified IP Phone on your network.
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1
Preface
Chapter 4, Configuring Settings on the Cisco
Unified IP Phone
Chapter 5, Configuring Features, Templates, Services, and
Users
Describes how to configure network settings, verify status,
and make global changes to the Cisco Unified IP Phone.
Provides an overview of procedures for configuring telephony
features, configuring directories, configuring phone button
and softkey templates, setting up services, and adding users to
Cisco Unified Communications Manager.
Chapter 6, Customizing the Cisco Unified IP PhoneExplains how to customize phone ring sounds, background
images, and the phone idle display at your site.
Chapter 7, Viewing Model Information, Status, and Statistics
on the Cisco Unified IP Phone
Explains how to view model information, status messages,
network statistics, and firmware information from
the Cisco Unified IP Phone.
Chapter 8, Monitoring the Cisco Unified IP Phone Remotely Describes the information that you can obtain from the
phone’s web page, and how to use this information to
remotely monitor the operation of a phone and to assist with
troubleshooting.
Chapter 9, Troubleshooting and MaintenanceProvides tips for troubleshooting the Cisco Unified IP Phone.
Appendix A, Providing Information to Users Via a WebsiteProvides suggestions for setting up a website for providing
users with important information about their Cisco Unified
IP Phones.
Appendix B, Feature Support by Protocol for the Cisco
Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and
Provides information about feature support for the
Cisco Unified IP Phone using the SCCP or SIP protocol.
7945G
Appendix C, Supporting International UsersProvides information about setting up phones in non-English
environments.
Appendix D, Technical SpecificationsProvides technical specifications of the
Cisco Unified IP Phone.
Appendix E, Basic Phone Administration StepsProvides procedures for basic administration tasks such as
adding a user and phone to Cisco Unified Communications
Manager and then associating the user to the phone.
Related Documentation
For more information about Cisco Unified IP Phones or Cisco Unified Communications Manager, refer
to the following publications:
Cisco Unified IP Phone
These publications are available at the following URL:
Obtaining Documentation, Obtaining Support, and Security
Guidelines
For information on obtaining documentation, obtaining support, providing documentation feedback,
security guidelines, and also recommended aliases and general Cisco documents, see the monthly What’s
New in Cisco Product Documentation, which also lists all new and revised Cisco technical
documentation, at:
This product contains cryptographic features and is subject to United States and local country laws
governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors
and users are responsible for compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local
laws, return this product immediately.
Further information regarding U.S. export regulations may be found at
http://www.access.gpo.gov/bis/ear/ear_data.html.
Document Conventions
This document uses the following conventions:
ConventionDescription
boldface fontCommands and keywords are in boldface.
italic fontArguments for which you supply values are in italics.
[ ]Elements in square brackets are optional.
{ x | y | z }Alternative keywords are grouped in braces and separated by vertical bars.
[ x | y | z ]Optional alternative keywords are grouped in brackets and separated by vertical bars.
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
3
Preface
ConventionDescription
stringA nonquoted set of characters. Do not use quotation marks around the string or the
string will include the quotation marks.
screen fontTerminal sessions and information the system displays are in screen font.
boldface
screen
font
italic screen
Information you must enter is in
Arguments for which you supply values are in italic screen font.
font
^The symbol ^ represents the key labeled Control—for example, the key combination
^D in a screen display means hold down the Control key while you press the D key.
< >Nonprinting characters, such as passwords are in angle brackets.
NoteMeans reader take note. Notes contain helpful suggestions or references to material not covered in the
publication.
boldface screen font.
CautionMeans reader be careful. In this situation, you might do something that could result in equipment
damage or loss of data.
Warning
Means danger. You are in a situation that could cause bodily injury. Before you work on any
equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard
practices for preventing accidents.
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
4
OL-23092-01
CHAP T ER
1
An Overview of the Cisco Unified IP Phone
The Cisco Unified IP Phone 7975G, 7971G-GE (gigabit Ethernet version), 7970G, 7965G, and 7945G
are full-featured telephones that provide voice communication over an Internet Protocol (IP) network.
They function much like digital business phones, allowing you to place and receive phone calls and to
access features such as mute, hold, transfer, speed dial, call forward, and more. In addition, because
Cisco Unified IP Phones are connected to your data network, they offer enhanced IP telephony features,
including access to network information and services, and customizeable features and services. The
phones also support security features that include file authentication, device authentication, signaling
encryption, and media encryption.
The Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and 7945G each provide a color screen
(touchscreen for the 7975G, 7971G-GE, and the 7970G), support for line or speed dial numbers,
context-sensitive online help for buttons and features, and a variety of other sophisticated functions.
A Cisco Unified IP Phone, like other network devices, must be configured and managed. These phones
encode G.711a, G.711µ, G.722, G.729a, G.729ab, iLBC, and decode G.711a, G.711µ, G722, iLBC, and
G.729, G729a, G.729b, and G.729ab. These phones also support uncompressed wideband (16bits,
16kHz) audio.
This chapter includes the following topics:
• Understanding the Cisco Unified IP Phones 7975G, 7971G-GE, 7970G, 7965G, and 7945G,
page 1-2
• What Networking Protocols are Used?, page 1-6
• What Features are Supported on the Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and
7945G?, page 1-11
• Understanding Security Features for Cisco Unified IP Phones, page 1-13
• Overview of Configuring and Installing Cisco Unified IP Phones, page 1-22
CautionUsing a cell, mobile, or GSM phone, or two-way radio in close proximity to a Cisco Unified IP Phone
might cause interference. For more information, refer to the manufacturer documentation of the
interfering device.
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-1
Chapter 1 An Overview of the Cisco Unified IP Phone
12
16
4
3
5
7
9
6
8
101112131415
186549
17
Understanding the Cisco Unified IP Phones 7975G, 7971G-GE, 7970G, 7965G, and 7945G
Understanding the Cisco Unified IP Phones 7975G, 7971G-GE,
7970G, 7965G, and 7945G
Figure 1-1 shows the main components of the Cisco Unified IP Phone 7975G.
Figure 1-2 shows the main components of the Cisco Unified IP Phone 7971G-GE/7970G.
Figure 1-3 shows the main components of the Cisco Unified IP Phone 7965G.
Figure 1-4 shows the main components of the Cisco Unified IP Phone 7945G.
Figure 1-1Cisco Unified IP Phone 7975G
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-2
OL-23092-01
Chapter 1 An Overview of the Cisco Unified IP Phone
10
9
7
5
8
6
4
3
2
1
1617
1112131415
186428
1
16
2
4
5
7
9
6
8
101112131415
17
3
Understanding the Cisco Unified IP Phones 7975G, 7971G-GE, 7970G, 7965G, and 7945G
Figure 1-2Cisco Unified IP Phone 7971G-GE/7970G
Figure 1-3Cisco Unified IP Phone 7965G
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-3
Understanding the Cisco Unified IP Phones 7975G, 7971G-GE, 7970G, 7965G, and 7945G
186421
4
3
5
6
7
9
101112131415
16
12
8
1
17
Figure 1-4Cisco Unified IP Phone 7945G
Chapter 1 An Overview of the Cisco Unified IP Phone
Tabl e 1 -1 describes the buttons on the Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and
7945G:
Table 1-1Cisco Unified IP Phone Buttons
1Programmable buttonsDepending on configuration, programmable buttons provide access to:
2Footstand adjustment button Allows you to adjust the angle of the phone base.
3Display buttonAwakens the touchscreen or phone screen from sleep mode or disables it for cleaning.
• Phone lines (line buttons)
• Speed-dial numbers (speed-dial buttons, including the BLF speed-dial feature)
• Web-based services (for example, a Personal Address Book button)
• Phone features (for example, a Privacy button)
Buttons illuminate to indicate status:
Green, steady—Active call
Green, flashing—Held call
Amber, steady—Privacy in use
Amber, flashing—Incoming call
Red, steady—Remote line in use (shared line or BLF status)
No color—Ready for input
4Messages buttonAuto-dials your voice message service (varies by service).
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-4
Green flashing—Disabled
Green steady—Sleep mode
OL-23092-01
Chapter 1 An Overview of the Cisco Unified IP Phone
?
Understanding the Cisco Unified IP Phones 7975G, 7971G-GE, 7970G, 7965G, and 7945G
Table 1-1Cisco Unified IP Phone Buttons (continued)
5Directories buttonOpens/closes the Directories menu. Use it to access call logs and directories.
6Help
buttonActivates the Help menu.
7Settings buttonOpens/closes the Settings menu. Use it to change touchscreen (or phone screen) and ring
settings.
8Services buttonOpens/closes the Services menu.
9Volume buttonControls the handset, headset, and speakerphone volume (off-hook) and the ringer
volume (on-hook).
10Speaker buttonToggles the speakerphone on or off.
11Mute buttonToggles the Mute feature on or off.
12Headset buttonToggles the headset on or off.
13For Cisco Unified Phones
7975G, 7965G, and 7945G:
4-way navigation pad and
Select button (center)
For Cisco Unified Phones 7975G, 7965G, and 7945G:
Allows you to scroll through menus and highlight items. Use the Select button to select
an item that is highlighted on the screen.
Navigation button
• Scroll up and down to see menus and highlight items.
• Scroll right and left to scroll horizontally in multi-column displays.
Select button—scroll to highlight a line using the Navigation button, and then:
• Press to open a menu.
• Press to play a ringer item.
• Press to access other features as described on the screen.
For Cisco Unified Phones
7971G-GE and 7970G:
Navigation button
NoteThe Select button does not take action on all menu items.
For Cisco Unified Phones 7971G-GE and 7970G:
Allows you to scroll through menus and highlight items. When the phone is on-hook,
displays phone numbers from your Placed Calls log.
14KeypadAllows you to dial phone numbers, enter letters, and choose menu items.
15Softkey buttonsEach activates a softkey option (displayed on your touchscreen or phone screen).
16Handset light stripIndicates an incoming call or new voice message.
17Touchscreen or phone screen Shows phone features.
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
OL-23092-01
1-5
Chapter 1 An Overview of the Cisco Unified IP Phone
What Networking Protocols are Used?
What Networking Protocols are Used?
Cisco Unified IP Phones support several industry-standard and Cisco networking protocols required for
voice communication. Table 1 - 2 provides an overview of the networking protocols that the
Cisco Unified IP Phones 7975G, 7971G-GE, 7970G, 7965G, and 7945G support.
Table 1-2Supported Networking Protocols on the Cisco Unified IP Phone
Networking ProtocolPurposeUsage Notes
Bootstrap Protocol (BootP)BootP enables a network device such as the
Cisco Unified IP Phone to discover certain
startup information, such as its IP address.
Cisco Discovery Protocol
(CDP)
Cisco Peer-to-Peer
Distribution Protocol
(CPPDP)
Dynamic Host Configuration
Protocol (DHCP)
Hypertext Transfer Protocol
(HTTP)
Hypertext Transfer Protocol
Secure (HTTPS)
CDP is a device-discovery protocol that runs
on all Cisco-manufactured equipment.
Using CDP, a device can advertise its
existence to other devices and receive
information about other devices in the
network.
CPPDP is a Cisco proprietary protocol used to
form a-peer-to-peer hierarchy of devices.
CPPDP is also used to copy firmware or other
files from peer devices to neighboring
devices.
DHCP dynamically allocates and assigns an
IP address to network devices.
DHCP enables you to connect an IP phone
into the network and have the phone become
operational without needing to manually
assign an IP address or configure additional
network parameters.
HTTP is the standard way of transferring
information and moving documents across the
Internet and the web.
Hypertext Transfer Protocol Secure (HTTPS)
is a combination of the Hypertext Transfer
Protocol with the SSL/TLS protocol to
provide encryption and secure identification
of servers.
If you are using BootP to assign IP addresses
to the Cisco Unified IP Phone, the BOOTP
Server option shows “Yes” in the network
configuration settings on the phone.
The Cisco Unified IP Phone uses CDP to
communicate information such as auxiliary
VLAN ID, per port power management details,
and Quality of Service (QoS) configuration
information with the Cisco Catalyst switch.
CPPDP is used by the Peer Firmware Sharing
feature.
DHCP is enabled by default. If disabled, you
must manually configure the IP address,
subnet mask, gateway, and a TFTP server on
each phone locally.
Cisco recommends that you use DHCP
custom option 150. With this method, you
configure the TFTP server IP address as the
option value. For additional supported DHCP
configurations, refer to Dynamic Host
Configuration Protocol and Cisco TFTP in
the Cisco Unified Communications Manager System Guide.
Cisco Unified IP Phones use HTTP for the
XML services and for troubleshooting
purposes.
Cisco Unified IP Phones do not support the
use of IPv6 addresses in the URL. You cannot
use a literal IPv6 address in the URL or a
hostname that maps to an IPv6 address.
Web applications with both HTTP and
HTTPS support have two URLs configured.
Cisco Unified IP Phone that support HTTPS
choose the HTTPS URL out of the two URLs.
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-6
OL-23092-01
Chapter 1 An Overview of the Cisco Unified IP Phone
What Networking Protocols are Used?
Table 1-2Supported Networking Protocols on the Cisco Unified IP Phone (continued)
Networking ProtocolPurposeUsage Notes
IEEE 802.1XThe IEEE 802.1X standard defines a
client-server-based access control and
authentication protocol that restricts
unauthorized clients from connecting to a
LAN through publicly accessible ports.
Until the client is authenticated, 802.1X
access control allows only Extensible
Authentication Protocol over LAN (EAPOL)
traffic through the port to which the client is
connected. After authentication is successful,
normal traffic can pass through the port.
Internet Protocol (IP)IP is a messaging protocol that addresses and
sends packets across the network.
Link Layer Discovery
Protocol (LLDP)
LLDP is a standardized network discovery
protocol (similar to CDP) that is supported on
some Cisco and third-party devices.
The Cisco Unified IP Phone implements the
IEEE 802.1X standard by providing support
for the following authentication methods:
EAP-FAST, EAP-TLS, and EAP-MD5.
When 802.1X authentication is enabled on the
phone, you should disable the PC port and
voice VLAN. Refer to Supporting 802.1X
Authentication on Cisco Unified IP Phones,
page 1-19 for additional information.
To communicate using IP, network devices
must have an assigned IP address, subnet, and
gateway.
IP addresses, subnets, and gateways
identifications are automatically assigned if
you are using the Cisco Unified IP Phone
with Dynamic Host Configuration Protocol
(DHCP). If you are not using DHCP, you must
manually assign these properties to each
phone locally.
The Cisco Unified IP Phone supports
concurrent IPv4 and IPv6 addresses.
Configure the IP addressing mode (IPv4 only,
IPv6 only, and both IPv4 and IPv6) in Cisco
Unified Communications Manager
Administration. For more information, refer
to Internet Protocol Version 6 (IPv6) in the
Cisco Unified Communications Manager
Features and Services Guide.
The Cisco Unified IP Phone supports LLDP
on the PC port.
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-7
Chapter 1 An Overview of the Cisco Unified IP Phone
What Networking Protocols are Used?
Table 1-2Supported Networking Protocols on the Cisco Unified IP Phone (continued)
Networking ProtocolPurposeUsage Notes
Link Layer Discovery
Protocol-Media Endpoint
Devices (LLDP-MED)
Real-Time Control Protocol
(RTCP)
Real-Time Transport Protocol
(RTP)
Session Initiation Protocol
(SIP)
Skinny Client Control
Protocol (SCCP)
LLDP-MED is an extension of the LLDP
standard developed for voice products.
RTCP works with Real-Time Transport
Protocol (RTP) to provide QoS data (such as
jitter, latency, and round trip delay) on RTP
streams.
RTP is a standard protocol for transporting
real-time data, such as interactive voice and
video, over data networks.
SIP is the Internet Engineering Task Force
(IETF) standard for multimedia conferencing
over IP. SIP is an ASCII-based
application-layer control protocol (defined in
RFC 3261) that can be used to establish,
maintain, and terminate calls between two or
more endpoints.
SCCP includes a messaging set that allows
communications between call control servers
and endpoint clients such as IP Phones. SCCP
is proprietary to Cisco Systems.
The Cisco Unified IP Phone supports
LLDP-MED on the SW port to communicate
information such as:
• Voice VLAN configuration
• Device discovery
• Power management
• Inventory management
For more information about LLDP-MED
support, see the LLDP-MED and Cisco Discovery Protocol white paper:
RTCP is disabled by default, but you can
enable it on a per-phone basis using Cisco
Unified Communications Manager. For more
information, see Network Configuration,
page 4-32.
Cisco Unified IP Phones use the RTP protocol
to send and receive real-time voice traffic
from other phones and gateways.
Like other VoIP protocols, SIP is designed to
address the functions of signaling and session
management within a packet telephony
network. Signaling allows call information to
be carried across network boundaries. Session
management provides the ability to control
the attributes of an end-to-end call.
You can configure the Cisco Unified IP Phone
to use either SIP or Skinny Client Control
Protocol (SCCP).
Cisco Unified IP Phones do not support the
SIP protocol when the phones are operating in
IPv6 address mode.
Cisco Unified IP Phones use SCCP for call
control. You can configure the Cisco
Unified IP Phone to use either SCCP or
Session Initiation Protocol (SIP).
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-8
OL-23092-01
Chapter 1 An Overview of the Cisco Unified IP Phone
What Networking Protocols are Used?
Table 1-2Supported Networking Protocols on the Cisco Unified IP Phone (continued)
Networking ProtocolPurposeUsage Notes
Session Description Protocol
(SDP)
Transmission Control
Protocol (TCP)
Transport Layer Security
(TLS)
Trivial File Transfer Protocol
(TFTP)
User Datagram Protocol
(UDP)
SDP is the portion of the SIP protocol that
determines which parameters are available
during a connection between two endpoints.
Conferences are established using only the
SDP capabilities that are supported by all
endpoints in the conference.
TCP is a connection-oriented transport
protocol.
TLS is a standard protocol for securing and
authenticating communications.
TFTP allows you to transfer files over the
network.
On the Cisco Unified IP Phone, TFTP enables
you to obtain a configuration file specific to
the phone type.
UDP is a connectionless messaging protocol
for delivery of data packets.
SDP capabilities, such as codec types, DTMF
detection, and comfort noise, are normally
configured on a global basis by Cisco Unified
Communications Manager or Media Gateway
in operation. Some SIP endpoints may allow
these parameters to be configured on the
endpoint itself.
Cisco Unified IP Phones use TCP to connect
to Cisco Unified Communications Manager
and to access XML services.
When security is implemented, Cisco
Unified IP Phones use the TLS protocol when
securely registering with Cisco
Unified Communications Manager.
TFTP requires a TFTP server in your network,
which can be automatically identified from
the DHCP server. If you want a phone to use
a TFTP server other than the one specified by
the DHCP server, you must manually assign
TFTP server from the Network Configuration
menu on the phone.
For more information, refer to Cisco TFTP in
the Cisco Unified Communications Manager System Guide.
Cisco Unified IP Phones transmit and receive
RTP streams, which utilize UDP.
IPv6 Support on Cisco Unified IP Phones
The Cisco Unified IP Phone uses the internet protocol to provide voice communication over the network.
Previous to Cisco Unified Communications Manager release 8.0, only the internet protocol version 4
(IPv4) was supported. Because it uses a 32-bit address, IPv4 cannot meet the increased demands for
unique IP addresses for all devices that can connect to the internet. Internet Protocol version 6 (IPv6) is
an updated version of the current Internet Protocol, IPv4. IPv6 uses a 128-bit address and provides
end-to-end security capabilities, enhanced Quality of Service (QoS), and increased number of available
IP addresses.
The Cisco Unified IP Phone supports IPv4 only addressing mode, IPv6 only addressing mode, as well
as an IPv4/IPv6 dual stack addressing mode. In IPv4, you can enter each octet of the IP address on the
phone in dotted decimal notation; for example, 192.240.22.5. In IPv6, you can enter each octet of the IP
address in hexadecimal notation with each octet separated by a colon; for example,
2005:db8:0:1:ef8:9876:ba72:dc9a. The phone truncates and removes leading zeros when it displays the
IPv6 address.
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-9
What Networking Protocols are Used?
Cisco Unified IP Phones support both IPv4 and an IPv6 address transparently, so users can handle all
calls on the phone to which they are accustomed. Cisco Unified IP Phones support the use of IPv6 only
with Cisco Unified Communications Manager release 7.1 and only with the Skinny Call Control Protocol
(SCCP).
Cisco Unified IP Phones do not support URLs with IPv6 addresses in the URL. This affects all IP Phone
Service URLs, including services, directories, messages, help, and any restricted web services that
require the phone to use the HTTP protocol to validate the credentials with the Authentication URL. If
you configure Cisco Unified IP Phone services for Cisco Unified IP Phones, you must configure the
phone and the servers that support the phone service with IPv4 addresses.
If you configure IPv6 Only as the IP Addressing Mode for phones that are running SIP, the Cisco TFTP
service overrides the IP Addressing Mode configuration and uses IPv4 Only in the configuration file.
For more information on deploying IPv6 in your Cisco Unified Communications network, refer to
Internet Protocol Version 6 (IPv6) in Cisco Unified Communications Manager Features and Services
Guide and Deploying IPv6 in Unified Communications Networks with Cisco Unified Communications
Manager.
Related Topics
• Understanding Interactions with Other Cisco Unified IP Communications Products, page 2-2
Chapter 1 An Overview of the Cisco Unified IP Phone
• Understanding the Phone Startup Process, page 2-9
• Network Configuration Menu, page 4-5
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-10
OL-23092-01
Chapter 1 An Overview of the Cisco Unified IP Phone
What Features are Supported on the Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and 7945G?
What Features are Supported on the Cisco
Unified
IP Phone 7975G, 7971G-GE, 7970G, 7965G, and 7945G?
The Cisco Unified IP Phone functions much like a digital business phone, allowing you to place and
receive telephone calls. In addition to traditional telephony features, the Cisco Unified IP Phone includes
features that enable you to administer and monitor the phone as a network device.
This section includes the following topics:
• Feature Overview, page 1-11
• Configuring Telephony Features, page 1-12
• Configuring Network Parameters Using the Cisco Unified IP Phone, page 1-12
• Providing Users with Feature Information, page 1-12
Feature Overview
Cisco Unified IP Phones provide traditional telephony functionality, such as call forwarding and
transferring, redialing, speed dialing, conference calling, and voice messaging system access.
Cisco Unified IP phones also provide a variety of other features. For an overview of the telephony
features that the Cisco Unified IP Phone supports, see Telephony Features Available for the Phone,
page 5-1.
As with other network devices, you must configure Cisco Unified IP Phones to prepare them to access
Cisco Unified Communications Manager and the rest of the IP network. By using DHCP, you have fewer
settings to configure on a phone, but if your network requires it, you can manually configure an IP
address, TFTP server, subnet information, and so on. For instructions on configuring the network
settings on the Cisco Unified IP Phones, see Chapter 4, Configuring Settings on the Cisco
Unified IP Phone.
The Cisco Unified IP Phone can interact with other services and devices on your IP network to provide
enhanced functionality. For example, you can integrate the Cisco Unified IP Phones with the corporate
Lightweight Directory Access Protocol 3 (LDAP3) standard directory to enable users to search for
co-workers contact information directly from their IP phones. You can also use XML to enable users to
access information such as weather, stocks, quote of the day, and other web-based information. For
information about configuring such services, see Configuring Corporate Directories, page 5-24 and
Setting Up Services, page 5-28.
Finally, because the Cisco Unified IP Phone is a network device, you can obtain detailed status
information from it directly. This information can assist you with troubleshooting any problems users
might encounter when using their IP phones. See Chapter 7, Viewing Model Information, Status, and
Statistics on the Cisco Unified IP Phone for more information.
Related Topics
• Configuring Settings on the Cisco Unified IP Phone, page 4-1
• Configuring Features, Templates, Services, and Users, page 5-1
• Troubleshooting and Maintenance, page 9-1
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-11
What Features are Supported on the Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and 7945G?
Configuring Telephony Features
You can modify certain settings for the Cisco Unified IP Phone from the Cisco Unified Communications
Manager Administration application. Use this graphical user interface to set up phone registration
criteria and calling search spaces, to configure corporate directories and services, and to modify phone
button templates, among other tasks. See Telephony Features Available for the Phone, page 5-1 and Cisco Unified Communications Manager Administration Guide for additional information.
For more information about the Cisco Unified Communications Manager Administration application,
refer to Cisco Unified Communications Manager documentation, including Cisco Unified Communications Manager System Guide. You can also use the context-sensitive help available
within the application for guidance.
You can access the Cisco Unified Communications Manager documentation suite at this location:
Chapter 1 An Overview of the Cisco Unified IP Phone
Related Topic
• Telephony Features Available for the Phone, page 5-1
Configuring Network Parameters Using the Cisco Unified IP Phone
You can configure parameters such as DHCP, TFTP, and IP settings on the phone itself. You can also
obtain statistics about a current call or firmware versions on the phone.
For more information about configuring features and viewing statistics from the phone, see Chapter 4,
Configuring Settings on the Cisco Unified IP Phone and see Chapter 7, Viewing Model Information,
Status, and Statistics on the Cisco Unified IP Phone.
Providing Users with Feature Information
If you are a system administrator, you are likely the primary source of information for Cisco Unified
IP Phone users in your network or company. To ensure that you distribute the most current feature and
procedural information, familiarize yourself with Cisco Unified IP Phone documentation. Make sure to
visit the Cisco Unified IP Phone web site:
From this site, you can access various user guides.
In addition to providing users with documentation, it is important to inform them about available
Cisco Unified IP Phone features—including features specific to your company or network—and about
how to access and customize those features, if appropriate.
For a summary of some of the key information that phone users need their system administrators to
provide, see Chapter A, Providing Information to Users Via a Website.
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-12
OL-23092-01
Chapter 1 An Overview of the Cisco Unified IP Phone
Understanding Security Features for Cisco Unified IP Phones
Understanding Security Features for Cisco Unified IP Phones
Implementing security in the Cisco Unified Communications Manager system prevents identity theft of
the phone and Cisco Unified Communications Manager server, prevents data tampering, and prevents
call signaling and media stream tampering.
To alleviate these threats, the Cisco Unified IP telephony network establishes and maintains
authenticated and encrypted communication streams between a phone and the server, digitally signs files
before they are transferred to a phone, and encrypts media streams and call signaling between
Cisco Unified IP phones.
The Cisco Unified IP Phones 7975G, 7971G-GE, 7970G, 7965G, and 7945G use the Phone Security
Profile, which defines whether the device is nonsecure, authenticated, or encrypted. For information on
applying the security profile to the phone, refer to Cisco Unified Communications Manager Security Guide.
If you configure security-related settings in Cisco Unified Communications Manager Administration,
the phone configuration file will contain sensitive information. To ensure the privacy of a configuration
file, you must configure it for encryption. For detailed information, refer to Configuring Encrypted
Phone Configuration Files in Cisco Unified Communications Manager Security Guide.
Table 1-3 shows where you can find additional information about security in this and other documents.
Table 1-3Cisco Unified IP Phone and Cisco Unified Communications Manager Security Topics
TopicReference
Detailed explanation of security, including set up,
configuration, and troubleshooting information for Cisco
Unified Communications Manager and Cisco Unified
IP Phones
Security features supported on the Cisco Unified IP PhoneSee Overview of Supported Security Features, page 1-14
Changing the TFTP Server 1 or TFTP Server 2 option on the
phone when security is implemented
Understanding security icons in the Unified CM 1 through
Unified CM 5 options in the Device Configuration Menu on
the phone
Items on the Security Configuration menu that you access
from the Device Configuration menu on the phone
Items on the Security Configuration menu that you access
from the Settings menu on the phone
Refer to the Troubleshooting Guide for Cisco Unified
Communications Manager
Phone Calls, page 1-17
See Understanding Phone Configuration Files, page 2-7
See Table 4-2 in the Network Configuration Menu, page 4-5
See Unified CM Configuration, page 4-18
See Security Configuration Menu, page 4-30
See Security Configuration Menu, page 4-36
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-13
Chapter 1 An Overview of the Cisco Unified IP Phone
Understanding Security Features for Cisco Unified IP Phones
Table 1-3Cisco Unified IP Phone and Cisco Unified Communications Manager Security Topics (continued)
TopicReference
Unlocking the CTL (Certificate Trust List) and ITL (Identity
Trust List) Files
Disabling access to web pages for a phoneSee Disabling and Enabling Web Page Access, page 8-3
Deleting the CTL file from the phoneSee Resetting or Restoring the Cisco Unified IP Phone,
Resetting or restoring the phoneSee Resetting or Restoring the Cisco Unified IP Phone,
Extension Mobility HTTPS SupportSee What Networking Protocols are Used?, page 1-6
802.1X Authentication for Cisco Unified IP PhonesSee these sections:
See Unlocking the CTL and ITL files, page 4-39
page 9-14
page 9-14
• Supporting 802.1X Authentication on Cisco Unified IP
Phones, page 1-19
• 802.1X Authentication and Status, page 4-42
• Troubleshooting Cisco Unified IP Phone Security,
page 9-8
Overview of Supported Security Features
Table 1-4 provides an overview of the security features that the Cisco Unified IP Phones 7975G,
7971G-GE, 7970G, 7965G, and 7945G support. For more information about these features and about
Cisco Unified Communications Manager and Cisco Unified IP Phone security, refer to Cisco Unified Communications Manager Security Guide.
For information about current security settings on a phone, look at the Security Configuration menus on
the phone (choose Settings > Security Configuration and choose Settings > Device Configuration > Security Configuration). For more information, see Chapter 4, Configuring Settings on the Cisco
Unified IP Phone.
NoteMost security features are available only if a CTL is installed on the phone. For more information about
the CTL, refer to Configuring the Cisco CTL Client in the Cisco Unified Communications Manager
Security Guide.
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-14
OL-23092-01
Chapter 1 An Overview of the Cisco Unified IP Phone
Understanding Security Features for Cisco Unified IP Phones
Table 1-4Overview of Security Features
FeatureDescription
Image authenticationSigned binary files (with the extension .sbn) prevent tampering with the firmware
image before it is loaded on a phone. Tampering with the image causes a phone to
fail the authentication process and reject the new image.
Customer-site certificate installationEach Cisco Unified IP Phone requires a unique certificate for device
authentication. Phones include a manufacturing installed certificate (MIC), but for
additional security, you can specify in Cisco Unified Communications Manager
Administration that a certificate be installed by using the CAPF (Certificate
Authority Proxy Function). Alternatively, you can install an LSC from the Security
Configuration menu on the phone. See Configuring Security on the Cisco Unified
IP Phone, page 3-16 for more information.
Device authenticationOccurs between the Cisco Unified Communications Manager server and the phone
when each entity accepts the certificate of the other entity. Determines whether a
secure connection between the phone and a Cisco Unified Communications
Manager should occur, and, if necessary, creates a secure signaling path between
the entities using TLS protocol. Cisco Unified Communications Manager does not
register phones unless they can be authenticated by the
Cisco Unified Communications Manager.
File authenticationValidates digitally signed files that the phone downloads. The phone validates the
signature to make sure that file tampering did not occur after the file creation. Files
that fail authentication are not written to Flash memory on the phone. The phone
rejects such files without further processing.
Signaling AuthenticationUses the TLS protocol to validate that no tampering has occurred to signaling
packets during transmission.
Manufacturing installed certificateEach Cisco Unified IP Phone contains a unique manufacturing installed certificate
(MIC), which is used for device authentication. The MIC is a permanent unique
proof of identity for the phone, and allows Cisco Unified Communications
Manager to authenticate the phone.
Secure SRST referenceAfter you configure a SRST reference for security and then reset the dependent
devices in Cisco Unified Communications Manager Administration, the TFTP
server adds the SRST certificate to the phone cnf.xml file and sends the file to the
phone. A secure phone then uses a TLS connection to interact with the
SRST-enabled router.
Media encryptionUses SRTP to ensure that the media streams between supported devices proves
secure and that only the intended device receives and reads the data. Includes
creating a media master key pair for the devices, delivering the keys to the devices,
and securing the delivery of the keys while the keys are in transport.
Signaling encryptionEnsures that all SCCP and SIP signaling messages that are sent between the device
and the Cisco Unified Communications Manager server are encrypted.
CAPF (Certificate Authority Proxy
Function)
Security profilesDefines whether the phone is nonsecure, authenticated, encrypted, or protected.
Implements parts of the certificate generation procedure that are too
processing-intensive for the phone, and it interacts with the phone for key
generation and certificate installation. The CAPF can be configured to request
certificates from customer-specified certificate authorities on behalf of the phone,
or it can be configured to generate certificates locally.
See Understanding Security Profiles, page 1-16 for more information.
OL-23092-01
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-15
Chapter 1 An Overview of the Cisco Unified IP Phone
Understanding Security Features for Cisco Unified IP Phones
Table 1-4Overview of Security Features (continued)
FeatureDescription
Encrypted configuration filesLets you ensure the privacy of phone configuration files.
Optional disabling of the web server
functionality for a phone
Phone hardeningAdditional security options, which you control from
802.1X AuthenticationThe Cisco Unified IP Phone can use 802.1X authentication to request and gain
You can prevent access to a phone web page, which displays a variety of
operational statistics for the phone.
• Disabling access to the Setting menus, or providing restricted access that
allows access to the User Preferences menu and saving volume changes only
• Disabling access to web pages for a phone
NoteYou can view current settings for the PC Port Disabled, GARP Enabled,
and Voice VLAN enabled options by looking at the phone Security
Configuration menu. For more information, see Device Configuration
Menu, page 4-17.
access to the network. See Supporting 802.1X Authentication on Cisco Unified IP
Phones, page 1-19 for more information.
Related Topics
• Understanding Security Profiles, page 1-16
• Identifying Authenticated, Encrypted, and Protected Phone Calls, page 1-17
• Establishing and Identifying Secure Conference Calls, page 1-17
• Device Configuration Menu, page 4-17
• Supporting 802.1X Authentication on Cisco Unified IP Phones, page 1-19
• Security Restrictions, page 1-21
Understanding Security Profiles
Cisco Unified IP Phones that support Cisco Unified Communications Manager 7.0 or later use a security
profile, which defines whether the phone is nonsecure, authenticated, or encrypted. For information
about configuring the security profile and applying the profile to the phone, refer to Cisco Unified Communications Manager Security Guide.
To view the security mode that is set for the phone, look at the Security Mode setting in the Security
Configuration menu. For more information, see Security Configuration Menu, page 4-30.
Related Topics
• Identifying Authenticated, Encrypted, and Protected Phone Calls, page 1-17
• Device Configuration Menu, page 4-17
• Security Restrictions, page 1-21
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
1-16
OL-23092-01
Loading...
+ 236 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.