Cisco Unified IP Phone 6921, 6941, and 6961 Administration Guide for Cisco Unified CM 8.0 (SCCP)
Configuring Settings on the Cisco Unified IP Phone
Downloads: This chapterpdf (PDF - 224.0KB) The complete bookPDF (PDF - 7.26MB) | Feedback

Configuring Settings on the Cisco Unified IP Phone

Table Of Contents

Configuring Settings on the Cisco Unified IP Phone

Configuration Menus on the Cisco Unified IP Phone

Displaying a Configuration Menu

Unlocking and Locking Options

Editing Values

Network Setup Menu

IPv4 Setup Menu Options

Security Configuration Menu

Trust List Menu

802.1X Authentication and Status


Configuring Settings on the Cisco Unified IP Phone


The Cisco Unified IP Phone includes many configurable network settings that you may need to modify before the phone is functional for your users. You can access these settings, and change some of them, through menus on the phone. Settings that are display-only on the phone are configured in Cisco Unified CM Administration.

This chapter includes the following topics:

Configuration Menus on the Cisco Unified IP Phone

Network Setup Menu

IPv4 Setup Menu Options

Security Configuration Menu

Configuration Menus on the Cisco Unified IP Phone

The Cisco Unified IP Phone includes the following configuration menus:

Network Setup—Provides options for viewing and making a variety of network settings. For more information, see the "Network Setup Menu" section.

IPv4 Configuration—A sub-menu of the Network Setup menu, the IPv4 menu items provide additional network options for viewing and setting. For more information, see the "IPv4 Setup Menu Options" section.

Before you can change option settings on the Network Setup menu, you must unlock options for editing. See the "Unlocking and Locking Options" section for instructions.

For information about the keys you can use to edit or change option settings, see the "Editing Values" section.

You can control whether a phone user has access to phone settings by using the Settings Access field in the Cisco Unified CM Administration Phone Configuration window.

Related Topics

Displaying a Configuration Menu

Unlocking and Locking Options

Editing Values

Network Setup Menu

IPv4 Setup Menu Options

Displaying a Configuration Menu

To display a configuration menu, perform the following steps.


Note You can control whether a phone has access to the Settings menu or to options on this menu by using the Settings Access field in the Cisco Unified CM Administration Phone Configuration window. The Settings Access field accepts these values:

Enabled—Allows access to the Settings menu.

Disabled—Prevents access to the Settings menu.

Restricted—Allows access to the User Preferences menu and allows volume changes to be saved. Prevents access to other options on the Settings menu.

If you cannot access an option on the Administrator Settings menu, check the Settings Access field.


Procedure


Step 1 Press the Applications button.

Step 2 Select Admin Settings.


Note For information about the Status menu, see Chapter 7 "Viewing Model Information, Status, and Statistics on the Cisco Unified IP Phone." For information about the Reset Settings menu, see Chapter 9 "Troubleshooting and Maintenance."


Step 3 Enter the password and then press the Select button. The Admin Settings password is configured in the Local Phone Unlock Password parameter in the Common Phone Profile Configuration on Cisco Unified CM Administration.


Note Users can access the Admin Settings without entering a password when the Local Phone Unlock Password parameter is not configured


Step 4 Perform one of these actions to display the desired menu:

Use the navigation bar to select the desired menu and then press the Select button.

Use the keypad on the phone to enter the number that corresponds to the menu.

Step 5 To display a submenu repeat Step 4.

Step 6 To exit a menu, press the Exit softkey.


Related Topics

Unlocking and Locking Options

Editing Values

Network Setup Menu

IPv4 Setup Menu Options

Unlocking and Locking Options

You can apply a password to the phone so that no changes can be made to the administrative options on the phone without the password being entered on the Admin Settings phone screen.

To apply a password to the phone, in Cisco Unified CM administration, navigate to the Common Phone Profile Configuration window (Device > Device Settings > Common Phone Profile). Enter a password in the Local Phone Unlock Password option. Apply the password to the common phone profile that the phone uses.

Related Topics

Displaying a Configuration Menu

Editing Values

Network Setup Menu

IPv4 Setup Menu Options

Editing Values

When you edit the value of an option setting, follow these guidelines:

Use the keys on the keypad to enter numbers and letters.

To enter letters by using the keypad, use a corresponding number key. Press the key one or more times to display a particular letter. For example, press the 2 key once for "a," twice quickly for "b," and three times quickly for "c." After you pause, the cursor automatically advances to allow you to enter the next letter.

To enter a period (for example, in an IP address), press * on the keypad.

Press the up arrow on the navigation bar to move the cursor to the left most character, and press the down arrow on the navigation bar to move the cursor to the right most character.

Press if you make a mistake. This softkey deletes the character to the left of the cursor.

Press the Cancel softkey before pressing the Save softkey to discard any changes that you have made.


Note The Cisco Unified IP Phone provides several methods you can use to reset or restore option settings, if necessary. For more information, see the "Resetting or Restoring the Cisco Unified IP Phone" section.


Related Topics

Displaying a Configuration Menu

Unlocking and Locking Options

Network Setup Menu

Network Setup Menu

Network Setup Menu

The Network Setup menu provides options for viewing and making a variety of network settings. Table 4-1 describes these options and, where applicable, explains how to change them.

For information about how to access the Network Setup menu, see the "Displaying a Configuration Menu" section.

For information about the keys you can use to edit options, see the "Editing Values" section.

Table 4-1 Network Setup Menu Options 

Option
Description
To Change

IPv4 Setup

In the IPv4 Setup submenu, you can do the following:

Enable or disable the phone to use the IP address that is assign by the DHCP server.

Manually set the IP Address, Subnet Mask, Default Routers, DNS Server, and Alternate TFTP servers.

For more information on the IPv4 address fields, refer to Table 4-2.

Scroll to IPv4 Setup and press Select.

Host Name

Unique host name that the DHCP server assigned to the phone.

Display only—Cannot configure.

Domain Name

Name of the Domain Name System (DNS) domain in which the phone resides.

1. Set the DHCP Enabled option to No.

2. Scroll to the Domain Name option, press the Edit softkey, and then enter a new domain name.

3. Press the Apply softkey, then press Save.

Operational VLAN ID

Auxiliary Virtual Local Area Network (VLAN) configured on a Cisco Catalyst switch in which the phone is a member.

If the phone has not received an auxiliary VLAN, this option indicates the Administrative VLAN.

If neither the auxiliary VLAN nor the Administrative VLAN are configured, this option defaults to a VLAN ID of 4095.

Display only—Cannot configure.

The phone obtains its Operational VLAN ID via Cisco Discovery Protocol (CDP) from the switch to which the phone is attached. To assign a VLAN ID manually, use the Admin VLAN ID option.

Admin. VLAN ID

Auxiliary VLAN in which the phone is a member.

Used only if the phone does not receive an auxiliary VLAN from the switch; otherwise it is ignored.

1. Scroll to the Admin. VLAN ID option, press the Edit softkey, and then enter a new Admin VLAN setting.

2. Press the Apply softkey, then press Save.

PC VLAN

Allows the phone to interoperate with 3rd party switches that do not support a voice VLAN. The Admin VLAN ID option must be set before you can change this option.

1. Make sure the Admin VLAN ID option is set.

2. Scroll to the PC VLAN option, press the Edit softkey, and then enter a new PC VLAN setting.

3. Press the Apply softkey, then press Save.

SW Port Configuration

Speed and duplex of the network port. Valid values:

Auto Negotiate

100 Half—100-BaseT/half duplex

100 Full—100-BaseT/full duplex

10 Half—10-BaseT/half duplex

10 Full—10-BaseT/full duplex

If the phone is connected to a switch, configure the port on the switch to the same speed/duplex as the phone, or configure both to auto-negotiate.

If you change the setting of this option, you must change the PC Port Configuration option to the same setting.

1. Unlock network setup options.

2. Scroll to the SW Port Configuration option and then press the Edit softkey.

3. Scroll to the setting that you want and then press the Select button.

PC Port Configuration

Speed and duplex of the access port. Valid values:

Auto Negotiate

100 Half—100-BaseT/half duplex

100 Full—100-BaseT/full duplex

10 Half—10-BaseT/half duplex

10 Full—10-BaseT/full duplex

If the phone is connected to a switch, configure the port on the switch to the same speed/duplex as the phone, or configure both to auto-negotiate.

If you change the setting of this option, you must change the SW Port Configuration option to the same setting.

1. Unlock network setup options.

2. Scroll to the PC Port Configuration option and then press the Edit softkey.

3. Scroll to the setting that you want and then press the Select button.

LLDP-MED: Switch Port

Enables and disables Link Layer Discovery Protocol Media Endpoint Discovery (LLDP-MED) on the switch port. Use this setting to force the phone to use a specific discovery protocol, which should match the protocol supported by the switch. Settings include:

Enabled—default

Disabled

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.


IPv4 Setup Menu Options

The IPv4 Setup menu is a submenu of the Network Setup menu. To reach the IPv4 Setup menu, select the IPv4 option on the Network Setup menu.

Table 4-2 describes the IPv4 Setup menu options.

For information about the keys you can use to edit options, see the "Editing Values" section.

Table 4-2 IPv4 Setup Menu Options 

Option
Description
To Change

DHCP

Indicates whether the phone has DHCP enabled or disabled.

When DHCP is enabled, the DHCP server assigns the phone an IP address. When DHCP is disabled, the administrator must manually assign an IP address to the phone.

Scroll to the DHCP option, press the Edit softkey, then press either the No softkey to disable DHCP, or press the Yes softkey to enable DHCP.

IP Address

Internet Protocol (IP) address of the phone.

If you assign an IP address with this option, you must also assign a subnet mask and default router. See the Subnet Mask and Default Router options in this table.

1. Set the DHCP option to No.

2. Scroll to the IP Address option, press the Edit softkey, and then enter a new IP Address.

3. Press the Apply softkey, then press Save.

Subnet Mask

Subnet mask used by the phone.

1. Set the DHCP Enabled option to No.

2. Scroll to the Subnet Mask option, press the Edit softkey, and then enter a new subnet mask.

3. Press the Apply softkey, then press Save.

Default Router 1

Default router used by the phone (Default Router 1).

1. Set the DHCP Enabled option to No.

2. Scroll to the appropriate Default Router option, press the Edit softkey, and then enter a new router IP address.

3. Press the Apply softkey, then press Save.

DNS Server 1

Primary Domain Name System (DNS) server (DNS Server 1) and optional backup DNS servers (DNS Server 2-5) used by the phone.

1. Set the DHCP Enabled option to No.

2. Scroll to the appropriate DNS Server option, press the Edit softkey, and then enter a new DNS server IP address.

3. Press the Apply softkey, then press Save.

Alternate TFTP

Indicates whether the phone is using an alternative TFTP server.

Scroll to the Alternate TFTP option and press the Yes softkey if the phone should use an alternative TFTP server; press the No softkey if the phone should not use an alternative TFTP server.

TFTP Server 1

Primary Trivial File Transfer Protocol (TFTP) server used by the phone. If you are not using DHCP in your network and you want to change this server, you must use the TFTP Server 1 option.

If you set the Alternate TFTP option to yes, you must enter a non-zero value for the TFTP Server 1 option.

1. If DHCP is enabled, set the Alternate TFTP option to Yes.

2. Scroll to the TFTP Server 1 option, press the Edit softkey, and then enter a new TFTP server IP address.

3. Press the Apply softkey, then press Save.

TFTP Server 2

Optional backup TFTP server that the phone uses if the primary TFTP server is unavailable.

1. Enter an IP address for the TFTP Server 1 option.

2. Scroll to the TFTP Server 2 option, press the Edit softkey, and then enter a new backup TFTP server IP address.

3. Press the Apply softkey, then press Save.

DHCP Address Released

Releases the IP address assigned by DHCP.

Scroll to the DHCP Address Released option and press the Edit softkey, then press the Yes softkey to release the DHCP Address.


Related Topics

Displaying a Configuration Menu

Unlocking and Locking Options

Editing Values

Security Configuration Menu

The Security Configuration menu provides information about various security settings. It provides access to the Trust List File screen and the 802.1x authentication.

Table 4-3 describes the options in this menu.

Table 4-3 Security Menu Settings 

Option
Description
To Change

Security Mode

Displays the security mode that is set for the phone.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

LSC

Indicates if a locally significant certificate (used for the security features) is installed on the phone (Installed) or is not installed on the phone (Not Installed).

For information about how to manage the LSC for your phone, refer to the "Using the Certificate Authority Proxy Function" chapter in Cisco Unified Communications Manager Security Guide.

CTL

Indicates if the CTL has been installed.

Display only—Cannot configure.

Trust List

The Trust List provides submenus for a list of trusted servers, CAPF servers, and Call Manager/TFTP Server.

For more information, see the "Trust List Menu" section.

802.1X Authentication

Displays the device authentication, EAP/MD5, and transaction status.

See the "802.1X Authentication and Status" section.


Trust List Menu

The Trust List menu displays information about all of the servers that the phone trusts and includes the options described in Table 4-4.

To exit the Trust List menu, press the back softkey.

Table 4-4 Trust List Menu Settings 

Option
Description
To Change

CTL Signature

Displays the MD5 hash of the CTL file.

For more information about this file, go to Configuring the Cisco CTL Client in Cisco Unified Communications Manager Security Guide.

CAPF Server

Common Name (from the Cisco Unified CM Certificate) of the CAPF server used by the phone. Displays a Certified icon if the server is an authenticated server

For more information about this file, go to Configuring the Cisco CTL Client in Cisco Unified Communications Manager Security Guide.

Unified CM/TFTP Server

Common Name (from the Cisco Unified CM Certificate) of a Cisco Unified CM and the TFTP server used by the phone. Displays a Certified icon if the server is an authenticated server

For more information about this file, go to Configuring the Cisco CTL Client in the Cisco Unified Communications Manager Security Guide.

SRST Router

Common Name (from the Cisco Unified CM Certificate) of the trusted SRST router that is available to the phone, if such a device has been configured in Cisco Unified CM Administration. Displays a Certified icon if the server is an authenticated server

For more information about this file, go to Configuring the Cisco CTL Client in the Cisco Unified Communications Manager Security Guide.


802.1X Authentication and Status

The 802.1X Authentication and 802.1X Authentication Status menus allow you to enable 802.1X authentication and view transaction status. These options are described in Table 4-5.

To exit these menus, press the Exit softkey.

Table 4-5 802.1X Authentication Settings

Option
Description
To Change

Device Authentication

Determines whether 802.1X authentication is enabled:

Enabled—Phone uses 802.1X authentication to request network access.

Disabled—Default setting in which the phone uses CDP to acquire VLAN and network access.

1. Choose Applications > Admin Settings > Security Config > 802.1X Authentication > Device Authentication.

2. Press Edit softkey.

3. Set the Device Authentication option to Enabled or Disabled.

4. Press the Save softkey.

EAP-MD5

Device ID—A derivative of the phone's model number and unique MAC address displayed in this format: CP-<model>-SEP-<MAC>

1. Choose Applications > Admin Settings > Security Config > 802.1X Authentication > EAP/MD5 > Device ID.

2. Press the Edit softkey.

3. Set the Device ID.

4. Press the Save softkey.

Shared Secret—Choose a password to use on the phone and on the authentication server. The password must be between 6 and 32 characters, consisting of any combination of numbers or letters.

Note If you disable 802.1X authentication or perform a factory reset of the phone, the shared secret is deleted.

1. Choose Applications > Admin Settings > Security Config > 802.1X Authentication > EAP-MD5 > Shared Secret.

2. Press the Edit softkey.

3. Enter the shared secret.

4. Press the Save softkey.

See the "Troubleshooting Cisco Unified IP Phone Security" section for assistance in recovering from a deleted shared secret.

Realm—Indicates the user network domain, always set as Network.

1. Choose Applications > Admin Settings > Security Config > 802.1X Authentication > EAP-MD5 > Realm.

2. Press the Edit softkey.

3. Enter the Network.

4. Press the Save softkey.

Transaction Status

Displays the transaction status of your 802.1X Authentication.

To view the transaction status of your 802.1X Authentication, choose Applications > Admin Settings > Security Configuration > 802.1X Authentication Status.