Cisco Unified IP Phone 7931G Administration Guide for Cisco Unified CM 8.5 (SCCP and SIP)
Configuring Settings on the Cisco Unified IP Phone
Downloads: This chapterpdf (PDF - 456.0KB) The complete bookPDF (PDF - 4.87MB) | Feedback

Configuring Settings on the Cisco Unified IP Phone

Table Of Contents

Configuring Settings on the Cisco Unified IP Phone

Configuration Menus on the Cisco Unified IP Phone 7931G

Displaying a Configuration Menu

Unlocking and Locking Options

Editing Values

Overview of Options Configurable from a Phone

Network Configuration Menu

Understanding DHCPv6 and Autoconfiguation

Device Configuration Menu

CallManager Configuration Menu

SIP Configuration Menu (SIP Phones Only)

SIP General Configuration Menu

Line Settings Menu (SIP Phones Only)

Call Preferences Menu (SIP Phones Only)

HTTP Configuration Menu

Locale Configuration Menu

NTP Configuration Menu (SIP Phones Only)

UI Configuration Menu

Media Configuration Menu

Power Save Configuration Menu

Ethernet Configuration Menu

Security Configuration Menu

QoS Configuration Menu

Network Configuration Menu

Security Configuration Menu

CTL File Submenu

ITL File Submenu

Trust List Menu

802.1X Authentication and Status


Configuring Settings on the Cisco Unified IP Phone


The Cisco Unified IP Phone includes many configurable network and device settings that you may need to modify before the phone is functional for your users. You can access these settings, and change many of them, through menus on the phone.

This chapter includes the following topics:

Configuration Menus on the Cisco Unified IP Phone 7931G

Overview of Options Configurable from a Phone

Network Configuration Menu

Device Configuration Menu

Security Configuration Menu

Configuration Menus on the Cisco Unified IP Phone 7931G

The Cisco Unified IP Phone includes the following configuration menus:

Network Configuration—Provides options for viewing and making a variety of network settings. For more information, see Network Configuration Menu.

Device Configuration—Provides access to submenus from which you can view a variety of non network-related settings. For more information, see Device Configuration Menu.

Security Configuration—Provides options for displaying and modifying security settings. For more information, see Security Configuration Menu.

Before you can change option settings on the Network Configuration menu, you must unlock options for editing. See Unlocking and Locking Options for instructions.

For information about the keys you can use to edit or change option settings, see Editing Values.

You can control whether a phone user has access to phone settings by using the Settings Access field in the Cisco Unified CM Administration Phone Configuration.

Related Topics

Displaying a Configuration Menu

Unlocking and Locking Options

Editing Values

Overview of Options Configurable from a Phone

Network Configuration Menu

Device Configuration Menu

Security Configuration Menu

Displaying a Configuration Menu

To display a configuration menu, perform the following steps.

You can control whether a phone has access to the Settings menu or to options on this menu by using the Settings Access field in the Cisco Unified CM Administration Phone Configuration window. The Settings Access field accepts these values:

Enabled—Allows access to the Settings menu.

Disabled—Prevents access to the Settings menu.

Restricted—Allows access to the User Preferences menu and allows volume changes to be saved. Prevents access to other options on the Settings menu.

If you cannot access an option on the Settings menu, check the Settings Access field.

Procedure


Step 1 Take either of these actions:

If the phone is registered with Cisco Unified CM, press the Application Menu button, then choose Settings from the list of applications.

By default, this button is line button 24 (the top left line button).

If the phone is not registered with Cisco Unified CM, press the Settings softkey.

This softkey appears only when the phone is not registered.

Step 2 Perform one of these actions to display the menu that you want:

Use the Navigation button to select the desired menu and then press the Select softkey.

Use the keypad on the phone to enter the number that corresponds to the menu.

Step 3 To display a submenu, repeat Step 2.

Step 4 To exit a menu, press the Exit softkey.

If you accessed the menus through the Application Menu button, you can press that button again to exit the Application menu.


Related Topics

Unlocking and Locking Options

Editing Values

Overview of Options Configurable from a Phone

Network Configuration Menu

Device Configuration Menu

Security Configuration Menu

Unlocking and Locking Options

Configuration options that can be changed from a phone are locked by default to prevent users from making changes that could affect the operation of a phone. You must unlock these options before you can change them.

When options are inaccessible for modification, a locked padlock icon appears on the configuration menus. When options are unlocked and accessible for modification, an unlocked padlock icon appears on these menus.

To unlock or lock options, press **#. This action either locks or unlocks the options, depending on the previous state.


Note If a Settings Menu password has been provisioned, SIP phones present an "Enter password" prompt after you enter **#.


After you have made your changes, make sure to lock the options.


Caution Do not press **# to unlock options and then immediately press **# again to lock options. The phone will interpret this sequence as **#**, which resets the phone. To lock options after unlocking them, wait at least 10 seconds before you press **# again.

Related Topics

Displaying a Configuration Menu

Editing Values

Overview of Options Configurable from a Phone

Network Configuration Menu

Device Configuration Menu

Editing Values

When you edit the value of an option setting, follow these guidelines:

Use the keys on the keypad to enter numbers and letters.

To enter letters using the keypad, use a corresponding number key. Press the key one or more times to display a particular letter. For example, press the 2 key once for "a," twice quickly for "b," and three times quickly for "c." After you pause, the cursor automatically advances to allow you to enter the next letter.

To enter a period (for example, in an IP address under IPv4 Configuration), press the . (period) softkey or press * on the keypad.

To enter a colon (for example, in an IP address under IPv6 Configurations), press the : (colon) softkey or press * on the keypad.

Press the << softkey if you make a mistake. This softkey deletes the character to the left of the cursor.

Press the Cancel softkey before pressing the Save softkey to discard any changes that you have made.


Note The Cisco Unified IP Phone provides several methods for to reset or restore option settings, if necessary. For more information, see Resetting or Restoring the Cisco Unified IP Phone.


Related Topics

Displaying a Configuration Menu

Unlocking and Locking Options

Overview of Options Configurable from a Phone

Network Configuration Menu

Device Configuration Menu

Security Configuration Menu

Overview of Options Configurable from a Phone

The settings that you can change on a phone fall into several categories, as shown in Table 3-1. For a detailed explanation of each setting and instructions for changing them, see Network Configuration Menu.


Note Several options on the Network Configuration and Device Configuration menus are for display only or can be configured from Cisco Unified CM. These options are also described in Network Configuration Menu and Device Configuration Menu.


Table 3-1 Settings Configurable from the Phone 

Category
Description
Network Configuration Menu Option

General Network Settings

VLAN settings

Admin. VLAN ID allows you to change the administrative VLAN used by the phone. PC VLAN allows the phone to interoperate with third-party switches that do not support a voice VLAN.

Admin. VLAN ID

PC VLAN

Port settings

Allow you to set the speed and duplex of the network and access ports.

SW Port Configuration

PC Port Configuration

IPv4 Network Settings

DHCP settings

DHCP automatically assigns an IP address to devices when you connect them to the network. It is enabled on Cisco Unified IP Phones by default.

DHCP

DHCP Address Released

IP settings

If you do not use DHCP in your network, you can configure the IP settings manually.

Domain Name

IP Address

Subnet Mask

Default Router 1-5

DNS Server 1-5

TFTP settings for TFTP IPv4 servers

If you do not use DHCP to direct the phone to a TFTP server, you must assign a TFTP server manually. You can also assign an alternative TFTP server to use instead of the one assigned by DHCP.

TFTP Server 1

Alternate TFTP

TFTP Server 2

IPv6 Network Settings

DHCP settings

Dynamic Host Configuration Protocol (DHCP) automatically assigns an IP address to devices when you connect them to the network. Cisco Unified IP Phones enable DHCP by default.

DHCPv6

DHCPv6 Address Released

IP settings

If you do not use DHCP in your network, you can configure the IP settings manually.

Domain Name

IPv6 Address

IPv6 Prefix Length

IPv6 Default Router 1-2

IPv6 DNS Server 1-2

TFTP settings for TFTP IPv6 servers (SCCP phones only)

If you do not use DHCP to direct the phone to a TFTP server, you must assign a TFTP server manually. You can also assign an alternative TFTP server to use instead of the one assigned by DHCP.

IPv6 TFTP Server 1

IPv6 Alternate TFTP

IPv6 TFTP Server 2


Related Topics

Displaying a Configuration Menu

Unlocking and Locking Options

Editing Values

Network Configuration Menu

Device Configuration Menu

Network Configuration Menu

The Network Configuration menu provides options for viewing and making a variety of network settings. Tables 3-2, 3-3 and 3-4 describe these options and, where applicable, explain how to change them.

For information about how to access the Network Configuration menu, see Displaying a Configuration Menu.

Before you can change an option on this menu, you must unlock options as described in Unlocking and Locking Options. The Edit, Yes, or No softkeys for changing network configuration options appear only if options are unlocked.

For information about the keys you can use to edit options, see Editing Values.


Note The phone also has a Network Configuration menu that you access from the Device Configuration menu. For information about the options on that menu, see Network Configuration Menu.


Table 3-2 Network Configuration Menu Options 

Option
Description
To Change

IPv4 Configuration

Internet Protocol v4 address menu. In the IPv4 Configuration menu, you can do the following:

Enable or disable the phone to use the IPv4 address that is assigned by the IPv4 DHCP server.

Manually set the IPv4 Address, Subnet Mask, Default Routers, DNSv4 Server, and Alternate TFTP servers for IPv4.

For more information on the IPv4 address fields, see the specific fields within this table.

1. Unlock network configuration options.

2. Scroll to IPv4 Configuration and press the Select softkey.

IPv6 Configuration

Internet Protocol v6 address menu. In the IPv6 Configuration menu, you can do the following:

Enable or disable the phone to use the IPv6 address that is assign by the DHCPv6 server or to use the IPv6 address that it acquires through Stateless Address Autoconfiguration (SLAAC).

Manually set the IPv6 Address, Subnet Prefix Length, Default Routers, DNSv6 Server, and IPv6 TFTP servers.

For more information on the IPv6 address fields, see Table 3-4.

For more information on SLAAC, see Deploying IPv6 in Unified Communications Networks with Cisco Unified CM 7.1(x).

1. Unlock network configuration options.

2. Scroll to IPv6 Configuration and press the Select softkey.

MAC Address

Unique Media Access Control (MAC) address of the phone.

Display only—Cannot configure.

Host Name

Unique host name that the DHCP server assigned to the phone.

Display only—Cannot configure.

Domain Name

Name of the DNS domain in which the phone resides.

Note If the phone receives different domain names from the DHCPv4 and DHCPv6 servers, the domain name from the DHCPv6 will take precedence.

1. Unlock network configuration options.

2. Disable DHCP.

If the IP Addressing mode is configured for IPv4 only, set the DHCP option to No.

If the IP Addressing mode is configured for IPv6 only, set the DHCPv6 option to No.

If the IP Addressing mode is configured for both IPv4 and IPv6, set both DHCP option and DHCPv6 to No.

3. Scroll to the Domain Name option, press the Edit softkey, and then enter a new domain name.

4. Press the Validate softkey and then press the Save softkey.

Operational VLAN ID

Auxiliary Virtual Local Area Network (VLAN) configured on a Cisco Catalyst switch in which the phone is a member.

If the phone has not received an auxiliary VLAN, this option indicates the Administrative VLAN.

If neither the auxiliary VLAN nor the Administrative VLAN are configured, this option is blank.

The phone obtains its Operational VLAN ID via Cisco Discovery Protocol (CDP) from the switch to which the phone is attached. To assign a VLAN ID manually, use the Admin VLAN ID option.

Admin. VLAN ID

Auxiliary VLAN in which the phone is a member.

Used only if the phone does not receive an auxiliary VLAN from the switch; otherwise it is ignored.

1. Unlock network configuration options.

2. Scroll to the Admin. VLAN ID option, press the Edit softkey, and then enter a new Admin VLAN setting.

3. Press the Validate softkey and then press the Save softkey.

SW Port Configuration

Speed and duplex of the network port (labeled with "SW" on the Cisco Unified IP Phone). Valid values:

Auto Negotiate

10 Half—10-BaseT/half duplex

10 Full—10-BaseT/full duplex

100 Half—100-BaseT/half duplex

100 Full—100-BaseT/full duplex

1000 Full—1000-BaseT/full duplex

If the phone is connected to a switch, configure the port on the switch to the same speed/duplex as the phone, or configure both to auto-negotiate.

If you change the setting of this option, you must change the PC Port Configuration option to the same setting.

1. Unlock network configuration options.

2. Scroll to the SW Port Configuration option and then press the Edit softkey.

3. Scroll to the setting that you want and then press the Select softkey.

4. Press the Save softkey.

PC Port Configuration

Speed and duplex of the access port (labeled with "PC" on the Cisco Unified IP Phone). Valid values:

Auto Negotiate

10 Half—10-BaseT/half duplex

10 Full—10-BaseT/full duplex

100 Half—100-BaseT/half duplex

100 Full—100-BaseT/full duplex

1000 Full—1000-BaseT/full duplex

If the phone is connected to a switch, configure the port on the switch to the same speed/duplex as the phone, or configure both to auto-negotiate.

If you change the setting of this option, you must change the SW Port Configuration option to the same setting.

1. Unlock network configuration options.

2. Scroll to the PC Port Configuration option and then press the Edit softkey.

3. Scroll to the setting that you want and then press the Select softkey.

4. Press the Save softkey.

To configure the setting on multiple phones simultaneously, enable the Remote Port Configuration in the Enterprise Phone Configuration (System > Enterprise Phone Configuration).

Note If the ports are configured for Remote Port Configuration in Unified CM, the data cannot be changed on the phone.

PC VLAN

Allows the phone to interoperate with 3rd party switches that do not support a voice VLAN. The Admin VLAN ID option must be set before you can change this option.

1. Unlock network configuration options.

2. Make sure the Admin VLAN ID option is set.

3. Scroll to the PC VLAN option, press the Edit softkey, and then enter a new PC VLAN setting.

4. Press the Validate softkey and then press the Save softkey.


Table 3-3 IPv4 Configuration Menu Options 

Option
Description
To Change

DHCP

Indicates whether the phone has DHCP enabled or disabled.

When DHCP is enabled, the DHCP server assigns the phone anIPv4 address. When DHCP is disabled, the administrator must manually assign an IPv4 address to the phone.

1. Unlock network configuration options.

2. Scroll to the DHCP option and press the No softkey to disable DHCP, or press the Yes softkey to enable DHCP.

3. Press the Save softkey.

IP Address

Internet Protocol version 4 (IPv4) address of the phone.

If you assign an IPv4 address with this option, you must also assign a subnet mask and default router. See the Subnet Mask and Default Router options in this table.

1. Unlock network configuration options.

2. Set the DHCP option to No.

3. Scroll to the IP Address option, press the Edit softkey, and then enter a new IP Address.

4. Press the Validate softkey and then press the Save softkey.

Subnet Mask

Subnet mask used by the phone.

1. Unlock network configuration options.

2. Set the DHCP option to No.

3. Scroll to the Subnet Mask option, press the Edit softkey, and then enter a new subnet mask.

4. Press the Validate softkey and then press the Save softkey.

Default Router 1

Default Router 2

Default Router 3

Default Router 4

Default Router 5

Default router (Default Router 1) and optional backup routers (Default Router 2-5) used by the phone.

1. Unlock network configuration options.

2. Set the DHCP option to No.

3. Scroll to the appropriate Default Router option, press the Edit softkey, and then enter a new router IP address.

4. Press the Validate softkey.

5. Repeat Steps 3 and 4 as needed to assign backup routers.

6. Press the Save softkey.

DNS Server 1

DNS Server 2

DNS Server 3

DNS Server 4

DNS Server 5

Primary DNS server (DNS Server 1) and optional backup DNS servers (DNS Server 2-5) used by the phone.

1. Unlock network configuration options.

2. Set the DHCP option to No.

3. Scroll to the appropriate DNS Server option, press the Edit softkey, and then enter a new DNS server IP address.

4. Press the Validate softkey.

5. Repeat Steps 3 and 4 as needed to assign backup DNS servers.

6. Press the Save softkey.

DHCP Address Released

Releases theIPv4 IP address assigned by DHCP.

1. Unlock network configuration options.

2. Scroll to the DHCP Address Released option and press the Yes softkey to release the IP address assigned by DHCP, or press the No softkey if you do not want to release this IP address.

3. Press the Save softkey.

DHCP Server

IP address of the DHCP server from which the phone obtains its IPv4 address.

Display only—Cannot configure.

Alternate TFTP

Indicates whether the phone is using an alternative TFTP server.

1. Unlock network configuration options.

2. Scroll to the Alternate TFTP option and press the Yes softkey if the phone should use an alternative TFTP server.

3. Press the Save softkey.

TFTP Server 1

Primary TFTP server used by the phone. If you are not using DHCP in your network and you want to change this server, you must use the TFTP Server 1 option.

If you set the Alternate TFTP option to yes, you must enter a non-zero value for the TFTP Server 1 option.

If neither the primary TFTP server nor the backup TFTP server is listed in the CTL or ITL file on the phone, you must unlock the file before you can save changes to the TFTP Server 1 option. In this case, the phone will delete the file when you save changes to the TFTP Server 1 option. A new CTL or ITL file will be downloaded from the new TFTP Server 1 address.

When the phone looks for its TFTP server, it gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for its TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for its TFTP server in the following order:

1. Any manually assigned IPv6 TFTP Servers

2. Any manually assigned IPv4 TFTP Servers

3. DHCPv6 assigned TFTP Servers

4. DHCP assigned TFTP Servers

For information about the CTL file, see Cisco Unified Communications Manager Security Guide. For information about unlocking the CTL file, see Security Configuration Menu.

1. Unlock the CTL or ITL file if necessary (for example, if you are changing the administrative domain of the phone). If the CTL and ITL files both exist, unlock either file.

2. If DHCP is enabled, set the Alternate TFTP option to Yes.

3. Scroll to the TFTP Server 1 option, press the Edit softkey, and then enter a new TFTP server IP address.

4. Press the Validate softkey, and then press the Save softkey.

Note If you forgot to unlock the CTL file, you can change the TFTP Server 1 address in the CTL file, then erase the CTL file by pressing the Erase softkey from the Security Configuration menu. A new CTL file will be downloaded from the new TFTP Server 1 address.

TFTP Server 2

Optional backup TFTP server that the phone uses if the primary TFTP server is unavailable.

If neither the primary TFTP server nor the backup TFTP server is listed in the CTL or ITL file on the phone, you must unlock the file before you can save changes to the TFTP Server 2 option. In this case, the phone will delete the file when you save changes to the TFTP Server 2 option. A new CTL or ITL file will be downloaded from the new TFTP Server 2 address.

When the phone looks for its TFTP server, it gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for its TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for its TFTP server in the following order:

1. Manually assigned IPv6 TFTP Servers

2. Manually assigned IPv4 TFTP Servers

3. DHCPv6 assigned TFTP Servers

4. DHCP assigned TFTP Servers

For information about CTL and ITL files, see the Cisco Unified Communications Manager Security Guide. For information about unlocking CTL and ITL files, see to Security Configuration Menu.

1. Unlock the CTL or ITL file if necessary (for example, if you are changing the administrative domain of the phone). If the CTL and ITL files both exist, unlock either file.

2. Unlock network configuration options.

3. Enter an IP address for the TFTP Server 1 option.

4. Scroll to the TFTP Server 2 option, press the Edit softkey, and then enter a new backup TFTP server IP address.

5. Press the Validate softkey, and then press the Save softkey.

Note If you forgot to unlock the CTL file, you can change the TFTP Server 2 address in the CTL file, then erase the CTL file by pressing the Erase softkey from the Security Configuration menu. A new CTL file will be downloaded from the new TFTP Server 2 address.

BOOTP Server

Indicates whether the phone obtains its configuration from a Bootstrap Protocol (BootP) server instead of from a DHCP server.

Display only—Cannot configure.


Table 3-4 IPv6 Configuration Menu Options  

Option
Description
To Change

DHCPv6

Indicates whether the phone has DHCP enabled or disabled.

When DHCPv6 is enabled, the DHCPv6 server assigns the phone an IPv6 address. When DHCP v6 is disabled, the administrator must manually assign an IPv6 address to the phone.

The DHCPv6 setting along with the Auto IP Configuration setting determine how the IP Phone obtains its network settings. For more information on how these two settings affect the network settings on the phone, see Table 3-5.

1. Unlock network configuration options.

2. Scroll to the DHCPv6 option and press the No softkey to disable DHCP, or press the Yes softkey to enable DHCP.

3. Press the Save softkey.

IPv6 Address

Internet Protocol version 6 (IPv6) address of the phone. The IPv6 address is a 128 bit address.

If you assign an IP address with this option, you must also assign the IPv6 prefix length and default router. See the IPv6 Subnet Prefix option in this table.

1. Unlock network configuration options.

2. Set the DHCPv6 option to No.

3. Scroll to the IP Address option, press the Edit softkey, and then enter a new IP Address.

4. Press the Validate softkey and then press the Save softkey.

IPv6 Prefix Length

Subnet prefix length that is used by the phone. The subnet prefix length is a decimal value from 1-128, that specifies the portion of the IPv6 address that comprises the subnet.

1. Unlock network configuration options.

2. Set the DHCPv6 option to No.

3. Scroll to the IPv6 Prefix Length option, press the Edit softkey, and then enter a new subnet mask.

4. Press the Validate softkey and then press the Save softkey.

IPv6 Default Router 1

Default router used by the phone (Default Router 1).

Note The phone obtains information on the default router from IPv6 Router Advertisements.

1. Unlock network configuration options.

2. Set the DHCPv6 option to No.

3. Scroll to the appropriate Default Router option, press the Edit softkey, and then enter a new router IP address.

4. Press the Validate softkey.

5. Repeat Steps 3 and 4 as needed to assign the backup router.

6. Press the Save softkey.

IPv6 DNS Server 1

IPv6 DNS Server 2

Primary DNS server (DNS Server 1) and optional backup DNS servers (DNS Server 2) used by the phone.

If your configuration includes both DNSv6 and DNSv4 servers, the phone will look for its DNS server in the following order:

1. IPv6 DNS Server 1

2. IPv6 DNS Server 2

3. DNS Server 1-5 for IPv4 (respectively)

1. Unlock network configuration options.

2. Set the DHCPv6 option to No.

3. Scroll to the appropriate DNS Server option, press the Edit softkey, and then enter a new DNS server IP address.

4. Press the Validate softkey.

5. Repeat Steps 3 and 4 as needed to assign the backup DNS server.

6. Press the Save softkey.

DHCPv6 Address Released

Releases the IPv6 address that the phone has acquired from the DHCPv6 server or by stateless address autoconfiguration.

Note This field can be edited only when the DHCPv6 option is enabled.

1. Unlock network configuration options.

2. Scroll to the DHCPv6 Address Released option and press the Yes softkey to release the IP address assigned by DHCP, or press the No softkey if you do not want to release this IP address.

3. Press the Save softkey.

IPv6 Alternate TFTP

Indicates if the phone is using the IPv6 Alternate TFTP server.

1. Unlock network configuration options.

2. Scroll to the IPv6 Alternate TFTP option and press the Yes softkey if the phone should use an alternative TFTP server.

3. Press the Save softkey.

IPv6 TFTP Server 1 (SCCP phones only)

Primary IPv6 (TFTP server used by the phone. If you are not using DHCPv6 in your network and you want to change this server, you must use the IPv6 TFTP Server 1 option.

If you set the IPv6 Alternate TFTP option to yes or you disable DHCPv6, you must enter a non-zero value for the IPv6 TFTP Server 1 option.

If you make changes to the Alternate TFTP or IPv6 TFTP servers, you must first unlock the CTL or ITL file on the phone.

When the phone looks for its TFTP server, it gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for its TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for its TFTP server in the following order:

1. Manually assigned IPv6 TFTP Servers

2. Manually assigned IPv4 TFTP Servers

3. DHCPv6 assigned TFTP Servers

4. DHCP assigned TFTP Servers

Note For information about CTL and ITL files, see the Cisco Unified Communications Manager Security Guide. For information about unlocking CTL and ITL files, see Security Configuration Menu.

1. Unlock the CTL or ITL file, if necessary. If the CTL and ITL files both exist, unlock either file.

2. If DHCPv6 is enabled, set the IPv6 Alternate TFTP option to Yes.

3. Scroll to the IPv6 TFTP Server 1 option, press the Edit softkey, and then enter a new TFTP server IP address.

4. Press the Validate softkey, and then press the Save softkey.

IPv6 TFTP Server 2 (for SCCP phones only)

Optional backup IPv6 TFTP server that the phone uses if the primary IPv6 TFTP server is unavailable.

If you make changes to the Alternate TFTP or IPv6 TFTP servers, you must first unlock the CTL or ITL file on the phone.

When the phone looks for its TFTP server, it gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for its TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for its TFTP server in the following order:

1. Manually assigned IPv6 TFTP Servers

2. Manually assigned IPv4 TFTP Servers

3. DHCPv6 assigned TFTP Servers

4. DHCP assigned TFTP Servers

For information about CTL and ITL files, see the Cisco Unified Communications Manager Security Guide. For information about unlocking CTL and ITL files, see to Security Configuration Menu.

1. Unlock the CTL or ITL file, if necessary. If the CTL and ITL files both exist, unlock either file.

2. Unlock network configuration options.

3. Enter an IP address for the IPv6 TFTP Server 1 option.

4. Scroll to the IPv6 TFTP Server 2 option, press the Edit softkey, and then enter a new backup TFTP server IP address.

5. Press the Validate softkey, and then press the Save softkey.


Understanding DHCPv6 and Autoconfiguation

You can choose to configure the IP address and other network settings, such as the TFTP server, DNS server, domain, name, etc. on an IP phone manually or by using a router and/or a DHCP server to automatically assign the IP address and other network information. For more information on how the Allow Auto Configuration for Phones and DHCPv6 settings determine where the IP Phone acquires its IPv6 address and other network settings, see Table 3-5.

Table 3-5 Determining Where a Phone Acquires Its Network Settings  

DHCPv6
Auto IP
Configuration
How the Phone Acquires its IP address and Network Settings

Disabled

Disabled

You must configure an IP address and the other network settings manually.

Note When DHCPv6 is disabled, the Auto IP Configuration setting is ignored.

Disabled

Enabled

You must configure an IP address and the other network settings manually.

Note When DHCPv6 is disabled, the Auto IP Configuration setting is ignored.

Enabled

Disabled

The DHCP server assigns the IP address and the other network settings to the phone.

Enabled

Enabled

When the M-bit is set on the router, the O-bit is ignored, The phone can set its IPv6 address based on an IPv6 address that it received from a DHCPv6 server or the phone can acquire its IPv6 address through stateless address autoconfiguration.

When the M-bit is not set, you should set the O-bit on the router. The phone will then acquire its IPv6 address through stateless address autoconfiguration. It will not request an IPv6 address from the DHCPv6 server, but it will request other network configuration information.


Related Topics

Displaying a Configuration Menu

Unlocking and Locking Options

Editing Values

Overview of Options Configurable from a Phone

Device Configuration Menu

Device Configuration Menu

The Device Configuration menu provides access to submenus from which you can view a variety of settings that are specified in the configuration file for a phone. (The phone downloads the configuration file from the TFTP server.) These submenus are:

CallManager Configuration Menu

SIP Configuration Menu (SIP Phones Only)

Call Preferences Menu (SIP Phones Only)

HTTP Configuration Menu

Locale Configuration Menu

UI Configuration Menu

Media Configuration Menu

Power Save Configuration Menu

Ethernet Configuration Menu

Security Configuration Menu

QoS Configuration Menu

Network Configuration Menu

For instructions about how to access the Device Configuration menu and its submenus, see Displaying a Configuration Menu.

CallManager Configuration Menu

The Unified CM Configuration menu contains these options:

Unified CM1

Unified CM2

Unified CM3

Unified CM4

Unified CM5

These options show the Cisco Unified CM servers that are available for processing calls from the phone, in prioritized order. To change these options, use Cisco Unified CM Administration.

For an available Cisco Unified CM server, an option on the CallManager Configuration menu shows the Cisco Unified CM server IP address or name and one of the states shown in Table 3-6.

Table 3-6 Cisco Unified CM Server States 

State
Description

Active

Cisco Unified CM server from which the phone is currently receiving call-processing services

Standby

Cisco Unified CM server to which the phone switches if the current server becomes unavailable

Blank

No current connection to this Cisco Unified CM server


An option may also display one of more of the designations or icons shown in Table 3-7.

Table 3-7 Cisco Unified CM Server Designations 

Designation
Description

SRST

Indicates a Survivable Remote Site Telephony router capable of providing Cisco Unified CM functionality with a limited feature set. This router assumes control of call processing if all other Cisco Unified CM servers become unreachable. The SRST Cisco Unified CM always appears last in the list of servers, even if it is active.

For more information, see the Cisco Unified Communications Manager Administration Guide.

TFTP

Indicates that the phone was unable to register with a Cisco Unified CM listed in its configuration file and that it registered with the TFTP server instead.

(Authentication icon)

Appears as a shield and indicates that the call is from a trusted device and that the connection to the Cisco Unified CM is authenticated. For more information about authentication, see the Cisco Unified Communications Manager Security Guide.

(Encryption icon)

Appears as a padlock and indicates that the call is from a trusted device and that the connection to the Cisco Unified CM is authenticated and encrypted.

The Encryption icon is also displayed when a Cisco Unified IP phone is configured as protected. Protected calls are not authenticated.

For more information, see the Cisco Unified Communications Manager Security Guide.


SIP Configuration Menu (SIP Phones Only)

The SIP Configuration menu is available on SIP phones. This menu contains these sub-menus:

SIP General Configuration Menu

Line Settings Menu (SIP Phones Only)

SIP General Configuration Menu

The SIP General Configuration menu displays information about the configurable SIP parameters on a SIP phone. Table 3-8 describes the options in this menu.

Table 3-8 SIP General Configuration Menu Options 

Option
Description
To Change

Preferred CODEC

Displays the CODEC to use when a call is initiated. This value will always be set to none.

Display only—cannot configure.

Out of Band DTMF

Displays the configuration of the out-of-band signaling (for tone detection on the IP side of a gateway). The Cisco Unified IP phone (SIP) supports out-of-band signaling by using the AVT tone method. This value will always be set to avt.

Display only—cannot configure.

Register with Proxy

This value will always be set to Yes.

Display only—cannot configure.

Register Expires

Displays the amount of time, in seconds, after which a registration request expires.

From Cisco Unified CM Administration, choose Device > Device Settings > SIP Profile.

Phone Label

Displays the text that is displayed on the top right status line of the LCD on the phone. This text is for end-user display only and has no effect on caller identification or messaging. This value will always be set to null.

Display only—cannot configure.

Enable VAD

This value is set to No by default.

From Cisco Unified CM Administration, choose Device > Device Settings > SIP Profile.

Start Media Port

Displays the start Real-Time Transport Protocol (RTP) range for media.

From Cisco Unified CM Administration, choose Device > Device Settings > SIP Profile.

End Media Port

Displays the end Real-Time Transport Protocol (RTP) range for media.

From Cisco Unified CM Administration, choose Device > Device Settings > SIP Profile.

NAT Enabled

Displays if Network Address Translation (NAT) is enabled. This value will always be set to false.

Display only—cannot configure.

NAT Address

Displays the WAN IP address of the NAT or firewall server. This value will always be set to null.

Display only—cannot configure.

Call Statistics

This value is set to No by default.

From Cisco Unified CM Administration, choose Device > Device Settings > SIP Profile.


Related Topics

Displaying a Configuration Menu

Device Configuration Menu

Line Settings Menu (SIP Phones Only)

The Line Settings menu displays information that relates to the configurable parameters for each of the lines on a SIP phone. Table 3-9 describes the options in this menu.

Table 3-9 Line Settings Menu Options 

Option
Description
To Change

Name

Displays the name the line uses when registering.

Use Cisco Unified CM Administration to modify.

Short Name

Displays the short name configured for the line.

Use Cisco Unified CM Administration to modify.

Longer Authentication Name

Displays the name used by the phone for authentication if a registration is challenged by the call control server during initialization.

The length of the SIP digest authentication name has been increased to 128 characters for Cisco Unified 7900 Series SIP phones. The authentication name is used to verify that the phone is allowed to send SIP messages (REGISTER, INVITE, and SUBSCRIBE) to the Cisco Unified CM.

Use Cisco Unified CM Administration to modify.

Display Name

Displays the identification the phone uses for display for caller identification purposes.

Use Cisco Unified CM Administration to modify.

Proxy Address

The value is left blank because it is not applicable to SIP phones that are using Cisco Unified Communications Manager.

Display only—Cannot configure.

Proxy Port

Displays the port number of the proxy server that will be used by the phone. The value is left blank because it is not applicable to SIP phones that are using Cisco Unified CM.

Display only—Cannot configure.

Shared Line

Displays if the line is part of a shared line (Yes) or not (No).

Display only—Cannot configure.


Related Topics

Displaying a Configuration Menu

Device Configuration Menu

Call Preferences Menu (SIP Phones Only)

The Call Preferences menu displays settings that relate to the settings for the call preferences on a SIP phone. Table 3-10 describes the options in this menu.

Table 3-10 Call Preferences Menu Options 

Option
Description
To Change

Caller ID Blocking

Indicates whether caller ID blocking is enabled (Yes) or disabled (No) for the phone.

From Cisco Unified CM Administration, choose Device > Device Settings > SIP Profile.

Anonymous Call Block

Indicates whether anonymous call block is enabled (Yes) or disabled (No) for the phone.

From Cisco Unified CM Administration, choose Device > Device Settings > SIP Profile.

Call Waiting Preferences

Displays a sub-menu that indicates whether call waiting is enabled (Yes) or disabled (No) for each line.

From Cisco Unified CM Administration, choose Call Routing > Directory Number.

Call Hold Ringback

Indicates whether the call hold ringback feature is enabled (Yes) or disabled (No) for the phone.

From Cisco Unified CM Administration, choose Device > Device Settings > SIP Profile.

Stutter Msg Waiting

Indicates whether stutter message waiting is enabled (Yes) or disabled (No) for the phone.

From Cisco Unified CM Administration, choose Device > Device Settings > SIP Profile.

Call Logs BLF Enabled

Indicates whether BLF for call logs is enabled (Yes) or disabled (No) for the phone.

Use Cisco Unified CM Administration.

Auto Answer Preferences

Displays a sub-menu that indicates whether auto answer is enabled (Yes) or disabled (No) for the each line.

From Cisco Unified CM Administration, choose Call Routing > Directory Number.

Speed Dials

Displays a sub-menu that displays the lines available on the phone. Select a line to see the speed dial label and number assigned to that line.

From Cisco Unified CM Administration, choose Device > Phone > Add a New Speed Dial or Device > Phone > Add/Update Speed Dials.


Related Topics

Displaying a Configuration Menu

Device Configuration Menu

HTTP Configuration Menu

The HTTP Configuration menu displays the URLs of servers from which the phone obtains a variety of information. This menu also displays information about the idle display on the phone.


Note Cisco Unified IP Phones does not support URLs with IPv6 addresses in the URL. This includes hostname which maps to a IPv6 address for directories, services, messages, and information URLs. If you support the phone's usage of URLs, you must configure the phone and the servers that provide URL services with IPv4 addresses.


Table 3-11 describes the options on the HTTP Configuration menu.

Table 3-11 HTTP Configuration Menu Options 

Option
Description
To Change

Directories URL

URL of the server from which the phone obtains directory information.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Services URL

URL of the server from which the phone obtains Cisco Unified IP Phone services.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Messages URL

URL of the server from which the phone obtains message services.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Information URL

URL of the help text that appears on the phone.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Authentication URL

URL that the phone uses to validate requests made to the phone web server.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Proxy Server URL

URL of proxy server, which makes HTTP requests to non-local host addresses on behalf of the phone HTTP client and provides responses from the non-local host to the phone HTTP client.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Idle URL

URL of an XML service that the phone displays when the phone has not been used for the time specified in the Idle URL Time option and no menu is open. For example, you could use the Idle URL option and the Idle URL Timer option to display a stock quote or a calendar on the phone screen when the phone has not been used for 5 minutes.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Idle URL Time

Number of seconds that the phone has not been used and no menu is open before the XML service specified in the Idle URL option is activated.

Use Cisco Unified CM Administration to modify Device > Phone > Phone Configuration.


Locale Configuration Menu

The Locale Configuration menu displays information about the user locale and the network locale used by the phone. Table 3-12 describes the options on this menu.

Table 3-12 Locale Configuration Menu Options 

Option
Description
To Change

User Locale

User locale associated with the phone user. The user locale identifies a set of detailed information to support users, including language, font, date and time formatting, and alphanumeric keyboard text information.

For more information on installing user locale, see the Cisco Unified Communications Operating System Administration Guide.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

User Locale Version

Version of the user locale loaded on the phone.

Display only—Cannot configure.

User Locale Char Set

Character set that the phone uses for the user locale.

Display only—Cannot configure.

Network Locale

Network locale associated with the phone user. The network locale identifies a set of detailed information that supports the phone in a specific location, including definitions of the tones and cadences used by the phone.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Network Locale Version

Version of the network locale loaded on the phone.

Display only—Cannot configure.

NTP Configuration (SIP phones only)

Provides access to the NTP Configuration Menu. For more information, see NTP Configuration Menu (SIP Phones Only).

From Cisco Unified CM Administration, choose System > Phone NTP Reference.


NTP Configuration Menu (SIP Phones Only)

The NTP Configuration menu displays information about the NTP server and mode configuration used by SIP phones. Table 3-13 describes the options on this menu.

Table 3-13 NTP Configuration Menu Options 

Option
Description
To Change

NTP IP Address 1

IP address of the primary NTP server.

From Cisco Unified CM Administration, choose System > Phone NTP Reference.

NTP IP Address 2

IP address of the secondary or backup NTP server.

From Cisco Unified CM Administration, choose System > Phone NTP Reference.

NTP Mode 1

Primary server mode. Supported modes are Directed Broadcast and Unicast.

From Cisco Unified CM Administration, choose System > Phone NTP Reference.

NTP Mode 2

Secondary server mode. Supported modes are Directed Broadcast and Unicast.

From Cisco Unified CM Administration, choose System > Phone NTP Reference.


UI Configuration Menu

The UI Configuration menu displays the status of various user interface features on the phone. Table 3-14 describes the options on this menu.

Table 3-14 UI Configuration Menu Options 

Option
Description
To Change

Auto Line Select

Indicates if the phone shifts the call focus to incoming calls on all lines.

When this option is disabled, the focus remains on the line that is currently in use. When this option is enabled, the phone shifts the call focus to the line with the most recent incoming call.

Default: Disabled

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

BLF for Call Lists

Indicates if the Busy Lamp Field (BLF) is enabled for call lists.

From Cisco Unified CM Administration, choose System > Enterprise Parameters.

Reverting Focus Priority

Indicates if the phone shifts the call focus on the phone screen to an incoming call or a reverting hold call. Settings include:

Lower—Focus priority given to incoming calls.

Higher—Focus priority given to reverting calls.

Even—Focus priority given to the first call.

From Cisco Unified CM Administration, choose System > Device Pool.

Auto Call Select

Indicates if the phone automatically shifts the call focus to an incoming call on the same line when the user is already on a call.

When this option is enabled, the phone shifts the call focus to the most recent incoming call.

When this option is disabled, all automatic focus changes, including Auto Line Select, are disabled regardless of their setting.

Default: Enabled

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

"more" Softkey Timer

Indicates the number of seconds that additional softkeys are displayed after the user presses more. If this timer expires before the user presses another softkey, the display reverts to the initial softkeys.

Range: 5 to 30; 0 represents an infinite timer.

Default: 5

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Wideband Headset UI Control

Indicates if the user can configure the Wideband Headset option in the phone user interface.

Values:

Enabled—The user can configure the Wideband Headset option in the Audio Preferences menu on the phone (from the Settings menu, choose User Preferences > Audio Preferences> Wideband Headset).

Disabled—The value of the Wideband Headset option in Cisco Unified CM Administration gets used (see the "Media Configuration Menu" section).

Default: Enabled

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Personalization

Indicates if the phone has been enabled for configuring custom ring tones and wallpaper images.

Default: Enabled

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Enbloc Dialing (SCCP only)

Indicates if the phone will use Enbloc dialing:

If Enabled, the phone will use Enbloc dialing when possible.

If Disabled, the phone will not use Enbloc dialing.

You should disable Enbloc dialing if either Forced Authorization Code (FAC) or Client Matter Code (CMC) dialing is being used.

Default: Enabled

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.


Media Configuration Menu

The Media Configuration menu displays whether the headset, speakerphone, and video capability are enabled on the phone. This menu also displays options for recording tones that the phone may play to indicate that a call may be recorded. Table 3-15 describes the options on this menu.

Table 3-15 Media Configuration Menu Options 

Option
Description
To Change

Speaker Enabled

Indicates if the speakerphone is enabled on the phone.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Headset Enabled

Indicates if the Headset button is enabled on the phone.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Video Capability Enabled

Indicates if the phone can participate in video calls when connected to an appropriately equipped computer.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Recording Tone

Indicates whether a recording tone (often referred to as a beep tone) is enabled or disabled for the phone. If the recording tone option is enabled, the phone plays the beep tone in both directions of every call, regardless of whether the call actually gets recorded. The beep tone first sounds when a call is answered.

You may want to notify your users if you enable this option.

Default: Disabled

Related Parameters:

Recording Tone Local Volume

Recording Tone Remote Volume

Recording Tone Duration

Other related parameters—Beep tone frequency in hz, the length of the beep tone (called duration), and how often the beep tone plays (called interval)—are defined on a per-Network Locale basis in the xml file that defines tones. This xml file is usually named tones.xml or g3-tones.xml.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Recording Tone Local Volume

Indicates the loudness setting for the beep tone that is received by the party whose phone has the Recording Tone option enabled.

This setting applies for each listening device (handset, speakerphone, headset).

Range: 0 percent (no tone) to 100 percent (same level as current volume setting on the phone).

Default: 100

See also Recording Tone in this table.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Recording Tone Remote Volume

Indicates the loudness setting for the beep tone that the remote party receives. The remote party is the party who is on a call with the party whose phone has the Recording Tone option enabled.

Range: 0 percent to 100 percent. (0 percent is -66 dBM and 100 percent is -3 dBM.)

Default: 84 percent (-10dBM)

See also Recording Tone in this table.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Recording Tone Duration

Indicates the length of time in milliseconds that the beep tone plays. If the value that you configure here is less than one third of the interval, this value overrides the default value that is provided by the Network Locale.

Range: 0 to 3000

Note For some Network Locales that use a complex cadence, this setting applies only to the first beep tone.

See also Recording Tone in this table.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Wideband Headset

Indicates whether wideband is enabled or disabled for the headset.

Default: Disabled

If Wideband Headset UI Control is enabled, you or the user can set this value from the Settings menu on the phone by choosing User Preferences > Audio Preferences > Wideband Headset.

If Wideband Headset UI Control is disabled, from Cisco Unified CM Administration, choose Device > Phone > Phone Configuration to set this value.

Note If you allowed this option to be user controllable (in the Wideband Headset UI Control option), the user-configured value takes precedence.

Enterprise Advertise G.722

Enables/disables (enabled by default) Cisco Unified IP Phones to advertise the G.722 codec to the Cisco Unified CM. For more information, see the Cisco Unified Communications Manager System Guide, Cisco Unified IP Phones.

Note When a phone is registered with a Cisco Unified CM that does not support this setting, the default is Disabled.

From Cisco Unified CM Administration, choose System > Enterprise Parameters.

Device Advertise G.722

Allows you to override the Enterprise Advertise G.722 Codec on a per-phone basis.

The default is "Use System Default," which means that the value configured for the Enterprise G.722 Codec parameter is used.

From Cisco Unified CM Administration, choose Device > Phone.


Power Save Configuration Menu

The Power Save Configuration menu displays the settings that control when the phone screen backlight turns off to conserve power. Table 3-16 describes the options on this menu.

For detailed information about configuring these settings, see Automatically Disabling the Cisco Unified IP Phone Backlight.

Table 3-16 Power Save Configuration Menu Options 

Option
Description
To Change

Backlight On Time

Time each day that the backlight on automatically (except on the days specified in the Days Display Not Active field).

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Backlight On Duration

Length of time that the backlight remains on after turning on at the time shown in the Display On Time option.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Backlight Idle Timeout

Length of time that the phone is idle before the display turns off. Applies only when the display was off as scheduled and was turned on by an end-user (by pressing a button on the phone or lifting the handset).

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Days Backlight Not Active

Days that the display does not turn on automatically at the time specified in the Display On Time option.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Backlight On If Incoming Call

Indicates whether the backlight automatically illuminates when a call is received.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.


Ethernet Configuration Menu

The Ethernet Configuration menu includes the options described in Table 3-17

Table 3-17 Ethernet Configuration Menu Options 

Option
Description
To Change

Forwarding Delay

Indicates whether the internal switch begins forwarding packets between the PC port and switched port on the phone when the phone becomes active.

When forwarding delay is set to disabled, the internal switch begins forwarding packets immediately.

When forwarding delay is set to enabled, the internal switch waits 8 seconds before forwarding packets between the PC port and the switch port.

Default is disabled.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Span to PC Port

Indicates whether the phone forwards packets transmitted and received on the network port to the access port.

Enable this option if an application that requires monitoring of the phone's traffic is being run on the access port. These applications include monitoring and recording applications (common in call center environments) and network packet capture tools that are used for diagnostic purposes.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.


Security Configuration Menu

The Security Configuration menu that you access from the Device Configuration menu displays settings that relate to security for phone. It also provides access to the Trust List menu. This menu indicates if the CTL or ITL file is installed on the phone.

Table 3-18 describes the options on the Security Configuration menu.


Note The phone also has a Security Configuration menu that you access directly from the Settings menu. For information about the security options on that menu, see Security Configuration Menu.


Table 3-18 Security Configuration Menu Options 

Option
Description
To Change

PC Port Disabled

Indicates whether the access port on the phone is enabled or disabled.

Note If disabled, video will not work on this phone, even if video is enabled.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

GARP Enabled

Indicates if the phone accepts MAC addresses from Gratuitous ARP responses.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Voice VLAN Enabled

Indicates if the phone allows a device attached to the access port to access the Voice VLAN:

Setting this option to No (disabled) prevents the attached PC from sending and receiving data on the Voice VLAN. This setting also prevents the PC from receiving data sent and received by the phone.

Set this setting to Yes (enabled) if an application that requires monitoring of the phone traffic is running on the PC. These applications include monitoring and recording applications and network monitoring software.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Web Access Enabled

Indicates if web access is enabled (Yes) or disabled (No) for the phone.

For more information, see Disabling and Enabling Web Page Access.

Security Mode

Displays the security mode that is set for the phone.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Logging Display

For use by the Cisco Technical Assistance Center (TAC), if necessary.


QoS Configuration Menu

The QoS Configuration menu displays information that relates to quality of service (QoS) for the phone. Table 3-19 describes the options on this menu.

Table 3-19 QoS Configuration Menu Options 

Option
Description
To Change

DSCP For Call Control

Differentiated Services Code Point (DSCP) IP classification for call control signaling.

From Cisco Unified CM Administration, choose System > Enterprise Parameters.

DSCP For Configuration

DSCP IP classification for any phone configuration transfer.

From Cisco Unified CM Administration, choose System > Enterprise Parameters.

DSCP For Services

DSCP IP classification for phone-based services.

From Cisco Unified CM Administration, choose System > Enterprise Parameters.


Network Configuration Menu

The Network Configuration menu displays device-specific network configuration settings on the phone. Table 3-20 describes the options in this menu.


Note The phone also has a Network Configuration menu that you access directly from the Settings menu. For information about the options on that menu, see Network Configuration Menu.


Table 3-20 Network Configuration Menu Options 

Option
Description
To Change

Load Server

Used to optimize installation time for phone firmware upgrades and offload the WAN by storing images locally, negating the need to traverse the WAN link for each phone's upgrade.

You can set the Load Server to another TFTP server IP address or name (other than the TFTP Server 1 or TFTP Server 2) from which the phone firmware can be retrieved for phone upgrades. When the Load Server option is set, the phone contacts the designated server for the firmware upgrade.

Note The Load Server option allows you to specify an alternate TFTP server for phone upgrades only. The phone continues to use TFTP Server 1 or TFTP Server 2 to obtain configuration files. The Load Server option does not provide management of the process and of the files, such as file transfer, compression, deletion, and so on.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

RTP Control Protocol

Indicates whether the phone supports the Real-Time Control Protocol (RTCP). Settings include:

Enabled

Disabled—default

If this feature is disabled, several call statistic values display as 0. For additional information, see the following sections:

Call Statistics Screen

Streaming Statistics

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

CDP: PC Port

Indicates whether CDP is supported on the PC port (default is enabled).

Enable CDP on the PC port when Cisco VT Advantage/Unified Video Advantage (CVTA) is connected to the PC port. CVTA does not work without CDP interaction with the phone.

Note When CDP is disabled in Cisco Unified CM, a warning is displayed, indicating that disabling CDP on the PC port prevents CVTA from working.

Note The current PC and switch port CDP values are shown on the Settings menu.

Use Cisco Unified Communications Manager Administration, and choose Device > Phone.

CDP: SW Port

Indicates whether CDP is supported on the switch xport (default is enabled).

Enable CDP on the switch port for VLAN assignment for the phone, power negotiation, QoS management, and 802.1x security.

Enable CDP on the switch port when the phone is connected to a Cisco switch.

Note When CDP is disabled in Cisco Unified CM, a warning is presented, indicating that CDP should be disabled on the switch port only if the phone is connected to a non-Cisco switch.

Note The current PC and switch port CDP values are shown on the Settings menu.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Peer Firmware Sharing

The Peer Firmware Sharing feature provides these advantages in high speed campus LAN settings:

Limits congestion on TFTP transfers to centralized remote TFTP servers

Eliminates the need to manually control firmware upgrades

Reduces phone downtime during upgrades when large numbers of devices are reset simultaneously

Peer Firmware Sharing may also aid in firmware upgrades in branch/remote office deployment scenarios over bandwidth-limited WAN links.

When enabled, it allows the phone to discover like phones on the subnet that are requesting the files that make up the firmware image, and to automatically assemble transfer hierarchies on a per-file basis. The individual files making up the firmware image are retrieved from the TFTP server by only the root phone in the hierarchy, and are then rapidly transferred down the transfer hierarchy to the other phones on the subnet using TCP connections.

This menu option indicates whether the phone supports peer firmware sharing. Settings include:

Enabled—default

Disabled

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

Log Server

Indicates the IP address and port of the remote logging machine to which the phone sends log messages. These log messages help in debugging the peer to peer image distribution feature.

Note The remote logging setting does not affect the sharing log messages sent to the phone log.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

IP Addressing Mode

Displays the IP addressing mode that is available on the phone—IPv4 only, IPv6 only, or IPv4 and IPv6.

From Cisco Unified CM Administration, choose Device > Device Settings > Common Device Configuration.

IP Preference Mode Control

Indicates the IP address version that the phone uses during signaling with Cisco Unified CM when both IPv4 and IPv6 are both available on the phone.

The IP addressing mode preference is configured on Cisco Unified CM Administration.

Displays one of the following options on the phone:

IPv4—The dual-stack phone prefers to establish a connection via an IPv4 address during a signaling event

IPv6—The dual-stack phone prefers to establish a connection via an IPv6 address during a signaling event.

From Cisco Unified CM Administration, choose Device > Device Settings > Common Device Configuration.

Auto IP Configuration

Displays whether the auto configurations is enabled or disabled on the phone.

The Auto IP Configuration setting along with the DHCPv6 setting determine how the IP Phone obtains its IPv6 address and other network settings. For more information on how these two settings affect the network settings on the phone, see Table 3-5.

Note Use the "Allow Auto-Configuration for Phones" setting in Cisco Unified CM Administration.

From Cisco Unified CM Administration, choose Device > Device Settings > Common Device Configuration.

IPv6 Load Server

Used to optimize installation time for phone firmware upgrades and offload the WAN by storing images locally, negating the need to traverse the WAN link for each phone's upgrade.

You can set the Load Server to another TFTP server IP address or name (other than the IPv6 TFTP Server 1 or IPv6 TFTP Server 2) from which the phone firmware can be retrieved for phone upgrades. When the Load Server option is set, the phone contacts the designated server for the firmware upgrade.

Note The Load Server option allows you to specify an alternate TFTP server for phone upgrades only. The phone continues to use IPv6 TFTP Server 1 or IPv6 TFTP Server 2 to obtain configuration files. The Load Server option does not provide management of the process and of the files, such as file transfer, compression, or deletion.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

IPv6 Log Server

Indicates the IP address and port of the remote logging machine to which the phone sends log messages. These log messages help in debugging the peer to peer image distribution feature.

Note The remote logging setting does not affect the sharing log messages sent to the phone log.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.


Security Configuration Menu

The Security Configuration menu that you access directly from the Settings menu provides information about various security settings. It also provides access to the CTL File screen and the Trust List menu, if a CTL file is installed on the phone.

Table 3-21 describes the options on the Security Configuration menu.


Note The phone also has a Security Configuration menu that you access from the Device Configuration menu. For information about the security options on that menu, see Security Configuration Menu.


Table 3-21 Security Configuration Menu Settings 

Option
Description
To Change

Web Access Enabled

Indicates is web access is enabled (Yes) or disabled (No) for the phone.

For more information, see Disabling and Enabling Web Page Access.

Security Mode

Displays the security mode that is set for the phone.

From Cisco Unified CM Administration, choose Device > Phone > Phone Configuration.

MIC

Indicates whether a manufacturing installed certificate (used for the security features) is installed on the phone (Yes) or is not installed on the phone (No).

For information about how to manage the MIC for your phone, refer to Using the Certificate Authority Proxy Function in Cisco Unified Communications Manager Security Guide.

LSC

Indicates whether a locally significant certificate (used for the security features) is installed on the phone (Yes) or is not installed on the phone (No).

For information about how to manage the LSC for your phone, see the Cisco Unified Communications Manager Security Guide, Using the Certificate Authority Proxy Function.

CTL File

Displays the MD5 hash of the certificate trust list (CTL) file that is installed in the phone. If no CTL file is installed on the phone, this field displays No. (If security is configured for the phone, the CTL file installs automatically when the phone reboots or resets.

For more information about this file, see the Cisco Unified Communications Manager Security Guide, Configuring the Cisco CTL Client.

If a CTL file is installed on the phone, also provides access to the CTL File screen. For more information, see CTL File Submenu.

Trust List

The Trust List is a top-level menu that provides submenus for the CTL, ITL, and Signed Configuration files.

The CTL File submenu displays the contents of the CTL file, and the ITL File submenu displays contents of the ITL file. The CTL File and ITL File submenus also display the MD5 hash of the file. The MD5 hash value from the phone can be compared with the MD5 hash value of the file from the TFTP server to verify if the correct file is installed on the phone.

The Signed Configuration File submenu displays the SRST certificate that is installed via the authenticated digitally signed configuration file.

For more information, see Trust List Menu.

802.1X Authentication

Allows you to enable 802.1X authentication for this phone.

See 802.1X Authentication and Status.

802.1X Authentication Status

Displays real-time status progress of the 802.1X authentication transaction.

Display only—Cannot configure.


CTL File Submenu

The CTL File screen includes the options described in Table 3-22.

If a CTL file is installed on the phone, you can access the CTL File submenu by pressing the Settings button and choosing Security Configuration > Trust List.

Table 3-22 CTL File Settings 

Option
Description
To Change

CTL File

Displays the MD5 hash of the CTL file that is installed in the phone. If security is configured for the phone, the CTL file installs automatically when the phone reboots or resets.

A locked padlock icon indicates that the CTL file is locked.

An unlocked padlock icon indicates that the CTL file is unlocked.

For more information about this file, see the Cisco Unified Communications Manager Security Guide, Configuring the Cisco CTL Client.

CAPF Server

Name (from the Cisco Unified CM Certificate) of the CAPF used by the phone. Also displays a certificate icon if a certificate is installed for this server.

For more information about this server, see the Cisco Unified CM Security Guide, Using the Certificate Authority Proxy Function.

Unified CM/TFTP Server

Common Name (from the Cisco Unified CM Certificate) of a Cisco Unified CM and TFTP server used by the phone. Also displays a certificate icon if a certificate is installed for this server.

If neither the primary TFTP (TFTP Server 1) server nor the backup TFTP server (TFTP Server 2) is listed in the CTL file, you must unlock the CTL file before you can save changes that you make to the TFTP Server 1 option or to the TFTP Server 2 option on the Network Configuration menu.

For information about changing these options, see Network Configuration Menu.

Application Server

Common Name (from the Cisco Unified CM Certificate) of the trusted application server used by the phone. Also displays a certificate icon.

A phone-trust certificate is used to authenticate application servers with which the phone communicates.

One Application Server menu item appears for each phone-trust store whose certificates have been uploaded into Cisco Unified OS Administration and later downloaded into the phone's CTL file.

For more information about phone-trust certificates, see these chapters:

Cisco Unified Communications Operating System Administration Guide, Security.

Cisco Unified Communication Manager Security Guide, Security Overview.


Unlocking the CTL and ITL Files

To unlock the CTL and ITL files from the Security Configuration menu, follow these steps:

Procedure


Step 1 Press **# to unlock options on the Settings menu on the Cisco Unified IP Phone.

Step 2 Select Trust List > CTL file or ITL file (depending on which file is installed in your phone).

Step 3 Press the Unlock softkey to unlock the CTL file.

Step 4 Press the Unlock softkey to unlock the Trust List files on the phone. The CTL or ITL files, if installed on your phone, will be unlocked together.

After you change and save the applicable TFTP server option, the CTL file will be locked automatically.


Note When you press the Unlock softkey, it changes to Lock. If you decide not to change the TFTP server option, press the Lock softkey to lock the CTL file.



ITL File Submenu

The ITL File screen includes the options that are described in Table 3-23.

If an ITL file is installed on the phone, you can access the ITL File submenu by pressing the Settings button and choosing Security Configuration > Trust List.


Note The TFTP server generates the ITL file. The Trust Verification Service does not generate the ITL file, as done in previous releases.


Table 3-23 ITL File Settings 

Option
Description
To Change

ITL File

Displays the MD5 hash of the Identity Trust List (ITL) file that is installed in the phone. If security is configured for the phone, the ITL file installs automatically when the phone reboots or resets.

A locked padlock indicates that the ITL file is locked.

An unlocked padlock indicates that the ITL file is unlocked.

For more information about the CTL file, see the Cisco Unified Communications Manager Security Guide, Configuring the Cisco CTL Client.

CAPF Server

Common Name (from the Cisco Unified CM Certificate) of the CAPF used by the phone. Also displays a certificate icon if a certificate is installed for this server.

For more information about this server, see the Cisco Unified Communications Manager Security Guide, Using the Certificate Authority Proxy Function.

Unified CM/TFTP Server

Common Name (from the Cisco Unified CM Certificate) of a Cisco Unified CM and TFTP server used by the phone. Also displays a certificate icon if a certificate is installed for this server.

If the certificate of the TFTP (TFTP Server 1) or the backup TFTP (TFTP Server 2) is not in the CTL or ITL file, you must unlock one of the files.

For information about changing these options, see Network Configuration Menu.

Application Server

Common Name (from the Cisco Unified CM Certificate) of the trusted application server used by the phone.

Also displays a certificate icon.

A phone-trust certificate is used to authenticate application servers with which the phone communicates.

One Application Server menu item appears for each phone-trust store whose certificates have been uploaded into Cisco Unified OS Administration and later downloaded into the phone's ITL file.

For more information about phone-trust certificates, see these chapters:

Cisco Unified Communications Operating System Administration Guide, Security.

Cisco Unified Communication Manager Security Guide, Security Overview.

Trust Verification Service Server

Common Name (from the Cisco Unified CM Certificate) of the trusted application server used by the phone.

Also displays a certificate icon.

A phone-trust TVS certificate is used to authenticate TVS servers with which the phone communicates. There can be more than one entry for the TVS servers.

For more information, see the Cisco Unified Communications Manager Administration Guide.


Trust List Menu

The Trust List menu provides a top-level menu containing the CTL, ITL, and the Signed Configuration submenus. The content of the Signed Configuration file is SRST.

It displays information about all of the servers that the phone trusts and includes the options described in Table 3-24.

Table 3-24 Trust List Menu Settings 

Option
Description
To Change

CAPF Server

Common Name (from the Cisco Unified CM Certificate) of the CAPF used by the phone. Also displays a certificate icon if a certificate is installed for this server.

For more information about these settings, see the Cisco Unified Communications Manager Security Guide, Configuring the Cisco CTL Client.

Unified CM/TFTP Server

Common Name (from the Cisco Unified CM Certificate) of a Cisco Unified CM and TFTP server used by the phone. Also displays a certificate icon if a certificate is installed for this server.

If the certificate of the TFTP (TFTP Server 1) or the certificate of the backup TFTP (TFTP Server 2) is not in the CTL file or ITL file, you must unlock either the CTL file or the ITL file.

For more information about these settings, see the Cisco Unified Communications Manager Security Guide, Configuring the Cisco CTL Client.

SRST Router

Common Name (from the Cisco Unified CM Certificate) of the trusted SRST router that is available to the phone, if such a device has been configured in Cisco Unified CM Administration. Also displays a certificate icon if a certificate is installed for this server.

For more information about these settings, see the Cisco Unified Communications Manager Security Guide, Configuring the Cisco CTL Client.

Application Server

Common Name (from the Cisco Unified CM Certificate) of the trusted application server used by the phone. Also displays a certificate icon.

A phone-trust certificate is used to authenticate application servers with which the phone communicates.

One Application Server menu item appears for each phone-trust store whose certificates have been uploaded into Cisco Unified OS Administration and later downloaded into the phone's CTL file.

For more information about phone trust certificates, see these chapters:

Cisco Unified Communications Operating System Administration Guide, Security.

Cisco Unified Communication Manager Security Guide, Security Overview.


802.1X Authentication and Status

The 802.1X Authentication and 802.1X Authentication Status menus allow you to enable 802.1X authentication and monitor its progress. These options are described in Table 3-25 and Table 3-26.

You can access these menus from the Settings menu > Security Configuration menu by choosing 802.1X Authentication or 802.1X Authentication Status.

For instructions about how to access the Security Configuration menu and its submenus, see the "Displaying a Configuration Menu" section.

Table 3-25 802.1X Authentication Settings 

Option
Description
To Change

Device Authentication

Determines whether 802.1X authentication is enabled:

Enabled—Phone uses 802.1X authentication to request network access.

Disabled—Default setting in which the phone uses CDP to acquire VLAN and network access.

1. Choose Settings > Security Configuration > 802.1X Authentication > Device Authentication.

2. Set the Device Authentication option to Enabled or Disabled.

3. Press the Save softkey.

EAP-MD5

Specifies a password for use with 802.1X authentication using the following menu options (described in the following rows):

Device ID

Shared Secret

Realm

Choose Settings > Security Configuration > 802.1X Authentication > EAP-MD5.

Device ID—Derivative of the phone's model number and unique MAC address displayed in this format: CP-<model>-SEP-<MAC>

Display only—Cannot configure.

Shared Secret—Choose a password to use on the phone and on the authentication server. The password must be between 6 and 32 characters, consisting of any combination of numbers or letters.

Note If you disable 802.1X authentication or perform a factory reset of the phone, the shared secret is deleted.

1. Choose EAP-MD5 > Shared Secret.

2. Enter the shared secret.

3. Press Save.

For assistance in recovering from a deleted shared secret, see Troubleshooting Cisco Unified IP Phone Security.

Realm—Indicates the user network domain, always set as Network

Display only—Cannot configure.


Table 3-26 802.1X Authentication Real-Time Status

Option
Description
To Change

802.1X Authentication Status

Real-time progress of the 802.1X authentication status, displaying one of the following states:

Disabled—802.1X is disabled and transaction was not attempted

Disconnected—Physical link is down or disconnected

Connecting—Trying to discover or acquire the authenticator

Acquired—Authenticator acquired, awaiting authentication to begin

Authenticating—Authentication in progress

Authenticated—Authentication successful or implicit authentication due to timeouts

Held—Authentication failed, waiting before next attempt (approximately 60 seconds)

Display only—Cannot configure.