Cisco Unified IP Phone 7975G, 7971G-GE, 7970G, 7965G, and 7945G Administration Guide for Cisco Unified Communications Manager 9.0 (SCCP and SIP)
Cisco Unified IP Phone Settings
Downloads: This chapterpdf (PDF - 1.81MB) The complete bookPDF (PDF - 5.73MB) | The complete bookePub (ePub - 907.0KB) | The complete bookMobi (Mobi - 1.69MB) | Feedback

Cisco Unified IP Phone Settings

Contents

Cisco Unified IP Phone Settings

Phone Settings Overview

The Cisco Unified IP Phone includes many configurable network and device settings that you may need to modify before the phone is functional for your users. You can access these settings, and change many of them, through menus on the phone.

Cisco Unified IP Phone Menus

The Cisco Unified IP Phone includes the following configuration menus:

  • Network Configuration menu: Provides options for viewing and modifying various network settings.
  • Device Configuration menu: Provides access to submenus from which you can view various settings that are not network related.
  • Security Configuration menu: Provides options for displaying and modifying security settings.

Before you can change option settings on the Network Configuration menu, you must unlock options for edit. See Unlock and Lock Options for instructions.

For information about the keys you can use to edit or change option settings, see Value Input Guidelines.

To control whether a phone user has access to phone settings, use the Settings Access field in the Cisco Unified Communications Manager Administration Phone Configuration window.

Related Tasks

Display Settings Menu

To display a configuration menu, perform the following steps.


Note


To control whether a phone has access to the Settings menu or to options on this menu, use the Settings Access field in the Cisco Unified Communications Manager Administration Phone Configuration window. The Settings Access field accepts these values:

  • Enabled: Allows access to the Settings menu.
  • Disabled: Prevents access to the Settings menu.
  • Restricted: Allows access to the User Preferences menu and allows volume changes to be saved. Prevents access to other options on the Settings menu.

If you cannot access an option on the Settings menu, check the Settings Access field.

Procedure
    Step 1   Press the Settings button to access the Settings menu.
    Step 2   Perform one of these actions to display the desired menu:
    1. Use the Navigation button to select the desired menu and then press Select.
    2. Use the keypad on the phone to enter the number that corresponds to the menu.
    Step 3   To display a submenu, repeat Step 2.
    Step 4   To exit a menu, press Exit.

    Unlock and Lock Options

    Configuration options that can be changed from a phone are locked by default to prevent users from making changes that could affect the operation of a phone. You must unlock these options before you can change them.

    When options are inaccessible for modification, a locked padlock icon appears on the configuration menus. When options are unlocked and accessible for modification, an unlocked padlock icon appears on these menus.

    To unlock or lock options, press **#. This action either locks or unlocks the options, depending on the previous state.


    Note


    If a Settings Menu password has been provisioned, SIP phones present an "Enter password" prompt after you enter **#.


    Make sure to lock options after you have made your changes.


    Caution


    Do not press **# to unlock options and then immediately press **# again to lock options. The phone will interpret this sequence as **#**, which will reset the phone. To lock options after you unlock them, wait at least 10 seconds before you press **# again.


    Related Tasks

    Value Input Guidelines

    When you edit the value of an option setting, follow these guidelines:

    • Use the keys on the keypad to enter numbers and letters.
    • To enter letters by using the keypad, use a corresponding number key. Press the key one or more times to display a particular letter. For example, press the 2 key once for "a," twice quickly for "b," and three times quickly for "c." After you pause, the cursor automatically advances to allow you to enter the next letter.
    • To enter a period (for example, in an IP address under IPv4 Configuration), press the . (period) softkey or press * on the keypad.
    • To enter a colon (for example, in an IP address under IPv6 Configuration), press the : (colon) softkey or press * on the keypad.
    • Press the << softkey if you make a mistake. This softkey deletes the character to the left of the cursor.
    • Press the Cancel softkey before you press the Save softkey to discard any changes that you have made.

    Note


    The Cisco Unified IP Phone provides several methods you can use to reset or restore option settings, if necessary. For more information, see Cisco Unified IP Phone Reset or Restore.


    Related Tasks

    Phone Setup Options

    The settings that you can change on a phone fall into several categories, as shown in the following table. For a detailed explanation of each setting and instructions for changing them, see Network Configuration Menu.


    Note


    Several options on various configuration menus are for display only, or you can configure these options from Cisco Unified Communications Manager. This chapter also describes these options.


    Table 1 Settings Configurable from the Phone

    Category

    Description

    Network Configuration menu option

    General Network Settings

    VLAN settings

    Admin. VLAN ID allows you to change the administrative VLAN used by the phone. PC VLAN allows the phone to interoperate with third-party switches that do not support a voice VLAN.

    Admin. VLAN ID

    PC VLAN

    Port settings

    Allow you to set the speed and duplex of the network and access ports.

    SW Port Configuration

    PC Port Configuration

    IPv4 Network Settings

    DHCP settings

    Dynamic Host Configuration Protocol (DHCP) automatically assigns IP address to devices when you connect them to the network. Cisco Unified IP Phones enable DHCP by default.

    DHCP

    DHCP Address Released

    IP settings

    If you do not use DHCP in your network, you can make IP settings manually.

    Domain Name

    IP Address

    Subnet Mask

    Default Router 1-5

    DNS Server 1-5

    TFTP settings for TFTP IPv4 servers

    If you do not use DHCP to direct the phone to a TFTP server, you must manually assign a TFTP server. You can also assign an alternative TFTP server to use instead of the one assigned by DHCP.

    TFTP Server 1

    Alternate TFTP

    TFTP Server 2

    IPv6 Network Settings

    DHCP settings

    Dynamic Host Configuration Protocol (DHCP) automatically assigns IP address to phone when you connect them to the network. Cisco Unified IP Phones enable DHCP by default.

    DHCPv6

    DHCPv6 Address Released

    IP settings

    If you do not use DHCP in your network, you can make IP settings manually.

    Domain Name

    IPv6 Address

    IPv6 Prefix Length

    IPv6 DNS Server 1-2

    TFTP settings for TFTP IPv6 servers (SCCP phones only)

    If you do not use DHCP to direct the phone to a TFTP server, you must manually assign a TFTP server. You can also assign an alternative TFTP server to use instead of the one that DHCP assigns.

    IPv6 TFTP Server 1

    IPv6 Alternate TFTP

    IPv6 TFTP Server 2

    Related Tasks
    Related References

    Network Configuration Menu

    The Network Configuration menu provides options for viewing and modifying various network settings. The following tables describe these options and, where applicable, explains how to change them.

    For information about how to access the Network Configuration menu, see Display Settings Menu.


    Note


    The phone also has a Network Configuration menu that you access directly from the Settings menu. For information about the options on that menu, see Network Configuration Menu.


    Before you can change an option on this menu, you must unlock options as described in Unlock and Lock Options. The Edit, Yes, or No softkeys for modifying network configuration options appear only if options are unlocked.

    For information about the keys you can use to edit options, see Value Input Guidelines.

    Table 2 Network Configuration Menu Options

    Option

    Description

    To Change

    IPv4 Configuration

    Internet Protocol v4 address menu. In the IPv4 Configuration menu, you can do the following:

    • Enable or disable the phone to use the IPv4 address that is assigned by the DHCPv4 server.
    • Manually set the IPv4 Address, Subnet Mask, Default Routers, DNSv4 Server, and Alternate TFTP servers for IPv4.

    For more information on the IPv4 address fields, refer to the specific field within this table.

    Set IPv4 Configuration Fields

    IPv6 Configuration

    Internet Protocol v6 address menu. In the IPv6 Configuration menu, you can do the following:

    • Enable or disable the phone to use the IPv6 address that is assigned by the DHCPv6 server, or to use the IPv6 address that the phone acquires through Stateless Address Autoconfiguration (SLAAC).
    • Manually set the IPv6 Address, Subnet Prefix Length, Default Routers, DNSv6 Server, and IPv6 TFTP servers.

    For more information on the IPv6 address fields, see DHCPv6 and Autoconfiguration.

    For more information on SLAAC, see Deploying IPv6 in Unified Communications Networks with Cisco Unified Communications Manager at the following location:

    http:/​/​www.cisco.com/​en/​US/​docs/​voice_ip_comm/​cucm/​srnd/​ipv6/​ipv6srnd.html

    Set IPv6 Configuration Fields

    MAC Address

    Unique Media Access Control (MAC) address of the phone.

    Display only. Cannot configure.

    Host Name

    Unique host name that the DHCP server assigned to the phone.

    Display only. Cannot configure.

    Domain Name

    Name of the Domain Name System (DNS) domain in which the phone resides.

    Note   

    If the phone receives different domain names from the DHCPv4 and DHCPv6 servers, the domain name from the DHCPv6 will take precedence.

    Set Domain Name Field

    Operational VLAN ID

    Auxiliary Virtual Local Area Network (VLAN) configured on a Cisco Catalyst switch in which the phone is a member.

    If the phone has not received an auxiliary VLAN, this option indicates the Administrative VLAN.

    If neither the auxiliary VLAN nor the Administrative VLAN are configured, this option is blank.

    The phone obtains its Operational VLAN ID from Cisco Discovery Protocol (CDP) from the switch to which the phone is attached. To assign a VLAN ID manually, use the Admin VLAN ID option.

    Admin. VLAN ID

    Auxiliary VLAN in which the phone is a member.

    Used only if the phone does not receive an auxiliary VLAN from the switch; otherwise it is ignored.

    Set Admin VLAN ID Field

    SW Port Configuration

    Speed and duplex of the network port. Valid values:

    • Auto Negotiate
    • 10 Half—10-BaseT/half duplex
    • 10 Full—10-BaseT/full duplex
    • 100 Half—100-BaseT/half duplex
    • 100 Full—100-BaseT/full duplex
    • 1000 Full—1000-BaseT/full duplex

    If the phone is connected to a switch, configure the port on the switch to the same speed/duplex as the phone, or configure both to autonegotiate.

    If you change the setting of this option, you must change the PC Port Configuration option to the same setting.

    Set SW Port Configuration Field

    PC Port Configuration

    Speed and duplex of the access port. Valid values:

    • Autonegotiate
    • 10 Half—10-BaseT/half duplex
    • 10 Full—10-BaseT/full duplex
    • 100 Half—100-BaseT/half duplex
    • 100 Full—100-BaseT/full duplex
    • 1000 Full—1000-BaseT/full duplex

    If the phone is connected to a switch, configure the port on the switch to the same speed/duplex as the phone, or configure both to auto-negotiate.

    If you change the setting of this option, you must change the SW Port Configuration option to the same setting.

    Set PC Port Configuration Field

    PC VLAN

    Allows the phone to interoperate with third-party switches that do not support a voice VLAN. The Admin VLAN ID option must be set before you can change this option.

    Set PC VLAN Field

    VPN

    Shows the VPN (virtual private network) Client state:

    • Connected
    • Not Connected

    (Supported only for the Cisco Unified IP Phone 7945G, 7965G, and 7975G.)

    Display only. Cannot configure.

    The following table describes the IPv4 Configuration menu options.

    Table 3 IPv4 Configuration menu options 

    Option

    Description

    To change

    DHCP

    Indicates whether the phone has DHCP enabled or disabled.

    When DHCP is enabled, the DHCP server assigns the phone an IPv4 address. When DHCP is disabled, the administrator must manually assign an IPv4 address to the phone.

    Set DHCP Field

    IP Address

    Internet Protocol version 4 (IPv4) address of the phone.

    If you assign an IPv4 address with this option, you must also assign a subnet mask and default router. See Subnet Mask and Default Router 1 options in this table.

    Set IP Address Field

    Subnet Mask

    Subnet mask used by the phone.

    Set Subnet Mask Field

    Default Router 1

    Default Router 2

    Default Router 3

    Default Router 4

    Default Router 5

    Default router used by the phone (Default Router 1) and optional backup routers (Default Router 2–5).

    Set Default Router Fields

    DNS Server 1

    DNS Server 2

    DNS Server 3

    DNS Server 4

    DNS Server 5

    Primary Domain Name System (DNS) server (DNS Server 1) and optional backup DNS servers (DNS Server 2–5) that the phone uses.

    Set DNS Server Fields

    DHCP Address Released

    Releases the IPv4 IP address that DHCP assigns.

    Set DHCP Field

    DHCP Server

    IP address of the Dynamic Host Configuration Protocol (DHCP) server from which the phone obtains its IPv4 address.

    Display only. Cannot configure.

    Alternate TFTP

    Indicates whether the phone uses an alternative TFTP server.

    Set Alternate TFTP Field

    TFTP Server 1

    Primary Trivial File Transfer Protocol (TFTP) server that the phone uses. If you are not using DHCP in your network and you want to change this server, you must use the TFTP Server 1 option.

    If you set the Alternate TFTP option to Yes, you must enter a nonzero value for the TFTP Server 1 option.

    If neither the primary TFTP server nor the backup TFTP server is listed in the CTL or ITL file on the phone, you must unlock the file before you can save changes to the TFTP Server 1 option. In this case, the phone deletes the file when you save changes to the TFTP Server 1 option. A new CTL or ITL file will be downloaded from the new TFTP Server 1 address.

    When the phone looks for its TFTP server, it gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for its TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for its TFTP server in the following order:

    1. Any manually assigned IPv6 TFTP servers
    2. Any manually assigned IPv4 TFTP servers
    3. DHCPv6 assigned TFTP servers
    4. DHCP assigned TFTP servers
    Note   

    For information about the CTL and ITL files, see the Cisco Unified Communications Manager Security Guide. For information about unlocking the CTL or ITL files, see Unlock CTL and ITL Files.

    Set TFTP Server 1 Field

    TFTP Server 2

    Optional backup TFTP server that the phone uses if the primary TFTP server is unavailable.

    If neither the primary TFTP server nor the backup TFTP server is listed in the CTL or ITL file on the phone, you must unlock either of the files before you can save changes to the TFTP Server 2 option. In this case, the phone deletes either of the files when you save changes to the TFTP Server 2 option. A new CTL or ITL file will be downloaded from the new TFTP Server 2 address.

    When the phone looks for its TFTP server, it gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for its TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for its TFTP server in the following order:

    1. Manually assigned IPv6 TFTP servers
    2. Manually assigned IPv4 TFTP servers
    3. DHCPv6 assigned TFTP servers
    4. DHCP assigned TFTP servers
    Note   

    For information about the CTL or ITL file, see the Cisco Unified Communications Manager Security Guide. For information about unlocking the CTL and ITL files, see Unlock CTL and ITL Files.

    Set TFTP Server 2 Field

    BOOTP Server

    Indicates whether the phone obtains its configuration from a Bootstrap Protocol (BootP) server instead of from a DHCP server.

    Display only. Cannot configure.

    The following table describes the IPv6 Configuration menu options.

    Table 4 IPv6 Configuration menu options

    Option

    Description

    To change

    DHCPv6

    Indicates whether the phone has DHCP enabled or disabled.

    When DHCPv6 is enabled, the DHCPv6 server assigns the phone an IPv6 address. When DHCP v6 is disabled, the administrator must manually assign an IPv6 address to the phone.

    The DHCPv6 setting along with the Auto IP Configuration setting determine how the IP phone obtains its network settings. For more information on how these two settings affect the network settings on the phone, see DHCPv6 and Autoconfiguration.

    Set DHCPv6 Field

    IPv6 Address

    Internet Protocol version 6 (IPv6) address of the phone. The IPv6 address is a 128 bit address.

    If you assign an IP address with this option, you must also assign the IPv6 prefix length and default router. See IPv6 Prefix Length in this table.

    Set IPv6 Address Field

    IPv6 Prefix Length

    Subnet prefix length that is used by the phone. The subnet prefix length is a decimal value from 1 to 128, that specifies the portion of the IPv6 address that comprises the subnet.

    Set IPv6 Prefix Length Field

    IPv6 Default Router 1

    Default router used by the phone (Default Router 1).

    Note   

    The phone obtains information on the default router from IPv6 Router Advertisements.

    Set IPv6 Default Router 1 Field

    IPv6 DNS Server 1

    IPv6 DNS Server 2

    Primary Domain Name System (DNS) server (DNS Server 1) and optional backup DNS servers (DNS Server 2) used by the phone.

    If your configuration includes both DNSv6 and DNSv4 servers, the phone will look for its DNS server in the following order:

    1. IPv6 DNS Server 1
    2. IPv6 DNS Server 2
    3. DNS Server 1-5 for IPv4 (respectively)

    Set IPv6 DNS Server 1 and IPv6 DNS Server 2 Fields

    DHCPv6 Address Released

    Releases the IPv6 address that the phone has acquired from the DHCPv6 server or by stateless address auto configuration.

    Note   

    This field is only editable when the DHCPv6 option is enabled.

    Set DHCPv6 Address Released Field

    IPv6 Alternate TFTP

    Indicates whether the phone is using the IPv6 Alternate TFTP server.

    Set IPv6 Alternate TFTP Field

    IPv6 TFTP Server 1 (SCCP phones only)

    Primary IPv6 Trivial File Transfer Protocol (TFTP) server used by the phone. If you are not using DHCPv6 in your network and you want to change this server, you must use the IPv6 TFTP Server 1 option.

    If you set the IPv6 Alternate TFTP option to Yes or you disable DHCPv6, you must enter a non-zero value for the IPv6 TFTP Server 1 option.

    If you make changes to the Alternate TFTP or IPv6 TFTP servers, you must first unlock the CTL or ITL file on the phone.

    When the phone looks for its TFTP server, it gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for its TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for its TFTP server in the following order:

    1. Manually assigned IPv6 TFTP servers
    2. Manually assigned IPv4 TFTP servers
    3. DHCPv6 assigned TFTP servers
    4. DHCP assigned TFTP servers

    For information about the CTL or ITL file, see the Cisco Unified Communications Manager Security Guide. For information about unlocking CTL files, see Unlock CTL and ITL Files.

    Set IPv6 TFTP Server 1 Field

    IPv6 TFTP Server 2 (SCCP phones only)

    Optional backup IPv6 TFTP server that the phone uses if the primary IPv6 TFTP server is unavailable.

    If you make changes to the Alternate TFTP or IPv6 TFTP servers, you must first unlock the CTL or ITL file on the phone.

    When the phone looks for its TFTP server, it gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for its TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for the TFTP server in the following order:

    1. Manually assigned IPv6 TFTP servers
    2. Manually assigned IPv4 TFTP servers
    3. DHCPv6 assigned TFTP servers
    4. DHCP assigned TFTP servers

    For information about the CTL or ITL file, see the Cisco Unified Communications Manager Security Guide. For information about unlocking CTL or ITL files, see to Unlock CTL and ITL Files.

    Set IPv6 TFTP Server 2 Field

    Set IPv4 Configuration Fields

    Procedure
      Step 1   Unlock network configuration options.
      Step 2   Scroll to IPv4 Configuration and press the Select softkey.

      Set IPv6 Configuration Fields

      Procedure
        Step 1   Unlock network configuration options.
        Step 2   Scroll to IPv6 Configuration and press the Select softkey.

        Set Domain Name Field

        Procedure
          Step 1   Unlock network configuration options.
          Step 2   To disable DHCP, perform one of the following actions:
          • If the IP Addressing mode is configured for IPv4 only, set the DHCP option to No.
          • If the IP Addressing mode is configured for IPv6 only, set the DHCPv6 option to No.
          • If the IP Addressing mode is configured for both IPv4 and IPv6, set both DHCP option and DHCPv6 to No.
          Step 3   Scroll to the Domain Name option.
          Step 4   Press Edit.
          Step 5   Enter a new domain name.
          Step 6   Press Validate.
          Step 7   Press Save.

          Set Admin VLAN ID Field

          Procedure
            Step 1   Unlock network configuration options.
            Step 2   Scroll to the Admin. VLAN ID option.
            Step 3   Press Edit.
            Step 4   Enter a new Admin VLAN setting.
            Step 5   Press Validate.
            Step 6   Press Save.

            Set SW Port Configuration Field

            Procedure
              Step 1   Unlock network configuration options.
              Step 2   Scroll to the SW Port Configuration option and then press Edit.
              Step 3   Scroll to the setting that you want and then press Select.
              Step 4   Press Save.

              Set PC Port Configuration Field

              To configure the setting on multiple phones simultaneously, enable Remote Port Configuration in Enterprise Phone Configuration (System > Enterprise Phone Configuration).


              Note


              If the ports are configured for Remote Port Configuration in Cisco Unified Communications Manager, the data cannot be changed on the phone.


              Procedure
                Step 1   Unlock network configuration options.
                Step 2   Scroll to the PC Port Configuration option and then press Edit.
                Step 3   Scroll to the setting that you want and then press Select.
                Step 4   Press Save.

                Set PC VLAN Field

                Procedure
                  Step 1   Unlock network configuration options.
                  Step 2   Make sure the Admin VLAN ID option is set.
                  Step 3   Scroll to the PC VLAN option.
                  Step 4   Press Edit.
                  Step 5   Enter a new PC VLAN setting.
                  Step 6   Press Validate.
                  Step 7   Press Save

                  Set DHCP Field

                  Procedure
                    Step 1   Unlock network configuration options.
                    Step 2   Scroll to the DHCP option and press No to disable DHCP, or press Yes to enable DHCP.
                    Step 3   Press Save.

                    Set IP Address Field

                    Procedure
                      Step 1   Unlock network configuration options.
                      Step 2   Set the DHCP option to No.
                      Step 3   Scroll to the IP Address option, press Edit and enter a new IP Address.
                      Step 4   Press Validate and Save.

                      Set Subnet Mask Field

                      Procedure
                        Step 1   Unlock network configuration options.
                        Step 2   Set the DHCP option to No.
                        Step 3   Scroll to the Subnet Mask option, press Edit, and then enter a new subnet mask.
                        Step 4   Press Validate and then press Save.

                        Set Default Router Fields

                        Procedure
                          Step 1   Unlock network configuration options.
                          Step 2   Set the DHCP option to No.
                          Step 3   Scroll to the appropriate Default Router option, press Edit, and then enter a new router IP address.
                          Step 4   Press Validate.
                          Step 5   Repeat Steps 3 and 4 as needed to assign backup routers.
                          Step 6   Press Save.

                          Set DNS Server Fields

                          Procedure
                            Step 1   Unlock network configuration options.
                            Step 2   Set the DHCP option to No.
                            Step 3   Scroll to the appropriate DNS Server option, press Edit, and then enter a new DNS server IP address.
                            Step 4   Press Validate.
                            Step 5   Repeat Steps 3 and 4 as needed to assign backup DNS servers.
                            Step 6   Press Save.

                            Set DHCP Address Released Field

                            Procedure
                              Step 1   Unlock network configuration options.
                              Step 2   Scroll to the DHCP Address Released option and press Yes to release the IP address assigned by DHCP, or press No if you do not want to release this IP address.
                              Step 3   Press Save.

                              Set Alternate TFTP Field

                              Procedure
                                Step 1   Unlock network configuration options.
                                Step 2   Scroll to the Alternate TFTP option and press Yes if the phone should use an alternative TFTP server.
                                Step 3   Press Save.

                                Set TFTP Server 1 Field

                                Procedure
                                  Step 1   Unlock the CTL or ITL file if necessary (for example, if you are changing the administrative domain of the phone). If both the CTL and ITL files exist, unlock either of the files.
                                  Step 2   If DHCP is enabled, set the Alternate TFTP option to Yes.
                                  Step 3   Scroll to the TFTP Server 1 option, press Edit, and then enter a new TFTP server IP address.
                                  Step 4   Press Validate, and then press Save.

                                  Set TFTP Server 2 Field


                                  Note


                                  If you forgot to unlock the CTL or ITL file, you can change the TFTP Server 2 address in either file, then erase them by pressing Erase from the Security Configuration menu. A new CTL or ITL file downloads from the new TFTP Server 2 address.


                                  Procedure
                                    Step 1   Unlock the CTL or ITL file if necessary (for example, if you are changing the administrative domain of the phone). If both the CTL and ITL files exist, unlock either of the files.
                                    Step 2   Unlock network configuration options.
                                    Step 3   Enter an IP address for the TFTP Server 1 option.
                                    Step 4   Scroll to the TFTP Server 2 option, press Edit, and then enter a new backup TFTP server IP address.
                                    Step 5   Press Validate, and then press Save.

                                    Set DHCPv6 Field

                                    Procedure
                                      Step 1   Unlock network configuration options.
                                      Step 2   Scroll to the DHCPv6 option and press No to disable DHCP, or press Yes to enable DHCP.
                                      Step 3   Press Save.

                                      Set IPv6 Address Field

                                      Procedure
                                        Step 1   Unlock network configuration options.
                                        Step 2   Set the DHCPv6 option to No.
                                        Step 3   Scroll to the IP Address option, press Edit, and then enter a new IP Address.
                                        Step 4   Press Validate and then press Save.

                                        Set IPv6 Prefix Length Field

                                        Procedure
                                          Step 1   Unlock network configuration options.
                                          Step 2   Set the DHCPv6 option to No.
                                          Step 3   Scroll to the IPv6 Prefix Length option, press Edit, and then enter a new subnet mask.
                                          Step 4   Press Validate and then press Save.

                                          Set IPv6 Default Router 1 Field

                                          Procedure
                                            Step 1   Unlock network configuration options.
                                            Step 2   Set the DHCPv6 option to No.
                                            Step 3   Scroll to the appropriate Default Router option, press the Edit softkey, and then enter a new router IP address.
                                            Step 4   Press the Validate softkey.
                                            Step 5   Repeat Steps 3 and 4 as needed to assign the backup router.
                                            Step 6   Press the Save softkey.

                                            Set IPv6 DNS Server 1 and IPv6 DNS Server 2 Fields

                                            Procedure
                                              Step 1   Unlock network configuration options.
                                              Step 2   Set the DHCPv6 option to No.
                                              Step 3   Scroll to the appropriate DNS Server option, press Edit, and then enter a new DNS server IP address.
                                              Step 4   Press Validate.
                                              Step 5   Repeat Steps 3 and 4 as needed to assign the backup DNS server.
                                              Step 6   Press Save.

                                              Set DHCPv6 Address Released Field

                                              Procedure
                                                Step 1   Unlock network configuration options.
                                                Step 2   Scroll to the DHCPv6 Address Released option and press Yes to release the IP address assigned by DHCP, or press No if you do not want to release this IP address.
                                                Step 3   Press Save.

                                                Set IPv6 Alternate TFTP Field

                                                Procedure
                                                  Step 1   Unlock network configuration options.
                                                  Step 2   Scroll to the IPv6 Alternate TFTP option and press Yes if the phone should use an alternative TFTP server.
                                                  Step 3   Press Save.

                                                  Set IPv6 TFTP Server 1 Field

                                                  Procedure
                                                    Step 1   Unlock the CTL or ITL file if necessary. If both the CTL and ITL files exist, unlock either of the files.
                                                    Step 2   If DHCPv6 is enabled, set the Alternate TFTP option to Yes.
                                                    Step 3   Scroll to the IPv6 TFTP Server 1 option, press Edit, and then enter a new TFTP server IP address.
                                                    Step 4   Press Validate, and then press Save.

                                                    Set IPv6 TFTP Server 2 Field

                                                    Procedure
                                                      Step 1   Unlock the CTL or ITL file if necessary. If both the CTL and ITL files exist, unlock either of the files.
                                                      Step 2   Unlock network configuration options.
                                                      Step 3   Enter an IP address for the IPv6 TFTP Server 1 option.
                                                      Step 4   Scroll to the IPv6 TFTP Server 2 option, press Edit, and then enter a new backup TFTP server IP address.
                                                      Step 5   Press Validate, and then press Save.

                                                      DHCPv6 and Autoconfiguration

                                                      You can configure the IP address and other network settings (such as the TFTP server, DNS server, domain, name) on an IP phone manually or by using a router or a DHCP server to automatically assign the IP address and other network information. For more information on how the Allow Auto Configuration for Phones and DHCPv6 settings determine where the IP phone acquires the IPv6 address and other network settings, see the following table.

                                                      Table 5 Determine where a Phone Acquires its Network Settings 

                                                      DHCPv6

                                                      Auto IP configuration

                                                      How the phone acquires its IP address and network settings

                                                      Disabled

                                                      Disabled

                                                      You must manually configure an IP address and the other network settings.

                                                      Note   

                                                      When DHCPv6 is disabled, the Auto IP Configuration setting is ignored.

                                                      Disabled

                                                      Enabled

                                                      You must manually configure an IP address and the other network settings.

                                                      Note   

                                                      When DHCPv6 is disabled, the Auto IP Configuration setting is ignored.

                                                      Enabled

                                                      Disabled

                                                      The DHCP server assigns the IP address and the other network settings to the phone.

                                                      Enabled

                                                      Enabled

                                                      When the M-bit is set on the router, the O-bit is ignored. The phone can set the IPv6 address based on an IPv6 address that it received from a DHCPv6 server or the phone can acquire the IPv6 address through stateless address autoconfiguration.

                                                      When the M-bit is not set, you should set the O-bit on the router. The phone will then acquire the IPv6 address through stateless address autoconfiguration. The phone will not request an IPv6 address from the DHCPv6 server, but it will request other network configuration information.

                                                      Related Tasks
                                                      Related References

                                                      Device Configuration Menu

                                                      The Device Configuration menu provides access to nine submenus from which you can view a variety of settings that are specified in the configuration file for a phone. The phone downloads the configuration file from the TFTP server. These submenus are:

                                                      For instructions about how to access the Device Configuration menu and its submenus, see Display Settings Menu.

                                                      Unified CM Configuration Menu

                                                      The Unified CM Configuration menu contains the options Unified CM1, Unified CM2, Unified CM3, Unified CM4, and Unified CM5. These options show the Cisco Unified Communications Manager servers that are available to process from the phone, in prioritized order. To change these options, use Cisco Unified Communications Manager Administration, Cisco Unified CM Group Configuration.

                                                      For an available Cisco Unified Communications Manager server, an option on the Unified CM Configuration menu will show the Cisco Unified Communications Manager server IP address or name and one of the states shown in the following table.

                                                      Table 6 Cisco Unified Communications Manager Server States

                                                      State

                                                      Description

                                                      Active

                                                      Cisco Unified Communications Manager server from which the phone is currently receiving call-processing services

                                                      Standby

                                                      Cisco Unified Communications Manager server to which the phone switches if the current server becomes unavailable

                                                      Blank

                                                      No current connection to this Cisco Unified Communications Manager server

                                                      An option may also display one of more of the designations or icons shown in the following table.

                                                      Table 7 Cisco Unified Communications Manager Server Designations

                                                      Designation

                                                      Description

                                                      SRST

                                                      Indicates a Survivable Remote Site Telephony router that can provide Cisco Unified Communications Manager functionality with a limited feature set. This router assumes control of call processing if all other Cisco Unified Communications Manager servers become unreachable. The SRST Cisco Unified Communications Manager always appears last in the list of servers, even if it is active.

                                                      For more information, see the "Survivable Remote Site Telephony Configuration" chapter in the Cisco Unified Communications Manager Administration Guide.

                                                      TFTP

                                                      Indicates that the phone was unable to register with a Cisco Unified Communications Manager listed in its configuration file, and it registered with the TFTP server instead.

                                                      (Authentication icon)

                                                      Appears as a shield and indicates that the call is from a trusted device, and that the connection to Cisco Unified Communications Manager is authenticated. For more information about authentication, see the Cisco Unified Communications Manager Security Guide.

                                                      (Encryption icon)

                                                      Appears as a padlock and indicates that the call is from a trusted device, and that the connection to Cisco Unified Communications Manager is authenticated and encrypted. For more information about authentication and encryption, see the Cisco Unified Communications Manager Security Guide.

                                                      The Encryption icon is also displayed when a Cisco Unified IP Phone is configured as protected. For more information about protected calls, see the Cisco Unified Communications Manager Security Guide. Protected calls are not authenticated.

                                                      SIP Configuration Menu for SIP Phones

                                                      The SIP Configuration menu is available on SIP phones. This menu contains these submenus:

                                                      SIP General Configuration Menu

                                                      The SIP General Configuration menu displays information about the configurable SIP parameters on a SIP phone. The following table describes the options in this menu.

                                                      Table 8 SIP General Configuration Menu Options

                                                      Option

                                                      Description

                                                      To Change

                                                      Preferred CODEC

                                                      Displays the CODEC to use when a call is initiated. This value will always be set to none.

                                                      Display only. Cannot configure.

                                                      Out of Band DTMF

                                                      Displays the configuration of the out-of-band signaling (for tone detection on the IP side of a gateway). The Cisco Unified IP Phone (SIP) uses the AVT tone method to support out of band signaling. This value will always be set to avt.

                                                      Display only. Cannot configure.

                                                      Register with Proxy

                                                      This value will always be set to Yes.

                                                      Display only. Cannot configure.

                                                      Register Expires

                                                      Displays the amount of time, in seconds, after which a registration request expires.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > SIP Profile.

                                                      Phone Label

                                                      Displays the text that is displayed on the top right status line of the LCD on the phone. This text is for end-user display only and has no effect on caller identification or messaging. This value will always be set to null.

                                                      Display only. Cannot configure.

                                                      Enable VAD

                                                      This value is set to No by default.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > SIP Profile.

                                                      Start Media Port

                                                      Displays the start Real-Time Transport Protocol (RTP) range for media.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > SIP Profile.

                                                      End Media Port

                                                      Displays the end Real-Time Transport Protocol (RTP) range for media.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > SIP Profile.

                                                      NAT Enabled

                                                      Displays if Network Address Translation (NAT) is enabled. This value will always be set to false.

                                                      Display only. Cannot configure.

                                                      NAT Address

                                                      Displays the WAN IP address of the NAT or firewall server. This value will always be set to null.

                                                      Display only. Cannot configure.

                                                      Call Statistics

                                                      This value is set to No by default.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > SIP Profile.

                                                      Related Tasks
                                                      Related Information

                                                      Line Settings Menu for SIP Phones

                                                      The Line Settings menu displays information that relates to the configurable parameters for each of the lines on a SIP phone. The following table describes the options in this menu.

                                                      Table 9 Line Settings Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      Name

                                                      Displays the lines and the number used to register each line.

                                                      Use Cisco Unified Communications Manager Administration to modify.

                                                      Short Name

                                                      Displays the short name configured for the line.

                                                      Use Cisco Unified Communications Manager Administration to modify.

                                                      Longer Authentication Name

                                                      Displays the name used by the phone for authentication if a registration is challenged by the call control server during initialization.

                                                      The length of the SIP digest authentication name has been increased to 128 characters for Cisco Unified 7900 Series SIP phones. The authentication name is used to verify that the phone is allowed to send SIP messages (REGISTER, INVITE, and SUBSCRIBE) to Cisco Unified Communications Manager.

                                                      Use Cisco Unified Communications Manager Administration to modify.

                                                      Display Name

                                                      Displays the identification the phone uses for display for caller identification purposes.

                                                      Use Cisco Unified Communications Manager Administration to modify.

                                                      Proxy Address

                                                      The value is left blank because it does not apply to SIP phones that are using Cisco Unified Communications Manager.

                                                      Display only. Cannot configure.

                                                      Proxy Port

                                                      The value is left blank because it does not apply to SIP phones that are using Cisco Unified Communications Manager.

                                                      Display only. Cannot configure.

                                                      Shared Line

                                                      Displays if the line is part of a shared line (Yes) or not (No).

                                                      Display only. Cannot configure.

                                                      Related Tasks
                                                      Related Information

                                                      Call Preferences Menu for SIP Phones

                                                      The Call Preferences menu displays settings that relate to the settings for the call preferences on a SIP phone. The following table describes the options in this menu.

                                                      Table 10 Call Preferences Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      Caller ID Blocking

                                                      Indicates whether caller ID blocking is enabled (Yes) or disabled (No) for the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > SIP Profile.

                                                      Anonymous Call Block

                                                      Indicates whether anonymous call block is enabled (Yes) or disabled (No) for the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > SIP Profile.

                                                      Call Waiting Preferences

                                                      Displays a sub-menu that indicates whether call waiting is enabled (Yes) or disabled (No) for each line.

                                                      From Cisco Unified Communications Manager Administration, choose Call Routing > Directory Number.

                                                      Call Hold Ringback

                                                      Indicates whether the call hold ringback feature is enabled (Yes) or disabled (No) for the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > SIP Profile.

                                                      Stutter Msg Waiting

                                                      Indicates whether stutter message waiting is enabled (Yes) or disabled (No) for the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > SIP Profile.

                                                      Call Logs BLF Enabled

                                                      Indicates whether BLF for call logs is enabled (Yes) or disabled (No) for the phone.

                                                      Use Cisco Unified Communications Manager Administration.

                                                      Auto Answer Preferences

                                                      Displays a sub-menu that indicates whether auto answer is enabled (Yes) or disabled (No) for the each line.

                                                      From Cisco Unified Communications Manager Administration, choose Call Routing > Directory Number.

                                                      Speed Dials

                                                      Displays a sub-menu that displays the lines available on the phone. Select a line to see the speed dial label and number assigned to that line.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Add a New Speed Dial.

                                                      Related Tasks
                                                      Related Information

                                                      HTTP Configuration Menu

                                                      The HTTP Configuration menu displays the URLs of servers from which the phone obtains a variety of information. This menu also displays information about the idle display on the phone.


                                                      Note


                                                      Cisco Unified IP Phones do not support URLs with IPv6 addresses in the URL. This includes hostname which maps to an IPv6 address for directories, services, messages, and information URLs. If you support phone use of URLs, you must configure the phone and the servers that provide URL services with IPv4 addresses.


                                                      The following table describes the HTTP Configuration menu options.

                                                      Table 11 HTTP Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      Directories URL

                                                      URL of the server from which the phone obtains directory information.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Services URL

                                                      URL of the server from which the phone obtains Cisco Unified IP Phone services.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Messages URL

                                                      URL of the server from which the phone obtains message services.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Information URL

                                                      URL of the help text that appears on the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Authentication URL

                                                      URL that the phone uses to validate requests made to the phone web server.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Proxy Server URL

                                                      URL of proxy server, which makes HTTP requests to remote host addresses on behalf of the phone HTTP client and provides responses from the remote host to the phone HTTP client.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Idle URL

                                                      URL of an XML service that the phone displays when the phone has not been used for the time specified in the Idle URL Time option and no menu is open. For example, you could use the Idle URL option and the Idle URL Time option to display a stock quote or a calendar on the LCD screen when the phone has not been used for 5 minutes.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Idle URL Time

                                                      Number of seconds that the phone has not been used and no menu is open before the XML service specified in the Idle URL option is activated.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Locale Configuration Menu

                                                      The Locale Configuration menu displays information about the user locale and the network locale used by the phone. The following table describes the options on this menu.

                                                      Table 12 Locale Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      User Locale

                                                      User locale associated with the phone user. The user locale identifies a set of detailed information to support users, including language, font, date and time formatting, and alphanumeric keyboard text information.

                                                      For more information on user locale installation, see the Cisco Unified Communications Operating System Administration Guide.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      User Locale Version

                                                      Version of the user locale loaded on the phone.

                                                      Display only. Cannot configure.

                                                      User Locale Char Set

                                                      Character set that the phone uses for the user locale.

                                                      Display only. Cannot configure.

                                                      Network Locale

                                                      Network locale associated with the phone user. The network locale identifies a set of detailed information that supports the phone in a specific location, including definitions of the tones and cadences used by the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Network Locale Version

                                                      Version of the network locale loaded on the phone.

                                                      Display only. Cannot configure.

                                                      NTP Configuration (SIP phones only)

                                                      Provides access to the NTP Configuration Menu. For more information, see NTP Configuration Menu for SIP Phones.

                                                      Display only. Cannot configure.

                                                      NTP Configuration Menu for SIP Phones

                                                      The NTP Configuration menu displays information about the NTP server and mode configuration used by SIP phones. The following table describes the options on this menu.

                                                      Table 13 NTP Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      NTP IP Address 1

                                                      IP address of the primary NTP server.

                                                      From Cisco Unified Communications Manager Administration, choose System > Phone NTP Reference.

                                                      NTP IP Address 2

                                                      IP address of the secondary or backup NTP server.

                                                      From Cisco Unified Communications Manager Administration, choose System > Phone NTP Reference.

                                                      NTP Mode 1

                                                      Primary server mode. Supported modes are Directed Broadcast and Unicast.

                                                      From Cisco Unified Communications Manager Administration, choose System > Phone NTP Reference.

                                                      NTP Mode 2

                                                      Secondary server mode. Supported modes are Directed Broadcast and Unicast.

                                                      From Cisco Unified Communications Manager Administration, choose System > Phone NTP Reference.

                                                      UI Configuration Menu

                                                      The UI Configuration menu displays the status of various user interface features on the phone. The following table describes the options on this menu.

                                                      Table 14 UI Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      Auto Line Select

                                                      Indicates whether the phone shifts the call focus to incoming calls on all lines.

                                                      When this option is disabled, the phone only shifts the call focus to incoming calls on the line that is in use. When this option is enabled, the phone shifts the call focus to the line with the most recent incoming call.

                                                      Default: Disabled

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      BLF for Call Lists

                                                      Indicates whether the Busy Lamp Field (BLF) is enabled for call lists.

                                                      From Cisco Unified Communications Manager Administration, choose System > Enterprise Parameters.

                                                      Reverting Focus Priority

                                                      Indicates whether the phone shifts the call focus on the phone screen to an incoming call or a reverting hold call. Settings include:

                                                      Lower: Focus priority given to incoming calls.

                                                      Higher: Focus priority given to reverting calls.

                                                      Even: Focus priority given to the first call.

                                                      From Cisco Unified Communications Manager Administration, choose System > Device Pool.

                                                      See also: Hold Reversion.

                                                      Auto Call Select

                                                      Indicates whether the phone automatically shifts the call focus to an incoming call on the same line when the user is already on a call.

                                                      When this option is enabled, the phone shifts the call focus to the most recent incoming call.

                                                      When this option is disabled, all automatic focus changes, including Auto Line Select, are disabled regardless of their setting.

                                                      Default: Enabled

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      "more" Softkey Timer

                                                      Indicates the number of seconds that additional softkeys display after the user presses more. If this timer expires before the user presses another softkey, the display reverts to the initial softkeys.

                                                      Range: 5 to 30; 0 represents an infinite timer.

                                                      Default: 5

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Wideband Headset UI Control

                                                      Indicates whether the user can configure the Wideband Headset option in the phone user interface.

                                                      Values:

                                                      • Enabled: The user can configure the Wideband Headset option in the Audio Preferences menu on the phone (choose > User Preferences > Audio Preferences > Wideband Headset).
                                                      • Disabled: The value of the Wideband Headset option in Cisco Unified Communications Manager Administration gets used (see Media Configuration Menu).

                                                      Default: Enabled

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Wideband Handset UI Control

                                                      Indicates whether the user can configure the Wideband Handset option in the phone user interface.

                                                      Values:

                                                      • Enabled: The user can configure the Wideband Handset option in the Audio Preferences menu on the phone (choose > User Preferences > Audio Preferences > Wideband Handset).
                                                      • Disabled: The value of the Wideband Handset option in Cisco Unified Communications Manager Administration gets used (see Media Configuration Menu).

                                                      Default: Enabled

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Personalization

                                                      Indicates whether the phone has been enabled for configuration of custom ring tones and wallpaper images.

                                                      Default: Enabled

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Single Button Barge

                                                      Indicates whether the Single Button Barge feature is enabled for the phone.

                                                      Default: Disabled.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Enbloc Dialing (SCCP only)

                                                      Indicates whether the phone will use Enbloc dialing. If "Enabled", the phone uses Enbloc dialing when possible. If "Disabled", the phone does not use Enbloc dialing. You should disable Enbloc dialing if either Forced Authorization Codes (FAC) or Client Matter Codes (CMC) dialing is in use.

                                                      Default: Enabled

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Media Configuration Menu

                                                      The Media Configuration menu displays whether the headset, speakerphone, and video capability (SCCP phones only) are enabled on the phone. This menu also displays options for recording tones that the phone may play to indicate that a call may be recorded. The following table describes the options on this menu.

                                                      Table 15 Media Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      Headset Enabled

                                                      Indicates whether the Headset button is enabled on the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Headset Hookswitch Control Enabled (for Cisco Unified IP Phone 7975G, 7965G, and 7945G)

                                                      Indicates whether the wireless headset hookswitch feature is enabled on the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Speaker Enabled

                                                      Indicates whether the speakerphone is enabled on the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Video Capability Enabled

                                                      (SCCP phones only)

                                                      Indicates whether the phone can participate in video calls when connected to an appropriately equipped computer.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Recording Tone

                                                      Indicates whether a recording tone (often referred to as a beep tone) is enabled or disabled for the phone. If the recording tone option is enabled, the phone plays the beep tone in both directions of every call, regardless of whether the call actually gets recorded. The beep tone first sounds when a call is answered.

                                                      You may want to notify your users if you enable this option.

                                                      Default: Disabled

                                                      Related Parameters:

                                                      • Recording Tone Local Volume
                                                      • Recording Tone Remote Volume
                                                      • Recording Tone Duration

                                                      Other related parameters—Beep tone frequency in Hz, the length of the beep tone (called duration), and how often the beep tone plays (called interval)—are defined on a per-Network Locale basis in the xml file that defines tones. This xml file is usually named tones.xml or g3-tones.xml.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Recording Tone Local Volume

                                                      Indicates the loudness setting for the beep tone that is received by the party whose phone has the Recording Tone option enabled.

                                                      This setting applies for each listening device (handset, speakerphone, headset).

                                                      Range: 0 percent (no tone) to 100 percent (same level as current volume setting on the phone).

                                                      Default: 100

                                                      See also Recording Tone in this table.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Recording Tone Remote Volume

                                                      Indicates the loudness setting for the beep tone that the remote party receives. The remote party is the party who is on a call with the party whose phone has the Recording Tone option enabled.

                                                      Range: 0 percent to 100 percent. (0 percent is –66 dBM and 100 percent is –3 dBM.)

                                                      Default: 84 percent (–10 dBM)

                                                      See also Recording Tone in this table.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Recording Tone Duration

                                                      Indicates the length of time in milliseconds that the beep tone plays.

                                                      If the value you configure here is less than one third the interval, then this value overrides the default provided by the Network Locale.

                                                      Range: 0 to 3000

                                                      Note   

                                                      For some Network Locales that use a complex cadence, this setting applies only to the first beep tone.

                                                      See also Recording Tone in this table.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Wideband Headset

                                                      Indicates whether wideband is enabled or disabled for the headset.

                                                      Default: Disabled

                                                      If Wideband Headset UI Control is enabled, you or the user can use the phone and choose > User Preferences > Audio Preferences > Wideband Headset.

                                                      If Wideband Headset UI Control is disabled, from Cisco Unified Communications Manager Administration choose Device > Phone > Phone Configuration to set this value.
                                                      Note   

                                                      If you allowed this option to be user controllable (in the Wideband Headset UI Control option), the user-configured value takes precedence.

                                                      Wideband Handset

                                                      Indicates whether wideband is enabled or disabled for the handset.

                                                      Default: "Use Phone Default" on Cisco Unified Communications Manager Administration. (This default means that the phone will be enabled for a wideband handset only if the phone was shipped with a wideband handset.)

                                                      If Wideband Handset UI Control is enabled, you or the user can choose > User Preferences > Audio Preferences > Wideband Handset.

                                                      If Wideband Handset UI Control is disabled, use Cisco Unified Communications Manager Administration and choose Device > Phone > Phone Configuration to set this value.
                                                      Note   

                                                      If you allowed this option to be user controllable (in the Wideband Handset UI Control option), the user-configured value takes precedence.

                                                      Enterprise Advertise G.722 Codec

                                                      Enables/disables (enabled by default) Cisco Unified IP Phones to advertise the G.722 codec to Cisco Unified Communications Manager. For more information, see the Cisco Unified Communications Manager System Guide, “Cisco Unified IP Phones” chapter, “Codec Usage” section.

                                                      Note   

                                                      When a phone is registered with a Cisco Unified Communications Manager that does not support this setting, the default is "Disabled."

                                                      From Cisco Unified Communications Manager Administration, choose System > Enterprise Parameters.

                                                      Device Advertise G.722 Codec

                                                      Allows you to override the Enterprise Advertise G.722 Codec on a per-phone basis.

                                                      The default is "Use System Default," which means the value configured for the Enterprise Advertise G.722 Codec parameter gets used.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone.

                                                      Power Save Configuration Menu

                                                      The Power Save Configuration menu displays the settings that control the LCD phone screen turning off to conserve power. The following table describes the options on this menu.

                                                      For detailed information about these settings, see EnergyWise Setup on Cisco Unified IP Phone.

                                                      Table 16 Power Save Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      Display On Time

                                                      Time each day that the LCD screen turns on automatically (except on the days specified in the Days Display Not Active field).

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Display On Duration

                                                      Length of time that the LCD screen remains on after it turns on at the time shown in the Display On Time option.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Display Idle Timeout

                                                      Length of time that the phone is idle before the display turns off. Applies only when the display was off as scheduled and the end user turned it on (by pressing a button on the phone, touching the touchscreen, or lifting the handset).

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Days Display Not Active

                                                      Days that the display does not turn on automatically at the time specified in the Display On Time option.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Display On When Incoming Call

                                                      Indicates whether the LCD screen automatically illuminates when a call is received.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Ethernet Configuration Menu

                                                      The Ethernet Configuration menu includes the options that are described in the following table.

                                                      Table 17 Ethernet Configuration Menu Options

                                                      Option

                                                      Description

                                                      To Change

                                                      Forwarding Delay

                                                      Indicates whether the internal switch begins to forward packets between the PC port and switched port on the phone when the phone becomes active.

                                                      • When Forwarding Delay is set to disabled, the internal switch begins to forward packets immediately.
                                                      • When Forwarding Delay is set to enabled, the internal switch waits 8 seconds before it begins to forward packets between the PC port and the switch port.

                                                      Default is disabled.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Span to PC Port

                                                      Indicates whether the phone will forward packets transmitted and received on the network port to the access port.

                                                      Enable this option if an application that requires phone traffic monitoring is running on the access port. These applications include monitoring and recording applications (common in call center environments) and network packet capture tools that are used for diagnostic purposes.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Security Configuration Menu

                                                      The Security Configuration menu that you display from the Device Configuration menu displays settings that relate to security for the phone.


                                                      Note


                                                      The phone also has a Security Configuration menu that you access directly from the Settings menu. For information about the security options on that menu, see Security Configuration Menu.


                                                      The following table describes the options on the Security Configuration menu.

                                                      Table 18 Security Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      PC Port Disabled

                                                      Indicates whether the access port on the phone is enabled or disabled.

                                                      Note   

                                                      If disabled, video will not work on this phone, even if video is enabled.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      GARP Enabled

                                                      Indicates if the phone accepts MAC addresses from Gratuitous ARP responses.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Voice VLAN Enabled

                                                      Indicates whether the phone allows a device attached to the access port to access the Voice VLAN.

                                                      Setting this option to No (disabled) prevents the attached PC from sending and receiving data on the Voice VLAN. This setting also prevents the PC from receiving data that the phone sends and receives.

                                                      Set this option to Yes (enabled) if an application that requires phone traffic monitoring is running on the PC. These applications include monitoring and recording applications and network monitoring software.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Web Access Enabled

                                                      Indicates whether web access is enabled (Yes) or disabled (No) for the phone.

                                                      For more information, see Control Web Page Access.

                                                      Security Mode

                                                      Displays the security mode that is set for the phone.

                                                      Use Cisco Unified Communications Manager Administration to modify.

                                                      Logging Display

                                                      For use by the Cisco Technical Assistance Center (TAC), if necessary.

                                                      QoS Configuration Menu

                                                      The QoS Configuration menu displays information that relates to quality of service (QoS) for the phone. The following table describes the options on this menu.

                                                      Table 19 QoS Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      DSCP For Call Control

                                                      Differentiated Services Code Point (DSCP) IP classification for call control signaling.

                                                      From Cisco Unified Communications Manager Administration, choose System > Enterprise Parameters.

                                                      DSCP For Configuration

                                                      DSCP IP classification for any phone configuration transfer.

                                                      From Cisco Unified Communications Manager Administration, choose System > Enterprise Parameters.

                                                      DSCP For Services

                                                      DSCP IP classification for phone-based services.

                                                      From Cisco Unified Communications Manager Administration, choose System > Enterprise Parameters.

                                                      Related Tasks
                                                      Related References

                                                      Network Configuration Menu

                                                      The Network Configuration menu displays device-specific network configuration settings on the phone. The following table describes the options in this menu.


                                                      Note


                                                      The phone also has a Network Configuration menu that you access directly from the Settings menu. For information about the options on that menu, see Network Configuration Menu.


                                                      Table 20 Network Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      Load Server

                                                      Used to optimize installation time for phone firmware upgrades and offload the WAN by storing images locally, which negates the need to traverse the WAN link for each phone upgrade.

                                                      You can set the Load Server to another TFTP server IP address or name (other than the TFTP Server 1 or TFTP Server 2) from which the phone firmware can be retrieved for phone upgrades. When the Load Server option is set, the phone contacts the designated server for the firmware upgrade.

                                                      Note   

                                                      The Load Server option allows you to specify an alternate TFTP server for phone upgrades only. The phone continues to use TFTP Server 1 or TFTP Server 2 to obtain configuration files. The Load Server option does not provide management of the process and of the files, such as file transfer, compression, or deletion.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      RTP Control Protocol

                                                      Indicates whether the phone supports the Real-Time Control Protocol (RTCP). Settings include:

                                                      • Enabled
                                                      • Disabled (default)

                                                      If this feature is disabled, several call statistic values display as 0. For more information, see the following sections:

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      CDP: PC Port

                                                      Indicates whether CDP is enabled on the PC port (default is enabled).

                                                      Enable CDP on the PC port when Cisco VT Advantage/Unified Video Advantage (CVTA) is connected to the PC port. CVTA does not work without CDP interaction with the phone.

                                                      Note   

                                                      When CDP is disabled in Cisco Unified Communications Manager, a warning displays to indicate that disabling CDP on the PC port prevents CVTA from working.

                                                      The current PC and switch port CDP values are shown on the Settings menu.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone.

                                                      CDP: SW Port

                                                      Indicates whether CDP is enabled on the switch port (default is enabled).

                                                      • Enable CDP on the switch port for VLAN assignment for the phone, power negotiation, QoS management, and 802.1x security.
                                                      • Enable CDP on the switch port when the phone is connected to a Cisco switch.
                                                      Note   

                                                      When CDP is disabled in Cisco Unified Communications Manager, a warning displays to indicate that CDP should be disabled on the switch port only if the phone connects to a non-Cisco switch.

                                                      The current PC and switch port CDP values are shown on the Settings menu.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone.

                                                      Peer Firmware Sharing

                                                      The Peer Firmware Sharing feature provides these advantages in high speed campus LAN settings:

                                                      • Limits congestion on TFTP transfers to centralized remote TFTP servers.
                                                      • Eliminates the need to manually control firmware upgrades.
                                                      • Reduces phone downtime during upgrades when large numbers of devices are reset.

                                                      Peer Firmware Sharing may also aid in firmware upgrades in branch/remote office deployment scenarios over bandwidth-limited WAN links.

                                                      Enabling this setting allows the phone to discover similar phones on the subnet that are requesting the files that make up the firmware image, and to automatically assemble transfer hierarchies on a per-file basis. Only the root phone in the hierarchy retrieves the individual files that make up the firmware image from the TFTP server, and then the files are transferred down the transfer hierarchy to the other phones on the subnet by using TCP connections.

                                                      This menu option indicates whether the phone supports peer firmware sharing. Settings include:

                                                      • Enabled (default)
                                                      • Disabled

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone >  Phone Configuration.

                                                      Log Server

                                                      Indicates the IP address and port of the remote logging machine to which the phone sends log messages. These log messages help to debug the peer to peer image distribution feature.

                                                      Note   

                                                      The remote logging setting does not affect the sharing log messages that are sent to the phone log.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      LLDP: PC Port

                                                      Enables and disables Link Layer Discovery Protocol (LLDP) on the PC port. Use this setting to force the phone to use a specific discovery protocol. Settings include:

                                                      • Enabled (default)
                                                      • Disabled

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      LLDP-MED: SW Port

                                                      Enables and disables Link Layer Discovery Protocol Media Endpoint Discovery (LLDP-MED) on the switch port. Use this setting to force the phone to use a specific discovery protocol, which should match the protocol supported by the switch. Settings include:

                                                      • Enabled (default)
                                                      • Disabled

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      LLDP Asset ID

                                                      Identifies the asset ID assigned to the phone for inventory management.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Wireless Headset Hookswitch Control

                                                      Enables users to receive notifications of incoming calls and answer or end calls while they work in a wireless environment.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      LLDP Power Priority

                                                      Advertises the phone power priority to the switch, which enables the switch to appropriately provide power to the phone. Settings include:

                                                      • Unknown (default)
                                                      • Low
                                                      • High
                                                      • Critical

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      IP Addressing Mode

                                                      Displays the IP addressing mode that is available on the phone. IPv4 only, IPv6 only, or IPv4 and IPv6.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > Common Device Configuration.

                                                      IP Preference Mode Control

                                                      Indicates the IP address version that the phone uses during signaling with Cisco Unified Communications Manager when both IPv4 and IPv6 are available on the phone.

                                                      The IP addressing mode preference is configured on Cisco Unified Communications Manager Administration.

                                                      Displays one of the following options on the phone:

                                                      • IPv4: The dual-stack phone prefers to establish a connection via an IPv4 address during a signaling event.
                                                      • IPv6: The dual-stack phone prefers to establish a connection via an IPv6 address during a signaling event.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > Common Device Configuration.

                                                      Auto IP Configuration

                                                      Displays whether the auto configurations is enabled or disabled on the phone.

                                                      The Auto IP Configuration setting along with the DHCPv6 setting determine how the IP phone obtains the IPv6 address and other network settings. For more information on how these two settings affect the network settings on the phone, see DHCPv6 and Autoconfiguration.

                                                      Note   

                                                      Use the "Allow Auto Configuration for Phones" setting in Cisco Unified Communications Manager Administration.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Device Settings > Common Device Configuration.

                                                      IPv6 Load Server

                                                      Used to optimize installation time for phone firmware upgrades and offload the WAN by storing images locally, which negates the need to traverse the WAN link for each phone upgrade.

                                                      You can set the Load Server to another TFTP server IP address or name (other than the IPv6 TFTP Server 1 or IPv6 TFTP Server 2) from which the phone firmware can be retrieved for phone upgrades. When the Load Server option is set, the phone contacts the designated server for the firmware upgrade.

                                                      Note   

                                                      The Load Server option allows you to specify an alternate TFTP server for phone upgrades only. The phone continues to use IPv6 TFTP Server 1 or IPv6 TFTP Server 2 to obtain configuration files. The Load Server option does not provide management of the process and of the files, such as file transfer, compression, or deletion.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      IPv6 Log Server

                                                      Indicates the IP address and port of the remote logging machine to which the phone sends log messages. These log messages help to debug the peer to peer image distribution feature.

                                                      Note   

                                                      The remote logging setting does not affect the sharing log messages that are sent to the phone log.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      Related Tasks
                                                      Related References

                                                      Security Configuration Menu

                                                      The Security Configuration that you access directly from the Settings menu provides information about various security settings. It also provides access to the Trust List menu. This menu indicates if the CTL or ITL file is installed on the phone.

                                                      For information about how to access the Security Configuration menu and its submenus, see Display Settings Menu.


                                                      Note


                                                      The phone also has a Security Configuration menu that you access from the Device menu. For information about the security options on that menu, see Security Configuration Menu.


                                                      The following table describes the options in the security configuration menu.

                                                      Table 21 Security Configuration Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      Web Access Enabled

                                                      Indicates whether web access is enabled (Yes) or disabled (No) for the phone.

                                                      For more information, see Control Web Page Access.

                                                      Security Mode

                                                      Displays the security mode that is set for the phone.

                                                      From Cisco Unified Communications Manager Administration, choose Device > Phone > Phone Configuration.

                                                      MIC

                                                      Indicates whether a manufacturing installed certificate (used for the security features) is installed on the phone (Yes) or is not installed on the phone (No).

                                                      For information about how to manage the MIC for your phone, see the "Using the Certificate Authority Proxy Function" chapter in the Cisco Unified Communications Manager Security Guide.

                                                      LSC

                                                      Indicates whether a locally significant certificate (used for the security features) is installed on the phone (Yes) or is not installed on the phone (No).

                                                      For information about how to manage the LSC for your phone, see the "Using the Certificate Authority Proxy Function" chapter in the Cisco Unified Communications Manager Security Guide.

                                                      Trust List

                                                      The Trust List is a top-level menu that provides submenus for the CTL, ITL, and Signed Configuration files.

                                                      The CTL File submenu displays the contents of the CTL file. The ITL File submenu displays contents of the ITL file. The CTL and ITL files submenus also display the MD5 hash of the file. The MD5 hash value from the phone can be compared with the MD5 hash value of the file from the TFTP server to verify if the correct file is installed on the phone.

                                                      The Signed Configuration File submenu displays the SRST certificate that is installed via the authenticated digitally signed configuration file.

                                                      For more information, see Trust List Menu.

                                                      802.1X Authentication

                                                      Allows you to enable 802.1X authentication for this phone.

                                                      See 802.1X Authentication and Status Menus.

                                                      802.1X Authentication Status

                                                      Displays real-time status progress of the 802.1X authentication transaction.

                                                      Display only. Cannot configure.

                                                      VPN Configuration

                                                      Allows you to configure VPN configuration for this phone.

                                                      (Supported only for the Cisco Unified IP Phone 7945G, 7965G, and 7975G.)

                                                      For more information, see the “Configuring Virtual Private Networks” chapter in Cisco Unified Communications Manager Security Guide.

                                                      CTL File Submenu

                                                      The CTL File screen includes the options that are described in the following table.

                                                      If a CTL file is installed on the phone, you can access the CTL File menu by pressing the Settings button and choosing Security Configuration > Trust List.

                                                      Table 22 CTL File Menu Options

                                                      Option

                                                      Description

                                                      To change

                                                      CTL File

                                                      Displays the MD5 hash of the CTL file that is installed in the phone. If security is configured for the phone, the CTL file installs automatically when the phone reboots or resets.

                                                      • A locked padlock icon in this option indicates that the CTL file is locked.
                                                      • An unlocked padlock icon indicates that the CTL file is unlocked.

                                                      For more information about the CTL file, see the "Configuring the Cisco CTL Client" chapter in theCisco Unified Communications Manager Security Guide.

                                                      CAPF Server

                                                      Common Name (from the Cisco Unified Communications Manager Certificate) of the CAPF used by the phone. Also displays a certificate icon if a certificate is installed for this server.

                                                      For more information about this server, see the "Using the Certificate Authority Proxy Function" chapter in the Cisco Unified Communications Manager Security Guide.

                                                      Unified CM/TFTP Server

                                                      Common Name (from the Cisco Unified Communications Manager Certificate) of a Cisco Unified Communications Manager and TFTP server used by the phone. Also displays a certificate icon if a certificate is installed for this server.

                                                      If the certificate of the TFTP (TFTP Server 1) or the backup TFTP (TFTP Server 2) is not in the CTL or ITL file, one of the files must be unlocked.

                                                      For information about these options, see Network Configuration Menu.

                                                      Application Server

                                                      Common Name (from the Cisco Unified Communications Manager Certificate) of the trusted application server used by the phone. Also displays a certificate icon.

                                                      A phone-trust certificate is used to authenticate application servers with which the phone communicates.

                                                      One Application Server menu item appears for each phone-trust store whose certificates have been uploaded into Cisco Unified OS Administration and later downloaded into the phone CTL file.

                                                      For more information about phone-trust certificates, see the following documents:

                                                      • Cisco Unified Communications Operating System Administration Guide, “Security” chapter
                                                      • Cisco Unified Communications Manager Security Guide, “Security Overview” chapter

                                                      Unlock CTL and ITL Files

                                                      To unlock the CTL and ITL files from the Security Configuration menu, perform these steps:

                                                      Procedure
                                                        Step 1   Press **# to unlock options on the overall setting menu of the Cisco Unified IP Phone.
                                                        Step 2   Select Trust List > CTL or ITL file depending on which file is installed in your phone.
                                                        Note   

                                                        If both CTL and ITL files are installed in your phone, you can choose either option.

                                                        Step 3   Press Unlock to unlock Trust List files on the phone. The CTL or ITL files, if installed on your phone, will be unlocked together.
                                                        Note   

                                                        When you press Unlock, the softkey changes to Lock. If you decide not to change the TFTP server option, press Lock to lock the CTL file.


                                                        ITL File Submenu

                                                        The ITL File screen includes the options that are described in the following table.

                                                        If an ITL file is installed on the phone, you can access the ITL File submenu by pressing the Settings button and choosing Security Configuration > Trust List.


                                                        Note


                                                        The TFTP server generates the ITL file. The Trust Verification Service does not generate the ITL file, as done in previous releases.


                                                        Table 23 ITL File Menu Options

                                                        Option

                                                        Description

                                                        To change

                                                        ITL File

                                                        Displays the MD5 hash of the Identity Trust List (ITL) file that is installed in the phone. If security is configured for the phone, the ITL file installs automatically when the phone reboots or resets.

                                                        • A locked padlock icon in this option indicates that the ITL file is locked.
                                                        • An unlocked padlock icon indicates that the ITL file is unlocked.

                                                        For more information about the ITL file, see the "Configuring the Cisco ITL Client" chapter in the Cisco Unified Communications Manager Security Guide.

                                                        CAPF Server

                                                        Common Name (from the Cisco Unified Communications Manager Certificate) of the CAPF used by the phone. Also displays a certificate icon if a certificate is installed for this server.

                                                        For more information about this server, see the "Using the Certificate Authority Proxy Function" chapter in the Cisco Unified Communications Manager Security Guide.

                                                        Unified CM/TFTP Server

                                                        Common Name (from the Cisco Unified Communications Manager Certificate) of a Cisco Unified Communications Manager and TFTP server used by the phone. Also displays a certificate icon if a certificate is installed for this server.

                                                        If neither the certificate of TFTP (TFTP Server 1) nor the certificate of backup TFTP (TFTP Server 2) is not in the CTL or ITL file, you must unlock the CTL file or the ITL file.

                                                        For information about changing these options, see Network Configuration Menu.

                                                        Application Server

                                                        Common Name (from the Cisco Unified Communications Manager Certificate) of the trusted application server used by the phone.

                                                        Also displays a certificate icon.

                                                        A phone-trust certificate is used to authenticate application servers with which the phone communicates.

                                                        One Application Server menu item appears for each phone-trust store whose certificates have been uploaded into Cisco Unified OS Administration and later downloaded into the Phone ITL file.

                                                        For more information about phone-trust certificates, see the following documents:

                                                        • Cisco Unified Communications Operating System Administration Guide, “Security” chapter
                                                        • Cisco Unified Communications Manager Security Guide, “Security Overview” chapter

                                                        Trust Verification Service Server

                                                        Common Name (from the Cisco Unified Communications Manager Certificate) of the trusted application server used by the phone.

                                                        Also displays a certificate icon.

                                                        A phone-trust TVS certificate is used to authenticate TVS servers with which the phone communicates. There can be more than one entry for the TVS servers.

                                                        For more information, see the Cisco Unified Communications Manager System Administrator Guide.

                                                        Trust List Menu

                                                        The Trust List menu provides a top-level menu that contains the CTL, ITL, and the Signed Configuration submenus. The content of the Signed Configuration file is SRST.

                                                        The Trust List menu displays information about all of the servers that the phone trusts and includes the options that are described in the following table.

                                                        Table 24 Trust List Menu Options

                                                        Option

                                                        Description

                                                        To change

                                                        CAPF Server

                                                        Common Name (from the Cisco Unified Communications Manager Certificate) of the CAPF server used by the phone. Also displays a certificate icon if a certificate is installed for this server.

                                                        For more information about these settings, see the "Configuring the Cisco ITL Client" chapter in the Cisco Unified Communications Manager Security Guide.

                                                        Unified CM/TFTP Server

                                                        Common Name (from the Cisco Unified Communications Manager Certificate) of a Cisco Unified Communications Manager and the TFTP server used by the phone. Also displays a certificate icon if a certificate is installed for this server.

                                                        For more information about these settings, see the "Configuring the Cisco ITL Client" chapter in the Cisco Unified Communications Manager Security Guide.

                                                        SRST Router

                                                        Common Name (from the Cisco Unified Communications Manager Certificate) of the trusted SRST router that is available to the phone, if such a device has been configured in Cisco Unified Communications Manager Administration. Also displays a certificate icon if a certificate is installed for this server.

                                                        For more information about these settings, see the "Configuring the Cisco ITL Client" chapter in the Cisco Unified Communications Manager Security Guide.

                                                        Application Server

                                                        Common Name (from the Cisco Unified Communications Manager Certificate) of the trusted application server used by the phone. Also displays a certificate icon.

                                                        A phone-trust certificate is used to authenticate application servers with which the phone communicates.

                                                        One Application Server menu item appears for each phone-trust store whose certificates have been uploaded into Cisco Unified OS Administration and later downloaded into the Cisco Unified IP Phone CTL file.

                                                        For more information about phone-trust certificates, see the following documents:

                                                        • Cisco Unified Communications Operating System Administration Guide, “Security” chapter
                                                        • Cisco Unified Communications Manager Security Guide, “Security Overview” chapter

                                                        TVS Server

                                                        Common Name (from the Cisco Unified Communications Manager Certificate) of the trusted application server used by the phone.

                                                        Also displays a certificate icon.

                                                        A phone-trust TVS certificate is used to authenticate TVS servers with which the phone communicates. There can be more than one entry for the TVS servers.

                                                        For more information, see the Cisco Unified Communications Manager System Administrator Guide.

                                                        802.1X Authentication and Status Menus

                                                        The 802.1X Authentication and 802.1X Authentication Status menus allow you to enable 802.1X authentication and monitor the progress. These options are described in the following tables.

                                                        You can access the 802.1X Authentication settings by pressing the Settings button and choosing Security Configuration > 802.1X Authentication. To exit this menu, press Exit.

                                                        Table 25 802.1X Authentication Menu Options

                                                        Option

                                                        Description

                                                        To change

                                                        Device Authentication

                                                        Determines whether 802.1X authentication is enabled:

                                                        • Enabled: Phone uses 802.1X authentication to request network access.
                                                        • Disabled: Default setting in which the phone uses CDP to acquire VLAN and network access.

                                                        Voice Quality Troubleshooting Tips

                                                        EAP-MD5

                                                        Specifies a password for use with 802.1X authentication using the following menu options that are described in the following rows:

                                                        • Device ID
                                                        • Shared Secret
                                                        • Realm

                                                        Choose Settings > Security Configuration > 802.1X Authentication > EAP-MD5.

                                                        Device ID: Derivative of the phone model number and unique MAC address displayed in this format: CP-<model>-SEP-<MAC>

                                                        Display only. Cannot configure.

                                                        Shared Secret: Choose a password to use on the phone and on the authentication server. The password must be between 6 and 32 characters in length and can consist of any combination of numbers or letters.

                                                        Note   

                                                        If you disable 802.1X authentication or perform a factory reset of the phone, the shared secret is deleted.

                                                        Set EAP-MD5 Shared Secret Field

                                                        See Cisco Unified IP Phone Security Problems for recovery of a deleted shared secret.

                                                        Realm: Indicates the user network domain, always set as Network.

                                                        Display only. Cannot configure.

                                                        To access the 802.1X Authentication Real-Time menu, press the Settings button and choose Security Configuration > 802.1X Authentication Status. To exit this menu, press Exit.

                                                        Table 26 802.1X Authentication Status Menu Options

                                                        Option

                                                        Description

                                                        To change

                                                        802.1X Authentication Status

                                                        Real-time progress of the 802.1X authentication status. Displays one of the following states:

                                                        • Disabled: 802.1X is disabled and the transaction was not attempted.
                                                        • Disconnected: Physical link is down or is disconnected.
                                                        • Connecting: System is trying to discover or acquire the authenticator.
                                                        • Acquired: Authenticator has been acquired. System is waiting for authentication to begin.
                                                        • Authenticating: Authentication is in progress.
                                                        • Authenticated: Authentication was successful or implicit authentication occurred due to timeouts.
                                                        • Held: Authentication failed. System is waiting before next attempt (approximately 60 seconds).

                                                        Display only. Cannot configure.

                                                        Set Device Authentication Field

                                                        Procedure
                                                          Step 1   Choose Settings > Security Configuration > 802.1X Authentication > Device Authentication.
                                                          Step 2   Set the Device Authentication option to Enabled or Disabled.
                                                          Step 3   Press Save.

                                                          Set EAP-MD5 Shared Secret Field

                                                          See Cisco Unified IP Phone Security Problems for recovery of a deleted shared secret.

                                                          Procedure
                                                            Step 1   Choose EAP-MD5 > Shared Secret.
                                                            Step 2   Enter the shared secret.
                                                            Step 3   Press Save.

                                                            VPN Configuration Menu

                                                            The VPN Configuration menu allows you to enable a virtual private network (VPN) connection that uses Secure Sockets Layer (SSL) when a phone is located outside a trusted network or when network traffic between the phone and Cisco Unified Communications Manager crosses untrusted networks.


                                                            Note


                                                            VPN Client is supported only for the Cisco Unified IP Phone 7945G, 7965G, and 7975G.


                                                            Your system administrator configures the VPN Client feature as needed. If it is enabled and the VPN Client mode is enabled on the phone, you are prompted for your credentials as follows:

                                                            • If your phone is located outside the corporate network:
                                                              • You are prompted at login to enter your credentials based on the authentication method that your system administrator configured on your phone.
                                                            • If your phone is located inside the corporate network:
                                                              • If Auto Network Detection is disabled, you are prompted for credentials, and a VPN connection is possible.
                                                              • If Auto Network Detection is enabled, you cannot connect through VPN so you are not prompted.

                                                            Connect to VPN

                                                            Use this procedure to access the VPN Configuration settings and connect through VPN.

                                                            Procedure
                                                              Step 1   Press Settings and choose Security Configuration > VPN Configuration.
                                                              Step 2   After the phone starts up and the VPN Login screen appears, enter your credentials based on the configured authentication method:
                                                              1. Username and password: Enter your username and the password that your system administrator gave you.
                                                              2. Password and certificate: Enter the password that your system administrator gave you. Your username is derived from the certificate.
                                                              3. Certificate: If the phone uses only a certificate for authentication, you do not need to enter authentication data. The VPN Login screen displays the status of the phone that is attempts the VPN connection.
                                                                Note   

                                                                When the power is lost or in some scenarios when the phone is reset, all stored credentials are removed.

                                                              Step 3   To establish the VPN connection, press Submit.
                                                              Step 4   To disable the VPN login process, press Cancel.

                                                              VPN Configuration Fields

                                                              The following table shows the VPN Configuration menu options on the Cisco Unified IP Phone.

                                                              Table 27 VPN Configuration Menu Options

                                                              Option

                                                              Description

                                                              To change

                                                              VPN

                                                              Determines whether the VPN Client is enabled or disabled:

                                                              • Enable: Enables VPN feature. (When enabled, the Disable softkey is shown.)
                                                              • Disable: Disables VPN feature. (When disabled, the Enable softkey is shown.)

                                                              Settings do not have to be unlocked to set this option.

                                                              1. Choose Settings > Security Configuration > VPN Configuration > VPN.
                                                              2. Set the VPN option to Enabled or Disabled.

                                                              If the feature is disabled on Cisco Unified Communications Manager, this option is disabled.

                                                              Clear Username and Password

                                                              Clears the current username and password.

                                                              The option is inactive when the authentication method is certificate only, or if the feature is disabled on Cisco Unified Communications Manager.

                                                              Auto Network Detection

                                                              Shows whether option is Enabled or Disabled.

                                                              Display only. Configured on Cisco Unified Communications Manager.

                                                              Concentrator 1

                                                              Allows you to see if concentrator 1, 2, or 3 is Connected or Inactive and view the concentrator details.

                                                              In the VPN Configuration menu, choose Concentrator 1, Concentrator 2, or Concentrator 3, as desired:

                                                              • For a configured concentrator, a status of Connected or Inactive is shown on the VPN Configuration screen.
                                                              • For an unconfigured concentrator, no status is shown, and the Select softkey is inactive.

                                                              For configured concentrators, press Select to view concentrator details.

                                                              A new screen appears that has a title of "Concentrator X," where X is the concentrator number. The URL configured for the concentrator is displayed in the window with the link to the URL on the first line and the URL itself on the second line.

                                                              Concentrator 2

                                                              Concentrator 3

                                                              Authentication Mode

                                                              Shows the authentication method:

                                                              • Certificate
                                                              • Username and Password
                                                              • Password and Certificate

                                                              Display only. Configured on Cisco Unified Communications Manager.

                                                              Encryption Method

                                                              Shows the encryption method if the VPN tunnel is connected:

                                                              • AES128-SHA
                                                              • AES256-SHA
                                                              • DES-CBC3-SHA

                                                              If VPN is not connected, no method is shown.

                                                              Displays the encryption method only if a VPN tunnel is connected; otherwise, no value displays.