-
Cisco IP Phone Model 7960G and 7940G Administration Guide for Cisco CallManager Release 4.1
-
Preface
-
An Overview of the Cisco IP Phone
-
Preparing to Install the Cisco IP Phone on Your Network
-
Setting Up the Cisco IP Phone
-
Configuring Network Settings on the Cisco IP Phone
-
Configuring Features, Templates, Services, and Users
-
Viewing Model Information, Status, Statistics, and Security Information on the Cisco IP Phone
-
Monitoring the Cisco IP Phone Remotely
-
Troubleshooting the Cisco IP Phone
-
Providing Information to Users Via a Website
-
Supporting International Users
-
Technical Specifications
-
Index
-
Table Of Contents
An Overview of the Cisco IP Phone
Understanding the Cisco IP Phone Models 7960G and 7940G
What Networking Protocols Are Used?
What Features are Supported on the Cisco IP Phone Models 7960G and 7940G?
Configuring Telephony Features
Configuring Network Features Using the Cisco IP Phone
Providing Users with Feature Information
Understanding Security Features for Cisco IP Phones
Overview of Supported Security Features
Identifying Encrypted and Authenticated Phone Calls
CAPF Interaction when the Phone Resets
Unlocking and Locking Configuration Options
Determining the MAC Address of a Cisco IP Phone
An Overview of the Cisco IP Phone
The Cisco IP Phone is a full-featured telephone that provides voice communication over an Internet Protocol (IP) network. It functions much like a traditional analog telephone, allowing you to place and receive phone calls and to access features such as mute, hold, transfer, and speed dial. In addition, because the phone is connected to your data network, it offers enhanced IP telephony features, including access to network information and services, and customizeable features and services. The phone also supports security features that include file authentication, device authentication, signaling encryption, and media encryption.
This manual describes the Cisco IP Phone 7960G and the Cisco IP Phone 7940G. These phones support G.711, G.729, G.729a, G.729b, G.729ab, and wideband (16bits, 16kHz) audio compression.
A Cisco IP Phone, like other network devices, must be configured and managed.
This chapter includes the following topics:
•
Understanding the Cisco IP Phone Models 7960G and 7940G
•
•
•
•
•
Caution
Understanding the Cisco IP Phone Models 7960G and 7940G
The Cisco IP Phone models 7960G and 7940G are full-featured, multiline telephones. They function as managerial-level office telephones, replacing traditional analog telephones in an IP telephony network.
The Cisco IP Phone models 7960G and 7940G differ only in the number of available line or speed dial buttons. The Cisco IP Phone 7940G has two lines, and the 7960G has six lines.
The main components of both models are illustrated in and Figure 1-1 and Figure 1-2, and explained in the table that follows these figures.
Figure 1-1 Cisco IP Phone 7960G
Figure 1-2 Cisco IP Phone 7940G
What Networking Protocols Are Used?
Cisco IP Phones support several industry-standard and Cisco networking protocols required for voice communication. Table 1-1 provides an overview of the networking protocols that the Cisco IP Phone models 7960G and 7940G support.
Related Topics
•
•
•
What Features are Supported on the Cisco IP Phone Models 7960G and 7940G?
The Cisco IP Phone models 7960G and 7940G function much like traditional analog phones, allowing you to place and receive telephone calls. In addition to traditional telephony features, the Cisco IP Phone includes features that enable you to administer and monitor the phone as a network device.
This section covers the following topics:
•
•
•
Feature Overview
Cisco IP Phones provide traditional telephony functionality, such as call forwarding and transferring, redialing, speed dialing, conference calling, and voice messaging system access. Cisco IP phones also provide a variety of other features. For an overview of the telephony features that the Cisco IP Phone supports and for tips on configuring them, see the "Configuring Telephony Features Using Cisco CallManager" section.
Like other network devices, you must configure the Cisco IP Phones to prepare them to access Cisco CallManager and the rest of the IP network. By using DHCP, you will have fewer settings to configure on the phone, but the phone allows you to manually configure the IP address, TFTP server, and subnet mask if your network requires it. For instructions on configuring the network settings on the Cisco IP Phones, see "Configuring Network Settings on the Cisco IP Phone."
The Cisco IP Phone can interact with other services and devices on your IP network to provide enhanced functionality. For example, you can integrate the Cisco IP Phones with the corporate Lightweight Directory Access Protocol 3 (LDAP3) standard directory to enable users to search for co-worker contact information directly from their IP phones. You can also use XML to enable users to access information such as weather, stocks, quote of the day, and other web-based information. For information about configuring such services, see the "Configuring Corporate Directories" section and the "Setting Up Services" section.
Finally, because the Cisco IP Phone is a network device, you can obtain detailed status information from it directly. This information can assist you with troubleshooting any problems users might encounter when using their IP phones. See "Viewing Model Information, Status, Statistics, and Security Information on the Cisco IP Phone," for more information.
Related Topics
•
•
•
Configuring Telephony Features
You can modify additional settings for the Cisco IP Phone from the Cisco CallManager Administration application. Use this web-based application to set up phone registration criteria and calling search spaces, to configure corporate directories and services, and to modify phone button templates, among other tasks. See the "Configuring Telephony Features Using Cisco CallManager" section.
In some places, this manual provides partial instructions for procedures that involve Cisco CallManager Administration. These instructions are intended to point you to the appropriate page in the Cisco CallManager application and to provide some initial guidance.
For more information about the Cisco CallManager Administration application, refer to Cisco CallManager documentation, including Cisco CallManager Administration Guide. You can also use the context-sensitive help available within the application for guidance.
You can access the complete Cisco CallManager documentation suite at this location:
http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/index.htm
Related Topic
•
Configuring Network Features Using the Cisco IP Phone
You can configure features such as DHCP, TFTP, and IP settings on the phone itself. You can also obtain statistics about a current call or firmware versions on the phone.
For more information about configuring features and viewing statistics from the phone, see "Configuring Network Settings on the Cisco IP Phone" and see "Viewing Model Information, Status, Statistics, and Security Information on the Cisco IP Phone."
Related Topics
•
•
Providing Users with Feature Information
If you are a system administrator, you are likely the primary source of information for Cisco IP Phone users in your network or company. To ensure that you distribute the most current feature and procedural information, familiarize yourself with Cisco IP Phone documentation. Make sure to visit the Cisco IP Phone web site:
http://www.cisco.com/univercd/cc/td/doc/product/voice/c_ipphon/index.htm.
From this site, you can view various user guides. For complete ordering information, see the "Obtaining Documentation" section.
In addition to providing documentation, it is important to inform users of available Cisco IP Phone features—including those specific to your company or network—and of how to access and customize those features, if appropriate.
For a summary of some of the key information that phone users need their system administrators to provide, see "Providing Information to Users Via a Website."
Understanding Security Features for Cisco IP Phones
Implementing security in the Cisco CallManager system protects against data tampering threats and identity theft of the phones. To alleviate these threats, the Cisco IP telephony network establishes and maintains authenticated and encrypted communication streams between the phones and the server and digitally signs files before they are transferred to phones.
Table 1-2 shows where you can find additional information about security in this and other documents.
Table 1-2 Cisco IP Phone and Cisco CallManager Security Topics
Detailed explanation of security, including set up, configuration, and troubleshooting information for Cisco CallManager and Cisco IP Phones
Refer to Cisco CallManager Security Guide
Security features supported on the Cisco IP Phone
Restrictions regarding security features
See the "Security Restrictions" section
How CAPF interacts with a phone when the phone resets
Identifying phone calls for which security is implemented
See the "Identifying Encrypted and Authenticated Phone Calls" section
TLS connection
Security and the phone startup process
Security and phone configuration files
Configuring a locally significant certificate (LSC) on the phone
See the "Configuring Security on the Cisco IP Phone" section
Understanding security icons in the CallManager 1 through CallManager 5 options in the Network Configuration Menu on the phone
Security items on the Security Configuration Menu on the phone
Changing the TFTP Server 1 option on the phone when security is implemented
See the "CTL File Menu" section
Removing a certificate trust list (CTL) file from the phone
See the "CTL File Menu" section
Security items on the Trust List menu on the phone
See the "Trust List Menu" section
Disabling access to a phone's web pages
Troubleshooting
•
•
Resetting or restoring the phone
Overview of Supported Security Features
This section provides an overview of the security features that the phone supports. For more information about these features and about Cisco CallManager and Cisco IP Phone security, refer to Cisco CallManager Security Guide.
Also refer to Cisco CallManager Security Guide to obtain a list of interactions, restrictions, and limitations for security.
For information about current security settings on a phone, choose Settings > Security Configuration. For more information, see the Security Configuration Menu.
Note
•
•
•
•
•
•
•
•
•
The phone will display the status of the CAPF session. If a communication error or a power failure occurs while the phone is connecting to the CAPF server, the phone will automatically attempt to connect again.
•
–
–
–
–
–
Note
Related Topics
•
•
•
Identifying Encrypted and Authenticated Phone Calls
When security is implemented for a phone, you can identify authenticated or encrypted phone calls by icons on the phone LCD screen.
In an authenticated call, all devices participating in the establishment of the call are authenticated by the Cisco CallManager. When a call in progress is authenticated end-to-end, the call progress icon to the right of the call duration timer in the phone LCD screen changes to the following icon:
When the media stream between the Cisco IP devices is authenticated and encrypted, the call progress icon to the right of the call duration timer in the phone LCD screen changes to the following icon. This icon may not appear when you perform tasks such as conferencing, transferring, or putting a call on hold. The security status of a call changes from encrypted to nonsecure if the media streams that are associated with these tasks are not encrypted.
Note
Related Topic
•
•
Security Restrictions
The following restrictions apply to encrypted calls:
•
•
If the initiator phone is configured for encryption, the barge initiator can barge into an authenticated or nonsecure call from the encrypted phone. After the barge occurs, Cisco CallManager classifies the call as nonsecure.
If the initiator phone is configured for encryption, the barge initiator can barge into an encrypted call, and the phone indicates that the call is encrypted.
A user can barge into an authenticated call, even if the phone that is used to barge is nonsecure. The authentication icon continues to appear on the authenticated devices in the call, even if the initiator phone does not support security.
CAPF Interaction when the Phone Resets
The following examples describe how CAPF interacts with the Cisco IP Phone when the phone is reset by a user or by Cisco CallManager. In these examples, if an LSC does not already exist in the phone and if By Existing Certificate is selected for the CAPF Authentication Mode, the CAPF certificate operation will fail.
Example 1
In this example the phone is reset after you configure the Device Security Mode to Nonsecure and the CAPF Authentication Mode to By Null String or By Existing Certificate (Precedence...). After the phone resets, it immediately registers with the primary Cisco CallManager and receives the configuration file. The phone then automatically initiates a session with CAPF to download the LSC. After the LSC exists in the phone, configure the Device Support Mode to Authenticated or Encrypted.
Example 2
In this example, the phone is reset after you configure the Device Security Mode to Authenticated or Encrypted and the CAPF Authentication Mode to By Null String or By Existing Certificate (Precedence...). The phone does not register with the primary Cisco CallManager until the CAPF session ends and the phone has installed the LSC. After the session ends, the phone registers and immediately runs in authenticated or encrypted mode.
You cannot configure By Authentication String in this example because the phone will not automatically contact the CAPF server and the registration will fail if the phone does not have a valid LSC.
Understanding the Requirements for Installing and Configuring the Cisco IP Phone Models 7960G and 7940G
To install and configure the Cisco IP Phone models 7960G and 7940G, you must configure some network settings, set up Cisco CallManager, and make changes locally on the phone.
See Table 1-3 for an overview of required procedures. For detailed information about these steps, refer to the sources shown.
Table 1-3 Overview of Configuration Procedures for the Cisco IP Phone
1.
–
–
–
–
You will refer to this information when using the Cisco CallManager Administration Phone Configuration web page to configure a phone.
The Device Information fields on this page will auto-populate if information is relevant and available. Edit fields if you want to override system settings on a per-device basis.
•
•
•
•
2.
Establishes security, which includes protection against data tampering threats and identity theft of phones
Refer to Cisco CallManager Security Guide
3.
Establishes the infrastructure for the IP telephony network.
See the "Understanding How the Cisco IP Phone Interacts with the Cisco Catalyst Family of Switches" section and refer to the documentation included with these devices.
4.
–
–
–
–
How you add the phones to Cisco CallManager determines how the directory number is assigned and whether you need to obtain a MAC address first, among other things.
Note
•
•
•
5.
Not necessary if you plan to add phones to the Cisco CallManager database using auto-registration only or in conjunction with the Tool for Auto-Registered Phones Support (TAPS).
See the "Determining the MAC Address of a Cisco IP Phone" section.
6.
Determines whether the phone receives power from an external power source over a power cord or from the in-line power source over the Ethernet cable.
•
•
7.
Adds the phone to the network.
8.
Extends functionality to the Cisco IP Phone 7960G by adding 14 line appearances or speed dial numbers.
See the "Configuring the Cisco IP Phone 7960G to Support the Cisco IP Phone 7914 Expansion Module" section.
9.
Sets IP settings (if not using DHCP in the network) and assigns a TFTP server.
10.
Installs a Locally Significant Certificate (LSC) on the phone, which is required for security.
See the "Configuring Security on the Cisco IP Phone" section
11.
Provides enhanced telephony functionality.
•
•
•
12.
Provides customized phone buttons.
13.
Gives users access to information such as stock quotes and weather reports, which are displayed on the phone as interactive content with text and graphics.
•
•
14.
Enables users to search through a corporate directory and to store a set of personal numbers.
•
•
15.
Associates users with phones, enabling access to the Cisco CallManager User Options web pages where users set up features such as call forwarding and speed dial, and subscribe to services.
•
•
16.
Ensures users have adequate information to successfully use their Cisco IP Phones.
Unlocking and Locking Configuration Options
To prevent users from making changes that could affect the operation of a phone, Configuration options in the Network Configuration menu and in the Security Configuration menu are locked by default. You must unlock these options before you can change them and perform many of the procedures that are described in this manual.
When options are inaccessible for modification, a locked padlock icon appears on the Network Configuration Menu. When options are unlocked and accessible for modification, an unlocked padlock icon appears on this menu, as shown below.
To unlock or lock options in the Network Configuration menu or in the Security Configuration, press **# before you display the menu or while the menu i s displayed. This action either locks or unlocks the options, depending on the previous state.
Make sure to lock options after you have made your changes.
Caution
Related Topics
•
•
•
•
Determining the MAC Address of a Cisco IP Phone
Several procedures described in this manual require you to determine the MAC address of a Cisco IP Phone. You can determine a phone's MAC address in these ways:
•
•
•
For information about accessing the web page, see the "Accessing the Web Page for a Phone" section.
