-
Cisco Unified IP Phones 7960G/7940G Administration Guide for Cisco Unified Communications Manager 7.0 (SCCP)
-
Preface
-
An Overview of the Cisco Unified IP Phone
-
Preparing to Install the Cisco Unified IP Phone on Your Network
-
Setting Up the Cisco Unified IP Phone
-
Configuring Network Settings on the Cisco Unified IP Phone
-
Configuring Features, Templates, Services, and Users
-
Viewing Model Information, Status, Statistics, and Security Information on the Cisco Unified IP Phone
-
Monitoring the Cisco Unified IP Phone Remotely
-
Troubleshooting and Maintenance
-
Providing Information to Users Via a Website
-
Feature Support by Protocol for Cisco Unified IP Phone 7960G and 7940G
-
Supporting International Users
-
Technical Specifications
-
Basic Phone Administration Steps
-
Index
-
Table Of Contents
An Overview of the Cisco Unified IP Phone
Understanding the Cisco Unified IP Phones 7960G and 7940G
What Networking Protocols Are Used?
What Features are Supported on the Cisco Unified IP Phones 7960G and 7940G?
Configuring Telephony Features
Configuring Network Parameters Using the Cisco Unified IP Phone
Providing Users with Feature Information
Understanding Security Features for Cisco Unified IP Phones
Overview of Supported Security Features
Understanding Security Profiles
Identifying Encrypted and Authenticated Phone Calls
CAPF Interaction when the Phone Resets
Overview of Configuring and Installing Cisco Unified IP Phones
Configuring Cisco Unified IP Phones in Cisco Unified Communications Manager
Installing Cisco Unified IP Phones
Checklist for Installing the Cisco Unified IP Phone 7960G and 7940G
An Overview of the Cisco Unified IP Phone
The Cisco Unified IP Phone is a full-featured telephone that provides voice communication over an Internet Protocol (IP) network. It functions much like a digital business phone, allowing you to place and receive phone calls and to access features such as mute, hold, transfer, and speed dial. In addition, because the phone is connected to your data network, it offers enhanced IP telephony features, including access to network information and services, and customizeable features and services. The phone also supports security features that include file authentication, device authentication, signaling encryption, and media encryption.
This manual describes the Cisco Unified IP Phone 7960G and the Cisco Unified IP Phone 7940G.
A Cisco Unified IP Phone, like other network devices, must be configured and managed. These phones encode G.711a, G.711u, G.729a, G.729ab, and decode G.711a, G.711u, G.729, G.729a, G.729b, and G.729ab. These phones also support uncompressed wideband (16 bits, 16 kHz) audio.
This chapter includes the following topics:
•
Understanding the Cisco Unified IP Phones 7960G and 7940G
•
•
•
•
Caution
Understanding the Cisco Unified IP Phones 7960G and 7940G
Figure 1-1 shows the main components of the Cisco Unified IP Phone 7960G and Figure 1-2, shows the main components of the Cisco Unified IP Phone 7940G.
These phone models differ only in the number of available line or speed dial buttons. The Cisco Unified IP Phone 7940G has two lines, and the 7960G has six lines.
Figure 1-1 Cisco Unified IP Phone 7960G
Figure 1-2 Cisco Unified IP Phone 7940G
What Networking Protocols Are Used?
Cisco Unified IP Phones support several industry-standard and Cisco networking protocols required for voice communication. Table 1-1 provides an overview of the networking protocols that the Cisco Unified IP Phones 7960G and 7940G support.
Related Topics
•
•
•
What Features are Supported on the Cisco Unified IP Phones 7960G and 7940G?
The Cisco Unified IP Phones 7960G and 7940G function much like digital business phones, allowing you to place and receive telephone calls. In addition to traditional telephony features, the Cisco Unified IP Phone includes features that enable you to administer and monitor the phone as a network device.
This section covers the following topics:
•
•
•
Feature Overview
Cisco Unified IP Phones provide traditional telephony functionality, such as call forwarding and transferring, redialing, speed dialing, conference calling, and voice messaging system access. Cisco Unified IP phones also provide a variety of other features. For an overview of the telephony features that the Cisco Unified IP Phone supports and for tips on configuring them, see the "Telephony Features Available for the Cisco Unified IP Phone" section on page 5-2.
As with other network devices, you must configure Cisco Unified IP Phones to prepare them to access Cisco Unified Communications Manager and the rest of the IP network. By using DHCP, you have fewer settings to configure on a phone, but if your network requires it, you can manually configure an IP address, TFTP server, and subnet mask. For instructions on configuring the network settings on the Cisco Unified IP Phones, see Chapter 4, "Configuring Network Settings on the Cisco Unified IP Phone."
The Cisco Unified IP Phone can interact with other services and devices on your IP network to provide enhanced functionality. For example, you can integrate the Cisco Unified IP Phones with the corporate Lightweight Directory Access Protocol 3 (LDAP3) standard directory to enable users to search for co-worker contact information directly from their IP phones. You can also use XML to enable users to access information such as weather, stocks, quote of the day, and other web-based information. For information about configuring such services, see the "Configuring Corporate Directories" section on page 5-9 and the "Setting Up Services" section on page 5-11.
Finally, because the Cisco Unified IP Phone is a network device, you can obtain detailed status information from it directly. This information can assist you with troubleshooting any problems users might encounter when using their IP phones. See Chapter 6, "Viewing Model Information, Status, Statistics, and Security Information on the Cisco Unified IP Phone," for more information.
Related Topics
•
•
•
Configuring Telephony Features
You can modify additional settings for the Cisco Unified IP Phone from the Cisco Unified Communications Manager Administration application. Use this web-based application to set up phone registration criteria and calling search spaces, to configure corporate directories and services, and to modify phone button templates, among other tasks. See the "Telephony Features Available for the Cisco Unified IP Phone" section on page 5-2 and refer to the Cisco Unified Communications Manager documentation for additional information.
For more information about the Cisco Unified Communications Manager Administration application, refer to Cisco Unified Communications Manager documentation, including Cisco Unified Communications Manager Administration Guide. You can also use the context-sensitive help available within the application for guidance.
You can access the complete Cisco Unified Communications Manager documentation suite at this location:
http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_maintenance_guides_list.html
Related Topic
•
Configuring Network Parameters Using the Cisco Unified IP Phone
You can configure parameters such as DHCP, TFTP, and IP settings on the phone itself. You can also obtain statistics about a current call or firmware versions on the phone.
For more information about configuring features and viewing statistics from the phone, see Chapter 4, "Configuring Network Settings on the Cisco Unified IP Phone" and see Chapter 6, "Viewing Model Information, Status, Statistics, and Security Information on the Cisco Unified IP Phone."
Related Topics
•
•
Providing Users with Feature Information
If you are a system administrator, you are likely the primary source of information for Cisco Unified IP Phone users in your network or company. To ensure that you distribute the most current feature and procedural information, familiarize yourself with Cisco Unified IP Phone documentation. Make sure to visit the Cisco Unified IP Phone web site:
http://www.cisco.com/en/US/products/hw/phones/ps379/tsd_products_support_series_home.html
From this site, you can view access various user guides.
In addition to providing documentation, it is important to inform users of available Cisco Unified IP Phone features—including those specific to your company or network—and of how to access and customize those features, if appropriate.
For a summary of some of the key information that phone users need their system administrators to provide, see Appendix A, "Providing Information to Users Via a Website."
Understanding Security Features for Cisco Unified IP Phones
Implementing security in the Cisco Unified Communications Manager system prevents identity theft of the phone and Cisco Unified Communications Manager server, prevents data tampering, and prevents call signaling and media stream tampering.
To alleviate these threats, the Cisco Unified IP telephony network establishes and maintains authenticated and encrypted communication streams between a phone and the server, digitally signs files before they are transferred to a phone, and encrypts media streams and call signaling between Cisco Unified IP phones.
Table 1-2 shows where you can find additional information about security in this and other documents.
Table 1-2 Cisco Unified IP Phone and Cisco Unified Communications Manager
Security TopicsDetailed explanation of security, including set up, configuration, and troubleshooting information for Cisco Unified Communications Manager and Cisco Unified IP Phones
Refer to Cisco Unified Communications Manager Security Guide
Security features supported on the Cisco Unified IP Phone
Restrictions regarding security features
See the "Security Restrictions" section
How CAPF interacts with a phone when the phone resets
Identifying phone calls for which security is implemented
See the "Identifying Encrypted and Authenticated Phone Calls" section
TLS connection
Security and the phone startup process
See the "Understanding the Phone Startup Process" section on page 2-6
Security and phone configuration files
See the "Understanding Phone Configuration Files" section on page 2-5
Configuring a locally significant certificate (LSC) on the phone
See the "Configuring Security on the Cisco Unified IP Phone" section on page 3-10
Understanding security icons in the Communications Manager 1 through Communications Manager 5 options in the Network Configuration Menu on the phone
See the "Cisco Unified Communications Manager Options" section on page 4-10
Security items on the Security Configuration Menu on the phone
Changing the TFTP Server 1 option on the phone when security is implemented
Removing a certificate trust list (CTL) file from the phone
Security items on the Trust List menu on the phone
Disabling access to a phone's web pages
See the "Disabling and Enabling Web Page Access" section on page 7-3
Troubleshooting
•
•
Resetting or restoring the phone
See the "Resetting or Restoring the Cisco Unified IP Phone" section on page 8-13
Overview of Supported Security Features
Table 1-3 provides an overview of the security features that the Cisco Unified IP Phones support. For more information about these features and about Cisco Unified Communications Manager and Cisco Unified IP Phone security, refer to Cisco Unified Communications Manager Security Guide.
For information about current security settings on a phone, choose Settings > Security Configuration. For more information, see the "Security Configuration Menu" section on page 6-12.
Note
Table 1-3 Overview of Security Features
Image authentication
Signed binary files (with the extension .sbn) prevent tampering with the firmware image before it is loaded on a phone. Tampering with the image causes a phone to fail the authentication process and reject the new image.
Customer-site certificate installation
Each Cisco Unified IP Phone requires a unique certificate for device authentication. Phones include a manufacturing installed certificate (MIC), but for additional security, you can specify in Cisco Unified Communications Manager Administration that a certificate be installed by using the CAPF. Alternatively, you can install an LSC from the Security Configuration menu on the phone. See the "Configuring Security on the Cisco Unified IP Phone" section on page 3-10 for more information.
Device authentication
Occurs between the Cisco Unified Communications Manager server and the phone when each entity accepts the certificate of the other entity. Determines whether a secure connection between the phone and a Cisco Unified Communications Manager should occur, and, if necessary, creates a secure signaling path between the entities using TLS protocol. Cisco Unified Communications Manager will not register phones unless they can be authenticated by the Cisco Unified Communications Manager.
File authentication
Validates digitally-signed files that the phone downloads. The phone validates the signature to make sure that file tampering did not occur after the file creation. Files that fail authentication are not written to Flash memory on the phone. The phone rejects such files without further processing.
Signaling Authentication
Uses the TLS protocol to validate that no tampering has occurred to signaling packets during transmission.
Manufacturing installed certificate
Each Cisco Unified IP Phone contains a unique manufacturing installed certificate (MIC), which is used for device authentication. The MIC is a permanent unique proof of identity for the phone, and allows Cisco Unified Communications Manager to authenticate the phone.
Secure SRST reference
After you configure a SRST reference for security and then reset the dependent devices in Cisco Unified Communications Manager Administration, the TFTP server adds the SRST certificate to the phone cnf.xml file and sends the file to the phone. A secure phone then uses a TLS connection to interact with the SRST-enabled router.
Media encryption
Uses SRTP to ensure that the media streams between supported devices proves secure and that only the intended device receives and reads the data. Includes creating a media master key pair for the devices, delivering the keys to the devices, and securing the delivery of the keys while the keys are in transport.
Signaling Encryption
Ensures that all SCCP signaling messages that are sent between the device and the Cisco Unified Communications Manager server are encrypted.
CAPF (Certificate Authority Proxy Function)
Implements parts of the certificate generation procedure that are too processing-intensive for the phone, and it interacts with the phone for key generation and certificate installation. The CAPF can be configured to request certificates from customer-specified certificate authorities on behalf of the phone, or it can be configured to generate certificates locally.
Security profiles
Defines whether the phone is nonsecure, authenticated, or
encrypted.Optional disabling of the web server functionality for a phone
You can prevent access to a phone's web page, which displays a variety of operational statistics for the phone.
Phone hardening
Additional security options, which you control from Cisco Unified Communications Manager Administration:
•
•
•
•
•
Note
Related Topics
•
•
•
Understanding Security Profiles
All Cisco Unified IP Phones that support Cisco Unified Communications Manager 7.0 use a security profile, which defines whether the phone is nonsecure, authenticated, or encrypted. For information about configuring the security profile and applying the profile to the phone, refer to Cisco Unified Communications Manager Security Guide, Release 7.0.
To view the security mode that is set for the phone, look at the Security Mode setting in the Security Configuration menu. For more information, see the "Network Configuration Menu" section on page 4-4.
Related Topics
•
Identifying Encrypted and Authenticated Phone Calls
When security is implemented for a phone, you can identify authenticated or encrypted phone calls by icons on the screen on the phone.
In an authenticated call, all devices participating in the establishment of the call are authenticated by the Cisco Unified Communications Manager. When a call in progress is authenticated, the call progress icon to the right of the call duration timer in the phone LCD screen changes to the following icon:
In an encrypted call, all devices participating in the establishment of the call are authenticated by the Cisco Unified Communications Manager. In addition, call signaling and media streams are encrypted. An encrypted call offers the highest level of security, providing integrity and privacy to the call. When a call in progress is being encrypted, the call progress icon to the right of the call duration timer in the phone LCD screen changes to the following icon:
Note
Related Topic
•
•
Security Restrictions
The following restrictions apply to encrypted calls:
•
•
If the initiator phone is configured for encryption, the barge initiator can barge into an authenticated or nonsecure call from the encrypted phone. After the barge occurs, Cisco Unified Communications Manager classifies the call as nonsecure.
If the initiator phone is configured for encryption, the barge initiator can barge into an encrypted call, and the phone indicates that the call is encrypted.
A user can barge into an authenticated call, even if the phone that is used to barge is nonsecure. The authentication icon continues to appear on the authenticated devices in the call, even if the initiator phone does not support security.
CAPF Interaction when the Phone Resets
The following examples describe how CAPF interacts with the Cisco Unified IP Phone when the phone is reset by a user or by Cisco Unified Communications Manager. In these examples, if an LSC does not already exist in the phone and if By Existing Certificate is selected for the CAPF Authentication Mode, the CAPF certificate operation will fail.
Example 1
In this example the phone is reset after you configure the Device Security Mode to Nonsecure and the CAPF Authentication Mode to By Null String or By Existing Certificate (Precedence...). After the phone resets, it immediately registers with the primary Cisco Unified Communications Manager and receives the configuration file. The phone then automatically initiates a session with CAPF to download the LSC. After the LSC exists in the phone, configure the Device Support Mode to Authenticated or Encrypted.
Example 2
In this example, the phone is reset after you configure the Device Security Mode to Authenticated or Encrypted and the CAPF Authentication Mode to By Null String or By Existing Certificate (Precedence...). The phone does not register with the primary Cisco Unified Communications Manager until the CAPF session ends and the phone has installed the LSC. After the session ends, the phone registers and immediately runs in authenticated or encrypted mode.
You cannot configure By Authentication String in this example because the phone will not automatically contact the CAPF server and the registration will fail if the phone does not have a valid LSC.
Overview of Configuring and Installing Cisco Unified IP Phones
When deploying a new IP telephony system, system administrators and network administrators must complete several initial configuration tasks to prepare the network for IP telephony service. For information and a checklist for setting up and configuring a complete Cisco Unified IP telephony network, refer to the "System Configuration Overview" chapter in Cisco Unified Communications Manager System Guide.
After you have set up the IP telephony system and configured system-wide features in Cisco Unified Communications Manager, you can add IP phones to the system.
The following topics provide an overview of procedures for adding Cisco Unified IP Phones to your network:
•
•
Configuring Cisco Unified IP Phones in Cisco Unified Communications Manager
To add phones to the Cisco Unified Communications Manager database, you can use:
•
•
•
•
For more information about these choices, see the "Adding Phones to the Cisco Unified Communications Manager Database" section on page 2-7.
For general information about configuring phones in Cisco Unified Communications Manager, refer to the "Cisco Unified IP Phone" chapter in Cisco Unified Communications Manager System Guide.
Checklist for Configuring the Cisco Unified IP Phone 7960G and 7940G in Cisco Unified Communications Manager
Table 1-4 provides an overview and checklist of configuration tasks for the Cisco Unified IP Phone in Cisco Unified Communications Manager Administration. The list presents a suggested order to guide you through the phone configuration process. Some tasks are optional, depending on your system and user needs. For detailed procedures and information, refer to the sources in the list.
Table 1-4 Checklist for Configuring the Cisco Unified IP Phones 7960G and 7940G in Cisco Unified Communications Manager
1.
Gather the following information about the phone:
•
•
•
•
•
•
•
•
•
Provides list of configuration requirements for setting up phones.
Identifies preliminary configuration that you need to perform before configuring individual phones, such as phone button templates or softkey templates.
Refer to Cisco Unified Communications Manager System Guide, "Cisco Unified IP Phone" chapter.
See the "Telephony Features Available for the Cisco Unified IP Phone" section on page 5-2.
2.
Customize phone button templates if required).
Changes the number of line buttons, speed-dial buttons, Service URL buttons or adds a Privacy button to meet user needs.
Refer to Cisco Unified Communications Manager Administration Guide, "Phone Button Template Configuration" chapter.
See the "Modifying Phone Button Templates" section on page 5-10.
3.
Add and configure the phone by completing the required fields in the Phone Configuration window. Required fields are indicated by an asterisk (*) next to the field name; for example, MAC address and device pool.
Adds the device with its default settings to the Cisco Unified Communications Manager database.
Refer to Cisco Unified Communications Manager Administration Guide, "Cisco Unified IP Phone Configuration" chapter.
For information about Product Specific Configuration fields, refer to "?" Button Help in the Phone Configuration window.
4.
Add and configure directory numbers (lines) on the phone by completing the required fields in the Directory Number Configuration window. Required fields are indicated by an asterisk (*) next to the field name; for example, directory number and presence group.
Adds primary and secondary directory numbers and features associated with directory numbers to the phone.
Refer to the Cisco Unified Communications Manager Administration Guide, Directory Number Configuration chapter, "Creating a Cisco Unity Voice Mailbox" section.
See the "Telephony Features Available for the Cisco Unified IP Phone" section on page 5-2.
5.
Customize softkey templates.
Adds, deletes, or changes order of softkey features that display on the user's phone to meet feature usage needs.
Refer to Cisco Unified Communications Manager Administration Guide, "Softkey Template Configuration" chapter.
See the "Configuring Softkey Templates" section on page 5-11.
6.
Configure speed-dial buttons and assign speed-dial numbers (optional)
Adds speed-dial buttons and numbers.
Users can change speed-dial settings on their phones by using the Cisco Unified CM User Options.
Refer to Cisco Unified Communications Manager Administration Guide, "Cisco Unified IP Phone Configuration" chapter, "Configuring Speed-Dial Buttons" section.
7.
Configure Cisco Unified IP Phone services and assign services (optional).
Provides IP Phone services.
Users can add or change services on their phones by using the User Options.
Refer to Cisco Unified Communications Manager Administration Guide, "Cisco Unified IP Phone Services Configuration" chapter.
8.
Assign services to phone buttons (optional).
Provides single button access to an IP phone service or URL.
Refer to Cisco Unified Communications Manager Administration Guide, "Cisco Unified IP Phone Configuration" chapter, "Adding a Cisco Unified IP Phone Service to a Phone Button" section.
9.
Add user information by configuring the required fields:
Note
Adds user information to the global directory for Cisco Unified Communications Manager.
Refer to Cisco Unified Communications Manager Administration Guide, "End User Configuration" chapter.
See the "Adding Users to Cisco Unified Communications Manager" section on page 5-12.
10.
Associate a user to a user group.
Assigns users a common list of roles and permissions that apply to all users in a user group. Administrators can manage user groups, roles, and permissions to control the level of access (and, therefore, the level of security) for system users.
Refer to Cisco Unified Communications Manager Administration Guide:
•
•
11.
Associate a user with a phone (optional).
Provides users with control over their phone such as forwarding calls or adding speed-dial numbers or services.
Note
Refer to Cisco Unified Communications Manager Administration Guide, "End User Configuration" chapter, "Associating Devices to a User" section.
Installing Cisco Unified IP Phones
After you have added the phones to the Cisco Unified Communications Manager database, you can complete the phone installation. You (or the phone users) can install the phone at the users's location. The Cisco Unified IP Phone Installation Guide that ships in the box with each phone provides directions for connecting the phone handset, cables, and other accessories.
Note
http://www.cisco.com/pcgi-bin/tablebuild.pl/ip-7900serAfter the phone is connected to the network, the phone startup process begins and the phone registers with Cisco Unified Communications Manager. To finish installing the phone, configure the network settings on the phone depending on whether you enable or disable DHCP service.
If you used auto-registration, you need to update the specific configuration information for the phone such as associating the phone with a user, changing the button table, or directory number.
Checklist for Installing the Cisco Unified IP Phone 7960G and 7940G
Table 1-5 provides an overview and checklist of installation tasks for the Cisco Unified IP Phone 7960G and 7940G. The list presents a suggested order to guide you through the phone installation. Some tasks are optional, depending on your system and user needs. For detailed procedures and information, refer to the sources in the list.
Table 1-5 Checklist for Installing the Cisco Unified IP Phones 7960G and 7940G
1.
Choose the power source for the phone:
•
•
Determines how the phone receives power.
See the "Providing Power to the Cisco Unified IP Phone" section on page 2-3.
2.
Assemble the phone, adjust phone placement, and connect the network cable.
Locates and installs the phone in the network.
See the "Installing the Cisco Unified IP Phone" section on page 3-5.
See the "Adjusting the Placement of the Cisco Unified IP Phone" section on page 3-8.
3.
Add a Cisco Unified IP Phone Expansion Module 7914 to the Cisco Unified IP Phone (optional).
Extends functionality to a Cisco Unified IP Phone by adding 14 line appearances or speed dial numbers.
See the"Attaching the Cisco Unified IP Phone Expansion Module 7914" section on page 3-7.
4.
Monitor the phone startup process.
Verifies that phone is configured properly.
See the "Verifying the Phone Startup Process" section on page 3-9.
5.
Configure these network settings on the phone by choosing Settings > Network Configuration.
Using DHCP—The IP address is automatically assigned and the Cisco Unified IP Phone is directed to a TFTP Server.
Note
Without DHCP—You must configure the IP address, TFTP server, subnet mask, domain name, and default router locally on the phone.
To enable DHCP:
•
•
Enter IP address for TFTP Server 1To disable DHCP:
•
•
•
•
•
Set Alternate TFTP Server to Yes
Enter IP address for TFTP Server 16.
Set up security on the phone.
Provides protection against data tampering threats and identity theft of phones.
See the "Configuring Security on the Cisco Unified IP Phone" section on page 3-10.
7.
Make calls with the Cisco Unified IP Phone.
Verifies that the phone and features work correctly.
Refer to Cisco Unified IP Phone 7960G/7940G Series Phone Guide for Cisco Unified Communications Manager 7.0 (SCCP)
8.
Provide information to end users about how to use their phones and how to configure their phone options.
Ensures that users have adequate information to successfully use their Cisco Unified IP Phones.
See Appendix A, "Providing Information to Users Via a Website."
