Cisco Unified IP Phone Settings
Download this chapter
Cisco Unified IP Phone SettingsCisco Unified IP Phone Settings
 Feedback

Contents

Cisco Unified IP Phone Settings

The Cisco Unified IP Phone includes many configurable network settings that you may need to modify before the phone is functional for your users. You can access these settings, and change some of them, through menus on the phone. You configure settings that are display-only on the phone in Cisco Unified Communications Manager Administration.

This chapter includes the following topics:

Cisco Unified IP Phone Setup Menus

The Cisco Unified IP Phone includes the following configuration menus:

  • Network Setup: Provides options for viewing and configuring a variety of network settings.
    • Ethernet Setup: The menu items in this submenu provide configuration options to configure the Cisco Unified IP Phone over an ethernet network.
    • WLAN Setup: The menu items in this submenu provide configuration options to configure the Cisco Unified IP Phone with the wireless local area network (WLAN).
      • IPv4 Setup: This submenu of the Ethernet Setup menu and of the WLAN Setup menu provides additional network options.
  • Security Setup: Provides options for viewing and configuring a variety of security settings.

Before you can change option settings on the Network Setup menu, you must unlock options for editing.

You can control whether a phone user has access to phone settings by using the Settings Access field in the Product Specific portion of the Phone Configuration window in Cisco Unified Communications Manager Administration.

Related References

Display Setup Menu

To display a configuration menu, follow these steps:

Procedure
    Step 1   Press Applications .
    Step 2   Select Administrator Settings.
    Step 3   Select Network Setup or Security Setup.
    Note   

    For information about the Status menu, see Model Information Status and Statistics. For information about the Reset Settings menu, see Troubleshooting and Maintenance.

    Step 4   Enter your user ID and password, if required, then click Sign-In.
    Step 5   Perform one of these actions to display the desired menu:
    • Use the navigation arrows to select the desired menu and then press Select.
    • Use the keypad on the phone to enter the number that corresponds to the menu.
    Step 6   To display a submenu, repeat step 5.
    Step 7   To exit a menu, press Exit or the back arrow .
    Related Tasks
    Related References
    Related Information

    Password Protection

    You can apply a password to the phone so that no changes can be made to the administrative options on the phone without password entry on the Administrator Settings phone screen.

    Apply Phone Password

    To apply a password to the phone, perform these steps:

    Procedure
      Step 1   In Cisco Unified Communications Manager Administration, navigate to the Common Phone Profile Configuration window using Device > Device Settings > Common Phone Profile.
      Step 2   Enter a password in the Local Phone Unlock Password option.
      Step 3   Apply the password to the common phone profile that the phone uses.

      Value Input Guidelines

      When you edit the value of an option setting, follow these guidelines:

      • Use the arrows on the navigation pad to highlight the field that you wish to edit, then press Select in the navigation pad to activate that field. You can also double-tap on an editable field to activate it for editing. After the field is activated, you can enter values.
      • Use the keys on the keypad to enter numbers and letters.
      • To enter letters by using the keypad, use a corresponding number key. Press the key one or more times to display a particular letter. For example, press the 2 key once for "a," twice quickly for "b," and three times quickly for "c." After you pause, the cursor automatically advances to allow you to enter the next letter.
      • Press the arrow softkey if you make a mistake. This softkey deletes the character to the left of the cursor.
      • Press Cancel before pressing Save to discard any changes that you made.
      • To enter an IP address, you enter values into four segments already divided for you. When you have finished entering the leftmost digits before the first period, use the right arrow key to move to the next segment. The period that follows the leftmost digits is automatically inserted.

      Note

      The Cisco Unified IP Phone provides several methods to reset or restore option settings, if necessary.

      Related Tasks
      Related References
      Related Information

      Ethernet Setup Menu

      The Ethernet Setup menu provides options for viewing and changing a variety of network settings. The following table describes these options and, where applicable, explains how to change them.


      Note

      Establishing a VPN connection overwrites the Ethernet data fields.

      Table 1 Ethernet Setup Menu Options

      Option

      Description

      To change

      IPv4 Setup

      In the IPv4 Setup configuration submenu, you can do the following:

      • Enable or disable the phone to use the IP address that the DHCP server assigns.
      • Manually set the IP Address, Subnet Mask, Default Routers, DNS Server, and Alternate TFTP servers.

      For more information about the IPv4 address fields, see IPv4 Setup Menu Options.

      Scroll to IPv4 Setup and press Select.

      MAC Address

      Unique Media Access Control (MAC) address of the phone.

      Display only. Cannot configure.

      Domain Name

      Name of the Domain Name System (DNS) domain in which the phone resides.

      See Set Domain Name Field.

      Operational VLAN ID

      Auxiliary Virtual Local Area Network (VLAN) configured on a Cisco Catalyst switch of which the phone is a member.

      If the phone has not received an auxiliary VLAN, this option indicates the Administrative VLAN.

      If neither the auxiliary VLAN nor the Administrative VLAN are configured, this option is blank.

      Display only. Cannot configure.

      The phone obtains the Operational VLAN ID via Cisco Discovery Protocol (CDP) or Link Level Discovery Protocol Media Endpoint Discovery (LLDP-MED). This information comes from the switch to which the phone is attached. To assign a VLAN ID manually, use the Admin VLAN ID option.

      Admin. VLAN ID

      Auxiliary VLAN of which the phone is a member.

      Used only if the phone does not receive an auxiliary VLAN from the switch; otherwise, this value is ignored.

      See Set Admin VLAN ID Field.

      PC VLAN

      Allows the phone to interoperate with third-party switches that do not support a voice VLAN. The Admin VLAN ID option must be set before you can change this option.

      See Set PC VLAN Field.

      SW Port Setup

      Speed and duplex of the network port. Valid values specify:

      • Auto Negotiate
      • 1000 Full:1000-BaseT/full duplex
      • 100 Half: 100-BaseT/half duplex
      • 100 Full: 100-BaseT/full duplex
      • 10 Half: 10-BaseT/half duplex
      • 10 Full: 10-BaseT/full duplex

      If the phone is connected to a switch, configure the port on the switch to the same speed/duplex as the phone, or configure both to autonegotiate.

      If you change the setting of this option, you must change the PC Port Configuration option to the same setting.

      See Set SW Port Configuration Field.

      PC Port Setup

      Speed and duplex of the Computer (access) port. Valid values:

      • Auto Negotiate
      • 1000 Full: 1000-BaseT/full duplex
      • 100 Half: 100-BaseT/half duplex
      • 100 Full: 100-BaseT/full duplex
      • 10 Half: 10-BaseT/half duplex
      • 10 Full: 10-BaseT/full duplex

      If the phone is connected to a switch, configure the port on the switch to the same speed/duplex as the phone, or configure both to autonegotiate.

      If you change the setting of this option, you must change the SW Port Configuration option to the same setting.

      See Set PC Port Configuration Field.

      To configure the setting on multiple phones simultaneously, enable Remote Port Configuration in the Enterprise Phone Configuration window(System > Enterprise Phone Configuration).

      Note   

      If the ports are configured for Remote Port Configuration in Cisco Unified Communications Manager Administration, the data cannot be changed on the phone.
      Related Tasks
      Related References
      Related Information

      Set Domain Name Field

      Procedure
        Step 1   Set the DHCP Enabled option to No.
        Step 2   Scroll to the Domain Name option, press Select, and enter a new domain name.
        Step 3   Press Apply.

        Set Admin VLAN ID Field

        Procedure
          Step 1   Scroll to the Admin. VLAN ID option, press Select, and enter a new Admin VLAN setting.
          Step 2   Press Apply.

          Set PC VLAN Field

          Procedure
            Step 1   Ensure that the Admin VLAN ID option is set.
            Step 2   Scroll to the PC VLAN option, press Select, and then enter a new PC VLAN setting.
            Step 3   Press Apply.

            Set SW Port Configuration Field

            Procedure
              Step 1   Unlock network configuration options.
              Step 2   Scroll to the SW Port Configuration option and press Select.
              Step 3   Scroll to the setting that you want and press Select.

              Set PC Port Configuration Field

              Procedure
                Step 1   Unlock network configuration options.
                Step 2   Scroll to the PC Port Configuration option and press Select.
                Step 3   Scroll to the setting that you want and press Select.

                WLAN Setup menu

                The WLAN Setup menu provides options to view and make a variety of network settings. The following table describes these options and, where applicable, explains how to change them.


                Note

                You can configure the WLAN settings only on the Cisco Unified IP Phone keypad. You must use the AC adapter when you use the Cisco Unified IP Phone in WLAN mode. WLAN is disabled when Ethernet is connected.

                Table 2 WLAN Setup menu options

                Option

                Description

                To change

                Wireless

                Turns the wireless radio on Cisco Unified IP Phone on or off. Valid values specify:

                • On: Turns the wireless radio on the phone on.
                • Off: Turns the wireless radio on the phone off.

                Default: On

                See Set Wireless Field.

                WLAN Sign in Access

                Enables the display of the WLAN Sign in Access window in the main Applications menu:

                • On: The WLAN Sign In Access window displays. Turning this value on allows you to sign in or change your WLAN user ID and password on the main Applications menu. Otherwise, to change your sign-in information, navigate down to the Security menu level and select either the LEAP or EAP-FAST methods, both of which require sign-in credentials.
                • Off: The WLAN Sign In Access window does not display.

                Default: Off

                See Set WLAN Sign in Access Field.

                IPv4 Setup

                In the IPv4 Setup configuration submenu, you can do the following:

                • Enable or disable the phone to use the IP address that the DHCP server assigns.
                • Manually set the IP Address, Subnet Mask, Default Routers, DNS Server, and Alternate TFTP servers.

                For more information about the IPv4 address fields, see IPv4 Setup Menu Options.

                Scroll to IPv4 Setup and press Select.

                MAC Address

                Unique Media Access Control (MAC) address of the phone.

                Display only. Cannot configure.

                Domain Name

                Name of the Domain Name System (DNS) domain in which the phone resides.

                See Set Domain Name Field.

                SSID

                Specifies the Service Set Identifier, a unique identifier for accessing wireless access points.

                See Set SSID Field.

                Security Mode

                The type of authentication that the phone uses to access the WLAN. Valid values specify:

                • Open: Access to all access points (APs) without encryption.
                • Open with WEP: Open 802.11 authentication but uses Wired Equivalent Privacy (WEP) for encrypting the data. Specifies access to all APs and authentication through WEP keys at the local AP.
                • Shared Key: Shared key authentication using WEP.
                • LEAP: Lightweight Extensible Authentication Protocol authentication exchanges a username and cryptographically secure password with a RADIUS server in the network. LEAP is a Cisco proprietary version of EAP. LEAP supports WPA and WPA2.
                • EAP-FAST: Extensible Authentication Protocol Flexible Authentication via Secure Tunneling exchanges a username and cryptographically secure password with a RADIUS server in the network where a PAC (Protected Access Credential) establishes a secure tunnel for authentication. EAP-FAST supports WPA and WPA2.
                • AKM: Selects the 802.11 authentication mechanism automatically from the configuration information that the access point exhibits. WPA-PSK or WPA versions 1 or 2 can be used if they are configured for this mode.

                See Set Security Mode Field.

                802.11 Mode

                Specifies the wireless signal standard that is used in the WLAN. Valid values specify:

                • Auto: Default value. Gives precedence to 5.0 Ghz if available.
                • 802.11a
                • 802.11b/g

                See Set 802.11 Mode Field.

                Notes

                Consider the following when you select AKM:

                1. AKM uses LEAP for 802.1x when WPA, WPA2, or CCKM is in use.
                2. AKM selects the encryption method by giving precedence to the strongest key management type and then the strongest cipher.
                3. CCKM is not supported with WPA2.
                Related Tasks

                Set Wireless Field

                Procedure
                  Step 1   Scroll to the Wireless option, and use the toggle switch to change the setting between on and off.
                  Step 2   Press Apply.

                  Set WLAN Sign in Access Field

                  Procedure
                    Step 1   Scroll to the Wireless Sign In option, and use the toggle switch to change the setting between on and off.
                    Step 2   Press Apply.

                    Set Domain Name Field

                    Procedure
                      Step 1   Set the DHCP Enabled option to No.
                      Step 2   Scroll to the Domain Name option, press Select, and enter a new domain name.
                      Step 3   Press Apply.

                      Set SSID Field

                      Procedure
                        Step 1   Scroll to the SSID option, press Select, and enter an SSID.
                        Step 2   Press Apply.

                        Set Security Mode Field

                        Procedure
                          Step 1   Scroll to the Security Mode option, and highlight the desired value.
                          Step 2   Click Apply.

                          Set 802.11 Mode Field

                          Procedure
                            Step 1   Scroll to the 802.11 Mode option, and highlight the desired value.
                            Step 2   Click Apply.

                            IPv4 Setup Menu Options

                            The IPv4 Setup menu is a submenu of the Ethernet Setup menu and of the WLAN Setup menu. To reach the IPv4 menu, select the IPv4 option on the Ethernet Setup menu or on the WLAN Setup menu.

                            The following table describes the IPv4 Setup menu options.

                            Table 3 IPv4 Setup Menu Options

                            Option

                            Description

                            To change

                            DHCP Enabled

                            Indicates whether the phone has DHCP enabled or disabled.

                            When DHCP is enabled, the DHCP server assigns the phone an IP address. When DHCP is disabled, the administrator must manually assign an IP address to the phone.

                            For more information, see DHCP Usage.

                            See Set DHCP Enabled Field.

                            IP Address

                            Internet Protocol (IP) address of the phone.

                            If you assign an IP address with this option, you must also assign a subnet mask and default router. See the Subnet Mask and Default Router options in this table.

                            See Set IP Address Field.

                            Subnet Mask

                            Subnet mask used by the phone.

                            See Set Subnet Mask Field.

                            Default Router

                            Default router used by the phone.

                            See Set Default Router Field.

                            DNS Server 1

                            DNS Server 2

                            DNS Server 3

                            Primary Domain Name System (DNS) server (DNS Server 1) and optional backup DNS servers (DNS Server 2 and 3) that the phone uses.

                            See Set DNS Server Fields.

                            Alternate TFTP

                            Indicates whether the phone is using an alternate TFTP server.

                            See Set Alternate TFTP Field.

                            TFTP Server 1

                            Primary Trivial File Transfer Protocol (TFTP) server that the phone uses. If you are not using DHCP in your network and you want to change this server, you must use the TFTP Server 1 option.

                            If you set the Alternate TFTP option to yes, you must enter a nonzero value for the TFTP Server 1 option.

                            If neither the primary TFTP server nor the backup TFTP server is listed in the CTL or ITL file on the phone, you must unlock the file before you can save changes to the TFTP Server 1 option. In this case, the phone deletes the file when you save changes to the TFTP Server 1 option. A new CTL or ITL file downloads from the new TFTP Server 1 address.

                            When the phone looks for the TFTP server, the phone gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for the TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for the TFTP server in this order:

                            1. Any manually assigned IPv6 TFTP servers
                            2. Any manually assigned IPv4 TFTP servers
                            3. DHCPv6 assigned TFTP servers
                            4. DHCP assigned TFTP servers
                            Note   

                            For information about the CTL and ITL files, see the Cisco Unified Communications Manager Security Guide.

                            See Set TFTP Server 1 Field.

                            TFTP Server 2

                            Optional backup TFTP server that the phone uses if the primary TFTP server is unavailable.

                            If neither the primary TFTP server nor the backup TFTP server is listed in the CTL or ITL file on the phone, you must unlock either of the files before you can save changes to the TFTP Server 2 option. In this case, the phone deletes either of the files when you save changes to the TFTP Server 2 option. A new CTL or ITL file downloads from the new TFTP Server 2 address.

                            When the phone looks for the TFTP server, it gives precedence to manually assigned TFTP servers, regardless of the protocol. If your configuration includes both IPv6 and IPv4 TFTP servers, the phone prioritizes the order that it looks for the TFTP server by giving priority to manually assigned IPv6 TFTP servers and IPv4 TFTP servers. The phone looks for the TFTP server in the following order:

                            1. Manually assigned IPv6 TFTP servers
                            2. Manually assigned IPv4 TFTP servers
                            3. DHCPv6 assigned TFTP servers
                            4. DHCP assigned TFTP servers
                            Note   

                            For information about the CTL or ITL file, see Cisco Unified Communications Manager Security Guide.

                            See Set TFTP Server 2 Field.

                            If you forget to unlock the CTL or ITL file, you can change the TFTP Server 2 address in either file, then erase them by pressing Erase from the Security Configuration menu. A new CTL or ITL file downloads from the new TFTP Server 2 address.

                            BOOTP Server

                            Indicates whether the phone received the IP address from a BOOTP server rather than from a DHCP server.

                            Display only.

                            DHCP Address Released

                            Releases the IP address that DHCP assigned.

                            This field is editable if DHCP is enabled. If you wish to remove the phone from the VLAN and release the IP address for reassignment, set this option to Yes and press Apply.

                            Related Tasks
                            Related Information

                            Set DHCP Enabled Field

                            Procedure
                              Step 1   Scroll to the DHCP Enabled option.
                              Step 2   Press No to disable DHCP, or press Yes to enable DHCP.

                              Set IP Address Field

                              Procedure
                                Step 1   Set the DHCP Enabled option to No.
                                Step 2   Scroll to the IP Address option, press Select, and enter a new IP Address.
                                Step 3   Press Apply.

                                Set Subnet Mask Field

                                Procedure
                                  Step 1   Set the DHCP Enabled option to No.
                                  Step 2   Scroll to the Subnet Mask option, press Select, and enter a new subnet mask.
                                  Step 3   Press Apply.

                                  Set Default Router Field

                                  Procedure
                                    Step 1   Set the DHCP Enabled option to No.
                                    Step 2   Scroll to the appropriate Default Router option, press Select, and enter a new router IP address.
                                    Step 3   Press Apply.

                                    Set DNS Server Fields

                                    Procedure
                                      Step 1   Set the DHCP Enabled option to No.
                                      Step 2   Scroll to the appropriate DNS Server option, press Select, and enter a new DNS server IP address.
                                      Step 3   Press Apply.
                                      Step 4   Repeat Steps 2 and 3 as needed to assign backup DNS servers.

                                      Set Alternate TFTP Field

                                      Procedure
                                        Step 1   Scroll to the Alternate TFTP option.
                                        Step 2   Press Yes if the phone should use an alternative TFTP server.
                                        Step 3   Press No if the phone should not use an alternative TFTP server.

                                        Set TFTP Server 1 Field

                                        Procedure
                                          Step 1   Unlock the CTL or ITL file if necessary (for example, if you are changing the administrative domain of the phone). If the CTL and ITL files both exist, unlock either file.
                                          Step 2   If DHCP is enabled, set the Alternate TFTP option to Yes.
                                          Step 3   Scroll to the TFTP Server 1 option, press Select, and enter a new TFTP server IP address.
                                          Step 4   Press Apply then press Save.

                                          Set TFTP Server 2 Field

                                          Procedure
                                            Step 1   Unlock the CTL or ITL file if necessary (for example, if you are changing the administrative domain of the phone). If both the CTL and ITL files exist, unlock either of the files.
                                            Step 2   Unlock network configuration options.
                                            Step 3   Enter an IP address for the TFTP Server 1 option.
                                            Step 4   Scroll to the TFTP Server 2 option, press Select, and enter a new backup TFTP server IP address. If there is no secondary TFTP Server, you can use Delete to clear the field of a previous value.
                                            Step 5   Press Apply and then press Save.

                                            DHCP Usage

                                            If you are configuring the Ethernet network settings on the phone for an IP network, you can set up an IP address for the phone by either using DHCP or manually entering an IP address.


                                            Note

                                            You must also enter the domain name for the phone in the Ethernet Setup page.

                                            Set Up Phone To Use DHCP

                                            To enable DHCP and allow the DHCP server to automatically assign an IP address to the Cisco Unified IP Phone and direct the phone to a TFTP server, perform these steps:

                                            Procedure
                                              Step 1   Press Applications and choose Administrator Settings > Network Setup > Ethernet Setup > IPv4 Setup.
                                              Step 2   To enable DHCP, set DHCP Enabled to Yes. DHCP is enabled by default.
                                              Step 3   To use an alternate TFTP server, set Alternate TFTP Server to Yes, and enter the IP address for the TFTP Server.
                                              Note   

                                              Consult with the network administrator to determine whether you need to assign an alternative TFTP server instead of using the TFTP server that DHCP assigns.

                                              Step 4   Press Apply,

                                              Set Up Phone To Not Use DHCP

                                              When not using DHCP, you must configure the IP address, subnet mask, TFTP server, and default router locally on the phone.

                                              Procedure
                                                Step 1   Press Applications and choose Administrator Settings > Network Setup > Ethernet Setup > IPv4 Setup.
                                                Step 2   To disable DHCP and manually set an IP address:
                                                1. Set DHCP Enabled to No.
                                                2. Enter the static IP address for phone.
                                                3. Enter the subnet mask.
                                                4. Enter the default router IP addresses.
                                                5. Set Alternate TFTP Server to Yes, and enter the IP address for TFTP Server 1.
                                                Step 3   Press Apply.

                                                Security Setup Menu

                                                The Security Setup menu that you access directly from the Administrator Settings menu provides information about various security settings. The menu also provides access to the Trust List menu and indicates whether the CTL or ITL file is installed on the phone.

                                                The following table describes the options in the Security Setup menu.

                                                Table 4 Security Setup Menu

                                                Option

                                                Description

                                                To change

                                                Security Mode

                                                Displays the security mode that is set for the phone.

                                                From Cisco Unified Communications Manager Administration, choose Device > Phone. The setting appears in the Protocol Specific Information portion of the Phone Configuration window.

                                                LSC

                                                Indicates whether a locally significant certificate that is used for security features is installed on the phone (Yes) or is not installed on the phone (No).

                                                For information about how to manage the LSC for your phone, see the "Using the Certificate Authority Proxy Function" chapter in the Cisco Unified Communications Manager Security Guide.

                                                Trust List

                                                The Trust List provides submenus for the CTL, ITL, and Signed Configuration files.

                                                The CTL File submenu displays the contents of the CTL file. The ITL File submenu displays contents of the ITL file.

                                                For more information, see Trust List Menu.

                                                802.1X Authentication

                                                Allows you to enable 802.1X authentication for this phone.

                                                See 802.1X Authentication and Transaction Status.

                                                Related Tasks

                                                Trust List Menu

                                                The Trust List menu provides a top-level menu that contains CTL, ITL, and the Signed Configuration submenus. The content of the Signed Configuration file is Survivable Remote Site Telephony (SRST).

                                                The Trust List menu only displays components that have associated certificates. The following table describes Trust List menu options.

                                                Table 5 Trust List Menu Settings

                                                Option

                                                Description

                                                To change

                                                CTL Signature

                                                MD5 hash of the CTL file.

                                                For more information about these settings, see the "Configuring the Cisco CTL Client" section in the Cisco Unified Communications Manager Security Guide.

                                                Unified CM/TFTP Server

                                                Common name of a Cisco Unified Communications Manager and TFTP server that the phone uses. Also displays a certificate icon if a certificate is installed for this server.

                                                For more information about these settings, see the "Configuring the Cisco CTL Client" section in the Cisco Unified Communications Manager Security Guide.

                                                CAPF Server

                                                Common name of the CAPF that the phone uses. Also displays a certificate icon if a certificate is installed for this server.

                                                For more information about these settings, see the "Configuring the Cisco CTL Client" section in the Cisco Unified Communications Manager Security Guide.

                                                SRST Router

                                                IP address of the trusted SRST router that is available to the phone, if such a device is configured in Cisco Unified Communications Manager Administration. Also displays a certificate icon if a certificate is installed for this server.

                                                For more information about these settings, see the "Configuring the Cisco CTL Client" section in the Cisco Unified Communications Manager Security Guide.

                                                802.1X Authentication and Transaction Status

                                                The 802.1X Authentication Settings menu allows you to enable 802.1X authentication and view transaction status.

                                                Access 802.1X Authentication

                                                You can access the 802.1X authentication settings by following these steps:

                                                Procedure
                                                  Step 1   Press Applications .
                                                  Step 2   Choose Administrator Settings > Security Setup > 802.1X Authentication.
                                                  Step 3   Configure the options as described in 802.1X Authentication Options.
                                                  Step 4   To exit this menu, press Exit.

                                                  802.1X Authentication Options

                                                  The following table describes the 802.1X authentication options.

                                                  Table 6 802.1X Authentication Settings

                                                  Option

                                                  Description

                                                  To change

                                                  Device Authentication

                                                  Determines whether 802.1X authentication is enabled:

                                                  • Enabled: Phone uses 802.1X authentication to request network access.
                                                  • Disabled: Default setting. The phone uses CDP to acquire VLAN and network access.

                                                  See Set Device Authentication Field.

                                                  EAP-MD5

                                                  Specifies a password for use with 802.1X authentication. The menu options are described in the rows that follow::

                                                  • Device ID
                                                  • Shared Secret
                                                  • Realm

                                                  See Set EAP-MD5 Fields.

                                                  Device ID: Derivative of the phone model number and unique MAC address. Displays in this format: CP-<model>-SEP-<MAC>

                                                  Display only. Cannot configure.

                                                  Shared Secret: Choose a password to use on the phone and on the authentication server. The password must be between 6 and 32 characters in length and can consist of any combination of numbers or letters.

                                                  Note   

                                                  If you disable 802.1X authentication or perform a factory reset (reset all settings) of the phone, the shared secret is deleted.

                                                  See Set EAP-MD5 Fields.

                                                  See Cisco Unified IP Phone Security Problems for assistance in recovering from a deleted shared secret.

                                                  Realm: Indicates the user network domain, always set as Network.

                                                  Display only. Cannot configure.

                                                  Transaction Status

                                                  State: Displays the state of 802.1x authentication:

                                                  • Disconnected: Indicates that 802.1x authentication is not configured on the phone.
                                                  • Authenticated: Indicates that the phone is authenticated.
                                                  • Held: Indicates that the authentication process is in progress.

                                                  Protocol: Displays the EAP method that is used for 802.1x authentication (can be EAP-MD5, EAP-FAST or EAP-TLS).

                                                  Display only. Cannot configure.

                                                  Set Device Authentication Field

                                                  Procedure
                                                    Step 1   After pressing Applications , choose Administrator Settings > Security Setup > 802.1X Authentication.
                                                    Step 2   Set the Device Authentication option to Enabled or Disabled.
                                                    Step 3   Press Apply.

                                                    Set EAP-MD5 Fields

                                                    Procedure
                                                      Step 1   Press Applications .
                                                      Step 2   Choose Administrator Settings > Security Setup > 802.1X Authentication > EAP-MD5.
                                                      Step 3   To change the shared secret, choose Shared Secret.
                                                      Step 4   Enter the shared secret.
                                                      Step 5   Press Apply.