Table Of Contents
Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Using the USB Connection for Initial Phone Configuration
Setting Up Your PC to Configure the Cisco Unified Wireless IP Phone 7921G
Installing the USB Drivers
Configuring the USB LAN on the PC
Accessing the Phone Web Page
Using the USB Cable to Configure Phones
Updating Phones Remotely
Setting Configuration Privileges for the Phone Web Page
Accessing the Configuration Web Page for a Phone
Summary Information Web Page
Configuring Network Profiles
Network Profile Settings
Configuring Wireless Settings in a Network Profile
Setting the Wireless LAN Security Mode
Configuring the Authentication Method
Setting the Wireless Security Credentials
Configuring the Username and Password
Configuring the Pre-shared Key
Setting Wireless Encryption
Configuring IP Network Settings
Enabling DHCP
Disabling DHCP
Configuring the Alternate TFTP Server
Configuring Advanced Settings
Configuring USB Settings
Configuring Trace Settings
Using System Settings
Viewing Trace Logs
Backup Settings for Phone Configuration
Using Network Profile Templates
Creating a Configuration Template
Importing a Configuration Template
Upgrading Phone Firmware
Changing the Admin Password
Using the Cisco Unified Wireless IP Phone 7921G Web Pages
You can use the Cisco Unified Wireless IP Phone 7921G web pages to setup and configure these settings for the phone:
•
Network Profiles that include WLAN settings
•USB port settings
•Trace settings
This chapter describes how to set up your PC to initially configure a Cisco Unified Wireless IP Phone 7921G through a USB connection and how to remotely access a configured phone over the WLAN.
After you have initially configured phones, you can make adjustments to network settings on the phone by using the Settings menu and Network Profile menu options. For more information, see Chapter 5, "Configuring Settings on the Cisco Unified Wireless IP Phone 7921G."
This chapter includes these topics:
•Using the USB Connection for Initial Phone Configuration
•Updating Phones Remotely
•Configuring Network Profiles
•Configuring USB Settings
•Configuring Trace Settings
•Using System Settings
Using the USB Connection for Initial Phone Configuration
To setup new phones for deployment to users, use your PC to enter the initial configuration for the wireless network settings and network profiles. To save time during initial deployment, you can create a standard network profile template and export it to several phones. For more information, see the "Backup Settings for Phone Configuration" section.
See these sections for information about initial phone configuration:
•Setting Up Your PC to Configure the Cisco Unified Wireless IP Phone 7921G
•Accessing the Phone Web Page
•Setting Configuration Privileges for the Phone Web Page
•Accessing the Configuration Web Page for a Phone
Setting Up Your PC to Configure the Cisco Unified Wireless IP Phone 7921G
Before you can configure phones using the USB connection, you must install drivers and set up the USB ports on the phone and PC.
To interface with the phone and web pages using the USB cable, the PC must run one of these operating systems:
•Windows 2000 Professional
•Windows XP
These sections provide information about setting up your PC:
•Installing the USB Drivers
•Configuring the USB LAN on the PC
•Using the USB Cable to Configure Phones
Installing the USB Drivers
To install the drivers on your PC, follow these steps:
Procedure
Step 1 Download the installation package and "read me" file for the USB drivers from this location:
http://www.cisco.com/cgi-bin/tablebuild.pl/ip-7900ser-crypto
Note Before proceeding, review the "read me" file for specific instructions for your PC operating system.
Step 2 Double-click on the USB-Install-7921.1-0-1.exe file to start the installation program.
Step 3 Follow the prompts in the InstallShield Wizard.
Note If you receive a Hardware Installation warning message stating that the software has not passed Microsoft Windows Logo testing, click Continue.
Step 4 The driver installation is complete when you see the Finished screen. You can close the wizard.
Step 5 Plug the USB cable into the USB port on the PC and into the USB connector on the phone.
The Found New Hardware Wizard dialog opens.
Step 6 To update the new software, click the button next to Yes, this time only and click Next.
Step 7 Click the button next to Install the Software automatically (Recommended).
After 2-3 minutes, the software installs and a message appears on the task bar stating "Found New Hardware - Software installed and ready to use."
Step 8 Click Finish when the installation is complete.
The phone briefly displays "USB Connected" on the status line.
Configuring the USB LAN on the PC
To configure the USB LAN connection on your PC, follow these steps:
Procedure
Step 1 To setup the USB LAN connection, do one of the following:
•For Windows XP—Click Start > Control Panel > Network Connections.
•For Windows 2000—Click Start > Settings > Control Panel > Network and Dial Up Connections.
Step 2 Locate and double-click the new LAN connection to open the Local Area Connection Status window, then click Properties.
Step 3 Scroll to the Internet Protocol (TCP/IP) component and click Properties.
Step 4 In the Internet Protocol (TCP/IP) Properties window, choose Use the following IP address:
Step 5 In the IP address field, enter a static IP address for the PC: 192.168.1. (1-254 -except 100), for example: 192.168.1.11
Note•By default, the Cisco Unified Wireless IP Phone 7921G is configured with 192.168.1.100 so you cannot use this IP address for the PC.
•Make sure to use an IP address that is not in use on any other interface on the PC.
Step 6 Enter the subnet mask: 255.255.255.0
Step 7 Click OK to make the changes.
Related Topics
•Accessing the Phone Web Page
•Setting Configuration Privileges for the Phone Web Page
•Accessing the Configuration Web Page for a Phone
Accessing the Phone Web Page
After setting up the USB interface on the PC, you are ready to use the USB cable connection to the phone.
To access the phone web page, follow these steps:
Procedure
Step 1 Open a Windows browser.
Step 2 In the address field, enter https://192.168.1.100 to locate the wireless IP phone web page.
Note When the Security Alert dialog box displays a notice to accept the Trust Certificate, click Yes or Always to accept the application.
The Summary web page for the phone displays. See Table 4-1 for details about this web page.
Step 3 Use the hyperlinks in the left column of the web page to configure settings for the phones. For information, see these sections:
•Configuring Network Profiles
•Configuring IP Network Settings
•Configuring USB Settings
•Viewing Trace Logs
•Using System Settings
Step 4 After entering the new settings, disconnect the USB cable from the phone. The settings are active immediately.
Step 5 Check that the phone can access the network successfully.
Using the USB Cable to Configure Phones
You are ready to use the USB cable to set up other phones. Before plugging the USB cable into another phone, wait approximately 12-15 seconds for the USB interface on the PC to shut down.
To connect to another phone, follow these steps:
Procedure
Step 1 Plug the USB cable into a Cisco Unified Wireless IP Phone 7921G.
The phone briefly displays "USB Connected" on the status line.
Step 2 Access the web page for the new phone by following the steps in "Accessing the Phone Web Page" section.
Related Topics
•Installing the USB Drivers
•Configuring the USB LAN on the PC
•Using the USB Cable to Configure Phones
•Accessing the Phone Web Page
Updating Phones Remotely
You might have to update settings on a Cisco Unified Wireless IP Phone 7921G that is already configured and in use. You can use the wireless LAN to remotely access and configure these phones.
Use these sections for information about remotely updating phones:
•Setting Configuration Privileges for the Phone Web Page
•Accessing the Configuration Web Page for a Phone
Setting Configuration Privileges for the Phone Web Page
To make changes to the phone by using the web page, you must use Cisco Unified CallManager Administration to change Web Access.
To allow configuration privileges, follow these steps:
Procedure
Step 1 Log into Cisco Unified CallManager Administration.
Step 2 Search for the phone in Cisco Unified CallManager by choosing Devices > Phones and enter search information such as the directory number.
Step 3 Open the Phone Configuration page and scroll down to Product Specific Configuration.
Step 4 In the Web Access field, click the drop-down arrow and select Full.
Step 5 Click Update to make the change.
Step 6 You must reset the phone to enable configuration privileges on the web pages for this phone.
Accessing the Configuration Web Page for a Phone
You can access the web page for any Cisco Unified Wireless IP Phone 7921G that is connected to the WLAN. Be sure the phone is powered on and connected.
To access the web page for the Cisco Unified Wireless IP Phone 7921G follow these steps:
Procedure
Step 1 Obtain the IP address of the Cisco Unified Wireless IP Phone 7921G using one of these methods:
•Search for the phone in Cisco Unified CallManager by choosing Devices > Phones. Phones registered with Cisco Unified CallManager display the IP address on the Find and List Phones web page and at the top of the Phone Configuration web page.
•On the Cisco Unified Wireless IP Phone 7921G, press Settings > Device Information > Network Configuration and then scroll to the IP Address option.
Step 2 Open a web browser and enter the following URL, where IP_address is the IP address of the Cisco Unified IP Phone:
https://<IP_address>
Note When the Security Alert dialog box displays a notice to accept the Trust Certificate, click Yes or Always to accept the application.
Step 3 Log in to the web pages with username: admin and enter the password: Cisco for the phone web pages.
The Summary web page for the phone displays. See Table 4-1 for details about this web page.
Step 4 Make changes to configurable pages as needed. For information, see these sections:
•Configuring Network Profiles
•Configuring USB Settings
•Configuring Trace Settings
•Using System Settings
Step 5 Return to the Phone Configuration web page in Cisco Unified CallManager Administration and set the Web Access field back to ReadOnly or Disabled.
Step 6 Reset the phone from Cisco Unified CallManager to disable full access to the web pages.
Be sure to change the Web Access privileges and reset the phone to prevent users from making configuration changes on the phone web pages.
Note If a wireless IP phone was previously registered to Cisco Unified CallManager Release 4.x, and then registers to Cisco Unified CallManager 5.x, the Phone Configuration web page password might be reset to "Cisco."
Summary Information Web Page
The Summary Information area on a phone's web page displays device settings and related information for the phone. Table 4-1 describes these items.
Table 4-1 Summary Information Area Items
Item
|
Description
|
Phone DN
|
Directory number assigned to this phone
|
Wireless Information
|
Active Network Profile
|
Name of the profile that the phone is currently using
|
SSID
|
SSID that the phone is currently using
|
Access Point
|
Name of the access point to which the phone is associated
|
MAC Address
|
Media Access Control (MAC) address of the phone
|
Network Information
|
IP Address
|
Internet Protocol (IP) address of the phone
|
Subnet Mask
|
Subnet mask used by the phone
|
Default Router
|
IP address for the default gateway that the phone is using
|
TFTP Server
|
IP address for the Primary Trivial File Transfer Protocol (TFTP) server that the phone is using
|
CallManager Information
|
Active CallManager
|
IP address for the Cisco Unified CallManager server to which the phone is registered
|
Directory Number
|
Primary directory number for the phone
|
Related Topics
•Accessing the Phone Web Page
•Configuring Network Profiles
•Configuring USB Settings
•Configuring Trace Settings
•Using System Settings
Configuring Network Profiles
You can configure up to four different profiles for a phone to take advantage of different WLAN environments. You can add names to the profiles and enable one or more of the profiles for the phone to use. The Network Profiles area displays this information about each profile:
•Enabled Profile—A check mark designates an enabled profile
•Name—Lists the name for the profile
•SSID—Lists the SSID used by this profile
•Status—Identifies which profile the phone is using
To display the Network Profiles list, access the web page for the phone as described in the "Accessing the Phone Web Page" section, and then click the Network Profiles hyperlink.
For more information about configuring network profiles, see these sections:
•Network Profile Settings
•Configuring Wireless Settings in a Network Profile
•Setting the Wireless LAN Security Mode
•Setting the Wireless Security Credentials
•Setting Wireless Encryption
•Configuring IP Network Settings
•Configuring the Alternate TFTP Server
•Configuring Advanced Settings
Network Profile Settings
You can configure the settings for a profile by using this web page area. You can also modify or view configured profiles from this web page area. Table 4-2 describes these items and provides references for more information.
To display Network Profile(1-4) Settings, access the web page for the phone as described in the "Accessing the Phone Web Page" section, and then click the Profile (1-4) hyperlink.
Table 4-2 Network Profile Settings Items
Item
|
Description
|
For More Information, See...
|
Wireless Settings
|
Profile Name
|
Provides a name for the profile to make it easy to identify; up to 63 alphanumeric characters.
|
Configuring Wireless Settings in a Network Profile
|
SSID
|
Assigns the Service Set Identifier (SSID) to this profile. You must assign the same SSID to the phone that is also assigned to access points in the wireless network.
|
Connecting to the Wireless Network, page 2-4
|
Single Access Point
|
Determines scanning frequency:
True—Minimizes the scanning for APs
False—Frequent scanning of all access points within range for best match
|
Roaming in a Wireless Network, page 2-14
|
Call Power Save Mode
|
Set for the type of power saving mode used in the WLAN. Options are:
•U-APSD/PS-Poll
•None
|
The 802.11 Standards for Wireless LAN Communications, page 2-3
|
802.11 Mode
|
Determines the signal mode or priority for selecting signal modes available in the WLAN. Options are:
•802.11 b/g—Use only 2.4 GHz band
•802.11a—Use only 5 GHz band
•Auto, 802.11b/g preferred over 802.11a (dual band)
•Auto, 802.11a preferred over 802.11b/g (dual band)
•Auto, signal strength (RSSI)—Use strongest signal in dual band environment
|
The 802.11 Standards for Wireless LAN Communications, page 2-3
|
WLAN Security Mode
|
Authentication Method
|
Sets the authentication and encryption methods for this profile:
•Open—Open access to APs
•Open+WEP—Open access with WEP encryption (requires an encryption key)
•Shared+WEP—Shared key authentication with WEP (requires an encryption key)
•LEAP—Cisco proprietary authentication and encryption using a RADIUS server (requires a username and password)
•EAP-FAST—Authentication and encryption using TLS and RADIUS server (requires a username and password)
•Auto (AKM)—Automatic authenticated key management using:
–WPA, WPA2 (requires a username and password)
–WPA-Pre-shared key, WPA2-Pre-shared key (requires a passphrase/pre-shared key)
–CCKM (requires a username and password)
|
Setting the Wireless LAN Security Mode
|
Export Security Credentials
|
Controls whether the wireless security credential data can be exported in the configuration file.
•True—Allows exporting the data
•False—Blocks exporting the data
|
Backup Settings for Phone Configuration
|
Wireless Security Credentials
|
Required for LEAP, EAP-FAST, and Auto (AKM) authentication methods
|
Username
|
Assigns the network authentication username for this profile
|
Configuring the Username and Password
|
Password
|
Assigns the network authentication password for this profile
|
WPA Pre-shared Key Credentials
|
Sets the Pre-shared key for this profile
|
Pre-shared Key Type
|
Determines the key type: Hex or ASCII
|
Configuring the Pre-shared Key
|
Pre-shared Key
|
Identifies the key
|
Wireless Encryption
|
Required for Open+WEP and Shared+WEP authentication methods
|
Key Type
|
Determines the encryption key type: Hex or ASCII
|
Setting Wireless Encryption
|
Encryption Key 1-4
|
Identifies the Transmit Key:
•Encryption Key character string
•Key Size of 40 or 128 characters
|
IP Network Configuration
|
Obtain IP address and DNS servers automatically
|
Enables DHCP
|
Configuring IP Network Settings
|
Use the following IP address and DNS servers
|
Disables DHCP and uses these static settings:
•IP Address
•Subnet Mask
•Default Router
•Primary DNS
•Secondary DNS
•Domain Name
|
TFTP
|
Obtain TFTP servers automatically
|
Determines whether DHCP assigns the TFTP server
|
Configuring the Alternate TFTP Server
|
Use the following TFTP servers
|
Assigns static TFTP server IP addresses for:
•TFTP Server 1
•TFTP Server 2
|
Network Profile Advanced Settings
|
TSPEC Settings
|
Configuring Advanced Settings
|
Minimum PHY Rate
|
Minimum data rate that outbound traffic uses
|
Surplus Bandwidth
|
Excess bandwidth beyond application requirements
|
802.11G Power Settings
|
Enabled—Identifies enabled channels in WLAN to improve scanning for the phone
Max Tx Power—Sets the maximum transmit power for the phone
|
802.11A Power Settings
|
Enabled—Identifies enabled channels in WLAN to improve scanning for the phone
Max Tx Power—Sets the maximum transmit power for the phone
|
Note If you uncheck all channels in the 802.11 G Power Settings or 802.11 A Power Settings, the phone will not be able to access the WLAN.
Related Topics
•Accessing the Phone Web Page
•Configuring Wireless Settings in a Network Profile
•Setting the Wireless LAN Security Mode
•Setting the Wireless Security Credentials
•Setting Wireless Encryption
Configuring Wireless Settings in a Network Profile
You must configure these wireless settings in a profile to enable the phone to access the wireless network.
To configure the wireless settings, refer to Table 4-2 and follow these steps:
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 To give the profile a recognizable name, in the Profile Name field, enter a name up to 63 characters and numbers in length.
Step 3 To identify the SSID that the phone uses to associate with access points, in the SSID field, enter an SSID that is already configured in the WLAN.
Note The SSID is case sensitive; you must enter it exactly as configured in the network.
Step 4 To determine the scanning frequency of the phone, in the Single Access Point field, choose True (less frequent scanning) or False (more frequent scanning).
Step 5 To conserve battery power, in the Call Power Save Mode, choose the type (U-APSD or PS-Poll) and option that is being used in the WLAN.
Step 6 Choose the signal mode or priority of signal modes in the 802.11 Mode field that is used by your WLAN,
Setting the Wireless LAN Security Mode
The Cisco Unified Wireless IP Phone 7921G supports many types of authentication. Authentication methods might require a specific encryption method or you can choose between several encryption methods. When configuring a network profile, you can choose one of these authentication methods:
•Open—Provides access to all access points without WEP Key authentication/encryption.
•Open plus WEP—Provides access to all access points and authentication through the use of one or more WEP Keys at the local access point.
•Shared Key plus WEP—Provides shared key authentication through the use of WEP Keys at the local access point.
•LEAP— Exchanges a username and cryptographically secure password with a RADIUS server for authentication in the network. LEAP is a Cisco proprietary version of EAP.
•EAP-FAST—Exchanges a username and password and with a RADIUS server for authentication in the network.
•Auto(AKM)—Automatic authenticated key management in which the phone selects the AP and type of key management scheme, that can include WPA, WPA2, WPA-Pre-shared key, WPA2-Pre-shared key, or CCKM which uses a wireless domain server (WDS).
The type of authentication and encryption schemes that you are using with your WLAN determine how you set up the authentication, security, and encryption options in the network profiles for the Cisco Unified Wireless IP Phones. Table 4-3 provides a list of supported authentication and encryption schemes that you can configure on the Cisco Unified Wireless IP Phone 7921G.
Table 4-3 Authentication and Encryption Configuration Options
Authentication Method
|
Wireless Encryption
|
Wireless Security Credentials
|
Open
|
None
|
None—access to all APs
|
Open plus WEP
|
Static WEP
Requires WEP Key
|
None—access to all APs
|
Shared Key plus WEP
|
Static WEP
Requires WEP Key
|
Uses shared-key with AP
|
LEAP (with optional CCKM)
|
Uses WEP
|
Requires Username and Password
|
EAP-FAST (with optional CCKM)
|
Uses WEP or TKIP
|
Requires Username and Password
|
Auto (AKM) with WPA (with optional CCKM)
|
Uses TKIP
|
Requires Username and Password
|
Auto (AKM) with WPA2
|
Uses AES
|
Requires Username and Password
|
Auto (AKM) with WPA Pre-Shared Key
|
Uses TKIP
|
Requires Passphrase
|
Auto (AKM) with WPA2 Pre-Shared Key
|
Uses AES
|
Requires Passphrase
|
Auto (AKM) with CCKM
|
Uses TKIP or AES
|
Requires Username and Password
|
Configuring the Authentication Method
To select the Authentication Method for this profile, follow these steps:
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 In the Authentication Method field, click the drop-down arrow and select one of the following:
•Open
•Open+WEP
•Shared+WEP
•LEAP
•EAP-FAST
•Auto (AKM)
Note Depending on what you selected, you must configure additional options in Wireless Security or Wireless Encryption. See Table 4-3 for more information.
Step 3 Click Save to make the change.
Setting the Wireless Security Credentials
When your network uses EAP-FAST, LEAP, or Auto (AKM) with WPA, WPA2, or CCKM for user authentication, you must configure both the username and a password on the Access Control Server (ACS) and the phone.
Note If you use domains within your network, you must enter the username with the domain name, in this format: domain\username.
For information about setting security credentials, see these topics:
•Configuring the Username and Password
•Configuring the Pre-shared Key
•Setting Wireless Encryption
Configuring the Username and Password
To enter or change the username or password for the network profile, you must use the same username and the same password string that is configured in the RADIUS server. The maximum length of the username or password entry is 32 characters.
To setup the username and password in Wireless Security Credentials, follow these steps:
Procedure
Step 1 Choose the network profile that uses LEAP, EAP-FAST, or Auto (AKM).
Step 2 In the Username field, enter the network username for this profile.
Step 3 In the Password field, enter the network password string for this profile.
Step 4 Click Save to make the change.
Configuring the Pre-shared Key
When using Auto (AKM) with WPA Pre-shared key or WPA2 with Pre-shared key for authentication, you must configure a Passphrase/Pre-shared key in the Wireless Security Credentials area.
Pre-shared Key Formats
The Cisco Unified Wireless IP Phone 7921G supports ASCII and hexadecimal formats. You must use one of these formats when setting up a WPA Pre-shared key:
Hexadecimal
For hexadecimal keys, you must enter 64 hex digits (0-9 and/or A-F); for example, AB123456789CD01234567890EFAB123456789CD01234567890EF3456789C
ASCII
For ASCII keys, you must enter a character string that uses 0-9, A-Z (upper and lower case), including symbols and is from 8 to 63 characters in length; for example, GREG12356789ZXYW
To setup a Pre-shared key in the Wireless Credentials area, follow these steps:
Procedure
Step 1 Choose the network profile that uses Auto (AKM) to enable the WPA Pre-shared key or WPA2 Pre-shared key.
Step 2 In the Key Type area, choose one of these character formats:
•Hex
•ASCII
Step 3 Enter an ASCII string or Hex digits in the Passphrase/Pre-shared key field. See "Pre-shared Key Formats" section.
Step 4 Click Save to make the change.
Setting Wireless Encryption
If your wireless network uses WEP encryption, and you have set the Authentication Method as Open + WEP or Shared Key + WEP, you must enter an ASCII or hexadecimal WEP Key.
The WEP Keys for the phone must match the WEP Keys assigned to the access point. Cisco Unified Wireless IP Phone 7921G and Cisco Aironet Access Points support both 40-bit and 128-bit encryption keys.
WEP Key Formats
You must use one of these formats when setting up a WEP key:
Hexadecimal
For hexadecimal keys, you can use one of the following key sizes:
•40-bit—You must enter a 10-digit encryption key string that uses the hex digits (0-9 and/or A-F); or example, ABCD123456.
•128-bit—You must enter a 26-digit encryption key string that uses the hex digits (0-9 and/or A-F); or example, AB123456789CD01234567890EF.
ASCII
For ASCII keys, you must enter a character string that uses 0-9, A-Z (upper and lower case), and all symbols.
•40-bit—You must enter a 5-character string; for example, GREG5.
•128-bit—You must enter a 13-character string; for example, GREGSSECRET13.
Entering Wireless Encryption Keys
To setup WEP keys, follow these steps:
Procedure
Step 1 Choose the network profile that uses Open+WEP or Shared+WEP.
Step 2 In the Key Type area, choose one of these character formats:
•Hex
•ASCII
Step 3 For Encryption Key 1, click Transmit Key.
Step 4 In the Key Size area, choose one of these character string lengths:
•40
•128
Step 5 In the Encryption Key field, enter the appropriate key string based on the selected Key Type and Key Size. See the "WEP Key Formats" section.
Step 6 Click Save to make the change.
Related Topics
•Configuring IP Network Settings
•Configuring the Alternate TFTP Server
•Configuring Advanced Settings
Configuring IP Network Settings
The Cisco Unified IP Phones enable DHCP, by default, to automatically assign IP addresses to devices when you connect them to the network. If you do not use DHCP in your network, then you must disable DHCP and manually enter network configuration information. For more information, see "Interacting with the DHCP Server" section on page 2-25.
When DHCP is disabled in the network, you must configure the following settings in the Static Settings menu:
•IP address
•Subnet mask
•Default Router
•DNS server 1 and 2
•TFTP server 1
Use these guidelines when manually configuring the IP settings:
•Ensure the TFTP server has an IP address.
•Ensure the default router IP address is on the same subnet as the host IP address.
Enabling DHCP
To enable the use of DHCP in the Network Profile, follow these steps:
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 Under the IP Network Configuration area, choose this option:
Obtain IP address and DNS servers automatically
Step 3 Click Save to make the change.
Disabling DHCP
To disable the use of DHCP in the Network Profile, follow these steps:
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 Under the IP Network Configuration area, choose this option:
Use the following IP addresses and DNS servers
Step 3 You must enter these required IP addresses. See Table 4-4 for descriptions of these fields.
Step 4 Click Save to make the change.
Table 4-4 Static IP Addresses When DHCP is Disabled
Static Setting
|
Description
|
IP Address
|
Internet Protocol (IP) address of the phone
|
Subnet Mask
|
Subnet mask used by the phone
|
Default Router 1
|
Primary gateway used by the phone
|
DNS Server 1
DNS Server 2
|
Primary DNS server used by the phone
Optional backup DNS server used by the phone
|
TFTP Server 1
TFTP Server 2
|
Primary TFTP server used by the phone.
Optional backup TFTP server used by the phone
|
Domain Name
|
Name of the Domain Name System (DNS) domain in which the phone resides
|
Configuring the Alternate TFTP Server
If you use DHCP to direct the Cisco Unified IP Phones to a TFTP server, you can also assign an alternative TFTP server to some phones instead of the one assigned by DHCP.
Note If you disable DHCP, then you must use these steps to set up the TFTP server for the phone.
To assign an alternate TFTP server to a phone, follow these steps:
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 Under the TFTP area, choose this option:
Use the following TFTP servers
Step 3 You must enter the required IP addresses. See Table 4-4 for descriptions of these fields.
Step 4 Click Save to make the change.
Configuring Advanced Settings
The network profiles provide a web page for setting QoS, bandwidth, and power settings. The Traffic Specification (TSPEC) parameters are used to advertise information about generated traffic for Call Admission Control (CAC) to the AP.
Minimum PHY rate—Lowest rate that outbound traffic is expected to use before the phone roams to another AP
Surplus Bandwidth Allowance—Fractional number that specifies the excess allocation of time and bandwidth above application rates required to transport a MAC service data unit (MSDU) in a TSPEC frame.
Note If your wireless LAN has access points that use 802.11b and you plan to use Call Admission Control (CAC) with TSPEC, then you need to modify the PHY rate to a supported rate for your 802.11b access points.
To make changes to the advanced settings, follow these steps:
Procedure
Step 1 Choose the network profile that you want to configure.
Step 2 Click the Advanced Profile link at the top of the page.
Step 3 In the TSPEC Setting area, keep the Minimum PHY Rate: 12 Mbps
Note If you are using 802.11b APs and plan to use Call Admission Control (CAC) with TSPEC, then set the PHY Rate to a rate that the APs support such as 11 Mbps.
Step 4 In the Surplus Bandwidth field, enter the appropriate values.
Step 5 In the 802.11G Power Settings area, check only the channels that are used in your WLAN. By doing this, the phone scans for only those channels.
In the Max Tx Power field, keep the default value.
Step 6 In the 802.11A Power Settings area, check only the channels that are used in your WLAN. By doing this, the phone scans for only those channels.
In the Max Tx Power field, keep the default value.
Caution You must check at least one channel after using "Clear All," to enable the phone to access the WLAN.
Step 7 Click Save to make the change.
Related Topics
•Accessing the Configuration Web Page for a Phone
•Network Profile Settings
•Configuring Wireless Settings in a Network Profile
•Setting the Wireless LAN Security Mode
•Setting the Wireless Security Credentials
•Configuring the Pre-shared Key
•Configuring IP Network Settings
•Configuring the Alternate TFTP Server
Configuring USB Settings
To use the USB cable from your PC to a phone, you must configure the USB settings to work with the USB port on the PC. The phone has a default USB IP address of 192.168.1.100. You can change the USB port configuration on the phone in these ways:
•To obtain the IP address automatically, by getting an IP address from the PC that has DHCP set up.
•To use the IP address and subnet mask assigned in this area.
To display the USB Settings area, access the web page for the phone as described in the "Accessing the Phone Web Page" section, and then click the USB Settings hyperlink.
To change the USB port settings for the phone, follow these steps:
Procedure
Step 1 On the phone's web page, choose the USB Settings hyperlink.
Step 2 Choose one of the following options:
•Obtain IP address automatically
•Use the following IP address
Step 3 To change the static IP address, in the IP Address field, enter a new IP address that is not assigned on the subnet.
Step 4 To change the subnet for the new IP address, in the Subnet Mask field, enter the appropriate subnet address.
Step 5 Click Save to make the change.
Related Topics
•Accessing the Phone Web Page
•Configuring Network Profiles
•Configuring Trace Settings
•Using System Settings
Configuring Trace Settings
You can use the Trace Settings area on the web page to configure how the phone creates and saves trace files. Because trace files are stored in the memory of the phone, you can control the number of files and the data that you want to collect. Table 4-5 describes these configurable items.
Note When preserving trace logs, choose only the logs that need to be saved after the phone is powered off and powered on to avoid using up phone memory.
To display the Trace Settings area, access the web page for the phone as described in the "Accessing the Phone Web Page" section, and then click the Trace Settings hyperlink under Setup.
To change the trace settings for the phone, follow these steps:
Procedure
Step 1 On the phone's web page, choose the Trace Settings hyperlink.
Step 2 In the Number of Files field, choose the number of trace files to save, from 2 to 10.
Step 3 In the Remote Syslog Server area, check the box to enable a server to collect the trace files.
Step 4 If you enabled the syslog server, then you must complete these fields:
•IP Address—Enter server IP address
•Port—Enter a port number (514, 1024-65535)
Step 5 In the Module Trace Level area, check only the modules for which you want data:
•Kernel
•Configuration
•Call Control
•Network Services
•Security Subsystem
•User Interface
•Wireless
•Audio System
•System
Step 6 In the Advanced Trace Settings area, in the Preserve Logs field, choose one of the following:
•True—Save the trace logs to flash memory on the phone.
•False—Save the trace logs to RAM.
Note•When set to False, the trace logs are lost when the phone is powered off.
•When the phone is powered off, then powered back on, the Preserve Logs field is reset to False, the default value.
Step 7 Click Save to make the change.
Table 4-5 Trace Settings Area Items
Item
|
Description
|
General
|
Number of Files
|
Choose the number of trace files that the phone saves, from 2-10 files.
|
Remote Syslog Server
|
Enable Remote Syslog
|
Set up a remote server to store trace logs
IP Address—Enter server IP address
Port—Enter a port number (514, 1024-65535)
|
Module Trace Level
|
Kernel
|
Operating System data
|
Configuration
|
Phone configuration data
|
Call Control
|
Cisco Unified CallManager data
|
Network Services
|
DHCP, TFTP, CDP data
|
Security Subsystem
|
Application level security data
|
User Interface
|
Key strokes, softkeys, MMI data
|
Wireless
|
Channel scanning, authentication data
|
Audio System
|
RTP, SRTP, RTCP, DSP data
|
System
|
Firmware, upgrade data
|
Advanced Trace Settings
|
Preserve Logs
|
True—Save trace logs after powering off the phone
False—Delete trace logs
|
Related Topics
•Accessing the Phone Web Page
•Configuring Network Profiles
•Configuring USB Settings
•Using System Settings
Using System Settings
In addition to phone settings, the web page includes these areas for system management:
•Trace Logs
•Backup Settings
•Phone Upgrade
•Change Password
For information about the remaining web page topics, see the Chapter 8, "Monitoring the Cisco Unified Wireless IP Phone Remotely."
Viewing Trace Logs
You can use the Trace Logs area on the web page to view and manage trace files. System trace logs appear in a list on this page. You define how many messages are saved in the Trace Settings area. To view a trace log, click on the "Message.<n>". The trace log appears in ASCII text. You can save the text file in a directory or on a disk to send to TAC for troubleshooting purposes.
Note Trace logs are erased when the phone is powered off. To preserve trace logs, see the "Configuring Trace Settings" section.
To display the Trace Logs area, access the web page for the phone as described in the "Setting Up Your PC to Configure the Cisco Unified Wireless IP Phone 7921G" section, and then click the Trace Logs hyperlink.
Related Topics
•Using System Settings
•Backup Settings for Phone Configuration
•Upgrading Phone Firmware
•Changing the Admin Password
Backup Settings for Phone Configuration
You can use the Backup Settings area on the web page to export the phone configuration. You must set up an encryption key that encrypts the phone settings to keep them secure. When you export a configuration, all the settings in the network profiles, phone settings, USB settings, and trace are copied. None of the statistics or information fields are copied from the web pages.
Note To import a file to a phone, you must enter the same encryption key that was used to export the file.
To display the Backup Settings area, access the web page for the phone as described in the "Accessing the Configuration Web Page for a Phone" section, and then click the Backup Settings hyperlink. Table 4-6 describes the items in this area.
Table 4-6 Backup Settings Area Items
Item
|
Description
|
Import Configuration
|
Encryption Key
|
Enter the alphanumeric string up to 8-20 characters for encrypting the phone settings.
|
Import File
|
Enter the path and filename or use the Browse button to locate the file.
|
Import button
|
Click the button to import the phone settings file into the phone.
|
Export Configuration
|
Encryption Key
|
Enter the alphanumeric string up to 8-20 characters for encrypting the phone settings.
|
Export button
|
Click the button to export the phone settings file to a location on your PC or to a disc.
|
Using Network Profile Templates
At initial phone deployment, you can create a typical network profile and export the phone settings to a location that you specify, such as a folder on your PC or your network. Then, you can import the network profile template to several phones to save time.
Creating a Configuration Template
To create a phone configuration template, follow these steps:
Procedure
Step 1 Connect the USB cable to the phone and access the phone's web page using the instructions on "Accessing the Phone Web Page" section.
Step 2 On the phone's web page, choose the Network Profiles hyperlink and configure the Network Profile settings for your template configuration.
Note You can leave the Username and Password fields blank so they can be configured individually.
Step 3 Next, configure the USB Settings and Trace Settings for your template configuration.
Step 4 Choose the Backup Settings hyperlink, to access the export and import settings.
Step 5 In the Export Configuration area, enter an encryption key of from 8 to 20 characters.
Record this key because you must enter this key to import the configuration template on other phones.
Step 6 Click Export and the File Download dialog displays, and then click Save.
Step 7 Give your configuration a new file name such as 7921template.cfg.
Step 8 Choose a location on your PC or on the network for the file and then click Save.
Step 9 The encrypted configuration file contains these settings:
•Profile Name
•SSID
•Single Access Point
•Call Power Save Mode
•802.11 Mode
•WLAN Security
•Authentication Method
•User name
•Password
•Passphrase
•Encryption keys
•Use DHCP to get IP address and DNS servers
•Static Settings (if configured)
–IP Address
–Subnet Mask
–Default Router
–Primary DNS Server
–Secondary DNS Server
•Use DHCP to get TFTP Server
•Static TFTP Settings (if configured)
–TFTP Server 1
–TFTP Server 2
Advanced Network Profile Settings
•Minimum PHY rate
•Surplus Bandwidth
•802.11G Power Settings (checked ones)
•802.11A Power Settings (checked ones)
USB Settings (use one of these)
•Obtain IP address from server
or
•Static settings (if configured)
–IP address
–Subnet Mask
Trace Settings
•Number of Files
•Syslog Server (enabled/disabled)
–IP address
–Port
•Modules and error level for collection
•Preserving Logs (true/false)
Importing a Configuration Template
To import a phone configuration template, follow these steps:
Procedure
Step 1 Connect the USB cable to an unconfigured phone and access the phone's web page using the instructions on "Accessing the Phone Web Page" section.
Step 2 On the phone's web page, choose the Backup Settings hyperlink.
Step 3 In the Import Configuration area of the page, enter the Encryption Key.
Note You must enter the same key that you used to export the configuration template.
Step 4 Use the Browse button to locate the configuration template and click Open.
The configuration file downloads to the phone.
Step 5 You can use the web pages to add missing configuration items such as the username and password or make other changes at this time.
Related Topics
•Using System Settings
•Viewing Trace Logs
•Upgrading Phone Firmware
•Changing the Admin Password
Upgrading Phone Firmware
You can use the Phone Upgrade area on the web page to upgrade firmware files on the phones by using the USB connection or by using the WLAN.
To display the Phone Upgrade area, access the web page for the phone as described in the "Accessing the Configuration Web Page for a Phone" section, and then click the Phone Upgrade hyperlink.
To upgrade the phone software, enter the phone software TAR (firmware file name) or use the Browse button to locate the firmware file on the network.
Related Topics
•Using System Settings
•Viewing Trace Logs
•Backup Settings for Phone Configuration
•Changing the Admin Password
Changing the Admin Password
Cisco Unified CallManager 4.1 or Later
If you are running Cisco Unified CallManager 4.1 or later, you can use the Change Password area on the web page to change the administration password for the phone web pages.
To change the password on the web page, you must first enter the old password. Enter the new password and then reenter the new password to confirm the change.
To display the Change Password area, access the web page for the phone as described in the "Accessing the Configuration Web Page for a Phone" section, and then click the Change Password hyperlink.
Cisco Unified CallManager 5.0 or Later
If you are running Cisco Unified CallManager 5.0 or later, you must set the password in Cisco Unified CallManager Administration on the Phone Configuration page. The password set in Cisco Unified CallManager takes precedence over the password that is set on the web pages.
Caution When setting the Administration Password in the Product Specific Configuration section in Cisco Unified CallManager 5.0 Administration, you must enable TFTP encryption. Otherwise, the password appears in readable text in the phone configuration file and can be viewed from any host that has access to TFTP server.
Related Topics
•Using System Settings
•Viewing Trace Logs
•Upgrading Phone Firmware
•Backup Settings for Phone Configuration
Feedback
