-
Cisco Unified IP Phone Model 7960G and 7940G Administration Guide for Cisco Unified CallManager Release 4.2.3
-
Cisco Unified IP Phone Model 7960G/7940G Administration Guide for Cisco Unified CallManager Release 4.2(3)
-
Preface
-
An Overview of the Cisco Unified IP Phone
-
Preparing to Install the Cisco Unified IP Phone on Your Network
-
Setting Up the Cisco Unified IP Phone
-
Configuring Settings on the Cisco Unified IP Phone
-
Configuring Features, Templates, Services, and Users
-
Viewing Model Information, Status, Statistics, and Security Information on the Cisco Unified IP Phone
-
Monitoring the Cisco Unified IP Phone Remotely
-
Troubleshooting the Cisco Unified IP Phone
-
Providing Information to Users Via a Website
-
Supporting International Users
-
Technical Specifications
-
Index
-
Feedback
Table Of Contents
An Overview of the Cisco Unified IP Phone
Understanding the Cisco Unified IP Phone 7960G and 7940G
What Networking Protocols Are Used?
What Features are Supported on the Cisco Unified IP Phone 7960G and 7940G?
Configuring Telephony Features
Configuring Network Parameters Using the Cisco Unified IP Phone
Providing Users with Feature Information
Understanding Security Features for Cisco Unified IP Phones
Overview of Supported Security Features
Identifying Encrypted and Authenticated Phone Calls
CAPF Interaction when the Phone Resets
Overview of Configuring and Installing the Cisco Unified IP Phone 7960G and 7940G
Configuring Cisco Unified IP Phones in Cisco Unified CallManager
Checklist for Configuring the Cisco Unified IP Phone in Cisco Unified CallManager
Installing Cisco Unified IP Phones
Checklist for Installing the Cisco Unified IP Phone
Unlocking and Locking Configuration Options
An Overview of the Cisco Unified IP Phone
The Cisco Unified IP Phone is a full-featured telephone that provides voice communication over an Internet Protocol (IP) network. It functions much like a traditional analog telephone, allowing you to place and receive phone calls and to access features such as mute, hold, transfer, and speed dial. In addition, because the phone is connected to your data network, it offers enhanced IP telephony features, including access to network information and services, and customizeable features and services. The phone also supports security features that include file authentication, device authentication, signaling encryption, and media encryption.
This manual describes the Cisco Unified IP Phone 7960G and the Cisco Unified IP Phone 7940G. These phones support G.711, G.729, G.729a, G.729b, G.729ab, and wideband (16bits, 16kHz) audio compression.
A Cisco Unified IP Phone, like other network devices, must be configured and managed.
This chapter includes the following topics:
•
Understanding the Cisco Unified IP Phone 7960G and 7940G
•
•
•
•
•
Caution
Understanding the Cisco Unified IP Phone 7960G and 7940G
The Cisco Unified IP Phone 7960G and 7940G are full-featured, multiline telephones. They function as managerial-level office telephones, replacing traditional analog telephones in an IP telephony network.
The Cisco Unified IP Phone 7960G and 7940G differ only in the number of available line or speed dial buttons. The Cisco Unified IP Phone 7940G has two lines, and the 7960G has six lines.
The main components of both phones are illustrated in Figure 1-1 and Figure 1-2, and explained in the table that follows these figures.
Figure 1-1 Cisco Unified IP Phone 7960G
Figure 1-2 Cisco Unified IP Phone 7940G
What Networking Protocols Are Used?
Cisco Unified IP Phones support several industry-standard and Cisco networking protocols required for voice communication. Table 1-1 provides an overview of the networking protocols that the Cisco Unified IP Phone 7960G and 7940G support.
Related Topics
•
•
•
What Features are Supported on the Cisco Unified IP Phone 7960G and 7940G?
The Cisco Unified IP Phone 7960G and 7940G function much like traditional analog phones, allowing you to place and receive telephone calls. In addition to traditional telephony features, the Cisco Unified IP Phone includes features that enable you to administer and monitor the phone as a network device.
This section covers the following topics:
•
•
•
Feature Overview
Cisco Unified IP Phones provide traditional telephony functionality, such as call forwarding and transferring, redialing, speed dialing, conference calling, and voice messaging system access. Cisco Unified IP Phones also provide a variety of other features. For an overview of the telephony features that the Cisco Unified IP Phone supports and for tips on configuring them, see the "Telephony Features Available for the Phone" section on page 5-2.
Like other network devices, you must configure the Cisco Unified IP Phones to prepare them to access Cisco Unified CallManager and the rest of the IP network. By using DHCP, you will have fewer settings to configure on the phone, but the phone allows you to manually configure the IP address, TFTP server, and subnet mask if your network requires it. For instructions on configuring the network settings on the Cisco Unified IP Phones, see "Configuring Settings on the Cisco Unified IP Phone."
The Cisco Unified IP Phone can interact with other services and devices on your IP network to provide enhanced functionality. For example, you can integrate the Cisco Unified IP Phones with the corporate Lightweight Directory Access Protocol 3 (LDAP3) standard directory to enable users to search for co-worker contact information directly from their IP phones. You can also use XML to enable users to access information such as weather, stocks, quote of the day, and other web-based information. For information about configuring such services, see the "Configuring Corporate and Personal Directories" section on page 5-18 and the "Setting Up Services" section on page 5-21.
Finally, because the Cisco Unified IP Phone is a network device, you can obtain detailed status information from it directly. This information can assist you with troubleshooting any problems users might encounter when using their IP phones. See "Viewing Model Information, Status, Statistics, and Security Information on the Cisco Unified IP Phone," for more information.
Related Topics
•
•
•
Configuring Telephony Features
You can modify additional settings for the Cisco Unified IP Phone from the Cisco Unified CallManager Administration application. Use this web-based application to set up phone registration criteria and calling search spaces, to configure corporate directories and services, and to modify phone button templates, among other tasks. See the "Configuring Features, Templates, Services, and Users" section on page 5-1.
In some places, this manual provides partial instructions for procedures that involve Cisco Unified CallManager Administration. These instructions are intended to point you to the appropriate page in the Cisco Unified CallManager application and to provide some initial guidance.
For more information about the Cisco Unified CallManager Administration application, refer to Cisco Unified CallManager documentation, including Cisco Unified CallManager Administration Guide. You can also use the context-sensitive help available within the application for guidance.
You can access the complete Cisco Unified CallManager documentation suite at this location:
http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/index.htm
Related Topic
•
Configuring Network Parameters Using the Cisco Unified IP Phone
You can configure features such as DHCP, TFTP, and IP settings on the phone itself. You can also obtain statistics about a current call or firmware versions on the phone.
For more information about configuring features and viewing statistics from the phone, see "Configuring Settings on the Cisco Unified IP Phone" and see "Viewing Model Information, Status, Statistics, and Security Information on the Cisco Unified IP Phone."
Related Topics
•
•
Providing Users with Feature Information
If you are a system administrator, you are likely the primary source of information for Cisco Unified IP Phone users in your network or company. To ensure that you distribute the most current feature and procedural information, familiarize yourself with Cisco Unified IP Phone documentation. Make sure to visit the Cisco Unified IP Phone web site:
http://www.cisco.com/univercd/cc/td/doc/product/voice/c_ipphon/index.htm.
From this site, you can view various user guides. For complete ordering information, see the "Obtaining Documentation" section on page xvi.
In addition to providing documentation, it is important to inform users of available Cisco Unified IP Phone features—including those specific to your company or network—and of how to access and customize those features, if appropriate.
For a summary of some of the key information that phone users need their system administrators to provide, see "Providing Information to Users Via a Website."
Understanding Security Features for Cisco Unified IP Phones
Implementing security in the Cisco Unified CallManager system protects against data tampering threats and identity theft of the phones. To alleviate these threats, the Cisco IP telephony network establishes and maintains authenticated and encrypted communication streams between the phones and the server and digitally signs files before they are transferred to phones.
Table 1-2 shows where you can find additional information about security in this and other documents.
Table 1-2 Cisco Unified IP Phone and Cisco Unified CallManager Security Topics
Detailed explanation of security, including set up, configuration, and troubleshooting information for Cisco Unified CallManager and Cisco Unified IP Phones
Refer to Cisco Unified CallManager Security Guide
Security features supported on the Cisco Unified IP Phone
Restrictions regarding security features
See the "Security Restrictions" section
How CAPF interacts with a phone when the phone resets
Identifying phone calls for which security is implemented
See the "Identifying Encrypted and Authenticated Phone Calls" section
TLS connection
Security and the phone startup process
See the "Understanding the Phone Startup Process" section on page 2-8
Security and phone configuration files
See the "Understanding Phone Configuration Files" section on page 2-7
Configuring a locally significant certificate (LSC) on the phone
See the "Configuring Security on the Cisco Unified IP Phone" section
Understanding security icons in the CallManager 1 through CallManager 5 options in the Network Configuration Menu on the phone
Security items on the Security Configuration Menu on the phone
Changing the TFTP Server 1 option on the phone when security is implemented
See the "CTL File Screen" section
Removing a certificate trust list (CTL) file from the phone
See the "CTL File Screen" section
Security items on the Trust List menu on the phone
See the "Trust List Screen" section
Disabling access to a phone's web pages
Troubleshooting
•
•
Resetting or restoring the phone
See the "Troubleshooting Cisco Unified IP Phone Security" section on page 8-12
Overview of Supported Security Features
Table 1-3 provides an overview of the security features that the Cisco Unified IP Phone support. For more information about these features and about Cisco Unified CallManager and Cisco Unified IP Phone security, refer to Cisco Unified CallManager Security Guide.
For information about current security settings on a phone, choose Settings > Security Configuration. For more information, see the "Security Configuration Menu" section.
Note
Table 1-3 Overview of Security Features
Image authentication
Signed binary files (with the extension .sbn) prevent tampering with the firmware image before it is loaded on a phone. Tampering with the image causes a phone to fail the authentication process and reject the new image.
Customer-site certificate installation
Each Cisco Unified IP Phone requires a unique certificate for device authentication. Phones include a manufacturing installed certificate (MIC), but for additional security, you can specify in Cisco Unified CallManager Administration that a certificate be installed by using the CAPF. Alternatively, you can install an LSC from the Security Configuration menu on the phone. See the "Configuring Security on the Cisco Unified IP Phone" section for more information.
Device authentication
Occurs between the Cisco Unified CallManager server and the phone when each entity accepts the certificate of the other entity. Determines whether a secure connection between the phone and a Cisco Unified CallManager should occur, and, if necessary, creates a secure signaling path between the entities using TLS protocol. Cisco Unified CallManager will not register phones unless they can be authenticated by the Cisco Unified CallManager.
File authentication
Validates digitally-signed files that the phone downloads. The phone validates the signature to make sure that file tampering did not occur after the file creation. Files that fail authentication are not written to Flash memory on the phone. The phone rejects such files without further processing.
Signaling Authentication
Uses the TLS protocol to validate that no tampering has occurred to signaling packets during transmission.
Manufacturing installed certificate
Each Cisco Unified IP Phone contains a unique manufacturing installed certificate (MIC), which is used for device authentication. The MIC is a permanent unique proof of identity for the phone, and allows Cisco Unified CallManager to authenticate the phone.
Secure SRST reference
After you configure a SRST reference for security and then reset the dependent devices in Cisco Unified CallManager Administration, the TFTP server adds the SRST certificate to the phone cnf.xml file and sends the file to the phone. A secure phone then uses a TLS connection to interact with the SRST-enabled router.
Media encryption
Uses SRTP to ensure that the media streams between supported devices proves secure and that only the intended device receives and reads the data. Includes creating a media master key pair for the devices, delivering the keys to the devices, and securing the delivery of the keys while the keys are in transport.
Signaling Encryption
Ensures that all SCCP signaling messages that are sent between the device and the Cisco Unified CallManager server are encrypted.
CAPF (Certificate Authority Proxy Function)
Implements parts of the certificate generation procedure that are too processing-intensive for the phone, and it interacts with the phone for key generation and certificate installation. The CAPF can be configured to request certificates from customer-specified certificate authorities on behalf of the phone, or it can be configured to generate certificates locally.
Optional disabling of the web server functionality for a phone
You can prevent access to a phone's web page, which displays a variety of operational statistics for the phone.
Phone hardening
Additional security options, which you control from Cisco Unified CallManager Administration:
•
•
•
•
•
Note
Related Topics
•
Identifying Encrypted and Authenticated Phone Calls
When security is implemented for a phone, you can identify authenticated or encrypted phone calls by icons on the phone screen.
In an authenticated call, all devices participating in the establishment of the call are authenticated by the Cisco Unified CallManager. When a call in progress is authenticated end-to-end, the call progress icon to the right of the call duration timer in the phone screen changes to this icon
In an encrypted call, all devices participating in the establishment of the call are authenticated by the Cisco Unified CallManager. In addition, call signaling and media streams are encrypted. An encrypted call offers the highest level of security, providing integrity and privacy to the call. When a call in progress is being encrypted, the call progress icon to the right of the call duration timer in the phone screen changes to this icon
.
If the call is routed through non-IP call legs, for example, H.323 or PSTN, the call will be nonsecure even though it is encrypted within the IP network and has a lock icon associated with it.
Related Topic
•
•
Security Restrictions
The following restrictions apply to encrypted calls:
•
•
If the initiator phone is configured for encryption, the barge initiator can barge into an authenticated or nonsecure call from the encrypted phone. After the barge occurs, Cisco Unified CallManager classifies the call as nonsecure.
If the initiator phone is configured for encryption, the barge initiator can barge into an encrypted call, and the phone indicates that the call is encrypted.
A user can barge into an authenticated call, even if the phone that is used to barge is nonsecure. The authentication icon continues to display on the authenticated devices in the call, even if the initiator phone does not support security.
Related Topics
•
•
CAPF Interaction when the Phone Resets
The following examples describe how CAPF interacts with the Cisco Unified IP Phone when the phone is reset by a user or by Cisco Unified CallManager. In these examples, if an LSC does not already exist in the phone and if By Existing Certificate is selected for the CAPF Authentication Mode, the CAPF certificate operation will fail.
Example 1
In this example the phone is reset after you configure the Device Security Mode to Nonsecure and the CAPF Authentication Mode to By Null String or By Existing Certificate (Precedence...). After the phone resets, it immediately registers with the primary Cisco Unified CallManager and receives the configuration file. The phone then automatically initiates a session with CAPF to download the LSC. After the LSC exists in the phone, configure the Device Support Mode to Authenticated or Encrypted.
Example 2
In this example, the phone is reset after you configure the Device Security Mode to Authenticated or Encrypted and the CAPF Authentication Mode to By Null String or By Existing Certificate (Precedence...). The phone does not register with the primary Cisco Unified CallManager until the CAPF session ends and the phone has installed the LSC. After the session ends, the phone registers and immediately runs in authenticated or encrypted mode.
You cannot configure By Authentication String in this example because the phone will not automatically contact the CAPF server and the registration will fail if the phone does not have a valid LSC.
Related Topics
•
•
Overview of Configuring and Installing the Cisco Unified IP Phone 7960G and 7940G
When deploying a new IP telephony system, system administrators and network administrators must complete several initial configuration tasks to prepare the network for IP telephony service. For information and a checklist for setting up and configuring a complete Cisco IP telephony network, refer to the "System Configuration Overview" chapter in the Cisco Unified CallManager System Guide.
After you have set up the IP telephony system and configured system-wide features in Cisco Unified CallManager, you can add IP phones to the system.
The following topics provide an overview of procedures for adding Cisco Unified IP Phones to your network:
•
•
Configuring Cisco Unified IP Phones in Cisco Unified CallManager
To add phones to the Cisco Unified CallManager database, you can use:
•
•
•
•
For more information about these choices, see the "Methods for Adding Phones to the Cisco Unified CallManager Database" section on page 2-11.
For general information about configuring phones in Cisco Unified CallManager, refer to the "Cisco Unified IP Phone" chapter in the Cisco Unified CallManager System Guide.
Related Topic
Checklist for Configuring the Cisco Unified IP Phone in Cisco Unified CallManager
Checklist for Configuring the Cisco Unified IP Phone in Cisco Unified CallManager
Table 1-4 provides an overview and checklist of configuration tasks for the Cisco Unified IP Phone in Cisco Unified CallManager Administration. The list presents a suggested order to guide you through the phone configuration process. Some tasks are optional, depending on your system and user needs. For detailed procedures and information, refer to the sources in the list.
Table 1-4 Checklist for Configuring the Cisco Unified IP Phone 7960G and 7940G in Cisco Unified CallManager
1. Gather the following information about the phone:
•
•
•
•
•
•
•
•
•
Provides list of configuration requirements for setting up phones.
Identifies preliminary configuration that you need to perform before configuring individual phones, such as phone button templates or softkey templates.
Refer to the Cisco Unified CallManager System Guide, Cisco Unified IP Phone chapter.
See the "Telephony Features Available for the Phone" section on page 5-2.
2. Customize phone button templates (if required).
Changes the number of line buttons, speed-dial buttons, Service URL buttons or adds a Privacy button to meet user needs.
Refer to the Cisco Unified CallManager Administration Guide, Phone Button Template Configuration chapter.
See the"Modifying Phone Button Templates" section on page 5-20.
3. Add and configure the phone by completing these required fields in the Phone Configuration window:
•
•
•
•
•
•
•
•
•
Adds the device with its default settings to the Cisco Unified CallManager database.
Refer to the Cisco Unified CallManager Administration Guide, Cisco Unified IP Phone Configuration chapter.
For information about Product Specific Configuration fields, refer to "I" Button Help in the Phone Configuration window.
4. Add and configure directory numbers (lines) on the phone by completing these required fields in the Directory Number Configuration window.
•
•
•
•
•
Adds primary and secondary directory numbers and features associated with directory numbers to the phone.
Refer to the Cisco Unified CallManager Administration Guide, Cisco Unified IP Phone Configuration chapter: "Adding a Directory Number" section "Creating a Cisco Unity Voice Mailbox" section.
See the "Telephony Features Available for the Phone" section on page 5-2.
5. Customize softkey templates (optional).
Adds, deletes, or changes order of softkey features that display on the user's phone to meet feature usage needs.
Refer to the Cisco Unified CallManager Administration Guide, Softkey Template Configuration chapter.
See the "Configuring Softkey Templates" section on page 5-20.
6. Configure speed-dial buttons and assign speed-dial numbers (optional).
Adds speed-dial buttons and numbers,
Note
Refer to the Cisco Unified CallManager Administration Guide, Cisco Unified IP Phone Configuration chapter, "Configuring Speed-Dial Buttons" section.
7. Configure Cisco Unified IP Phone services and assign services (optional).
Provides IP Phone services.
Note
Refer to the Cisco Unified CallManager Administration Guide, Cisco Unified IP Phone Services Configuration chapter.
8. Assign services to phone buttons (optional).
Provides single button access to an IP phone service or URL.
Refer to the Cisco Unified CallManager Administration Guide, Cisco Unified IP Phone Configuration chapter, "Adding a Cisco Unified IP Phone Service to a Phone Button" section.
9. Add user information by configuring required fields: (optional).
•
•
•
•
Adds user information to the global directory for Cisco Unified CallManager.
Note
Refer to the Cisco Unified CallManager Administration Guide,
Adding a New User chapter.See the "Adding Users to Cisco Unified CallManager" section on page 5-22.
10. Associate a user with a phone (optional).
Provides users with control over their phone such as forwarding calls or adding speed-dial numbers or services.
Note
Refer to the Cisco Unified CallManager Administration Guide,
Adding a New User chapter, "Associating Devices to a User" section.
Installing Cisco Unified IP Phones
After you have added the phones to the Cisco Unified CallManager database, you can complete the phone installation. You (or the phone users) can install the phone at the users's location. The Cisco Unified IP Phone Installation Guide that ships in the box with each phone provides directions for connecting the phone handset, cables, and other accessories.
After the phone is connected to the network, the phone startup process begins and the phone registers with Cisco Unified CallManager. To finish installing the phone, configure the network settings on the phone depending on whether you enable or disable DHCP service.
If you used auto-registration, you need to update the specific configuration information for the phone such as associating the phone with a user, changing the button table, or directory number.
Note
Related Topic
Checklist for Installing the Cisco Unified IP Phone
Checklist for Installing the Cisco Unified IP Phone
Table 1-5 provides an overview and checklist of installation tasks for the Cisco Unified IP Phone. The list presents a suggested order to guide you through the phone installation. Some tasks are optional, depending on your system and user needs. For detailed procedures and information, refer to the sources in the list.
Table 1-5 Checklist for Installing the Cisco Unified IP Phone 7960G and 7940G
1. Choose the power source for the phone:
•
•
Determines how the phone receives power.
See the "Providing Power to the Cisco Unified IP Phone" section on page 2-4.
2. Assemble the phone, adjust phone placement, and connect the network cable.
Locates and installs the phone in the network.
See the "Installing the Cisco Unified IP Phone" section.
See the "Adjusting Placement of the Cisco Unified IP Phone" section.
3. Add a Cisco Unified IP Phone Expansion Module 7914 to the Cisco Unified IP Phone (optional).
Extends functionality to a Cisco Unified IP Phone by adding 14 line appearances or speed dial numbers.
See the "Attaching the Cisco Unified IP Phone Expansion Module 7914" section.
4. Monitor the Phone StartUp Process.
Verifies that phone is configured properly.
5. Configure these network settings on the phone by choosing Settings>Network Configuration.
Note
To enable DHCP:
•
•
Enter IP address for TFTP Server 1.To disable DHCP:
•
•
•
•
•
•
Enter IP address for TFTP Server 1.Using DHCP—The IP address is automatically assigned and the Cisco Unified IP Phone is directed to a TFTP Server.
Note
Without DHCP—You must configure the IP address, TFTP server, subnet mask, domain name, and default router locally on the phone.
See the "Configuring Startup Network Settings" section.
6. Set up Security on the phone.
Provides protection against data tampering threats and identity theft of phones.
See the "Configuring Security on the Cisco Unified IP Phone" section.
7. Make calls with the Cisco Unified IP Phone.
Verifies that the phone and features work correctly.
Refer to the Cisco Unified IP Phone 7960G and 7940G Guide.
8. Provide information to end users about how to use their phones and how to configure their phone options.
Ensures that users have adequate information to successfully use their Cisco Unified IP Phones.
Unlocking and Locking Configuration Options
To prevent users from making changes that could affect the operation of a phone, Configuration options in the Network Configuration menu and in the Security Configuration menu are locked by default. You must unlock these options before you can change them and perform many of the procedures that are described in this manual.
When options are inaccessible for modification, a locked padlock
icon appears on this menu.
To unlock or lock options in the Network Configuration menu or in the Security Configuration, press **# before you display the menu or while the menu is displayed. This action either locks or unlocks the options, depending on the previous state.
Make sure to lock options after you have made your changes.
Caution
Related Topics
•
•
•
or 
