Cisco Systems 7920 manuale d’uso

Configuring the Cisco 7920 Wireless IP Phone with WEP Keys, VLANs, and LEAP Document ID: 43622 Introduction Prerequisites Requirements Components Used Related Products Conventions Background Theory Network Diagram Using Open Authentication and Static WEP Keys Configuring the Cisco 7920 Configuring the Cisco Aironet 1200 AP Using Open Authentication[...]

order to successfully implement and support the Cisco 7920, system administrators must become familiar with all of these technology areas. This document was created primarily for readers who have limited experience with one or more of the products and technologies required to install and configure a Cisco 7920 IP Phone. It will also benefit readers[...]

You can substitute any Aironet Wireless device that supports 802.11b clients. The Cisco Aironet 1200 AP examples provide some guidelines for how you should configure your Aironet device. Conventions For more information on document conventions, refer to the Cisco Technical Tips Conventions. Background Theory The Cisco 7920 is supported by Cisco Cal[...]

Network Diagram This document uses this network setup: Using Open Authentication and Static WEP Keys If you want to learn more about Wireless Security before you start this section, refer to these documents: Cisco Aironet Wireless LAN Security Overview • Security Setup for the Cisco Aironet 350 • Wireless Virtual LAN Deployment Guide • This e[...]

Step−by−Step Instructions The instructions in this section guide you through the minimum configuration steps that are required to enable a Cisco 7920 with a static WEP key. Turn on the Cisco 7920. 1. Choose Menu > Phone Settings > USB Enable / Disable [Enable] to enable the Cisco 7920 USB port. 2. Connect the Cisco 7920 to the USB cable. [...]

When this popup window appears, click Cancel : 8. Click Import to obtain the current settings on the Cisco 7920. 9.[...]

When this popup window appears, click OK . 10. Click the System Parameters tab. The System Parameters configuration screen appears. In this case, the Cisco 7920 is using Dynamic Host Configuration Protocol (DHCP) to obtain its IP parameters, including the TFTP address (Cisco CallManager server). 11.[...]

Make any changes that your phone requires. 12. Click the RF Network tab. The RF Network configuration screen appears. 13. Enter the Primary Service Set Identifier (SSID) for the Cisco Aironet 1200 AP. (You will be configuring this value in the 1200 AP in the next subtask.) Leave the Transmit Power and the Data Rate set to their default values. 14. [...]

The Network Security configuration screen appears. This is the screen where you enter the Authentication Type and the static WEP keys. The 128−bit WEP keys are created using 26 hexadecimal digits (1−9, A−F). Note: The static WEP keys must be the same on the Cisco 7920 and on the wireless infrastructure devices in your network (in this case, t[...]

Note: The Phone Lock Password tab is not covered in this document. Refer to the Cisco 7920 Administrator Guide for more information on this tab. Click Export and the next popup window appears. It is not required that you save the settings to a local file; but, if you would like to do so, click OK and then continue with the rest of this procedure. N[...]

When this popup window appears, click Yes : 22. When this popup window appears, click OK : 23. Choose File > Exit . The next popup window appears. If you want to save the Log History, click Yes and save it to disk. Otherwise, click No . 24. Right−click the USB icon on the taskbar. 25. Select Cisco 7920 USB and click Stop . 26.[...]

When this popup window appears, click OK : 27. When this popup window appears, click OK : 28. Choose Menu > Phone Settings > USB Enable / Disable [Disable] to disable the Cisco 7920 USB port. 29.[...]

Verifying There are no steps to verify this part of the configuration. It can be verified at the end of the next subtasks. Troubleshooting All of the troubleshooting guidelines can be found in the Troubleshooting Guidelines section at the end of this document. Configuring the Cisco Aironet 1200 AP The instructions in this section describe the minim[...]

To edit the SSID, select the required one from the Current SSID List and edit it. Because the configuration requires the use of Open Authentication, check Open Authentication in the Authentication Settings area (it is checked by default, if you have not changed it). 3. Click Apply−All to apply the SSID and the Authentication settings for all of t[...]

Note: The WEP key input appears as asterisks. This is normal behavior. For more information on the configuration of WEP keys, refer to Configuring WEP and WEP Features. Leave the Key Size set to the default value ( 128 bit ). c. Click Apply−Radio0 or Apply−All (as appropriate) to save the settings. d. When this popup warning appears, click OK :[...]

If the Cisco CallManager configuration is correct, the Cisco 7920 should have registered with the CallManager server. You should now be able to place calls between the Cisco 7920 and your other IP Phone. 2. Troubleshooting All of the troubleshooting guidelines can be found in the Troubleshooting Guidelines section at the end of this document. Using[...]

Turn on the Cisco 7920. 1. Choose Menu > Phone Settings > USB Enable / Disable [Enable] to enable the Cisco 7920 USB port. 2. Connect the Cisco 7920 to the USB cable. (The USB cable should already be connected to the PC.) 3. Start the Cisco 7920 Configuration Utility. 4. Log in to the Cisco 7920. The default User Name is Admin . The default P[...]

When this popup window appears, click Cancel : 8. Click Import to obtain the current settings on the Cisco 7920. 9.[...]

When this popup window appears, click OK : 10. Click the RF Network tab. The RF Network configuration screen appears. Change the SSID 1 value to VLAN2 . 11.[...]

Click Export and the next popup window appears. It is not required that you save the settings to a local file; but, if you would like to do so, click OK and then continue with the rest of this procedure. Note: The static WEP keys are not saved in the configuration file. If you reset a phone to the factory defaults, you can not just download the con[...]

When this popup window appears, click OK : 16. Choose File > Exit . The next popup window appears. If you want to save the Log History, click Yes and save it to disk. Otherwise, click No . 17. Right−click the USB icon on the taskbar. 18. Select Cisco 7920 USB and click Stop . 19.[...]

When this popup window appears, click OK : 20. When this popup window appears, click OK : 21. Choose Menu > Phone Settings > USB Enable / Disable [Disable] to disable the Cisco 7920 USB port. Note: If you have not yet configured VLAN on the Cisco Aironet 1200 AP, the Cisco 7920 will show the error message No AP Found . This is the expected be[...]

Verifying There are no steps to verify this part of the configuration. It can be verified at the end of the next subtask. Troubleshooting All of the troubleshooting guidelines can be found in the Troubleshooting Guidelines section at the end of this document. Configuring the Cisco Aironet 1200 AP with a VLAN The instructions in this section guide y[...]

When this popup warning appears, click OK : 4. Configure the WEP Key for the VLAN1. Choose Security > Encryption Manager . a. Select the VLAN ID 1 on the Set Encryption Mode and Keys for VLAN drop−down list. b. In the Encryption Modes area, click the WEP Encryption radio button, and select Mandatory . c. Click the Encryption Key 1 radio button[...]

The VLAN1 is not used for the remainder of this document. This subtask is provided here as a reminder that you must associate an SSID with the default VLAN, if you are using VLANs on the Cisco Aironet 1200 AP. This is also the native 802.1Q VLAN for the 1200 AP. Step−by−Step Instructions for Configuring VLAN2 The steps in this section describe [...]

Note: The WEP key input appears as asterisks. This is normal behavior. For more information on the configuration of WEP keys, refer to Configuring WEP and WEP Features. Caution: Enhanced Media Interface Connector (MIC) verification for WEP and the Temporal Key Integrity Protocol (TKIP) feature are not supported on the initial version of the Cisco 7[...]

The Cisco 7920 should have registered with the Cisco CallManager server. Note: The IP address of the phone is now 10.21.8.22. This is from the IP subnet 10.21.8.0 that is assigned to VLAN2. In the previous configuration, before the VLAN was created, it was using IP address 10.21.7.20. You should be able to place calls between the Cisco 7920 and you[...]

If you are using a different Catalyst switch, refer to VLANs (Virtual LANs) & VTP (VLAN Trunking Protocol) Technical Support for general information on VLANs and Trunking. Refer to the Cisco Product Support page Catalyst LAN & ATM Switches for configuration information for your switch. This partial configuration establishes an 802.1Q trunk [...]

Pruning VLANs Enabled: 2−1001 Priority for untagged frames: 0 Override vlan tag priority: FALSE Voice VLAN: none Appliance trust: none Issue the show interface fastethernet 2/3 switchport command to verify that the Cisco Aironet 1200 AP port is configured correctly. In the next sample output, you can see these settings: The port is in Trunk mode.[...]

Troubleshooting There are no troubleshooting steps for this task. Configuring the Inter−VLAN Router This subtask provides the partial configuration required for any Cisco IOS Software−based router that supports 802.1Q trunking over a Fast Ethernet port. If you would like to review the concepts involved in configuring inter−VLAN routing, refer[...]

Router# show vlan 2 Virtual LAN ID: 2 (IEEE 802.1Q Encapsulation) vLAN Trunk Interface: FastEthernet0/0.1 This is configured as native Vlan for the following interface(s): FastEthernet0/0.1 Protocols Configured: Address: Received: Transmitted: IP 10.21.8.72 9586246 10279750 Issue the show vlan 9 command to verify that the VLAN9 inter−VLAN router [...]

When this popup window appears, click OK : 6. Choose Edit > Settings Wizard . 7. When this popup window appears, click Cancel : 8.[...]

Click Import to obtain the current settings on the Cisco 7920. 9. When this popup window appears, click OK : 10. Click the Network Security tab. The network Security configuration page appears. Click the LEAP radio button. a. Enter a User Name (in this case, fred ) and a Password. b. 11.[...]

Note: If you want the user to manually enter a LEAP password, then this must be set directly on the Cisco 7920. Step 21 at the end of this subtask explains how to setup the Cisco 7920 to prompt for LEAP passwords. You do not need to enter a password in the Password field before you export this configuration. Set the all of the WEP keys to None . No[...]

When this popup window appears, click Yes : 15. When this popup window appears, click OK : 16. Choose File > Exit . The next popup window appears. If you want to save the Log History, click Yes and save it to disk. Otherwise, click No . 17. Right−click the USB icon on the task bar. 18. Select Cisco 7920 USB and click Stop . 19.[...]

When this popup window appears, click OK : 20. When this popup window appears, click OK : 21. Choose Menu > Phone Settings > USB Enable / Disable [Disable] to disable the Cisco 7920 USB port. Note: The Cisco 7920 will not be able to authenticate or associate with the Cisco Aironet 1200 AP, nor will it be able to register with the Cisco CallMa[...]

If you want the Cisco 7920 to prompt the user for a LEAP password instead of use the password stored the Cisco 7920s configuration, continue with this step. Otherwise, proceed to the next section of this document. On the Cisco 7920, choose Menu > Network Config > 802.11b configuration > LEAP > prompt Mode > On . This forces the us[...]

10.21.15.10 ). Click Apply to save the settings. b. When this popup warning appears, click OK : 5. Choose Security > Encryption Manager . The Encryption Manager page appears. Select the VLAN ID 2 on the Set Encryption Mode and Keys for VLAN drop−down list. a. In the Encryption Modes area, click the WEP Encryption radio button, and select Manda[...]

Caution: Do not enable MIC or TKIP. They are not supported in this release of the Cisco 7920. If you enable either or both of these features, the Cisco 7920 is not able to communicate with the Cisco Aironet 1200 AP. When this popup warning appears, click OK : 7. Choose Security > SSID Manager . Select the SSID for VLAN2 in the Current SSID List [...]

Configuring the Cisco Secure Server for LEAP This subtask guides you through a basic Cisco Secure ACS configuration. It will support LEAP on a Cisco 7920, for the user that you assigned to the Cisco 7920 in a previous section of this document. A complete explanation of this process is beyond the scope of this document. However, the online help prov[...]

Note: This server was originally installed to be used as an Aironet RADIUS Server for a different Cisco Aironet 1200 AP Client. These steps explain how to add another Aironet RADIUS AAA client: Click Add Entry on the AAA Clients menu. a. Enter the name of the Cisco Aironet 1200 AP (in this case, AP1200−51d4be ). b. Enter the IP Address (in this c[...]

The new client appears on the menu. Click the User Setup button to navigate to the User Setup page. Enter the same user name that you assigned to the Cisco 7920 in the Configuring the Cisco 7920 section of this document, and click Add/Edit . a. 3.[...]

Enter the users Real Name and a Description. b. Scroll down to the User Setup area. c. Select the Password Authentication database that you will be using (in this case, the local Cisco Secure ACS Database). d. Enter and confirm the Password that you assigned to this users Cisco 7920 in Configuring the Cisco 7920 section of this document. e.[...]

Click the Submit button at the bottom of the page. f. Click the System Configuration button to navigate to the System Configuration page. Click Logging . a. 4.[...]

Click CSV Failed Attempts . b. Check the Log to CSV Failed Attempts report check box. c. Accept the defaults for the column values, and click Submit . d. Click CSV Passed Authentications . e. Check the Log to CSV Passed Authentications report check box. f. Accept the defaults for the column values, and click Submit . g. Click CSV RADIUS Accounting [...]

Check the Log to CSV RADIUS Accounting report check box. i. Accept the defaults for the column values, and click Submit . j. When you are done, the Logging Configuration area should like this: This completes the configuration steps required to enable the Cisco 7920 to do LEAP authentication. 5. Verifying If the Cisco 7920 is already powered on, pow[...]

Note: If it failed to authenticate and associate with the Cisco Aironet 1200 AP, see the Troubleshooting Guidelines section of this document. The Select a Passed Authentication Log File page appears. Click the Passed Authentications active.csv file. The Passed Authentication active.csv page appears. 3. You should see an entry for the Cisco 7920, wh[...]

Cisco 7920 Error Message − Association Failed, No AP Found • Cisco 7920 Error Message − No Service IP Config Failed • Cisco 7920 Error Message − Registration Rejected • Cisco 7920 Error Message − Connecting to Cisco CallManager 0−5 (cannot connect, registration fails) • Cisco 7920 Configuration Utility Can Not Connect to Cisco 792[...]

Note: If you need help with the the text entry feature on the Cisco 7920, see the Background Theory section of this document. Choose Edit Menu > Network Config > 802.11b Configuration > Wireless Settings > SSID > SSID1 > Specify . When you are done, click OK . 1. Turn the Cisco 7920 off and back on again. 2. Refresh the Cisco Airo[...]

Cisco 7920 Error Message − Registration Rejected This message means that the Cisco CallManager server with which the Cisco 7920 attempted to register does not have an entry for the phone, and Auto−Registration is not enabled. Refer to Troubleshooting Cisco IP Phone (7910, 7940, 7960, 12SP, and VIP30) Registration Problems with Cisco CallManager[...]

The easiest way to do this is to power off the Cisco Aironet 1200 AP. • Another way is to change the SSID on the phone directly: Choose Edit Menu > Network Config > 802.11b Configuration > Wireless Settings > SSID > SSID1 > Specify . When you are done, click OK . • Note: If you need help with the text entry feature on the Cisc[...]

The Failed Attempts active.csv page appears. The Authen−Failure−Code (Authentication) error messages are usually easy to understand. In this example, the Cisco 7920 tried to authenticate before the user name fred was entered into the user database on the Cisco Secure ACS. You might also get this message if the Cisco 7920 is configured wit[...]

inter−VLAN routing configured. See the Configuring 802.1Q Trunking on the Catalyst 2924 XL section of this document. General Troubleshooting Hints All devices must have IP connectivity. • The Cisco Aironet 1200 AP must have the IP address of the Cisco Secure ACS configured. • The Cisco Secure ACS must have a Aironet RADIUS Client Entry for th[...]

Related Information QoS (Quality of Service) Technical Support • Aironet 340 Series Wireless LAN Products • Aironet 340 Series Technical Support • Aironet 350 Series Wireless LAN Products • Aironet 350 Series Technical Support • Aironet 1100 Series Wireless LAN Products • Aironet 1100 Series Technical Support • Aironet 1200 Series Wir[...]