Cisco CP-7961G-GE Administration Guide - Page 192

Checking Power Connection, Troubleshooting Cisco Unified IP Phone Security

Page 192 highlights

Troubleshooting Cisco Unified IP Phone Security Chapter 9 Troubleshooting and Maintenance Procedure Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Use the Erase softkey to reset phone settings to their default values. See Resetting or Restoring the Cisco Unified IP Phone, page 9-13 for details. Modify DHCP and IP settings: a. Disable DHCP. See Network Configuration Menu, page 4-5 for instructions. b. Assign static IP values to the phone. See Network Configuration Menu, page 4-5 for instructions. Use the same default router setting used for other functioning Cisco Unified IP Phones. c. Assign a TFTP server. See Network Configuration Menu, page 4-5 for instructions. Use the same TFTP server used for other functioning Cisco Unified IP Phones. On the Cisco Unified Communications Manager server, verify that the local host files have the correct Cisco Unified Communications Manager server name mapped to the correct IP address. From Cisco Unified Communications Manager, choose System > Server and verify that the server is referred to by its IP address and not by its DNS name. From Cisco Unified Communications Manager, choose Device > Phone > Find and verify that you have assigned the correct MAC address to this Cisco Unified IP Phone. For information about determining a MAC address, see Determining the MAC Address for a Cisco Unified IP Phone, page 2-13. Power cycle the phone. Checking Power Connection In most cases, a phone will restart if it powers up by using external power but loses that connection and switches to PoE. Similarly, a phone may restart if it powers up by using PoE and then gets connected to an external power supply. Troubleshooting Cisco Unified IP Phone Security Table 9-1 provides troubleshooting information for the security features on the Cisco Unified IP Phone. For information relating to the solutions for any of these issues, and for additional troubleshooting information about security and encryption, refer to Cisco Unified Communications Manager Security Guide. Table 9-1 Cisco Unified IP Phone Security Troubleshooting Problem Device authentication error. Phone cannot authenticate CTL file. Phone cannot authenticate any of the configuration files other than the ITL file. Phone cannot authenticate any of the configuration files other than the CTL file. Possible Cause CTL file does not have a Cisco Unified Communications Manager certificate or has an incorrect certificate. The security token that signed the updated CTL file does not exist in the CTL file on the phone. The configuration file may not be signed by the corresponding certificate in the phone's Trust List. The configuration file may not be signed by the corresponding certificate in the phone's Trust List. Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.0 (SCCP and SIP) 9-8 OL-21011-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241

9-8
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.0 (SCCP and SIP)
OL-21011-01
Chapter 9
Troubleshooting and Maintenance
Troubleshooting Cisco Unified IP Phone Security
Procedure
Step 1
Use the
Erase
softkey to reset phone settings to their default values. See
Resetting or Restoring the Cisco
Unified IP Phone, page 9-13
for details.
Step 2
Modify DHCP and IP settings:
a.
Disable DHCP. See
Network Configuration Menu, page 4-5
for instructions.
b.
Assign static IP values to the phone. See
Network Configuration Menu, page 4-5
for instructions.
Use the same default router setting used for other functioning Cisco Unified IP Phones.
c.
Assign a TFTP server. See
Network Configuration Menu, page 4-5
for instructions. Use the same
TFTP server used for other functioning Cisco Unified IP Phones.
Step 3
On the Cisco Unified Communications Manager server, verify that the local host files have the correct
Cisco Unified Communications Manager server name mapped to the correct IP address.
Step 4
From Cisco Unified Communications Manager, choose
System > Server
and verify that the server is
referred to by its IP address and not by its DNS name.
Step 5
From Cisco Unified Communications Manager, choose
Device > Phone > Find
and verify that you have
assigned the correct MAC address to this Cisco Unified IP Phone. For information about determining a
MAC address, see
Determining the MAC Address for a Cisco Unified IP Phone, page 2-13
.
Step 6
Power cycle the phone.
Checking Power Connection
In most cases, a phone will restart if it powers up by using external power but loses that connection and
switches to PoE. Similarly, a phone may restart if it powers up by using PoE and then gets connected to
an external power supply.
Troubleshooting Cisco Unified IP Phone Security
Table 9-1
provides troubleshooting information for the security features on the Cisco Unified IP Phone.
For information relating to the solutions for any of these issues, and for additional troubleshooting
information about security and encryption, refer to
Cisco Unified Communications Manager Security
Guide
.
Table 9-1
Cisco Unified IP Phone Security Troubleshooting
Problem
Possible Cause
Device authentication error.
CTL file does not have a Cisco Unified Communications Manager certificate or
has an incorrect certificate.
Phone cannot authenticate CTL file.
The security token that signed the updated CTL file does not exist in the CTL
file on the phone.
Phone cannot authenticate any of the
configuration files other than the ITL file.
The configuration file may not be signed by the corresponding certificate in the
phone’s Trust List.
Phone cannot authenticate any of the
configuration files other than the CTL file.
The configuration file may not be signed by the corresponding certificate in the
phone’s Trust List.