Troubleshooting Cisco Unified Ip Phone Security - Cisco 7962G Administration Manual
For cisco unified communications manager 6.0
Hide thumbs
Also See for 7962G:
- Administration manual (235 pages) ,
- User manual (110 pages) ,
- Specifications (5 pages)
Table of Contents
Advertisement
Chapter 9
Troubleshooting and Maintenance
Troubleshooting Cisco Unified IP Phone Security
Table 9-1
For information relating to the solutions for any of these issues, and for additional troubleshooting
information about security and encryption, refer to Cisco Unified Communications Manager Security
Guide.
Table 9-1
Cisco Unified IP Phone Security Troubleshooting
Problem
Device authentication error.
Phone cannot authenticate CTL file. The security token that signed the updated CTL file does not
Phone cannot authenticate any of the
configuration files other than the
CTL file.
Phone reports TFTP authorization
failure.
Phone does not register with Cisco
Unified Communications Manager.
Phone does not request signed
configuration files.
802.1X Enabled on Phone but Not Authenticating
Phone cannot obtain a
DHCP-assigned IP address
Phone does not register with
Cisco Unified Communications
Manager
Phone status display as
"Configuring IP" or "Registering"
802.1X Authentication Status
displays as "Held" (see the
Authentication and Status" section
on page
4-33).
Status menu displays 802.1x status
as "Failed" (see the
"Call Statistics
Screen" section on page
7-12).
802.1X Not Enabled
OL-12641-01
provides troubleshooting information for the security features on the Cisco Unified IP Phone.
Possible Cause
CTL file does not have a Cisco Unified Communications
Manager certificate or has an incorrect certificate.
exist in the CTL file on the phone.
Bad TFTP record.
The TFTP address for the phone does not exist in the CTL
•
file.
If you created a new CTL file with a new TFTP record, the
•
existing CTL file on the phone may not contain a record for
the new TFTP server.
The CTL file does not contain the correct information for the
Cisco Unified Communications Manager server.
The CTL file does not contain any TFTP entries with
certificates.
These errors typically indicate that 802.1X is enabled on the
phone, but the phone is unable to authenticate.
1.
Verify that you have properly configured the required
components
Unified IP Phones" section on page
Confirm that the shared secret is configured on the phone
2.
(see the
"Security Configuration Menu" section on
page 4-25
"802.1X
If the shared secret is configured, verify that you have
–
the same shared secret entered on the authentication
server.
If the shared secret is not configured, enter it and ensure
–
that it matches the one on the authentication server.
Cisco Unified IP Phone 7962G and 7942G Administration Guide for Cisco Unified Communications Manager 6.0
"Supporting 802.1X Authentication on Cisco
1-16.
for more information).
Troubleshooting Cisco Unified IP Phone Security
9-9
Advertisement
Table of Contents
Troubleshooting
