9-9
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 7.1
OL-18913-01
Chapter 9 Troubleshooting and Maintenance
Troubleshooting Cisco Unified IP Phone Security
Phone reports TFTP authorization failure. • The TFTP address for the phone does not exist in the CTL file.
• If you created a new CTL file with a new TFTP record, the existing CTL
file on the phone may not contain a record for the new TFTP server.
Phone does not register with Cisco Unified
Communications Manager.
The CTL file does not contain the correct information for the Cisco
Unified Communications Manager server.
Phone does not request signed configuration
files.
The CTL file does not contain any TFTP entries with certificates.
802.1X Enabled on Phone but Not Authenticating
Phone cannot obtain a DHCP-assigned IP
address
These errors typically indicate that 802.1X is enabled on the phone, but the
phone is unable to authenticate.
1. Verify that you have properly configured the required components
“Supporting 802.1X Authentication on Cisco Unified IP Phones” section
on page 1-19.
2. Confirm that the shared secret is configured on the phone (see the “Security
Configuration Menu” section on page 4-29 for more information).
–
If the shared secret is configured, verify that you have the same shared
secret entered on the authentication server.
–
If the shared secret is not configured, enter it, and ensure that it
matches the one on the authentication server.
Phone does not register with Cisco Unified
Communications Manager
Phone status display as “Configuring IP” or
“Registering”
802.1X Authentication Status displays as
“Held” (see the “802.1X Authentication and
Status” section on page 4-40).
Status menu displays 802.1x status as
“Failed” (see the “Call Statistics Screen”
section on page 7-13).
802.1X Not Enabled
Phone cannot obtain a DHCP-assigned IP
address
These errors typically indicate that 802.1X is not enabled on the phone. To
enable it, see the “Security Configuration Menu” section on page 4-29 for
information on enabling 802.1X on the phone.
Phone does not register with Cisco Unified
Communications Manager
Phone status display as “Configuring IP” or
“Registering”
802.1X Authentication Status displays as
“Disabled” (see the “802.1X Authentication
and Status” section on page 4-40).
Status menu displays DHCP status as timing
out (see the “Call Statistics Screen” section
on page 7-13).
Table 9-1 Cisco Unified IP Phone Security Troubleshooting (continued)
Problem Possible Cause
To Next Page
Loading...
