CCNA VOICE 640 -461 CERT GUIDE

CCNA VOICE 640 -461 CERT GUIDE • • CHAPTER 9 Managing Endpoints and End Users in CUCM

Implementing IP Phones in CUCM: Special Functions • Network Time Protocol (NTP) • Cisco Discovery Protocol (CDP) • Dynamic Host Configuration Protocol (DHCP) • Power over Ethernet (Po. E) • Trivial File Transport Protocol (TFTP) • Domain Name System (DNS)

Implementing IP Phones in CUCM: Network Time Protocol (NTP) • Call Detail Records (CDR) • Call Management Records (CMR) • Cisco Unified Communications Manager Publisher § Acts as an NTP server § Can communicate with a public NTP server § Can use it’s internal clock (Not Recommended) • Skinny Client Control Protocol (SCCP) get time via SCCP messages • Session Initiation Protocol (SIP) get time from a NTP reference server

Implementing IP Phones in CUCM: Network Time Protocol (NTP)

Implementing IP Phones in CUCM: Cisco Discovery Protocol • Cisco Proprietary Layer 2 protocol • “See’s” only directly connected neighbors • Can be dangerous to leave on except when necessary • Can be controlled on a per-interface basis • Phones use CDP to establish VLAN membership

Implementing IP Phones in CUCM: Dynamic Host Configuration Protocol (DHCP) • IP Address • Subnet Mask • Default Gateway • DNS Server(s) • TFTP Server(s) • Domain • Lease time • Options (150 [SCCP], 66 [SIP])

Implementing IP Phones in CUCM: Dynamic Host Configuration Protocol (DHCP)

Implementing IP Phones in CUCM: Dynamic Host Configuration Protocol (DHCP)

Implementing IP Phones in CUCM: Dynamic Host Configuration Protocol (DHCP)

Implementing IP Phones in CUCM: Dynamic Host Configuration Protocol (DHCP) service dhcp ! Enables the DHCP service ! ip dhcp excluded-address 10. 1. 1. 10 ! Specifies a start / end range of addresses that DHCP will NOT assign ip dhcp pool name IP_PH 0 NES ! Creates a pool of addresses (case-sensitive name) and enters DHCP configuration mode ! network 10. 1. 1. 0 255. 0 ! Defines the subnet address for the pool default-router address 10. 1. 1. 1 ! Defines the default gateway dns-server address 192. 168. 1. 10 192. 168. 1. 11 ! Identifies the DNS server IP address(es) - up to 8 Ips ! option 150 ip 192. 168. 1. 2 ! Identifies the TFTP server IP. Multiple IPs may be included, separated by spaces.

Implementing IP Phones in CUCM: Power Over Ethernet (Po. E) • IEEE Standard 802. 3 af • Currently provides up to 15. 4 Watts of power • “In-Line Power” Cisco pre-standard • Po. E Switch • Powered patch panel • Inline power injector

Implementing IP Phones in CUCM: Trivial File Transport Protocol (TFTP) • Critical Service • Option 150 (SCCP), Option 66 (SIP) • Must be a phone service § Router § CUCM § Normal TFTP servers will not function!

Implementing IP Phones in CUCM: Trivial File Transport Protocol (TFTP)

Implementing IP Phones in CUCM: Domain Name System • Host Name to IP Address resolution • Not critical to V 0 IP • Recommended to eliminate reliance on DNS for IP Phones • External to CUCM Cluster • Not offered in CUCM

Implementing IP Phones in CUCM: SCCP Phone registration Process 1. The phone obtains power (Po. E or AC adapter). 2. The phone loads its locally stored firmware image. 3. The phone learns the Voice VLAN ID via CDP from the switch. 4. The phone uses DHCP to learn its IP address, subnet mask, default gateway, and TFTP server address. (Other items may be learned also. ) 5. The phone contacts the TFTP server and requests its configuration file. (Each phone has a customized configuration file named SEP. cnf. xml created by CUCM and uploaded to TFTP when the administrator creates or modifies the phone. ) 6. The phone registers with the primary CUCM server listed in its configuration file. CUCM then sends the softkey template to the phone using SCCP messages.

Implementing IP Phones in CUCM: SIP Phone registration Process 1. The phone obtains power (Po. E or AC adapter). 2. The phone loads its locally stored firmware image. 3. The phone learns the Voice VLAN ID via CDP from the switch. 4. The phone uses DHCP to learn its IP address, subnet mask, default gateway, and TFTP server address. (Other items may be learned also. ) 5. The phone contacts the TFTP server and requests the Certificate Trust List file (only if the cluster is secured). 6. The phone contacts the TFTP server and requests its SEP. cnf. xml configuration file. 7. The phone downloads the SIP Dial Rules (if any) configured for that phone. 8. The phone registers with the primary CUCM server listed in its configuration file.

Implementing IP Phones in CUCM: SIP Phone registration Process 9. The phone downloads the appropriate localization files from TFTP. 10. The phone downloads softkey configurations from TFTP. 11. The phone downloads custom ringtones (if any) from TFTP.

Implementing IP Phones in CUCM: Prepare CUCM to Support Phones • Configure and Verify Network Services: Set up NTP, DHCP, and TFTP. • Configure Enterprise Parameters: Modify and verify clusterwide default settings. • Configure Service Parameters: Tune application settings and behavior.

Implementing IP Phones in CUCM: Phone Registration Requirements • Device Pool • Cisco Unified CM Group • Region • Location • Date/Time Group • Phone NTP Reference • Device Defaults • Softkey Template • Phone Button Template • SIP Profile • Phone Security Profile • Common Phone Profile

Implementing IP Phones in CUCM: Device Pool • Device Pools provide a set of common configurations to a group of devices. • You can create as many Device Pools as you need, typically one per location, but they can also be applied per function.

Implementing IP Phones in CUCM: Cisco Unified Call Manager Group • A CM Group defines a top-down ordered list of redundant subscriber servers to which the phones can register. • The list can include a maximum of three subscribers (plus an optional Survivable Remote Site Telephony [SRST] reference). • The first server in the list is the primary subscriber; the second is the backup, and the third is the tertiary. • The number of CM Groups created depends on the number of subscribers in the cluster. • The goal is to provide server redundancy to the phones while distributing phone registrations evenly as planned in the system design.

Implementing IP Phones in CUCM: Region • A region is a virtual assignment that allows the system designer to control the bit rate for calls. • Example: If we define two regions, called Vancouver_HQ_REG and Ottawa_BR_REG, we can set the bit rate for calls within the Vancouver region to 256 kbps, within the Ottawa region to 64 kbps, and between the two regions to 16 kbps.

Implementing IP Phones in CUCM: Location • Location defines a maximum amount of bandwidth used by calls to a particular location. • Each call is tracked, and the bandwidth it uses is deducted from the total for that location. • When the bandwidth remaining is not enough to support another call at a given bit rate, that call is dropped by default.

Implementing IP Phones in CUCM: Date/Time Group • Use NTP for time synchronization of all devices. • NTP references Greenwich Mean Time, which makes the time displayed on devices “wrong” if they are not in the GMT time zone. • Date/Time Groups allow us to offset the correct time learned via NTP to match the local time zone of the device.

Implementing IP Phones in CUCM: Phone NTP Reference • SIP phones need an NTP server address from which they can obtain the time using NTP. • Not required for SCCP phones which use SCCP signaling.

Implementing IP Phones in CUCM: Phone NTP Reference

Implementing IP Phones in CUCM: Device Defaults • Device Defaults page lists all the supported endpoints (with separate entries for SCCP and SIP as necessary) • Lists the firmware load, Device Pool, and Phone Button Template each endpoint uses by default.

Implementing IP Phones in CUCM: Softkey Template and Phone Button Template • Softkey Template controls what softkey button functions are available to the user. • Typically used for feature access (Conference, Transfer, Park, Extension Mobility, and so on).

Implementing IP Phones in CUCM: Profiles • Profiles allow for a one-time configuration of repetitive tasks.

Implementing IP Phones in CUCM: Phone Security Profile • A default Phone Security Profile exists for each type of phone/protocol. • These default profiles have security disabled.

Implementing IP Phones in CUCM: Common Phone Profiles • DND settings • Phone personalization capabilities • VPN settings • USB port behavior • Video capabilities • Power-save options

Implementing IP Phones in CUCM: Adding Phones in CUCM • Manual Configuration: The administrator creates a new phone, configuring all settings in real time on the Phone Configuration page. • Autoregistration: The administrator configures CUCM to dynamically configure and add to the database any new IP Phone that connects to the network. • Bulk Administration Tool (BAT): Using templates provided by CUCM, the administrator creates. csv files that contain all the required information to create multiple phones in one operation. • Auto Register Phone Tool (TAPS): An Interactive Voice Response (IVR) server enhances the Autoregister and BAT functionality, providing an automated method of adding potentially thousands of phones at a time.

Implementing IP Phones in CUCM: Adding Phones Manually in CUCM 1. Navigate to Device > Phone, and then click Add New. 2. Choose the IP Phone Model from the drop-down list. 3. Choose the device protocol (either SCCP or SIP; some phones will support only one protocol, and this step will be skipped).

Implementing IP Phones in CUCM: Adding Phones Manually in CUCM 4. Select, or enter, the required specific information for the phone. The four required fields that do not have default values (must be manually configured) include the following: § § 5. MAC Address: The MAC address is the unique identifier that links the IP Phone hardware to the software configuration in CUCM. Device Pool: The Device Pool (as described earlier in this chapter) applies many common settings to the phone that are relevant to its physical location and desired behavior. Phone Button Template: The Phone Button Template defines what functions are assigned to the buttons on the phone (DNs, Speed Dials, Services, and so on). Device Security Profile: Applies a set of security-related configurations, as described previously in this chapter. Save

Implementing IP Phones in CUCM: Adding Phones Manually in CUCM

Implementing IP Phones in CUCM: Adding Phones Manually in CUCM (Association Page) 6. Add New DN. The Directory Number Information page opens, in which you must enter a Directory Number, and optionally set the Partition and other optional configurations. § Route Partition: Partition is part of the calling privileges system or Class of Control. § Alerting Name: This is the name to display on the caller’s phone when this phone is ringing. § Call Forward and Call Pickup Settings: This is where the administrator can determine how to forward a call if the DN is busy or does not answer, or for Call Forward All. § Display: The text entered in the Display field serves as an internal Caller ID. When this DN calls another IP Phone, the Display text replaces the calling DN number. § Line Text Label: This is the text that displays on the phone to describe the line § External Phone Number Mask: If this phone makes an off-net call (typically to the PSTN), this field can change the Calling Line ID (CLID) to present a full PSTN number.

Implementing IP Phones in CUCM: Adding Phones Manually in CUCM (Association Page) 7. Save 8. Configure Device (), and then click Go. 9. Continue making config changes, or can click Save again to commit the changes made so far.

Implementing IP Phones in CUCM: Adding Phones via Autoregistration in CUCM 1. Verify your Autoregistration Phone Protocol. 2. Verify that at least one CM Group has Autoregistration enabled. 3. Enable and configure autoregistration on one or more CUCM servers within the CM Group enabled for autoregistration. 4. Configure the range of DNs that will be dynamically and sequentially issued to auto-registering phones. 5. Set the Partition that will be assigned to the autoregistered DNs. 6. Verify that the Auto-registration Disabled on this Cisco Unified Communications Manager checkbox is unchecked. 7. Save.

Implementing IP Phones in CUCM: Adding Phones via Autoregistration in CUCM

Implementing IP Phones in CUCM: Bulk Administration Tool (BAT) • Allows administrators to perform database inserts, modifications, or deletions in bulk. • Makes it feasible to add a great many phones, users, or other elements more quickly and with fewer errors. • Allows the administrator to schedule the operation to happen automatically and unattended.

Implementing IP Phones in CUCM: Auto Register Phone Tool • The most sophisticated strategy. • Auto Register Phone Tool (formerly known as the Tool for Auto Registered Phone Support, but which is still known as TAPS).

Implementing IP Phones in CUCM: End Users verses Application Users

Implementing IP Phones in CUCM: Credential Policy • Contains three of the four characteristics: uppercase, lowercase, numbers, and symbols • Cannot use the same number or character more than three times consecutively • Cannot include the alias, username, or extension • Cannot include consecutive numbers or characters

Implementing IP Phones in CUCM: Credential Policy Personal Identification Numbers (PIN’s) • Cannot use any number more than two times consecutively • Cannot include the user mailbox or extension, nor the reverse of them • Must contain at least three different numbers. • Cannot be the dial-by-name version of the user name. • Cannot contain repeated digit patterns, nor any patterns that are dialed in a straight line on the phone keypad.

Implementing IP Phones in CUCM: User Locale • User locales allow different languages to be displayed on the IP Phone and the User Web Pages. Device Association • For users to be able to control their own devices (setting up their own speed dials, services, and ring preferences. . . )

Implementing IP Phones in CUCM: End Users • Manual, one-at-a-time entry • Bulk import using the Bulk Administration Tool • LDAP synchronization (and optional authentication)

Implementing IP Phones in CUCM: End Users Manual Entry • User ID • Last Name • Presence Group • Remote Destination Limit

Implementing IP Phones in CUCM: End Users Manual Entry

Implementing IP Phones in CUCM: End Users Bulk Entry (BAT) • BAT allows the administrator to create and upload a CSV file with all the users’ information populated and insert the data into the database in an automated way.

Implementing IP Phones in CUCM: LDAP Integration • Lightweight Directory Access Protocol (LDAP). • LDAP is a standards-based (with some significant vendor-specific exceptions) • Allows an organization to create a single, centralized directory information store. • LDAP holds information about user accounts, passwords, and user privileges.

Implementing IP Phones in CUCM: LDAP Integration Examples • Microsoft Active Directory (2000, 2003, 2008) • Microsoft Active Directory Application Mode 2003 • Microsoft Lightweight Directory Services 2008 • i. Planet Directory Server 5. 1 • Sun ONE Directory Server (5. 2, 6. x) • Open LDAP (2. 3. 39, 2. 4)

Implementing IP Phones in CUCM: LDAP Synchronization • Populates the CUCM database with user attributes from LDAP. • LDAP holds information about user accounts, passwords, and user privileges. • Information is centralized in LDAP and available to other applications. • Separate directories do not need to be maintained for each application.

Implementing IP Phones in CUCM: LDAP Authentication • Redirects password authentication to the LDAP system. • Synchronization and Authentication can be enabled together. • Information that now comes from LDAP is no longer configurable in CUCM

Implementing IP Phones in CUCM: LDAP Attribute Mapping

Implementing IP Phones in CUCM: LDAP Synchronization 1. Activate the Cisco Dir. Sync service. 2. Configure the LDAP system. 3. Configure the LDAP directory. 4. Configure LDAP Custom Filters.

Implementing IP Phones in CUCM: LDAP Synchronization

Implementing IP Phones in CUCM: LDAP Synchronization

Implementing IP Phones in CUCM: LDAP Synchronization

End of Chapter 9