IP Phone Security

btowntech

I need a little help implementing a solution for IP phone security. The setup consists of Cisco 7962G IP phones and a UC520. If possible, I need to setup the phones so that when a user tries to view the network settings on the phone he/she will have to enter a pin/password. The **# feature is not enough.

First, I need to know if this is possible to set up. Second, if it is possible please point me to some documentation so that I can read over it and have it for reference in the future. Thanks in advance for the help.

As a side note, I have searched Google and Cisco but have not come up with much other than a ton of websites to browse through for information. I have many things on my plate right now to get done so I don't have the time to sit and read everything I find. Wish I could though because I usually learn a lot more when I try to find the answers myself.

pitviper

You can restrict access to the Settings menu in CME – Don’t think that you can pw protect though (you can however in Call Manager).

Try adding this line to an ephone-template (and recreate cnf files):

service phone settingsAccess {0 | 1 | 2}

Enables and disables the Settings button on an IP phone.

•0—Disabled.

•1—Enabled (default). The phone user can modify features by using the Settings menu.

•2—Restricted. The phone user is allowed to access User Preferences and volume settings only


Full list of options:
Cisco Unified Communications Manager Express Command Reference - Cisco Unified CME Commands: sast1 trustpoint through show fb-its-log [Cisco Unified Communications Manager Express] - Cisco Systems

chrisone

Nice reply pitviper!

edited my comment lol

btowntech

Thanks pitviper! I applied that config and it did what I wanted.