Deployment Scenarios; Configure User Credentials Persistent For Expressway Sign-In - Cisco 8832 Administration Manual

Deployment Scenarios

Note If the phone security profile for any of your phones has TFTP Encrypted Config checked, you cannot use the
phone with Mobile and Remote Access. The MRA solution does not support device interaction with Certificate
Authority Proxy Function (CAPF).
Deployment Scenarios
The following table shows various deployment scenarios for Mobile and Remote Access Through Expressway.
Scenario
On-premises user logs in to the enterprise network,
after deploying Mobile and Remote Access Through
Expressway.
Off-premises user logs in to the enterprise network
with Mobile and Remote Access Through
Expressway.

Configure User Credentials Persistent for Expressway Sign-In

When a user signs in to the network with Mobile and Remote Access Through Expressway, the user is prompted
for a service domain, username, and password. If you enable the User Credentials Persistent for Expressway
Sign-In parameter, user login credentials are stored so that they do not need to reenter this information. This
parameter is disabled by default.
You can set up credentials to persist for a single phone, a group of phones, or all phones.
Related Topics
Cisco IP Conference Phone 8832 Administration Guide for Cisco Unified Communications Manager
114
Phone Feature Configuration, on page 91
Product Specific Configuration, on page 93
Cisco IP Conference Phone Administration
Actions
The enterprise network is detected, and the phone
registers with Cisco Unified Communications
Manager as it would normally.
The phone detects that it is in off-premises mode, the
Mobile and Remote Access Through Expressway
Sign-In window appears, and the user connects to the
corporate network.
Users must have a valid service name, username, and
password to connect to the network.
Users must also reset the service mode to clear the
Alternate TFTP setting before they can access the
company network. This clears the Alternate TFTP
Server setting so the phone detects the off-premises
network.
If a phone is being deployed out of the box, users may
skip the reset Network Settings requirement.
If users have DHCP option 150 or option 66 enabled
on their network router, they may not be able to sign
in to the corporate network. Users should disable these
DHCP settings or configure their static IP address
directly.