Cisco SPA921 - - IP Phone Provisioning Manual page 78

Provisioning Tutorial
Secure Resync
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
STEP 6
STEP 7
STEP 8
STEP 9
Cisco Small Business IP Telephony Devices Provisioning Guide
Exercise
Install Perl on the host running the HTTPS server.
Generate the following Perl reflector script:
#!/usr/bin/perl -wT
use strict;
print "Content-Type: text/plain\n\n";
print "<flat-profile><GPP_D>";
print "OU=$ENV{'SSL_CLIENT_I_DN_OU'},\n";
print "L=$ENV{'SSL_CLIENT_I_DN_L'},\n";
print "S=$ENV{'SSL_CLIENT_I_DN_S'}\n";
print "</GPP_D></flat-profile>";
Save this file with the file name reflect.pl, with executable permission (chmod 755
on Linux), in the CGI scripts directory of the HTTPS server.
Verify accessibility of CGI scripts on the server (as in /cgi-bin/...).
Modify the Profile_Rule on the test device to resync to the reflector script, as in the
following example:
https://prov.server.com/cgi-bin/reflect.pl?
Click Submit All Changes.
Observe the syslog trace to ensure a successful resync.
Open the admin/advanced page, Provisioning tab.
Verify that the GPP_D parameter contains the information captured by the script.
This information contains the product name, MAC address, and serial number if the
test device carries a unique certificate from the manufacturer, or else generic
strings if it is a unit manufactured before firmware release 2.0.
A similar script could be used to determine information about the resyncing device
and then provide it with appropriate configuration parameter values.
3
76