Cisco CP-7961G Administration Manual page 193

Chapter 9 Troubleshooting and Maintenance
Table 9-1 Cisco Unified IP Phone Security Troubleshooting (continued)
Problem
Phone does not register with Cisco Unified
Communications Manager.
Phone does not request signed configuration
files.
802.1X Enabled on Phone but Not Authenticating
Phone cannot obtain a DHCP-assigned IP
address
Phone does not register with Cisco Unified
Communications Manager
Phone status display as "Configuring IP" or
"Registering"
802.1X Authentication Status displays as
"Held" (see 802.1X Authentication and
Status, page 4-43).
Status menu displays 802.1x status as
"Failed" (see Call Statistics Screen,
page 7-13).
802.1X Not Enabled
Phone cannot obtain a DHCP-assigned IP
address
Phone does not register with Cisco Unified
Communications Manager
Phone status display as "Configuring IP" or
"Registering"
802.1X Authentication Status displays as
"Disabled" (see 802.1X Authentication and
Status, page 4-43).
Status menu displays DHCP status as timing
out (see Call Statistics Screen, page
Factory Reset Deleted 802.1X Shared Secret
Phone cannot obtain a DHCP-assigned IP
address
Phone does not register with Cisco Unified
Communications Manager
Phone status display as "Configuring IP" or
"Registering"
Cannot access phone menus to verify
802.1X status
OL-21011-01
Possible Cause
The CTL file does not contain the correct information for the Cisco
Unified Communications Manager server.
The CTL file does not contain any TFTP entries with certificates.
These errors typically indicate that 802.1X is enabled on the phone, but the
phone is unable to authenticate.
Verify that you have properly configured the required components
1.
Supporting 802.1X Authentication on Cisco Unified IP Phones, page
Confirm that the shared secret is configured on the phone (see
2.
Configuration Menu, page 4-30
–
–
These errors typically indicate that 802.1X is not enabled on the phone. To
enable it, see
enabling 802.1X on the phone.
7-13).
These errors typically indicate that the phone has completed a factory reset
while 802.1X was enabled. A factory reset deletes the shared secret, which is
required for 802.1X authentication and network access. To resolve this, you
have two options:
Temporarily disable 802.1X on the switch.
•
Temporarily move the phone to a network environment that is not using
•
802.1X authentication.
Once the phone starts up normally in one of these conditions, you can access
the 802.1X configuration menus and re-enter the shared secret.
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.0 (SCCP and SIP)
If the shared secret is configured, verify that you have the same shared
secret entered on the authentication server.
If the shared secret is not configured, enter it, and ensure that it
matches the one on the authentication server.
Security Configuration Menu, page 4-30
Troubleshooting Cisco Unified IP Phone Security
for more information).
for information on
1-18.
Security
9-9