How to disable the PC Port and Settings button on an IP phone for Call Manager Express

For security reasons you may wish to disable the PC port on an IP phone and the Settings button.

A good example of this would be a lobby phone where we don't want the visitors to be able to discover any properties of our network. As a default on CME and the UC500 depressing the settings button gives access to DHCP info and connecting a PC to the PC port on the back of a phone may give access to your data network.  You may not want this behavior for some phones.

To accomplish this we need to use an ephone template an example follows:

 

ephone template 1
service phone pcPort 1
service phone settingsAccess 0

Note pcPort 1 turns off the phone's pc port and the zero option under settingsAccess turns of all settings access except contrast and ring tones.

The commands are case sensitive. Also be sure to assign the ephone template to an ephone! An example follows:

ephone 27
mac-address 1111.2222.3333
ephone-template 1
type 7960
button 1:27