
For security reasons you may wish to disable the PC port on an IP phone and the Settings button.
A good example of this would be a lobby phone where we don't want the visitors to be able to discover any properties of our network. As a default on CME and the UC500 depressing the settings button gives access to DHCP info and connecting a PC to the PC port on the back of a phone may give access to your data network. You may not want this behavior for some phones.
To accomplish this we need to use an ephone template an example follows:
ephone template 1
service phone pcPort 1
service phone settingsAccess 0
Note pcPort 1 turns off the phone's pc port and the zero option under settingsAccess turns of all settings access except contrast and ring tones.
The commands are case sensitive. Also be sure to assign the ephone template to an ephone! An example follows:
ephone 27
mac-address 1111.2222.3333
ephone-template 1
type 7960
button 1:27
Comments
Not on the 7911 (I believe)
Well after a good search, I believe this is not working because the phone is a 7911.
It lives in the reception area and would be nice to stop any would be snoopers looking at the settings.
The method above disables the ‘Settings’ key on phones that have one, but a 7911 has an ‘Applications menu button’ and this key needs to be disabled or at the lease the menu items behind this key.
Have done so extensive searching and can’t find anyway of disabling the button or menu items (Unless you know different) even looked at the phone load files to see if I could gleam any information on the phones setup and layout, but did not find much there
I tried this as
I tried this as follows
!
ephone-template 1
service phone settingsAccess 0
service phone pcPort 1
!
!
ephone 30
device-security-mode none
mac-address 001F.6C7E.82E9
ephone-template 1
username "rr" password 1234
type 7911
button 1:35
!
And it did not work after resetting the phone, you can sill see all the settings and IP’s
Any Idea’s?
try recreating your Configuration Files
under telephony-service
reissue the command create cnf-files
and rest the phones
Er, No
Thanks ttrentler for your Answer, but that still did not work.
I am pretty new to this system and have had no training what so ever, so I am reading and reading continuously to try and get enough information to mould the system to what we want.
If I find a way then I will post back here.
Hum
I tried this as follows
!
ephone-template 1
service phone settingsAccess 0
service phone pcPort 1
!
!
ephone 30
device-security-mode none
mac-address 001F.6C7E.82E9
ephone-template 1
username "rr" password 1234
type 7911
button 1:35
!
And it did not work after resetting the phone, you can sill see all the settings and IP’s
Any Idea’s?
I tried this as
I tried this as follows
!
ephone-template 1
service phone settingsAccess 0
service phone pcPort 1
!
!
ephone 30
device-security-mode none
mac-address 001F.6C7E.82E9
ephone-template 1
username "rr" password 1234
type 7911
button 1:35
!
And it did not work after resetting the phone, you can sill see all the settings and IP’s
Any Idea’s?
Step two...
Thanks for the info on the reconfig of the settings & PC port ttrentler.
I can add to this by saying by applying the following config, you can restrict the settings access (probably won't want to restrict the PCPort) for ALL handsets:
telephony-service
service phone settingsAccess 0
end
Also, the original config in the post above on its own will not apply to individual handsets. You will need to issue the commands:
Router(config-telephony)#cnf-file perphone (this creates files on per phone basis, not system wide)
Router(config-telephony)#create cnf (creates the new configuration files)
Restart the ephone you are applying the config to, and hey presto. I have used this to restrict lobby phones and works very well. There are an array of service commands you can use to customise phones. Check out: http://www.cisco.com/en/US/docs/voice_ip_comm/cucme/admin/configuration/...
Cheers,
Scott Martin
SMARTINET PTY LTD
Cisco Select Partner, Australia
Thank you!!
Nice information to make a configuration to 7912 on a lobby hotel.
Thank you.
Happy New Year
Best Regards,
ArTiCo from Spain.