Cisco Systems OL-16342-01 user manual

Summary of the content on the page No. 1

CHAPTER
10
Phone Hardening
To tighten security on the phone, you can perform phone hardening tasks in the Phone Configuration
window in Cisco Unified Communications Manager Administration. This chapter contains information
on the following topics:
• Disabling the Gratuitous ARP Setting, page 10-1
 Disabling Web Access Setting, page 10-1
 Disabling the PC Voice VLAN Access Setting, page 10-2
 Disabling the Setting Access Setting, page 10-2
 Disabling the PC Port Setting, page 10-2
 Confi

Summary of the content on the page No. 2

Chapter 10 Phone Hardening Disabling the PC Voice VLAN Access Setting Disabling the PC Voice VLAN Access Setting By default,Cisco Unified IP Phones forward all packets that are received on the switch port (the one that faces the upstream switch) to the PC port. If you choose to disable the PC Voice VLAN Access setting in the Phone Configuration window, packets that are received from the PC port that use voice VLAN functionality will drop. Various Cisco Unified IP Phones use this func

Summary of the content on the page No. 3

Chapter 10 Phone Hardening Where to Find More Information Step 3 To open the Phone Configuration window for the device, click the device name. Step 4 Locate the following product-specific parameters:  PC Port  Settings Access  Gratuitous ARP  PC Voice VLAN Access  Web Access Setting Tip To review information on these settings, click the question mark that displays next to the parameters in the Phone Configuration window. Step 5 From the drop-down list box for each parameter that y

Summary of the content on the page No. 4

Chapter 10 Phone Hardening Where to Find More Information Cisco Unified Communications Manager Security Guide 10-4 OL-16342-01