CUCM14 and 8821 phones

[sSiDiUSs]

Good day team!
I have read the deploy docs...some things are not clear to me...
1. Does phones has default SSID ? as docs says... create SSID 'cisco' with no password for initial register..download fw and etc. It is remote site and don't have phone near me. On dhcp server basd on 3850 switch I add option 150.

So, person on remote site should unpack the phones, swith then on and connect to open SSID 'cisco' ?

2. With 882xBD.1-1.jar I have created profile 1 with ssid 'cisco' no password, then I need to upload it to CUCM TFTP through Cisco Unified Operating System Administration? Or after initial deply i need to create secure profile, upload to TFTP and phones will download it and use in future registration?

[Leo Laohoo · Accepted solution]

---

@sSiDiUSs wrote:
Does phones has default SSID ? as docs says... create SSID 'cisco' with no password for initial register..download fw and etc. It is remote site and don't have phone near me. On dhcp server basd on 3850 switch I add option 150

---

Default SSID set is "cisco" and no password. 

I strongly recommend using the USB to configure the phone because the wireless NIC driver of the phone is extremely buggy and painful (past and present tense).  

And I, for one, rejoiced when Cisco finally announced the EoS/EoL of the infernal 8821.

[Roger Kallberg]

We have a few of these and from what I can remember we didn’t use a SSID named cisco to set these up. I know we have an internally created document for setup of wireless phones, I can have a look in that and see if it might be possible to share it publicly or simply the specific part of it that pertains to this.

[sSiDiUSs]

I will be greatful, kosmosly widely appreciate if you share it, sir.

[Roger Kallberg]

This is the part where we cover the wifi setup.

1. Wireless Phone Configuration

• Switch on the wireless phone with battery installed.
• Go to Setting > WiFi > Profile 1 (Cisco)
  1. Change the Profile Name to “<Name>”
  2. Go to WLAN configuration and change the setting as below:
     1.       SSID: WiFiPhones (This is our name for the SSID we use for wireless phones.)
        
     2.       Security mode: EAP-FAST

•       User ID: [Please use the userid created in Step 4.1 above] (No point in referencing this part in details as it's proprietary to our internal process. Basically we create an account in AD that is used for the credentials.)
  

4.       Password: [Please use the password generated in Step 4.1 above] (Same as point above.)
   
5.       802.11 mode: 5 Ghz

1. Click Save.

• Reboot the phone and check if it’s connected to the network.
• Please allow 1-2 hours for the new phone to perform firmware upgrade during it’s initial registration phase.

[sSiDiUSs]

Good day!
sorry for late reply...I was off site.Can i make initial setup by using ssid "cisco" with no auth (none or open), after phone connects to CUCM through dhcp option 150, and it will recieve a frofile created in 882xBD.1-1.jar and uploaded to CUCM and 3rd party tftp server?

[Roger Kallberg]

No idea. The way I shared is how we do it, I've never tried any other way. Suggest you try it and update the post with the result.

[sSiDiUSs]

del

[Roger Kallberg]

How are the CM servers listed in System > Server?

[sSiDiUSs]

there is 1 server PUB in deploy, no Sub

[sSiDiUSs]

wrong phone ip....
I have added manualy i cannot see ip address in CUCM...but can access web interface of the phone

[8:41:22 AM 02/07/25] DeviceTLInfo DeviceName=SEPF87B20369C66 IPv4Address=192.168.35.104 IPv6Address=CTL_Signature=Not InstalledCTL_TFTP_Server=N/AITL_Signature=3A E7 1B AD 77 D7 13 DC 1A A9 1E 08 3D 22 0A E0 B5 1F 1A 5B ITL_TFTP_Server=NRUMOWHQRIVSCM01StatusCode=6
	[8:53:54 AM 02/07/25] DeviceTLInfo DeviceName=SEPF87B20369C66 IPv4Address=192.168.35.104 IPv6Address=CTL_Signature=Not InstalledCTL_TFTP_Server=N/AITL_Signature=3A E7 1B AD 77 D7 13 DC 1A A9 1E 08 3D 22 0A E0 B5 1F 1A 5B ITL_TFTP_Server=NRUMOWHQRIVSCM01StatusCode=6
	[8:54:35 AM 02/07/25] DeviceTLInfo DeviceName=SEPF87B20369C66 IPv4Address=192.168.35.104 IPv6Address=CTL_Signature=Not InstalledCTL_TFTP_Server=N/AITL_Signature=3A E7 1B AD 77 D7 13 DC 1A A9 1E 08 3D 22 0A E0 B5 1F 1A 5B ITL_TFTP_Server=NRUMOWHQRIVSCM01StatusCode=6
	[8:55:42 AM 02/07/25] DeviceTLInfo DeviceName=SEPF87B20369C66 IPv4Address=192.168.35.104 IPv6Address=CTL_Signature=Not InstalledCTL_TFTP_Server=N/AITL_Signature=3A E7 1B AD 77 D7 13 DC 1A A9 1E 08 3D 22 0A E0 B5 1F 1A 5B ITL_TFTP_Server=NRUMOWHQRIVSCM01StatusCode=6
	[9:12:39 AM 02/07/25] DeviceTLInfo DeviceName=SEPF87B20369C66 IPv4Address=192.168.35.104 IPv6Address=CTL_Signature=Not InstalledCTL_TFTP_Server=N/AITL_Signature=3A E7 1B AD 77 D7 13 DC 1A A9 1E 08 3D 22 0A E0 B5 1F 1A 5B ITL_TFTP_Server=NRUMOWHQRIVSCM01StatusCode=6

[sSiDiUSs]

[8:54:36 AM 02/07/25] File not found : SEPF87B20369C66.cnf.xml.sgn
	[8:55:31 AM 02/07/25] Configuring IP
	[8:55:33 AM 02/07/25] Configuring IPv6
	[8:55:33 AM 02/07/25] Configuring IP
	[8:55:41 AM 02/07/25] No trust list installed
	[8:55:43 AM 02/07/25] File not found : SEPF87B20369C66.cnf.xml.sgn
	[9:12:39 AM 02/07/25] No trust list installed
	[9:12:40 AM 02/07/25] File not found : SEPF87B20369C66.cnf.xml.sgn

[sSiDiUSs]

here is log from web of 8821

i see it get tftp ip adresses end etc...
i have enadled auto-registration, to make phone auto-register...but no luck, even i've add it manually...

[sSiDiUSs]

phones are registering and upgrading.
Just to make clear for me...now phones connected to ssid "cisco" with no auth (open)
after they been upgraded with new fw, how can i bulk switch them to new secure ssid?
or I need manualy change each phone? O_o
I have bulk tool, but how push it to phones?
it is already on CUCM TFTP.