Securing IP Phones using password authentication

[csco11063007]

Hi,

How can i protect my ip phone using passwords.Now my ip phones are in user desks.it have access to the national number and international number.

is there any way to use like windows login .Means if i switch on the ip phone it should ask for some password to get line.after my time i wanted to logout from the phone .

[Rob Huffman]

Hi Tom,

There are acouple of ways to accomplish what you are looking for. Have a look;

The Cisco CallManager Extension Mobility feature allows users to configure any Cisco IP Phone 7940 or Cisco IP Phone 7960 as their own, on a temporary basis, by logging in to that phone. After a user logs in, the phone adopts the user individual user default device profile information, including line numbers,Long distance access, speed dials, services links, and other user-specific properties of a phone. For example, when user A occupies a desk and logs in to the phone, that user's directory number(s), services, speed dials, and other properties appear on that phone; but when user B uses the same desk at a different time, user B's information appears. The Cisco CallManager Extension Mobility feature dynamically configures a phone according to the current user.

From this doc;

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00803edae9.html

Cisco CallManager Extension Mobility

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00803f3a8d.html#wp51829

Or you could use Forced Authorization Codes (FAC);

The Forced Authorization Codes (FAC) feature, which allows you to regulate the types of calls that certain users can place, forces the user to enter a valid authorization code on the phone before the call completes.

From this doc;

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00803ed710.html

Configuring Forced Authorization Codes

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00803f3af7.html#wp1078125

Hope this helps!

Rob

Please remember to rate helpful posts.....

[csco11063007]

Hi

Thanks for your info.

i know these two ways.....

if you use extension mobility for a specific line for national and international access ..i think there is a dn waste for that purpose...

is there any other way

thanks

tom

[Rob Huffman]

Hi Tom,

Sorry, I'm not sure that I am following when you refer to wasting a DN. I think that you mean wasting a DN for the default profile on a phone (not logged into EM).You don't have to use a DID DN for this purpose, you can use any block of numbers that are non-DID. For example, if your DID range is XXX-XXX-2000 to 2299 (300 DID numbers) you could use 4000 to 4299 for these dummy DN's.

Am I on the right track here??

Rob

[luisfe70]

I think the best you should do is to implement the use of Force Autorization Codes (FAC), for external route patterns. With this you can control users's external calls, and select who can and can't make them.

I think Extension Mobility would not be the best soluton for this, because it's oriented to users who can use several diferent devices.

For more information:

http://www.cisco.com/en/US/customer/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00803f3af7.html

Regards

Luis Felipe