For security reasons you may wish to disable the PC port on an IP phone and the Settings button.
A good example of this would be a lobby phone where we don't want the visitors to be able to discover any properties of our network. As a default on CME and the UC500 depressing the settings button gives access to DHCP info and connecting a PC to the PC port on the back of a phone may give access to your data network. You may not want this behavior for some phones.
To accomplish this we need to use an ephone template an example follows:
ephone template 1 service phone pcPort 1 service phone settingsAccess 0
Note pcPort 1 turns off the phone's pc port and the zero option under settingsAccess turns of all settings access except contrast and ring tones.
The commands are case sensitive. Also be sure to assign the ephone template to an ephone! An example follows:
ephone 27 mac-address 1111.2222.3333 ephone-template 1 type 7960 button 1:27
Thanks for the info on the reconfig of the settings & PC port ttrentler.
I can add to this by saying by applying the following config, you can restrict the settings access (probably won't want to restrict the PCPort) for ALL handsets:
telephony-service service phone settingsAccess 0 end
Also, the original config in the post above on its own will not apply to individual handsets. You will need to issue the commands:
Router(config-telephony)#cnf-file perphone (this creates files on per phone basis, not system wide) Router(config-telephony)#create cnf (creates the new configuration files)
Hi, I'm trying to import an SSL certificate (pem file) to allow HTTPS inspection on my WAP121.When I try to upload using http upload I get the message "The certificate file failed to be uploaded".I could successfully upload that certificate on a MR33...
Hello, I'm want to use a RV180 with a site-to-site fiber link in place of the old DSL link. The RV180 is managing 3 local VLAN. The other side of the fiber link is connected to another manageable switch on a port configured as trunk. This other ...
Hello there,I have a router RV 320. I have Vlan 1 , 20 , 25 for now they are all with intervlan disable. because it seems when i enable it we kinda lose our dhcp/ internet connection.The router have DHCP server for vlan 1 , 20 and 25.If the intervlan is n...
Hello,I have a RV345 router and have set up multiple VLANsVLAN10 - wired computersVLAN20 - wireless devices (laptops, phones, tablets)VLAN30 - network printersVLAN40 - media devices (AppleTV, Yamaha Receiver) My computers and wireless devices on VLAN...