No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Administrator Guide

HUAWEI IP Phone 7920 and 7960 V600R006C00

Describes the deployment, configuration, and maintenance of HUAWEI IP Phone 7920/7960.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Network

Network

This section describes how to set network access parameters including access authentication, access mode, and network security.

Setting Parameters on the Web Page

  1. Access the phone web page as an administrator. For details, see Web Page Access.
  2. Choose Advanced > Network.
  3. Set parameters (see Table 6-4 for detailed parameter descriptions).

    Table 6-4 Parameter description

    Parameter

    Description

    How to Set

    How to Modify the Configuration File

    Access Authentication

    802.1x

    802.1x is a protocol for port-based network access control. It authenticates and controls devices that attempt to connect to a LAN.

    • If a device connected to an 802.1x-enabled port on the switch is authenticated, the device can access resources on the LAN.
    • If the authentication fails, the device cannot access resources on the LAN.

    Enable or disable 802.1x based on requirements.

    NOTE:
    • To ensure network access security, it is recommended that you enable 802.1x. Ask your network administrator for the user name and password for 802.1x authentication.
    • When a phone connects to the Huawei public cloud, the 802.1x authentication is not supported.

    Default: Enable

    Unsolicited Authentication Interval: indicates the interval for the IP phone to proactively initiate authentication after successful 802.1x MD5 authentication, which is used mapping 802.1x MD5 authentication. If this parameter is set to 0, authentication is not proactively initiated.

    Default value: 0

    Parameters: ENABLEDOT1X, USERNAME, and PASSWORD

    Location: Device > ComCfg > Access > Dot1x

    Setting:

    • ENABLEDOT1X indicates whether to enable 802.1x, with two options 0 (disable) and 1 (enable). Set this parameter based on requirements.
    • USERNAME indicates the user name for 802.1x authentication. Set this parameter to the user name that you have obtained from your network administrator.
    • PASSWORD indicates the password for 802.1x authentication. Set this parameter to the password that you have obtained from your network administrator.

    Example: ENABLEDOT1X="1", USERNAME="admin", and PASSWORD="Huawei@123456"

    Parameters: AuthMode

    Location: Device > ComCfg > AssociateSipDot1x

    Setting: AuthMode indicates the authentication method for 802.1x authentication.

    Value: 0, 1, or 2

    • 0: EAP-MD5
    • 1: EAP-TLS
    • 2: Automatic

    Default: 1

    Network Security

    SRTP

    Indicates the media stream encryption mode.

    • Mandatory: encrypts media streams.
    • Optional: encrypts media streams when Mandatory or Optional is selected for the peer IP phone, and does not encrypt media streams when Disable is selected for the peer IP phone.
    • Disable: does not encrypt media streams.
    • To ensure communication security, it is recommended that you select Mandatory.
    • When some peer IP phones do not support SRTP-based encryption but need to have media stream exchanged with the IP phone, select Optional.
    • If you select Disable, all media data is transmitted in plain text over the IP network.

    Default: Disable

    Parameter: encryptSRTP

    Location: Device > ComCfg > NetworkSafe

    Value: 0, 1, or 2

    • 0: disable
    • 1: optional
    • 2: mandatory

    Example: encryptSRTP="2"

    SIP Transport

    Indicates the transmission mode of SIP signaling. Three options are available:

    • UDP: transaction-oriented, simple, and unreliable transmission mode
    • TLS: cryptographic and secure transmission mode to ensure confidentiality and message integrity
    • TCP: connection-oriented and reliable transmission mode

    Set this parameter based on requirements.

    NOTE:
    • To ensure communication security, it is recommended that you select TLS.
    • When SIP Transport is set to TLS, you need to configure the time server or manually set the time to the current time to prevent IP phone registration failure.

    Before using TLS, ensure that:

    • The server supports TLS.
    • You have imported the TLS client root certificate to the IP phone and have selected the imported certificate from the TLS Certificate Issuer drop-down list box. For details about how to import a certificate, see Multi-Certificate Support.
    • You have set the correct server port. In a UC2.X or EC6.X network environment, the port number is 5061. For details, see Server.
    • The phone's system time is within the validity period of the imported certificate.
    • The phone does not connect to the Huawei public cloud.

    Default: UDP

    Parameter: TransferMode

    Location: Device > ComCfg > Phone > Sip

    Value: 0, 1, or 2

    • 0: UDP
    • 1: TLS
    • 2: TCP

    Example: TransferMode="1"

    WEB

    Indicates the mode for accessing the IP phone using the web page.

    • Disable: Web access is disabled.
    • HTTP: The web browser interacts with the IP phone using HTTP. When you select HTTPS, the web browser automatically changes its web access mode to HTTPS even if you log in to the phone web page using HTTP.
    • HTTPS: The web browser interacts with the IP phone using HTTPS, which ensures user information security.
    • HTTP is a protocol to transmit data in plain text. Therefore, if you use HTTP, ensure that your network is a trusted one.
    • Before using HTTPS, import the required certificate. For details about how to import a certificate, see Multi-Certificate Support.

    Default: HTTPS

    Parameter: encryptVisitWeb

    Location: Device > ComCfg > NetworkSafe

    Value: 0, 1 or 2

    • 0: disables web access.
    • 1: uses HTTP for web access.
    • 2: uses HTTPS for web access.

    Example: encryptVisitWeb="2"

    TLS1.0

    Indicates TLS 1.0.

    Set this parameter based on requirements.

    NOTE:
    • This configuration item is available on the Advanced > Network > Security screen of the phone LCD, not on the phone web page.
    • TLS1.0 has security risks. To ensure communication security, it is recommended that you disable TLS1.0 and use TLS of a later version.

    Default: Disable

    Parameter: enableTLS10

    Location: Device > ComCfg > NetworkSafe

    Value: 0 or 1

    • 0: disable
    • 1: enable

    Example: enableTLS10="0"

    LLDP-MED

    LLDP-MED

    Indicates whether to enable LLDP packet sending on the phone's LAN port.

    LLDP enables a device to store and manage information about the device itself and directly-connected neighbors for the network management system to check the link communication status.

    • If you select Enable, the phone's LAN port sends LLDP packets.
    NOTE:

    HUAWEI IP Phone 7920/7960 can only send LLDP packets. It does not process its received LLDP packets.

    • If you select Disable, the phone's LAN port does not send LLDP packets.

    Default: Enable

    Parameter: Enable

    Location: Device > ComCfg > Access > LLDP

    Value: 0 or 1

    • 0: disable
    • 1: enable

    Example: Enable="1"

    Packet Sending Interval

    Indicates the interval for sending an LLDP packet.

    Value range: 1-3600, in unit of seconds

    Default: 120

    Parameter: Interval

    Location: Device > ComCfg > Access > LLDP

    Example: Interval="120"

    VLAN

    LAN Port

    Indicates whether to enable the VLAN function for the phone's LAN port.

    If you select Enable, the VLAN function is enabled for the phone's LAN port.

    Set this parameter based on requirements.

    Default: Enable

    Parameter: Enable

    Location: Device > ComCfg > Access > Qos

    Value: 0 or 1

    • 0: disable
    • 1: enable

    Example: Enable="1"

    ID

    Indicates the VLAN ID of the phone's LAN port. After LAN port is enabled, the data packets sent by the IP phone carry VLAN tags.

    The network administrator divides the network connected to the switch into multiple VLANs. Each VLAN has a VLAN ID.

    Set this parameter to the ID of the VLAN to which the IP phone belongs.

    Value range: 0-4094

    Default: 0

    NOTE:
    • The VLAN ID for the LAN port must be different from that for the PC port; otherwise, network exceptions occur.
    • When LLDP is enabled in the environment where the VLAN is configured, the IP phone uses the VLAN ID obtained in LLDP mode.

    Parameter: VlanId

    Location: Device > ComCfg > Access > Qos

    Example: VlanId="95"

    Priority

    Indicates the VLAN priority of the phone's LAN port.

    Set this parameter based on requirements. A large value indicates a high priority.

    Value range: 0-7

    Default: 6

    Parameter: Level2Priority

    Location: Device > ComCfg > Access > Qos

    Example: Level2Priority="6"

    PC Port

    Indicates whether to enable the VLAN function for the PC port on an IP phone.

    If you select Enable the VLAN function is enabled for the PC port.

    Set this parameter based on requirements.

    Default: Disable

    Parameter: EnablePCPort

    Location: Device > ComCfg > Access > PCVlan

    Value: 0 or 1

    • 0: disable
    • 1: enable

    Example: EnablePCPort="1"

    ID

    Indicates the VLAN ID of the phone's PC port.

    • This VLAN ID is carried by data packets transmitted upstream through the PC port.
    • For data packets transmitted downstream through the PC port, if the VLAN ID in the data packets is the same as the VLAN ID of the PC port, the PC port removes the VLAN tag from the data packets before transmitting them. If the VLAN ID in the data packets is different from the VLAN ID of the PC port, the PC port discards these data packets.

    Set this parameter to the ID of the VLAN to which the IP phone belongs.

    Value range: 0-4094

    Default: 0

    Parameter: VlanId

    Location: Device > ComCfg > Access > PCVlan

    Example: VlanIdPCPort="5"

    Priority

    Indicates the VLAN priority of the phone's PC port.

    Set this parameter based on requirements. A large value indicates a high priority.

    Value range: 0-7

    Default: 0

    Parameter: Level2PriorityPCPort

    Location: Device > ComCfg > Access > PCVlan

    Example: Level2PriorityPCPort="3"

    VLAN Filtering on PC Port

    Indicates whether to enable the data filtering function for the phone's PC port. If you select Enable, the phone's PC port allows the following data packets to pass through: data packets that do not carry any VLAN ID, data packets carrying the VLAN ID of the LAN port, and data packets carrying the VLAN ID that is set below VLAN Filtering on PC Port. If you select Disable, the phone's PC port allows only packets without any VLAN ID or with the VLAN ID of the LAN port to pass through.

    Set this parameter based on requirements.

    Default: Disable

    Parameter: EnablePCPort

    Location: Device > ComCfg > Access > PCQos

    Value: 0 or 1

    • 0: disable
    • 1: enable

    Example: EnablePCPort="1"

    ID

    Indicates the VLAN ID, with which packets are allowed to pass through the phone's PC port. When VLAN Filtering on PC Port is set to Enable, the phone's PC port allows the following data packets to pass through: data packets that do not carry any VLAN ID, data packets carrying the VLAN ID of the LAN port, and data packets carrying the VLAN ID that is set here.

    Set this parameter based on requirements.

    Value range: 0-4094

    Default: 0

    Parameter: VlanIdPCPort

    Location: Device > ComCfg > Access > PCQos

    Example: VlanIdPCPort="96"

    DSCP

    DSCP

    Indicates whether to enable Differentiated Services Code Point (DSCP). DSCP occupies the most significant six bits in the Type of Service (TOS) field to differentiate between services.

    Default: Disable

    Parameter: Enable

    Location: Device > ComCfg > Access > Dscp

    Value: 0 or 1

    • 0: disable
    • 1: enable

    Example: Enable="1"

    RTP

    Indicates the voice DSCP value.

    Set this parameter based on requirements.

    Value range: 0-63

    Default: 46

    Parameter: AUDIODSCP

    Location: Device > ComCfg > Access > Dscp

    Example: AUDIODSCP="46"

    STP

    Indicates the signaling DSCP value.

    Set this parameter based on requirements.

    Value range: 0-63

    Default: 46

    Parameter: SIGNALDSCP

    Location: Device > ComCfg > Access > Dscp

    Example: SIGNALDSCP="46"

    Network Port Link Mode

    LAN Port

    Indicates the working mode of the phone's LAN port.

    Select a value based on your network conditions.

    Default: Auto-negotiation

    Parameter: InternetMode

    Location: Device > ComCfg > Negotiate

    Value range: 0-6

    • 0: auto-negotiation
    • 1: 10 Mbit/s full-duplex
    • 2: 10 Mbit/s half-duplex
    • 3: 100 Mbit/s full-duplex
    • 4: 100 Mbit/s half-duplex
    • 5: 1000 Mbit/s full-duplex
    • 6: 100 Mbit/s adaptive

    Example: InternetMode="0"

    PC Port

    Indicates the working mode of the phone's PC port.

    Select a value based on your network conditions.

    Default: Auto-negotiation

    Parameter: PCMode

    Location: Device > ComCfg > Negotiate

    Value range: 0-6

    • 0: auto-negotiation
    • 1: 10 Mbit/s full-duplex
    • 2: 10 Mbit/s half-duplex
    • 3: 100 Mbit/s full-duplex
    • 4: 100 Mbit/s half-duplex
    • 5: 1000 Mbit/s full-duplex
    • 6: 100 Mbit/s adaptive

    Example: PCMode="0"

    Automatic rate adjustment

    Automatically selects the optimal network mode.

    If you select Enable, the IP phone automatically selects the optimal network mode.

    Set this parameter based on requirements.

    Default: Disable

    NOTE:

    When automatic rate adjustment is enabled, the IP phone automatically selects the optimal network mode, and users do not need to manually set the rates of the LAN port and PC port.

    When automatic rate adjustment is disabled, it's recommended that setting the value of LAN port identical to PC port.

    Parameter: AutoAdjust

    Location: Device > ComCfg > Negotiate

    Value: 0 or 1

    • 0: disable
    • 1: enable

    Example: AutoAdjust="0"

    IPv4 Network Access Mode

    Indicates the IPv4 network access mode of the IP phone, with three options available: Fixed IP Address, and DHCP.

    • If you select Fixed IP Address, fill out the IP address, subnet mask, gateway address, active DNS server address, and standby DNS server address.
    • If you select DHCP, the IP phone automatically obtains an IP address from the DHCP server. You can still choose to manually enter the DNS server address or enable the IP phone to automatically obtain a DNS server address.
    NOTE:
    • Auto DNS Server: The IP phone automatically obtains a DNS server address from the DHCP server.
    • Manually obtain the DNS address: You need to manually enter the active and standby DNS server addresses.

    Select a value based on your network conditions.

    Default: DHCP

    Parameter: ACCESSMODE

    Location: Device > ComCfg > Access

    Value range: 0, or 1

    • 0: fixed IP address
    • 1: DHCP

    Example: ACCESSMODE="1"

    IPv6 Network Access Mode

    Indicates the IPv6 network access mode of the IP phone, with three options available: Fixed IP Address, and DHCP.

    • If you select Fixed IP Address, fill out the IP address, subnet mask, prefix length, gateway address, active DNS server address, and standby DNS server address.
    • If you select DHCP, the IP phone automatically obtains an IP address from the DHCP server. You can still choose to manually enter the DNS server address or enable the IP phone to automatically obtain a DNS server address.
    NOTE:
    • Auto DNS Server: The IP phone automatically obtains a DNS server address from the DHCP server.
    • Manually obtain the DNS address: You need to manually enter the active and standby DNS server addresses.

    Select a value based on your network conditions.

    Default: DHCP

    Parameter: ACCESSMODEIPV6

    Location: Device > ComCfg > Access

    Value range: 0, or 1

    • 0: fixed IP address
    • 1: DHCP

    Example: ACCESSMODEIPV6="0"

Setting Parameters on the LCD Screen

  1. Choose Advanced > Network on the LCD screen as an administrator. For details, see section Advanced Screen Access.
  2. Set parameters listed in Table 6-5.

    Table 6-5 Network parameters on the LCD screen

    Parameter

    Description

    How to Set

    Access Authentication

    802.1x

    802.1x is a protocol for port-based network access control. It authenticates and controls devices that attempt to connect to a LAN.

    • If a device connected to an 802.1x-enabled port on the switch is authenticated, the device can access resources on the LAN.
    • If the authentication fails, the device cannot access resources on the LAN.

    Enable or disable 802.1x based on requirements.

    NOTE:
    • To ensure network access security, it is recommended that you enable 802.1x. Ask your network administrator for the user name and password for 802.1x authentication.
    • When a phone connects to the Huawei public cloud, the 802.1x authentication is not supported.

    Default: Enable

    You can set the authentication mode after 802.1x authentication is enabled.

    The authentication modes are EAP-MD5, EAP-TLS, and Auto.

    Default value: EAP-TLS

    LLDP-MED

    Indicates whether to enable LLDP packet sending on the phone's LAN port.

    LLDP enables a device to store and manage information about the device itself and directly-connected neighbors for the network management system to check the link communication status.

    • If you select Enable, the phone's LAN port sends LLDP packets.
    NOTE:

    HUAWEI IP Phone 7920/7960 can only send LLDP packets. It does not process its received LLDP packets.

    • If you select Disable, the phone's LAN port does not send LLDP packets.

    Default: Enable

    VLAN

    Indicates whether to enable the VLAN function for the phone's LAN port.

    If you select Enable, the VLAN function is enabled for the phone's LAN port.

    • VLAN ID

      Indicates the VLAN ID of the phone's LAN port. After LAN port is enabled, the data packets sent by the IP phone carry VLAN tags.

      The network administrator divides the network connected to the switch into multiple VLANs. Each VLAN has a VLAN ID.

      NOTE:
      • The VLAN ID for the LAN port must be different from that for the PC port; otherwise, network exceptions occur.
      • When LLDP is enabled in the environment where the VLAN is configured, the VLAN value obtained using LLDP takes precedence over the VLAN value configured in the configuration file. When the IP phone switches to an environment where no VLAN is configured, the VLAN value in the configuration file is used.
    • VLAN Priority

      Indicates the VLAN priority of the phone's LAN port.

    Set this parameter based on requirements.

    Default: Enable

    After you select Enable, you can set VLAN ID and VLAN Priority.

    • VLAN ID

      Set this parameter to the ID of the VLAN to which the IP phone belongs.

      Value range: 0-4094

      Default: 0

    • VLAN Priority

      Set this parameter based on requirements. A large value indicates a high priority.

      Value range: 0-7

      Default: 6

    Security

    SRTP

    Indicates the media stream encryption mode.

    • Mandatory: encrypts media streams.
    • Optional: encrypts media streams when Mandatory or Optional is selected for the peer IP phone, and does not encrypt media streams when Disable is selected for the peer IP phone.
    • Disable: does not encrypt media streams.
    • To ensure communication security, it is recommended that you select Mandatory.
    • When some peer IP phones do not support SRTP-based encryption but need to have media stream exchanged with the IP phone, select Optional.
    • If you select Disable, all media data is transmitted in plain text over the IP network.

    Default: Disable

    SIP Transport

    Indicates the transmission mode of SIP signaling. Three options are available:

    • UDP: transaction-oriented, simple, and unreliable transmission mode
    • TLS: cryptographic and secure transmission mode to ensure confidentiality and message integrity
    • TCP: connection-oriented and reliable transmission mode

    Set this parameter based on requirements.

    NOTE:
    • To ensure communication security, it is recommended that you select TLS.
    • When SIP Transport is set to TLS, you need to configure the time server or manually set the time to the current time to prevent IP phone registration failure.

    Before using TLS, ensure that:

    • The server supports TLS.
    • You have imported the TLS client root certificate to the IP phone and have selected the imported certificate from the TLS Certificate Issuer drop-down list box. For details about how to import a certificate, see Multi-Certificate Support.
    • You have set the correct server port. In a UC2.X or EC6.X network environment, the port number is 5061. For details, see Server.
    • The phone's system time is within the validity period of the imported certificate.
    • The phone does not connect to the Huawei public cloud.

    Default: UDP

    WEB

    Indicates the mode for accessing the IP phone using the web page.

    • Disable: Web access is disabled.
    • HTTP: The web browser interacts with the IP phone using HTTP. When you select HTTPS, the web browser automatically changes its web access mode to HTTPS even if you log in to the phone web page using HTTP.
    • HTTPS: The web browser interacts with the IP phone using HTTPS, which ensures user information security.
    • HTTP is a protocol to transmit data in plain text. Therefore, if you use HTTP, ensure that your network is a trusted one.
    • Before using HTTPS, import the required certificate. For details about how to import a certificate, see Multi-Certificate Support.

    Default: HTTPS

    TLS1.0

    Indicates TLS 1.0.

    Set this parameter based on requirements.

    NOTE:
    • TLS1.0 has security risks. To ensure communication security, it is recommended that you disable TLS1.0 and use TLS of a later version.

    Default: Disable

    Ethernet IPv4 Settings

    Indicates the IPv4 network access mode of the IP phone, with three options available: DHCP, and Static.

    • If you select Static, fill out the IP address, subnet mask, gateway address, active DNS server address, and standby DNS server address.
    • If you select DHCP, the IP phone automatically obtains an IP address from the DHCP server. You can still choose to manually enter the DNS server address or enable the IP phone to automatically obtain a DNS server address.
    NOTE:
    • Auto DNS Server: The IP phone automatically obtains a DNS server address from the DHCP server.
    • Manually obtain the DNS address: You need to manually enter the active and standby DNS server addresses.

    Select a value based on your network conditions.

    Default: DHCP

    Ethernet IPv6 Settings

    Indicates the IPv6 network access mode of the IP phone, with three options available: DHCP, and Static.

    • If you select Static, fill out the IP address, subnet mask, prefix length, gateway address, active DNS server address, and standby DNS server address.
    • If you select DHCP, the IP phone automatically obtains an IP address from the DHCP server. You can still choose to manually enter the DNS server address or enable the IP phone to automatically obtain a DNS server address.
    NOTE:
    • Auto DNS Server: The IP phone automatically obtains a DNS server address from the DHCP server.
    • Manually obtain the DNS address: You need to manually enter the active and standby DNS server addresses.

    Select a value based on your network conditions.

    Default: DHCP

Translation
Download
Updated: 2019-03-06

Document ID: EDOC1100036652

Views: 26804

Downloads: 60

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next