Cisco OL-5109-01 - Manual (Page 2)

Chapter 4 Phone Hardening
Disabling Web Access Setting
4-2
Cisco IP Phone Authentication and Encryption for Cisco CallManager 4.0(1)
OL-5109-01
Related Topics
• Interactions and Restrictions, page 1-4
• Performing Phone Hardening Tasks, page 4-4
• Cisco IP Phone Administration Guide for Cisco CallManager
Disabling Web Access Setting
Disabling the web server functionality for the phone blocks access to the phone
internal web pages, which provide statistics and configuration information.
Features, such as Cisco Quality Report Tool, do not function properly without
access to the phone web pages. Disabling the web server also affects any
serviceability application, such as CiscoWorks, that relies on web access.
Note Phone users cannot access the Cisco User Option Pages if you disable this option.
To determine if the web services are disabled, the phone parses a parameter in the
configuration file that indicates whether the services are disabled or enabled. If
the web services are disabled, the phone does not open the HTTP port 80 for
monitoring purposes and blocks access to the phone internal web pages.
Related Topics
• Interactions and Restrictions, page 1-4
• Performing Phone Hardening Tasks, page 4-4
• Cisco IP Phone Administration Guide for Cisco CallManager
Disabling the PC Voice VLAN Access Setting
By default, Cisco IP phones forward all packets that are received on the switch
port (the one that faces the upstream switch) to the PC port. If you choose to
disable the PC Voice VLAN Access setting in the Phone Configuration window
of Cisco CallManager Administration, packets received from the PC port that use
voice VLAN functionality will drop. This functionality allows a device that is
attached to the PC port to use 802.1Q (if available) but not have access to the voice
VLAN.