Cisco CP-7970G Administration Manual page 211

Chapter 9 Troubleshooting and Maintenance
Table 9-1
Problem
Phone cannot authenticate CTL file.
Phone cannot authenticate any of the configuration
files other than ITL file.
Phone does not register with
Cisco Unified Communications Manager.
Phone does not request signed configuration files. The CTL file does not contain any TFTP entries
802.1X Enabled on Phone but Not Authenticating
Phone cannot obtain a DHCP-assigned IP address. These errors typically indicate that 802.1X
Phone does not register with
Cisco Unified Communications Manager.
Phone status display as "Configuring IP" or
"Registering".
802.1X Authentication Status displays as "Held"
(see 802.1X Authentication and Status, page 4-42
for more details).
Status menu displays 802.1X status as "Failed"
(see Status Menu, page 7-3
802.1X Not Enabled
Phone cannot obtain a DHCP-assigned IP address These errors typically indicate that 802.1X
Phone does not register with
Cisco Unified Communications Manager
Phone status display as "Configuring IP" or
"Registering"
802.1X Authentication Status displays as
"Disabled"
Status menu displays DHCP status as timing out
OL-23092-01
Cisco Unified IP Phone Security Troubleshooting (continued)
for more details).
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
Troubleshooting Cisco Unified IP Phone Security
Possible Cause
The security token that signed the updated CTL
file does not exist in the CTL file on the phone.
The configuration file may not be signed by the
corresponding certificate in the phone's Trust List.
The CTL file does not contain the correct
information for the
Cisco Unified Communications Manager server.
with certificates.
authentication is enabled on the phone, but the
phone is unable to authenticate.
Verify that you have properly configured the
1.
required components (see
Authentication on Cisco Unified IP Phones,
page 1-19 for more information).
Confirm that the shared secret is configured
2.
on the phone (see 802.1X Authentication and
Status, page 4-42 for more information).
– If the shared secret is configured, verify
that you have the same shared secret
entered on the authentication server.
If the shared secret is not configured,
–
enter it, and ensure that it matches the one
on the authentication server.
authentication is not enabled on the phone. To
enable it, see 802.1X Authentication and Status,
page 4-42.
Supporting 802.1X
9-9