Cisco 7970G Administration Manual page 231

Chapter 9 Troubleshooting and Maintenance
Table 9-1 Cisco Unified IP Phone Security Troubleshooting (continued)
Problem
Phone reports TFTP authorization failure.
Phone does not register with Cisco
Unified CallManager.
Phone does not request signed configuration
files.
802.1X Enabled on Phone but Not Authenticating
Phone cannot obtain a DHCP-assigned IP
address.
Phone does not register with
Cisco Unified CallManager.
Phone status display as "Configuring IP" or
"Registering".
802.1X Authentication Status displays as
"Held" (see the "802.1X Authentication and
Status" section on page 4-42
Status menu displays 802.1X status as "Failed"
(see the "Status Menu" section on page 7-3
more details).
Cisco Unified IP Phone Administration Guide for Cisco Unified CallManager 5.1 (SIP), Cisco Unified IP Phones
OL-11524-01
Possible Cause
•
•
The CTL file does not contain the correct information
for the Cisco Unified CallManager server or the
Cisco Unified CallManager does not have the valid
issuer of the phone's certificate.
The CTL file does not contain any TFTP entries with
certificates.
These errors typically indicate that 802.1X
authentication is enabled on the phone, but the phone
is unable to authenticate.
1.
2.
for more details).
for
Troubleshooting Cisco Unified IP Phone Security
The TFTP address for the phone does not exist in
the CTL file.
If you created a new CTL file with a new TFTP
record, the existing CTL file on the phone may
not contain a record for the new TFTP server.
Verify that you have properly configured the
required components (see the
802.1X Authentication on Cisco Unified IP
Phones" section on page 1-18
information).
Confirm that the shared secret is configured on
the phone (see the "802.1X Authentication and
Status" section on page 4-42
information).
If the shared secret is configured, verify that
–
you have the same shared secret entered on
the authentication server.
– If the shared secret is not configured, enter it
and ensure that it matches the one on the
authentication server.
"Supporting
for more
for more
9-13