Cisco 7941G Administration Guide

Results of ActionSecurity Level of
Participants
Feature Used
Initiator’s Phone
Security Level
Initiator receives message Does not
meet Security Level and the call
is rejected.
Minimum security level is
encrypted
Meet MeNonsecure
Secure conference bridge
Conference accepts encrypted and
authenticated calls
Minimum security level is
authenticated
Meet MeSecure
(encrypted)
Only secure conference bridge is
available and used
Conference accepts all calls
Minimum security level is
non-secure
Mee tMeSecure
(encrypted)
802.1X Authentication
This section provides information about 802.1X support on the Cisco Unified IP Phones.
Overview
Cisco Unified IP Phones and Cisco Catalyst switches traditionally use Cisco Discovery Protocol (CDP) to
identify each other and determine parameters such as VLAN allocation and inline power requirements. CDP
does not identify locally attached workstations. Cisco Unified IP Phones provide an EAPOL pass-through
mechanism. This mechanism allows a workstation attached to the Cisco Unified IP Phone to pass EAPOL
messages to the 802.1X authenticator at the LAN switch. The pass-through mechanism ensures that the IP
phone does not act as the LAN switch to authenticate a data endpoint before accessing the network.
Cisco Unified IP Phones also provide a proxy EAPOL Logoff mechanism. In the event that the locally attached
PC disconnects from the IP phone, the LAN switch does not see the physical link fail, because the link between
the LAN switch and the IP phone is maintained. To avoid compromising network integrity, the IP phone sends
an EAPOL-Logoff message to the switch on behalf of the downstream PC, which triggers the LAN switch to
clear the authentication entry for the downstream PC.
Cisco Unified IP Phones also contain an 802.1X supplicant. This supplicant allows network administrators
to control the connectivity of IP phones to the LAN switch ports. The current release of the phone 802.1X
supplicant uses the EAP-FAST, EAP-TLS, and EAP-MD5 options for network authentication.
Required Network Components
Support for 802.1X authentication on Cisco Unified IP Phones requires several components, including:
•
Cisco Unified IP Phone: The phone acts as the 802.1X supplicant, which initiates the request to access
the network.
•
Cisco Secure Access Control Server (ACS) (or other third-party authentication server): The authentication
server and the phone must both be configured with a shared secret that authenticates the phone.
Cisco Unified IP Phone 7941G, 7941G-GE, 7942G, 7961G, 7961G-GE, and 7962G Administration Guide for Cisco Unified
Communications Manager 9.0 (SCCP and SIP)
21
Cisco Unified IP Phone
802.1X Authentication

Cisco 7941G Specifications

General

Keypad number of keys	12
Touchscreen	-
Display resolution	320 x 222 pixels
Speakerphone	Yes
Voice codecs	G.729a
Bluetooth	No
Supported network protocols	DHCP, TFTP, SCCP, DSCP
Ethernet LAN (RJ-45) ports	2
Input voltage	48 V
Dimensions (WxDxH)	266.7 x 152.4 x 203.2 mm
Storage temperature (T-T)	-10 - 60 °C
Operating temperature (T-T)	0 - 40 °C
Operating relative humidity (H-H)	10 - 95 %
Handset type	Wired handset
Product type	IP Phone
Product color	Gray
Safety	(UL) 60950, (CSA) C22.2 No. 60950, IEC 60950, EN 60950, AS/NZS 60950
Certification	CE (FCC) 15 (CFR 47) B ICES-003 B EN55022 B CISPR22 B AS/NZ 3548 B VCCI B EN55024 EN 50082-1 EN 61000-3-2 EN 61000-3-3
Compliance industry standards	IEEE 802.3, IEEE 802.3u, IEEE 802.1Q, IEEE 802.3af
Lines quantity	- lines
Phonebook capacity	- entries
Number of handles included	1 pc(s)

Weight and Dimensions

Weight	1600 g