Cisco 6861 Quick reference guide

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
1
Cisco IP Phone 6861 Multiplatform Phones
Wireless LAN Deployment Guide
The Cisco IP Phone 6861 Multiplatform Phones are adaptable for scenarios that require the ability to unplug the wired
network connection and remain connected. The Wireless LAN capability enables communications in a WLAN-deployed
working place or home.
This guide provides information and guidance to help you deploy the phone in a wireless LAN environment.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
2
Revision History
Date
Comments
08/03/19
Initial version
08/06/19
Updated based on review comments

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
3
Contents
Table of Contents
Revision History ............................................................................................................................................................................. 2
Contents .......................................................................................................................................................................................... 3
WLAN Capability Overview......................................................................................................................................................... 4
Supported Frequencies and Channels ......................................................................................................................................... 4
Requirements ............................................................................................................................................................................... 4
Site Requirements.................................................................................................................................................................... 4
Wireless LAN .......................................................................................................................................................................... 5
Protocols...................................................................................................................................................................................... 5
Regulatory.................................................................................................................................................................................... 5
Security ........................................................................................................................................................................................ 6
Configure Wireless LAN ............................................................................................................................................................... 8
Configure Mainstream Home-Based AP...................................................................................................................................... 8
Cisco Autonomous Access Points ................................................................................................................................................ 8
802.11 Network Settings ......................................................................................................................................................... 9
WLAN Settings ..................................................................................................................................................................... 12
Call Admission Control (CAC) ............................................................................................................................................. 16
QoS Policies .......................................................................................................................................................................... 17
Advanced Settings ................................................................................................................................................................. 20
Configure Wireless Connection on Your Phone........................................................................................................................ 21
Wireless LAN Profiles (Web Page)............................................................................................................................................ 21
Wireless LAN Profiles (on Phone Screen) ................................................................................................................................. 22
Wireless LAN with WPS (on Phone Screen) .............................................................................................................................. 25
WLAN Connection Troubleshooting.......................................................................................................................................... 27
View Wi-Fi Status and Messages ............................................................................................................................................... 27
Wi-Fi Message References......................................................................................................................................................... 28
Capture a Screenshot of the Phone Display .............................................................................................................................. 29
Capture Packets......................................................................................................................................................................... 29
Report PRT on the Phone .......................................................................................................................................................... 30
Additional Documentation .......................................................................................................................................................... 32

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
4
WLAN Capability Overview
The Cisco IP Phone 6861 Multiplatform Phones extend collaboration to wireless network with 802.11 implementation.
You can use the Cisco Unified Communication applications on the phone with either wired or wireless network.
With an enhancement on QoS control, the implementation of 802.11 permits time-sensitive applications, such as voice, to
operate efficiently over wireless LAN (WLAN) deployment. These extensions provide bandwidth allocation ahead of a
service if the AP supports it too, which guarantees the efficiency and good experience of communication for traffic over
the air.
Since WLAN uses unlicensed spectrum, it may experience interference from other devices using the unlicensed spectrum.
The proliferation of devices in the 2.4 GHz spectrum, such as Bluetooth headsets, Microwave ovens, and cordless
consumer phones, means that the 2.4 GHz spectrum may contain more congestion than other spectrums. The 5 GHz
spectrum has far fewer devices operating in this spectrum and is the preferred spectrum to operate the phone in order to
take advantage of the 802.11a/n data rates available.
Despite the optimizations that Cisco has implemented in Cisco IP Phone 6861 Multiplatform Phones, we can’t guarantee
uninterrupted communication in using the unlicensed spectrum, and there may be the possibility of voice gaps of up to
several seconds during conversations. Adherence to these deployment guidelines will reduce the likelihood of these voice
gaps being present, but there is always the possibility.
Through the use of unlicensed spectrum, and the inability to guarantee the delivery of messages to a WLAN device, the
Cisco IP Phone 6861 Multiplatform Phone is not intended to be used as a medical device and should not be used to make
clinical decisions.
Supported Frequencies and Channels
The following table lists the frequencies and channels that Cisco IP Phone 6861 Multiplatform Phones support.
Part Number
Description
Peak Antenna Gain
Frequency Ranges
Available
Channels
Channel Set
CP-6861-3PW-CE-K9=
CP-6861-3PW-NA-K9=
CP-6861-3PW-UK-K9=
CP-6861-3PW-AU-K9=
Cisco MPP
Phone 6861
2.412-2.472GHz: 2.44 dBi
5.150-5.350GHz: 0.53 dBi
5.470-5.725GHz: 0.7 dBi
2.412 - 2.472 GHz
5.180 - 5.240 GHz
5.260 - 5.320 GHz
5.500 - 5.700 GHz
5.745 - 5.825 GHz
13
4
4
11
5
1-13
36,40,44,48
52,56,60,64
100-144
149,153,157,161,165
Requirements
Before deploying your phone, ensure that the requirements for the site and WLAN network are met.
Site Requirements
Before deploying the phone into a production environment, the site WLAN network deployment must be properly
configured to accommodate more devices. Typically, there is less interference in the 5 GHz band and more non-
overlapping channels, so 5 GHz is the preferred band for operation and even more highly recommended when the phone is
to be used in a mission-critical environment.
The wireless LAN must be validated to ensure it meets the requirements to deploy the phone.
Signal
The signal coverage should be no lower than -67 dBm to ensure that the phone always has adequate signal.
Channel Utilization
Channel Utilization levels should be kept under 40%.
The phone converts the 0-255 scale value to a percentage, so 105 would equate to around 40% on the phone.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
5
Noise
Noise levels should not exceed -92 dBm, which allows for a Signal to Noise Ratio (SNR) of 25 dB where a -67 dBm
signal should be maintained.
Ensure that the upstream signal from the phone meets the access point’s SNR for the transmitted data rate.
Packet Loss / Delay
Per voice guidelines, packet loss should not exceed 1%. Otherwise, the voice quality can be degraded significantly.
Jitter should be kept at the minimal (< 100 ms).
Retries
802.11 retransmission should be less than 20%.
Multipath
Multipath should be kept to the minimal to create nulls and reduce signal levels.
Number of allowed devices
The total number of connected devices to a given AP is no more than 10.
Separate SSID
We recommend that you put the phone in a separate SSID to guarantee voice traffic on the phone. Sharing the same
SSID with other devices may impact phone calls on the phone when the other devices are using heavy network traffic.
For voice deployments, it is suggested to use 802.11a/n for voice and use 802.11b/g/n for data.
Wireless LAN
The Cisco IP Phone 6861 Multiplatform Phones are recommended to work with the following Wireless LAN solutions:
•Mainstream AP for home use
•Cisco Autonomous Access Points
▪Minimum = 12.4(21a)JY
▪Recommended = 12.4(25d)JA2, 15.2(4)JB6, 15.3(3)JD
Protocols
The supported wireless LAN protocols include the following:
•802.11a, b, d, e, g, h, i, n
•Wi-Fi MultiMedia (WMM)
•Traffic Specification (TSPEC)
•Traffic Classification (TCLAS)
Regulatory
World Mode (802.11d) allows a client to be used in different regions, where the client can adapt to use the channels and
transmit powers advertised by the access point in the local environment.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
6
The phone operates best when the access point is 802.11d-enabled. The AP can determine the channels and transmit
powers per the local region.
Enable World Mode (802.11d) for the corresponding country where the access point is located.
Some 5 GHz channels are also used by radar technology, which requires that the 802.11 client and access point to be
802.11h-compliant to utilize those radar frequencies (DFS channels). 802.11h requires 802.11d to be enabled.
The Cisco IP Phone 6861 Multiplatform Phone will passively scan DFS channels first before engaging in active scans of
those channels.
If 802.11d is not enabled, then the phone can attempt to connect to the access point using reduced transmit power.
Below are the countries and their 802.11d codes that the phone supports.
Argentina (AR)
Iceland (IS)
Philippines (PH)
Australia (AU)
India (IN)
Poland (PL)
Austria (AT)
Ireland (IE)
Portugal (PT)
Bahrain (BH)
Israel (IL)
Puerto Rico (PR)
Belgium (BE)
Italy (IT)
Romania (RO)
Brazil (BR)
Japan (JP)
Russian Federation (RU)
Bulgaria (BG)
Korea (KR)
Saudi Arabia (SA)
Canada (CA)
Latvia (LV)
Serbia (RS)
Chile (CL)
Liechtenstein (LI)
Singapore (SG)
Colombia (CO)
Lithuania (LT)
Slovakia (SK)
Costa Rica (CR)
Luxembourg (LU)
Slovenia (SI)
Croatia (HR)
Macau (MO)
South Africa (ZA)
Cyprus (CY)
Macedonia (MK)
Spain (ES)
Czech Republic (CZ)
Malaysia (MY)
Sweden (SE)
Denmark (DK)
Malta (MT)
Switzerland (CH)
Dominican Republic (DO)
Mexico (MX)
Taiwan (TW)
Ecuador (EC)
Monaco (MC)
Thailand (TH)
Egypt (EG)
Montenegro (ME)
Turkey (TR)
Estonia (EE)
Netherlands (NL)
Ukraine (UA)
Finland (FI)
New Zealand (NZ)
United Arab Emirates (AE)
France (FR)
Nigeria (NG)
United Kingdom (GB)
Germany (DE)
Norway (NO)
United States (US)
Gibraltar (GI)
Oman (OM)
Uruguay (UY)
Greece (GR)
Panama (PA)
Venezuela (VE)
Hong Kong (HK)
Paraguay (PY)
Vietnam (VN)
Hungary (HU)
Peru (PE)
Security
When deploying a wireless LAN, security is essential. The phone supports the following wireless security features.
•WLAN Authentication
▪WPA2-PSK (Pre-Shared key + AES encryption)
▪WPA-PSK (Pre-Shared key + TKIP encryption)
▪WPA2 (802.1x authentication + AES or TKIP encryption)

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
7
▪WPA (802.1x authentication + TKIP or AES encryption)
▪EAP-FAST (Extensible Authentication Protocol - Flexible Authentication via Secure Tunneling)1
▪EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) )1
▪PEAP-GTC (Protected Extensible Authentication Protocol - Generic Token Card) )1
▪PEAP-MSCHAPv2 (Protected Extensible Authentication Protocol - Microsoft Challenge Handshake
Authentication Protocol version 2) )1
▪None
•WLAN Encryption
▪AES (Advanced Encryption Standard)
▪TKIP / MIC (Temporal Key Integrity Protocol / Message Integrity Check)
▪WEP (Wired Equivalent Protocol) 40/64 and 104/128 bit
Note: An external authentication system is required.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
8
Configure Wireless LAN
Configure Mainstream Home-Based AP
When configuring a mainstream home-based access point, ensure that:
1. You enable internet access as below picture shows. The internet connection could be set up via wideband user
account on DSL or fiber link to external network.
2. You configure the local SSID and the secure mode for home/office usage as following picture shows.
Cisco Autonomous Access Points
When configuring Cisco Autonomous Access Points, use the following guidelines:
•Configure the Data Rates as necessary
•Configure Quality of Service (QoS)
•Set the WMM Policy to Required
•Ensure Aironet Extensions is Enabled
•Disable Public Secure Packet Forwarding (PSPF)
•Set IGMP Snooping to Enabled

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
9
802.11 Network Settings
We recommend that you have the phone operate on the 5 GHz band only due to that there are many channels available on
this band and not as many interferers as the 2.4 GHz band has.
To use the 5 GHz band, ensure that the 802.11a/n network status is Enabled.
We recommend that you set 12 Mbps as the mandatory (basic) rate and 18 Mbps or higher as the supported (optional)
rates. However, some environments may require 6 Mbps to be enabled as the mandatory (basic) rate.
When using the 5 GHz band, up to 12 channels only is recommended to avoid any potential delay of access point
discovery due to having to scan many channels.
For Cisco Autonomous Access Points, select Dynamic Frequency Selection (DFS) to use auto channel selection.
When DFS is enabled, enable at least one band (bands 1-4).
You can select Band 1 only for the access point to use a UNII-1 channel (channel 36, 40, 44, or 48).
Individual access points can be configured to override the global settings to use dynamic channel and transmit power
assignment for either 5 GHz or 2.4 GHz depending on the frequency band to be used.
Other access points can be enabled for Auto RF and workaround the access points that are statically configured.
This may be necessary if there is an intermittent interference present in an area.
The 5 GHz channel width can be configured for 20 MHz or 40 MHz if using Cisco 802.11n Access Points and 20 MHz,
40 MHz, or 80 MHz if using Cisco 802.11ac Access Points.
It is recommended to use the same channel width for all access points.
Ensure Client Power is configured properly. Do not use the default setting of Max power for client power on Cisco
Autonomous Access Points because that will not advertise DTPC to the client.
Enable Dot11d for World Mode and configure the proper Country Code.
Ensure Aironet Extensions is enabled.
Set the Beacon Period to 100 ms and DTIM to 2.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
10

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
11
If you want to use the 2.4 GHz band, ensure that the 802.11b/g/n network status and 802.11g is enabled.
Recommended to set 12 Mbps as the mandatory (basic) rate and 18 Mbps or higher as supported (optional) rates assuming
that there will not be any 802.11b-only clients connecting to the wireless LAN. However, some environments may require
6 Mbps to be enabled as the mandatory (basic) rate.
If 802.11b clients exist, then 11 Mbps should be set as the mandatory (basic) rate and 12 Mbps or higher as the supported
(optional) rate.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
12
WLAN Settings
We recommend that you set a separate SSID for the phone to connect.
However, if there is an existing SSID configured to support voice-capable Cisco Wireless LAN endpoints already, then
that WLAN can be utilized instead.
The SSID to be used by the phone can be configured to only apply to a certain 802.11 radio type (e.g. 802.11a only).
Enable WPA2 key management.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
13

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
14
Segment wireless voice and data into separate VLANs.
Ensure that Public Secure Packet Forwarding (PSPF) is not enabled for the voice VLAN as this will prevent clients from
direct communication when associated to the same access point. If PSPF is enabled, then the result will be no audio.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
15
Ensure AES is selected for encryption type.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
16
Configure the RADIUS servers to be used for authentication and accounting.
Call Admission Control (CAC)
Load-based CAC that supports multiple streams is not present on the Cisco Autonomous Access Points therefore it is not
recommended to enable CAC on Cisco Autonomous Access points.
The Cisco Autonomous Access Point only allows for one stream and the stream size is not customizable, therefore SRTP
and barge do not work if CAC is enabled.
If Admission Control for Voice or for Video is enabled on the Cisco Autonomous Access Point, the admission must be
unblocked on the SSID as well. In recent releases, the admission is unblocked by default.
dot11 ssid voice
vlan 3
authentication open eap eap_methods
authentication network-eap eap_methods
authentication key-management wpa version 2 dot11r
admit-traffic

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
17
QoS Policies
Configure the following QoS policy on the Cisco Autonomous Access Point to enable DSCP to CoS (WMM UP)
mapping.
This allows packets to be placed into the proper queue as long as those packets are marked correctly when received at the
access point level.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
18
To enable QBSS, select Enable and check Dot11e.
If Dot11e is checked, then both CCA versions (802.11e and Cisco version 2) will be enabled.
Ensure IGMP Snooping is enabled.
Ensure Wi-Fi MultiMedia (WMM) is enabled.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
19
If the Stream feature is enabled either directly or via selecting Optimized Voice for the radio access category in the QoS
configuration section, then use the default settings, where 5.5, 6, 11, 12, and 24 Mbps are enabled as nominal rates for
802.11b/g, 6, 12, and 24 Mbps are enabled for 802.11a, and 6.5, 13, and 26 Mbps are enabled for 802.11n.
If the Stream feature is enabled, ensure that only voice packets are being put into the voice queue. Signaling packets (SIP)
should be put into a separate queue. This can be ensured by setting up a QoS policy mapping the DSCP to the correct
queue.

Cisco IP Phone 6861 Multiplatform Phones Wireless LAN Deployment Guide
20
Advanced Settings
TKIP Countermeasure Holdoff Time
TKIP countermeasure mode can occur if the access point receives two Message Integrity Check (MIC) errors within
60 seconds. When this occurs, the access point will de-authenticate all TKIP clients associated to that 802.11 radio and
hold off any clients for the countermeasure holdoff time (default = 60 seconds).
To change the TKIP countermeasure holdoff time on the Cisco Autonomous Access Point, telnet or SSH to the access
point and enter the following command specifying the number of seconds and WLAN ID.
Interface dot11radio X
countermeasure tkip hold-time <nseconds>