Cisco 7925G - Unified Wireless IP Phone VoIP Quick reference guide

Cisco Unified Wireless IP Phone 7925G Deployment Guide 1
Cisco Unified Wireless IP Phone 7925G
Deployment Guide
The Cisco Unified Wireless IP Phone 7925G is adaptable for all mobile professionals, from users on the move within an office
environment to nurses and doctors in a healthcare environment to associates working in the warehouse, on the sales floor, or in
a call center. Staff, nurses, doctors, educators, and IT personnel can be easily reached when mobile utilizing a Bluetooth
headset. The Cisco Unified Wireless IP Phone 7925G is Bluetooth 2.0 compatible and supports the headset and handsfree
profiles. The Cisco Unified Wireless IP Phone 7925G is IP54 rated protecting it from dust, liquid splashes and moisture.
This guide provides information and guidance to help the network administrator deploy these phones in a wireless LAN
environment.
Revision History
Date Comments
10/13/2008 Initial Version
11/17/2009 1.3(3) Release

Cisco Unified Wireless IP Phone 7925G Deployment Guide 2
Contents
Requirements for the Cisco Unified Wireless IP Phone 7925G ...........................................................................................................5
Site Survey .............................................................................................................................................................................................5
RF Validation.........................................................................................................................................................................................5
Call Control...........................................................................................................................................................................................6
Supported Protocols ..............................................................................................................................................................................6
Supported Access Points........................................................................................................................................................................6
Supported Antennas...............................................................................................................................................................................8
Phone Models and Localization..............................................................................................................................................................8
Phone Models ........................................................................................................................................................................................8
World Mode (802.11d)......................................................................................................................................................................9
Supported Countries..............................................................................................................................................................................9
Language Support................................................................................................................................................................................10
Radio Characteristics ............................................................................................................................................................................10
Bluetooth.................................................................................................................................................................................................11
Coexistence (802.11b/g + Bluetooth) ..................................................................................................................................................11
Wireless Security....................................................................................................................................................................................12
Extensible Authentication Protocol - Flexible Authentication via Secure Tunneling (EAP-FAST).....................................................12
Extensible Authentication Protocol – Transport Layer Security (EAP-TLS).......................................................................................14
Protected Extensible Authentication Protocol (PEAP)........................................................................................................................15
Cisco Centralized Key Management (CCKM).....................................................................................................................................16
EAP and User Database Compatibility ...............................................................................................................................................17
Voice Security.........................................................................................................................................................................................17
Power Management ...............................................................................................................................................................................18
Protocols..............................................................................................................................................................................................18
Unscheduled Auto Power Save Delivery (U-APSD).......................................................................................................................18
Power Save Poll (PS-POLL)............................................................................................................................................................19
Active Mode....................................................................................................................................................................................19
Delivery Traffic Indicator Message (DTIM)........................................................................................................................................19
Scan Modes..........................................................................................................................................................................................19
Quality of Service (QoS)........................................................................................................................................................................20
Configuring QoS in Cisco Unified Communications Manager............................................................................................................20
Configuring QoS Policies for the Network ..........................................................................................................................................20
Configuring Cisco IOS Access Points.............................................................................................................................................21
Configuring Cisco Switch Ports ......................................................................................................................................................21
Configuring Switch Ports for Wired IP Phones...............................................................................................................................21
Sample Voice Packet Capture..........................................................................................................................................................22
Call Admission Control........................................................................................................................................................................23
Pre-Call Admission Control ............................................................................................................................................................24
Roaming Admission Control...........................................................................................................................................................24

Cisco Unified Wireless IP Phone 7925G Deployment Guide 3
Traffic Classification (TCLAS) ............................................................................................................................................................25
Multicast.................................................................................................................................................................................................26
Designing the Wireless LAN for Voice.................................................................................................................................................26
Planning Channel Usage.....................................................................................................................................................................26
5 GHz (802.11a) ..............................................................................................................................................................................27
Using Dynamic Frequency Selection (DFS) on Access Points ...................................................................................................27
2.4 GHz (802.11b/g)........................................................................................................................................................................28
Signal Strength and Coverage..........................................................................................................................................................29
Roaming...............................................................................................................................................................................................32
Configuring Data Rates.......................................................................................................................................................................32
Call Capacity.......................................................................................................................................................................................33
Dynamic Transmit Power Control (DTPC).........................................................................................................................................34
Multipath..............................................................................................................................................................................................34
Verification with Site Survey Tools......................................................................................................................................................35
Cisco 7925G Neighbor List.............................................................................................................................................................36
Cisco 7925G Site Survey.................................................................................................................................................................36
Configuring Cisco Unified Communications Manager.......................................................................................................................37
Phone Button Templates......................................................................................................................................................................37
Softkey Templates ................................................................................................................................................................................38
Security Profiles...................................................................................................................................................................................39
G.722 Advertisement............................................................................................................................................................................39
Product Specific Configuration Options..............................................................................................................................................40
Configuring the Cisco Unified Wireless LAN Controller and Access Points....................................................................................44
SSID / WLAN Settings..........................................................................................................................................................................44
Controller Settings...............................................................................................................................................................................47
802.11 Network Settings ......................................................................................................................................................................48
Auto RF...........................................................................................................................................................................................49
EDCA Parameters............................................................................................................................................................................51
DFS (802.11h).................................................................................................................................................................................52
Call Admission Control Settings..........................................................................................................................................................52
Configuring QoS Basic Service Set (QBSS).........................................................................................................................................54
Configuring the WLAN Controller EAP-Request and EAPOL-Key Timeouts.....................................................................................55
Configuring Proxy ARP.......................................................................................................................................................................56
Configuring TKIP Countermeasure Holdoff Time...............................................................................................................................56
VLANs and Autonomous Access Points...............................................................................................................................................57
Configuring the Cisco Unified Wireless IP Phone 7925G ..................................................................................................................57
Configuring the Network Profile Parameters......................................................................................................................................58
Installing Certificates ..........................................................................................................................................................................63
Using Templates to Configure Phones.................................................................................................................................................69
Bluetooth Configuration ......................................................................................................................................................................69
Upgrading Phone Firmware................................................................................................................................................................70

Cisco Unified Wireless IP Phone 7925G Deployment Guide 4
Wavelink Avalanche.............................................................................................................................................................................71
Using the 7925 Configuration Utility for Quick Deployment..............................................................................................................78
Configuring the Local Phone Book and Speed Dials...........................................................................................................................79
Troubleshooting .....................................................................................................................................................................................81
Stream Statistics...................................................................................................................................................................................81
Network Statistics ................................................................................................................................................................................83
Wireless LAN Statistics........................................................................................................................................................................84
Traffic Stream Metrics (TSM)..............................................................................................................................................................85
Phone Logs ..........................................................................................................................................................................................85
Trace Modules.................................................................................................................................................................................86
Trace Levels ....................................................................................................................................................................................87
Radio Diagnostics................................................................................................................................................................................87
Firmware Recovery..............................................................................................................................................................................88
Restoring Factory Defaults..................................................................................................................................................................88
Healthcare Environments......................................................................................................................................................................89
Cleaning the Phone ................................................................................................................................................................................89
Phone Accessories ..................................................................................................................................................................................89
Additional Documentation....................................................................................................................................................................91

Cisco Unified Wireless IP Phone 7925G Deployment Guide 5
Requirements for the Cisco Unified Wireless IP Phone 7925G
The Cisco Unified Wireless IP Phone 7925G is an IEEE 802.11a/b/g wireless IP phone that provides voice communications in
conjunction with these components. Check that your wireless LAN meets the requirements to support the specifications for
these phones:
Site Survey
Before deploying the Cisco Unified Wireless IP Phone 7925G into a production environment, a site survey must be completed
by a Cisco certified partner with the advanced wireless LAN specialization. During the site survey the RF spectrum can be
analyzed to determine which channels are usable in the desired band (2.4 GHz or 5 GHz). Typically there is less interference in
the 5 GHz band as well as more non-overlapping channels, so 5 GHz is the preferred band for operation. The site survey will
include heatmaps showing the intended coverage plan for the location. The site survey will also determine which access point
platform type, antenna type, access point configuration (channel and transmit power) to use at the location. See the “Designing
the Wireless LAN for Voice” section for more information.
RF Validation
In order to determine if VoWLAN can be deployed, the environment must be evaluated to ensure the following items meet
Cisco guidelines.
Signal
The cell edge should be designed to -67 dBm where there is a 20-30% overlap of adjacent access points at that signal level.
This ensures the 7925G phone always has adequate signal and can roam seamlessly.
Channel Utilization
Channel Utilization levels should be kept under 50%.
If using the 7925G phone, this is provided via the QoS Basic Service Set (QBSS), which equates to around 105.
Noise
Noise levels should not exceed -92 dBm, which allows for a Signal to Noise Ratio (SNR) of 25 dB where a -67 dBm signal should be
maintained.
Packet Loss / Delay
Per voice guidelines, packet loss should not exceed 1% packet loss, otherwise voice quality can be degraded significantly.
Jitter should be kept at a minimal (< 100 ms)
Retries
802.11 retransmissions should be less than 20%.
Multipath
Multipath should be kept to a minimal as this can create nulls and reduce signal levels.
Many different tools and applications can be used to evaluate these items in order to certify the deployment.
Cisco Spectrum Expert
AirMagnet (Survey , WiFi Analyzer, VoFi Analyzer, Spectrum Analyzer)
Cisco Wireless Control System (WCS) for Unified Wireless LAN management

Cisco Unified Wireless IP Phone 7925G Deployment Guide 6
Call Control
For call control, the Cisco Unified Wireless IP Phone 7925G supports only Skinny Client Control Protocol (SCCP) on the
following applications:
•Cisco Unified Communications Manager 4.1, 4.2, 4.3, 5.1, 6.0, 6.1, 7.0 and later
•Cisco Unified Communications Manager Express 4.3 and later (Minimum of 12.4(15)T7)
•SRST 4.3 and later (Minimum of 12.4(15)T7)
Device Support in Cisco Unified Communications Manager
Cisco Unified Communications Manager requires that you install a device package or service release update in order to enable
Cisco Unified Wireless IP Phone 7925G device support.
Cisco Unified Communications Manager 5.1 or higher requires signed COP files.
Device packages for Cisco Unified Communications Manager are available at http://www.cisco.com/kobayashi/sw-center/sw-
voice.shtml.
Supported Protocols
Supported voice and wireless LAN protocols include these:
•Real Time Protocol (RTP)
•G.711u-law, G.711a-law, G.729a, G.729ab, G.722, iLBC
•Real Time Control Protocol (RTCP)
•Cisco Discovery Protocol (CDP)
•Syslog
•CCX v4
•Wi-Fi MultiMedia (WMM)
•Traffic Specification (TSPEC)
•Traffic Classification (TCLAS)
•Unscheduled Auto Power Save Delivery (U-APSD) and Power Save Poll (PS-POLL)
Supported Access Points
The Cisco Unified Wireless IP Phone 7925G is supported on both the Cisco autonomous and unified solutions.
•Cisco Unified Wireless LAN Controller
Minimum = 4.0.217.0 or later
Recommended = 5.2.193.0 or later
•Cisco IOS Access Points (Autonomous)
Minimum = 12.3(8)JEA2 or later
Recommended = 12.4(10b)JA3 or later (does not apply to 1100, 1140, 1200, 1230)

Cisco Unified Wireless IP Phone 7925G Deployment Guide 7
Note: VoWLAN is not currently supported in conjunction with outdoor MESH technology (1500 series).
3rd party access points are not supported.
The table below lists the modes that are supported by each Cisco access point.
Cisco Series 802.11b 802.11g 802.11a Autonomous Unified
500 Yes Yes No Yes Yes
1000 Yes Yes Yes No Yes
1100 Yes Yes No Yes Yes
1130AG Yes Yes Yes Yes Yes

Cisco Unified Wireless IP Phone 7925G Deployment Guide 8
1140 Yes Yes Yes Yes Yes
1200 Yes Yes Optional Yes Yes
1230AG Yes Yes Yes Yes Yes
1240AG Yes Yes Yes Yes Yes
1250 Yes Yes Yes Yes Yes
1300 Yes Yes No Yes Yes
Supported Antennas
Some of the Cisco Access Points require or allow external antennas.
Please refer to the following URL for the list of supported antennas and how these external antennas should be mounted.
http://www.cisco.com/en/US/prod/collateral/wireless/ps7183/ps469/product_data_sheet09186a008008883b.html
Note: The Cisco 1130 and 1140 series access points are to be mounted on the ceiling as they have omni-directional antennas.
Phone Models and Localization
Phone Models
Cisco manufactures four Cisco Unified Wireless IP Phone 7925G models that support the following domains. On the phone,
you can identify its domain by pressing Settings > Model Information > WLAN Regulatory Domain and referencing the
Regulatory Domain number in this list:
Use this table to identify specific phone versions that support these regulatory domains for use around the world:
Regulatory
Domain Part Number Regulatory
Domain
Number
Band Range Available
Channels 5 GHz Channel Set
FCC (Americas) CP-7925G-A-K9 1050 2.412 – 2.462 GHz
5.180 – 5.240 GHz
5.260 – 5.320 GHz
5. 500 – 5.700 GHz
5.745 – 5.805 GHz
11
4
4
8
4
UNII-1
UNII-2
UNII-2 Extended
UNII-3
ETSI (Europe) CP-7925G-E-K9 3051 2.412 – 2.472 GHz
5.180 – 5.700 GHz
13
19
Japan CP-7925G-P-K9 4157 2.412 – 2.472 GHz
2.412 – 2.484 GHz
5.180 – 5.700 GHz
13 (OFDM)
14 (CCK)
19

Cisco Unified Wireless IP Phone 7925G Deployment Guide 9
Rest of World CP-7925G-W-K9 5252 Uses 802.11d to identify available channels and transmit
powers
Note: 802.11j (channels 34, 38, 42, 46) and channel 165 are not supported.
World Mode (802.11d)
If using the Cisco Unified Wireless IP Phone 7925G World (-W) model, then you must enable 802.11d. The Cisco Unified
Wireless IP Phone 7925G gives precedence to 802.11d to determine the channels and transmit powers to use and inherits its
client configuration from the associated access point.
Enable World Mode (802.11d) for the corresponding country where the access point is located.
If 802.11d information is not available from the access point, then the phone uses the locally configured regulatory domain. If
the Cisco Unified Wireless IP Phone 7925G -A, -E or -P model is taken to another country, where the access point uses a
different regulatory domain, then 802.11d will be required for the Cisco Unified Wireless IP Phone 7925G to operate
successfully.
When using 802.11a, you can enable 802.11d to discover which channels are used in the network. Specifically, for 802.11h
support, the phone passively scans some of the 5 GHz channels (DFS) first before actively scanning any network channels.
The supported countries where the Cisco Unified Wireless IP Phone 7925G is allowed to operate are listed below:
Note: World Mode is enabled automatically for the Cisco Unified Wireless LAN Controller.
World Mode must be enabled manually for Cisco Autonomous Access Points using the following commands:
Interface dot11radio X
world-mode dot11d country US both
Supported Countries
Below are the countries and their 802.11d codes that are supported by the Cisco Unified Wireless IP Phone 7925G.
Argentina (AR) India (IN) Poland (PL)
Australia (AU) Indonesia (ID) Portugal (PT)
Austria (AT) Ireland (IE) Puerto Rico (PR)
Belgium (BE) Israel (IL) Romania (RO)
Brazil (BR) Italy (IT) Russian Federation (RU)
Bulgaria (BG) Japan (JP) Saudi Arabia (SA)
Canada (CA) Korea (KR / KP) Singapore (SG)
Chile (CL) Latvia (LV) Slovakia (SK)
Colombia (CO) Liechtenstein (LI) Slovenia (SI)
Costa Rica (CR) Lithuania (LT) South Africa (ZA)
Cyprus (CY) Luxembourg (LU) Spain (ES)
Czech Republic (CZ) Malaysia (MY) Sweden (SE)
Denmark (DK) Malta (MT) Switzerland (CH)
Estonia (EE) Mexico (MX) Taiwan (TW)
Finland (FI) Monaco (MC) Thailand (TH)

Cisco Unified Wireless IP Phone 7925G Deployment Guide 10
France (FR) Netherlands (NL) Turkey (TR)
Germany (DE) New Zealand (NZ) Ukraine (UA)
Gibraltar (GI) Norway (NO) United Arab Emirates (AE)
Greece (GR) Oman (OM) United Kingdom (GB)
Hong Kong (HK) Panama (PA) United States (US
Hungary (HU)
Iceland (IS) Peru (PE) Phillipines (PH) Venezuela (VE) Vietnam (VN)
Note: Compliance information is available on the Cisco Product Approval Status web site at the following URL:
http://tools.cisco.com/cse/prdapp/jsp/externalsearch.do?action=externalsearch&page=EXTERNAL_SEARCH
Language Support
The Cisco Unified Wireless IP Phone 7925G currently supports the following languages.
Bulgarian English Japanese Serbian
Catalan Finnish Korean Slovak
Chinese French Norwegian Slovenian
Croatian German Polish Spanish
Czech Greek Portuguese Swedish
Danish Hungarian Romanian
Dutch Italian Russian
The corresponding locale package must be installed to enable support for that language. English is the default language on the
phone.
Download the locale packages from the Localization page at the following URL:
http://www.cisco.com/kobayashi/sw-center/telephony/callmgr/locale-installer.shtml
Radio Characteristics
Use this table to see the data rates, ranges, and receiver sensitivities for Cisco Unified Wireless IP Phone 7925G depending on
the Wi-Fi standard in use.
802.11a Data Rate Range Receiver Sensitivity
Max Tx Power is 16 dBm 6 Mbps 604 ft (184 m) -91 dBm
9 Mbps 604 ft (184 m) -90 dBm
12 Mbps 551 ft (168 m) -88 dBm
18 Mbps 545 ft (166 m) -86 dBm
24 Mbps 512 ft (156 m) -82 dBm
36 Mbps 420 ft (128 m) -80 dBm
48 Mbps 322 ft (98 m) -77 dBm
54 Mbps 289 ft (88 m) -75 dBm
802.11g Data Rate Range Receiver Sensitivity
Max Tx Power is 16 dBm 6 Mbps 709 ft (216 m) -91 dBm

Cisco Unified Wireless IP Phone 7925G Deployment Guide 11
9 Mbps 650 ft (198 m) -90 dBm
12 Mbps 623 ft (190 m) -87 dBm
18 Mbps 623 ft (190 m) -86 dBm
24 Mbps 623 ft (190 m) -82 dBm
36 Mbps 495 ft (151 m) -80 dBm
48 Mbps 413 ft (126 m) -77 dBm
54 Mbps 394 ft (120 m) -76 dBm
802.11b Data Rate Range Receiver Sensitivity
Max Tx Power is 17 dBm 1 Mbps 1,010 ft (308 m) -96 dBm
2 Mbps 951 ft (290 m) -85 dBm
5.5 Mbps 919 ft (280 m) -90 dBm
11 Mbps 902 ft (275 m) -87 dBm
Note: Receiver sensitivity is the minimum signal needed to decode a packet at a certain data rate.
See the “Designing the Wireless LAN for Voice” section for more information on signal requirements.
Bluetooth
The Cisco Unified Wireless IP Phone 7925G supports Bluetooth Class 2 technology allowing for wireless headset
communications. Bluetooth enables low bandwidth wireless connections within a range of 30 feet, however it is recommended
to keep the Bluetooth device within 10 feet of the phone.
You can connect up to five headsets, but only the last one connected is used as the default.
The Bluetooth device does not need to be within direct line-of-sight of the phone, but barriers, such as walls, doors, etc. can
potentially impact the quality.
Bluetooth utilizes the 2.4 GHz frequency just like 802.11b/g and many other devices (i.e. microwave ovens, cordless phones,
etc.), so the Bluetooth quality can potentially be interfered with due to using this unlicensed frequency.
Coexistence (802.11b/g + Bluetooth)
If using Coexistence where 802.11b/g and Bluetooth are used simultaneously, then there are some limitations and deployment
requirements to be considered as they both utilize the 2.4 GHz frequency.
Capacity
•When using Coexistence (802.11b/g + Bluetooth), call capacity is reduced due to the utilization of CTS to
protect the 802.11g and Bluetooth transmissions.
Multicast Audio
•Multicast audio from Push To Talk (PTT), Music on Hold (MMOH) and other applications are not supported
when using Coexistence.
Data Rate Configuration

Cisco Unified Wireless IP Phone 7925G Deployment Guide 12
•It is recommended to only enable 802.11g (OFDM) data rates (i.e. > 12 Mbps) to prevent from engaging in
CTS for 802.11g protection when using Coexistence, which can impact voice quality.
Note: It is highly recommended to use 802.11a if using Bluetooth due to 802.11b/g and Bluetooth both utilizing the 2.4 GHz
frequency, but also due to the above limitations.
Wireless Security
When deploying a wireless LAN, you must provide security. The Cisco Unified Wireless IP Phone 7925G supports the
following wireless security features.
Authentication
•WPA (802.1x authentication + TKIP encryption)
•WPA2 (802.1x authentication + AES encryption)
•WPA-PSK (Pre-Shared key + TKIP encryption)
•WPA2-PSK (Pre-Shared key + AES encryption)
•EAP-FAST (Extensible Authentication Protocol – Flexible Authentication via Secure Tunneling)
•EAP-TLS (Extensible Authentication Protocol – Transport Layer Security)
•PEAP (Protected Extensible Authentication Protocol)
•LEAP (Lightweight Extensible Authentication Protocol)
•CCKM (Cisco Centralized Key Management)
•Open and Shared Key
Encryption
•AES (Advanced Encryption Scheme)
•TKIP / MIC (Temporal Key Integrity Protocol / Message Integrity Check)
•WEP (40-bit and 128-bit Wired Equivalent Protocol)
Extensible Authentication Protocol - Flexible Authentication via Secure Tunneling (EAP-FAST)
This client server security architecture encrypts EAP transactions within a Transport Level Security (TLS) tunnel between the
access point and the Remote Authentication Dial-in User Service (RADIUS) server such as the Cisco Access Control Server
(ACS).
The TLS tunnel uses Protected Access Credentials (PACs) for authentication between the client (phone) and the RADIUS
server. The server sends an Authority ID (AID) to the client (phone), which in turn selects the appropriate PAC. The client
(phone) returns a PAC-Opaque to the RADIUS server. The server decrypts the PAC with its master-key. Both end points now
have the PAC key and a TLS tunnel is created. EAP-FAST supports automatic PAC provisioning, but you must enable it on the
RADIUS
To enable EAP-FAST, you must install a certificate.
The Cisco Unified Wireless IP Phone 7925G currently supports only automatic provisioning of the PAC, so enable “Allow
anonymous in-band PAC provisioning” on the RADIUS server as shown below.

Cisco Unified Wireless IP Phone 7925G Deployment Guide 13
Both EAP-GTC and EAP-MSCHAPv2 must be enabled when “Allow anonymous in-band PAC provisioning” is enabled.
EAP-FAST requires that a user account be created on the authentication server.
If anonymous PAC provisioning is not allowed in the product wireless LAN environment then a staging Cisco ACS can be
setup for initial PAC provisioning of the Cisco Unified Wireless IP Phone 7925G.
This requires that the staging ACS server be setup as a slave EAP-FAST server and components are replicated from the product
master EAP-FAST server, which include user and group database and EAP-FAST master key and policy info.
Ensure the production master EAP-FAST ACS server is setup to send the EAP-FAST master keys and policies to the staging
slave EAP-FAST ACS server, which will then allow the Cisco Unified Wireless IP Phone 7925G to use the provisioned PAC in
the production environment where “Allow anonymous in-band PAC provisioning” is disabled.
When it is time to renew the PAC, then authenticated in-band PAC provisioning will be used, so ensure that “Allow
authenticated in-band PAC provisioning” is enabled.
Ensure that the Cisco Unified Wireless IP Phone 7925G has connected to the network during the grace period to ensure it can
use its existing PAC created either using the active or retired master key in order to get issued a new PAC.
Is recommended to only have the staging wireless LAN pointed to the staging ACS server and to disable the staging access
point radios when not being used.

Cisco Unified Wireless IP Phone 7925G Deployment Guide 14
Extensible Authentication Protocol – Transport Layer Security (EAP-TLS)
Extensible Authentication Protocol Transport Layer Security (EAP-TLS) is using the TLS protocol with PKI to secure
communications to the authentication server.
TLS provides a way to use certificates for both user and server authentication and for dynamic session key generation.
Either the internal Manufacturing Installed Certificate (MIC) or a user installed certificate can be used for authentication.
EAP-TLS provides excellent security, but requires client certificate management.
Ensure that “Certificate CN Comparison” is selected when enabling EAP-TLS.
EAP-TLS also requires that a user account be created on the authentication server matching the common name of the certificate
imported into the Cisco Unified Wireless IP Phone 7925G.
It is recommended to use a complex password for this user account.

Cisco Unified Wireless IP Phone 7925G Deployment Guide 15
See the “Installing Certificates” section for more information.
Protected Extensible Authentication Protocol (PEAP)
Protected Extensible Authentication Protocol (PEAP) uses server-side public key certificates to authenticate clients by creating
an encrypted SSL/TLS tunnel between the client and the authentication server.
The ensuing exchange of authentication information is then encrypted and user credentials are safe from eavesdropping.
MS-CHAP v2 is the current supported inner authentication protocol (GTC is not supported).

Cisco Unified Wireless IP Phone 7925G Deployment Guide 16
PEAP (MS-CHAPv2) requires that a user account be created on the authentication server.
The authentication server can be validated via importing a certificate into the Cisco Unified Wireless IP Phone 7925G.
See the “Installing Certificates” section for more information.
Cisco Centralized Key Management (CCKM)
When using 802.1x type authentication, it is recommended to implement CCKM to enable fast roaming. 802.1x can introduce
delay during roaming due to its requirement for full re-authentication. CCKM centralizes the key management and reduces the
number of key exchanges. WPA introduces additional transient keys and can lengthen roaming time.
The Cisco Unified Wireless IP Phone 7925G supports CCKM with WPA (TKIP) and 802.1x (WEP) authentication.
CCKM with WPA (AES) or WPA2 (TKIP/AES) are not supported at this time.
Authentication Key Management Encryption
LEAP 802.1x, WPA TKIP, WEP (40 or 128 bit)
EAP-FAST 802.1x, WPA TKIP, WEP (40 or 128 bit)
EAP-TLS 802.1x, WPA TKIP, WEP (40 or 128 bit)

Cisco Unified Wireless IP Phone 7925G Deployment Guide 17
PEAP 802.1x, WPA TKIP, WEP (40 or 128 bit)
AKM 802.1x, WPA TKIP, WEP (40 or 128 bit)
EAP and User Database Compatibility
The following chart indicates which EAP and database configurations are supported by the Cisco Unified Wireless IP Phone
7925G.
Database LEAP EAP-TLS PEAP (MS-CHAPv2) EAP-FAST (Phase Zero)
ACS Yes Yes Yes Yes
Windows SAM Yes No Yes Yes
Windows AD Yes Yes Yes Yes
LDAP No Yes No No
ODBC (ACS for
Windows only) Yes Yes Yes Yes
LEAP Proxy
RADIUS Server Yes No Yes Yes
All Token Servers No No No No
Voice Security
The Cisco Unified Wireless IP Phone 7925G supports the following voice security features.
•Certificates
•Image authentication
•Device authentication
•File authentication
•Signaling authentication
•Secure Cisco Unified SRST
•Media encryption (SRTP)
•Signaling encryption (TLS)
•Certificate authority proxy function (CAPF)
•Secure profiles
•Encrypted configuration files
•Settings Access (can limit user access to configuration menus)
•Locked network profiles
•Administrator password

Cisco Unified Wireless IP Phone 7925G Deployment Guide 18
Power Management
The Cisco Unified Wireless IP Phone 7925G has an option for a standard or extended battery.
The standard battery can provide up to 180 hours standby time or up to 9.5 hours talk time.
The extended battery can provide up to 240 hours standby time or up to 13 hours talk time.
When the access point supports the Cisco Client Extensions (CCX) proxy ARP information element, the idle battery life will be
optimized.
When on call U-APSD, PS-POLL, or active mode can be utilized depending on the Cisco Unified Wireless IP Phone 7925G
and Access Point configuration.
To extend on call battery life, the Cisco Unified Wireless IP Phone 7925G can use U-APSD or PS-POLL power save methods.
The Cisco Unified Wireless IP Phone 7925G will use either U-APSD or PS-POLL when in idle (no active phone call).
There can be up to 40-50% reduction of battery life when on call and using Coexistence (802.11b/g + Bluetooth).
The table below lists the maximum on call and idle times for each 802.11 mode and battery type.
802.11 Mode Call State Standard
Battery Extended Battery
2.4 GHz On Call 9.5 13
On Call + Bluetooth 5.5 7
Idle 180 240
Idle + Bluetooth Enabled 165 200
5 GHz On Call 9 11
On Call + Bluetooth 7 10
Idle 180 240
Idle + Bluetooth Enabled 165 200
If the access point does not support CCX or proxy ARP is not enabled, then the idle battery life will be up to fifty percent less.
See the “Configuring Proxy ARP” section for more information.
Protocols
Unscheduled Auto Power Save Delivery (U-APSD)
The Cisco Unified Wireless IP Phone 7925G will use U-APSD (Unscheduled Auto Power Save Delivery) for power save when
in idle mode or when a phone call is active if WMM is enabled, where U-APSD is supported.
U-APSD helps optimize battery life.
Below is a sample packet sequence when using U-APSD.

Cisco Unified Wireless IP Phone 7925G Deployment Guide 19
Power Save Poll (PS-POLL)
If Wi-Fi MultiMedia (WMM) is disabled, which will disable U-APSD support, or U-APSD support is not available on the
access point, then the Cisco Unified Wireless IP Phone 7925G will use PS-POLL for power save when in idle mode and when a
phone call is active.
Below is a sample packet sequence when using PS-POLL.
Active Mode
If the “Call Power Save Mode” is set to “None”, then the phone will use active mode and no power save will be used, which
will reduce the battery life.
Delivery Traffic Indicator Message (DTIM)
Increasing the DTIM period can also increase the battery life. The Cisco Unified Wireless IP Phone 7925G can use the DTIM
period to schedule wakeup periods to check for broadcast and multicast packets as well as any unicast packets.
For optimal battery life and performance, we recommend setting the DTIM period to “2” with a beacon period of “100 ms”.
The DTIM period is a tradeoff between battery life and multicast performance.
Broadcast and multicast traffic will be queued until the DTIM period when there are power save enabled clients associated to
the access point, so DTIM will determine how quickly these packets can be delivered to the client. If using multicast
applications, a shorter DTIM period can be used.
Scan Modes
When using only one access point, select Single Access Point Mode on the phone to reduce scanning and optimize battery life
for phones that do not roam.
When using multiple access points where roaming is required, “Single AP Mode” should not be enabled. Instead use the auto
(default) or continuous scan mode, which will allow for seamless roaming.
Continuous scan mode can be optionally enabled to allow for better location tracking.

Cisco Unified Wireless IP Phone 7925G Deployment Guide 20
Quality of Service (QoS)
Quality of Service enables queuing to ensure high priority for voice traffic. To implement appropriate queuing for voice traffic,
use the following suggestions:
•Ensure that WMM is enabled on the access point.
•Create a QoS policy on the access point giving priority to voice (RTP) traffic and apply that profile to the desired
interfaces.
RTP (DSCP = EF) to COS = 6
SCCP (DSCP = CS3) to COS = 4
•Be sure that RTP packets have the proper QoS markings and other protocols are not using the same QoS markings.
•Select the “Platinum” QoS profile for the voice wireless LAN when using Cisco Unified Wireless LAN Controller
technology and set the 802.1p tag to “6”.
•Enable Differentiated Services Code Point (DSCP) preservation on the Cisco IOS switch and/or use a QoS policy to set
DSCP to EF for RTP traffic (UDP port range 16384-32767) on the Cisco IOS router.
For more information about TCP and UDP ports used by the Cisco Unified Wireless IP Phone 7925G and the Cisco Unified
Communications Manager, refer to the Cisco Unified Communications Manager TCP and UDP Port Usage document at this
URL:
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/port/7_1_2/CCM_7.1.2PortList.pdf
Configuring QoS in Cisco Unified Communications Manager
The SCCP DSCP values are configured in the Cisco Unified Communications Manager enterprise parameters. Cisco Unified
Communications Manager uses the default value of CS3 to have devices set the DSCP marking for SCCP packets as shown in
the Enterprise Parameters Configuration page.
Configuring QoS Policies for the Network
Set up QoS policies and settings for the following network devices.