Cisco UNIFIED 9971 Quick reference guide

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 1
Cisco Unified IP Phone 9971
Wireless LAN Deployment Guide
The Cisco Unified IP Phone 9971 is adaptable for professionals that require the ability to unplug the wired network connection
and remain connected. The Wireless LAN and Bluetooth 2.1 + EDR capabilities enable mobility and cord-free
communications. The Cisco Unified IP Phone 9971 supports both the headset and handsfree profiles.
This guide provides information and guidance to help the network administrator deploy these phones in a wireless LAN
environment.
Revision History
Date
Comments
11/17/2009
9.0(1) Release
5/3/2010
9.0(2) Release
12/15/2010
9.1(1) Release

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 2
Contents
Requirements for the Cisco Unified IP Phone 9971...............................................................................................................................5!
Site Survey...............................................................................................................................................................................................5!
RF Validation ..........................................................................................................................................................................................5!
Call Control ............................................................................................................................................................................................6!
Supported Protocols................................................................................................................................................................................6!
Supported Access Points .........................................................................................................................................................................6!
Supported Antennas ................................................................................................................................................................................8!
Phone Models and Localization ...............................................................................................................................................................9!
Phone Models..........................................................................................................................................................................................9!
World Mode (802.11d) .......................................................................................................................................................................9!
Supported Countries..............................................................................................................................................................................10!
Language Support .................................................................................................................................................................................10!
Radio Characteristics..............................................................................................................................................................................11!
Bluetooth ..................................................................................................................................................................................................12!
Bluetooth Profiles..................................................................................................................................................................................12!
Coexistence (802.11b/g + Bluetooth) ...................................................................................................................................................12!
Video Calls ...............................................................................................................................................................................................13!
Wireless Security .....................................................................................................................................................................................13!
Extensible Authentication Protocol -Flexible Authentication via Secure Tunneling (EAP-FAST) .....................................................14!
Cisco Centralized Key Management (CCKM)......................................................................................................................................15!
EAP and User Database Compatibility ................................................................................................................................................16!
Voice Security ..........................................................................................................................................................................................17!
Power Management.................................................................................................................................................................................17!
Quality of Service (QoS) .........................................................................................................................................................................17!
Configuring QoS in Cisco Unified Communications Manager ............................................................................................................18!
Configuring QoS Policies for the Network ...........................................................................................................................................18!
Configuring Cisco IOS Access Points ..............................................................................................................................................18!
Configuring Cisco Switch Ports........................................................................................................................................................19!
Configuring Switch Ports for Wired IP Phones ................................................................................................................................19!
Sample Voice Packet Capture...........................................................................................................................................................20!
Call Admission Control.........................................................................................................................................................................21!
Pre-Call Admission Control..............................................................................................................................................................21!
Roaming Admission Control ............................................................................................................................................................22!
Traffic Classification (TCLAS) .............................................................................................................................................................22!
Roaming ...................................................................................................................................................................................................23!
Interband Roaming................................................................................................................................................................................23!
Multicast...................................................................................................................................................................................................23!

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 3
Designing the Wireless LAN for Voice ..................................................................................................................................................24!
Planning Channel Usage ......................................................................................................................................................................24!
5 GHz (802.11a)................................................................................................................................................................................24!
Using Dynamic Frequency Selection (DFS) on Access Points ....................................................................................................25!
2.4 GHz (802.11b/g) .........................................................................................................................................................................26!
Signal Strength and Coverage...........................................................................................................................................................27!
Configuring Data Rates ........................................................................................................................................................................29!
Call Capacity ........................................................................................................................................................................................30!
Video Calls........................................................................................................................................................................................31!
Dynamic Transmit Power Control (DTPC) ..........................................................................................................................................31!
Multipath ...............................................................................................................................................................................................31!
Verification with Site Survey Tools .......................................................................................................................................................32!
Cisco 9971 Site Survey.....................................................................................................................................................................33!
Configuring Cisco Unified Communications Manager .......................................................................................................................34!
Phone Button Templates .......................................................................................................................................................................34!
Security Profiles ....................................................................................................................................................................................34!
G.722 Advertisement .............................................................................................................................................................................35!
Common Settings...................................................................................................................................................................................36!
Configuring Video Bandwidth...............................................................................................................................................................36!
Configuring Video and Camera Capabilities .......................................................................................................................................36!
Product Specific Configuration Options...............................................................................................................................................37!
Configuring the Cisco Unified Wireless LAN Controller and Access Points ....................................................................................43!
SSID / WLAN Settings ...........................................................................................................................................................................43!
Controller Settings ................................................................................................................................................................................46!
802.11 Network Settings........................................................................................................................................................................47!
Auto RF.............................................................................................................................................................................................49!
EDCA Parameters .............................................................................................................................................................................52!
DFS (802.11h)...................................................................................................................................................................................52!
Call Admission Control Settings ...........................................................................................................................................................53!
Configuring QoS Basic Service Set (QBSS)..........................................................................................................................................56!
Configuring Auto-Immune ....................................................................................................................................................................57!
Configuring the WLAN Controller EAP-Request and EAPOL-Key Timeouts......................................................................................57!
Configuring Proxy ARP ........................................................................................................................................................................58!
Configuring TKIP Countermeasure Holdoff Time................................................................................................................................59!
VLANs and Autonomous Access Points ................................................................................................................................................59!
Configuring the Cisco Unified IP Phone 9971 ......................................................................................................................................60!
Configuring the Wireless LAN Settings.................................................................................................................................................60!
Bluetooth Configuration........................................................................................................................................................................62!
Camera Configuration ..........................................................................................................................................................................64!
Upgrading Phone Firmware .................................................................................................................................................................65!
Troubleshooting.......................................................................................................................................................................................66!

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 4
Stream Statistics ....................................................................................................................................................................................66!
Current Access Point.............................................................................................................................................................................66!
Traffic Stream Metrics (TSM) ...............................................................................................................................................................67!
Phone Logs............................................................................................................................................................................................68!
WLAN Status Indicator .........................................................................................................................................................................69!
WLAN Disconnect Display....................................................................................................................................................................70!
Restoring Factory Defaults ...................................................................................................................................................................70!
Capturing a Screenshot of the Phone Display ......................................................................................................................................70!
Phone Accessories....................................................................................................................................................................................70!
Additional Documentation......................................................................................................................................................................72!

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 5
Requirements for the Cisco Unified IP Phone 9971
The Cisco Unified IP Phone 9971 is an IEEE 802.11a/b/g wireless IP phone that provides voice communications.
The wireless LAN must be validated to ensure it meets the requirements to deploy the Cisco Unified IP Phone 9971.
Site Survey
Before deploying the Cisco Unified IP Phone 9971 into a production environment, a site survey must be completed by a Cisco
certified partner with the advanced wireless LAN specialization. During the site survey the RF spectrum can be analyzed to
determine which channels are usable in the desired band (2.4 GHz or 5 GHz). Typically there is less interference in the 5 GHz
band as well as more non-overlapping channels, so 5 GHz is the preferred band for operation and even more highly
recommended when the Cisco Unified IP Phone 9971 is to be used in a mission critical environment. The site survey will
include heatmaps showing the intended coverage plan for the location. The site survey will also determine which access point
platform type, antenna type, access point configuration (channel and transmit power) to use at the location. See the “Designing
the Wireless LAN for Voice” section for more information.
Refer to the Steps to Success website for additional information.
http://www.cisco.com/go/stepstosuccess
RF Validation
In order to determine if VoWLAN can be deployed, the environment must be evaluated to ensure the following items meet
Cisco guidelines.
Signal
The cell edge should be designed to -67 dBm where there is a 20-30% overlap of adjacent access points at that signal level.
This ensures the 9971 phone always has adequate signal and can hold a signal for at least 5 seconds in order to roam seamlessly.
Channel Utilization
Channel Utilization levels should be kept under 50%.
If using the 9971 phone, this is provided via the QoS Basic Service Set (QBSS), which equates to around 105.
Noise
Noise levels should not exceed -92 dBm, which allows for a Signal to Noise Ratio (SNR) of 25 dB where a -67 dBm signal should be
maintained.
Packet Loss / Delay
Per voice guidelines, packet loss should not exceed 1% packet loss, otherwise voice quality can be degraded significantly.
Jitter should be kept at a minimal (< 100 ms)
Retries
802.11 retransmissions should be less than 20%.
Multipath
Multipath should be kept to a minimal as this can create nulls and reduce signal levels.
Many different tools and applications can be used to evaluate these items in order to certify the deployment.
Cisco Spectrum Expert
AirMagnet (Survey, WiFi Analyzer, VoFi Analyzer, Spectrum Analyzer)
Cisco Wireless Control System (WCS) for Unified Wireless LAN management

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 6
Call Control
For call control, the Cisco Unified IP Phone 9971 supports only Session Initiation Protocol (SIP) on the following applications:
•Cisco Unified Communications Manager 7.1(3) and later
•Cisco Unified Communications Manager Express 7.1(3) and later
•SRST 7.1(3) and later
Device Support in Cisco Unified Communications Manager
Cisco Unified Communications Manager requires a device package to be installed or service release update in order to enable
Cisco Unified IP Phone 9971 device support.
Device packages for Cisco Unified Communications Manager are available at http://www.cisco.com/kobayashi/sw-center/sw-
voice.shtml.
Supported Protocols
Supported voice and wireless LAN protocols include these:
•Session Initiation Protocol (SIP)
•Real Time Protocol (RTP)
•G.711u-law, G.711a-law, G.729a, G.729ab, G.722, iLBC
•Real Time Control Protocol (RTCP)
•Cisco Discovery Protocol (CDP)
•CCX v4
•Wi-Fi MultiMedia (WMM)
•Traffic Specification (TSPEC)
•Traffic Classification (TCLAS)
•Unscheduled Auto Power Save Delivery (U-APSD)
•Power Save Poll (PS-POLL)
Supported Access Points
The Cisco Unified IP Phone 9971 is supported on both the Cisco Unified and Autonomous solutions.
•Cisco Unified Wireless LAN Controller
Minimum = 5.2.193.0
Recommended = 7.0.98.0 or later
•Cisco IOS Access Points (Autonomous)
Minimum = 12.3(8)JEA2or later
Recommended = 12.4(10b)JA3 or later (does not apply to 1100, 1200, 1230)

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 7
Note: VoWLAN is not currently supported in conjunction with outdoor MESH technology (1500 series).
3rd party access points are not supported, as there is no interoperability testing performed against 3rd party access points.

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 8
The table below lists the modes that are supported by each Cisco access point.
Cisco AP
Series
802.11a
802.11b
802.11g
802.11n
Autonomous
Unified
500
No
Yes
Yes
No
Yes
Yes
1100
No
Yes
Optional
No
Yes
Yes
1130AG
Yes
Yes
Yes
No
Yes
Yes
1140
Yes
Yes
Yes
Yes
Yes
Yes
1200
Optional
Yes
Optional
No
Yes
Yes
1230AG
Yes
Yes
Yes
No
Yes
Yes
1240AG
Yes
Yes
Yes
No
Yes
Yes
1250
Yes
Yes
Yes
Yes
Yes
Yes
1260
Yes
Yes
Yes
Yes
No
Yes
3500
Yes
Yes
Yes
Yes
No
Yes
Supported Antennas
Some of the Cisco Access Points require or allow external antennas.
Please refer to the following URL for the list of supported antennas and how these external antennas should be mounted.
http://www.cisco.com/en/US/prod/collateral/wireless/ps7183/ps469/product_data_sheet09186a008008883b.html

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 9
3rd party antennas are not supported, as there is no interoperability testing performed against 3rd party antennas including
Distributed Antenna Systems (DAS) and Leaky Coaxial Systems.
Please refer to the following URL for more info on Cisco Wireless LAN over Distributed Antenna Systems.
http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps6973/positioning_statement_c07-565470.html
Note: The Cisco 1130, 1140 and 3502i series access points are to be mounted on the ceiling as they have omni-directional
antennas.
Phone Models and Localization
Phone Models
The Cisco Unified IP Phone 9971 model requires an 802.11d enabled access point.
Below are the channels that are supported.
Part Number
Band Range
Available
Channels
Channel Set
CP-9971-K9
2.412 – 2.484 GHz
5.180 –5.240 GHz
5.260 –5.320 GHz
5. 500 –5.700 GHz
5.745 –5.805 GHz
14
4
4
11
4
1-14
36,40,44,48
52,56,60,64
100-140
149,153,157,161
Note: 802.11j (channels 34, 38, 42, 46) and channel 165 are not supported.
World Mode (802.11d)
If using the Cisco Unified IP Phone 9971, then it is required to enable 802.11d. The Cisco Unified IP Phone 9971 uses 802.11d
to determine which channels and transmit powers to use and inherits its client configuration from the associated access point.
Enable World Mode (802.11d) for the corresponding country where the access point is located.
When using 802.11a, enable 802.11d to discover which channels can potentially be used in the network. Specifically, for
802.11h support, the phone passively scans some of the 5 GHz channels (DFS) first before actively scanning any network
channels.
If using 2.4 GHz (802.11b/g) and 802.11d is not enabled, then the Cisco Unified IP Phone 9971 can attempt to use channels 1-
11 and reduced transmit power.
Note: World Mode is enabled automatically for the Cisco Unified Wireless LAN Controller.
World Mode must be enabled manually for Cisco Autonomous Access Points using the following commands:
Interface dot11radio X
world-mode dot11d country US both

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 10
Supported Countries
Below are the countries and their 802.11d codes that are supported by the Cisco Unified IP Phone 9971.
Argentina (AR)
India (IN)
Poland (PL)
Australia (AU)
Indonesia (ID)
Portugal (PT)
Austria (AT)
Ireland (IE)
Puerto Rico (PR)
Belgium (BE)
Israel (IL)
Romania (RO)
Brazil (BR)
Italy (IT)
Russian Federation (RU)
Bulgaria (BG)
Japan (JP)
Saudi Arabia (SA)
Canada (CA)
Korea (KR / KP)
Singapore (SG)
Chile (CL)
Latvia (LV)
Slovakia (SK)
Colombia (CO)
Liechtenstein (LI)
Slovenia (SI)
Costa Rica (CR)
Lithuania (LT)
South Africa (ZA)
Cyprus (CY)
Luxembourg (LU)
Spain (ES)
Czech Republic (CZ)
Malaysia (MY)
Sweden (SE)
Denmark (DK)
Malta (MT)
Switzerland (CH)
Estonia (EE)
Mexico (MX)
Taiwan (TW)
Finland (FI)
Monaco (MC)
Thailand (TH)
France (FR)
Netherlands (NL)
Turkey (TR)
Germany (DE)
New Zealand (NZ)
Ukraine (UA)
Gibraltar (GI)
Norway (NO)
United Arab Emirates (AE)
Greece (GR)
Oman (OM)
United Kingdom (GB)
Hong Kong (HK)
Panama (PA)
United States (US
Hungary (HU)
Iceland (IS)
Peru (PE)
Phillipines (PH)
Venezuela (VE)
Vietnam (VN)
Note: Compliance information is available on the Cisco Product Approval Status web site at the following URL:
http://tools.cisco.com/cse/prdapp/jsp/externalsearch.do?action=externalsearch&page=EXTERNAL_SEARCH
Language Support
The Cisco Unified IP Phone 9971 currently supports the following languages.
Arabic
Bulgarian
Estonia
Finnish
Korean
Latvian
Slovak
Slovenian
Catalan
French
Lithuanian
Spanish
Chinese
German
Norwegian
Swedish
Croatian
Greek
Polish
Thai
Czech
Hebrew
Portuguese
Turkish
Danish
Hungarian
Romanian
Dutch
English
Italian
Japanese
Russian
Serbian

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 11
The corresponding locale package must be installed to enable support for that language. English is the default language on the
phone.
Download the locale packages from the Localization page at the following URL:
http://www.cisco.com/kobayashi/sw-center/telephony/callmgr/locale-installer.shtml
Radio Characteristics
The following table lists the data rates, ranges, and receiver sensitivity info for Cisco Unified IP Phone 9971.
802.11a
Data Rate
Range
Receiver Sensitivity
Max Tx Power is 16 dBm
6 Mbps
604 ft (184 m)
-91 dBm
9 Mbps
604 ft (184 m)
-90 dBm
12 Mbps
551 ft (168 m)
-88 dBm
18 Mbps
545 ft (166 m)
-86 dBm
24 Mbps
512 ft (156 m)
-82 dBm
36 Mbps
420 ft (128 m)
-80 dBm
48 Mbps
322 ft (98 m)
-77 dBm
54 Mbps
289 ft (88 m)
-75 dBm
802.11g
Data Rate
Range
Receiver Sensitivity
Max Tx Power is 16 dBm
6 Mbps
709 ft (216 m)
-91 dBm
9 Mbps
650 ft (198 m)
-90 dBm
12 Mbps
623 ft (190 m)
-87 dBm
18 Mbps
623 ft (190 m)
-86 dBm
24 Mbps
623 ft (190 m)
-82 dBm
36 Mbps
495 ft (151 m)
-80 dBm
48 Mbps
413 ft (126 m)
-77 dBm
54 Mbps
394 ft (120 m)
-76 dBm
802.11b
Data Rate
Range
Receiver Sensitivity
Max Tx Power is 17 dBm
1 Mbps
1,010 ft (308 m)
-96 dBm
2 Mbps
951 ft (290 m)
-85 dBm
5.5 Mbps
919 ft (280 m)
-90 dBm
11 Mbps
902 ft (275 m)
-87 dBm
Note: Receiver sensitivity is the minimum signal needed to decode a packet at a certain data rate.
See the “Designing the Wireless LAN for Voice” section for more information on signal requirements.

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 12
Bluetooth
The Cisco Unified IP Phone 9971 supportsBluetooth Class 2 technology allowing for wireless headset communications.
Bluetooth enables low bandwidth wireless connections within a range of 30 feet, however it is recommended to keep the
Bluetooth device within 10 feet of the phone.
Up to five headsets can be connected, but only the last one connected is used as the default.
The Bluetooth device does not need to be within direct line-of-sight of the phone, but barriers, such as walls, doors, etc. can
potentially impact the quality.
Bluetooth utilizes the 2.4 GHz frequency just like 802.11b/g and many other devices (i.e. microwave ovens, cordless phones,
etc.), so the Bluetooth quality can potentially be interfered with due to using this unlicensed frequency.
Bluetooth Profiles
The Cisco Unified IP Phone 9971 supports both the Bluetooth Headset and Handsfree Profiles.
With a Bluetooth Headset Profile capable headset, the following call functions can be performed.
-Ring
-Answer a call
-End a call
-Volume Control
With Bluetooth Handsfree Profile (HFP) support, the following features can also be available if supported by the Bluetooth headset.
-Last Number Redial
-Call Waiting
-Divert / Reject
-3 way calling (Hold & Accept and Release & Accept)
For more information, refer to the documentation from the Bluetooth headset manufacturer.
Coexistence (802.11b/g + Bluetooth)
If using Coexistence where 802.11b/g and Bluetooth are used simultaneously, then there are some limitations and deployment
requirements to be considered as they both utilize the 2.4 GHz frequency.
Capacity
•When using Coexistence (802.11b/g + Bluetooth), call capacity is reduced due to the utilization of CTS to
protect the 802.11g and Bluetooth transmissions.
Multicast Audio
•Multicast audio from Push To Talk (PTT), Music on Hold (MMOH) and other applications are not supported
when using Coexistence.
Data Rate Configuration
•It is recommended to only enable 802.11g (OFDM) data rates (i.e. > 12 Mbps) to prevent from engaging in
CTS for 802.11g protection when using Coexistence, which can impact voice quality.

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 13
Note: It is highly recommended to use 802.11a if using Bluetooth due to 802.11b/g and Bluetooth both utilizing 2.4 GHz, but
also due to the above limitations.
Video Calls
As of the 9.0(2) release, the Cisco Unified IP Phone 9971 supports video calling.
The Cisco Unified IP Phone 9971 has a 5.6 inch 24 bit touchscreen color LCD.
In order to enable the video and camera capabilities, a device package or update for the Cisco Unified Communications
Manager must be applied.
The USB camera that attaches to the back of the Cisco Unified IP Phone 9971 or 9951 is also required to transmit video.
A Videoconferencing System with MCU running version 5.7 or later is required to provide videoconferencing capabilities.
H.264 is the protocol used for the video stream, where the audio stream will be G.722, G.711, G.729, iLBC, etc.
Up to 30 fps (frames per second) are supported.
The following frame formats are supported:
• SQCIF (128 x 96 pixels)
• QCIF (176 x 144 pixels)
• QVGA (320 x 240 pixels)
• SIF (352 x 240 pixels)
• CIF (352 x 288 pixels)
• VGA (640 x 480 pixels)
Wireless Security
When deploying a wireless LAN, security is essential.
The Cisco Unified IP Phone 9971 supports the following wireless security features.
Authentication
•WPA (802.1x authentication + TKIP encryption)
•WPA2 (802.1x authentication + AES encryption)

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 14
•WPA-PSK (Pre-Shared key + TKIP encryption)
•WPA2-PSK (Pre-Shared key + AES encryption)
•EAP-FAST (Extensible Authentication Protocol –Flexible Authentication via Secure Tunneling)
•LEAP (Lightweight Extensible Authentication Protocol)
•CCKM (Cisco Centralized Key Management)
•Open and Shared Key
Encryption
•AES (Advanced Encryption Scheme)
•TKIP / MIC (Temporal Key Integrity Protocol / Message Integrity Check)
•WEP (40-bit and 128-bit Wired Equivalent Protocol)
Extensible Authentication Protocol -Flexible Authentication via Secure
Tunneling (EAP-FAST)
This client server security architecture encrypts EAP transactions within a Transport Level Security (TLS) tunnel between the
access point and the Remote Authentication Dial-in User Service (RADIUS) server such as the Cisco Access Control Server
(ACS).
The TLS tunnel uses Protected Access Credentials (PACs) for authentication between the client (phone) and the RADIUS
server. The server sends an Authority ID (AID) to the client (phone), which in turn selects the appropriate PAC. The client
(phone) returns a PAC-Opaque to the RADIUS server. The server decrypts the PAC with its master-key. Both endpoints now
have the PAC key and a TLS tunnel is created. EAP-FAST supports automatic PAC provisioning, but it must enable don the
RADIUS server.
To enable EAP-FAST, a certificate must be installed.
The Cisco Unified IP Phone 9971 currently supports only automatic provisioning of the PAC, so enable “Allow anonymous in-
band PAC provisioning” on the RADIUS server as shown below.
Both EAP-GTC and EAP-MSCHAPv2 must be enabled when “Allow anonymous in-band PAC provisioning” is enabled.
EAP-FAST requires that a user account be created on the authentication server.

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 15
If anonymous PAC provisioning is not allowed in the product wireless LAN environment then a staging Cisco ACS can be
setup for initial PAC provisioning of the Cisco Unified IP Phone 9971.
This requires that the staging ACS server be setup as a slave EAP-FAST server and components are replicated from the product
master EAP-FAST server, which include user and group database and EAP-FAST master key and policy info.
Ensure the production master EAP-FAST ACS server is setup to send the EAP-FAST master keys and policies to the staging
slave EAP-FAST ACS server, which will then allow the Cisco Unified IP Phone 9971 to use the provisioned PAC in the
production environment where “Allow anonymous in-band PAC provisioning” is disabled.
When it is time to renew the PAC, then authenticated in-band PAC provisioning will be used, so ensure that “Allow
authenticated in-band PAC provisioning” is enabled.
Ensure that the Cisco Unified IP Phone 9971 has connected to the network during the grace period to ensure it can use its
existing PAC created either using the active or retired master key in order to get issued a new PAC.
Is recommended to only have the staging wireless LAN pointed to the staging ACS server and to disable the staging access
point radios when not being used.
Cisco Centralized Key Management (CCKM)
When using 802.1x type authentication, it is recommended to implement CCKM to enable fast roaming. 802.1xcan introduce
delay during roaming due to its requirement for full re-authentication. CCKM centralizes the key management and reduces the
number of key exchanges. WPA and WPA2 introduce additional transient keys and can lengthen roaming time.

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 16
When CCKM is utilized, roaming times can be reduced from 400-500 ms to less than 100 ms, where that transition time from
one access point to another will not be audible to the user.
As of the 9.1(1) release, the Cisco Unified IP Phone 9971 supports CCKM with WPA2 (AES or TKIP), WPA (TKIP or AES)
and 802.1x (WEP) authentication.
Authentication
Key Management
Encryption
EAP-FAST
802.1x, WPA, WPA2
AES, TKIP, WEP (40 or 128 bit)
LEAP
802.1x, WPA, WPA2
AES, TKIP, WEP (40 or 128 bit)
AKM
802.1x, WPA, WPA2
AES, TKIP, WEP (40 or 128 bit)
CCKM was not supported with WPA2 in releases prior to 9.1(1).
WPA Version
Cipher
Prior to 9.1(1)
9.1(1)
TKIP
Supported
Supported
WPA
AES
Not Supported
Supported
TKIP
Not Supported
Supported
WPA2
AES
Not supported
Supported
EAP and User Database Compatibility
The following chart indicates which EAP and database configurations are supported by the Cisco Unified IP Phone 9971.
Database
LEAP
EAP-FAST
(Phase Zero)
ACS
Yes
Yes
Windows SAM
Yes
Yes
Windows AD
Yes
Yes
LDAP
No
No
ODBC (ACS for
Windows only)
Yes
Yes
LEAP Proxy
RADIUS Server
Yes
Yes
All Token Servers
No
No

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 17
Voice Security
The Cisco Unified IP Phone 9971 supports the following voice security features.
•Image authentication
•Device authentication
•File authentication
•Signaling authentication
•Secure Cisco Unified SRST
•Media encryption (SRTP)
•Signaling encryption (TLS)
•Certificate authority proxy function (CAPF)
•Secure profiles
•Encrypted configuration files
•Settings Access (can limit user access to configuration menus)
Power Management
The Cisco Unified IP Phone 9971 primarily is in active mode, so the radio will always be on.
However, power save protocols such as U-APSD or PS-POLL can be utilized for off-channel scanning or when using
Coexistence (802.11b/g + Bluetooth).
An AC adapter is required to configure the 9971 for wireless LAN mode.
Wireless LAN is automatically disabled temporarily if Ethernet is active.
Quality of Service (QoS)
Quality of Service enables queuing to ensure high priority for voice traffic. To implement appropriate queuing for voice traffic,
use the following suggestions:
•Ensure that WMM is enabled on the access point.
•Create a QoS policy on the access point giving priority to voice (RTP), video and call control (SIP) traffic and apply
that profile to the desired interfaces.
Traffic Type
DSCP
802.1p
WMM UP
Voice
EF (46)
5
6
Video
AF41 (34)
4
5
Call Control
CS3 (24)
3
4
•Be sure that RTP packets have the proper QoS markings and other protocols are not using the same QoS markings.
•Select the “Platinum” QoS profile for the voice wireless LAN when using Cisco Unified Wireless LAN Controller
technology and set the 802.1p tag to “6”.

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 18
•Enable Differentiated Services Code Point (DSCP) preservation on the Cisco IOS switch and/or use a QoS policy to set
DSCP to EF for RTP traffic (UDP port range 16384-32767) on the Cisco IOS router.
For more information about TCP and UDP ports used by the Cisco Unified IP Phone 9971 and the Cisco Unified
Communications Manager, refer to the Cisco Unified Communications Manager TCP and UDP Port Usage document at this
URL:
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/port/7_1_2/CCM_7.1.2PortList.pdf
Configuring QoS in Cisco Unified Communications Manager
The SIP DSCP values are configured in the Cisco Unified Communications Manager enterprise parameters. Cisco Unified
Communications Manager uses the default value of CS3 to have devices set the DSCP marking for SIP packets as shown in the
Enterprise Parameters Configuration page.
Configuring QoS Policies for the Network
Set up QoS policies and settings for the following network devices.
Configuring Cisco IOS Access Points
Use the following QoS policy on the Cisco IOS access point (AP) to enable DSCP to CoS(UP) mapping. This allows RTP
packets to be placed into the voice queue, if those packets are marked correctly, when received at the access point level.
class-map match-all RTP
match ip dscp ef
class-map match-all Video
match ip dscp af41
class-map match-all SIP
match ip dscp cs3
!
policy-map Voice
class RTP

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 19
set cos 6
class Video
set cos 5
class SIP
set cos 4
!
interface dot11radioX
service-policy input Voice
service-policy output Voice
Configuring Cisco Switch Ports
Configure the Cisco access point switch ports and uplink switch ports for DSCP trust.
mls qos
!
interface X
mls qos trust dscp
Note: When using the Cisco Unified Wireless LAN Controller, DSCP trust must be implemented or trust the UDP data ports
used by the Cisco Unified Wireless LAN Controller (LWAPP = 12222 and 12223; CAPWAP = 5246 and 5247) on all
interfaces where wireless packets will traverse to ensure QoS markings are correctly set. Versions prior to 5.2 use LWAPP,
where versions 5.2 and later use CAPWAP.
Configuring Switch Ports for Wired IP Phones
Enable the Cisco wired IP phone switch ports for Cisco phone trust
mls qos
!
Interface X
mls qos trust device cisco-phone
mls qos trust dscp
If DSCP markings are not preserved, then the below configuration can be used to set the DSCP based on the TCP or UDP port
to map RTP and SIP correctly.
Ensure the following QoS policy is not applied to an interface where wireless traffic traverses.
If using non-secure SIP, then TCP/UDP port 5060 is used. TCP/UDP port 5061 is used for secure SIP.
ip access-list extended SIP
permit tcp any range 5060 5061 any
permit tcp any any range 5060 5061
permit udp any range 5060 5061 any
permit udp any any range 5060 5061
!
ip access-list extended RTP

Cisco Unified IP Phone 9971 Wireless LAN Deployment Guide 20
permit udp any range 16384 32767 any
permit udp any any range 16384 32767
!
class-map match-all SIP
match access-group name SIP
class-map match-all RTP
match access-group name RTP
!
policy-map Voice
class RTP
set dscp ef
!
class SIP
set dscp cs3
!
interface X
service-policy input Voice
service-policy output Voice
Sample Voice Packet Capture
This packet capture below shows that RTP packets bound for the Cisco Unified IP Phone 9971 over the air should be marked
with DSCP = EF and UP = 6.