Cisco 7925 phone states authorization required

I have a 7925 that flash authorization required. It doesn't have any UCCX services subscribed to it or anything else as far as services. I even reset it completely to factory defaults and rebuild its profile and recreated the phone in call manager. Yet it continues to flash authorization required. The end user complains that this drains their battery after a very minimal use of the phone. Has anyone experienced this issue and is their a solution? Thanks before hand

My next question would be is, within your network profile do your credentials match what you have setup for the wireless network authenication process? i.e. AD crendentials?
Thanks,
Tony
Please rate helpful posts!

Similar Messages

Cisco IP Phone 7965 VPN Requirements

We are currently running CUCM System version: 8.6.2.21900-5. We are having issues setting up and getting IP phones to connect from some employee homes. We have the licensing, and I know the setup works as I have been able to successfully confingure & connect several phones to our PBX from my home network.
What I cannot seem to find is a list of routers that are or are not compatible with the IP phone/vpn. I also need to find "checklist" of what to look for or what should be set up on a home network to make this setup for the users and IT staff easier.
I should note, that these users report that they can connect to our vpn fine via Anyconnect and their computers. 1 user even had access to other routers and on the 3rd router was able to get a connection and place a call.
I am in the process of getting the home router/modem make and models from these users if it helps.

There is no such list. Phone uses SSL VPN that are regular TCP/UDP packets so nothing special in that for the home router and any should work.

Cisco 7925 Wireless Phone Wireless Auto Config

Hello all,
My rehabilitation hospital is located right next to a large hospital connected by a catwalk. We have had 3 incidents where our RTs have gone over to the hospital next door for patient MRIs and our Cisco 7925 wireless phones are being configured with that hospitals wireless profile. The RTs are saying that no one from that hospital are manually configuring the phones to be on their wireless network so they can be used while off our wireless network. We're thinking that the RTs are putting their phones down and picking up the other hospitals 7925s by accident before leaving. My question to you is...Does the Cisco 7925s have an auto configuration tool that will automatically pick up on a particular wireless network and automatically configure itself and register with a Call Manager? Thanks!
Regards,
Terence

Leo and George,
Exactly! It makes absolutely no sense. All our Cisco 7925 phones are manually configured for our voice VLAN for our wireless network infrastructure. It's the only profile I've configured for those phones. I spoke to the other hospitals IT personnel and was advised that they use a wavelink server that sends the configuration to their 7925s after they have been entered into the server. The only explanation I can come up with is that our RTs are sitting our phones down, doing whatever they need to do over at the hospital, then picking up the hospitals 7925 thinking they're picking up ours. Another thing to note is that when I reconfigured the phone to be put back on our wireless, the phone performed a firmware update and then registered to our Call Manager.

Cisco 7925 and Singlewire PustToTalk no voice

Hello,
     I am in the middle of implementing a Singlewire PushToTalk system in a wireless network with Cisco 5508 WLCs and Cisco 7925 phones.
    I managed to configure everything and PTT works with the exception that from time to time there is a indication on the listening side and a beep sound, but there is no voice and the listening side doesn't hear anything. There is no logic when it happens and when it doesn't. The problem appears approximatelly 1 of every 15 attempt in one session.
    The firware of the phones is the latest 1.3.4 and the PTT software is the latest, too.
    If anybody has any idea what can be the reason I will appreciate any advices and hints.
   Greets,
        Georgi

Hello,
     I am in the middle of implementing a Singlewire PushToTalk system in a wireless network with Cisco 5508 WLCs and Cisco 7925 phones.
    I managed to configure everything and PTT works with the exception that from time to time there is a indication on the listening side and a beep sound, but there is no voice and the listening side doesn't hear anything. There is no logic when it happens and when it doesn't. The problem appears approximatelly 1 of every 15 attempt in one session.
    The firware of the phones is the latest 1.3.4 and the PTT software is the latest, too.
    If anybody has any idea what can be the reason I will appreciate any advices and hints.
   Greets,
        Georgi

Forced Authorization Code For Cisco SIP Phone 3905

Hi Team,
Can i configure Cisco SIP Phone 3905 to use Forced Authorization Code ? I am using Call Manager 9.X.
Regards,
Praful Sartape

Hi Praful,
Yes you right for CME but for CUCM some sip phones supports FAC , as far as 3905 is concerned it supports FAC .
http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/3905/8_6/english/admin_guide/IP05_BK_CDEEDD7F_00_admin-guide-3905_chapter_0101.html#IP05_RF_A5029279_00
I didnt find link for CUCM 9.x but that above link will help.
And also check this thread- https://supportforums.cisco.com/thread/2125452
Rate all the helpful post.
Thanks
Manish

RTP for Cisco IP Phones

Hello friends!
I'm developing an application for Cisco IP Phones that whorks with JMF. Since there are some programmers in this forum that knows Cisco IP phones, I send my question here.
I was send succefully the XML message to phone (CiscoIPPhoneExecute), I was customized the paket's size to 160, etc. All works aparently. But audio stream does not reach to phone. Can anyone tell me why??
Below I write my source code.
Tanks!
Max.
import java.io.*;
import java.net.*;
import java.util.*;
import org.apache.xerces.impl.dv.util.Base64;
import javax.media.*;
import javax.media.control.*;
import javax.media.format.*;
import javax.media.protocol.*;
* @author Administrator
public class MMHTTPPost {
    /** Creates a new instance of MMHTTPPost */
    public MMHTTPPost() {
        try {
             * Envia el CiscoIPPhoneExecute al telefono
            String xml = new String("<CiscoIPPhoneExecute>"+
                                        "<ExecuteItem Priority=\"0\" URL=\"RTPRx:Stop\"/>"+"<ExecuteItem Priority=\"1\" URL=\"RTPRx:10.1.15.10:23480\"/>"+
                                        "</CiscoIPPhoneExecute>");
            String userId      = "Max",
                    password    = "12345",
                    basicAuth   = "Basic ",
                    params      = "XML=" + URLEncoder.encode(xml, "ISO-8859-1" );
            byte[] bytes       = params.getBytes();
            // Create a URL pointing to the servlet or CGI script and open an HttpURLConnection on that URL
            URL url = new URL( "http://10.1.15.56/CGI/Execute" );
            HttpURLConnection con = ( HttpURLConnection ) url.openConnection();
            // Indicate that you will be doing input and output, that the method is POST, and that the content
            // length is the length of the byte array
            con.setDoOutput( true );
            con.setDoInput( true );
            con.setRequestMethod( "POST" );
            con.setRequestProperty( "Content-length", String.valueOf( bytes.length ) );
            // Create the Basic Auth Header
            Base64 encoder = new Base64();
            basicAuth = (String)encoder.encode( ((String)(userId + ":" + password)).getBytes() );
            System.out.println("Codificado: " + basicAuth);
            con.setRequestProperty( "Authorization", "Basic " + basicAuth.trim() );
            // Write the parameters to the URL output stream
            OutputStream output = con.getOutputStream();
            output.write( bytes );
            output.flush();
            // Read the response
            BufferedReader input = new BufferedReader( new InputStreamReader( con.getInputStream() ) );
            while ( true ) {
                String line = input.readLine();
                if ( line == null )
                    break;
                System.out.println( line );
            input.close();
            output.close();
            con.disconnect();
             * Aca empieza la parte RTP/JMF
            // Create a Processor for the selected file. Exit if the
            // Processor cannot be created.
            Processor processor = null;
            try {
                String mediaUrl = "file:\\C:\\pruebas execute\\spacemusic.au";
                processor = Manager.createProcessor( new MediaLocator(mediaUrl));
            } catch (IOException e){
                System.out.println("Exception occured (1a): " + e);
            } catch (NoProcessorException e){
                System.out.println("Exception occured (1b): " + e);
            // configure the processor
            //processor.configure();
            //Espera el estado Processor.Configured
            boolean result = waitForState(processor, Processor.Configured);
            if (result == false)
                System.out.println("No se pudo configurar el procesador...");
            // Block until the Processor has been configured
            TrackControl track[] = processor.getTrackControls();
            boolean encodingOk = false;
            // Go through the tracks and try to program one of them to
            // output ulaw data.
            for (int i = 0; i < track.length; i++)
                if (!encodingOk && track[i] instanceof FormatControl)
                    if (((FormatControl)track).setFormat( new AudioFormat(AudioFormat.ULAW_RTP,8000,8,1)) == null)
track[i].setEnabled(false);
else
encodingOk = true;
else
// we could not set this track to ulaw, so disable it
track[i].setEnabled(false);
*Aqu? se cambia el tama?o del paquete a 160
if (((TrackControl)track[i]).isEnabled()) {
try {
System.out.println("Cambiando la lista de codecs...");
Codec codec[] = new Codec[3];
codec[0] = new com.ibm.media.codec.audio.rc.RCModule();
codec[1] = new com.ibm.media.codec.audio.ulaw.JavaEncoder();
//codec[2] = new com.ibm.media.codec.audio.ulaw.Packetizer();
codec[2] = new com.sun.media.codec.audio.ulaw.Packetizer();
((com.sun.media.codec.audio.ulaw.Packetizer)codec[2]).setPacketSize(160);
((TrackControl)track[i]).setCodecChain(codec);
catch (Exception e){
System.out.println("Error al cambiar el tamano del paquete: " + e);
System.out.println("Encoding ok?: " + encodingOk );
// At this point, we have determined where we can send out
// ulaw data or not.
// realize the processor
if (encodingOk)
//processor.realize();
// block until realized.
// get the output datasource of the processor and exit
// if we fail
//Espera el estado Processor.Realized
result = waitForState(processor, Processor.Realized);
if (result == false)
System.out.println("No se pudo realizar el procesador...");
DataSource ds = null;
try
ds = processor.getDataOutput();
catch (NotRealizedError e)
System.out.println("Exception occured(2): "+e);
// hand this datasource to manager for creating an RTP
// datasink.
// our RTP datasink will multicast the audio
try
String mediaUrl= "rtp://10.1.15.56:23480/audio/1";
MediaLocator m = new MediaLocator(mediaUrl);
DataSink d = Manager.createDataSink(ds, m);
d.open();
d.start();
catch (Exception e)
System.out.println("Exception occured(3): "+e);
catch ( MalformedURLException murlex )
System.out.println( murlex );
catch ( IOException ioex )
System.out.println( ioex );
* @param args the command line arguments
public static void main(String[] args) {
new MMHTTPPost();
* Convenience methods to handle processor's state changes.
private Integer stateLock = new Integer(0);
private boolean failed = false;
Integer getStateLock() {
     return stateLock;
void setFailed() {
     failed = true;
private synchronized boolean waitForState(Processor p, int state) {
     p.addControllerListener(new StateListener());
     failed = false;
     // Call the required method on the processor
     if (state == Processor.Configured) {
     p.configure();
     } else if (state == Processor.Realized) {
     p.realize();
     // Wait until we get an event that confirms the
     // success of the method, or a failure event.
     // See StateListener inner class
     while (p.getState() < state && !failed) {
     synchronized (getStateLock()) {
          try {
          getStateLock().wait();
          } catch (InterruptedException ie) {
          return false;
     if (failed)
     return false;
     else
     return true;
* Inner Classes
class StateListener implements ControllerListener {
     public void controllerUpdate(ControllerEvent ce) {
     // If there was an error during configure or
     // realize, the processor will be closed
     if (ce instanceof ControllerClosedEvent)
          setFailed();
     // All controller events, send a notification
     // to the waiting thread in waitForState method.
     if (ce instanceof ControllerEvent) {
          synchronized (getStateLock()) {
          getStateLock().notifyAll();

ignore my last post.. I didn't properly read the source code.
Anyway, I got g.711 streaming to work. I started out using the AVTransmit2 sample, but set the audio output format to what is used in the source code posted here. I've also applied the same codec chain described above, and that was it.
I could never get streaming to work using the first RTP streaming method described in the JMF Programmers guide (and this is the method used in the source posted above), but using the RTPManager, things work just fine.

ASA license for Cisco IP Phone over VPN

Hi,
Are there special licenses required on the ASA to use Cisco IP Phones (Hard phone) over SSL VPN connection?
Thanks

Hi,
You can purchase the phone proxy license. This elimiates the need to build a VPN tunnel for voice traffic.
It is not mandatory to purchase this license however.
From the ASA configuration guide:
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1144845
"The Cisco Phone Proxy on the adaptive security appliance bridges IP telephony between the corporate IP telephony network and the Internet in a secure manner by forcing data from remote phones on an untrusted network to be encrypted. "
Don't forget to rate all posts that are helpful.

How can I connect a Cisco 7940 phone to a trixbox via SIP

how can I connect a Cisco 7940 phone and CIsco 7970 to a trixbox via SIP

...by configuring the trixbox according to the required configuration and changing your firmware on the phones to SIP{
=============================
Please remember to rate useful posts, by clicking on the stars below.
=============================

Authorization requirement

hi,
this is my requirement
how to provide authorization to be primarily based on
plant code
purchasing group
material group
incoterm
vendor account group.
please provide me the procedure and if there is any code for it please provide.
thanks in advance

PARAMETERS carr TYPE spfli-carrid.
AT SELECTION-SCREEN.
AUTHORITY-CHECK OBJECT 'S_CARRID'
    ID 'CARRID' FIELD carr
    ID 'ACTVT' FIELD '03'.
IF sy-subrc <> 0.
    MESSAGE 'No authorization' TYPE 'E'.
ENDIF.
AUTHORITY-CHECK OBJECT auth_obj [FOR USER user]
                        ID id1 {FIELD val1}|DUMMY
                       [ID id2 {FIELD val2}|DUMMY]
                       [ID id10 {FIELD val10}|DUMMY].
Addition:
... FOR USER user
Effect
This statement checks whether authorization is entered in the user master record of the current user or the user specified in user for the authorization object entered in the field auth_obj, and whether this authorization is sufficient for the request specified in the statement. A flat character-type field that contains the name of an authorization object is expected for auth_obj. Without the addition FOR USER, the authorization of the current user is checked.
With id1 ... id10, you must have at least one and can have a maximum of 10 authorization fields listed for the authorization object specified. With id1 ... id10, "flat", character-type fields are expected that contain the name of the authorization fields in uppercase letters. If an authorization field is specified that does not appear in the authorization object, no check can be executed and sy-subrc is set to 4. For each specified authorization field, you must specify with FIELD either a value to be checked in a flat, character-type field val1 ... val10 or the addition DUMMY.
The authority check is carried out if the check indicator for the specified authorization object for the current context is set to check with any proposal status. If the check indicator is set to no check, no authority check is carried out and sy-subrc is set to 0, as with a successful check.
The authorization check is successful if one or several authorizations are created for the authorization object in the user master record and if - for at least one of the authorizations - each of the value sets defined there for the authorization fields specified using FIELD includes the value val1 ... val10 to be checked. Authorization fields that are not included in the statement or that have DUMMY specified for them are not checked. If the check is successful, sy-subrc is set to 0. Otherwise, it is set to a value not equal to 0 (see below).
System Fields
sy-subrc Meaning
0 Authorization successful or no check was carried out. An authorization for the authorization object was found in the user master record. It's value sets include the specified values.
4 Authorization check not successful. One or several authorizations were indeed found for the authorization object in the user master record and they include the value sets, but not the values specified, or incorrect or too many authorization fields were specified.
12 No authorization was found for the authorization object in the user master record.
24 Incorrect authorization fields or an incorrect number of authorization fields was found. This return value is no longer set since Release 6.20. Up to Release 4.6 it is set only if the profile parameter "auth/new_buffering" has a value less than 3.
40 An invalid user ID has been entered in user.
Notes
The authorization fields of an authorization object are fields for data and a field with the name ACTVT for activities. Activities are represented by abbreviations with two characters that are defined in the ACTVT column of the database table TACT or have a customer-specific definition in TACTZ. Possible activities are assigned to the authorization field ACTVT in the authorization object. In the user master record, you have authorizations for data and activities in the form of operands for logical expressions stored as value sets. Here, masking characters can be used for generic authorizations.
When checking the authorization of the current user without the addition FOR USER, the content of the system field sy-uname is not evaluated, but the actual user name is used instead.
The most important contexts for which check indicators can be set are transactions. The execution of a statement AUTHORITY-CHECK can have different results depending on how the current program flow was started. In general, a check indicator should always been set to check.
For authorization objects of the areas SAP NW AS ABAP (BC) and human resources management (HR), a check indicator cannot be set to no check.
Addition
... FOR USER user
Example
Check as to whether the current user has the authorization required for displaying the airline that he specifies on the selection screen. The used authorization object is called S_CARRID and includes the authorization fields CARRID for the name of an airline and ACTVT for the activity. The abbreviation "03" stands for the "Display" activity and is one of the activities that are assigned to the authorization object S_CARRID.
PARAMETERS carr TYPE spfli-carrid.
AT SELECTION-SCREEN.
AUTHORITY-CHECK OBJECT 'S_CARRID'
    ID 'CARRID' FIELD carr
    ID 'ACTVT' FIELD '03'.
IF sy-subrc <> 0.
    MESSAGE 'No authorization' TYPE 'E'.
ENDIF.

Using 802.1X and non-Cisco IP Phones

Hi there,
Having some questions about an 802.1x/non-Cisco ip phone setup and was hoping to find some answers/user-experience with this setup.
Main questions i'm facing:
1) When using non-Cisco ip phones (eg Nortel or Siemens) and a previous authorized client connected behind this ip phone gets disconnected. What will this action do with the authorized state of 802.1X on the switch port? WIll it stay authorized until the reauth timer expires or does it reject communication from any other device?
2) What about EAPOL-Logoff messages from the ip phone to the switch. Are these only used by Cisco phones when they experience a link-status change on data ports?
Thanks for sharing your thoughts

Overall, you need to try and deal with the fact that a machine can disappear from the network and the network may not know about it directly (i.e. Link doesn't go down).
I have no idea what other phones do, but Cisco phones send an EAPOL-Logoff when something is unplugged. This lets the switch know directly, and 1X session start is torn down immediately, closing what would be a security hole.
Fundamentally, re-auth is a workaround only, and this is not the reason to enable re-auth to begin with.
If your phone doesn't send an EAPOL-Logoff in this case, the switch might be left thinking an attack is underway when someone else tries to plug in (with presumably a different MAC). You do NOT want this to occur.
Hope this helps,

3560G and 802.1X with Cisco IP Phone

Hi,
We have been doing some test on our 3560G switch with 802.1X. The switch port has a Cisco IP Phone 7940 connected and at the back of the IP Phone is the PC (802.1X client).
The PC authenticates with the computer name or the username properly without any problems. However problem is that the port stays opened/authorized even after disconnecting the Laptop from the phone. Only disconnecting the phone from the switch disables the port and enforces authentication.
This totally defeats the purpose for us.
IOS: 12.2(20)SE3
aaa new-model
aaa authentication dot1x default group radius
aaa authorization network default group radius
dot1x system-auth-control
interface GigabitEthernet0/40
switchport access vlan 4
switchport mode access
switchport voice vlan 15
dot1x port-control auto
dot1x timeout quiet-period 15
dot1x timeout reauth-period 30
dot1x max-req 1
dot1x reauthentication
spanning-tree portfast
spanning-tree link-type point-to-point
Any ideas will be appreciated.
Thanks,
Cheers
Kartik

I believe the problem should be solved with the new phone firmware:
Ref Cisco Document:
http://www.cisco.com/en/US/products/hw/phones/ps379/prod_release_note09186a0080461f84.html
"Firmware release 7.2(2) provides support for the Cisco IP Phone models 7960G and 7940G to monitor IEEE 802.1X messages between an authenticating switch and a connected PC (supplicant).
When a PC is disconnected from the Cisco IP Phone, the phone issues an EAPOL-Logoff message on behalf of the PC to the authenticating switch.
Hope This Helps
Jarle Steffensen

Unable to start cisco ip phone 7942

Hello Guys,
A friend of mine has given cisco ip phone 7942 to us (which was working good at his work desk)
We are trying to connect this phone at home but facing problem.
First thing we want to confirm is, does this phone require AC-DC power supply?
Reason for asking is we have connected all other things (cables) properly to get it working but we do not see anything on the display / phone screen.
Please check below picture for our connections ( Laptop - Phone - Modem and ADSL Phone Filter)
Friend has confirmed that they do not have any power connected to phone in office/work, so not sure if AC-DC power supply is really required?
Appreciate if you guys can help to resolve this.
Merry Christmas and Happy New Year!
- Mandy

Hi Guys, thanks for your response.
I am thinking to get/buy this Cisco CP-PWR-CUBE-3 VoIP Phone Power Supply
http://www.ebay.com.au/itm/Cisco-CP-PWR-CUBE-3-VoIP-Phone-Power-Supply-CP-7941G-7945G-7975G-7914-3MthWty-/281030628576?pt=LH_DefaultDomain_15&hash=item416ebb14e0
But I am confused with above response from Chris.
Will you be registering it with a specific SIP server or will you be installing a PBX such as Cisco Communications Manager, etc?
>>> I have no idea about this....I thought if I just simply get the power supply it should start working?
what is your intent for the phone?
>>> I just want to use this as my home phone. This phone was working at my friend's office desk.
Are you saying this phone is locked with something code etc? which won't allow me to use at home if I just get the power supply?
Please help me to understand this guys....
- Mandy

An unknown error occurred on your Cisco IP Phone

Hello All,
I have a new install of UCMBE 7.0 and today I tried to get Phone Designer to work.
When trying to preview even a stock image on the phone (7942)I get the following error "An unknown error occurred on your Cisco IP Phone"
I checked the following on the phone -
1. Enabled Personalization
2. Verified the URL
I can log into the phone just fine but I am not able to get a preview of stock images on the phone or ring-tones.
I read over the logs which only state the error above.
Any help greatly appreciated
Thanks!

Hi All,
I have the same problem with the configuration:
CUCMBE: Active Master Version: 6.1.4.2000-2
Phone Designer Version: 7.1 (3) SR1
Phone: 7911G
Phone Personalization: Enable
I check all items of configuration:
Phone Firmware
Load File: SCCP11.9-0-2SR1S
ID: Jar11sccp.9-0-2ES2.sbn
In CUCMBE
Phone Personalization: Enable
The server is running correctly.
Please Help Me.... Thanksss a lot.
Logs of the problem attach.

Voice Over IP Phone - Physical Device Cisco IP PHONE 7940

Hi Every body,
This is to announce in the forum , I have alot trouble facing in the IP Phone .
This is causing my production & Client interaction Problems. my Network has 2 Mpbs Leased line I have around 10 IP Phones and only 3 three are critical, In my network stability and the switch environment is also good but when i have all IP Phones are working in sudden one IP Phone the model Cisco IP Phone 7940 series makes reboot every day atleast 7 to 8 times .Do you think the IP Phone required separate Leased line provided or can we manage the environment with out fail by adding any additional component like powerful intelligent switch.Please reply back this query , it is an urgent issue in my environment.

If phone freeze, it's a firmware bug.
Which firmware are you running ?
Please do not solicit for urgent answer on a free volunteered forum, if you need guaranteed support buy a contract.

7925 phone delay

Hi,
I am implementing a wireless LAN, Data and Voice vlans are broadcasted via this WLAN, i am using a 5508 controller and a 1131b/g AP's.
the problem is when i try to call any wireless phone from the IPPhone, the Wireless phone takes too long to show that someone is calling you.
on the IPPhone i hear it ringing when i dial the WPhone extension but it doesnt show anything on the WPhone untill the IPPhone reaches its third ring then the WPhone starts to ring.
its like:
Land phone ---> dial the wireless phone ext. ---> ring, ring ring,---> then you hear the Wireless phone rings for the first time after you hear 3 rings on the land phone.
i was following the 7925 phone deployment guide for configuring the phone and the controller.
any ideas.
thank you.

Would check the CU to see if their is interference, congestion, etc.
May want to try with 5 GHz if you have an 802.11a capable AP.
Sent from Cisco Technical Support iPhone App

Cisco 7925 phone states authorization required

Similar Messages

Maybe you are looking for