Bulk Deplyment Utility Guide Cisc Wireless IP Phne 8821 & 8821-EX
Cntents Intrductin... 3 Create Wi-Fi Prfiles... 3 Exprt Cnfiguratin Files... 5 Push Cnfiguratin Files t the Cisc 8821 and 8821-EX... 9 Cisc 8821 Bulk Deplyment Utility Guide 2
Intrductin The Bulk Deplyment Utility (BDU) fr the Cisc Wireless IP Phne 8821 and 8821-EX can be utilized fr initial deplyment r after the phnes have been deplyed. The BDU prvides quick prvisining and deplyment when unique 802.1x accunts are used with EAP-FAST, PEAP-GTC, r PEAP-MSCHAPV2 r when a cmmn set f credentials are used by all phnes (e.g. PSK r a single 802.1x accunt). A persnal cmputer running Micrsft Windws r Apple OS X with Java installed is required. Java can be dwnladed at https://java.cm/en/dwnlad. The BDU requires firmware versin 11.0(3)SR4 r later fr the Cisc Wireless IP Phne 8821 and 8821-EX. The BDU des nt supprt certificate prvisining, hwever the phnes can dwnlad certificates via Simple Certificate Enrllment Prtcl (SCEP) r be manually installed via the phne s admin webpage interface (https://x.x.x.x:8443), where x.x.x.x is the IP address f the phne. Yu can als place a Rt CA certificate n the TFTP Server (named WLANRtCA.cer), which autmatically dwnlads t the phne. Fr mre infrmatin n certificate prvisining, see the Cisc Wireless IP Phne 8821 and 8821-EX Wireless LAN Deplyment Guide at https://www.cisc.cm/c/en/us/supprt/cllabratin-endpints/unified-ip-phne-8800-series/prductsimplementatin-design-guides-list.html. Create Wi-Fi Prfiles Once 882xBD.1-0.jar is dwnladed frm Cisc.cm, duble-click the file t launch the BDU. Prir t exprting TFTP dwnladable cnfiguratin file(s), the Wireless LAN cnfiguratin parameters must be specified. 1. Cnfigure the Status per Wi-Fi prfile as necessary. Enabled (Prfile 1 is enabled by default) Disabled (Prfiles 2-4 are disabled by default) 2. Cnfigure the Prfile name per Wi-Fi prfile as necessary. A string with up t 32 characters is allwed. 3. Cnfigure User mdifiable per Wi-Fi prfile as necessary. Allwed = The user has the capability t change any Wireless LAN settings (e.g. Enable/Disable, SSID, Frequency Band, Authenticatin Methd, Username and Passwrd, PSK Passphrase, WEP Key) lcally n the endpint. Disallwed = The user is unable t change any Wireless LAN settings. Restricted = The user is nly able t change certain Wireless LAN settings (e.g. User ID and Passwrd) 4. Cnfigure the SSID per Wi-Fi prfile as necessary. A string with up t 32 characters is allwed. 5. Cnfigure the Security mde per Wi-Fi prfile as necessary. Nne WEP PSK Requires WEP key t be entered. Requires Passphrase t be entered. EAP-FAST Cisc 8821 Bulk Deplyment Utility Guide 3
Requires User ID and Passwrd t be ppulated either autmatically via CSV file r manually. Check Prvide shared credentials t manually specify the User ID and Passwrd. Uncheck Prvide shared credentials t use a CSV file t specify the User ID and Passwrd. EAP-TLS Requires User certificate t be set t either Manufacturing installed r User installed. PEAP-GTC Requires User ID and Passwrd t be ppulated either autmatically via CSV file r manually. Check Prvide shared credentials t manually specify the User ID and Passwrd. Uncheck Prvide shared credentials t use a CSV file t specify the User ID and Passwrd. PEAP-MSCHAPV2 Requires User ID and Passwrd t be ppulated either autmatically via CSV file r manually. Check Prvide shared credentials t manually specify the User ID and Passwrd. Uncheck Prvide shared credentials t use a CSV file t specify the User ID and Passwrd. 6. Cnfigure the 802.11 mde per Wi-Fi prfile as necessary. Aut = Gives pririty t 5 GHz frequencies ver 2.4 GHz frequencies. 2.4 GHz = Uses 2.4 GHz frequencies nly. 5 GHz = Uses 5 GHz frequencies nly. Cisc 8821 Bulk Deplyment Utility Guide 4
Nte: If yu plan t use unique 802.1x accunts with the Bulk Exprt methd, the username and passwrd d nt need t be specified; they will be specified in the CSV file. The BDU des nt supprt static IP addresses, therefre DHCP (including TFTP) is used. Exprt Cnfiguratin Files Once the Wireless LAN cnfiguratin parameters are specified, then the TFTP dwnladable cnfiguratin file(s) can be exprted by selecting File > Exprt frm the BDU. There are tw methds fr exprting cnfiguratin files (Bulk Exprt and Default Exprt), which is aut-determined based n the selected security mde and whether unique credentials are specified r nt. If yu need t deply the phnes with unique 802.1x accunts utilizing EAP-FAST, PEAP-GTC, r PEAP-MSCHAPV2, then the Bulk Exprt methd is selected autmatically. If yu need t deply the phnes with identical wireless LAN settings (e.g. Nne, WEP, PSK, EAP-TLS, r single user accunt with EAP-FAST, PEAP-GTC, PEAP-MSCHAPV2), then the Default Exprt methd is selected autmatically. Cisc 8821 Bulk Deplyment Utility Guide 5
Bulk Exprt The Bulk Exprt methd uses the cmmn Wireless LAN cnfiguratin parameters specified when creating the template, and prmpt fr a CSV file, which will cntain the phne MAC address, username, and passwrd. A sample CSV file (userinf.csv), available at Help > Userinf template exprt, can be used as a template. Belw is the file frmat fr the userinf.csv file. MAC,Username,Passwrd 00EBD5DB019C,Je,Lee Up t 5,000 entries are supprted per CSV file. After the CSV file is imprted, TFTP dwnladable cnfiguratin files fr each phne are autmatically created and exprted t the lcatin specified. The exprted file names are in the frmat f 8821-WLAN<MAC>.xml, which the phne attempts t TFTP dwnlad when the phne is pwered n r re-prvisins. Cisc 8821 Bulk Deplyment Utility Guide 6
Default Exprt The Default Exprt methd uses the cmmn Wireless LAN cnfiguratin parameters specified when creating the template and a TFTP dwnladable cnfiguratin file will be autmatically created and exprted t the lcatin specified. The exprted file name will be 8821-WLANDefault.xml, which the phne attempts t TFTP dwnlad when the phne is pwered n r re-prvisins. Cisc 8821 Bulk Deplyment Utility Guide 7
Cisc 8821 Bulk Deplyment Utility Guide 8
Push Cnfiguratin Files t the Cisc 8821 and 8821-EX The BDU des nt have TFTP server capabilities, therefre either the TFTP server n Cisc Unified Cmmunicatins Manager / Cisc Unified Cmmunicatins Manager Express r a third-party TFTP server will be required t hst the phne cnfiguratin files nce exprted. Fr initial deplyment, use ne f the fllwing methds: Cnnect the phne t an Ethernet netwrk while dcked with a supprted USB t Ethernet dngle cnnected t btain IP settings via DHCP (including TFTP server) where the phne can TFTP dwnlad the phne cnfiguratin file. Cnnect the phne t a wireless LAN using the default SSID (cisc) t btain IP settings via DHCP (including TFTP server) where the phne can TFTP dwnlad the phne cnfiguratin file. Fr pst-deplyment, where phnes are already being utilized n the prductin wireless LAN, cpy the phne cnfiguratin files t the TFTP server that the phnes are pinted t, then reset the phnes t recnnect t the prductin wireless LAN. The phne then attempts t TFTP dwnlad the phne cnfiguratin file. The TFTP service may need t be restarted prir t resetting the phnes depending n which type f TFTP server is utilized. Cisc 8821 Bulk Deplyment Utility Guide 9
After the phne receives the cnfiguratin file, the phne will re-prvisin with the new settings and attempt t jin the intended wireless LAN. If currently dcked with an active USB t Ethernet cnnectin, the phne attempts t jin the wireless LAN nce undcked. Cisc 8821 Bulk Deplyment Utility Guide 10