[cisco-voip] CUCM Mixed Mode Security

Fuermann, Jason JBF005 at shsu.edu
Tue Oct 13 15:28:23 EDT 2009


While I've only done initial research, I was under the impression that it was only the phones you wanted secure, so good to know that

-----Original Message-----
From: Eric Pedersen [mailto:eric.pedersen at sait.ca] 
Sent: Tuesday, October 13, 2009 1:14 PM
To: Fuermann, Jason; 'cisco-voip list'
Subject: RE: CUCM Mixed Mode Security

When I did this, I was surprised to see that all phones download the CTL file and check the TFTP and CM server IPs against it before downloading configurations and registering. I thought it would just be the phones configured for security.

Also, if you have a multi-cluster environment, you will need to install the same security tokens on all the clusters with all the TFTP servers configured in all the CTL files to be able to move phones between the clusters without manually deleting the CTL file on the phones.

To be honest, I don't know if I would do it again. I get nervous every time I have to update the CTL file. I think the consequence of screwing it up is that you would have to manually delete it on every phone.

-----Original Message-----
From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Fuermann, Jason
Sent: October 12, 2009 11:57
To: 'cisco-voip list'
Subject: [cisco-voip] CUCM Mixed Mode Security

I seem to remember someone telling me that setting CUCM to mixed mode could have some undesirable side effects. Other than no auto-registration anyone know of anything else?
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


More information about the cisco-voip mailing list