Cisco 79xx

From Hackerspace ACKspace
Jump to: navigation, search

Marked as outdated
needs work/cleaning
Cisco IP Phone 7940 series


Here is some various information of the Cisco IP 7900 series phones and extension modules as used in our Cisco phone deployment. Currently, there are only two 7940 in the space, both with line 2 configured as an auto-answer intercom.

current dialplan

The current dialplan is set up so that you can directly dial external numbers (if we have pre-paid credit), and dial internal service numbers and extensions. Additional entries are needed for star(*) services which requires the user to postfix with a pound(#) sign.

    <TEMPLATE MATCH="\*..#"            Timeout="0" User="Phone"/> <!-- 2 digit activate -->
    <TEMPLATE MATCH="\**#"             Timeout="3" User="Phone"/> <!-- 2 digit activate param -->
    <TEMPLATE MATCH="\*...#"           Timeout="0" User="Phone"/> <!-- 3 digit activate -->
    <TEMPLATE MATCH="\**#"             Timeout="3" User="Phone"/> <!-- 3 digit activate param -->
    <TEMPLATE MATCH="\*..#"            Timeout="0" User="Phone"/> <!-- 2 digit activate -->
    <TEMPLATE MATCH="\*#..#"           Timeout="0" User="Phone"/> <!-- 2 digit status -->
    <TEMPLATE MATCH="\*#...#"          Timeout="0" User="Phone"/> <!-- 3 digit status -->
    <TEMPLATE MATCH="#..#"             Timeout="0" User="Phone"/> <!-- 2 digit cancel -->
    <TEMPLATE MATCH="#...#"            Timeout="0" User="Phone"/> <!-- 3 digit cancel -->
    <TEMPLATE MATCH="00*"              Timeout="6" User="Phone"/> <!-- International calls-->
    <TEMPLATE MATCH="0........."       Timeout="1" User="Phone"/> <!-- National calls -->
    <TEMPLATE MATCH="10.."             Timeout="0" User="Phone"/> <!-- Local extensions -->
    <TEMPLATE MATCH="12.."             Timeout="0" User="Phone"/> <!-- Customer service -->
    <TEMPLATE MATCH="13.."             Timeout="0" User="Phone"/> <!-- Services -->
    <TEMPLATE MATCH="131.........."    Timeout="1" User="Phone"/> <!-- Services -->
    <TEMPLATE MATCH="#31#.........."   Timeout="1" User="Phone"/> <!-- Services -->
    <TEMPLATE MATCH="\*31\*.........." Timeout="1" User="Phone"/> <!-- Services -->
    <TEMPLATE MATCH="132.........."    Timeout="1" User="Phone"/> <!-- Services -->
    <TEMPLATE MATCH="\*10.."           Timeout="0" User="Phone"/> <!-- Intercom -->
    <TEMPLATE MATCH="\*19.."           Timeout="0" User="Phone"/> <!-- Intercom -->
    <TEMPLATE MATCH="19.."             Timeout="0" User="Phone"/> <!-- Remote extensions -->
    <TEMPLATE MATCH="2222"             Timeout="0" User="Phone"/> <!-- Emergency -->
    <TEMPLATE MATCH="4444"             Timeout="0" User="Phone"/> <!-- Emergency -->
    <TEMPLATE MATCH="112"              Timeout="0" User="Phone"/> <!-- Emergency -->
    <TEMPLATE MATCH="911"              Timeout="0" User="Phone"/> <!-- Emergency -->
    <TEMPLATE MATCH="999"              Timeout="0" User="Phone"/> <!-- Emergency -->
    <TEMPLATE MATCH="*"                Timeout="4" User="Phone"/> <!-- All Other -->


Unlock settings menu =

SCCP: **#
SIP: settings9 password

Reboot/reload phone

SCCP (reload/hot boot): **#**
SIP (lukewarm boot):*+6+settings

Or just pull the power or 'power over ethernet' plug and wait a second

Do a factory default

Note: couldn't get it to work on 7910


  • press and hold # while cold booting (before or when the green headset lights)
  • release it after the red mute lights and dims
  • phone says 'Reset key sequence detected' or the like
  • type 123456789*0#
  • save config: 1=yes, 2=no (choose 2 to clear everything)


  • press and hold *, 0 and softkey4
  • type 322873738# (factreset#) and confirm with *
  • power cycle or press *, 0 and softkey4 again


Tested all Cisco equipment with an old unregulated printer power supply of 30V= (measured 39.6V). 18V unregulated (24.6V measured) does not power them at all.


  • (probably) pre-standard PoE
  • SIP phone, fast boot time. Currently, it is unknown where it gets its current dialplan from, but you can force a call by ending with #.

There is one connected in the slACKspace


  • 7910 phones only work with the sccp firmware
  • the 6 softkeys start at button position 5 in the FS config


  • pre-standard PoE
  • TODO: convert SCCP firmware versions to SIP
  • binary config format (uses ptag.dat descriptor file)

all phones

  • To make sure sip firmware loaded phones work across the double-NAT openVPN tunnel setup, apply the following settings (either via the config file or the unlocked menu):
    • Register Expires = 100 (shorter than Linux' UDP 'establised' state time, which is 120 seconds)
    • Outbound proxy = same as Proxy (not sure)
    • NAT enabled = yes
    • NAT address =
      all this causes the extension to register with contact: "user" <sip:10xx@> and enables receiving calls
  • sccp firmware loaded phones have issues with RTP audio over the double-NAT openVPN tunnel setup (signaling works).
    The only way tested to work is to have a local FreeSWITCH box handling the phone traffic.


  • 7914 expansion panels only work with sccp firmware loaded phones
  • the data cable is a 1:1 RJ12 connection with the first unit being powered by the phone (second is yet unknown)
  • the RS232/AUX RJ12 pinout (pin 1 is leftmost) (pinout needs verification):
pin function
1 +48V in (phone: +48v out)
2 RxD (phone: TxD)
3 signal ground
4 TxD (phone: RxD)
5 unknown/NC
6 power ground

The serial settings should be 9600/8-N-1, signal levels are unknown (presumably ±12v). Also, the protocol is unknown.

Tested the 7914 with with 7940 and 7960: the buttons on the extension board start with button position 3 and 7 respectively in the FS config.