IP Phone VPN

Unanswered Question
Apr 13th, 2007
User Badges:


How can i do to configure my ip phone (7912/7940/7960/7970) in my house to connect by VPN my company. The ip phone have login and password? Or i can to use IPCommunicator for it?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.1 (5 ratings)
mchandak Fri, 04/13/2007 - 06:33
User Badges:
  • Gold, 750 points or more

Cisco IP Phones dont have an Inbuilt VPN Client. So you will either have to connect it behind a Hardware VPN Client (VPN 3002) or use IP Communicator.

paolo bevilacqua Fri, 04/13/2007 - 06:44
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    Founding Member

IP Communicator also works fine with the VPN software Client, and with appropriate configuration, even a telephone on a network connected to the PC with VPN client.

Alternatively you can just put the phone with SIP or SCCP (as supported be NAT devices used) and register to callmanager w/o VPN, you configure the device as secure and privacy is maintained.

Hope this helps, if so please rate post!

pgcristovam Fri, 04/13/2007 - 08:27
User Badges:

Sorry bevilacqua.

I don't understand the alternative solution.

paolo bevilacqua Sat, 04/14/2007 - 03:09
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    Founding Member

The alternative is to make the callmanager is accessible from the internet, at leaset for signaling and media ports, better would be using a public address to eliminate all and any potential NAT issue.

Then the phone, again on the internet, possibly behind a NAT router, by static configuration or DHCP is given the CCM public address as TFTP and will register normally.

To make the conversation secure you can use voice encryption that is available on recent CCM and in a future, on CCME too.

Hope this helps, if so please rate post!

ecstillman Fri, 04/13/2007 - 14:25
User Badges:

I have a client who recently traveled overseas and his IP Communicator would not register through the VPN; however using the same VPN he had no problem here from home.

Any ideas?


thisisshanky Fri, 04/13/2007 - 14:54
User Badges:
  • Purple, 4500 points or more

I have had several of my sales folks use an ip phone at their homes using a Pix 501 with a ipsec tunnel back to office. This works great. You can use Easy vpn which is far more easier to setup. If you want to do some level of qos, you may want to get a SOHO router like 800 series that can be setup with an ipsec vpn from the remote lcoation to the HQ.

Let me know if you need any config assistance on templates for the pix.



PS: please remember to rate posts!

johnnylingo Mon, 04/16/2007 - 13:53
User Badges:
  • Bronze, 100 points or more

Note on home routers - go with the 830 or better yet 870 series. The 850 series does not support QoS on any of the available IOS images.

pgcristovam Tue, 04/17/2007 - 11:18
User Badges:

Hi bevilacqua.

Now I am understanding. And you are helping me a lot. But, you have this solution implemented or any study? Can you send me a topology?

The CCM 4.x does voice encryption?



paolo bevilacqua Tue, 04/17/2007 - 11:40
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    Founding Member


There is not much to add because to the CM topology doesn't matter, you are just adding a device. Many people implent telephony over the internet this way and it works fine.

Voice encryption (SRTP) is supported from CM 4.1 onward.

Hope this helps, if so please rate post!

pgcristovam Thu, 04/19/2007 - 09:58
User Badges:


The telephony over the internet (cisco solution) works fine with SCCP too or just SIP?

I can add gateways (router) over internet using MGCP? For example, the phone over adsl link are registered in CCM (without NAT), ok? But and then i need to use the PSTN or to create conference, how it works?


This Discussion