IP Phone VPN

Unanswered Question
Apr 13th, 2007

Hi.

How can i do to configure my ip phone (7912/7940/7960/7970) in my house to connect by VPN my company. The ip phone have login and password? Or i can to use IPCommunicator for it?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.1 (5 ratings)
Loading.
mchandak Fri, 04/13/2007 - 06:33

Cisco IP Phones dont have an Inbuilt VPN Client. So you will either have to connect it behind a Hardware VPN Client (VPN 3002) or use IP Communicator.

Paolo Bevilacqua Fri, 04/13/2007 - 06:44

IP Communicator also works fine with the VPN software Client, and with appropriate configuration, even a telephone on a network connected to the PC with VPN client.

Alternatively you can just put the phone with SIP or SCCP (as supported be NAT devices used) and register to callmanager w/o VPN, you configure the device as secure and privacy is maintained.

Hope this helps, if so please rate post!

Paolo Bevilacqua Sat, 04/14/2007 - 03:09

The alternative is to make the callmanager is accessible from the internet, at leaset for signaling and media ports, better would be using a public address to eliminate all and any potential NAT issue.

Then the phone, again on the internet, possibly behind a NAT router, by static configuration or DHCP is given the CCM public address as TFTP and will register normally.

To make the conversation secure you can use voice encryption that is available on recent CCM and in a future, on CCME too.

Hope this helps, if so please rate post!

ecstillman Fri, 04/13/2007 - 14:25

I have a client who recently traveled overseas and his IP Communicator would not register through the VPN; however using the same VPN he had no problem here from home.

Any ideas?

Thanks!

thisisshanky Fri, 04/13/2007 - 14:54

I have had several of my sales folks use an ip phone at their homes using a Pix 501 with a ipsec tunnel back to office. This works great. You can use Easy vpn which is far more easier to setup. If you want to do some level of qos, you may want to get a SOHO router like 800 series that can be setup with an ipsec vpn from the remote lcoation to the HQ.

Let me know if you need any config assistance on templates for the pix.

HTh

Sankar

PS: please remember to rate posts!

johnnylingo Mon, 04/16/2007 - 13:53

Note on home routers - go with the 830 or better yet 870 series. The 850 series does not support QoS on any of the available IOS images.

pgcristovam Tue, 04/17/2007 - 11:18

Hi bevilacqua.

Now I am understanding. And you are helping me a lot. But, you have this solution implemented or any study? Can you send me a topology?

The CCM 4.x does voice encryption?

Thanks

Peterson

Paolo Bevilacqua Tue, 04/17/2007 - 11:40

Hi,

There is not much to add because to the CM topology doesn't matter, you are just adding a device. Many people implent telephony over the internet this way and it works fine.

Voice encryption (SRTP) is supported from CM 4.1 onward.

Hope this helps, if so please rate post!

pgcristovam Thu, 04/19/2007 - 09:58

Hi

The telephony over the internet (cisco solution) works fine with SCCP too or just SIP?

I can add gateways (router) over internet using MGCP? For example, the phone over adsl link are registered in CCM (without NAT), ok? But and then i need to use the PSTN or to create conference, how it works?

Actions

This Discussion