IPsec tunnel to UC520

Unanswered Question
Mar 2nd, 2010

we have an asa 5520 with tunnels to remotes sites asa5505's. we are thinking about deploying uc520's to one of these sites due to their comprehensive features.

Is it possible to terminate a tunnel into the UC520?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
John Platts Tue, 03/02/2010 - 11:33

Yes, you can do a VPN between a ASA 5505 and a UC520. However, you must use crypto maps for any VPN between a IOS-based endpoint and a non-IOS-based endpoint. Since the UC520 is considered a IOS-based endpoint and the ASA 5505 is a non-IOS-based endpoint, you must use a crypto map to configure the VPN between the ASA 5505 and the UC520. Remember that the UC520 can only handle 10 VPN connections.

An example of a VPN between an ASA and a IOS-based router is shown here:


Remember that the UC520 side of this VPN must be configured in CLI, as SDM cannot be used on the UC520, and CCA does not have the ability to provision a site-to-site VPN (except to other UC500 sites managed by the Multisite Manager). However, you can use ASDM to configure the VPN on the ASA side.

jfloreszak12 Tue, 03/02/2010 - 11:39

thanks. a bunch!!! one last question...what about allowing the site with uc520 to tie into our main site which has CUCM 7 for intra office dialing?


This Discussion