03-02-2010 10:58 AM - edited 03-21-2019 02:15 AM
we have an asa 5520 with tunnels to remotes sites asa5505's. we are thinking about deploying uc520's to one of these sites due to their comprehensive features.
Is it possible to terminate a tunnel into the UC520?
03-02-2010 11:33 AM
Yes, you can do a VPN between a ASA 5505 and a UC520. However, you must use crypto maps for any VPN between a IOS-based endpoint and a non-IOS-based endpoint. Since the UC520 is considered a IOS-based endpoint and the ASA 5505 is a non-IOS-based endpoint, you must use a crypto map to configure the VPN between the ASA 5505 and the UC520. Remember that the UC520 can only handle 10 VPN connections.
An example of a VPN between an ASA and a IOS-based router is shown here:
http://www.cisco.com/en/US/products/ps5855/products_configuration_example09186a0080a9a7a3.shtml
Remember that the UC520 side of this VPN must be configured in CLI, as SDM cannot be used on the UC520, and CCA does not have the ability to provision a site-to-site VPN (except to other UC500 sites managed by the Multisite Manager). However, you can use ASDM to configure the VPN on the ASA side.
03-02-2010 11:39 AM
thanks. a bunch!!! one last question...what about allowing the site with uc520 to tie into our main site which has CUCM 7 for intra office dialing?
03-07-2010 07:24 AM
This scenario, although it might work, is not supported by Cisco.
Marcos
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide