×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

implementation telephony cross an ASA

Answered Question
Mar 31st, 2012
User Badges:
  • Bronze, 100 points or more

Hi, i have a question


I have to implement a telepnony , but i have diferent networks divided by ASAs


The CUCM are in one DCLAN (inside, in ASA DC Lan) and the telephones are at (inside, in ASA Lan) LAN.


In The first instance i ll configure it with identical nat and i will not use security encription.


But when this works i will configure secure confrences.


The question is , is mandatory to use the asa pone proxy? Because my asa not have licencing proxy.


Thans


Greethings


Sent from Cisco Technical Support iPad App

Correct Answer by paolo bevilacqua about 5 years 4 months ago

Phone proxy / SSL VPN has too many requisites, and is  very complicated to configure, both on CM/CME, ASA, and the phone itself.

I recommedn a regular VPN instead.

Correct Answer by sean_evershed about 5 years 4 months ago

Hi,


The phone proxy feature elimiates the need to build a VPN tunnel for voice traffic. It is not mandatory to use this feature.


According to the link below


http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd8073cbbf.html


"Phone proxy delivers secure remote access without  the need for a remote-access VPN device. It does so by terminating SCCP  and SIP Cisco Unified IP Phone endpoints encrypted with TLS or SRTP. "


From the ASA configuration guide:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1144845


"The Cisco Phone Proxy on the adaptive security  appliance bridges IP telephony between the corporate IP telephony  network and the Internet in a secure manner by forcing data from remote  phones on an untrusted network to be encrypted. "


Don't forget to rate all posts that are helpful.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Correct Answer
sean_evershed Sun, 04/01/2012 - 00:50
User Badges:
  • Gold, 750 points or more

Hi,


The phone proxy feature elimiates the need to build a VPN tunnel for voice traffic. It is not mandatory to use this feature.


According to the link below


http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd8073cbbf.html


"Phone proxy delivers secure remote access without  the need for a remote-access VPN device. It does so by terminating SCCP  and SIP Cisco Unified IP Phone endpoints encrypted with TLS or SRTP. "


From the ASA configuration guide:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1144845


"The Cisco Phone Proxy on the adaptive security  appliance bridges IP telephony between the corporate IP telephony  network and the Internet in a secure manner by forcing data from remote  phones on an untrusted network to be encrypted. "


Don't forget to rate all posts that are helpful.

Correct Answer
paolo bevilacqua Sun, 04/01/2012 - 02:33
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    Founding Member

Phone proxy / SSL VPN has too many requisites, and is  very complicated to configure, both on CM/CME, ASA, and the phone itself.

I recommedn a regular VPN instead.

vishal4444 Mon, 06/04/2012 - 01:32
User Badges:

Hi,


The Phone Proxy features are useful when you are using different subnet in your network Or Specially Useful or recomended when you would like to use your phone over the internet .


Directly plugged the lan cable (internet) in the phone & Your Ip phone can communicate with your internal phones or internet phones .


Specially Recommended for the internet connectivity .


I also Implemented  ASA UC PROXY Setup For My Customer .


Thanks & Regards


Vishal Thakur

9871854195

Actions

This Discussion