SPA525G_SSL_Remote_TEL_19.pdf

Document

Mar 16, 2010 9:05 AM
Mar 16th, 2010
  /* Style Definitions */   table.MsoNormalTable          {mso-style-name:"Table Normal";          mso-tstyle-rowband-size:0;          mso-tstyle-colband-size:0;          mso-style-noshow:yes;          mso-style-parent:"";          mso-padding-alt:0in 5.4pt 0in 5.4pt;          mso-para-margin:0in;          mso-para-margin-bottom:.0001pt;          mso-pagination:widow-orphan;          font-size:10.0pt;          font-family:"Times New Roman";          mso-ansi-language:#0400;          mso-fareast-language:#0400;          mso-bidi-language:#0400;}

Updated with CCA 3.0.1

----

The SPA525G phone can be established as a Remote Teleworker phone behind any router with a public internet connection.  CCA 2.2.2 introduced the wizard to make this easier to deploy.  This technical enablement lab walks you through it.  You must configure the SPA525G at the serving UC 500 before you send it to the remote location.  Once you are configured and the phone is deployed, you can continue to administer it using CCA at the local serving UC500.

Average Rating: 0 (0 ratings)

Comments

CSCO11776120 Fri, 03/11/2011 - 09:41

We have posted a question with Cisco Netherlands but.. I might as well post it here as well. We see a lot of customers who implement the UC500 as a device in the netwerk instead of the central WAN/LAN routing device. This means that the UC500 is connected to the network via FA0/1/8 "Expansion" port. Is it possible to provide a solution so that UC500, which is only configured with an internal IP, to work with AnyConnect SSL? Ofcourse the firewall/router will forward port 443 to the UC500 internal IP.

CSCO11776120 Tue, 03/15/2011 - 01:03 (reply to CSCO11776120)

To comment on myself: It is indeed possible to configure the scenario I posted, we got it working. Although CCA sadly does not allow the configuration.

mshoer Sat, 09/17/2011 - 17:19 (reply to CSCO11776120)

Bryan, how did you get this working?  We are tying to do the same, with a UC540 with only an internal IP, no WAN connection on the UC540 and an ASA5505 as the edge firewall.  If you have any pointers, I'd appreciate it.  Thanks.

CSCO11776120 Mon, 09/19/2011 - 05:14

Hi,

You can configure this via CCA by entering the internal IP address. You need to forward port 500, 4500 and 10000 on the ASA5505 to the internal UC540 IP. Our UC540 is connected via the 'expansion' port. I think the newer CCA will not complain that you do not have a static IP on the WAN interface.

I have a CLI configuration if you are experienced using CLI.

Bryan.

alindzon Sat, 02/15/2014 - 21:16

I followed the instructions, and when I place the phone outside the network it connects to its new network, it gets an IP, it establishes the VPN tunnel, but then it gets stuck trying to download the XML file, it cycles between the default and its file indefinitely.  I am currently testing with the outside network on 192.168.0.x and the UC520 using 192.168.0.10 as its public IP.  The internal network for the UC520 data is 192.168.10.x and for telephony is the normal default of 10.1.1.x

What am I missing?

Actions

Login or Register to take actions

This Document

Posted March 16, 2010 at 9:05 AM
Stats:
Comments:6 Avg. Rating:0
Views:5982 Contributors:4
Shares:0

Related Content