Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

7942 Phones connecting to a CME router via SSL VPN wont register

Hi all,

I am having a problem in registering our 7942 phones to our CME router via SSL VPN. The IP phones can get the IP address from the SSL VPN (but lasts only for a couple of seconds) but it seems that the SSL VPN connection is not stable that it keeps on connecting and disconnecting. Below is the configurations I used to configure SSL VPN.

webvpn gateway sslvpn_gw

ssl trustpoint cme_cert

ip address X.X.X.X port 443

ssl encryption 3des-sha1 aes-sha1

http-redirect port 80

inservice

!

webvpn context sslvpn_context

ssl authenticate verify all

!

!

policy group SSLVPNphone

  functions svc-enabled

  svc address-pool "SSL-POOL" netmask 255.255.255.0

  svc default-domain "domain.com"

default-group-policy SSLVPNphone

aaa authentication list phoneVPN

gateway sslvpn_gw

ssl encryption 3des-sha1 aes-sha1

inservice

voice service voip

vpn-group 1

   vpn-gateway 1 https://X.X.X.X/SSLVPNphone

   vpn-trustpoint 1 trustpoint cme_cert leaf

  vpn-profile 1

    host-id-check disable

ephone 2

vpn-group 1

vpn-profile 1

exit

!

telephony-service

create cnf

  • IP Telephony
196
Views
0
Helpful
0
Replies