ASA 5505 Phone Proxy NAT

[davidjani]

Hi this is a new installation, we are configuring the ASA with Phone

Proxy features.

We already used the old Phone Proxy appliance.

The Phone Proxy feature is working, but it looks like it is proxying only the UDP

streaming, while it is not proxying the TFTP and the SCCP protocol. The external phone is

registering itself with its own external IP address, while with the previous appliance the

external phones were registering with the Phone proxy internal IP address.

This is now causing an issue because the ASA will be used only for the Proxy features,

while the customer already have his firewall infrastructure for the Internet access. So

any Internet IP address is routed back through the main firewall instead of through the

ASA.

We have used the following document for the configuration

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/unifi

ed_comm.html#wp1144829

we are wondering if there is some other document that shows any other type of

configuration that can fix this issue.

[redrobish]

perhaps a "debug phone-proxy tftp" would help you troubleshoot it.

try this link:

http://supportwiki.cisco.com/wiki/index.php/ASA_Phone_Proxy_sample_configuration

for common troubleshooting:

http://supportwiki.cisco.com/wiki/index.php/ASA_Phone_Proxy_Troubleshooting_and_Common_Problems

note: you might need cisco login to access these links.

hope that helps!

rgds,

redrobish

[davidjani]

Hi,

Thanks for the response but Cisco have informed us that they have changed the way it works and what we are trying to do is no longer possible with the new style proxy. :(

Thanks Anyway.