Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

implementation telephony cross an ASA

Hi, i have a question

I have to implement a telepnony , but i have diferent networks divided by ASAs

The CUCM are in one DCLAN (inside, in ASA DC Lan) and the telephones are at (inside, in ASA Lan) LAN.

In The first instance i ll configure it with identical nat and i will not use security encription.

But when this works i will configure secure confrences.

The question is , is mandatory to use the asa pone proxy? Because my asa not have licencing proxy.

Thans

Greethings

Sent from Cisco Technical Support iPad App

2 ACCEPTED SOLUTIONS

Accepted Solutions

implementation telephony cross an ASA

Hi,

The phone proxy feature elimiates the need to build a VPN tunnel for voice traffic. It is not mandatory to use this feature.

According to the link below

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd8073cbbf.html

"Phone proxy delivers secure remote access without  the need for a remote-access VPN device. It does so by terminating SCCP  and SIP Cisco Unified IP Phone endpoints encrypted with TLS or SRTP. "

From the ASA configuration guide:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1144845

"The Cisco Phone Proxy on the adaptive security  appliance bridges IP telephony between the corporate IP telephony  network and the Internet in a secure manner by forcing data from remote  phones on an untrusted network to be encrypted. "

Don't forget to rate all posts that are helpful.

Hall of Fame Super Gold

implementation telephony cross an ASA

Phone proxy / SSL VPN has too many requisites, and is  very complicated to configure, both on CM/CME, ASA, and the phone itself.

I recommedn a regular VPN instead.

3 REPLIES

implementation telephony cross an ASA

Hi,

The phone proxy feature elimiates the need to build a VPN tunnel for voice traffic. It is not mandatory to use this feature.

According to the link below

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd8073cbbf.html

"Phone proxy delivers secure remote access without  the need for a remote-access VPN device. It does so by terminating SCCP  and SIP Cisco Unified IP Phone endpoints encrypted with TLS or SRTP. "

From the ASA configuration guide:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1144845

"The Cisco Phone Proxy on the adaptive security  appliance bridges IP telephony between the corporate IP telephony  network and the Internet in a secure manner by forcing data from remote  phones on an untrusted network to be encrypted. "

Don't forget to rate all posts that are helpful.

Hall of Fame Super Gold

implementation telephony cross an ASA

Phone proxy / SSL VPN has too many requisites, and is  very complicated to configure, both on CM/CME, ASA, and the phone itself.

I recommedn a regular VPN instead.

Community Member

implementation telephony cross an ASA

Hi,

The Phone Proxy features are useful when you are using different subnet in your network Or Specially Useful or recomended when you would like to use your phone over the internet .

Directly plugged the lan cable (internet) in the phone & Your Ip phone can communicate with your internal phones or internet phones .

Specially Recommended for the internet connectivity .

I also Implemented  ASA UC PROXY Setup For My Customer .

Thanks & Regards

Vishal Thakur

9871854195

214
Views
0
Helpful
3
Replies
CreatePlease to create content