cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
881
Views
0
Helpful
3
Replies

implementation telephony cross an ASA

arturo.guzman
Level 1
Level 1

Hi, i have a question

I have to implement a telepnony , but i have diferent networks divided by ASAs

The CUCM are in one DCLAN (inside, in ASA DC Lan) and the telephones are at (inside, in ASA Lan) LAN.

In The first instance i ll configure it with identical nat and i will not use security encription.

But when this works i will configure secure confrences.

The question is , is mandatory to use the asa pone proxy? Because my asa not have licencing proxy.

Thans

Greethings

Sent from Cisco Technical Support iPad App

2 Accepted Solutions

Accepted Solutions

sean_evershed
Level 7
Level 7

Hi,

The phone proxy feature elimiates the need to build a VPN tunnel for voice traffic. It is not mandatory to use this feature.

According to the link below

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd8073cbbf.html

"Phone proxy delivers secure remote access without  the need for a remote-access VPN device. It does so by terminating SCCP  and SIP Cisco Unified IP Phone endpoints encrypted with TLS or SRTP. "

From the ASA configuration guide:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1144845

"The Cisco Phone Proxy on the adaptive security  appliance bridges IP telephony between the corporate IP telephony  network and the Internet in a secure manner by forcing data from remote  phones on an untrusted network to be encrypted. "

Don't forget to rate all posts that are helpful.

View solution in original post

paolo bevilacqua
Hall of Fame
Hall of Fame

Phone proxy / SSL VPN has too many requisites, and is  very complicated to configure, both on CM/CME, ASA, and the phone itself.

I recommedn a regular VPN instead.

View solution in original post

3 Replies 3

sean_evershed
Level 7
Level 7

Hi,

The phone proxy feature elimiates the need to build a VPN tunnel for voice traffic. It is not mandatory to use this feature.

According to the link below

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd8073cbbf.html

"Phone proxy delivers secure remote access without  the need for a remote-access VPN device. It does so by terminating SCCP  and SIP Cisco Unified IP Phone endpoints encrypted with TLS or SRTP. "

From the ASA configuration guide:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1144845

"The Cisco Phone Proxy on the adaptive security  appliance bridges IP telephony between the corporate IP telephony  network and the Internet in a secure manner by forcing data from remote  phones on an untrusted network to be encrypted. "

Don't forget to rate all posts that are helpful.

paolo bevilacqua
Hall of Fame
Hall of Fame

Phone proxy / SSL VPN has too many requisites, and is  very complicated to configure, both on CM/CME, ASA, and the phone itself.

I recommedn a regular VPN instead.

Hi,

The Phone Proxy features are useful when you are using different subnet in your network Or Specially Useful or recomended when you would like to use your phone over the internet .

Directly plugged the lan cable (internet) in the phone & Your Ip phone can communicate with your internal phones or internet phones .

Specially Recommended for the internet connectivity .

I also Implemented  ASA UC PROXY Setup For My Customer .

Thanks & Regards

Vishal Thakur

9871854195

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: