Cisco Systems ASA 5525-X Network Router User Manual


  Open as PDF
of 2086
 
56-11
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 56 Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
This section contains the following topics:
Task Flow for Configuring Cisco Intercompany Media Engine, page 56-11
Configuring NAT for Cisco Intercompany Media Engine Proxy, page 56-12
Configuring PAT for the Cisco UCM Server, page 56-14
Creating Access Lists for Cisco Intercompany Media Engine Proxy, page 56-16
Creating the Media Termination Instance, page 56-17
Creating the Cisco Intercompany Media Engine Proxy, page 56-18
Creating Trustpoints and Generating Certificates, page 56-21
Creating the TLS Proxy, page 56-24
Enabling SIP Inspection for the Cisco Intercompany Media Engine Proxy, page 56-25
(Optional) Configuring TLS within the Local Enterprise, page 56-27
(Optional) Configuring Off Path Signaling, page 56-30
Task Flow for Configuring Cisco Intercompany Media Engine
Figure 56-6 provides an example for a basic deployment of the Cisco Intercompany Media Engine. The
following tasks include command line examples based on Figure 56-6.
Figure 56-6 Example for Basic (in-line) Deployment Tasks
Note Step 1 through Step 8 apply to both basic (in-line) and off path deployments and Step 9 applies only to
off path deployment.
To configure a Cisco Intercompany Media Engine for a basic deployment, perform the following tasks.
Step 1 Configure static NAT for Cisco UCM. See Configuring NAT for Cisco Intercompany Media Engine
Proxy, page 56-12.
Internet
Remote Enterprise
Local
Cisco UCMs
Local ASA
Corporate
Network
Remote
Cisco UCM
Remote ASA
Local Enterprise
IP
IP
IP
192.168.10.30
192.168.10.31
192.168.10.12
ASA inside
interface
192.168.10.1
Inside media
termination
192.168.10.3
Outside media termination
209.165.200.226
Outside Cisco UMC
209.165.200.228
TLS
TCP
248764
Local
UC-IME
Server
Remote
UC-IME
Server
M
M
UC-IME
Bootstrap
Server
ASA outside interface
209.165.200.225
M