Cisco Systems ASA 5580 Network Router User Manual


 
20-11
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 20 Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
Note Step 1 through Step 8 apply to both basic (in-line) and off path deployments and Step 9 applies only to
off path deployment.
To configure a Cisco Intercompany Media Engine for a basic deployment, perform the following tasks.
Step 1 Configure static NAT for Cisco UCM. See Configuring NAT for Cisco Intercompany Media Engine
Proxy, page 20-11.
Or
Configure PAT for the UCM server. See Configuring PAT for the Cisco UCM Server, page 20-13.
Step 2 Create ACLs for Cisco Intercompany Media Engine Proxy. See Creating ACLs for Cisco Intercompany
Media Engine Proxy, page 20-15.
Step 3 Create the media termination address instance for Cisco Intercompany Media Engine Proxy. See
Creating the Media Termination Instance, page 20-16.
Step 4 Create the Cisco Intercompany Media Engine Proxy. See Creating the Cisco Intercompany Media
Engine Proxy, page 20-17.
Step 5 Create trustpoints and generate certificates for the Cisco Intercompany Media Engine Proxy. See
Creating Trustpoints and Generating Certificates, page 20-20.
Step 6 Create the TLS proxy. See Creating the TLS Proxy, page 20-23.
Step 7 Configure SIP inspection for the Cisco Intercompany Media Engine Proxy. See Enabling SIP Inspection
for the Cisco Intercompany Media Engine Proxy, page 20-24.
Step 8 (Optional) Configure TLS within the enterprise. See (Optional) Configuring TLS within the Local
Enterprise, page 20-26.
Step 9 (Optional) Configure off path signaling. See (Optional) Configuring Off Path Signaling, page 20-29.
Note You only perform Step 9 when you are configuring the Cisco Intercompany Media Engine Proxy
in an off path deployment.
Configuring NAT for Cisco Intercompany Media Engine Proxy
To configure auto NAT, you first configure an object; then use the nat command in the object
configuration mode.
The example command lines in this task are based on a basic (in-line) deployment. See Figure 20-5 on
page 20-10 for an illustration explaining the example command lines in this task.
Alternatively, you can configure PAT for the Cisco Intercompany Media Engine Proxy. See Configuring
PAT for the Cisco UCM Server, page 20-13.