Filter
Top Products
52-18
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 52 Configuring the Cisco Phone Proxy
Configuring the Phone Proxy
Creating the Phone Proxy Instance
Create the phone proxy instance. To have a fully functional phone proxy, you must also complete
additional tasks, such as creating the MTA and enabling SIP and SCCP (Skinny) inspection. See Task
Flow for Configuring the Phone Proxy, page 52-14 for the complete list of tasks.
Prerequisites
You must have already created the CTL file and TLS proxy instance for the phone proxy.
See Creating the CTL File, page 52-14 and Adding a TLS Proxy Instance, page 53-8.
Note This feature is not supported for the Adaptive Security Appliance version 8.1.2.
Use the Configure Phone Proxy pane to add a Phone Proxy.
This pane is available from the Configuration > Firewall > Unified Communications > Phone Proxy
pane.
Step 1 Open the Configuration > Firewall > Unified Communications > Phone Proxy pane.
Step 2 Check the Enable Phone Proxy check box to enable the feature.
Step 3 Check the Apply MTA instance to Phone Proxy check box to add the media termination address to the
Phone Proxy instance. You must have a media termination address instance configured. The configured
address is added to the Phone Proxy instance.
Note To configure the media termination address, click the Configure MTA button. The Media
Termination Address dialog box appears. Once you click the Add MTA instance to Phone Proxy
check box, the media termination address instance cannot be modified and the button changes to
View MTA Configuration. To change the media termination address, uncheck the Add MTA
instance to Phone Proxy check box.
Step 4 If necessary, add a TFTP server for the Phone Proxy. To add a new TFTP server for the Phone Proxy,
click Add. The Add TFTP Server dialog box opens. See Adding or Editing the TFTP Server for a Phone
Proxy, page 52-20.
Note The TFTP server must reside on the same interface as the Cisco Unified Call Manager. Additionally, If
NAT is configured for the TFTP server, the NAT configuration must be configured prior to configuring
the specifying the TFTP server while creating the Phone Proxy instance.
Step 5 Specify the CTL File to use for the Phone Proxy by doing one of the following:
• To use an existing CTL File, check the Use the Certificate Trust List File generated by the CTL
instance check box.
• To create a new CTL file for the Phone Proxy, click the link Generate Certificate Trust List File. The
Create a Certificate Trust List (CTL) File pane opens. See “Creating the CTL File” section on
page 52-14.
Step 6 To specify the security mode of the CUCM cluster, click one of the following options in the CUCM
Cluster Mode field: