21-11
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter 21 Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
Configuring Cisco Intercompany Media Engine Proxy
This section contains the following topics:
• Task Flow for Configuring Cisco Intercompany Media Engine, page 21-11
• Configuring NAT for Cisco Intercompany Media Engine Proxy, page 21-12
• Configuring PAT for the Cisco UCM Server, page 21-14
• Creating ACLs for Cisco Intercompany Media Engine Proxy, page 21-16
• Creating the Media Termination Instance, page 21-17
• Creating the Cisco Intercompany Media Engine Proxy, page 21-18
• Creating Trustpoints and Generating Certificates, page 21-21
• Creating the TLS Proxy, page 21-24
• Enabling SIP Inspection for the Cisco Intercompany Media Engine Proxy, page 21-25
• (Optional) Configuring TLS within the Local Enterprise, page 21-27
• (Optional) Configuring Off Path Signaling, page 21-30
Task Flow for Configuring Cisco Intercompany Media Engine
Figure 21-6 provides an example for a basic deployment of the Cisco Intercompany Media Engine. The
following tasks include command line examples based on Figure 21-6.
Figure 21-6 Example for Basic (in-line) Deployment Tasks
Note Step 1 through Step 8 apply to both basic (in-line) and off path deployments and Step 9 applies only to
off path deployment.
To configure a Cisco Intercompany Media Engine for a basic deployment, perform the following tasks.
Step 1 Configure static NAT for Cisco UCM. See Configuring NAT for Cisco Intercompany Media Engine
Proxy, page 21-12.
Internet
Remote Enterprise
Local
Cisco UCMs
Local ASA
Corporate
Network
Remote
Cisco UCM
Remote ASA
Local Enterprise
IP
IP
IP
192.168.10.30
192.168.10.31
192.168.10.12
ASA inside
interface
192.168.10.1
Inside media
termination
192.168.10.3
Outside media termination
209.165.200.226
Outside Cisco UMC
209.165.200.228
TLS
TCP
248764
Local
UC-IME
Server
Remote
UC-IME
Server
M
M
UC-IME
Bootstrap
Server
ASA outside interface
209.165.200.225
M