[cisco-voip] ASA 8.0(4) Phone Proxy w/ CM 4.1(3)

Scott Voll svoll.voip at gmail.com
Wed Sep 24 15:07:53 EDT 2008


Thanks for the info.  we are using the phone proxy appliance and can do both
in Unsecure mode.  Guess it's not time to upgrade to the ASA Phone Proxy.
;-)

Scott

On Wed, Sep 24, 2008 at 6:34 AM, c3voip <c3voip at nc.rr.com> wrote:

> It's great you can leave your cluster in non-secure mode, and have the ASA
> phone proxy do secure mode over the Internet.
>
> There is a way to use it in a non-secure mode for VLAN transversal and that
> is the only way that IP Communicator is supported.
>
> -C
>
> -----Original Message-----
> From: Lelio Fulgenzi [mailto:lelio at uoguelph.ca]
> Sent: Wednesday, September 24, 2008 8:58 AM
> To: c3voip; 'Dane'; cisco-voip at puck.nether.net
> Subject: Re: [cisco-voip] ASA 8.0(4) Phone Proxy w/ CM 4.1(3)
>
> is it possible to deploy this without the use of certifcates, i.e. in
> non-secure mode?
>
>
>
> ----------------------------------------------------------------------------
> ----
> Lelio Fulgenzi, B.A.
> Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1
> (519) 824-4120 x56354 (519) 767-1060 FAX (JNHN)
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> "Bad grammar makes me [sic]" - Tshirt
>
> ----- Original Message -----
> From: "c3voip" <c3voip at nc.rr.com>
> To: "'Dane'" <dane at pktloss.net>; <cisco-voip at puck.nether.net>
> Sent: Wednesday, September 24, 2008 8:31 AM
> Subject: Re: [cisco-voip] ASA 8.0(4) Phone Proxy w/ CM 4.1(3)
>
>
> > Hi Dane,
> >
> > I successfully got it working with 4.1(3).  It is pretty straightforward.
> > Just make sure that you import the certificates from your CallManager to
> > the
> > ASA.  Another gotcha was that you have to generate and install LSC's
> > (Locally Significant Certificates) for any 7940/7960 phones you want to
> > use
> > with Phone Proxy, so without opening port 2000 you cannot remotely
> > provision
> > one of these phones.
> >
> > I also found out that since IP Communicator doesn't support encryption
> > until
> > CUCM 7.0.1 that Phone Proxy cannot support hard phones and IP
> Communicator
> > at the same time.
> >
> > Let me know if you have any questions.
> >
> > -C
> >
> > -----Original Message-----
> > From: cisco-voip-bounces at puck.nether.net
> > [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Dane
> > Sent: Tuesday, September 23, 2008 4:55 PM
> > To: cisco-voip at puck.nether.net
> > Subject: [cisco-voip] ASA 8.0(4) Phone Proxy w/ CM 4.1(3)
> >
> > I know there were some previous discussions on the list in the past
> > (before 8.0(4)) was released regarding the phone proxy features and
> > what was supported.
> >
> > According to what I am reading it appears that CM 4.x is supported.
> >
> >
>
> http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/unifi
> > ed_comm.html#wp1144923
> >
> > I am running 8.0(4) now on the ASA and notice we have some default
> > basic license for 2 sessions, which is enough to just get this tested
> > as a proof of concept.
> >
> > Just wondering who out there is in the same boat running 4.1(3) and
> > has the phone proxy feature of 8.0(4) working?  I have not begun
> > trying to get things to work yet, just doing my reading up on things
> > now and it would be nice to bounce questions off of someone with some
> > experience in this if and when they come up.
> >
> > Also interested in any caveats or issues (other than licensing) that
> > might have halted your testing or implementation.
> >
> > Regards,
> > Dane
> > _______________________________________________
> > cisco-voip mailing list
> > cisco-voip at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-voip
> >
> > _______________________________________________
> > cisco-voip mailing list
> > cisco-voip at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-voip
> >
>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20080924/ae7c3fa9/attachment-0001.html>


More information about the cisco-voip mailing list